Edit tour

Windows Analysis Report
http://le100.net

Overview

General Information

Sample URL:	http://le100.net
Analysis ID:	1469255
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Detected non-DNS traffic on DNS port

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4712 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6000 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=2004,i,1048797239495983791,16973223025167226875,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3692 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://le100.net" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix

Avira URL Cloud: Label: malware

Phishing

AI detected phishing page

Source: http://ifdnzact.com

LLM: Score: 8 brands: AVG, Avast Reasons: The URL 'http://ifdnzact.com' does not match the legitimate domains for AVG (avg.com) or Avast (avast.com). The site prominently features links to 'SEE IT' which could be used to mislead users into clicking on potentially harmful links. The domain name is suspicious and does not correspond to the legitimate brand names. The use of social engineering techniques, such as offering free antivirus software, is evident. There is no prominent login form or captcha, but the overall setup and domain name strongly suggest a phishing attempt. DOM: 6.10.pages.csv

Source: http://le100.net/	HTTP Parser: No favicon
Source: http://ifdnzact.com/?dn=le100.net&pid=9PO755G95	HTTP Parser: No favicon
Source: http://ifdnzact.com/?dn=le100.net&pid=9PO755G95	HTTP Parser: No favicon
Source: http://ifdnzact.com/?dn=le100.net&pid=9PO755G95	HTTP Parser: No favicon
Source: http://ifdnzact.com/?dn=le100.net&pid=9PO755G95	HTTP Parser: No favicon
Source: https://www.mydomaincontact.com/index.php?domain_name=le100.net	HTTP Parser: No favicon
Source: https://www.mydomaincontact.com/index.php?domain_name=le100.net	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfbieIZAAAAAP0ROP-R-UOaui3c-7SDJ_GhtUsh&co=aHR0cHM6Ly93d3cubXlkb21haW5jb250YWN0LmNvbTo0NDM.&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=6bw44qgzuywj	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&k=6LfbieIZAAAAAP0ROP-R-UOaui3c-7SDJ_GhtUsh	HTTP Parser: No favicon
Source: http://ifdnzact.com/Spam_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%2FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%2BD6EslT4YXZEgi5MQZoS4%2BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%2FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%2BF%2FqfFDeim2hVuLdV2hx9V%2F15hYqnNxwr7w%2FxJkFs&yep=kYWX2UB9hpPluHNh59n0TG5bw0%2FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%2FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%2FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%2Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%2B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%2FqYu%2FBmO%2BefvXO46i%2BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%2BZbCkucnl%2BKaGVQ4CSuga7KRLSemy%2FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%2F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%2FCiWxSUGpEEgdBffigSWf9bQ%2BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%2BRbYTMJnnWjleatxujX%2BIiC4edOKDRJ%2FnR1G4wl1D1zw1q7mWlz%2F%2FnAQ9gK...	HTTP Parser: No favicon
Source: http://ifdnzact.com/Spam_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%2FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%2BD6EslT4YXZEgi5MQZoS4%2BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%2FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%2BF%2FqfFDeim2hVuLdV2hx9V%2F15hYqnNxwr7w%2FxJkFs&yep=kYWX2UB9hpPluHNh59n0TG5bw0%2FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%2FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%2FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%2Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%2B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%2FqYu%2FBmO%2BefvXO46i%2BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%2BZbCkucnl%2BKaGVQ4CSuga7KRLSemy%2FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%2F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%2FCiWxSUGpEEgdBffigSWf9bQ%2BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%2BRbYTMJnnWjleatxujX%2BIiC4edOKDRJ%2FnR1G4wl1D1zw1q7mWlz%2F%2FnAQ9gK...	HTTP Parser: No favicon
Source: http://ifdnzact.com/Malware_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%2FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%2BD6EslT4YXZEgi5MQZoS4%2BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%2FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%2BF%2FqfFDeim2hVuLdV2hx9V%2F15hYqnNxwr7w%2FxJkFs&yep=kYWX2UB9hpPluHNh59n0TG5bw0%2FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%2FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%2FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%2Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%2B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%2FqYu%2FBmO%2BefvXO46i%2BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%2BZbCkucnl%2BKaGVQ4CSuga7KRLSemy%2FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%2F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%2FCiWxSUGpEEgdBffigSWf9bQ%2BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%2BRbYTMJnnWjleatxujX%2BIiC4edOKDRJ%2FnR1G4wl1D1zw1q7mWlz%2F%2FnAQ...	HTTP Parser: No favicon
Source: http://ifdnzact.com/Pop_Up_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%2FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%2BD6EslT4YXZEgi5MQZoS4%2BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%2FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%2BF%2FqfFDeim2hVuLdV2hx9V%2F15hYqnNxwr7w%2FxJkFs&yep=kYWX2UB9hpPluHNh59n0TG5bw0%2FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%2FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%2FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%2Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%2B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%2FqYu%2FBmO%2BefvXO46i%2BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%2BZbCkucnl%2BKaGVQ4CSuga7KRLSemy%2FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%2F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%2FCiWxSUGpEEgdBffigSWf9bQ%2BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%2BRbYTMJnnWjleatxujX%2BIiC4edOKDRJ%2FnR1G4wl1D1zw1q7mWlz%2F%2FnAQ9...	HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49746 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49724 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.5:61327 -> 162.159.36.2:53

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49746 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /delivery/js/cmp_en.min.js HTTP/1.1Host: cdn.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ifdnzact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dle100.net%26pid%3D9PO755G95&&l=en&o=1720453999390 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ifdnzact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?__cmpcc=1&id=68884&o=1720454003&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dle100.net%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ifdnzact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?__cmpcc=2&id=68884&o=1720454004&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dle100.net%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ifdnzact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfMjY.js HTTP/1.1Host: cdn.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ifdnzact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.php?domain_name=le100.net HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/select2/select2.css HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mydomaincontact.com/index.php?domain_name=le100.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-2444609017588254eb9aa441d74694fe=1
Source: global traffic	HTTP traffic detected: GET /forms/style.css HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mydomaincontact.com/index.php?domain_name=le100.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-2444609017588254eb9aa441d74694fe=1
Source: global traffic	HTTP traffic detected: GET /scripts/jquery.js HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mydomaincontact.com/index.php?domain_name=le100.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-2444609017588254eb9aa441d74694fe=1
Source: global traffic	HTTP traffic detected: GET /scripts/select2/select2.min.js HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mydomaincontact.com/index.php?domain_name=le100.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-2444609017588254eb9aa441d74694fe=1
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?hl=en HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mydomaincontact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/script.js HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mydomaincontact.com/index.php?domain_name=le100.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-2444609017588254eb9aa441d74694fe=1
Source: global traffic	HTTP traffic detected: GET /forms/script-addon.js HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mydomaincontact.com/index.php?domain_name=le100.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-2444609017588254eb9aa441d74694fe=1
Source: global traffic	HTTP traffic detected: GET /images/trust.svg HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mydomaincontact.com/index.php?domain_name=le100.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-2444609017588254eb9aa441d74694fe=1
Source: global traffic	HTTP traffic detected: GET /scripts/select2/select2.png HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mydomaincontact.com/scripts/select2/select2.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-2444609017588254eb9aa441d74694fe=1
Source: global traffic	HTTP traffic detected: GET /images/trust.svg HTTP/1.1Host: www.mydomaincontact.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-2444609017588254eb9aa441d74694fe=1
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfbieIZAAAAAP0ROP-R-UOaui3c-7SDJ_GhtUsh&co=aHR0cHM6Ly93d3cubXlkb21haW5jb250YWN0LmNvbTo0NDM.&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=6bw44qgzuywj HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mydomaincontact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/select2/select2.png HTTP/1.1Host: www.mydomaincontact.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-2444609017588254eb9aa441d74694fe=1
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfbieIZAAAAAP0ROP-R-UOaui3c-7SDJ_GhtUsh&co=aHR0cHM6Ly93d3cubXlkb21haW5jb250YWN0LmNvbTo0NDM.&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=6bw44qgzuywjAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/afyAhS2Qsep4R8kB-t327Ct0yEitujmPfyHorrAGcXw.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfbieIZAAAAAP0ROP-R-UOaui3c-7SDJ_GhtUsh&co=aHR0cHM6Ly93d3cubXlkb21haW5jb250YWN0LmNvbTo0NDM.&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=6bw44qgzuywjAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&k=6LfbieIZAAAAAP0ROP-R-UOaui3c-7SDJ_GhtUsh HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.mydomaincontact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.mydomaincontact.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mydomaincontact.com/index.php?domain_name=le100.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pct-2444609017588254eb9aa441d74694fe=1
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dle100.net%26pid%3D9PO755G95&&l=en&o=1720454033044 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ifdnzact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/js/cmp_en.min.js HTTP/1.1Host: cdn.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ifdnzact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=425342-425342If-Range: "69737-61c5ef0ef92c0"
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?__cmpcc=1&id=68884&o=1720454035&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dle100.net%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ifdnzact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/js/cmp_en.min.js HTTP/1.1Host: cdn.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ifdnzact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=425342-431926If-Range: "69737-61c5ef0ef92c0"
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?__cmpcc=2&id=68884&o=1720454036&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dle100.net%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ifdnzact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2F&o=1720454035961&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ifdnzact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2F&o=1720454035961&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FSpam_Removal.cfm%3Fdomain%3Dle100.net%26fp%3DEzVFF1z5BNcjvM%252BM%252FOKCHBPjV4tK%252Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%252FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%252BD6EslT4YXZEgi5MQZoS4%252BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%252FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%252BF%252FqfFDeim2hVuLdV2hx9V%252F15hYqnNxwr7w%252FxJkFs%26yep%3DkYWX2UB9hpPluHNh59n0TG5bw0%252FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%252FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%252FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%252Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%252B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%252FqYu%252FBmO%252BefvXO46i%252BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%252BZbCkucnl%252BKaGVQ4CSuga7KRLSemy%252FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%252F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%252FCiWxSUGpEEgdBffigSWf9bQ%252BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%252BRbYTMJnnWjleatxujX%252BIiC4edOKDRJ%252FnR1G4wl1D1zw1q7mWlz%252F%252FnAQ9gKAY08BXIzyLlH48v3xyIw5TB6bHJNQMOLDDEDb5Vn77S96JwQqQ58V9YV3Zs2fQx0LpXi%252Fv3R2KtwFytIci4LYt%252BfLYqlKC%252FZw%252B%252BxXbfeWCD1n0%252BunmHv1QoTf%252Fp7BcNmC7DcfCienIs6Am8IwxZ872y4DiNhFM2SK1Q9eF1RdxIUHt6Km6G2w96DxX1ZU%252BNeA70x%252Bm4TMzA7oDST7GRHEURKQxQ7GU0X%252BT4hpg6YRtVfTDnslnqgYyxa8LvjhqfxnGCrDqp1vWtl%252F%252Fc9fLOHx8fGBmD7Uo7Gp2w9IKwB6t4iC81jYFMx7xV6DxL6vMlDarDP6FCNM2k561vom%252BbqEPC3OfD5eCbb0H9De8PXIaD6wU4xgzvPe%252B6B5knbXTuIIX2ozx66y0xP4nKFkVd91QdhcD%252BXEol%252F99%252FsQafCY7WUeN%252Bx6Hwulv0hhCI%252B5em7Yp%252BMJ%252FYKYvsq9d0GlCivuYqYS04L7SL%252BZTMxZZFdZG3tePDSjj9mL7MpGjQyev1bF7S58DLMYiV3Q2a5RBnSADaGeoWnw7YeXIi43VbqA6%252FzdJgHJ818%252B3e2Y3vbvAawlN7DkXi40YRs2hDrwUoOMqjwYHZYkrxjb1X5IIDg%252Bdne6mXH5A811F5oyaUovL6pl5HtJJWkeraD6o0KyEn%252BdGNOdOLtOiy7N39pIS0bqV0fgrbQrYWQR7K5uKBEoembXLwrInLJwprm3y0xKx8mG5WXstRuIyZk3O8%252Bnxbq6RajzTPe6eNfgpo1hfQ5oh5FFrEF%252BNojERDyxBu%252FaRkUitODbjEFQ2l1mWSfy19%252Fh5k0jOI85K2D6ytDApmEOihBDMJGfBgZ5t9gX2bvLHqKK0nbqzTVSSWbaKreNaYnWV6eCq98QpUCJdgzXSf4bui5n4WP9j5alhTpx2dmsU2bZoycPp%252B%252FaNoseGTxynF2x2Z4pIdzxHKeNnUQbcfsJ%252BwV3C2eGdlU%252BXCtVCXWA872QN0xrGrCHwoadWZv7Ej0F0CAVjEuU1ltCmpBzpr%252BM3urle0wmVKbbEdui3YiW4OyVaxaqksIoWU4ouvxCRY%253D%26gtnp%3D0%26gtpp%3D0%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DIJ5nQJGTrpCE11CZHx4nYrlGNK0IrtJ2pxxwJPNmewE%253D%26%26gtnp%3D0%26gtpp%3D0%26kt%3D246%26%26kbc%3D10191%26ki%3D26680690%26ktd%3D0%26kld%3D1063%26kp%3D1%26bd%3D-4%25231024%25231280%25231%25230&&l=en&o=1720454040907 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.
Source: global traffic	HTTP traffic detected: GET /delivery/js/cmp_en.min.js HTTP/1.1Host: cdn.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ifdnzact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?__cmpcc=1&id=68884&o=1720454043&h=http%3A%2F%2Fifdnzact.com%2FSpam_Removal.cfm%3Fdomain%3Dle100.net%26fp%3DEzVFF1z5BNcjvM%252BM%252FOKCHBPjV4tK%252Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%252FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%252BD6EslT4YXZEgi5MQZoS4%252BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%252FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%252BF%252FqfFDeim2hVuLdV2hx9V%252F15hYqnNxwr7w%252FxJkFs%26yep%3DkYWX2UB9hpPluHNh59n0TG5bw0%252FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%252FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%252FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%252Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%252B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%252FqYu%252FBmO%252BefvXO46i%252BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%252BZbCkucnl%252BKaGVQ4CSuga7KRLSemy%252FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%252F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%252FCiWxSUGpEEgdBffigSWf9bQ%252BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%252BRbYTMJnnWjleatxujX%252BIiC4edOKDRJ%252FnR1G4wl1D1zw1q7mWlz%252F%252FnAQ9gKAY08BXIzyLlH48v3xyIw5TB6bHJNQMOLDDEDb5Vn77S96JwQqQ58V9YV3Zs2fQx0LpXi%252Fv3R2KtwFytIci4LYt%252BfLYqlKC%252FZw%252B%252BxXbfeWCD1n0%252BunmHv1QoTf%252Fp7BcNmC7DcfCienIs6Am8IwxZ872y4DiNhFM2SK1Q9eF1RdxIUHt6Km6G2w96DxX1ZU%252BNeA70x%252Bm4TMzA7oDST7GRHEURKQxQ7GU0X%252BT4hpg6YRtVfTDnslnqgYyxa8LvjhqfxnGCrDqp1vWtl%252F%252Fc9fLOHx8fGBmD7Uo7Gp2w9IKwB6t4iC81jYFMx7xV6DxL6vMlDarDP6FCNM2k561vom%252BbqEPC3OfD5eCbb0H9De8PXIaD6wU4xgzvPe%252B6B5knbXTuIIX2ozx66y0xP4nKFkVd91QdhcD%252BXEol%252F99%252FsQafCY7WUeN%252Bx6Hwulv0hhCI%252B5em7Yp%252BMJ%252FYKYvsq9d0GlCivuYqYS04L7SL%252BZTMxZZFdZG3tePDSjj9mL7MpGjQyev1bF7S58DLMYiV3Q2a5RBnSADaGeoWnw7YeXIi43VbqA6%252FzdJgHJ818%252B3e2Y3vbvAawlN7DkXi40YRs2hDrwUoOMqjwYHZYkrxjb1X5IIDg%252Bdne6mXH5A811F5oyaUovL6pl5HtJJWkeraD6o0KyEn%252BdGNOdOLtOiy7N39pIS0bqV0fgrbQrYWQR7K5uKBEoembXLwrInLJwprm3y0xKx8mG5WXstRuIyZk3O8%252Bnxbq6RajzTPe6eNfgpo1hfQ5oh5FFrEF%252BNojERDyxBu%252FaRkUitODbjEFQ2l1mWSfy19%252Fh5k0jOI85K2D6ytDApmEOihBDMJGfBgZ5t9gX2bvLHqKK0nbqzTVSSWbaKreNaYnWV6eCq98QpUCJdgzXSf4bui5n4WP9j5alhTpx2dmsU2bZoycPp%252B%252FaNoseGTxynF2x2Z4pIdzxHKeNnUQbcfsJ%252BwV3C2eGdlU%252BXCtVCXWA872QN0xrGrCHwoadWZv7Ej0F0CAVjEuU1ltCmpBzpr%252BM3urle0wmVKbbEdui3YiW4OyVaxaqksIoWU4ouvxCRY%253D%26gtnp%3D0%26gtpp%3D0%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DIJ5nQJGTrpCE11CZHx4nYrlGNK0IrtJ2pxxwJPNmewE%253D%26%26gtnp%3D0%26gtpp%3D0%26kt%3D246%26%26kbc%3D10191%26ki%3D26680690%26ktd%3D0%26kld%3D1063%26kp%3D1%26bd%3D-4%25231024%25231280%25231%25230&&l=en&odw=0&dlt=1&l=en HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?__cmpcc=2&__cmpfcc=1&id=68884&o=1720454044&h=http%3A%2F%2Fifdnzact.com%2FSpam_Removal.cfm%3Fdomain%3Dle100.net%26fp%3DEzVFF1z5BNcjvM%252BM%252FOKCHBPjV4tK%252Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%252FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%252BD6EslT4YXZEgi5MQZoS4%252BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%252FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%252BF%252FqfFDeim2hVuLdV2hx9V%252F15hYqnNxwr7w%252FxJkFs%26yep%3DkYWX2UB9hpPluHNh59n0TG5bw0%252FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%252FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%252FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%252Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%252B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%252FqYu%252FBmO%252BefvXO46i%252BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%252BZbCkucnl%252BKaGVQ4CSuga7KRLSemy%252FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%252F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%252FCiWxSUGpEEgdBffigSWf9bQ%252BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%252BRbYTMJnnWjleatxujX%252BIiC4edOKDRJ%252FnR1G4wl1D1zw1q7mWlz%252F%252FnAQ9gKAY08BXIzyLlH48v3xyIw5TB6bHJNQMOLDDEDb5Vn77S96JwQqQ58V9YV3Zs2fQx0LpXi%252Fv3R2KtwFytIci4LYt%252BfLYqlKC%252FZw%252B%252BxXbfeWCD1n0%252BunmHv1QoTf%252Fp7BcNmC7DcfCienIs6Am8IwxZ872y4DiNhFM2SK1Q9eF1RdxIUHt6Km6G2w96DxX1ZU%252BNeA70x%252Bm4TMzA7oDST7GRHEURKQxQ7GU0X%252BT4hpg6YRtVfTDnslnqgYyxa8LvjhqfxnGCrDqp1vWtl%252F%252Fc9fLOHx8fGBmD7Uo7Gp2w9IKwB6t4iC81jYFMx7xV6DxL6vMlDarDP6FCNM2k561vom%252BbqEPC3OfD5eCbb0H9De8PXIaD6wU4xgzvPe%252B6B5knbXTuIIX2ozx66y0xP4nKFkVd91QdhcD%252BXEol%252F99%252FsQafCY7WUeN%252Bx6Hwulv0hhCI%252B5em7Yp%252BMJ%252FYKYvsq9d0GlCivuYqYS04L7SL%252BZTMxZZFdZG3tePDSjj9mL7MpGjQyev1bF7S58DLMYiV3Q2a5RBnSADaGeoWnw7YeXIi43VbqA6%252FzdJgHJ818%252B3e2Y3vbvAawlN7DkXi40YRs2hDrwUoOMqjwYHZYkrxjb1X5IIDg%252Bdne6mXH5A811F5oyaUovL6pl5HtJJWkeraD6o0KyEn%252BdGNOdOLtOiy7N39pIS0bqV0fgrbQrYWQR7K5uKBEoembXLwrInLJwprm3y0xKx8mG5WXstRuIyZk3O8%252Bnxbq6RajzTPe6eNfgpo1hfQ5oh5FFrEF%252BNojERDyxBu%252FaRkUitODbjEFQ2l1mWSfy19%252Fh5k0jOI85K2D6ytDApmEOihBDMJGfBgZ5t9gX2bvLHqKK0nbqzTVSSWbaKreNaYnWV6eCq98QpUCJdgzXSf4bui5n4WP9j5alhTpx2dmsU2bZoycPp%252B%252FaNoseGTxynF2x2Z4pIdzxHKeNnUQbcfsJ%252BwV3C2eGdlU%252BXCtVCXWA872QN0xrGrCHwoadWZv7Ej0F0CAVjEuU1ltCmpBzpr%252BM3urle0wmVKbbEdui3YiW4OyVaxaqksIoWU4ouvxCRY%253D%26gtnp%3D0%26gtpp%3D0%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DIJ5nQJGTrpCE11CZHx4nYrlGNK0IrtJ2pxxwJPNmewE%253D%26%26gtnp%3D0%26gtpp%3D0%26kt%3D246%26%26kbc%3D10191%26ki%3D26680690%26ktd%3D0%26kld%3D1063%26kp%3D1%26bd%3D-4%25231024%25231280%25231%25230&&l=en&odw=0&dlt=1&l=en HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chro
Source: global traffic	HTTP traffic detected: GET /delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfMjY.js HTTP/1.1Host: cdn.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ifdnzact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FSpam_Removal.cfm&o=1720454046065&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ifdnzact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FSpam_Removal.cfm&o=1720454046065&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FMalware_Removal.cfm%3Fdomain%3Dle100.net%26fp%3DEzVFF1z5BNcjvM%252BM%252FOKCHBPjV4tK%252Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%252FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%252BD6EslT4YXZEgi5MQZoS4%252BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%252FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%252BF%252FqfFDeim2hVuLdV2hx9V%252F15hYqnNxwr7w%252FxJkFs%26yep%3DkYWX2UB9hpPluHNh59n0TG5bw0%252FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%252FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%252FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%252Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%252B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%252FqYu%252FBmO%252BefvXO46i%252BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%252BZbCkucnl%252BKaGVQ4CSuga7KRLSemy%252FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%252F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%252FCiWxSUGpEEgdBffigSWf9bQ%252BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%252BRbYTMJnnWjleatxujX%252BIiC4edOKDRJ%252FnR1G4wl1D1zw1q7mWlz%252F%252FnAQ9gKAY08BXIzyLlH48v3xyIw5TB6bHJNQMOLDDEDb5Vn77S96JwQqQ58V9YV3Zs2fQx0LpXi%252Fv3R2KtwFytIci4LYt%252BfLYqlKC%252FZw%252B%252BxXbfeWCD1n0%252BunmHv1QoTf%252Fp7BcNmC7DcfCienIs6Am8IwxZ872y4DiNhFM2SK1Q9eF1RdxIUHt6Km6G2w96DxX1ZU%252BNeA70x%252Bm4TMzA7oDST7GRHEURKQxQ7GU0X%252BT4hpg6YRtVfTDnslnqgYyxa8LvjhqfxnGCrDqp1vWtl%252F%252Fc9fLOHx8fGBmD7Uo7Gp2w9IKwB6t4iC81jYFMx7xV6DxL6vMlDarDP6FCNM2k561vom%252BbqEPC3OfD5eCbb0H9De8PXIaD6wU4xgzvPe%252B6B5knbXTuIIX2ozx66y0xP4nKFkVd91QdhcD%252BXEol%252F99%252FsQafCY7WUeN%252Bx6Hwulv0hhCI%252B5em7Yp%252BMJ%252FYKYvsq9d0GlCivuYqYS04L7SL%252BZTMxZZFdZG3tePDSjj9mL7MpGjQyev1bF7S58DLMYiV3Q2a5RBnSADaGeoWnw7YeXIi43VbqA6%252FzdJgHJ818%252B3e2Y3vbvAawlN7DkXi40YRs2hDrwUoOMqjwYHZYkrxjb1X5IIDg%252Bdne6mXH5A811F5oyaUovL6pl5HtJJWkeraD6o0KyEn%252BdGNOdOLtOiy7N39pIS0bqV0fgrbQrYWQR7K5uKBEoembXLwrInLJwprm3y0xKx8mG5WXstRuIyZk3O8%252Bnxbq6RajzTPe6eNfgpo1hfQ5oh5FFrEF%252BNojERDyxBu%252FaRkUitODbjEFQ2l1mWSfy19%252Fh5k0jOI85K2D6ytDApmEOihBDMJGfBgZ5t9gX2bvLHqKK0nbqzTVSSWbaKreNaYnWV6eCq98QpUCJdgzXSf4bui5n4WP9j5alhTpx2dmsU2bZoycPp%252B%252FaNoseGTxynF2x2Z4pIdzxHKeNnUQbcfsJ%252BwV3C2eGdlU%252BXCtVCXWA872QN0xrGrCHwoadWZv7Ej0F0CAVjEuU1ltCmpBzpr%252BM3urle0wmVKbbEdui3YiW4OyVaxaqksIoWU4ouvxCRY%253D%26gtnp%3D0%26gtpp%3D0%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DIJ5nQJGTrpCE11CZHx4nYrlGNK0IrtJ2pxxwJPNmewE%253D%26%26gtnp%3D0%26gtpp%3D0%26kt%3D246%26%26kbc%3D10191%26ki%3D18327822%26ktd%3D0%26kld%3D1063%26kp%3D2%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1720454050087 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FMalware_Removal.cfm&o=1720454051591&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ifdnzact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FMalware_Removal.cfm&o=1720454051591&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FPop_Up_Removal.cfm%3Fdomain%3Dle100.net%26fp%3DEzVFF1z5BNcjvM%252BM%252FOKCHBPjV4tK%252Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%252FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%252BD6EslT4YXZEgi5MQZoS4%252BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%252FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%252BF%252FqfFDeim2hVuLdV2hx9V%252F15hYqnNxwr7w%252FxJkFs%26yep%3DkYWX2UB9hpPluHNh59n0TG5bw0%252FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%252FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%252FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%252Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%252B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%252FqYu%252FBmO%252BefvXO46i%252BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%252BZbCkucnl%252BKaGVQ4CSuga7KRLSemy%252FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%252F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%252FCiWxSUGpEEgdBffigSWf9bQ%252BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%252BRbYTMJnnWjleatxujX%252BIiC4edOKDRJ%252FnR1G4wl1D1zw1q7mWlz%252F%252FnAQ9gKAY08BXIzyLlH48v3xyIw5TB6bHJNQMOLDDEDb5Vn77S96JwQqQ58V9YV3Zs2fQx0LpXi%252Fv3R2KtwFytIci4LYt%252BfLYqlKC%252FZw%252B%252BxXbfeWCD1n0%252BunmHv1QoTf%252Fp7BcNmC7DcfCienIs6Am8IwxZ872y4DiNhFM2SK1Q9eF1RdxIUHt6Km6G2w96DxX1ZU%252BNeA70x%252Bm4TMzA7oDST7GRHEURKQxQ7GU0X%252BT4hpg6YRtVfTDnslnqgYyxa8LvjhqfxnGCrDqp1vWtl%252F%252Fc9fLOHx8fGBmD7Uo7Gp2w9IKwB6t4iC81jYFMx7xV6DxL6vMlDarDP6FCNM2k561vom%252BbqEPC3OfD5eCbb0H9De8PXIaD6wU4xgzvPe%252B6B5knbXTuIIX2ozx66y0xP4nKFkVd91QdhcD%252BXEol%252F99%252FsQafCY7WUeN%252Bx6Hwulv0hhCI%252B5em7Yp%252BMJ%252FYKYvsq9d0GlCivuYqYS04L7SL%252BZTMxZZFdZG3tePDSjj9mL7MpGjQyev1bF7S58DLMYiV3Q2a5RBnSADaGeoWnw7YeXIi43VbqA6%252FzdJgHJ818%252B3e2Y3vbvAawlN7DkXi40YRs2hDrwUoOMqjwYHZYkrxjb1X5IIDg%252Bdne6mXH5A811F5oyaUovL6pl5HtJJWkeraD6o0KyEn%252BdGNOdOLtOiy7N39pIS0bqV0fgrbQrYWQR7K5uKBEoembXLwrInLJwprm3y0xKx8mG5WXstRuIyZk3O8%252Bnxbq6RajzTPe6eNfgpo1hfQ5oh5FFrEF%252BNojERDyxBu%252FaRkUitODbjEFQ2l1mWSfy19%252Fh5k0jOI85K2D6ytDApmEOihBDMJGfBgZ5t9gX2bvLHqKK0nbqzTVSSWbaKreNaYnWV6eCq98QpUCJdgzXSf4bui5n4WP9j5alhTpx2dmsU2bZoycPp%252B%252FaNoseGTxynF2x2Z4pIdzxHKeNnUQbcfsJ%252BwV3C2eGdlU%252BXCtVCXWA872QN0xrGrCHwoadWZv7Ej0F0CAVjEuU1ltCmpBzpr%252BM3urle0wmVKbbEdui3YiW4OyVaxaqksIoWU4ouvxCRY%253D%26gtnp%3D0%26gtpp%3D0%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DIJ5nQJGTrpCE11CZHx4nYrlGNK0IrtJ2pxxwJPNmewE%253D%26%26gtnp%3D0%26gtpp%3D0%26kt%3D246%26%26kbc%3D10191%26ki%3D22821918%26ktd%3D0%26kld%3D1063%26kp%3D3%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1720454059470 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FPop_Up_Removal.cfm&o=1720454060695&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ifdnzact.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FPop_Up_Removal.cfm&o=1720454060695&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: le100.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?dn=le100.net&pid=9PO755G95 HTTP/1.1Host: ifdnzact.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://le100.net/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.js?ch=1 HTTP/1.1Host: ifdnzact.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ifdnzact.com/?dn=le100.net&pid=9PO755G95Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.js?ch=2 HTTP/1.1Host: ifdnzact.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ifdnzact.com/?dn=le100.net&pid=9PO755G95Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/js/min.js?v2.3 HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ifdnzact.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/29590/bg1.png HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ifdnzact.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/arrrow.png HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ifdnzact.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveOrigin: http://ifdnzact.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ifdnzact.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveOrigin: http://ifdnzact.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ifdnzact.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/29590/bg1.png HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/arrrow.png HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: le100.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://le100.net/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: le100.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: le100.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?dn=le100.net&pid=9PO755G95 HTTP/1.1Host: ifdnzact.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://le100.net/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Spam_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%2FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%2BD6EslT4YXZEgi5MQZoS4%2BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%2FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%2BF%2FqfFDeim2hVuLdV2hx9V%2F15hYqnNxwr7w%2FxJkFs&yep=kYWX2UB9hpPluHNh59n0TG5bw0%2FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%2FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%2FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%2Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%2B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%2FqYu%2FBmO%2BefvXO46i%2BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%2BZbCkucnl%2BKaGVQ4CSuga7KRLSemy%2FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%2F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%2FCiWxSUGpEEgdBffigSWf9bQ%2BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%2BRbYTMJnnWjleatxujX%2BIiC4edOKDRJ%2FnR1G4wl1D1zw1q7mWlz%2F%2FnAQ9gKAY08BXIzyLlH48v3xyIw5TB6bHJNQMOLDDEDb5Vn77S96JwQqQ58V9YV3Zs2fQx0LpXi%2Fv3R2KtwFytIci4LYt%2BfLYqlKC%2FZw%2B%2BxXbfeWCD1n0%2BunmHv1QoTf%2Fp7BcNmC7DcfCienIs6Am8IwxZ872y4DiNhFM2SK1Q9eF1RdxIUHt6Km6G2w96DxX1ZU%2BNeA70x%2Bm4TMzA7oDST7GRHEURKQxQ7GU0X%2BT4hpg6YRtVfTDnslnqgYyxa8LvjhqfxnGCrDqp1vWtl%2F%2Fc9fLOHx8fGBmD7Uo7Gp2w9IKwB6t4iC81jYFMx7xV6DxL6vMlDarDP6FCNM2k561vom%2BbqEPC3OfD5eCbb0H9De8PXIaD6wU4xgzvPe%2B6B5knbXTuIIX2ozx66y0xP4nKFkVd91QdhcD%2BXEol%2F99%2FsQafCY7WUeN%2Bx6Hwulv0hhCI%2B5em7Yp%2BMJ%2FYKYvsq9d0GlCivuYqYS04L7SL%2BZTMxZZFdZG3tePDSjj9mL7MpGjQyev1bF7S58DLMYiV3Q2a5RBnSADaGeoWnw7YeXIi43VbqA6%2FzdJgHJ818%2B3e2Y3vbvAawlN7DkXi40YRs2hDrwUoOMqjwYHZYkrxjb1X5IIDg%2Bdne6mXH5A811F5oyaUovL6pl5HtJJWkeraD6o0KyEn%2BdGNOdOLtOiy7N39pIS0bqV0fgrbQrYWQR7K5uKBEoembXLwrInLJwprm3y0xKx8mG5WXstRuIyZk3O8%2Bnxbq6RajzTPe6eNfgpo1hfQ5oh5FFrEF%2BNojERDyxBu%2FaRkUitODbjEFQ2l1mWSfy19%2Fh5k0jOI85K2D6ytDApmEOihBDMJGfBgZ5t9gX2bvLHqKK0nbqzTVSSWbaKreNaYnWV6eCq98QpUCJdgzXSf4bui5n4WP9j5alhTpx2dmsU2bZoycPp%2B%2FaNoseGTxynF2x2Z4pIdzxHKeNnUQbcfsJ%2BwV3C2eGdlU%2BXCtVCXWA872QN0xrGrCHwoadWZv7Ej0F0CAVjEuU1ltCmpBzpr%2BM3urle0wmVKbbEdui3YiW4OyVaxaqksIoWU4ouvxCRY%3D&gtnp=0&gtpp=0&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=IJ5nQJGTrpCE11CZHx4nYrlGNK0IrtJ2pxxwJPNmewE%3D&&gtnp=0&gtpp=0&kt=246&&kbc=10191&ki=26680690&ktd=0&kld=1063&kp=1&bd=-4%231024%231280%231%230 HTTP/1.1Host: ifdnzact.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.js?ch=1 HTTP/1.1Host: ifdnzact.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ifdnzact.com/Spam_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%2FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%2BD6EslT4YXZEgi5MQZoS4%2BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%2FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%2BF%2FqfFDeim2hVuLdV2hx9V%2F15hYqnNxwr7w%2FxJkFs&yep=kYWX2UB9hpPluHNh59n0TG5bw0%2FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%2FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%2FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%2Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%2B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%2FqYu%2FBmO%2BefvXO46i%2BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%2BZbCkucnl%2BKaGVQ4CSuga7KRLSemy%2FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%2F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%2FCiWxSUGpEEgdBffigSWf9bQ%2BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%2BRbYTMJnnWjleatxujX%2BIiC4edOKDRJ%2FnR1G4wl1D1zw1q7mWlz%2F%2FnAQ9gKAY08BXIzyLlH48v3xyIw5TB6bHJNQMOLDDEDb5Vn77S96JwQqQ58V9YV3Zs2fQx0LpXi%2Fv3R2KtwFytIci4LYt%2BfLYqlKC%2FZw%2B%2BxXbfeWCD1n0%2BunmHv1QoTf%2Fp7BcNmC7DcfCienIs6Am8IwxZ872y4DiNhFM2SK1Q9eF1RdxIUHt6Km6G2w96DxX1ZU%2BNeA70x%2Bm4TMzA7oDST7GRHEURKQxQ7GU0X%2BT4hpg6YRtVfTDnslnqgYyxa8LvjhqfxnGCrDqp1vWtl%2F%2Fc9fLOHx8fGBmD7Uo7Gp2w9IKwB6t4iC81jYFMx7xV6DxL6vMlDarDP6FCNM2k561vom%2BbqEPC3OfD5eCbb0H9De8PXIaD6wU4xgzvPe%2B6B5knbXTuIIX2ozx66y0xP4nKFkVd91QdhcD%2BXEol%2F99%2FsQafCY7WUeN%2Bx6Hwulv0hhCI%2B5em7Yp%2BMJ%2FYKYvsq9d0GlCivuYqYS04L7SL%2BZTMxZZFdZG3tePDSjj9mL7MpGjQyev1bF7S58DLMYiV3Q2a5RBnSADaGeoWnw7YeXIi43VbqA6%2FzdJgHJ818%2B3e2Y3vbvAawlN7DkXi40YRs2hDrwUoOMqjwYHZYkrxjb1X5IIDg%2Bdne6mXH5A811F5oyaUovL6pl5HtJJWkeraD6o0KyEn%2BdGNOdOLtOiy7N39pIS0bqV0fgrbQrYWQR7K5uKBEoembXLwrInLJwprm3y0xKx8mG5WXstRuIyZk3O8%2Bnxbq6RajzTPe6eNfgpo1hfQ5oh5FFrEF%2BNojERDyxBu%2FaRkUitODbjEFQ2l1mWSfy19%2Fh5k0jOI85K2D6ytDApmEOihBDMJGfBgZ5t9gX2bvLHqKK0nbqzTVSSWbaKreNaYnWV6eCq98QpUCJdgzXSf4bui5n4WP9j5alhTpx2dmsU2bZoycPp%2B%2FaNoseGTxynF2x2Z4pIdzxHKeNnUQbcfsJ%2BwV3C2eGdlU%2BXCtVCXWA872QN0xrGrCHwoadWZv7Ej0F0CAVjEuU1ltCmpBzpr%2BM3urle0wmVKbbEdui3YiW4OyVaxaqksIoWU4ouvxCRY%3D&gtnp=0&gtpp=0&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=IJ5nQJGTrpCE11CZHx4nYrlGNK0IrtJ2pxxwJPNmewE%3D&&gtnp=0&gtpp=0&kt=246&&kbc=10191&ki=26680690&ktd=0&kld=1063&kp=1&bd=-4%231024%231280%231%230Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: vsid=919vr467999629561689733
Source: global traffic	HTTP traffic detected: GET /px.js?ch=2 HTTP/1.1Host: ifdnzact.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ifdnzact.com/Spam_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%2FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%2BD6EslT4YXZEgi5MQZoS4%2BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%2FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%2BF%2FqfFDeim2hVuLdV2hx9V%2F15hYqnNxwr7w%2FxJkFs&yep=kYWX2UB9hpPluHNh59n0TG5bw0%2FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%2FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%2FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%2Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%2B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%2FqYu%2FBmO%2BefvXO46i%2BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%2BZbCkucnl%2BKaGVQ4CSuga7KRLSemy%2FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%2F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%2FCiWxSUGpEEgdBffigSWf9bQ%2BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%2BRbYTMJnnWjleatxujX%2BIiC4edOKDRJ%2FnR1G4wl1D1zw1q7mWlz%2F%2FnAQ9gKAY08BXIzyLlH48v3xyIw5TB6bHJNQMOLDDEDb5Vn77S96JwQqQ58V9YV3Zs2fQx0LpXi%2Fv3R2KtwFytIci4LYt%2BfLYqlKC%2FZw%2B%2BxXbfeWCD1n0%2BunmHv1QoTf%2Fp7BcNmC7DcfCienIs6Am8IwxZ872y4DiNhFM2SK1Q9eF1RdxIUHt6Km6G2w96DxX1ZU%2BNeA70x%2Bm4TMzA7oDST7GRHEURKQxQ7GU0X%2BT4hpg6YRtVfTDnslnqgYyxa8LvjhqfxnGCrDqp1vWtl%2F%2Fc9fLOHx8fGBmD7Uo7Gp2w9IKwB6t4iC81jYFMx7xV6DxL6vMlDarDP6FCNM2k561vom%2BbqEPC3OfD5eCbb0H9De8PXIaD6wU4xgzvPe%2B6B5knbXTuIIX2ozx66y0xP4nKFkVd91QdhcD%2BXEol%2F99%2FsQafCY7WUeN%2Bx6Hwulv0hhCI%2B5em7Yp%2BMJ%2FYKYvsq9d0GlCivuYqYS04L7SL%2BZTMxZZFdZG3tePDSjj9mL7MpGjQyev1bF7S58DLMYiV3Q2a5RBnSADaGeoWnw7YeXIi43VbqA6%2FzdJgHJ818%2B3e2Y3vbvAawlN7DkXi40YRs2hDrwUoOMqjwYHZYkrxjb1X5IIDg%2Bdne6mXH5A811F5oyaUovL6pl5HtJJWkeraD6o0KyEn%2BdGNOdOLtOiy7N39pIS0bqV0fgrbQrYWQR7K5uKBEoembXLwrInLJwprm3y0xKx8mG5WXstRuIyZk3O8%2Bnxbq6RajzTPe6eNfgpo1hfQ5oh5FFrEF%2BNojERDyxBu%2FaRkUitODbjEFQ2l1mWSfy19%2Fh5k0jOI85K2D6ytDApmEOihBDMJGfBgZ5t9gX2bvLHqKK0nbqzTVSSWbaKreNaYnWV6eCq98QpUCJdgzXSf4bui5n4WP9j5alhTpx2dmsU2bZoycPp%2B%2FaNoseGTxynF2x2Z4pIdzxHKeNnUQbcfsJ%2BwV3C2eGdlU%2BXCtVCXWA872QN0xrGrCHwoadWZv7Ej0F0CAVjEuU1ltCmpBzpr%2BM3urle0wmVKbbEdui3YiW4OyVaxaqksIoWU4ouvxCRY%3D&gtnp=0&gtpp=0&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=IJ5nQJGTrpCE11CZHx4nYrlGNK0IrtJ2pxxwJPNmewE%3D&&gtnp=0&gtpp=0&kt=246&&kbc=10191&ki=26680690&ktd=0&kld=1063&kp=1&bd=-4%231024%231280%231%230Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: vsid=919vr467999629561689733
Source: global traffic	HTTP traffic detected: GET /__media__/js/min.js?v2.3 HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ifdnzact.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/29590/bg1.png HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ifdnzact.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/res-arw.png HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ifdnzact.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveOrigin: http://ifdnzact.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ifdnzact.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveOrigin: http://ifdnzact.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ifdnzact.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-medium/montserrat-medium.woff HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveOrigin: http://ifdnzact.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ifdnzact.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/29590/bg1.png HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/res-arw.png HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ifdnzact.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ifdnzact.com/Spam_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%2FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%2BD6EslT4YXZEgi5MQZoS4%2BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%2FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%2BF%2FqfFDeim2hVuLdV2hx9V%2F15hYqnNxwr7w%2FxJkFs&yep=kYWX2UB9hpPluHNh59n0TG5bw0%2FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%2FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%2FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%2Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%2B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%2FqYu%2FBmO%2BefvXO46i%2BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%2BZbCkucnl%2BKaGVQ4CSuga7KRLSemy%2FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%2F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%2FCiWxSUGpEEgdBffigSWf9bQ%2BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%2BRbYTMJnnWjleatxujX%2BIiC4edOKDRJ%2FnR1G4wl1D1zw1q7mWlz%2F%2FnAQ9gKAY08BXIzyLlH48v3xyIw5TB6bHJNQMOLDDEDb5Vn77S96JwQqQ58V9YV3Zs2fQx0LpXi%2Fv3R2KtwFytIci4LYt%2BfLYqlKC%2FZw%2B%2BxXbfeWCD1n0%2BunmHv1QoTf%2Fp7BcNmC7DcfCienIs6Am8IwxZ872y4DiNhFM2SK1Q9eF1RdxIUHt6Km6G2w96DxX1ZU%2BNeA70x%2Bm4TMzA7oDST7GRHEURKQxQ7GU0X%2BT4hpg6YRtVfTDnslnqgYyxa8LvjhqfxnGCrDqp1vWtl%2F%2Fc9fLOHx8fGBmD7Uo7Gp2w9IKwB6t4iC81jYFMx7xV6DxL6vMlDarDP6FCNM2k561vom%2BbqEPC3OfD5eCbb0H9De8PXIaD6wU4xgzvPe%2B6B5knbXTuIIX2ozx66y0xP4nKFkVd91QdhcD%2BXEol%2F99%2FsQafCY7WUeN%2Bx6Hwulv0hhCI%2B5em7Yp%2BMJ%2FYKYvsq9d0GlCivuYqYS04L7SL%2BZTMxZZFdZG3tePDSjj9mL7MpGjQyev1bF7S58DLMYiV3Q2a5RBnSADaGeoWnw7YeXIi43VbqA6%2FzdJgHJ818%2B3e2Y3vbvAawlN7DkXi40YRs2hDrwUoOMqjwYHZYkrxjb1X5IIDg%2Bdne6mXH5A811F5oyaUovL6pl5HtJJWkeraD6o0KyEn%2BdGNOdOLtOiy7N39pIS0bqV0fgrbQrYWQR7K5uKBEoembXLwrInLJwprm3y0xKx8mG5WXstRuIyZk3O8%2Bnxbq6RajzTPe6eNfgpo1hfQ5oh5FFrEF%2BNojERDyxBu%2FaRkUitODbjEFQ2l1mWSfy19%2Fh5k0jOI85K2D6ytDApmEOihBDMJGfBgZ5t9gX2bvLHqKK0nbqzTVSSWbaKreNaYnWV6eCq98QpUCJdgzXSf4bui5n4WP9j5alhTpx2dmsU2bZoycPp%2B%2FaNoseGTxynF2x2Z4pIdzxHKeNnUQbcfsJ%2BwV3C2eGdlU%2BXCtVCXWA872QN0xrGrCHwoadWZv7Ej0F0CAVjEuU1ltCmpBzpr%2BM3urle0wmVKbbEdui3YiW4OyVaxaqksIoWU4ouvxCRY%3D&gtnp=0&gtpp=0&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=IJ5nQJGTrpCE11CZHx4nYrlGNK0IrtJ2pxxwJPNmewE%3D&&gtnp=0&gtpp=0&kt=246&&kbc=10191&ki=26680690&ktd=0&kld=1063&kp=1&bd=-4%231024%231280%231%230Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: vsid=919vr467999629561689733; __cmpcc=1; __cmpcccx68884=aBQBeHQsAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Source: global traffic	HTTP traffic detected: GET /Malware_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%2FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%2BD6EslT4YXZEgi5MQZoS4%2BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%2FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%2BF%2FqfFDeim2hVuLdV2hx9V%2F15hYqnNxwr7w%2FxJkFs&yep=kYWX2UB9hpPluHNh59n0TG5bw0%2FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%2FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%2FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%2Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%2B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%2FqYu%2FBmO%2BefvXO46i%2BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%2BZbCkucnl%2BKaGVQ4CSuga7KRLSemy%2FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%2F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%2FCiWxSUGpEEgdBffigSWf9bQ%2BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%2BRbYTMJnnWjleatxujX%2BIiC4edOKDRJ%2FnR1G4wl1D1zw1q7mWlz%2F%2FnAQ9gKAY08BXIzyLlH48v3xyIw5TB6bHJNQMOLDDEDb5Vn77S96JwQqQ58V9YV3Zs2fQx0LpXi%2Fv3R2KtwFytIci4LYt%2BfLYqlKC%2FZw%2B%2BxXbfeWCD1n0%2BunmHv1QoTf%2Fp7BcNmC7DcfCienIs6Am8IwxZ872y4DiNhFM2SK1Q9eF1RdxIUHt6Km6G2w96DxX1ZU%2BNeA70x%2Bm4TMzA7oDST7GRHEURKQxQ7GU0X%2BT4hpg6YRtVfTDnslnqgYyxa8LvjhqfxnGCrDqp1vWtl%2F%2Fc9fLOHx8fGBmD7Uo7Gp2w9IKwB6t4iC81jYFMx7xV6DxL6vMlDarDP6FCNM2k561vom%2BbqEPC3OfD5eCbb0H9De8PXIaD6wU4xgzvPe%2B6B5knbXTuIIX2ozx66y0xP4nKFkVd91QdhcD%2BXEol%2F99%2FsQafCY7WUeN%2Bx6Hwulv0hhCI%2B5em7Yp%2BMJ%2FYKYvsq9d0GlCivuYqYS04L7SL%2BZTMxZZFdZG3tePDSjj9mL7MpGjQyev1bF7S58DLMYiV3Q2a5RBnSADaGeoWnw7YeXIi43VbqA6%2FzdJgHJ818%2B3e2Y3vbvAawlN7DkXi40YRs2hDrwUoOMqjwYHZYkrxjb1X5IIDg%2Bdne6mXH5A811F5oyaUovL6pl5HtJJWkeraD6o0KyEn%2BdGNOdOLtOiy7N39pIS0bqV0fgrbQrYWQR7K5uKBEoembXLwrInLJwprm3y0xKx8mG5WXstRuIyZk3O8%2Bnxbq6RajzTPe6eNfgpo1hfQ5oh5FFrEF%2BNojERDyxBu%2FaRkUitODbjEFQ2l1mWSfy19%2Fh5k0jOI85K2D6ytDApmEOihBDMJGfBgZ5t9gX2bvLHqKK0nbqzTVSSWbaKreNaYnWV6eCq98QpUCJdgzXSf4bui5n4WP9j5alhTpx2dmsU2bZoycPp%2B%2FaNoseGTxynF2x2Z4pIdzxHKeNnUQbcfsJ%2BwV3C2eGdlU%2BXCtVCXWA872QN0xrGrCHwoadWZv7Ej0F0CAVjEuU1ltCmpBzpr%2BM3urle0wmVKbbEdui3YiW4OyVaxaqksIoWU4ouvxCRY%3D&gtnp=0&gtpp=0&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=IJ5nQJGTrpCE11CZHx4nYrlGNK0IrtJ2pxxwJPNmewE%3D&&gtnp=0&gtpp=0&kt=246&&kbc=10191&ki=18327822&ktd=0&kld=1063&kp=2&bd=-4%231024%231280%231%230 HTTP/1.1Host: ifdnzact.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: vsid=919vr467999629561689733; __cmpcc=1; __cmpcccx68884=aBQBeHQsAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqN
Source: global traffic	HTTP traffic detected: GET /__media__/js/min.js?v2.3 HTTP/1.1Host: i3.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ifdnzact.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/29590/bg1.png HTTP/1.1Host: i3.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ifdnzact.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/res-arw.png HTTP/1.1Host: i3.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ifdnzact.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1Host: i3.cdn-image.comConnection: keep-aliveOrigin: http://ifdnzact.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ifdnzact.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1Host: i3.cdn-image.comConnection: keep-aliveOrigin: http://ifdnzact.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ifdnzact.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-medium/montserrat-medium.woff HTTP/1.1Host: i3.cdn-image.comConnection: keep-aliveOrigin: http://ifdnzact.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ifdnzact.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/29590/bg1.png HTTP/1.1Host: i3.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/res-arw.png HTTP/1.1Host: i3.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Pop_Up_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%2FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%2BD6EslT4YXZEgi5MQZoS4%2BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%2FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%2BF%2FqfFDeim2hVuLdV2hx9V%2F15hYqnNxwr7w%2FxJkFs&yep=kYWX2UB9hpPluHNh59n0TG5bw0%2FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%2FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%2FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%2Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%2B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%2FqYu%2FBmO%2BefvXO46i%2BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%2BZbCkucnl%2BKaGVQ4CSuga7KRLSemy%2FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%2F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%2FCiWxSUGpEEgdBffigSWf9bQ%2BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%2BRbYTMJnnWjleatxujX%2BIiC4edOKDRJ%2FnR1G4wl1D1zw1q7mWlz%2F%2FnAQ9gKAY08BXIzyLlH48v3xyIw5TB6bHJNQMOLDDEDb5Vn77S96JwQqQ58V9YV3Zs2fQx0LpXi%2Fv3R2KtwFytIci4LYt%2BfLYqlKC%2FZw%2B%2BxXbfeWCD1n0%2BunmHv1QoTf%2Fp7BcNmC7DcfCienIs6Am8IwxZ872y4DiNhFM2SK1Q9eF1RdxIUHt6Km6G2w96DxX1ZU%2BNeA70x%2Bm4TMzA7oDST7GRHEURKQxQ7GU0X%2BT4hpg6YRtVfTDnslnqgYyxa8LvjhqfxnGCrDqp1vWtl%2F%2Fc9fLOHx8fGBmD7Uo7Gp2w9IKwB6t4iC81jYFMx7xV6DxL6vMlDarDP6FCNM2k561vom%2BbqEPC3OfD5eCbb0H9De8PXIaD6wU4xgzvPe%2B6B5knbXTuIIX2ozx66y0xP4nKFkVd91QdhcD%2BXEol%2F99%2FsQafCY7WUeN%2Bx6Hwulv0hhCI%2B5em7Yp%2BMJ%2FYKYvsq9d0GlCivuYqYS04L7SL%2BZTMxZZFdZG3tePDSjj9mL7MpGjQyev1bF7S58DLMYiV3Q2a5RBnSADaGeoWnw7YeXIi43VbqA6%2FzdJgHJ818%2B3e2Y3vbvAawlN7DkXi40YRs2hDrwUoOMqjwYHZYkrxjb1X5IIDg%2Bdne6mXH5A811F5oyaUovL6pl5HtJJWkeraD6o0KyEn%2BdGNOdOLtOiy7N39pIS0bqV0fgrbQrYWQR7K5uKBEoembXLwrInLJwprm3y0xKx8mG5WXstRuIyZk3O8%2Bnxbq6RajzTPe6eNfgpo1hfQ5oh5FFrEF%2BNojERDyxBu%2FaRkUitODbjEFQ2l1mWSfy19%2Fh5k0jOI85K2D6ytDApmEOihBDMJGfBgZ5t9gX2bvLHqKK0nbqzTVSSWbaKreNaYnWV6eCq98QpUCJdgzXSf4bui5n4WP9j5alhTpx2dmsU2bZoycPp%2B%2FaNoseGTxynF2x2Z4pIdzxHKeNnUQbcfsJ%2BwV3C2eGdlU%2BXCtVCXWA872QN0xrGrCHwoadWZv7Ej0F0CAVjEuU1ltCmpBzpr%2BM3urle0wmVKbbEdui3YiW4OyVaxaqksIoWU4ouvxCRY%3D&gtnp=0&gtpp=0&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=IJ5nQJGTrpCE11CZHx4nYrlGNK0IrtJ2pxxwJPNmewE%3D&&gtnp=0&gtpp=0&kt=246&&kbc=10191&ki=22821918&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230 HTTP/1.1Host: ifdnzact.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: vsid=919vr467999629561689733; __cmpcc=1; __cmpcccx68884=aBQBeHRjAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNu

Source: chromecache_137.2.dr	String found in binary or memory: <a href="http://ifdnzact.com/trf?q=Malware+Removal&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9QUMwMjdEMTUyNjVGNEI5QSZ1dD0xNzIwNDU0MDUwNjcwJnVvPTc2OTY2MDA1NjY5Mjk3Jmx0PTImcz0yJmVzPThsMVNzZnprLlFoRnliQzJPczYxdU5SVkVuNkZIUGtOV1B3YVFoSExhbzdrLmZvMFRQR1dhYV9uOFV1a0h5N1NhVGhIRFV5a0pyby45czZF%2FRV%3D2%2FRE%3D1723046050%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8omYHVJLN1lv2VO-f07bv-jVUCUxJYJE2_URrHkPeeNKdgVhhdZppNk0bH9snJ_pggA9YAeCVxCDUiEklSe4KioiCwftMFxHJBLfRyvW9WbFveAUHVlVOd9zQxSQ9U0MaQvoivpraiRpSwP8TuLYNMV87_LvtwhrtHtjZDAxsBJNUFIA2%2526u%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%2526rlid%253d4e898fce8bfb1484eb76e94280590421%2FRK%3D2%2FRS%3DkP9VF.RMe3cOB40lPmn7..9fMjE-&o=WXPWonuxTnKNXCUullVSGnPohZwgAneoFFkW67atOlywMv5wbPvb2CtUsAVOPbWg6hzCD7Mr4McK0VixPpfRbwYIqELrrVUejQ1uFUcxRniNPGNT30LVY3iWc38sgOpVNVsnlFxSEIVC56zvjKNS1KITBAKO8MmQ2eFctt0gtDEplVy84F6lyNWCkYNuDRSD6vXyYboPFubPFN5tulhwjbN%2BqHl7iOJZIJkY1QVc58uqzsg%2FJ3RqbYA0dRtrI76k03Juvfv1oHZ6IRn3OsOIBntd%2BwveyLHb0jVklsB09XQ1LMrgjAyu2TU6q6Dz%2BwV%2BYOmVrA7%2B6p4QcUNpBGU4bZGRumS0Nnbhjq1QHMnwek%2B56Q9%2BlqWlTPgsoSA0WHsWLFva6FXVkvvTNO5p1PFtywG5nEygxuNPpsx7N5nw5silFLD%2FuGtvM5ebIYxVYmqGVkqFpAVW5qUzK6fAzCfKaZnvl9jwKc9HSYv9BXcop90gzuNFD73vKFjg%2F%2FBU25i0%2FU5qxQ1NOd%2BYmjYg4I7OYwYPivJWLRfd4QVbP0e6rfWz0opyV%2F03eu3erlqmZ989nbB%2BG%2BE9zW006efYzo9NUJRUJkv5KrSN5eXxBxpVbwM%3D&c=211746799963925073202272&n=ScxwexG61fLvs9t%2FgNIIUn4NYQ7oWJNiVw1iMXFSjXhFPKc3EaxRlW8jp3AMqaPoUl1PiAbJNEcQYREU3OyZnj0%2BjCK1KPNXX6Yp7FxC5Gx%2Fz2LtR8EsrO6424zpv17lhQCn18xLHyzVGCfLFdr4jy0rRsVAf4jdcGkMzQBqktUUMYuO0IQeiJE%2FfVH8bEzNkX5cyZZTe58yAPjTnh4wHtjEIlfRbRBBKTe9PO2brkVv4SMFiJ2EKvPUe0vuBAFolbK9fiD1bRwtawkdSQi%2FnhaOIx5n3qWtBPlMZPBcs57tbcLMzZOviwS%2BBpby97OZm3PYNuJOG7YYKFaih1JfNjyhjkFLyvX5jpx1AtIi%2Bpw4jjaiRHsbRGyj7isU4nyhApSFl%2BMFWTsCbMhQMrDpF4EOQcWb7oZoTr8R9PGwpNC3vosFWaxKOj8Po3XkJpvrPQLiHwh8B1hePMoHPz6mvDslKUdnTXCUNuoAYoONz2HhJ8RPxAuQo6%2BObbf8q4UfeN0NshSs%2FsmeVSDJhgWu13sT7QFy5wkrtpdgJjBqJbPMHRTVrdw3hiLWP8vvOP8PkWUCTESizZ%2FStAFSR4BmG7iTv8X6bB2eGmHw6ozmsaQE7PFRS8SP2xwDjlmlBjhp3ZYvwsnCcLuAsVlnFuwJKjOnxQdj4JNi44lzSkIJPM1Et5Bk%2Bp1SMwhgUDGhUW1NpYv%2FerqqYd5il9uGVmWsGJ72xU758itjF%2FIh0Pk2bqfdv7QShFgKyB8SUBUfptgHeav5%2BrPnIly6e2pkry4KBjPy7HVbU3dE8%2FiasplLFxxl%2BxxfpYuQQHAa7zBx5Uo0LL0QIBSG3IU5IyCkWxGt24TxPFAC84SWPz6iVYwiYxJpuyTqHdQEJx5dLGAyqhH6KdoanSVMxV%2BIc%2BPdeecEbrO8dbHKgUo8zCVRc4YUc6GxRmrj5lXA19hHc
Source: chromecache_137.2.dr	String found in binary or memory: <a href="http://ifdnzact.com/trf?q=Malware+Removal&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9QUMwMjdEMTUyNjVGNEI5QSZ1dD0xNzIwNDU0MDUwNjcwJnVvPTc3MzA5NjAzOTg5Mzg5Jmx0PTImcz0yJmVzPW5YNVN3allpM290WXBnTjQ1R0xFOWlkYlpNczhULkdLVk9ZM0lEYjkuRFI3QldMaXo4VGhUTXJTQWR5RjFDRkYuTWRXN2NtQkNPVUczSnFR%2FRV%3D2%2FRE%3D1723046050%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8htFQSqligIdIz6VrBoxsTjVUCUyHW3awSnpQVMQdAXxvQaUNtwqrldRR4O6uy2s7plVrt1ViSXzi3NnYHVL7_GB9AedD2juFcVIjm1L-ZX0fb-CYJZMyRrMB-cpAUKF4_-n1aRc55vfoVBg1QBtaE1muFhaM3KkzUAUITTmOlAtj4A1d%2526u%253daHR0cHMlM2ElMmYlMmZ0cnkubWFsd2FyZWJ5dGVzLmNvbSUyZmZyZWUtZG93bmxvYWQlMmYlM2ZDJTNkNSUyNm1zY2xraWQlM2RhMjliYTUzOGZhOGExOGYyMzQxN2MzYjRmMTI4MjI1MSUyNnV0bV9zb3VyY2UlM2RiaW5nJTI2dXRtX21lZGl1bSUzZGNwYyUyNnV0bV9jYW1wYWlnbiUzZFVTLUVOLUJJTiUyNTdDU3JjaC1CMkMtTkItTWFsd2FyZSUyNnV0bV90ZXJtJTNkbWFsd2FyZSUyNTIwcmVtb3ZhbCUyNnV0bV9jb250ZW50JTNkTkIlMjU3Q01hbHdhcmUtUmVtb3ZhbA%2526rlid%253da29ba538fa8a18f23417c3b4f1282251%2FRK%3D2%2FRS%3DHNR52ZetIbaNOX0fkaORVvgiMRI-&o=WXPWonuxTnKNXCUullVSGnPohZwgAneoFFkW67atOlywMv5wbPvb2CtUsAVOPbWg6hzCD7Mr4McK0VixPpfRbwYIqELrrVUejQ1uFUcxRniNPGNT30LVY3iWc38sgOpVNVsnlFxSEIVC56zvjKNS1KITBAKO8MmQ2eFctt0gtDEplVy84F6lyNWCkYNuDRSD6vXyYboPFubPFN5tulhwjbN%2BqHl7iOJZIJkY1QVc58uqzsg%2FJ3RqbYA0dRtrI76k03Juvfv1oHZ6IRn3OsOIBntd%2BwveyLHb0jVklsB09XQ1LMrgjAyu2TU6q6Dz%2BwV%2BYOmVrA7%2B6p4QcUNpBGU4bZGRumS0Nnbhjq1QHMnwek%2B56Q9%2BlqWlTPgsoSA0WHsWLFva6FXVkvvTNO5p1PFtywG5nEygxuNPpsx7N5nw5silFLD%2FuGtvM5ebIYxVYmqGVkqFpAVW5qUzK6fAzCfKaZnvl9jwKc9HSYv9BXcop90gzuNFD73vKFjg%2F%2FBU25i0%2FU5qxQ1NOd%2BYmjYg4I7OY46Y5a0SO7rq67zfbQ0bjlYOtN4UiwvYXVFdXoV8xA5ZsGBUSuH9V9fftK%2FRKSrdUbQDbQRa%2B7nuEUxjvQHHQps%3D&c=211746799963925073201637&n=ScxwexG61fLvs9t%2FgNIIUn4NYQ7oWJNiVw1iMXFSjXhFPKc3EaxRlW8jp3AMqaPoUl1PiAbJNEcQYREU3OyZnj0%2BjCK1KPNXX6Yp7FxC5Gx%2Fz2LtR8EsrO6424zpv17lhQCn18xLHyzVGCfLFdr4jy0rRsVAf4jdcGkMzQBqktUUMYuO0IQeiJE%2FfVH8bEzNkX5cyZZTe58yAPjTnh4wHtjEIlfRbRBBKTe9PO2brkVv4SMFiJ2EKvPUe0vuBAFolbK9fiD1bRwtawkdSQi%2FnhaOIx5n3qWtBPlMZPBcs55bfoVsiIKkDdGRmdViZaWr4oHx2zk1wZiPlo5yPmFEo4LG1hfIjU9okolmSRMKux%2BP23qEErcJGjQM5X4wxKnyQbpGeKUuH87XHujOi09hZ4%2FBVpNHGNz90NR5s6m2EcWHBd3eJp8mEJ0LGdmXHrmyJKXg8XIWIxsixMI9cMZue2S%2ByjoedeWaeovSOjgifsH8ctFas2n1v0rXIHO%2BLQwpltxUdEh3wdpSuQ06hAmVREY8ILugI87QX2ZL8JusBPZs9560BLTatu1%2FATdF69RI1LosyTQPbZhEepXDUx2Aqz%2F8Oiob2CN2oTmwtdTke6vJKvUhJZLWHK6e%2BnxF%2FJJclcEiR%2F9uJN6Wi6cM7I9nuZLt%2BEKSxq8TUh9VEUY1I5U7EMxMp8PO6FsFPdRvUZP4Qnw8UinlXGd%2FawXE1cOgSE%2BanQ8b9Q40a0Gr4gdH4tOrBPH4pPendE730pLf6FmkxgVJllU1ebOXfRrHm87iC7kqA6Kxnib65Pggo70Jqv8E06mv732goKruoOAQ6xD%2FmwZMDXg1mRJYbyGQFvk28DT4X44rst7Cp8jQKkV77IRsHHCFetnoIDdMv7tE3K4P9t31LNsLJFbWGgQAwTXwWVuO55IE8AAdmltwOwOfM7IgCIxSjAx8M6DU%2BEeuzwFNMJIKr2dUenhutB%2FECt9V5%2B%2F9N0wRG9Rn09M6Fbdate79vPh%2BhGGieYidai9O1MjCMprzRLpfPbxNUqI2C8ZnGaVNvczSTXj1qenaPikyjk1HeICwNezS5fWU1udhiETq&kgp=0&_opnslfp=1" target="_blank" class="list clearfix first"> equals www.yahoo.com (Yahoo)
Source: chromecache_151.2.dr	String found in binary or memory: <a href="http://ifdnzact.com/trf?q=Pop+Up+Removal&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9QkQ1MDI3RDJCQTNDNDlDMSZ1dD0xNzIwNDU0MDU4ODI5JnVvPTc3NDQ3MDQyNTc5NTUyJmx0PTImcz0yJmVzPVFfb2FzZ3VYbkY3S3pzMGpJWE42Q0JHblBTOGt4a1h2OGs0REtCam5oNk82blZEb0ZtZFZTSmtyVVdBVk80eXVXQzJFMFhwUzNKRHpYa3Mt%2FRV%3D2%2FRE%3D1723046059%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8T-3cQLfizXvd3TAPzPbkLTVUCUwJDp2u0RK4h6Lr0YwMOgA1zshcgHaLdTItxPSU1RH83rezNZ9HMicdx2j9kRWL4p-sIUaglff834cH08eB0M07I2hjWbAKwIdJpGl1wUGSHNW4YsMXFEU7nDw4u_XDyh9n2MRqzHf6rh6mQrjpeamJ%2526u%253daHR0cHMlM2ElMmYlMmZ0cnkubWFsd2FyZWJ5dGVzLmNvbSUyZmZyZWUtZG93bmxvYWQlMmYlM2ZDJTNkNSUyNm1zY2xraWQlM2RmNDY3M2RmODdjYjkxYThhNzEzYTViNzQ3NzEyODcxYSUyNnV0bV9zb3VyY2UlM2RiaW5nJTI2dXRtX21lZGl1bSUzZGNwYyUyNnV0bV9jYW1wYWlnbiUzZFVTLUVOLUJJTiUyNTdDU3JjaC1CMkMtTkItTWFsd2FyZSUyNnV0bV90ZXJtJTNkYW50aSUyNTIwbWFsd2FyZSUyNnV0bV9jb250ZW50JTNkTkIlMjU3Q01hbHdhcmUtQW50aU1hbHdhcmU%2526rlid%253df4673df87cb91a8a713a5b747712871a%2FRK%3D2%2FRS%3D0WAaF4SXWhWzZtuUMDZreas_Aks-&o=WXPWonuxTnKNXCUullVSGnPohZwgAneoFFkW67atOlywMv5wbPvb2CtUsAVOPbWg6hzCD7Mr4McK0VixPpfRbwYIqELrrVUejQ1uFUcxRniNPGNT30LVY3iWc38sgOpVNVsnlFxSEIVC56zvjKNS1KITBAKO8MmQ2eFctt0gtDEplVy84F6lyNWCkYNuDRSD6vXyYboPFubPFN5tulhwjbN%2BqHl7iOJZIJkY1QVc58uqzsg%2FJ3RqbYA0dRtrI76k03Juvfv1oHZ6IRn3OsOIBntd%2BwveyLHb0jVklsB09XQ1LMrgjAyu2TU6q6Dz%2BwV%2BYOmVrA7%2B6p4QcUNpBGU4bZGRumS0Nnbhjq1QHMnwek%2B56Q9%2BlqWlTPgsoSA0WHsWLFva6FXVkvvTNO5p1PFtywG5nEygxuNPpsx7N5nw5silFLD%2FuGtvM5ebIYxVYmqGVkqFpAVW5qUzK6fAzCfKaZnvl9jwKc9HSYv9BXcop90gzuNFD73vKFjg%2F%2FBU25i0%2FU5qxQ1NOd%2BYmjYg4I7OY29P2%2FfPd35%2BKI1Iyff8G9KrScW%2FTqG8JjkZJCTiTYX0ZlyqS5wZ5Zb7P4YBoM855cJmtzFdswqx6DrygXal66o%3D&c=212946799964746944582384&n=Daa6dpZ%2FmS1I3u2RKJ5Wn%2By4FfUX8VQCa4jpViMvej85FyQjefSL5WIzLyxTW0eGGfkEctxKvYAWAd%2FxBIcgtCmGlqi%2FcWLZ84UcrROxKBjJq1oxbqembBWHdN9T%2BpfpXHjOpm79tt2oFNGepScM6GIQ9DBISQCt%2BM43SRGqR4utiockVkgjDD16CcJxHb6iZhTxuqXyiaWOkhBnfdrkphY2wWIvJZgCvrwzwVj2IS6QQt%2F6tL%2Fl5PeheGJl1DfHLhYjvMFadkmmMtC85AJozN1g2FIP2GhUIwlBYy8OTe75ccheWR4VRsMb%2F4DzvHdD7Nf2OXP6kRC%2FVA7IVtBobbJ4oHG%2FURYLP55LfYZDW6o8zx88%2BzL6lbE6oENb4Ci8P0X8JaOLXGmYlOBZFQzRIrr%2FE%2B%2FvdX7UdfDo55u62dyhP0C%2FbXuCY%2BJnLbUNrNL%2Bb2j7WBJ56u7kA0Rh4PbdI5B0V0A7yzoT9ae2Jm3iNceF1n272WqizQ4%2BTvJ1Pe39WZhaV4p0P03Ubzprxopg1l%2BdgU2W18eqFPRYAB96gfJzEqPmdd%2Btsi4c01PVaX8%2FpESSu9tOxWfNier65efUULkeeBl1DON06iSztYD1Ls0EgUbSjE51Z6NRe6gH3Fh5M3QVK4iE42JETEL%2FAYfRu%2Fz1%2FetzKyLrBUx0%2BUp0qGX%2Bz5iJmYObGz%2Fs547Tk6vx6G3%2FzsN7GMQpDh74Bs6BoIczBOkmtOcyMzcUOmD6m2fiyRQl%2BoXTS9uCc4DOmBHcznXqT4zvzMDX2EHyD9z8chNcoYWg0f60OK03tFm1r6v5SCVh%2BOPiSd%2B3vy9lu4Es73Sr9WtT2LEoJTNJ451foE7LWslENMa8xmQNnZXT9qnNcekaE3bq9fQLgq3OTY1YmwGJ1wXnbrtZ%2FVZ4gmU2IGKZMYTBts3N6N1odL6V%2FnWGvG8X5tpzIHvL6YIO2wrKIfeyq28AMjtDKbpJREjRVZ4efNegxr%2B736pB1ryK%2FgWkitFWqFV8DSYfg5IXNRNNPMK5ZdTnSBTcsBimciJhn6H3zz4X9t%2F1oI1TeITf5ydZJsQUVBIPZXqmqiGWwNzf&kgp=0&_opnslfp=1" target="_blank" class="list clearfix"> equals www.yahoo.com (Yahoo)
Source: chromecache_151.2.dr	String found in binary or memory: <a href="http://ifdnzact.com/trf?q=Pop+Up+Removal&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9QkQ1MDI3RDJCQTNDNDlDMSZ1dD0xNzIwNDU0MDU4ODI5JnVvPTczMzkyNzExMjU2MTk4Jmx0PTImcz0yJmVzPWh1eFVyc040bkFPQVczbUZ6cU01bkp5QlkwMnlmejhxWnZTVWxLdUo1OGlvbHc3UlBRQjZNMUJIeURaamtYSmt6aGJHTFp5Qk1yZG5Dc0Ut%2FRV%3D2%2FRE%3D1723046059%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8kIjMKm8Hh6EJgfo3HdVXcTVUCUzaeFlSG72k7R8Oax5f3BxQ4qWxJHorh5cNvwxgopEMIa-Rtcd1k2kQlaVT0P-Typ7SREb11TTOMtkuer1mCafO1CPBnnxr57TCY49KCPQmrwoH7Ru2D1zTBxQ1FfQtP6SYtHDDiUinCrPTtQp1KTSN%2526u%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%2526rlid%253d6f10edc2f7ae13dcd9028b4efc058b16%2FRK%3D2%2FRS%3DyoTpX0PINgb0QXd2R03E1MEupx4-&o=WXPWonuxTnKNXCUullVSGnPohZwgAneoFFkW67atOlywMv5wbPvb2CtUsAVOPbWg6hzCD7Mr4McK0VixPpfRbwYIqELrrVUejQ1uFUcxRniNPGNT30LVY3iWc38sgOpVNVsnlFxSEIVC56zvjKNS1KITBAKO8MmQ2eFctt0gtDEplVy84F6lyNWCkYNuDRSD6vXyYboPFubPFN5tulhwjbN%2BqHl7iOJZIJkY1QVc58uqzsg%2FJ3RqbYA0dRtrI76k03Juvfv1oHZ6IRn3OsOIBntd%2BwveyLHb0jVklsB09XQ1LMrgjAyu2TU6q6Dz%2BwV%2BYOmVrA7%2B6p4QcUNpBGU4bZGRumS0Nnbhjq1QHMnwek%2B56Q9%2BlqWlTPgsoSA0WHsWLFva6FXVkvvTNO5p1PFtywG5nEygxuNPpsx7N5nw5silFLD%2FuGtvM5ebIYxVYmqGVkqFpAVW5qUzK6fAzCfKaZnvl9jwKc9HSYv9BXcop90gzuNFD73vKFjg%2F%2FBU25i0%2FU5qxQ1NOd%2BYmjYg4I7OYwWCOQCkJStVpKY%2BIZXVKdl9Iqo9UMby7LkUy0liJyQ%2Bl%2BV6nN3v0UyG6KbW5ChpEQYR%2FvAJ3Tu2008%2BN7%2BboOg%3D&c=212946799964746944581416&n=Daa6dpZ%2FmS1I3u2RKJ5Wn%2By4FfUX8VQCa4jpViMvej85FyQjefSL5WIzLyxTW0eGGfkEctxKvYAWAd%2FxBIcgtCmGlqi%2FcWLZ84UcrROxKBjJq1oxbqembBWHdN9T%2BpfpXHjOpm79tt2oFNGepScM6GIQ9DBISQCt%2BM43SRGqR4utiockVkgjDD16CcJxHb6iZhTxuqXyiaWOkhBnfdrkphY2wWIvJZgCvrwzwVj2IS6QQt%2F6tL%2Fl5PeheGJl1DfHLhYjvMFadkmmMtC85AJozN1g2FIP2GhUIwlBYy8OTe4vx9rocFe5rzY0UWZrQ16mK2QKn3MdtbPZ7Alt48taOyx2IwSjGuVAUyPkoiT%2BPbmMxgl10z9Dchht968%2Ft69wV6USu9r3ydbdEECdDAQrgJhE5%2F2K5KwH56QbJfQh8qV2kqAPefu8lKZh%2B3TS6g8sRCtlXpXZ7VEAqVj5C6TydS6gyFT%2FBvyWj%2Bm1m06uHSItPjUaWmG23lgvAGb5d3BJEEVSyQxEMDTzkI1Qc171%2BY
Source: chromecache_160.2.dr	String found in binary or memory: <a href="http://ifdnzact.com/trf?q=Spam+Removal&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9OUREQ0E3MEMxNDUyNDMwQiZ1dD0xNzIwNDU0MDQwOTAxJnVvPTczMzkyNzExMjU2MTk4Jmx0PTImcz0yJmVzPVZ0TTN4UjExeU9lQ3dLaC5Uam9vblpsRnNsMHhKLjFBR3hUYnQ3YjlOR1FjRF9wcnVKekU2cW01YXlKZGdNalR1R05vZFAyMnQ1TWUwYUkt%2FRV%3D2%2FRE%3D1723046041%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8H69meK5L0BPogV39Nn07ETVUCUy8zaJfIHPV7aYCyys8W-8d6NsFeueh43gUTyTVg4wJKdOevsU0YhoAsxs91e4mYXgbwGlTbncEMHDiVolzhwZeVAeYQgUA8l3gya1f1XLjsNyMOSAwgF4XP7LGPSb4CdclWxHEPCPTItcXaN0EIJQd%2526u%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%2526rlid%253d7baf8320f03c13bec932e5acfba5d5cb%2FRK%3D2%2FRS%3D6WXaGeBb1VDWBBvVPHlBrfVwWvM-&o=WXPWonuxTnKNXCUullVSGnPohZwgAneoFFkW67atOlywMv5wbPvb2CtUsAVOPbWg6hzCD7Mr4McK0VixPpfRbwYIqELrrVUejQ1uFUcxRniNPGNT30LVY3iWc38sgOpVNVsnlFxSEIVC56zvjKNS1KITBAKO8MmQ2eFctt0gtDEplVy84F6lyNWCkYNuDRSD6vXyYboPFubPFN5tulhwjbN%2BqHl7iOJZIJkY1QVc58uqzsg%2FJ3RqbYA0dRtrI76k03Juvfv1oHZ6IRn3OsOIBntd%2BwveyLHb0jVklsB09XQ1LMrgjAyu2TU6q6Dz%2BwV%2BYOmVrA7%2B6p4QcUNpBGU4bZGRumS0Nnbhjq1QHMnwek%2B56Q9%2BlqWlTPgsoSA0WHsWLFva6FXVkvvTNO5p1PFtywG5nEygxuNPpsx7N5nw5silFLD%2FuGtvM5ebIYxVYmqGVkqFpAVW5qUzK6fAzCfKaZnvl9jwKc9HSYv9BXcop90gzuNFD73vKFjg%2F%2FBU25i0%2FU5qxQ1NOd%2BYmjYg4I7OY8iAz%2FweUE7SuCkPjcDN5EiWkhWSMUlUJfsllmVCnqVg9bdQGL5EEyMHQpRJa5MmgwgbckyEjyr4N4clN3IFTo8%3D&c=211946799962963117751715&n=LbB8Fm3xFqkljRWorj4aO8SSt7qLR6WVwfs5%2BQ5iDRhd8RBT7P%2B5EsnO990sPJHW3Oo%2BhKed29MLqW7lFsIRoclFX%2FACQyq9edt8Fr3iHmWwJZoA9frDhemK7fKopbz%2FnJoc%2BU%2FqP2pAgeR8Ja3VyFFfucrMI5LvR1oABMCoRMD%2BSZwvifXpNZ11plLtHqeAl%2FIILcps%2Fxwc6k9qsHMD9tTULm71PWlAHwJ%2FRWxds91lm9B%2B7uNjh3otwFgWKfpSwokVTW1TGRRgK7gFTtxT4lLAtMddf6IRBzphlqR42tn3nDUPCwBGgIS%2F2bH1gyMuoZvhd8D1nMenl9pyA%2FQFfa6H83os9y1GyuEOQM7097I%2FDRT4ZQGTq8ipa4f%2B%2FLwH2TAWn%2FV3H4H8O%2FSuQITznWV%2FNtdb3OYRqNLNkmPtFzKxEaT8pcXMH8ixj3mAiQtfSyqh8zkqYZglvOn7%2FRbAucc6423ApAb3jdsPHQvF0oT%2FnwSsVkMq3BRED9%2FzzGPu%2BnrVPk%2F2XWev
Source: chromecache_160.2.dr	String found in binary or memory: <a href="http://ifdnzact.com/trf?q=Spam+Removal&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9OUREQ0E3MEMxNDUyNDMwQiZ1dD0xNzIwNDU0MDQwOTAxJnVvPTczODA1MDI5MzkyMDMxJmx0PTImcz0yJmVzPXBzNW1iM1RTaHRYQUNUZjFRMGNSQjNWTzNPZHRaQXpqb1l2Z2RtVVhPbi5xaG1RN1E3dEx3ODhxRHJUbm1jWHFqWXFpRU44bkxtSTFOOE0t%2FRV%3D2%2FRE%3D1723046041%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8fxO1c49aQioinb4ZgdMGEzVUCUyxs6CdqtZAjwwjJziWi_dGPTj_YKfh7lc4soxgJ0LLIX7CBH2u59BzgSdBHMNnVcAeoxNKNcXsmh8HZLr9O2fGfYH73PkmYdfFfXHLP1SR3hYuhDGH62ic1BiGodpepy_uxEK-u08GIg3IF1qtM36u%2526u%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%2526rlid%253dafb60bead6f2169a130a6d66dd6bad01%2FRK%3D2%2FRS%3Dh9DclVxucLk8sqNbGVrrkQG05F0-&o=WXPWonuxTnKNXCUullVSGnPohZwgAneoFFkW67atOlywMv5wbPvb2CtUsAVOPbWg6hzCD7Mr4McK0VixPpfRbwYIqELrrVUejQ1uFUcxRniNPGNT30LVY3iWc38sgOpVNVsnlFxSEIVC56zvjKNS1KITBAKO8MmQ2eFctt0gtDEplVy84F6lyNWCkYNuDRSD6vXyYboPFubPFN5tulhwjbN%2BqHl7iOJZIJkY1QVc58uqzsg%2FJ3RqbYA0dRtrI76k03Juvfv1oHZ6IRn3OsOIBntd%2BwveyLHb0jVklsB09XQ1LMrgjAyu2TU6q6Dz%2BwV%2BYOmVrA7%2B6p4QcUNpBGU4bZGRumS0Nnbhjq1QHMnwek%2B56Q9%2BlqWlTPgsoSA0WHsWLFva6FXVkvvTNO5p1PFtywG5nEygxuNPpsx7N5nw5silFLD%2FuGtvM5ebIYxVYmqGVkqFpAVW5qUzK6fAzCfKaZnvl9jwKc9HSYv9BXcop90gzuNFD73vKFjg%2F%2FBU25i0%2FU5qxQ1NOd%2BYmjYg4I7OYxATvbePX3h1VHowC3aGNFaBkKR8VB6%2FEXBjo543W5KEGX%2FD2%2B5Z%2F5j2skYAxX2nJMAIGjkLoDZxSEM4GJJizd4%3D&c=21194679996296311775243&n=LbB8Fm3xFqkljRWorj4aO8SSt7qLR6WVwfs5%2BQ5iDRhd8RBT7P%2B5EsnO990sPJHW3Oo%2BhKed29MLqW7lFsIRoclFX%2FACQyq9edt8Fr3iHmWwJZoA9frDhemK7fKopbz%2FnJoc%2BU%2FqP2pAgeR8Ja3VyFFfucrMI5LvR1oABMCoRMD%2BSZwvifXpNZ11plLtHqeAl%2FIILcps%2Fxwc6k9qsHMD9tTULm71PWlAHwJ%2FRWxds91lm9B%2B7uNjh3otwFgWKfpSwokVTW1TGRRgK7gFTtxT4lLAtMddf6IRBzphlqR42tkoOPMAxUPSrgdo2Hz45A%2FX0CpqBcKb4Dm5iJqleOFtFU3jH%2FsnWuug8TiZiD0OUeL8B0zV%2BW23jlnttgz9LCt3jqK9WHo1O9w1%2FvEEbmOsiO6g6jxXZ96%2BE%2B%2B9P4lT8bNEvCLj76EoEijt0EanRhQxsKKl%2FNntLVljr0TFuvb5ORw5nUhppTk7osY9ethRPgO39RM%2B2poXq40EEyGnFu3K6uPucHQVUO9GlHH6lD2jWSD4ptV%2BmL4%2BNt9

Source: global traffic	DNS traffic detected: DNS query: le100.net
Source: global traffic	DNS traffic detected: DNS query: ifdnzact.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: delivery.consentmanager.net
Source: global traffic	DNS traffic detected: DNS query: cdn.consentmanager.net
Source: global traffic	DNS traffic detected: DNS query: a.delivery.consentmanager.net
Source: global traffic	DNS traffic detected: DNS query: i1.cdn-image.com
Source: global traffic	DNS traffic detected: DNS query: www.mydomaincontact.com
Source: global traffic	DNS traffic detected: DNS query: 206.23.85.13.in-addr.arpa
Source: global traffic	DNS traffic detected: DNS query: i2.cdn-image.com
Source: global traffic	DNS traffic detected: DNS query: i3.cdn-image.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 08 Jul 2024 15:53:42 GMTContent-Type: text/htmlContent-Length: 555Connection: closeServer: nginx/1.20.1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 08 Jul 2024 15:53:57 GMTServer: ApacheContent-Length: 10Keep-Alive: timeout=5, max=123Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 4e 6f 20 66 61 76 69 63 6f 6e Data Ascii: No favicon

Source: chromecache_130.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot
Source: chromecache_130.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix
Source: chromecache_130.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf
Source: chromecache_130.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold
Source: chromecache_130.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf
Source: chromecache_130.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Source: chromecache_130.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2
Source: chromecache_130.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot
Source: chromecache_130.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix
Source: chromecache_130.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf
Source: chromecache_130.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular
Source: chromecache_130.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf
Source: chromecache_130.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Source: chromecache_130.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2
Source: chromecache_130.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/js/min.js?v2.3
Source: chromecache_130.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/pics/28903/search.png)
Source: chromecache_130.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/pics/28905/arrrow.png)
Source: chromecache_130.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/pics/29590/bg1.png)
Source: chromecache_160.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot
Source: chromecache_160.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix
Source: chromecache_160.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf
Source: chromecache_160.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold
Source: chromecache_160.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf
Source: chromecache_160.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Source: chromecache_160.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2
Source: chromecache_160.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot
Source: chromecache_160.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix
Source: chromecache_160.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.otf
Source: chromecache_160.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.svg#montserrat-medium
Source: chromecache_160.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.ttf
Source: chromecache_160.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff
Source: chromecache_160.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff2
Source: chromecache_160.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot
Source: chromecache_160.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix
Source: chromecache_160.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf
Source: chromecache_160.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular
Source: chromecache_160.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf
Source: chromecache_160.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Source: chromecache_160.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2
Source: chromecache_160.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/js/min.js?v2.3
Source: chromecache_160.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/pics/28905/res-arw.png)
Source: chromecache_160.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/pics/28905/search.png)
Source: chromecache_160.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/pics/29590/bg1.png)
Source: chromecache_137.2.dr, chromecache_151.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot
Source: chromecache_137.2.dr, chromecache_151.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix
Source: chromecache_137.2.dr, chromecache_151.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf
Source: chromecache_137.2.dr, chromecache_151.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold
Source: chromecache_137.2.dr, chromecache_151.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf
Source: chromecache_137.2.dr, chromecache_151.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Source: chromecache_137.2.dr, chromecache_151.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2
Source: chromecache_137.2.dr, chromecache_151.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot
Source: chromecache_137.2.dr, chromecache_151.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix
Source: chromecache_137.2.dr, chromecache_151.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.otf
Source: chromecache_137.2.dr, chromecache_151.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.svg#montserrat-medium
Source: chromecache_137.2.dr, chromecache_151.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.ttf
Source: chromecache_137.2.dr, chromecache_151.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff
Source: chromecache_137.2.dr, chromecache_151.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff2
Source: chromecache_137.2.dr, chromecache_151.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot
Source: chromecache_137.2.dr, chromecache_151.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix
Source: chromecache_137.2.dr, chromecache_151.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf
Source: chromecache_137.2.dr, chromecache_151.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular
Source: chromecache_137.2.dr, chromecache_151.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf
Source: chromecache_137.2.dr, chromecache_151.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Source: chromecache_137.2.dr, chromecache_151.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2
Source: chromecache_137.2.dr, chromecache_151.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/js/min.js?v2.3
Source: chromecache_137.2.dr, chromecache_151.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/pics/28905/res-arw.png)
Source: chromecache_137.2.dr, chromecache_151.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/pics/28905/search.png)
Source: chromecache_137.2.dr, chromecache_151.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/pics/29590/bg1.png)
Source: chromecache_130.2.dr	String found in binary or memory: http://ifdnzact.com/Malware_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6A
Source: chromecache_130.2.dr	String found in binary or memory: http://ifdnzact.com/Pop_Up_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6Ax
Source: chromecache_130.2.dr	String found in binary or memory: http://ifdnzact.com/Spam_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHs
Source: chromecache_137.2.dr, chromecache_130.2.dr, chromecache_151.2.dr, chromecache_160.2.dr	String found in binary or memory: http://ifdnzact.com/display.cfm
Source: chromecache_137.2.dr	String found in binary or memory: http://ifdnzact.com/trf?q=Malware
Source: chromecache_151.2.dr	String found in binary or memory: http://ifdnzact.com/trf?q=Pop
Source: chromecache_160.2.dr	String found in binary or memory: http://ifdnzact.com/trf?q=Spam
Source: chromecache_119.2.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_119.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_119.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_163.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_163.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html
Source: chromecache_128.2.dr	String found in binary or memory: http://www.quirksmode.org/css/box.html
Source: chromecache_137.2.dr, chromecache_130.2.dr, chromecache_151.2.dr, chromecache_160.2.dr	String found in binary or memory: https://cdn.consentmanager.net
Source: chromecache_159.2.dr, chromecache_157.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_159.2.dr, chromecache_157.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_137.2.dr, chromecache_130.2.dr, chromecache_151.2.dr, chromecache_160.2.dr	String found in binary or memory: https://delivery.consentmanager.net
Source: chromecache_159.2.dr, chromecache_157.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_159.2.dr, chromecache_157.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_159.2.dr, chromecache_157.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_143.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Source
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7jsDJT9g.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7ksDJT9g.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7nsDI.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7osDJT9g.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7psDJT9g.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7qsDJT9g.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7rsDJT9g.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qN67lqDY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNK7lqDY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNa7lqDY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNq7lqDY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qO67lqDY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatS-qxLUv.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSGqxLUv.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSKqxLUv.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSOqxLUv.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSiqxLUv.woff2)
Source: chromecache_136.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSyqxA.woff2)
Source: chromecache_157.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_157.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_157.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_159.2.dr, chromecache_157.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_159.2.dr, chromecache_157.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_159.2.dr, chromecache_157.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_159.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_143.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?hl=en
Source: chromecache_159.2.dr, chromecache_127.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_159.2.dr, chromecache_157.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__.
Source: chromecache_127.2.dr, chromecache_176.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__en.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 61333 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61356 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61345
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61376 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61360
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61358
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61359
Source: unknown	Network traffic detected: HTTP traffic on port 61339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61345 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61356
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61357
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61360 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61361
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61367
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61357 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61372
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61373
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61374
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61375
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61376
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61377
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61375 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61346 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61355 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61334 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61341 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 61358 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61373 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61367 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61338 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61361 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61337
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61338
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61339
Source: unknown	Network traffic detected: HTTP traffic on port 61347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61334
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61335

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49724 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@23/123@34/13

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=2004,i,1048797239495983791,16973223025167226875,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://le100.net"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=2004,i,1048797239495983791,16973223025167226875,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://le100.net	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
https://support.google.com/recaptcha#6262736	0%	URL Reputation	safe
https://support.google.com/recaptcha/?hl=en#6223828	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
http://www.gnu.org/licenses/gpl-2.0.html	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://www.apache.org/licenses/	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
http://jquery.org/license	0%	URL Reputation	safe
http://sizzlejs.com/	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__.	0%	URL Reputation	safe
http://ifdnzact.com/Pop_Up_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6Ax	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.svg#montserrat-medium	0%	Avira URL Cloud	safe
http://ifdnzact.com/favicon.ico	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dle100.net%26pid%3D9PO755G95&&l=en&o=1720453999390	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FSpam_Removal.cfm&o=1720454046065&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14&	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/pics/29590/bg1.png)	0%	Avira URL Cloud	safe
https://www.mydomaincontact.com/forms/script.js	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api.js?hl=en	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/pics/28905/res-arw.png	0%	Avira URL Cloud	safe
https://www.mydomaincontact.com/forms/script-addon.js	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt	0%	Avira URL Cloud	safe
https://www.mydomaincontact.com/favicon.ico	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/pics/28905/arrrow.png)	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix	100%	Avira URL Cloud	malware
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot	0%	Avira URL Cloud	safe
http://www.quirksmode.org/css/box.html	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/pics/29590/bg1.png)	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.ttf	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/pics/29590/bg1.png	0%	Avira URL Cloud	safe
http://ifdnzact.com/display.cfm	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FMalware_Removal.cfm&o=1720454051591&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14&	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff	0%	Avira URL Cloud	safe
https://play.google.com/log?format=json&hasfast=true	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/pics/29590/bg1.png)	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	0%	Avira URL Cloud	safe
http://ifdnzact.com/px.js?ch=1	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold	0%	Avira URL Cloud	safe
http://ifdnzact.com/px.js?ch=2	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.svg#montserrat-medium	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/pics/28905/res-arw.png)	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FPop_Up_Removal.cfm&o=1720454060695&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14&	0%	Avira URL Cloud	safe
http://le100.net/favicon.ico	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.otf	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff	0%	Avira URL Cloud	safe
http://ifdnzact.com/trf?q=Spam	0%	Avira URL Cloud	safe
http://ifdnzact.com/Malware_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6A	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/pics/28905/search.png)	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=2&id=68884&o=1720454004&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dle100.net%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en	0%	Avira URL Cloud	safe
https://cdn.consentmanager.net	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=1&id=68884&o=1720454035&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dle100.net%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff2	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dle100.net%26pid%3D9PO755G95&&l=en&o=1720454033044	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff2	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix	0%	Avira URL Cloud	safe
https://cloud.google.com/contact	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.otf	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot	0%	Avira URL Cloud	safe
https://www.google.com/js/bg/afyAhS2Qsep4R8kB-t327Ct0yEitujmPfyHorrAGcXw.js	0%	Avira URL Cloud	safe
https://www.mydomaincontact.com/scripts/jquery.js	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf	0%	Avira URL Cloud	safe
http://ifdnzact.com/Spam_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHs	0%	Avira URL Cloud	safe
http://ifdnzact.com/trf?q=Pop	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=2&id=68884&o=1720454036&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dle100.net%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix	0%	Avira URL Cloud	safe
https://www.mydomaincontact.com/scripts/select2/select2.min.js	0%	Avira URL Cloud	safe
https://www.mydomaincontact.com/images/trust.svg	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/pics/28903/search.png)	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
i1.cdn-image.com	208.91.196.253	true	false	unknown
www.mydomaincontact.com	54.76.66.215	true	false	unknown
le100.net	185.53.179.170	true	false	unknown
1376624012.rsc.cdn77.org	156.146.33.15	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
i3.cdn-image.com	208.91.196.253	true	false	unknown
a.delivery.consentmanager.net	87.230.98.78	true	false	unknown
i2.cdn-image.com	208.91.196.253	true	false	unknown
www.google.com	142.250.186.36	true	false	unknown
ifdnzact.com	208.91.196.46	true	true	unknown
delivery.consentmanager.net	87.230.98.78	true	false	unknown
windowsupdatebg.s.llnwi.net	87.248.204.0	true	false	unknown
cdn.consentmanager.net	unknown	unknown	false	unknown
206.23.85.13.in-addr.arpa	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://ifdnzact.com/favicon.ico	true	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FSpam_Removal.cfm&o=1720454046065&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14&	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dle100.net%26pid%3D9PO755G95&&l=en&o=1720453999390	false	Avira URL Cloud: safe	unknown
https://www.mydomaincontact.com/forms/script.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api.js?hl=en	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/pics/28905/res-arw.png	false	Avira URL Cloud: safe	unknown
https://www.mydomaincontact.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.mydomaincontact.com/forms/script-addon.js	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/pics/29590/bg1.png	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FMalware_Removal.cfm&o=1720454051591&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14&	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff	false	Avira URL Cloud: safe	unknown
http://ifdnzact.com/px.js?ch=1	true	Avira URL Cloud: safe	unknown
http://ifdnzact.com/px.js?ch=2	true	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/bframe?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&k=6LfbieIZAAAAAP0ROP-R-UOaui3c-7SDJ_GhtUsh	false		unknown
https://www.mydomaincontact.com/index.php?domain_name=le100.net	false		unknown
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FPop_Up_Removal.cfm&o=1720454060695&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14&	false	Avira URL Cloud: safe	unknown
http://le100.net/favicon.ico	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=2&id=68884&o=1720454004&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dle100.net%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=1&id=68884&o=1720454035&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dle100.net%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dle100.net%26pid%3D9PO755G95&&l=en&o=1720454033044	false	Avira URL Cloud: safe	unknown
https://www.mydomaincontact.com/scripts/jquery.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/js/bg/afyAhS2Qsep4R8kB-t327Ct0yEitujmPfyHorrAGcXw.js	false	Avira URL Cloud: safe	unknown
http://le100.net/	false		unknown
https://www.mydomaincontact.com/scripts/select2/select2.min.js	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=2&id=68884&o=1720454036&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dle100.net%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en	false	Avira URL Cloud: safe	unknown
https://www.mydomaincontact.com/images/trust.svg	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.svg#montserrat-medium	chromecache_160.2.dr	false	Avira URL Cloud: safe	unknown
http://ifdnzact.com/Pop_Up_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6Ax	chromecache_130.2.dr	true	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_159.2.dr, chromecache_157.2.dr	false	URL Reputation: safe	unknown
http://i1.cdn-image.com/__media__/pics/29590/bg1.png)	chromecache_130.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	chromecache_130.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	chromecache_160.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha#6262736	chromecache_159.2.dr, chromecache_157.2.dr	false	URL Reputation: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	chromecache_160.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_159.2.dr, chromecache_157.2.dr	false	URL Reputation: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf	chromecache_160.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf	chromecache_130.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	chromecache_137.2.dr, chromecache_151.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_159.2.dr, chromecache_157.2.dr	false	URL Reputation: safe	unknown
http://www.gnu.org/licenses/gpl-2.0.html	chromecache_163.2.dr	false	URL Reputation: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf	chromecache_137.2.dr, chromecache_151.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix	chromecache_137.2.dr, chromecache_151.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold	chromecache_130.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/pics/28905/arrrow.png)	chromecache_130.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix	chromecache_160.2.dr	false	Avira URL Cloud: malware	unknown
http://www.quirksmode.org/css/box.html	chromecache_128.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_157.2.dr	false	URL Reputation: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	chromecache_137.2.dr, chromecache_151.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/pics/29590/bg1.png)	chromecache_137.2.dr, chromecache_151.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot	chromecache_137.2.dr, chromecache_151.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot	chromecache_130.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.ttf	chromecache_137.2.dr, chromecache_151.2.dr	false	Avira URL Cloud: safe	unknown
https://www.apache.org/licenses/	chromecache_159.2.dr, chromecache_157.2.dr	false	URL Reputation: safe	unknown
http://ifdnzact.com/display.cfm	chromecache_137.2.dr, chromecache_130.2.dr, chromecache_151.2.dr, chromecache_160.2.dr	true	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular	chromecache_160.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_159.2.dr, chromecache_157.2.dr	false	URL Reputation: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	chromecache_130.2.dr	false	Avira URL Cloud: safe	unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_157.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf	chromecache_137.2.dr, chromecache_151.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	chromecache_137.2.dr, chromecache_151.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/pics/29590/bg1.png)	chromecache_160.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	chromecache_160.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf	chromecache_130.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold	chromecache_160.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	chromecache_130.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/pics/28905/res-arw.png)	chromecache_137.2.dr, chromecache_151.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.svg#montserrat-medium	chromecache_137.2.dr, chromecache_151.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix	chromecache_160.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.otf	chromecache_137.2.dr, chromecache_151.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix	chromecache_130.2.dr	false	Avira URL Cloud: safe	unknown
http://ifdnzact.com/trf?q=Spam	chromecache_160.2.dr	true	Avira URL Cloud: safe	unknown
http://jquery.org/license	chromecache_119.2.dr	false	URL Reputation: safe	unknown
http://i3.cdn-image.com/__media__/pics/28905/search.png)	chromecache_137.2.dr, chromecache_151.2.dr	false	Avira URL Cloud: safe	unknown
http://ifdnzact.com/Malware_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6A	chromecache_130.2.dr	true	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff2	chromecache_137.2.dr, chromecache_151.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.consentmanager.net	chromecache_137.2.dr, chromecache_130.2.dr, chromecache_151.2.dr, chromecache_160.2.dr	false	Avira URL Cloud: safe	unknown
http://sizzlejs.com/	chromecache_119.2.dr	false	URL Reputation: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff2	chromecache_160.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix	chromecache_160.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular	chromecache_130.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/contact	chromecache_159.2.dr, chromecache_157.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.otf	chromecache_160.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot	chromecache_130.2.dr	false	Avira URL Cloud: safe	unknown
http://ifdnzact.com/Spam_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHs	chromecache_130.2.dr	true	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf	chromecache_137.2.dr, chromecache_151.2.dr	false	Avira URL Cloud: safe	unknown
http://ifdnzact.com/trf?q=Pop	chromecache_151.2.dr	true	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix	chromecache_130.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf	chromecache_160.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot	chromecache_137.2.dr, chromecache_151.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix	chromecache_137.2.dr, chromecache_151.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot	chromecache_160.2.dr	false	Avira URL Cloud: safe	unknown
https://www.gstatic.c..?/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__.	chromecache_159.2.dr, chromecache_157.2.dr	false	URL Reputation: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf	chromecache_130.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/pics/28903/search.png)	chromecache_130.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
99.80.85.24	unknown	United States	16509	AMAZON-02US	false
156.146.33.15	1376624012.rsc.cdn77.org	United States	3743	ARCEL-2US	false
87.230.98.78	a.delivery.consentmanager.net	Germany	61157	PLUSSERVER-ASN1DE	false
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
172.217.18.4	unknown	United States	15169	GOOGLEUS	false
208.91.196.46	ifdnzact.com	Virgin Islands (BRITISH)	40034	CONFLUENCE-NETWORK-INCVG	true
208.91.196.253	i1.cdn-image.com	Virgin Islands (BRITISH)	40034	CONFLUENCE-NETWORK-INCVG	false
185.53.179.170	le100.net	Germany	61969	TEAMINTERNET-ASDE	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.164	unknown	United States	15169	GOOGLEUS	false
54.76.66.215	www.mydomaincontact.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1469255
Start date and time:	2024-07-08 17:52:17 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 38s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://le100.net
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@23/123@34/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.mydomaincontact.com/index.php?domain_name=le100.net Browse: http://le100.net/ Browse: http://ifdnzact.com/Spam_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%2FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%2BD6EslT4YXZEgi5MQZoS4%2BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%2FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%2BF%2FqfFDeim2hVuLdV2hx9V%2F15hYqnNxwr7w%2FxJkFs&yep=kYWX2UB9hpPluHNh59n0TG5bw0%2FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%2FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%2FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%2Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%2B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%2FqYu%2FBmO%2BefvXO46i%2BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%2BZbCkucnl%2BKaGVQ4CSuga7KRLSemy%2FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%2F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%2FCiWxSUGpEEgdBffigSWf9bQ%2BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%2BRbYTMJnnWjleatxujX%2BIiC4edOKDRJ%2FnR1G4wl1D1zw1q7mWlz%2F%2FnAQ9gKAY08BXIzyLlH48v3xyIw5TB6bHJNQMOLDDEDb5Vn77S96JwQqQ58V9YV3Zs2fQx0LpXi%2Fv3R2KtwFytIci4LYt%2BfLYqlKC%2FZw%2B%2BxXbfeWCD1n0%2BunmHv1QoTf%2Fp7BcNmC7DcfCienIs6Am8IwxZ872y4DiNhFM2SK1Q9eF1RdxIUHt6Km6G2w96DxX1ZU%2BNeA70x%2Bm4TMzA7oDST7GRHEURKQxQ7GU0X%2BT4hpg6YRtVfTDnslnqgYyxa8LvjhqfxnGCrDqp1vWtl%2F%2Fc9fLOHx8fGBmD7Uo7Gp2w9IKwB6t4iC81jYFMx7xV6DxL6vMlDarDP6FCNM2k561vom%2BbqEPC3OfD5eCbb0H9De8PXIaD6wU4xgzvPe%2B6B5knbXTuIIX2ozx66y0xP4nKFkVd91QdhcD%2BXEol%2F99%2FsQafCY7WUeN%2Bx6Hwulv0hhCI%2B5em7Yp%2BMJ%2FYKYvsq9d0GlCivuYqYS04L7SL%2BZTMxZZFdZG3tePDSjj9mL7MpGjQyev1bF7S58DLMYiV3Q2a5RBnSADaGeoWnw7YeXIi43VbqA6%2FzdJgHJ818%2B3e2Y3vbvAawlN7DkXi40YRs2hDrwUoOMqjwYHZYkrxjb1X5IIDg%2Bdne6mXH5A811F5oyaUovL6pl5HtJJWkeraD6o0KyEn%2BdGNOdOLtOiy7N39pIS0bqV0fgrbQrYWQR7K5uKBEoembXLwrInLJwprm3y0xKx8mG5WXstRuIyZk3O8%2Bnxbq6RajzTPe6eNfgpo1hfQ5oh5FFrEF%2BNojERDyxBu%2FaRkUitODbjEFQ2l1mWSfy19%2Fh5k0jOI85K2D6ytDApmEOihBDMJGfBgZ5t9gX2bvLHqKK0nbqzTVSSWbaKreNaYnWV6eCq98QpUCJdgzXSf4bui5n4WP9j5alhTpx2dmsU2bZoycPp%2B%2FaNoseGTxynF2x2Z4pIdzxHKeNnUQbcfsJ%2BwV3C2eGdlU%2BXCtVCXWA872QN0xrGrCHwoadWZv7Ej0F0CAVjEuU1ltCmpBzpr%2BM3urle0wmVKbbEdui3YiW4OyVaxaqksIoWU4ouvxCRY%3D&gtnp=0&gtpp=0&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=IJ5nQJGTrpCE11CZHx4nYrlGNK0IrtJ2pxxwJPNmewE%3D&&gtnp=0&gtpp=0&kt=246&&kbc=10191&ki=26680690&ktd=0&kld=1063&kp=1&bd=-4%231024%231280%231%230 Browse: http://ifdnzact.com/Malware_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%2FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%2BD6EslT4YXZEgi5MQZoS4%2BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%2FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%2BF%2FqfFDeim2hVuLdV2hx9V%2F15hYqnNxwr7w%2FxJkFs&yep=kYWX2UB9hpPluHNh59n0TG5bw0%2FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%2FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%2FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%2Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%2B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%2FqYu%2FBmO%2BefvXO46i%2BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%2BZbCkucnl%2BKaGVQ4CSuga7KRLSemy%2FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%2F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%2FCiWxSUGpEEgdBffigSWf9bQ%2BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%2BRbYTMJnnWjleatxujX%2BIiC4edOKDRJ%2FnR1G4wl1D1zw1q7mWlz%2F%2FnAQ9gKAY08BXIzyLlH48v3xyIw5TB6bHJNQMOLDDEDb5Vn77S96JwQqQ58V9YV3Zs2fQx0LpXi%2Fv3R2KtwFytIci4LYt%2BfLYqlKC%2FZw%2B%2BxXbfeWCD1n0%2BunmHv1QoTf%2Fp7BcNmC7DcfCienIs6Am8IwxZ872y4DiNhFM2SK1Q9eF1RdxIUHt6Km6G2w96DxX1ZU%2BNeA70x%2Bm4TMzA7oDST7GRHEURKQxQ7GU0X%2BT4hpg6YRtVfTDnslnqgYyxa8LvjhqfxnGCrDqp1vWtl%2F%2Fc9fLOHx8fGBmD7Uo7Gp2w9IKwB6t4iC81jYFMx7xV6DxL6vMlDarDP6FCNM2k561vom%2BbqEPC3OfD5eCbb0H9De8PXIaD6wU4xgzvPe%2B6B5knbXTuIIX2ozx66y0xP4nKFkVd91QdhcD%2BXEol%2F99%2FsQafCY7WUeN%2Bx6Hwulv0hhCI%2B5em7Yp%2BMJ%2FYKYvsq9d0GlCivuYqYS04L7SL%2BZTMxZZFdZG3tePDSjj9mL7MpGjQyev1bF7S58DLMYiV3Q2a5RBnSADaGeoWnw7YeXIi43VbqA6%2FzdJgHJ818%2B3e2Y3vbvAawlN7DkXi40YRs2hDrwUoOMqjwYHZYkrxjb1X5IIDg%2Bdne6mXH5A811F5oyaUovL6pl5HtJJWkeraD6o0KyEn%2BdGNOdOLtOiy7N39pIS0bqV0fgrbQrYWQR7K5uKBEoembXLwrInLJwprm3y0xKx8mG5WXstRuIyZk3O8%2Bnxbq6RajzTPe6eNfgpo1hfQ5oh5FFrEF%2BNojERDyxBu%2FaRkUitODbjEFQ2l1mWSfy19%2Fh5k0jOI85K2D6ytDApmEOihBDMJGfBgZ5t9gX2bvLHqKK0nbqzTVSSWbaKreNaYnWV6eCq98QpUCJdgzXSf4bui5n4WP9j5alhTpx2dmsU2bZoycPp%2B%2FaNoseGTxynF2x2Z4pIdzxHKeNnUQbcfsJ%2BwV3C2eGdlU%2BXCtVCXWA872QN0xrGrCHwoadWZv7Ej0F0CAVjEuU1ltCmpBzpr%2BM3urle0wmVKbbEdui3YiW4OyVaxaqksIoWU4ouvxCRY%3D&gtnp=0&gtpp=0&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=IJ5nQJGTrpCE11CZHx4nYrlGNK0IrtJ2pxxwJPNmewE%3D&&gtnp=0&gtpp=0&kt=246&&kbc=10191&ki=18327822&ktd=0&kld=1063&kp=2&bd=-4%231024%231280%231%230 Browse: http://ifdnzact.com/Pop_Up_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%2FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%2BD6EslT4YXZEgi5MQZoS4%2BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%2FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%2BF%2FqfFDeim2hVuLdV2hx9V%2F15hYqnNxwr7w%2FxJkFs&yep=kYWX2UB9hpPluHNh59n0TG5bw0%2FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%2FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%2FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%2Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%2B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%2FqYu%2FBmO%2BefvXO46i%2BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%2BZbCkucnl%2BKaGVQ4CSuga7KRLSemy%2FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%2F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%2FCiWxSUGpEEgdBffigSWf9bQ%2BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%2BRbYTMJnnWjleatxujX%2BIiC4edOKDRJ%2FnR1G4wl1D1zw1q7mWlz%2F%2FnAQ9gKAY08BXIzyLlH48v3xyIw5TB6bHJNQMOLDDEDb5Vn77S96JwQqQ58V9YV3Zs2fQx0LpXi%2Fv3R2KtwFytIci4LYt%2BfLYqlKC%2FZw%2B%2BxXbfeWCD1n0%2BunmHv1QoTf%2Fp7BcNmC7DcfCienIs6Am8IwxZ872y4DiNhFM2SK1Q9eF1RdxIUHt6Km6G2w96DxX1ZU%2BNeA70x%2Bm4TMzA7oDST7GRHEURKQxQ7GU0X%2BT4hpg6YRtVfTDnslnqgYyxa8LvjhqfxnGCrDqp1vWtl%2F%2Fc9fLOHx8fGBmD7Uo7Gp2w9IKwB6t4iC81jYFMx7xV6DxL6vMlDarDP6FCNM2k561vom%2BbqEPC3OfD5eCbb0H9De8PXIaD6wU4xgzvPe%2B6B5knbXTuIIX2ozx66y0xP4nKFkVd91QdhcD%2BXEol%2F99%2FsQafCY7WUeN%2Bx6Hwulv0hhCI%2B5em7Yp%2BMJ%2FYKYvsq9d0GlCivuYqYS04L7SL%2BZTMxZZFdZG3tePDSjj9mL7MpGjQyev1bF7S58DLMYiV3Q2a5RBnSADaGeoWnw7YeXIi43VbqA6%2FzdJgHJ818%2B3e2Y3vbvAawlN7DkXi40YRs2hDrwUoOMqjwYHZYkrxjb1X5IIDg%2Bdne6mXH5A811F5oyaUovL6pl5HtJJWkeraD6o0KyEn%2BdGNOdOLtOiy7N39pIS0bqV0fgrbQrYWQR7K5uKBEoembXLwrInLJwprm3y0xKx8mG5WXstRuIyZk3O8%2Bnxbq6RajzTPe6eNfgpo1hfQ5oh5FFrEF%2BNojERDyxBu%2FaRkUitODbjEFQ2l1mWSfy19%2Fh5k0jOI85K2D6ytDApmEOihBDMJGfBgZ5t9gX2bvLHqKK0nbqzTVSSWbaKreNaYnWV6eCq98QpUCJdgzXSf4bui5n4WP9j5alhTpx2dmsU2bZoycPp%2B%2FaNoseGTxynF2x2Z4pIdzxHKeNnUQbcfsJ%2BwV3C2eGdlU%2BXCtVCXWA872QN0xrGrCHwoadWZv7Ej0F0CAVjEuU1ltCmpBzpr%2BM3urle0wmVKbbEdui3YiW4OyVaxaqksIoWU4ouvxCRY%3D&gtnp=0&gtpp=0&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=IJ5nQJGTrpCE11CZHx4nYrlGNK0IrtJ2pxxwJPNmewE%3D&&gtnp=0&gtpp=0&kt=246&&kbc=10191&ki=22821918&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.227, 142.250.185.174, 74.125.206.84, 34.104.35.123, 40.127.169.103, 87.248.204.0, 142.250.181.234, 192.229.221.95, 142.250.186.35, 142.250.186.67, 13.95.31.18, 172.217.16.138, 142.250.185.138, 142.250.186.106, 172.217.16.202, 172.217.18.10, 142.250.186.74, 142.250.185.106, 142.250.184.202, 142.250.185.170, 142.250.186.42, 142.250.185.234, 142.250.185.202, 216.58.212.138, 142.250.186.170, 142.250.186.138, 216.58.206.67, 142.250.185.67, 172.217.16.195, 13.85.23.206, 13.85.23.86, 142.250.185.195, 199.232.214.172
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, fonts.gstatic.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://le100.net

Input	Output
URL: http://le100.net/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage title 'le100.net' does not contain any indication of a login form.","The webpage text 'Buy this domaim LelOO.net' does not create a sense of urgency or interest.","There is no CAPTCHA or anti-robot detection mechanism present on the webpage."]}
Title: le100.net OCR: Buy this domaim LelOO.net Related Searches: Spam Removal Malware Removal Pop Up Removal Privacy Po'ic;
URL: https://www.mydomaincontact.com/index.php?domain_name=le100.net Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, as it only requests the user's name, email address, phone number, company, website, price offer, and a consent checkbox.","The text does not create a sense of urgency, as it simply states that the domain is for sale and invites the user to fill out a form to make an offer.","There is no CAPTCHA or anti-robot detection mechanism present on the webpage."]}
Title: Sale offer for: le100.net OCR: LEIOO.NET If you want to buy this domain, please fill out this form. Name E-Mail Address Repeat E-Mail Address Phone (optional) Company (optional) Website (optional) Price Offer USD Comment C) I consent having this website store and process my submitted information in order to deliver my inquiry. Submit
URL: https://www.mydomaincontact.com/index.php?domain_name=le100.net Model: Perplexity: mixtral-8x7b-instruct	{"loginform": true,"urgency": false,"captcha": false,"reasons": ["The webpage contains a form that explicitly requests sensitive information such as email addresses, usernames, phone numbers and a price offer, which can be classified as a login form.","The text does not create a sense of urgency or interest as it does not contain phrases such as 'click here to view document' or 'open the link to see your invoice'","There is no CAPTCHA or anti-robot detection mechanism present on the webpage."]}
Title: Sale offer for: le100.net OCR: LEIOO.NET If you want to buy this domain, please fill out this form. Name E-Mail Address Repeat E-Mail Address Phone (optional) Company (optional) Website (optional) Price Offer USD Comment C) I consent having this website store and process my submitted information in order to deliver my inquiry. I'm not a Submit
URL: https://www.mydomaincontact.com Model: gpt-4o	```json{ "phishing_score": 2, "brands": null, "phishing": false, "suspicious_domain": false, "has_prominent_loginform": false, "has_captcha": true, "setechniques": false, "has_suspicious_link": false, "legitmate_domain": "mydomaincontact.com", "reasons": "The URL 'https://www.mydomaincontact.com' does not appear suspicious and matches the context of the page, which is about contacting for domain purchase. The page includes a CAPTCHA, which is a positive sign of legitimacy. There are no prominent login, password, or email fields that are typically targeted in phishing attacks. The form fields are consistent with a domain purchase inquiry form. There are no suspicious links or social engineering techniques evident in the image. Therefore, based on the available evidence, the site appears to be legitimate."}

URL: http://ifdnzact.com/Spam_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%2FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%2BD6EslT4YXZE Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": true,"captcha": false,"reasons": ["The text contains a sense of urgency by offering to remove viruses and spyware from the user's PC.","The text also uses phrases such as 'AVG FREE ANTIVIRUS 2024' and 'Avast Free Antivirus' to create interest and encourage users to download the software."]}
Title: Le100.net OCR: LelOO.net Ads for "Spam Removal" AVG FREE ANTIVIRUS 2024 - REMOVE VIRUSES FROM YOUR PC vmw.avgcom/tree/antivirus Stops viruses, spyware, malware and ransomware with six powerful layers at pratectiarm Free Forever - Fast & Easy Antivirus Software. Download AVG Antivirus. SEE IT AVAST FREE ANTIVIRUS 2024 - ANTI-MALWARE & ANTI-SPYWARE wwmavastcom Fast, lightweight and easy to use Scan your Mac with one click. Dawnlaad Free. Antivirus packed with the largest threat- detection network that won't slow dawn your Mac SEE IT
URL: http://ifdnzact.com/Malware_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%2FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%2BD6EslT4Y Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": true,
Title: Le100.net OCR: LelOO.net Ads for "Malware Removal" MALWAREBYTES.COM - CHECK FOR MALWARE try.malwarebytes.com/free/malware-remover Malware can be found everywhere on the web, even the websites you think are most safe Malware can slow dawn or completely disable your device. Cet protected with Malwarebytes. SEE IT BITDEFENDER SECURITY SOFTWARE - BITDEFENDERTM OFFICIAL WEBSITE uw.n.v.bitdefender.com Buy Naw And Cet Cybersecurity that Protects Millions Of Consumer Environments Since 2001. Cet The Best Cybersecurity For Your Devices With Our Bitdefender Product Of The Year! SEE IT	{"loginform": false,"urgency": true,
URL: http://ifdnzact.com/Pop_Up_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%2FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%2BD6EslT4YX Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": true,
Title: Le100.net OCR: LelOO.net Ads for "Pop up Removal' AVG FREE ANTIVIRUS 2024 - REMOVE VIRUSES FROM YOUR PC vmw.avgcom/tree/antivirus Stops viruses, spyware, malware and ransomware with six powerful layers at pratectiarm Free Forever - Fast & Easy Antivirus Software. Download AVG Antivirus. SEE IT MALWAREBYTES.COM - FREE MALWARE CHECK & REMOVAL trymalwarebytes.com/free/malware-remcwer Malware can slaw down or completely disable your device. Cet protected with Malwarebytes Malwarebytes can detect the most recent malware - even where others fail. Cet secure. SEE IT	{"loginform": false,"urgency": true,
URL: http://ifdnzact.com Model: gpt-4o	```json{ "phishing_score": 8, "brands": "AVG, Avast", "phishing": true, "suspicious_domain": true, "has_prominent_loginform": false, "has_captcha": false, "setechniques": true, "has_suspicious_link": true, "legitmate_domain": "avg.com, avast.com", "reasons": "The URL 'http://ifdnzact.com' does not match the legitimate domains for AVG (avg.com) or Avast (avast.com). The site prominently features links to 'SEE IT' which could be used to mislead users into clicking on potentially harmful links. The domain name is suspicious and does not correspond to the legitimate brand names. The use of social engineering techniques, such as offering free antivirus software, is evident. There is no prominent login form or captcha, but the overall setup and domain name strongly suggest a phishing attempt."}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jul 8 14:53:16 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9842620161077025
Encrypted:	false
SSDEEP:	48:8sdOTq6EHXZidAKZdA19ehwiZUklqehAy+3:8RTIr/y
MD5:	1BE8BE177A34D81954983E1B5854DCDC
SHA1:	6FFEA5925E5530C5A1AD7FE5E9DF07DC00FEBA26
SHA-256:	7909A1411E0EE5A5B47EA3C93880474AE2D92E700CB1E4A25FB0CF13BC22DDE3
SHA-512:	796A5DB59F70DE9EE52ABCB6735A5DEC048F717E1AB947247E573C67ADEE7E072EF2EBBAE94DCDA5943F60A32B25AB0E889867F06D19EACCA591B3CC9700E8DE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....A/v.N...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.~....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.~....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.~....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.~..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.~...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jul 8 14:53:16 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9980572516829347
Encrypted:	false
SSDEEP:	48:8LLdOTq6EHXZidAKZdA1weh/iZUkAQkqehvy+2:8L4TIZ9Q+y
MD5:	69EB5F0F3273CAF2A87DAE675BCD4F65
SHA1:	82A869BF65B9F73DF6BF97DC5AD5EF406CB8FA54
SHA-256:	9533F942B7B10793E3D4BE8D40732ACAC9817561532BB0639C7343BA2A4D5A7C
SHA-512:	0CF0468A5CA9C1A1360C30B50BE304C6A712D176D7082FB143DB5523FC2C33B1A8FFB2B97DECCBAFF6B8B662CAA59EEED47855ADEB14D32F9F2DE9EA51953E2E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...../h.N...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.~....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.~....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.~....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.~..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.~...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.008158601941822
Encrypted:	false
SSDEEP:	48:8xjdOTq6sHXZidAKZdA14tseh7sFiZUkmgqeh7sVy+BX:8xQTApnLy
MD5:	978B5BC100AF1ED71C666307A7F2459F
SHA1:	646CA90FB9147000EA8257EB43ACE9AC7EB61D15
SHA-256:	927E4181165B5A9B750BEF60799F33B339542BF237E8FD5DEB418FF961CED9A9
SHA-512:	EB4994F222B3BBED3DD2F9253880F3D979A86E0EF5D53D2F13CF765B256E0A6B74E8953371CACAD1D4AF0F76604E4E86AA8B5BE7FF6E37EBCDA0DDEC1E25DEF0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.~....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.~....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.~....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.~..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jul 8 14:53:16 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9972776785138864
Encrypted:	false
SSDEEP:	48:8WdOTq6EHXZidAKZdA1vehDiZUkwqehjy+R:8/TI6ty
MD5:	7DBA81A92651C457EB72D5690FC32D45
SHA1:	B5FF5B92B9A13EA86E984D22A0058992750FF3CF
SHA-256:	A2ECC052F950A04A48FA165A4D9F798DCB70D9452110899EE737F30B382F671C
SHA-512:	8BFB752709B86DD4D4AE874DAEE18ADC266D73F1149255D56E4414BBD117C03046E9B11292E4F250FF772053FD650A73A2AC5B351181EC936036254011C9D1B9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......b.N...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.~....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.~....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.~....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.~..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.~...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jul 8 14:53:16 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.986017203588128
Encrypted:	false
SSDEEP:	48:80dOTq6EHXZidAKZdA1hehBiZUk1W1qehBy+C:8ZTI69hy
MD5:	72D20AA163A57AC76A84A6612AC54C72
SHA1:	DD01F3E0D0776EB889937CF89A023A7AD0160AFC
SHA-256:	F697934A5C90A7E9B601D581ED8CCD308F896F3A2ED0795AF00A0F5F78BC8F0C
SHA-512:	F6F8897915BC935DDBF6998E4C253152943B8745389A620497B7E8159AFC579B146EB3E9DBE2334AEF2647223F4AC567895A21B416C54A5FF9C4AD8376350BB7
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....1n.N...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.~....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.~....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.~....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.~..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.~...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jul 8 14:53:16 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9980831980265217
Encrypted:	false
SSDEEP:	48:8NdOTq6EHXZidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbLy+yT+:8OTIET/TbxWOvTbLy7T
MD5:	268839A2629B6A76A5B9391ECE67983E
SHA1:	46142B8F833EB0DCD1E147FB912D2CF971F912B9
SHA-256:	6E7F89E95FA054EF5DE1BF2676128FD74EC720158E0EAE577F455CCB1B02807E
SHA-512:	0CBA4FE4B1E2F7DEA21E4CD7BAB25BC256C1048FD1716C350293CE13F4607854E67C13B28202F273D3374A0FBF1319959FFD85D390D0787E627F08B0E846F237
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....(Y.N...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.~....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.~....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.~....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.~..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.~...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (346), with no line terminators
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	5.00818604439199
Encrypted:	false
SSDEEP:	6:qIZmJNsVwbDRWPWG3mV/R7cjTDEG5OQRoYxHSNHbMFKdCuFxXcvH3eVP4SzpF9yc:+JG0DRWZmX7OPrRNwN7MFMCu/cvOVQSl
MD5:	F84F931C0DD37448E03F0DABF4E4CA9F
SHA1:	9C2C50EDCF576453CCC07BF65668BD23C76E8663
SHA-256:	5C1D5FD46A88611C31ECBB8FFC1142A7E74EC7FB7D72BD3891131C880EF3F584
SHA-512:	AFC3089D932FB030E932BF6414AC05681771051DD51D164F09635CA09CBD8525A52879524B6AA24E972E7766DDF529484CC1EC416DE8B61255435A89BA781F8C
Malicious:	false
Reputation:	low
URL:	http://ifdnzact.com/px.js?ch=1
Preview:	var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 34 x 29, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	346
Entropy (8bit):	6.229840441641423
Encrypted:	false
SSDEEP:	6:6v/lhPwtz4nDLl9W0y37CpH0xVc4kSbOaWdgR38C+ogSM4bXBxqy3ytDdp:6v/7SML/rp627SbVcoXrbXnqzH
MD5:	FF018650CBB4B192CCD337C6C9478D1E
SHA1:	D6409B6DF8F0B929E8D5C7F9F49F4FBABACDC0DC
SHA-256:	C5EA92061AA96E1E5AEBFE0714F3383A02BEF2ED7A584D0493841573B653E8C6
SHA-512:	2C88089E0AC3EA8AA93AD5E643AC01F77A727DFA2E28843ED436ADC2E96E32F0F0BA5EB17F70F4D039B70C4A1E106D2AE24A2BA1D4E5ADAEFB90E4B456E944F1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..."...........N....EPLTEGpL..................................................................W.4.....tRNS.Q...!0....r..>~.._...O#.....IDAT(..... ...A..j..Q7..N...w..4Q.~..+.0443.......&A.?.X..<.b.Q..h.....Fb]0..\..u!....M#.2......~L.H.v.c.7.N....n......@.......7...m...$\.K'..M\..TjG.%G.._...\XjU..cP .{4......IEND.B`.

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 33316, version 1.0
Category:	downloaded
Size (bytes):	33316
Entropy (8bit):	7.982608626186682
Encrypted:	false
SSDEEP:	768:KCJR7w4XrSWY4xX0FasJv6BSivTSweHDwy0TADXWxdhSZn++l:K27w+rSWY+0oaC0ivGHDwfMLWPhL+l
MD5:	0A550368742E4B4063C90C6F73EAA16A
SHA1:	74A970F23B23EC1208B39DB0515579906F2B8D89
SHA-256:	D73F9ECEDF37C51DAC037842250D8AD1FB6CC64BDFB16B6902CAA6782866C06A
SHA-512:	20E8682427700FA55B4B8F085F15CE836B5783EBB8956853FD833E321028AE85E86246B5558D14248DE7A31FAF3AACD24DAC6030645954930A009BF1CCE7068F
Malicious:	false
Reputation:	low
URL:	http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff
Preview:	wOFF.......$......&.........................FFTM.............9.GDEF.......M...h.!..GPOS..........6..%dGSUB..,........$W`:COS/2...\|...S...`a.cmap..............ubcvt ..0\...<...<.Y..fpgm..0........eS./.gasp..2L............glyf..2T..F.........head..x....6...6....hhea..y.... ...$...Qhmtx..y<...J.....7V.loca..{...........maxp..}P... ... ....name..}p........gq..post.............J.prep...x........Q>..webf.............\-..........hR.......F.....S..x.%.=.@P...y>.]a.J5.$...`.&..MNuI@..Z2.(]eAM.{..F=Y0....].......O...K.>m..#...x..}.l...\.m./......b.q.!.I...mjH.eX.M[&.0].i3(MQ6b....a.e...tP.x"7.x....^..........u......Y.g..9...?...B.......s.s......<.T...zW-i}.m.r...?..Z..?..W.n..U......./..Se{.........Z.......~.l..=u..{.k..6<.X.s{...o..>......^U.8._...R\|..%..u.x.....Z................_.%5..0tA..F.../.I\|...:..U...W...u...o.N=.sW......q.<~...=..>5..?....n..[...o}....7.Q...Yf..I.qU..O..I..8s..JJ.;.uP..g.~.o......:.O.:._.^+.q.I....,.,.w4P.#..5y.EQ.o...u

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 27, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	283
Entropy (8bit):	5.627839973207706
Encrypted:	false
SSDEEP:	6:6v/lhP6VILzlMbNqG1DB/9w2ZCGErnTyBmgHaTeBJ5cdTp:6v/7uILJMndKPGEbTdg6sG9
MD5:	80D42C82A6C37DA90210FD60A2F36128
SHA1:	554BA7C84D2A27ECF3B1F29D03E62101936B54D8
SHA-256:	A1626E2D9160A0890A0A8D6E3AF9E7095D68A24F9FB5AC8A166000C9A2581E10
SHA-512:	8ECB032C38176996EE637009833F3399F773B325E4F574FBBD26F93CDB82892C4143C5816543052B3A5123B89EF4B1AACA0407315AAB879968085E61A20786B6
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/pics/28905/arrrow.png
Preview:	.PNG........IHDR..............(.....HPLTEGpL......................................................................z......tRNS.t..@....fU...2'...dg.......kIDAT..}.... ..P...{..O5...$....v....a.W..J.....I.ih^JF5P.z..H.Lz..F./..h.:.....{t.....i.....;.h...E.....B.6....IEND.B`.

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65168)
Category:	downloaded
Size (bytes):	85260
Entropy (8bit):	5.370957781359195
Encrypted:	false
SSDEEP:	1536:pKgIKzw+DiSMW4QQtIyY/UFHVsBm8r7e7dyIClTwYA17jaO8lfBBcXq+X4mhEEw7:9j3MIoF1kLHfTEI8zvvM
MD5:	B04A3BCCD23DDEB7982143707A63CCF9
SHA1:	4A5DC1389AAD050A44EE5E81408238A317AB3413
SHA-256:	764B9E9F3AD386AAA5CDEAE9368353994DE61C0BEDE087C8F7E3579CB443DE3B
SHA-512:	3F844A06577168DE05B187E727DD07B9A20CF0453CD00E28AEFDEEFCF783DC680EBD941ECD79A53AB26510AF1F855984C2DDC77565EF0DB11D4BA6E46F59D748
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/scripts/jquery.js
Preview:	/!. jQuery JavaScript Library v1.5.1. * http://jquery.com/. . Copyright 2011, John Resig. * Dual licensed under the MIT or GPL Version 2 licenses.. * http://jquery.org/license. . Includes Sizzle.js. * http://sizzlejs.com/. * Copyright 2011, The Dojo Foundation. * Released under the MIT, BSD, and GPL Licenses.. . Date: Wed Feb 23 13:55:29 2011 -0500. */.(function(a,b){function cg(a){return d.isWindow(a)?a:a.nodeType===9?a.defaultView\|\|a.parentWindow:!1}function cd(a){if(!bZ[a]){var b=d("<"+a+">").appendTo("body"),c=b.css("display");b.remove();if(c==="none"\|\|c==="")c="block";bZ[a]=c}return bZ[a]}function cc(a,b){var c={};d.each(cb.concat.apply([],cb.slice(0,b)),function(){c[this]=a});return c}function bY(){try{return new a.ActiveXObject("Microsoft.XMLHTTP")}catch(b){}}function bX(){try{return new a.XMLHttpRequest}catch(b){}}function bW(){d(a).unload(function(){for(var a in bU)bU[a](0,1)})}function bQ(a,c){a.dataFilter&&(c=a.dataFilter(c,a.dataType));var e=a.dataTypes,f={},g,h

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	613
Entropy (8bit):	7.624191679264559
Encrypted:	false
SSDEEP:	12:6v/7svvOiEe0IOQEjoZzIAOLhymOh+T+qFYKRacX3Y0OJxAG0f7:FvOC0I/EjizPOlZ3HFYMR3T
MD5:	2CA61B76E22053571DD8611E5AAC4900
SHA1:	2D350341A645AD33AB5604ACA16C05F22A83FF51
SHA-256:	D6B5D8D83DBC18FB8D77C8761D331CD9E5123C9684950BAB0406E98A24AC5AE8
SHA-512:	89B2BCBCE382E8B7C4D27BAA07ABED6F1D8D0F5A8F29B62A98F05FB1DE46D5E40F4C8146047614E92EFDCD235B80B842F8B08E9DA36A5FDB376E83F9EE2B09EA
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/scripts/select2/select2.png
Preview:	.PNG........IHDR...<...(............,IDATx....K.a....J....b](...v.d...<....P....!R.q.T..H.#..G..y.R......Ht0L.>....9.,m)..y.u..}.;....)I.J..,...Q(...X....V..&...Oh.F.!.{.n.{....,...%]...Gc..5x.>@.3...&....2.....%..C..,b.E...u.9=T6.7..)...E......".....lo.y[.e..C....&... D....m.#.......Q..j.......v@..Te.M.......;.....G9...b...}.1.....T...: .hC.f <t.;LT..A........N+....^@...no-../..F.e0aG.3X.....1.(....J.B..[..lgp...?..$8.N....Z4....5......d^..e0aw!..2nA.`.r.."...o.F...A...kW .<..`..R..~...~..J<....Sp..)..:tB...}.2E\|.L.........`.W.W.1....{!s....-..s.Z..[....P.o\|.}.q.......IEND.B`.

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17264, version 2.1
Category:	downloaded
Size (bytes):	17264
Entropy (8bit):	7.968311258079736
Encrypted:	false
SSDEEP:	384:JCniidHsnwUHgJANwPtNdi0ONd4Ijgub4WuGgpX+RGVzN:wi8sn7g/W4Ijgub4BGgpwGVR
MD5:	A43B107861B42CE1335E41E43D4E4D00
SHA1:	99BDB1CEC4A68EBE29249C46FEFEFB6880D009E5
SHA-256:	A6542DC92D71EB412BAC89D8FB06C70F15BE74A64B1B4EF1633288B78F4F2FF2
SHA-512:	151D1D3865B24940962476CD6824232EEABFAED92A90439ED5D467D1C7156F7B03BDE91D0303D15648BA13441B8750060066BEDBDEFA0EB930C43A16CBBCFDF9
Malicious:	false
Reputation:	low
URL:	http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Preview:	wOFF......Cp......q@........................FFTM..CT........j..7GDEF..7..........'..GPOS..7.........)MsMGSUB..7.... ... l.t.OS/2.......V...`..]@cmap.......u.......gasp..7\|............glyf...x..)...G.....head...l...6...6...hhea.......!...$...phmtx...@........W\6.loca...l...........:maxp........... .P.8name..2.........N.=post..5h........8',.prep...d........h..........B.L.._.<...........'......d:.....j..............x.c`d``>.........X...".....].?...x.c`d``dg0e`g..& f.B...0........x.c`f.`.........................@9 ..............E........O...a>..[...$.$..H)00..>.....x.m.[HTQ...........d..f^.a.).".0#].0M... .."%a&Q.7)H..>DD.E..K.......D....q.I:.X....}.........SA...M?c.^D.q.\....h.V.P.2...D..FD>.Q......4..:r..5.A..P.Q./!..T.5..R....4.....Ze....j...o...m.1..Z.}..$.q...5=..3C.......r..>.......qe!S.a..%.t..r..7#.^#..{4.......@\....*....q.1T.0.d..w..r.q.k.\G..q[#w8....Y7..r.d........(..\|"8N.k....G3.........Wv.v.I7&M..9.9/.&..s.....8YL0.Q.x.v..1}.z/.3.2.....dm.t.k..M...

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	431927
Entropy (8bit):	5.372343580677163
Encrypted:	false
SSDEEP:	6144:hSK9KwI51nTb7W9/juAwiiogfk8g1PdGpNVY5B4sE7qJsGjp2Pb//iCBz+8ScpJU:iw112NVYe7qJsGFCBy/
MD5:	7B549EFFFBDAE98BD33C90826A8DF818
SHA1:	A96E1CE15CA46367E77B2C467FF3D7415ACC6CD7
SHA-256:	6C8E40D0B7910C8066300A7576B89EF59631FB077DF2FAF5890D36A10E1B8804
SHA-512:	D03E87DAA982E8D9A37238DE273B6D28F80CFF3D815630280DEA1E08EF6ED7BA94E75167C9775D3411D233EB5A07889A69397FB40809C66874425ED14B58E87D
Malicious:	false
Reputation:	low
URL:	https://cdn.consentmanager.net/delivery/js/cmp_en.min.js
Preview:	window.cmpccsversionbuild="2024-7-3.21.57";if(!("rpl" in String.prototype)){Object.defineProperty(String.prototype,"rpl",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("cmp_unq" in window)){window.cmp_unq=function(a){return a.filter(function(c,d,b){return b&&b.indexOf(c)===d})}}if(!("replaceAll" in String.prototype)){Object.defineProperty(String.prototype,"replaceAll",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("fnd" in Array.prototype)){Object.defineProperty(Array.prototype,"fnd",{value:function(b){var c=this;b=String(b);for(var a=0;a<c.length;a++){if(String(c[a])==b){return a}}return -1},enumerable:false})}window.cmp_fnd=function(a,c){var d=a;c=String(c);for(var b=0;b<d.length;b++){if(String(d[b])==c){return b}}return -1};window.cmpccsversion=20220717;(function(){var b="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",a=/^(?:[A-Za-z\d+\/]{4})*?(?:[A-Za-z\d+\/]{2}(?:==)?\|[A-Za-z\d+\/]{3}=?)?$/

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17699)
Category:	downloaded
Size (bytes):	18294
Entropy (8bit):	5.635268705885141
Encrypted:	false
SSDEEP:	384:zivzvbYTbwlubOX65o6sCqYf3eae+RrN5vyyA:UvOVqe1spYmaec56R
MD5:	C574B81B0185052C9ADE18167DEDD04A
SHA1:	F4F4A197DECB45BA3DEF3E947E89E7CA7ED6E52C
SHA-256:	69FC80852D90B1EA7847C901FADDF6EC2B74C848ADBA398F7F21E8AEB006717C
SHA-512:	70009063FF0B24385B6B3633ED3B615846872D4BD8FA4A92B9C8F22B8986C95E7BD4B594C1E3D23CB8D24EFE2ED32D143AC6DBECCD64D43D4092EEF945A02911
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/afyAhS2Qsep4R8kB-t327Ct0yEitujmPfyHorrAGcXw.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var Z=function(t){return t},Q=function(t,T){if(!(T=(t=null,B.trustedTypes),T)\|\|!T.createPolicy)return t;try{t=T.createPolicy("bg",{createHTML:Z,createScript:Z,createScriptURL:Z})}catch(m){B.console&&B.console.error(m.message)}return t},B=this\|\|self;(0,eval)(function(t,T){return(T=Q())&&t.eval(T.createScript("1"))===1?function(m){return T.createScript(m)}:function(m){return""+m}}(B)(Array(Math.random()7824\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var F=function(T,t){for(t=[];T--;)t.push(Math.random()*255\|0);return t},X,tX=function(T,t,B){if((t=typeof T,t)=="object")if(T){if(T instanceof Array)return"array";if(T instanceof Object)return t;if((B=Object.prototype.toString.call(T),B)=="[object Window]")return"object";if(B=="[object Array]"\|\|typeof T.length=="number"&&typeof T.splice!="undefined"&&typeof T.propertyIsEnumerable!="undefined"&&!T.prop

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	431927
Entropy (8bit):	5.372343580677163
Encrypted:	false
SSDEEP:	6144:hSK9KwI51nTb7W9/juAwiiogfk8g1PdGpNVY5B4sE7qJsGjp2Pb//iCBz+8ScpJU:iw112NVYe7qJsGFCBy/
MD5:	7B549EFFFBDAE98BD33C90826A8DF818
SHA1:	A96E1CE15CA46367E77B2C467FF3D7415ACC6CD7
SHA-256:	6C8E40D0B7910C8066300A7576B89EF59631FB077DF2FAF5890D36A10E1B8804
SHA-512:	D03E87DAA982E8D9A37238DE273B6D28F80CFF3D815630280DEA1E08EF6ED7BA94E75167C9775D3411D233EB5A07889A69397FB40809C66874425ED14B58E87D
Malicious:	false
Reputation:	low
URL:	https://cdn.consentmanager.net/delivery/js/cmp_en.min.js
Preview:	window.cmpccsversionbuild="2024-7-3.21.57";if(!("rpl" in String.prototype)){Object.defineProperty(String.prototype,"rpl",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("cmp_unq" in window)){window.cmp_unq=function(a){return a.filter(function(c,d,b){return b&&b.indexOf(c)===d})}}if(!("replaceAll" in String.prototype)){Object.defineProperty(String.prototype,"replaceAll",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("fnd" in Array.prototype)){Object.defineProperty(Array.prototype,"fnd",{value:function(b){var c=this;b=String(b);for(var a=0;a<c.length;a++){if(String(c[a])==b){return a}}return -1},enumerable:false})}window.cmp_fnd=function(a,c){var d=a;c=String(c);for(var b=0;b<d.length;b++){if(String(d[b])==c){return b}}return -1};window.cmpccsversion=20220717;(function(){var b="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",a=/^(?:[A-Za-z\d+\/]{4})*?(?:[A-Za-z\d+\/]{2}(?:==)?\|[A-Za-z\d+\/]{3}=?)?$/

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
URL:	http://i2.cdn-image.com/__media__/pics/29590/bg1.png
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1434), with no line terminators
Category:	downloaded
Size (bytes):	1434
Entropy (8bit):	5.780814020328209
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCe2TLv138EgFB5vtTGJrdcl/1t4glvllLt41rE0oA8nwsLc:VKEctKo7R3evtTA2tX7m12nxLrwUnG
MD5:	CAC624AB0C197840B2A21BE4B6F6CC58
SHA1:	C4B8B421F6039CCB0421E814774789201138308D
SHA-256:	CFCE45FEF72ED85DC66C57FD1FA7262F9686B08188832FBFCE26A7A467D455B0
SHA-512:	15FAB78F7997A69C4C0A469893CC3D53D989C74736D4EFDE315005242B4545B4E8F694BEFF23D0899C59A6C3CD954F3905C7EAC4C438961931E12D666BB3A3BB
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?hl=en
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m)

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	19226
Entropy (8bit):	4.874083143056483
Encrypted:	false
SSDEEP:	192:Gui2TWIjfVST5V889hD+qS76Pq/oio1+44e8ePYFCcWlbTh+DQ7Fpr:tplC5Vh93S7NQwFCwQ7b
MD5:	2F85AD713B0814F8FB08A8ED985341F6
SHA1:	4107AD786D6453B57F4E8EBFE5FBB1CAE4E4E883
SHA-256:	C3AAA5487A549B0A206ABADE1658C0C39C17E32E637930FE49F9E1D04104C306
SHA-512:	9517BFC0C1AB5EF5C3C3A339C352758047661FB4AC9CB121B4298B3FB4EB87731ECE953B6134FF0286C12DCEBE3D6E230E1A8C40C50781DAED4DFCC9BCB16BEA
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/scripts/select2/select2.css
Preview:	/.Version: 3.3.2 Timestamp: Mon Mar 25 12:14:18 PDT 2013./..select2-container {. position: relative;. display: inline-block;. /* inline-block for ie7 /. zoom: 1;. display: inline;. vertical-align: middle;.}...select2-container,..select2-drop,..select2-search,..select2-search input{. /. Force border-box so that % widths fit the parent. container without overlap because of margin/padding... More Info : http://www.quirksmode.org/css/box.html. /. -webkit-box-sizing: border-box; /* webkit /. -khtml-box-sizing: border-box; / konqueror /. -moz-box-sizing: border-box; / firefox /. -ms-box-sizing: border-box; / ie /. box-sizing: border-box; / css3 */.}...select2-container .select2-choice {. display: block;. height: 26px;. padding: 0 0 0 8px;. overflow: hidden;. position: relative;.. border: 1px solid #aaa;. white-space: nowrap;. line-height: 26px;. color: #444;. text-decoration: none;.. -webkit-bord

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17264, version 2.1
Category:	downloaded
Size (bytes):	17264
Entropy (8bit):	7.968311258079736
Encrypted:	false
SSDEEP:	384:JCniidHsnwUHgJANwPtNdi0ONd4Ijgub4WuGgpX+RGVzN:wi8sn7g/W4Ijgub4BGgpwGVR
MD5:	A43B107861B42CE1335E41E43D4E4D00
SHA1:	99BDB1CEC4A68EBE29249C46FEFEFB6880D009E5
SHA-256:	A6542DC92D71EB412BAC89D8FB06C70F15BE74A64B1B4EF1633288B78F4F2FF2
SHA-512:	151D1D3865B24940962476CD6824232EEABFAED92A90439ED5D467D1C7156F7B03BDE91D0303D15648BA13441B8750060066BEDBDEFA0EB930C43A16CBBCFDF9
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Preview:	wOFF......Cp......q@........................FFTM..CT........j..7GDEF..7..........'..GPOS..7.........)MsMGSUB..7.... ... l.t.OS/2.......V...`..]@cmap.......u.......gasp..7\|............glyf...x..)...G.....head...l...6...6...hhea.......!...$...phmtx...@........W\6.loca...l...........:maxp........... .P.8name..2.........N.=post..5h........8',.prep...d........h..........B.L.._.<...........'......d:.....j..............x.c`d``>.........X...".....].?...x.c`d``dg0e`g..& f.B...0........x.c`f.`.........................@9 ..............E........O...a>..[...$.$..H)00..>.....x.m.[HTQ...........d..f^.a.).".0#].0M... .."%a&Q.7)H..>DD.E..K.......D....q.I:.X....}.........SA...M?c.^D.q.\....h.V.P.2...D..FD>.Q......4..:r..5.A..P.Q./!..T.5..R....4.....Ze....j...o...m.1..Z.}..$.q...5=..3C.......r..>.......qe!S.a..%.t..r..7#.^#..{4.......@\....*....q.1T.0.d..w..r.q.k.\G..q[#w8....Y7..r.d........(..\|"8N.k....G3.........Wv.v.I7&M..9.9/.&..s.....8YL0.Q.x.v..1}.z/.3.2.....dm.t.k..M...

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10730), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	35690
Entropy (8bit):	5.983635150904604
Encrypted:	false
SSDEEP:	768:CiBtrifZVO7Wg3hIBYpf3Y7qXv6J41TrdEJ41Trd5J41TrdAphfYIdiGPVbcq:C8Cg3dESv6J4vEJ4v5J4voY+ZPVbcq
MD5:	030F26CA78BC786E8CDAAB9109E308E6
SHA1:	EBB4F1266B26469C20EB6896DD3F0056754C3267
SHA-256:	CBD5FA335BF480368FE960F5C7738BF0186607DF23B1E9AD76855E428A76E096
SHA-512:	9ADE2ED7900B92CBC8002C7722CA9BA4A23376076335611FD69FCA214A34EFD8A4485C204A3D7BA9B12BFDB55D6DDC2452F6FD120A6A8E38A8381DD9949AD0C0
Malicious:	false
Reputation:	low
URL:	http://ifdnzact.com/?dn=le100.net&pid=9PO755G95
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>..<head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net">.. <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2421
Entropy (8bit):	4.370448549978702
Encrypted:	false
SSDEEP:	48:NTKG+zF59LHXeccv25U4g5dtFfMqvypShod4bVwPJ/B:UGQF5xXeO5Ng5b9MqvypShowOB/B
MD5:	A0FE7E3DDFD6C99FAA882D3E34249AFC
SHA1:	F075F7DFD190D85C6B90170F55A790700E0D958D
SHA-256:	33C4474DD73BF42D1BEA3A5B81EB2F784A251FF43031FE89FF729E98EBC1867C
SHA-512:	E3BFB96B37F4E9D54E38F7D81A7A1136A835069A0C5EF237BEA9EA373257EA7AA0190C32F37601764FF6DF6B37D201AD53FE74034CE89712EF0116699884DE2C
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/forms/script.js
Preview:	$(document).ready(function() {. $('input.inputtext:first').focus();....// -- initiate sale or send offer..$("input.submit").click(function(e) {...e.preventDefault();...$(this).addClass("spinner");...$(".inputError").removeClass("inputError");.. // -- check required fields. $("input.required, textarea.required").each(function() {. if (!$(this).val()) {. errorOnField($(this));. } else if ($(this).hasClass("textarea") && $(this).val().length < 10) {. errorOnField($(this));. } else if ($(this).is(':checkbox') && !$(this).is(':checked')) {. errorOnField($(this));. }. });.. // -- check recaptcha. if ($("div.g-recaptcha").length == 1 && !grecaptcha.getResponse()) {. errorOnField($("div.captcha"));. }.. if ($(".inputError").length > 0) {. $(this).removeClass("spinner");. } else {. var domain = $("input[name='domain'

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14892, version 1.0
Category:	downloaded
Size (bytes):	14892
Entropy (8bit):	7.98489201092774
Encrypted:	false
SSDEEP:	384:LKrbeS3uuEGg7o6yDdWa/TQcNc+rAsmnsTJ39cUZi:LKneSe4/6yDFU6rAGJZE
MD5:	9EC6DEAF6BADA919E20B98F9F7B718B1
SHA1:	501D36403AD8205E4644532600019ECB10F5CB0A
SHA-256:	7B348B30EA1FE43857E68FC462C29E5C6E63C97666AF75135C4396A272E54762
SHA-512:	03849431CEF204A1584FFE6F23DBE86730AFD076146AB3D1855B9C3402168A97FAA8A529E69FAE45EA24CFF7110C2930CB4744162BA0ED95D95600F6E777B322
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
Preview:	wOF2......:,.......\|..9..........................n..B....`..b...L.4..d..6.$..D. ..f..4..v%..........D..dd.do......:d..M....E.&..J..G....3.Mxp....i....V..u$.[O.;MU.:j.?..{+/<....s....^[..d.d.....t A....`..z....IN^.......2......mY.kF...\...UYU..........$.O=5..2q..L.2.1.c.....`x~n=.'Ur.66V.f]./..L1..P..<.0.<.8.....Z/.+.H....y..F....h5....V.j.....l..O#.:-Q....9g....:..?..8v];u,O..'....c.\r......].&w.....%@..Z.^....$.,dJ....W.{.....h8}4..S/.sZ...f."$..`a.$Mb.....;.W.."..y.H.<.g.......oNS..MO....X.%.8..y.\...ly..w..?-.~.o.ZZ~G.....B.....@...._....g.fF_...d-...aA_..#k.I.....x...P.}z..JQ&E........).P\|."g.#.)Q.T...}.PD.T+<}c+.\|\|0...2.F..hD.X.J.O.eJ:.%ZW.m.K.Jd..c.7.....T.cr.2....DD.........2..y..?/g...... ={..c /.....X.0.F.F.PX.P..!..K..K.....i.%....B.."...A....F.........4..........S........z$`.T..h...E..........._%=..).)......x)...A.J..K...?.V.......w.Y}..N.....}..>.......%.f.O..o.{..=wz.e_&.O\..*..Q..c.'...X&.1wS.R..AY...G.....Q.f...z..E..u8&V

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 34 x 29, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	6.229840441641423
Encrypted:	false
SSDEEP:	6:6v/lhPwtz4nDLl9W0y37CpH0xVc4kSbOaWdgR38C+ogSM4bXBxqy3ytDdp:6v/7SML/rp627SbVcoXrbXnqzH
MD5:	FF018650CBB4B192CCD337C6C9478D1E
SHA1:	D6409B6DF8F0B929E8D5C7F9F49F4FBABACDC0DC
SHA-256:	C5EA92061AA96E1E5AEBFE0714F3383A02BEF2ED7A584D0493841573B653E8C6
SHA-512:	2C88089E0AC3EA8AA93AD5E643AC01F77A727DFA2E28843ED436ADC2E96E32F0F0BA5EB17F70F4D039B70C4A1E106D2AE24A2BA1D4E5ADAEFB90E4B456E944F1
Malicious:	false
Reputation:	low
URL:	http://i3.cdn-image.com/__media__/pics/28905/res-arw.png
Preview:	.PNG........IHDR..."...........N....EPLTEGpL..................................................................W.4.....tRNS.Q...!0....r..>~.._...O#.....IDAT(..... ...A..j..Q7..N...w..4Q.~..+.0443.......&A.?.X..<.b.Q..h.....Fb]0..\..u!....M#.2......~L.H.v.c.7.N....n......@.......7...m...$\.K'..M\..TjG.%G.._...\XjU..cP .{4......IEND.B`.

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17312, version 2.1
Category:	downloaded
Size (bytes):	17312
Entropy (8bit):	7.969945306725023
Encrypted:	false
SSDEEP:	384:gIMoUXEVKzOr+cRe8hGCLzypa78QKS+RATaD:PMoU0VKzoJe80Ms5D
MD5:	BEBE201D813FEAAD85A3E66607D0DA3A
SHA1:	28B049502AFA8E9DB5340C1A92400591B39870E8
SHA-256:	58BB75322BEB862803B0D156E1A1D01FB1E7FDE82EE93C929B08BF5AEA9FC55B
SHA-512:	2C83376EDCB92F471C458F6C5F316DD24639FCBB88AEC93B2C2690A596CC129860D0D46A2FE1FB4D71AF8AE5856EE48F19EBB17DAD38DDE918AF76C3ABF7441B
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Preview:	wOFF......C.......s`........................FFTM...l........i..+GDEF.............'..GPOS................GSUB...p... ... l.t.OS/2.......T...`..=.cmap.......u.......gasp...\............glyf...d..(...G8a.?.head..9p...4...6....hhea..9....!...$...'hmtx..9.........Y.-.loca..<x............maxp..>........ .P.7name..>............post..A.........8Y,.prep..C.........h.............h<......'......d:................................x...[l\......vb{l......7....h.o.+....!Q.p1.O.P.P%.h......UU...UEMpQ.ZA.1.I !.C..@...=...=..:.cB.P5:>.9{....^k......)wJ..x.)..R~.....gO>m~....6.BJ..:..tIY.._...dq../mxe...l\|ic.....Kc..lzj..o...%.;....^.x}.o..l.e...gOV.V=\5]..z_..o..n.o..;..5.5.........5.....n................O./...c.t.R.4.t...K...TCm.H..........]....nT:.:.t....j..A..JwU...$.![y...J+.....u.....).I.H..7I..H....%..}.........nZ..ef/. .?(O.A7)..q...p...f.#xx.M.O.;.j...q7.7..Ds.O.@t.D1Et...0.F....`.f.d...9wIX.F.a...fxl.C..[.0.F.0..D..E.a.c(.8<G.j...,....S.Y..>.t..2s.Y....G

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (346), with no line terminators
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	5.00818604439199
Encrypted:	false
SSDEEP:	6:qIZmJNsVwbDRWPWG3mV/R7cjTDEG5OQRoYxHSNHbMFKdCuFxXcvH3eVP4SzpF9yc:+JG0DRWZmX7OPrRNwN7MFMCu/cvOVQSl
MD5:	F84F931C0DD37448E03F0DABF4E4CA9F
SHA1:	9C2C50EDCF576453CCC07BF65668BD23C76E8663
SHA-256:	5C1D5FD46A88611C31ECBB8FFC1142A7E74EC7FB7D72BD3891131C880EF3F584
SHA-512:	AFC3089D932FB030E932BF6414AC05681771051DD51D164F09635CA09CBD8525A52879524B6AA24E972E7766DDF529484CC1EC416DE8B61255435A89BA781F8C
Malicious:	false
Reputation:	low
URL:	http://ifdnzact.com/px.js?ch=2
Preview:	var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6884
Entropy (8bit):	5.51529394758214
Encrypted:	false
SSDEEP:	192:mkv2kHkOki3tkyk2YkbS0lQB3JGSCNWAP333RaOZ:mk2YlJtz8fzha1
MD5:	6CFE913CB732DFF779F3B703AE6B0C55
SHA1:	B43734FB769B83074AF46E4DCA2177832E09AB36
SHA-256:	B8E3079C72BE18C5A86E197CB4E5E39EA40770EA43A47EBB2B31A60F54FFAFB5
SHA-512:	AB4290A4C932D57042AFC7AE9A41F46FEA3B48E5D5658492639E3F8777EBD241475B0886742C0B61154F930929F48930573DF99D88179B104BEE6998A2E3A743
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Source+Sans+Pro:400,400i\|Source+Serif+Pro:600&subset=latin-ext"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Source Sans Pro';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7qsDJT9g.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Source Sans Pro';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7jsDJT9g.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Source Sans Pro';. font-style: italic;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7rsDJT9g.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Source Sans Pro';. font-style: italic;. font-weight: 400;. src: url(https://fonts

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10758), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	37846
Entropy (8bit):	5.880172796811018
Encrypted:	false
SSDEEP:	768:CiBtrifZVO7Wg3hIBY/c91OkoBGDgFMww1cSXw3DaXediGPDbcq:C8Cg389roEDgGP1jXCZZPDbcq
MD5:	2CD35EEAA5518D49B374B47EC4164AF7
SHA1:	8C7756EBF25C6F43345CCFE44AF66128C7B882AB
SHA-256:	9FB5DC8FC4F8973ED7CD92B6FBC855D837B76097A8649A40BBE8B91B12A170FF
SHA-512:	B818D5643BCEAF11CDCF5D230B117E1D253A8FDF0CD7EE70D48779041589FED181A2AA697093F6C2F9F7581A34FE2AF6FA2C11D53889B3CB299F909BFDA57827
Malicious:	false
Reputation:	low
URL:	http://ifdnzact.com/Malware_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%2FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%2BD6EslT4YXZEgi5MQZoS4%2BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%2FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%2BF%2FqfFDeim2hVuLdV2hx9V%2F15hYqnNxwr7w%2FxJkFs&yep=kYWX2UB9hpPluHNh59n0TG5bw0%2FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%2FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%2FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%2Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%2B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%2FqYu%2FBmO%2BefvXO46i%2BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%2BZbCkucnl%2BKaGVQ4CSuga7KRLSemy%2FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%2F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%2FCiWxSUGpEEgdBffigSWf9bQ%2BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%2BRbYTMJnnWjleatxujX%2BIiC4edOKDRJ%2FnR1G4wl1D1zw1q7mWlz%2F%2FnAQ9gKAY08BXIzyLlH48v3xyIw5TB6bHJNQMOLDDEDb5Vn77S96JwQqQ58V9YV3Zs2fQx0LpXi%2Fv3R2KtwFytIci4LYt%2BfLYqlKC%2FZw%2B%2BxXbfeWCD1n0%2BunmHv1QoTf%2Fp7BcNmC7DcfCienIs6Am8IwxZ872y4DiNhFM2SK1Q9eF1RdxIUHt6Km6G2w96DxX1ZU%2BNeA70x%2Bm4TMzA7oDST7GRHEURKQxQ7GU0X%2BT4hpg6YRtVfTDnslnqgYyxa8LvjhqfxnGCrDqp1vWtl%2F%2Fc9fLOHx8fGBmD7Uo7Gp2w9IKwB6t4iC81jYFMx7xV6DxL6vMlDarDP6FCNM2k561vom%2BbqEPC3OfD5eCbb0H9De8PXIaD6wU4xgzvPe%2B6B5knbXTuIIX2ozx66y0xP4nKFkVd91QdhcD%2BXEol%2F99%2FsQafCY7WUeN%2Bx6Hwulv0hhCI%2B5em7Yp%2BMJ%2FYKYvsq9d0GlCivuYqYS04L7SL%2BZTMxZZFdZG3tePDSjj9mL7MpGjQyev1bF7S58DLMYiV3Q2a5RBnSADaGeoWnw7YeXIi43VbqA6%2FzdJgHJ818%2B3e2Y3vbvAawlN7DkXi40YRs2hDrwUoOMqjwYHZYkrxjb1X5IIDg%2Bdne6mXH5A811F5oyaUovL6pl5HtJJWkeraD6o0KyEn%2BdGNOdOLtOiy7N39pIS0bqV0fgrbQrYWQR7K5uKBEoembXLwrInLJwprm3y0xKx8mG5WXstRuIyZk3O8%2Bnxbq6RajzTPe6eNfgpo1hfQ5oh5FFrEF%2BNojERDyxBu%2FaRkUitODbjEFQ2l1mWSfy19%2Fh5k0jOI85K2D6ytDApmEOihBDMJGfBgZ5t9gX2bvLHqKK0nbqzTVSSWbaKreNaYnWV6eCq98QpUCJdgzXSf4bui5n4WP9j5alhTpx2dmsU2bZoycPp%2B%2FaNoseGTxynF2x2Z4pIdzxHKeNnUQbcfsJ%2BwV3C2eGdlU%2BXCtVCXWA872QN0xrGrCHwoadWZv7Ej0F0CAVjEuU1ltCmpBzpr%2BM3urle0wmVKbbEdui3YiW4OyVaxaqksIoWU4ouvxCRY%3D&gtnp=0&gtpp=0&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=IJ5nQJGTrpCE11CZHx4nYrlGNK0IrtJ2pxxwJPNmewE%3D&&gtnp=0&gtpp=0&kt=246&&kbc=10191&ki=18327822&ktd=0&kld=1063&kp=2&bd=-4%231024%231280%231%230
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>..<head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net">.. <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (346), with no line terminators
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	5.00818604439199
Encrypted:	false
SSDEEP:	6:qIZmJNsVwbDRWPWG3mV/R7cjTDEG5OQRoYxHSNHbMFKdCuFxXcvH3eVP4SzpF9yc:+JG0DRWZmX7OPrRNwN7MFMCu/cvOVQSl
MD5:	F84F931C0DD37448E03F0DABF4E4CA9F
SHA1:	9C2C50EDCF576453CCC07BF65668BD23C76E8663
SHA-256:	5C1D5FD46A88611C31ECBB8FFC1142A7E74EC7FB7D72BD3891131C880EF3F584
SHA-512:	AFC3089D932FB030E932BF6414AC05681771051DD51D164F09635CA09CBD8525A52879524B6AA24E972E7766DDF529484CC1EC416DE8B61255435A89BA781F8C
Malicious:	false
Reputation:	low
URL:	http://ifdnzact.com/px.js?ch=2
Preview:	var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 27, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	283
Entropy (8bit):	5.627839973207706
Encrypted:	false
SSDEEP:	6:6v/lhP6VILzlMbNqG1DB/9w2ZCGErnTyBmgHaTeBJ5cdTp:6v/7uILJMndKPGEbTdg6sG9
MD5:	80D42C82A6C37DA90210FD60A2F36128
SHA1:	554BA7C84D2A27ECF3B1F29D03E62101936B54D8
SHA-256:	A1626E2D9160A0890A0A8D6E3AF9E7095D68A24F9FB5AC8A166000C9A2581E10
SHA-512:	8ECB032C38176996EE637009833F3399F773B325E4F574FBBD26F93CDB82892C4143C5816543052B3A5123B89EF4B1AACA0407315AAB879968085E61A20786B6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............(.....HPLTEGpL......................................................................z......tRNS.t..@....fU...2'...dg.......kIDAT..}.... ..P...{..O5...$....v....a.W..J.....I.ih^JF5P.z..H.Lz..F./..h.:.....{t.....i.....;.h...E.....B.6....IEND.B`.

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 34 x 29, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	6.229840441641423
Encrypted:	false
SSDEEP:	6:6v/lhPwtz4nDLl9W0y37CpH0xVc4kSbOaWdgR38C+ogSM4bXBxqy3ytDdp:6v/7SML/rp627SbVcoXrbXnqzH
MD5:	FF018650CBB4B192CCD337C6C9478D1E
SHA1:	D6409B6DF8F0B929E8D5C7F9F49F4FBABACDC0DC
SHA-256:	C5EA92061AA96E1E5AEBFE0714F3383A02BEF2ED7A584D0493841573B653E8C6
SHA-512:	2C88089E0AC3EA8AA93AD5E643AC01F77A727DFA2E28843ED436ADC2E96E32F0F0BA5EB17F70F4D039B70C4A1E106D2AE24A2BA1D4E5ADAEFB90E4B456E944F1
Malicious:	false
Reputation:	low
URL:	http://i2.cdn-image.com/__media__/pics/28905/res-arw.png
Preview:	.PNG........IHDR..."...........N....EPLTEGpL..................................................................W.4.....tRNS.Q...!0....r..>~.._...O#.....IDAT(..... ...A..j..Q7..N...w..4Q.~..+.0443.......&A.?.X..<.b.Q..h.....Fb]0..\..u!....M#.2......~L.H.v.c.7.N....n......@.......7...m...$\.K'..M\..TjG.%G.._...\XjU..cP .{4......IEND.B`.

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 34 x 29, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	346
Entropy (8bit):	6.229840441641423
Encrypted:	false
SSDEEP:	6:6v/lhPwtz4nDLl9W0y37CpH0xVc4kSbOaWdgR38C+ogSM4bXBxqy3ytDdp:6v/7SML/rp627SbVcoXrbXnqzH
MD5:	FF018650CBB4B192CCD337C6C9478D1E
SHA1:	D6409B6DF8F0B929E8D5C7F9F49F4FBABACDC0DC
SHA-256:	C5EA92061AA96E1E5AEBFE0714F3383A02BEF2ED7A584D0493841573B653E8C6
SHA-512:	2C88089E0AC3EA8AA93AD5E643AC01F77A727DFA2E28843ED436ADC2E96E32F0F0BA5EB17F70F4D039B70C4A1E106D2AE24A2BA1D4E5ADAEFB90E4B456E944F1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..."...........N....EPLTEGpL..................................................................W.4.....tRNS.Q...!0....r..>~.._...O#.....IDAT(..... ...A..j..Q7..N...w..4Q.~..+.0443.......&A.?.X..<.b.Q..h.....Fb]0..\..u!....M#.2......~L.H.v.c.7.N....n......@.......7...m...$\.K'..M\..TjG.%G.._...\XjU..cP .{4......IEND.B`.

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	555
Entropy (8bit):	4.73524642638354
Encrypted:	false
SSDEEP:	12:TjeRHVIdtklI5rruNGlTF5TF5TF5TF5TF5TFK:neRH68e5TPTPTPTPTPTc
MD5:	565C1EAE816296EB5A8240C33F015484
SHA1:	99A9E36394DAD3E08C38DB95E33469C0B31F2753
SHA-256:	922A7A005A299DAAB272EF3B0C7106716572ECE666C54C187CE6836B32474973
SHA-512:	67E5710ADA9F43699CFBCA159A089B84F85EB1B08E779753481BF19F2AA0F57655F7D82B2AF7C4C7DE14A5523FF6AC7D56FCBAF7831786E9A7C949AEF308BD0A
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/favicon.ico
Preview:	<html>..<head><title>404 Not Found</title></head>..<body>..<center><h1>404 Not Found</h1></center>..<hr><center>nginx/1.20.1</center>..</body>..</html>.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->.. a padding to disable MSIE and Chrome friendly error page -->..

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	5788
Entropy (8bit):	4.5531841572856795
Encrypted:	false
SSDEEP:	96:HV5XTZYC5pfyZbdmO9Z+B4eBlsrZXNUN1yHS45aB+dSSD:15XTZhbqH+9USSD
MD5:	9A3BB8C70DC3B9B7E5FA3A8564F4064C
SHA1:	0F75C65906245C318CD7FB60BEF91A4408C43172
SHA-256:	FE92AD1E7A8C1D10F04E5870112D7635C4BA708ABF4B2A887855F8CB0674E91F
SHA-512:	6F02CABB233BF8FEE0DB685631D26DD2DD77F57FD7C3B5E4E7F143DFDB5A5A649521524E85C3816DEADCDB200D1885E701D6F5872186F5640D1BCCC3B37FE794
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/index.php?domain_name=le100.net
Preview:	<!DOCTYPE html>.<html>.<head>. <meta charset="UTF-8">. <title>Sale offer for: le100.net</title>. <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">. <link href="https://fonts.googleapis.com/css?family=Source+Sans+Pro:400,400i\|Source+Serif+Pro:600&subset=latin-ext" rel="stylesheet" />. <link rel="stylesheet" href="/scripts/select2/select2.css" />..<script type="text/javascript" src="/scripts/jquery.js"></script>..<script type="text/javascript" src="/scripts/select2/select2.min.js"></script>. <link rel="stylesheet" href="/forms/style.css" />.</head>.<body>.<div class="wrapper">..<h1>le100.net</h1>.. <p>If you want to buy this domain, please fill out this form.</p>.. <form method="post" id="contactform" name="contactform">. <input type="hidden" name="domain" value="le100.net" />...<div class="formElements">.. ..<div class="formElement">. ...<label for="name">Name</label>. ...<input name="name" class="inputtext req

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	downloaded
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
URL:	http://i3.cdn-image.com/__media__/js/min.js?v2.3
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (346), with no line terminators
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	5.00818604439199
Encrypted:	false
SSDEEP:	6:qIZmJNsVwbDRWPWG3mV/R7cjTDEG5OQRoYxHSNHbMFKdCuFxXcvH3eVP4SzpF9yc:+JG0DRWZmX7OPrRNwN7MFMCu/cvOVQSl
MD5:	F84F931C0DD37448E03F0DABF4E4CA9F
SHA1:	9C2C50EDCF576453CCC07BF65668BD23C76E8663
SHA-256:	5C1D5FD46A88611C31ECBB8FFC1142A7E74EC7FB7D72BD3891131C880EF3F584
SHA-512:	AFC3089D932FB030E932BF6414AC05681771051DD51D164F09635CA09CBD8525A52879524B6AA24E972E7766DDF529484CC1EC416DE8B61255435A89BA781F8C
Malicious:	false
Reputation:	low
URL:	http://ifdnzact.com/px.js?ch=1
Preview:	var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17312, version 2.1
Category:	downloaded
Size (bytes):	17312
Entropy (8bit):	7.969945306725023
Encrypted:	false
SSDEEP:	384:gIMoUXEVKzOr+cRe8hGCLzypa78QKS+RATaD:PMoU0VKzoJe80Ms5D
MD5:	BEBE201D813FEAAD85A3E66607D0DA3A
SHA1:	28B049502AFA8E9DB5340C1A92400591B39870E8
SHA-256:	58BB75322BEB862803B0D156E1A1D01FB1E7FDE82EE93C929B08BF5AEA9FC55B
SHA-512:	2C83376EDCB92F471C458F6C5F316DD24639FCBB88AEC93B2C2690A596CC129860D0D46A2FE1FB4D71AF8AE5856EE48F19EBB17DAD38DDE918AF76C3ABF7441B
Malicious:	false
Reputation:	low
URL:	http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Preview:	wOFF......C.......s`........................FFTM...l........i..+GDEF.............'..GPOS................GSUB...p... ... l.t.OS/2.......T...`..=.cmap.......u.......gasp...\............glyf...d..(...G8a.?.head..9p...4...6....hhea..9....!...$...'hmtx..9.........Y.-.loca..<x............maxp..>........ .P.7name..>............post..A.........8Y,.prep..C.........h.............h<......'......d:................................x...[l\......vb{l......7....h.o.+....!Q.p1.O.P.P%.h......UU...UEMpQ.ZA.1.I !.C..@...=...=..:.cB.P5:>.9{....^k......)wJ..x.)..R~.....gO>m~....6.BJ..:..tIY.._...dq../mxe...l\|ic.....Kc..lzj..o...%.;....^.x}.o..l.e...gOV.V=\5]..z_..o..n.o..;..5.5.........5.....n................O./...c.t.R.4.t...K...TCm.H..........]....nT:.:.t....j..A..JwU...$.![y...J+.....u.....).I.H..7I..H....%..}.........nZ..ef/. .?(O.A7)..q...p...f.#xx.M.O.;.j...q7.7..Ds.O.@t.D1Et...0.F....`.f.d...9wIX.F.a...fxl.C..[.0.F.0..D..E.a.c(.8<G.j...,....S.Y..>.t..2s.Y....G

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	3575
Entropy (8bit):	5.203314832627559
Encrypted:	false
SSDEEP:	48:bvDuWsSjVmvr6jOu3I080ZUQzauCqbw76n6ka1AV09s5pIrKa675xN1t81n:LDuhwaz0ZzvJKV1Eyrf69VMn
MD5:	4DE1BD402918C1508D23952003CAF622
SHA1:	3B313A0E761AFD4028CBBC78E0E96AF18F84F615
SHA-256:	D2E64AB640BF751C2AEE576081ABB6CD73F1528B660E5A1A9CDD95BF1EE75E12
SHA-512:	0396EF5EB88AAEEFF285738E9621AC8765716A200E3488BCCD2E6CA539D0E32D349D78F6279EF72BFE2205B94D5ECDE0975EB2CFE8D332C1EF02F1AF860FA1FB
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/forms/style.css
Preview:	*{margin:0;padding:0}..body {..background:#eceff1;..color: #263238;..font-family: 'Source Sans Pro', sans-serif;..text-rendering: optimizeLegibility;..font-size:1.2rem;..line-height:1.5rem;.}..h1,h2,h3,h3,h4,h5,h6 {font-family:'Source Serif Pro',serif}...wrapper {..width:95%;..max-width:600px;..margin:2rem auto;..text-align:center;.}...priceHolder {..text-align:left;.}..h1 {..color:#E64A19;..text-transform:uppercase;..font-size:1.2rem;..letter-spacing: 1px;..max-width:100%;..overflow-x:hidden;..word-wrap: break-word;.}..p {..margin:1.5rem auto;.}...error {..border:1px solid #e64a19;..color:#e64a19;..background:#fefefe;..padding:1rem .5rem;.}...correct {..color:#8bc34a;.}..a:link,.a:visited {..color:#455A64;.}..a:hover,.a:active {..color:#8BC34A;.}...formElement {..margin:.5rem 0;.}..label {..font-family:'Source Sans Pro',sans-serif;..display:block;..font-size:1rem;..text-align: left;..height:2rem;..line-height:2rem;..padding-left:1px;.}...inputtext,..inputprice {..font-family: 'Source

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	10
Entropy (8bit):	3.1219280948873624
Encrypted:	false
SSDEEP:	3:I6MdLn:Nwn
MD5:	6608DD3E21CA3BEABD4BDFA625A0B221
SHA1:	E926D0F8694A4BC4013308AFACA7AF51E4C9FD9F
SHA-256:	C75EB01138771BFB2A5517AEAE882356733782767C4560CC9601C34D2591CA75
SHA-512:	FB9A38C874CD26E779EAA5ACFFFCCD3835620A41ADBFE9B086C6A213BF0596F4F98823487F9C79B8F02F649B8B2E4D3232FFCB78106147B3FF671ED7809BBD51
Malicious:	false
Reputation:	low
URL:	http://ifdnzact.com/favicon.ico
Preview:	No favicon

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10758), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	38291
Entropy (8bit):	5.892386542840048
Encrypted:	false
SSDEEP:	768:CiBtrifZVO7Wg3hIBY3RQc91Okos9BZ+D1JiDW3l3ypWdiGPDbcq:C8Cg3J59roa3+D1JpNsgZPDbcq
MD5:	DA2787FDCD93E86125AA44CFFAAE1280
SHA1:	5EB1C2E62BFA50B742C8C4E1C97FD4B2368D2B1C
SHA-256:	0678272EBD4B07A701920230111D8D4BBE447E2F344AD0824C91528F266E6D75
SHA-512:	C9C66109B3D9B9F8DCD4DD18C30AF059C6BBDC211C2AA02478E5F76BDB5F495468BB1B2454051FFB9A4ADAFCC1BFE66A1EDBBD339A8820671A6E20F6F2DAF0E6
Malicious:	false
Reputation:	low
URL:	http://ifdnzact.com/Pop_Up_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%2FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%2BD6EslT4YXZEgi5MQZoS4%2BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%2FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%2BF%2FqfFDeim2hVuLdV2hx9V%2F15hYqnNxwr7w%2FxJkFs&yep=kYWX2UB9hpPluHNh59n0TG5bw0%2FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%2FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%2FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%2Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%2B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%2FqYu%2FBmO%2BefvXO46i%2BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%2BZbCkucnl%2BKaGVQ4CSuga7KRLSemy%2FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%2F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%2FCiWxSUGpEEgdBffigSWf9bQ%2BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%2BRbYTMJnnWjleatxujX%2BIiC4edOKDRJ%2FnR1G4wl1D1zw1q7mWlz%2F%2FnAQ9gKAY08BXIzyLlH48v3xyIw5TB6bHJNQMOLDDEDb5Vn77S96JwQqQ58V9YV3Zs2fQx0LpXi%2Fv3R2KtwFytIci4LYt%2BfLYqlKC%2FZw%2B%2BxXbfeWCD1n0%2BunmHv1QoTf%2Fp7BcNmC7DcfCienIs6Am8IwxZ872y4DiNhFM2SK1Q9eF1RdxIUHt6Km6G2w96DxX1ZU%2BNeA70x%2Bm4TMzA7oDST7GRHEURKQxQ7GU0X%2BT4hpg6YRtVfTDnslnqgYyxa8LvjhqfxnGCrDqp1vWtl%2F%2Fc9fLOHx8fGBmD7Uo7Gp2w9IKwB6t4iC81jYFMx7xV6DxL6vMlDarDP6FCNM2k561vom%2BbqEPC3OfD5eCbb0H9De8PXIaD6wU4xgzvPe%2B6B5knbXTuIIX2ozx66y0xP4nKFkVd91QdhcD%2BXEol%2F99%2FsQafCY7WUeN%2Bx6Hwulv0hhCI%2B5em7Yp%2BMJ%2FYKYvsq9d0GlCivuYqYS04L7SL%2BZTMxZZFdZG3tePDSjj9mL7MpGjQyev1bF7S58DLMYiV3Q2a5RBnSADaGeoWnw7YeXIi43VbqA6%2FzdJgHJ818%2B3e2Y3vbvAawlN7DkXi40YRs2hDrwUoOMqjwYHZYkrxjb1X5IIDg%2Bdne6mXH5A811F5oyaUovL6pl5HtJJWkeraD6o0KyEn%2BdGNOdOLtOiy7N39pIS0bqV0fgrbQrYWQR7K5uKBEoembXLwrInLJwprm3y0xKx8mG5WXstRuIyZk3O8%2Bnxbq6RajzTPe6eNfgpo1hfQ5oh5FFrEF%2BNojERDyxBu%2FaRkUitODbjEFQ2l1mWSfy19%2Fh5k0jOI85K2D6ytDApmEOihBDMJGfBgZ5t9gX2bvLHqKK0nbqzTVSSWbaKreNaYnWV6eCq98QpUCJdgzXSf4bui5n4WP9j5alhTpx2dmsU2bZoycPp%2B%2FaNoseGTxynF2x2Z4pIdzxHKeNnUQbcfsJ%2BwV3C2eGdlU%2BXCtVCXWA872QN0xrGrCHwoadWZv7Ej0F0CAVjEuU1ltCmpBzpr%2BM3urle0wmVKbbEdui3YiW4OyVaxaqksIoWU4ouvxCRY%3D&gtnp=0&gtpp=0&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=IJ5nQJGTrpCE11CZHx4nYrlGNK0IrtJ2pxxwJPNmewE%3D&&gtnp=0&gtpp=0&kt=246&&kbc=10191&ki=22821918&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>..<head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net">.. <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25856)
Category:	downloaded
Size (bytes):	108066
Entropy (8bit):	5.384984873814121
Encrypted:	false
SSDEEP:	768:5cZoWRfuJuXcZoYRgZoo1cZoCRvgStdSk6UNxLdbdxVDhfY6iYeiUf88xBepe07H:5y+qRuZtdSk6IxLdk0nM0R83BUtVaT8
MD5:	9B7777ABF79CFE26597FE4FA8306EEC0
SHA1:	33738A50CA89F942660C3569137B5CE899995435
SHA-256:	81CF36B0F30E1EC5F16B0AA5973D6B3F032338B406D0075B42B9590E3D40AD5C
SHA-512:	7CC6CFE71E9006ACFEB50D0B2E1473162519237A12ACF7AF684A12820F0B4CA9F50108F1F51E2AD293B0D4C29677015187C0A17931373D99350F81139079C06D
Malicious:	false
Reputation:	low
URL:	https://cdn.consentmanager.net/delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfMjY.js
Preview:	if(!("cmp_config_data" in window)){window.cmp_config_data={};}window.cmp_svg_no=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","viewBox":"0 0 512 256"}, "", function (x){x.child("g", {}, "", true, function (x){x.child("ellipse", {"id":"svg_11","ry":"111.500004","rx":"113","cy":"120.89999","cx":"386","stroke-linecap":"null","stroke-linejoin":"null","stroke-dasharray":"null","stroke-width":"0","stroke":"#000000","fill":"#e5e5e5","class":"cmpsvgsilverfill"}).child("rect", {"id":"svg_13","height":"222","width":"256.999992","y":"9.899994","x":"140.000002","stroke-linecap":"null","stroke-linejoin":"null","stroke-dasharray":"null","stroke-width":"0","stroke":"#000000","fill":"#e5e5e5","class":"cmpsvgsilverfill"}).child("ellipse", {"ry":"111.500004","rx":"113","id":"svg_9","cy":"118.399998","cx":"125","stroke-linecap":"null","stroke-linejoin":"null","stroke-dasharray":"null","stroke-width":"0","stroke":"#000000","fill

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	20199
Entropy (8bit):	3.70382459042729
Encrypted:	false
SSDEEP:	384:jDjzWdNWunWE3JcL3R2G//ttrIHGOesh6UK5gK5KU:jDnu024d
MD5:	A096EECE85B9F9EB151647D759FFBA89
SHA1:	B8349BE8DCCD1BF51ECD157AC9E4FB85EAF72B94
SHA-256:	81FBC2D1C4FD135BD8367182A98AE01F40B7DA6A0279185A177841EB7D8C823F
SHA-512:	5DD48140CD98833F0DD030D827F384D0C5846CBAC6824CD6767E6867A11533CC4549DF57915FDEF8741ABCAF12F258F39F71B20D65AA7F7EA45CE9A7FAED470C
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 288 38"><style type="text/css">...st0{fill:#b0bec5;}.</style><path class="st0" d="M244.7 12.2v2.1c0 0.3-0.1 0.6-0.2 0.8s-0.4 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8v-2.5c0-0.4 0-0.7 0-0.9s-0.1-0.4-0.2-0.5 -0.3-0.2-0.6-0.2c-0.5 0-0.9 0.2-1 0.5s-0.2 0.9-0.2 1.5v2.2c0 0.3-0.1 0.6-0.2 0.8s-0.3 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8V9.8c0-0.3 0.1-0.5 0.2-0.7s0.3-0.2 0.5-0.2c0.2 0 0.4 0.1 0.5 0.2s0.2 0.3 0.2 0.6v0.2c0.3-0.3 0.6-0.6 0.9-0.7s0.7-0.2 1.1-0.2c0.4 0 0.7 0.1 1 0.2s0.5 0.4 0.7 0.7c0.3-0.3 0.6-0.6 0.9-0.7s0.7-0.2 1-0.2c0.4 0 0.8 0.1 1.1 0.3s0.6 0.4 0.7 0.7c0.1 0.3 0.2 0.7 0.2 1.4v3.1c0 0.3-0.1 0.6-0.2 0.8s-0.4 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8v-2.7c0-0.3 0-0.6 0-0.8s-0.1-0.4-0.2-0.5 -0.3-0.2-0.6-0.2c-0.2 0-0.4 0.1-0.6 0.2s-0.3 0.3-0.4 0.5C244.8 11 244.7 11.5 244.7 12.2z"/><path class="st0" d="M254 14.4c-0.4 0.3-0.8 0.5-1.1 0.7s-0.8 0.2-1.2 0.2c-0.4 0-0.8-0.1-1.1-0.2s-0.5-0.4-0.7-0.7 -0.3-

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 60 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	613
Entropy (8bit):	7.624191679264559
Encrypted:	false
SSDEEP:	12:6v/7svvOiEe0IOQEjoZzIAOLhymOh+T+qFYKRacX3Y0OJxAG0f7:FvOC0I/EjizPOlZ3HFYMR3T
MD5:	2CA61B76E22053571DD8611E5AAC4900
SHA1:	2D350341A645AD33AB5604ACA16C05F22A83FF51
SHA-256:	D6B5D8D83DBC18FB8D77C8761D331CD9E5123C9684950BAB0406E98A24AC5AE8
SHA-512:	89B2BCBCE382E8B7C4D27BAA07ABED6F1D8D0F5A8F29B62A98F05FB1DE46D5E40F4C8146047614E92EFDCD235B80B842F8B08E9DA36A5FDB376E83F9EE2B09EA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...<...(............,IDATx....K.a....J....b](...v.d...<....P....!R.q.T..H.#..G..y.R......Ht0L.>....9.,m)..y.u..}.;....)I.J..,...Q(...X....V..&...Oh.F.!.{.n.{....,...%]...Gc..5x.>@.3...&....2.....%..C..,b.E...u.9=T6.7..)...E......".....lo.y[.e..C....&... D....m.#.......Q..j.......v@..Te.M.......;.....G9...b...}.1.....T...: .hC.f <t.;LT..A........N+....^@...no-../..F.e0aG.3X.....1.(....J.B..[..lgp...?..$8.N....Z4....5......d^..e0aw!..2nA.`.r.."...o.F...A...kW .<..`..R..~...~..J<....Sp..)..:tB...}.2E\|.L.........`.W.W.1....{!s....-..s.Z..[....P.o\|.}.q.......IEND.B`.

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (636)
Category:	downloaded
Size (bytes):	546598
Entropy (8bit):	5.708515975651759
Encrypted:	false
SSDEEP:	6144:yihcR5I9BggP9ZSmsOjitOxTIuAFBZv51aLyOWNfsjj+LBH:y8MIAgxT0F3Bc/Y
MD5:	93E3F7248853EA26232278A54613F93C
SHA1:	16100C397972A415BFCFCE1A470ACAD68C173375
SHA-256:	0EC782544506A0AEA967EA044659C633E1EE735B79E5172CB263797CC5CEFE3A
SHA-512:	26ACA30DE753823A247916A9418AA8BCE24059D80EC35AF6E1A08A6E931DCF3119E326EC7239A1F8F83439979F39460B1F74C1A6D448E2F0702E91F5AD081DF9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17264, version 2.1
Category:	downloaded
Size (bytes):	17264
Entropy (8bit):	7.968311258079736
Encrypted:	false
SSDEEP:	384:JCniidHsnwUHgJANwPtNdi0ONd4Ijgub4WuGgpX+RGVzN:wi8sn7g/W4Ijgub4BGgpwGVR
MD5:	A43B107861B42CE1335E41E43D4E4D00
SHA1:	99BDB1CEC4A68EBE29249C46FEFEFB6880D009E5
SHA-256:	A6542DC92D71EB412BAC89D8FB06C70F15BE74A64B1B4EF1633288B78F4F2FF2
SHA-512:	151D1D3865B24940962476CD6824232EEABFAED92A90439ED5D467D1C7156F7B03BDE91D0303D15648BA13441B8750060066BEDBDEFA0EB930C43A16CBBCFDF9
Malicious:	false
Reputation:	low
URL:	http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Preview:	wOFF......Cp......q@........................FFTM..CT........j..7GDEF..7..........'..GPOS..7.........)MsMGSUB..7.... ... l.t.OS/2.......V...`..]@cmap.......u.......gasp..7\|............glyf...x..)...G.....head...l...6...6...hhea.......!...$...phmtx...@........W\6.loca...l...........:maxp........... .P.8name..2.........N.=post..5h........8',.prep...d........h..........B.L.._.<...........'......d:.....j..............x.c`d``>.........X...".....].?...x.c`d``dg0e`g..& f.B...0........x.c`f.`.........................@9 ..............E........O...a>..[...$.$..H)00..>.....x.m.[HTQ...........d..f^.a.).".0#].0M... .."%a&Q.7)H..>DD.E..K.......D....q.I:.X....}.........SA...M?c.^D.q.\....h.V.P.2...D..FD>.Q......4..:r..5.A..P.Q./!..T.5..R....4.....Ze....j...o...m.1..Z.}..$.q...5=..3C.......r..>.......qe!S.a..%.t..r..7#.^#..{4.......@\....*....q.1T.0.d..w..r.q.k.\G..q[#w8....Y7..r.d........(..\|"8N.k....G3.........Wv.v.I7&M..9.9/.&..s.....8YL0.Q.x.v..1}.z/.3.2.....dm.t.k..M...

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (636)
Category:	downloaded
Size (bytes):	546598
Entropy (8bit):	5.708515975651759
Encrypted:	false
SSDEEP:	6144:yihcR5I9BggP9ZSmsOjitOxTIuAFBZv51aLyOWNfsjj+LBH:y8MIAgxT0F3Bc/Y
MD5:	93E3F7248853EA26232278A54613F93C
SHA1:	16100C397972A415BFCFCE1A470ACAD68C173375
SHA-256:	0EC782544506A0AEA967EA044659C633E1EE735B79E5172CB263797CC5CEFE3A
SHA-512:	26ACA30DE753823A247916A9418AA8BCE24059D80EC35AF6E1A08A6E931DCF3119E326EC7239A1F8F83439979F39460B1F74C1A6D448E2F0702E91F5AD081DF9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10758), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	38886
Entropy (8bit):	5.907408857166927
Encrypted:	false
SSDEEP:	768:CiBtrifZVO7Wg3hIBYScwiOkdJpC5LIYrKNVqTrMQ9BIidiGPDbcq:C8Cg3zwydXClIYrKX8rZ9BIsZPDbcq
MD5:	4BFEF202ADA8AAD9367451681B3DE1B1
SHA1:	76E58ED007969D5F9AB072F87BB374E840A446A1
SHA-256:	3D80A2E5C5C70FBAF330A2F383582568946F56BA1D784BFE705991C108E56260
SHA-512:	AE7928F3574C38B2686E14E680B6A3D40219AEF920EA9B2A6175F7641F82399CCFB7DCBB5468B14688F8418AF175EF3A596CB516E8AAF52753614C3E6825E1F3
Malicious:	false
Reputation:	low
URL:	http://ifdnzact.com/Spam_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%2FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%2BD6EslT4YXZEgi5MQZoS4%2BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%2FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%2BF%2FqfFDeim2hVuLdV2hx9V%2F15hYqnNxwr7w%2FxJkFs&yep=kYWX2UB9hpPluHNh59n0TG5bw0%2FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%2FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%2FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%2Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%2B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%2FqYu%2FBmO%2BefvXO46i%2BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%2BZbCkucnl%2BKaGVQ4CSuga7KRLSemy%2FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%2F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%2FCiWxSUGpEEgdBffigSWf9bQ%2BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%2BRbYTMJnnWjleatxujX%2BIiC4edOKDRJ%2FnR1G4wl1D1zw1q7mWlz%2F%2FnAQ9gKAY08BXIzyLlH48v3xyIw5TB6bHJNQMOLDDEDb5Vn77S96JwQqQ58V9YV3Zs2fQx0LpXi%2Fv3R2KtwFytIci4LYt%2BfLYqlKC%2FZw%2B%2BxXbfeWCD1n0%2BunmHv1QoTf%2Fp7BcNmC7DcfCienIs6Am8IwxZ872y4DiNhFM2SK1Q9eF1RdxIUHt6Km6G2w96DxX1ZU%2BNeA70x%2Bm4TMzA7oDST7GRHEURKQxQ7GU0X%2BT4hpg6YRtVfTDnslnqgYyxa8LvjhqfxnGCrDqp1vWtl%2F%2Fc9fLOHx8fGBmD7Uo7Gp2w9IKwB6t4iC81jYFMx7xV6DxL6vMlDarDP6FCNM2k561vom%2BbqEPC3OfD5eCbb0H9De8PXIaD6wU4xgzvPe%2B6B5knbXTuIIX2ozx66y0xP4nKFkVd91QdhcD%2BXEol%2F99%2FsQafCY7WUeN%2Bx6Hwulv0hhCI%2B5em7Yp%2BMJ%2FYKYvsq9d0GlCivuYqYS04L7SL%2BZTMxZZFdZG3tePDSjj9mL7MpGjQyev1bF7S58DLMYiV3Q2a5RBnSADaGeoWnw7YeXIi43VbqA6%2FzdJgHJ818%2B3e2Y3vbvAawlN7DkXi40YRs2hDrwUoOMqjwYHZYkrxjb1X5IIDg%2Bdne6mXH5A811F5oyaUovL6pl5HtJJWkeraD6o0KyEn%2BdGNOdOLtOiy7N39pIS0bqV0fgrbQrYWQR7K5uKBEoembXLwrInLJwprm3y0xKx8mG5WXstRuIyZk3O8%2Bnxbq6RajzTPe6eNfgpo1hfQ5oh5FFrEF%2BNojERDyxBu%2FaRkUitODbjEFQ2l1mWSfy19%2Fh5k0jOI85K2D6ytDApmEOihBDMJGfBgZ5t9gX2bvLHqKK0nbqzTVSSWbaKreNaYnWV6eCq98QpUCJdgzXSf4bui5n4WP9j5alhTpx2dmsU2bZoycPp%2B%2FaNoseGTxynF2x2Z4pIdzxHKeNnUQbcfsJ%2BwV3C2eGdlU%2BXCtVCXWA872QN0xrGrCHwoadWZv7Ej0F0CAVjEuU1ltCmpBzpr%2BM3urle0wmVKbbEdui3YiW4OyVaxaqksIoWU4ouvxCRY%3D&gtnp=0&gtpp=0&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=IJ5nQJGTrpCE11CZHx4nYrlGNK0IrtJ2pxxwJPNmewE%3D&&gtnp=0&gtpp=0&kt=246&&kbc=10191&ki=26680690&ktd=0&kld=1063&kp=1&bd=-4%231024%231280%231%230
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>..<head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net">.. <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	20199
Entropy (8bit):	3.70382459042729
Encrypted:	false
SSDEEP:	384:jDjzWdNWunWE3JcL3R2G//ttrIHGOesh6UK5gK5KU:jDnu024d
MD5:	A096EECE85B9F9EB151647D759FFBA89
SHA1:	B8349BE8DCCD1BF51ECD157AC9E4FB85EAF72B94
SHA-256:	81FBC2D1C4FD135BD8367182A98AE01F40B7DA6A0279185A177841EB7D8C823F
SHA-512:	5DD48140CD98833F0DD030D827F384D0C5846CBAC6824CD6767E6867A11533CC4549DF57915FDEF8741ABCAF12F258F39F71B20D65AA7F7EA45CE9A7FAED470C
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/images/trust.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 288 38"><style type="text/css">...st0{fill:#b0bec5;}.</style><path class="st0" d="M244.7 12.2v2.1c0 0.3-0.1 0.6-0.2 0.8s-0.4 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8v-2.5c0-0.4 0-0.7 0-0.9s-0.1-0.4-0.2-0.5 -0.3-0.2-0.6-0.2c-0.5 0-0.9 0.2-1 0.5s-0.2 0.9-0.2 1.5v2.2c0 0.3-0.1 0.6-0.2 0.8s-0.3 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8V9.8c0-0.3 0.1-0.5 0.2-0.7s0.3-0.2 0.5-0.2c0.2 0 0.4 0.1 0.5 0.2s0.2 0.3 0.2 0.6v0.2c0.3-0.3 0.6-0.6 0.9-0.7s0.7-0.2 1.1-0.2c0.4 0 0.7 0.1 1 0.2s0.5 0.4 0.7 0.7c0.3-0.3 0.6-0.6 0.9-0.7s0.7-0.2 1-0.2c0.4 0 0.8 0.1 1.1 0.3s0.6 0.4 0.7 0.7c0.1 0.3 0.2 0.7 0.2 1.4v3.1c0 0.3-0.1 0.6-0.2 0.8s-0.4 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8v-2.7c0-0.3 0-0.6 0-0.8s-0.1-0.4-0.2-0.5 -0.3-0.2-0.6-0.2c-0.2 0-0.4 0.1-0.6 0.2s-0.3 0.3-0.4 0.5C244.8 11 244.7 11.5 244.7 12.2z"/><path class="st0" d="M254 14.4c-0.4 0.3-0.8 0.5-1.1 0.7s-0.8 0.2-1.2 0.2c-0.4 0-0.8-0.1-1.1-0.2s-0.5-0.4-0.7-0.7 -0.3-

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21528, version 1.0
Category:	downloaded
Size (bytes):	21528
Entropy (8bit):	7.988581564927641
Encrypted:	false
SSDEEP:	384:47KwKbMXQq5EvJxCscVSq5aR3lYjLW9Sh0G64JKxH8emqhgvdnKa/HyrTX:46bMgqGRYscWR3CjLWiBHQ8lcgvdnKaG
MD5:	780E2060AB7A6A4FA797405755B62441
SHA1:	A99F5EA68F7A617ACCE6F3FD49411142E3B54CF7
SHA-256:	CC308BE27791DC58E7CE19F0D245EF66B8EB6975B8C7AE22D97C09927C84DC48
SHA-512:	C6635045E38101A8975C6885882BA5FF7093444F6679480EFF8B8F935CCD124A38204EEC7CB27C4B48B08D7191BCCEB3F6E66AFC1880C27036A7467B06F4F2C3
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSyqxA.woff2
Preview:	wOF2......T........ ..S...........................4...L..0.`..J.....`..-.....6.$.... .............~.Y=..N....r.@jk...l.......!.....!R..m.;Dl.e....kv.U......;...(.;<G.."F^.MV.0 ....a1e2k2on:.q.x...Me&\|.NlR+.,,2\|..u>.!.P:..z.}F....e.........(.EEA.I.L.GT.-..Bc..N....(Z{...{..BL.I}..D.T...... .......1..U..\|jl..6X.c...,@...<....>+.<.V........x.w.=..{.%H.P3.L7..61....J..k.f...e."...9.v.\|@..._..A.....rO..,.......NB..x..R...........x.A.y.PD.g...-.h7s...1..y2.K.,E..2._.......ip.%...T..E.p...Y.5.u..N....{...I...Q.h..ntWX..(].OM....=.s=.Z._.........%.3_.0.!... ....E....c.!.@..k......=.k.....c.D".H..P.L..\|.._..%,..4.....Pe.x0..Ip...........j.\|....Y.+T#).m@.\..].X.;.e..h..5....U\..T9Q.....E(.(.J.....6Wf.......ep......y.)s..hw.....=...........[.#@.......6.".b.i.I.Co"gRf.".......D...w.........M...R.B~.h.a..4..]}n...QY..#\\.m...2.TY]..P&...,.n..5c.T0Q3..:....Y...v{.X........!...\......K.n...Z......cD......{..t.,.$b.G....l. ..x.q.3..U...",..qR...A.2b .IH4 .'

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32041)
Category:	downloaded
Size (bytes):	41867
Entropy (8bit):	5.139963739750686
Encrypted:	false
SSDEEP:	768:7JgANQPl//TgGMg4/+gqQWXAnpCZEQbE1WRdZfnKMuVevvr:7J01Tg+xhwsZEsE1W3ZfRuVevT
MD5:	F4B4F7EC0C9C4D1401993B2CF8C1DC88
SHA1:	A1B00107E47786E175117AD1654389B48DEC3059
SHA-256:	6B6C6918ABBFF3B44705AB10617401964194CAA770DE984A087FFB85588FE13E
SHA-512:	D93964ED3A6EDB822DF6858470D058BEF7087B3DBBDBCFAA48E8124FD9B69E1FBA9E6C05A05E2B900B706FE284CA2099046B47C5719C60FC659AE808E9224F0A
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/scripts/select2/select2.min.js
Preview:	/.Copyright 2012 Igor Vaynberg..Version: 3.3.2 Timestamp: Mon Mar 25 12:14:18 PDT 2013..This software is licensed under the Apache License, Version 2.0 (the "Apache License") or the GNU.General Public License version 2 (the "GPL License"). You may choose either license to govern your.use of this software only upon the condition that you accept all of the terms of either the Apache.License or the GPL License...You may obtain a copy of the Apache License and the GPL License at:..http://www.apache.org/licenses/LICENSE-2.0.http://www.gnu.org/licenses/gpl-2.0.html..Unless required by applicable law or agreed to in writing, software distributed under the Apache License.or the GPL Licesnse is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND,.either express or implied. See the Apache License and the GPL License for the specific language governing.permissions and limitations under the Apache License and the GPL License../.(function(a){a.fn.each2===void 0&&a.fn.ext

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	downloaded
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/js/min.js?v2.3
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17312, version 2.1
Category:	downloaded
Size (bytes):	17312
Entropy (8bit):	7.969945306725023
Encrypted:	false
SSDEEP:	384:gIMoUXEVKzOr+cRe8hGCLzypa78QKS+RATaD:PMoU0VKzoJe80Ms5D
MD5:	BEBE201D813FEAAD85A3E66607D0DA3A
SHA1:	28B049502AFA8E9DB5340C1A92400591B39870E8
SHA-256:	58BB75322BEB862803B0D156E1A1D01FB1E7FDE82EE93C929B08BF5AEA9FC55B
SHA-512:	2C83376EDCB92F471C458F6C5F316DD24639FCBB88AEC93B2C2690A596CC129860D0D46A2FE1FB4D71AF8AE5856EE48F19EBB17DAD38DDE918AF76C3ABF7441B
Malicious:	false
Reputation:	low
URL:	http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Preview:	wOFF......C.......s`........................FFTM...l........i..+GDEF.............'..GPOS................GSUB...p... ... l.t.OS/2.......T...`..=.cmap.......u.......gasp...\............glyf...d..(...G8a.?.head..9p...4...6....hhea..9....!...$...'hmtx..9.........Y.-.loca..<x............maxp..>........ .P.7name..>............post..A.........8Y,.prep..C.........h.............h<......'......d:................................x...[l\......vb{l......7....h.o.+....!Q.p1.O.P.P%.h......UU...UEMpQ.ZA.1.I !.C..@...=...=..:.cB.P5:>.9{....^k......)wJ..x.)..R~.....gO>m~....6.BJ..:..tIY.._...dq../mxe...l\|ic.....Kc..lzj..o...%.;....^.x}.o..l.e...gOV.V=\5]..z_..o..n.o..;..5.5.........5.....n................O./...c.t.R.4.t...K...TCm.H..........]....nT:.:.t....j..A..JwU...$.![y...J+.....u.....).I.H..7I..H....%..}.........nZ..ef/. .?(O.A7)..q...p...f.#xx.M.O.;.j...q7.7..Ds.O.@t.D1Et...0.F....`.f.d...9wIX.F.a...fxl.C..[.0.F.0..D..E.a.c(.8<G.j...,....S.Y..>.t..2s.Y....G

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56359), with no line terminators
Category:	downloaded
Size (bytes):	56359
Entropy (8bit):	5.908311343417257
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyBbZ54PgxRmSGdXXwW7MFW+JVEEM:4UcW6v+0Bb6hXwW4nxM
MD5:	4ADCCF70587477C74E2FCD636E4EC895
SHA1:	AF63034901C98E2D93FAA7737F9C8F52E302D88B
SHA-256:	0E04CD9EEC042868E190CBDABF2F8F0C7172DCC54AB87EB616ECA14258307B4D
SHA-512:	D3F071C0A0AA7F2D3B8E584C67D4A1ADF1A9A99595CFFC204BF43B99F5B19C4B98CEC8B31E65A46C01509FC7AF8787BD7839299A683D028E388FDC4DED678CB3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	172
Entropy (8bit):	5.212204664713075
Encrypted:	false
SSDEEP:	3:lwZ4cndk1szKYo0B47GAOxvi3xaIYQ1pxoLJm/tgaGa1r/MDo/:ItYsmfa1viha/SpxoLJIzdQDy
MD5:	32081FF2D7AF11D9922150075AD68B96
SHA1:	C799211B03A271EAB532AFC4FE8D4C34A37DF1E4
SHA-256:	51FA91230C27FCB21E78E4A301736E7CE2F5568D50B495519AC234F4F459A8DC
SHA-512:	9E306DB2F439CA25475EB82449960FEC32FA5E83BCBBBB4A4CCB508819BC0713F7119B75649A1F7180E4B45FD6DC258350BD362C305E8B69371A951304B5147B
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISVgn41mTv-y3JjxIFDZRU-s8SBQ14bxIZEgUNrgUHKxIFDVPydWESBQ2SBVTOEgUNd7DIgxIFDTVnGxESBQ3eP5O-EgUNkWGVThIFDa5eyPYSBQ0xPZQw?alt=proto
Preview:	Cn8KCw2UVPrPGgQIBxgBCgsNeG8SGRoECAkYAQoLDa4FBysaBAgJGAEKCw1T8nVhGgQIDRgBCgsNkgVUzhoECDwYAQoLDXewyIMaBAgfGAEKBw01ZxsRGgAKCw3eP5O+GgQIIhgBCgcNkWGVThoACgcNrl7I9hoACgcNMT2UMBoA

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
URL:	http://i3.cdn-image.com/__media__/pics/29590/bg1.png
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 7045
Category:	downloaded
Size (bytes):	2406
Entropy (8bit):	7.917251963807477
Encrypted:	false
SSDEEP:	48:XzYWczqagu8K6htjjD+vWYSpqFX/eg7gHmWttoueIk74kRjTkkABu:DYWczt8KcPD89X/eDGWtoukMkRB
MD5:	1CA91F576C1AC8E04480EE4C2D2688FB
SHA1:	5AC8D21B46C7C6791686D4E00F062545A4814696
SHA-256:	11611E8EDD19A3BA1D40D5E6B6AC5B7032DF823DC878746DFC10508ADB017D82
SHA-512:	536AFEE437D2CF9B1BADD4BDE00F3347802D25A2ACE7B8B129F5199D7E5EE339DE28649A9ED266969B211876B856F7B31186DBA655D1569022B3A5195BC4932C
Malicious:	false
Reputation:	low
URL:	http://le100.net/
Preview:	...........Y.s........h\Q)A..h.0.t,..g.F.............(R.....=...nF.-.......o..\|......\|"K.g....\|."~...:......o.?}!.....Z.\.Y.~...!..RVQ......._.4..%. .!.1...P.'2./;.u.&.z.Bf8...n...(.E:.Y....`4.T.Lr&).#...g...UYHV....b>..../.F.x.{./......"x.....l..s..J!..k...4a.<f...#....,.c...Gr..... -.k"...e..A.`r..F.jQ-.2Fr.p:..X0...sT..Y....y6/.dw.e..W.......;.....j........t).......y.!T.4=R..5.\|.W,.......&./R..Cd@F.[O).Dd<h..T........^..."a......HFh.X...$HX\..F............%.j.....U.<.S..FX...-N%4Z..L...G.O..5[./..g~.:.:gs..\...C.P...9-.&f....9..RQ..A."...ar...E.......g.Y.P0.v(.,gu.6.~.j.W..WEz\|B.......qs$.g...8TS...PD..V.J.v..K).......3.(.:.m...X...O.)......n.b....{.\|o`=.qS..S..U._pQK.Mv.w....3.......CD.Y...8.]..].F.S......3..4.ok.AU...l..z.3k.8.4....a.Q.Pi.F..HC...<..\<.3m`..B...b.p.Os!L..{.G.Ec8... *...J4..72.?.p.%#[.k......:..Y.z.n].;._.?.[b...J.9D..^.u..;.]u..............].`.'.....)E.=.......d...o.<..VSYI!)0.XD..?.Sc...>c..x. @V.6I.A....2[YV

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/pics/29590/bg1.png
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	396
Entropy (8bit):	4.993257872070729
Encrypted:	false
SSDEEP:	6:jU0LELWVMroRLLJULlpbKSy1wibxjpwVKRbq9Bi/z2tkywW/GBWlK:jkWlRLLsltTibx6UdqGL2AK9lK
MD5:	D19F13ABB39098BE07569E078047DE48
SHA1:	583C6CB1BFF82BA7FD8FE0F12FDF8DC988EFD4B6
SHA-256:	3D0F73C914640E6ACD493F58A3BBE324F76230010C5B594653D6BD08D4BE9424
SHA-512:	0D3F62B83F43140C91B472A0AEA2F814675009BEDDD216B4C836CD80582545ACE0ED42215C2E660CA2151B12E2433199F45744751E61A285221459DE405359FF
Malicious:	false
Reputation:	low
URL:	https://www.mydomaincontact.com/forms/script-addon.js
Preview:	// -- additional script for the sale offer version of the form..$(document).ready(function() {. $("#currency").select2({minimumResultsForSearch: -1});.});...function isSalePriceValid() {. $("#priceHolder").removeClass('inputError');. var val = $('#price').val();..var isInt = /^\d+$/.test(val);..if (val && !isInt) {. $("#priceHolder").addClass('inputError');..}..return isInt;.}.

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 33316, version 1.0
Category:	downloaded
Size (bytes):	33316
Entropy (8bit):	7.982608626186682
Encrypted:	false
SSDEEP:	768:KCJR7w4XrSWY4xX0FasJv6BSivTSweHDwy0TADXWxdhSZn++l:K27w+rSWY+0oaC0ivGHDwfMLWPhL+l
MD5:	0A550368742E4B4063C90C6F73EAA16A
SHA1:	74A970F23B23EC1208B39DB0515579906F2B8D89
SHA-256:	D73F9ECEDF37C51DAC037842250D8AD1FB6CC64BDFB16B6902CAA6782866C06A
SHA-512:	20E8682427700FA55B4B8F085F15CE836B5783EBB8956853FD833E321028AE85E86246B5558D14248DE7A31FAF3AACD24DAC6030645954930A009BF1CCE7068F
Malicious:	false
Reputation:	low
URL:	http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff
Preview:	wOFF.......$......&.........................FFTM.............9.GDEF.......M...h.!..GPOS..........6..%dGSUB..,........$W`:COS/2...\|...S...`a.cmap..............ubcvt ..0\...<...<.Y..fpgm..0........eS./.gasp..2L............glyf..2T..F.........head..x....6...6....hhea..y.... ...$...Qhmtx..y<...J.....7V.loca..{...........maxp..}P... ... ....name..}p........gq..post.............J.prep...x........Q>..webf.............\-..........hR.......F.....S..x.%.=.@P...y>.]a.J5.$...`.&..MNuI@..Z2.(]eAM.{..F=Y0....].......O...K.>m..#...x..}.l...\.m./......b.q.!.I...mjH.eX.M[&.0].i3(MQ6b....a.e...tP.x"7.x....^..........u......Y.g..9...?...B.......s.s......<.T...zW-i}.m.r...?..Z..?..W.n..U......./..Se{.........Z.......~.l..=u..{.k..6<.X.s{...o..>......^U.8._...R\|..%..u.x.....Z................_.%5..0tA..F.../.I\|...:..U...W...u...o.N=.sW......q.<~...=..>5..?....n..[...o}....7.Q...Yf..I.qU..O..I..8s..JJ.;.uP..g.~.o......:.O.:._.^+.q.I....,.,.w4P.#..5y.EQ.o...u

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25856)
Category:	downloaded
Size (bytes):	108066
Entropy (8bit):	5.384984873814121
Encrypted:	false
SSDEEP:	768:5cZoWRfuJuXcZoYRgZoo1cZoCRvgStdSk6UNxLdbdxVDhfY6iYeiUf88xBepe07H:5y+qRuZtdSk6IxLdk0nM0R83BUtVaT8
MD5:	9B7777ABF79CFE26597FE4FA8306EEC0
SHA1:	33738A50CA89F942660C3569137B5CE899995435
SHA-256:	81CF36B0F30E1EC5F16B0AA5973D6B3F032338B406D0075B42B9590E3D40AD5C
SHA-512:	7CC6CFE71E9006ACFEB50D0B2E1473162519237A12ACF7AF684A12820F0B4CA9F50108F1F51E2AD293B0D4C29677015187C0A17931373D99350F81139079C06D
Malicious:	false
Reputation:	low
URL:	https://cdn.consentmanager.net/delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfMjY.js
Preview:	if(!("cmp_config_data" in window)){window.cmp_config_data={};}window.cmp_svg_no=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","viewBox":"0 0 512 256"}, "", function (x){x.child("g", {}, "", true, function (x){x.child("ellipse", {"id":"svg_11","ry":"111.500004","rx":"113","cy":"120.89999","cx":"386","stroke-linecap":"null","stroke-linejoin":"null","stroke-dasharray":"null","stroke-width":"0","stroke":"#000000","fill":"#e5e5e5","class":"cmpsvgsilverfill"}).child("rect", {"id":"svg_13","height":"222","width":"256.999992","y":"9.899994","x":"140.000002","stroke-linecap":"null","stroke-linejoin":"null","stroke-dasharray":"null","stroke-width":"0","stroke":"#000000","fill":"#e5e5e5","class":"cmpsvgsilverfill"}).child("ellipse", {"ry":"111.500004","rx":"113","id":"svg_9","cy":"118.399998","cx":"125","stroke-linecap":"null","stroke-linejoin":"null","stroke-dasharray":"null","stroke-width":"0","stroke":"#000000","fill

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	180
Entropy (8bit):	5.250362506031115
Encrypted:	false
SSDEEP:	3:WcTdKYsLovNi2as/MmKXy2dbFS+VgaGa1r/MDouFdVSk:psYColi2pU9XroCdQD1Fn
MD5:	5ABDA1E9EA6B264A319ABF4F1D92BFA7
SHA1:	353389AF72FA972DB05FEFA851AF221CA6B8F7D2
SHA-256:	99E014A37D777C0626E0782DD289DDEF1978F9EAC6804B076FDD8D1414FA0FB1
SHA-512:	F866699B58A5529020BBCBCADD175E212299C5C536890E830889E602312C0B05884CFAE38CEC8CF28A03BFE72EA7A56ADC4C22696659913C1D00896763A845D7
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISXQk8GnuyuHakuRIFDZRU-s8SBQ14bxIZEgUNrgUHKxIFDVPydWESBQ2SBVTOEgUNd7DIgxIFDTVnGxESBQ3eP5O-EgUNkWGVThIFDa5eyPYSBQ0xPZQwEgUNU1pHxQ==?alt=proto
Preview:	CoQBCgsNlFT6zxoECAcYAQoLDXhvEhkaBAgJGAEKCw2uBQcrGgQICRgBCgsNU/J1YRoECA0YAQoLDZIFVM4aBAg8GAEKBw13sMiDGgAKBw01ZxsRGgAKCw3eP5O+GgQIIhgBCgcNkWGVThoACgcNrl7I9hoACgcNMT2UMBoACgcNU1pHxRoA

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.787190602698568
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKvUjfXNIqHWaee:PLKdXNQKv2fXLHL
MD5:	F66834120FACCB628F46EB0FC62F644C
SHA1:	15406E8EA9C7C2E6EF5C775BE244FE166933BFCB
SHA-256:	8F063AE681A530A407EA4D17859790D9E45FD81CE5B3BB6202FC9E30CEF95996
SHA-512:	7C596E61967FE787BC29D262C945D7EB4E02F9F574D3C8C664F333C9C3B4DD4AFF1DFCDE8F34BE1ACFAF8C05423C1C118A4BFD50684A7CD9F90E5F40FBC89653
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__en.js');

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	downloaded
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
URL:	http://i2.cdn-image.com/__media__/js/min.js?v2.3
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 8, 2024 17:53:10.504544973 CEST	49674	443	192.168.2.5	23.1.237.91
Jul 8, 2024 17:53:10.505345106 CEST	49675	443	192.168.2.5	23.1.237.91
Jul 8, 2024 17:53:10.629621029 CEST	49673	443	192.168.2.5	23.1.237.91
Jul 8, 2024 17:53:17.748904943 CEST	49709	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:17.749420881 CEST	49710	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:17.754125118 CEST	80	49709	185.53.179.170	192.168.2.5
Jul 8, 2024 17:53:17.754240990 CEST	49709	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:17.754584074 CEST	80	49710	185.53.179.170	192.168.2.5
Jul 8, 2024 17:53:17.754653931 CEST	49710	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:17.755484104 CEST	49710	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:17.760502100 CEST	80	49710	185.53.179.170	192.168.2.5
Jul 8, 2024 17:53:18.656869888 CEST	80	49710	185.53.179.170	192.168.2.5
Jul 8, 2024 17:53:18.656925917 CEST	80	49710	185.53.179.170	192.168.2.5
Jul 8, 2024 17:53:18.656964064 CEST	80	49710	185.53.179.170	192.168.2.5
Jul 8, 2024 17:53:18.657000065 CEST	49710	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:18.712225914 CEST	49710	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:18.859705925 CEST	49713	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:18.866748095 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:18.866851091 CEST	49713	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:18.867212057 CEST	49713	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:18.873960018 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.105720997 CEST	49674	443	192.168.2.5	23.1.237.91
Jul 8, 2024 17:53:20.105854988 CEST	49675	443	192.168.2.5	23.1.237.91
Jul 8, 2024 17:53:20.209299088 CEST	49714	443	192.168.2.5	142.250.186.36
Jul 8, 2024 17:53:20.209342957 CEST	443	49714	142.250.186.36	192.168.2.5
Jul 8, 2024 17:53:20.209408045 CEST	49714	443	192.168.2.5	142.250.186.36
Jul 8, 2024 17:53:20.210043907 CEST	49714	443	192.168.2.5	142.250.186.36
Jul 8, 2024 17:53:20.210062027 CEST	443	49714	142.250.186.36	192.168.2.5
Jul 8, 2024 17:53:20.231971025 CEST	49673	443	192.168.2.5	23.1.237.91
Jul 8, 2024 17:53:20.520081997 CEST	49715	443	192.168.2.5	184.28.90.27
Jul 8, 2024 17:53:20.520109892 CEST	443	49715	184.28.90.27	192.168.2.5
Jul 8, 2024 17:53:20.520497084 CEST	49715	443	192.168.2.5	184.28.90.27
Jul 8, 2024 17:53:20.523911953 CEST	49715	443	192.168.2.5	184.28.90.27
Jul 8, 2024 17:53:20.523922920 CEST	443	49715	184.28.90.27	192.168.2.5
Jul 8, 2024 17:53:20.615292072 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.615314960 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.615330935 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.615396023 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.615411997 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.615422964 CEST	49713	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:20.615432024 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.615448952 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.615466118 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.615492105 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.615513086 CEST	49713	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:20.615513086 CEST	49713	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:20.615513086 CEST	49713	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:20.621504068 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.621579885 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.621596098 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.621645927 CEST	49713	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:20.621678114 CEST	49713	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:20.621783972 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.621810913 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.621864080 CEST	49713	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:20.705523014 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.705579996 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.705612898 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.705646992 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.705693007 CEST	49713	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:20.705693007 CEST	49713	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:20.705895901 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.705946922 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.705982924 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.706017017 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.706048965 CEST	49713	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:20.706077099 CEST	49713	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:20.706860065 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.706892967 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.706929922 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.706963062 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.706979990 CEST	49713	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:20.707022905 CEST	49713	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:20.707705021 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.707813025 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.707845926 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.708030939 CEST	49713	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:20.708297968 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.708595991 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.709034920 CEST	49713	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:20.711683035 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.711762905 CEST	49713	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:20.711777925 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.725130081 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:20.725158930 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:20.725377083 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:20.726551056 CEST	49717	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:20.726557970 CEST	443	49717	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:20.727102995 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:20.727114916 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:20.727129936 CEST	49717	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:20.727283955 CEST	49717	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:20.727288961 CEST	443	49717	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:20.731929064 CEST	49713	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:20.732419968 CEST	49718	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:20.736777067 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.737473965 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.737629890 CEST	49718	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:20.738050938 CEST	49718	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:20.738451004 CEST	49719	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:20.738491058 CEST	443	49719	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:20.738557100 CEST	49719	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:20.738909006 CEST	49719	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:20.738924980 CEST	443	49719	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:20.743879080 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.784503937 CEST	49720	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:20.789803028 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:20.789885998 CEST	49720	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:20.790116072 CEST	49720	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:20.794970036 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:20.835083008 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:20.879262924 CEST	49713	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:20.911106110 CEST	443	49714	142.250.186.36	192.168.2.5
Jul 8, 2024 17:53:20.912523985 CEST	49714	443	192.168.2.5	142.250.186.36
Jul 8, 2024 17:53:20.912534952 CEST	443	49714	142.250.186.36	192.168.2.5
Jul 8, 2024 17:53:20.914062023 CEST	443	49714	142.250.186.36	192.168.2.5
Jul 8, 2024 17:53:20.914145947 CEST	49714	443	192.168.2.5	142.250.186.36
Jul 8, 2024 17:53:20.915486097 CEST	49714	443	192.168.2.5	142.250.186.36
Jul 8, 2024 17:53:20.915575027 CEST	443	49714	142.250.186.36	192.168.2.5
Jul 8, 2024 17:53:20.959136009 CEST	49714	443	192.168.2.5	142.250.186.36
Jul 8, 2024 17:53:20.959144115 CEST	443	49714	142.250.186.36	192.168.2.5
Jul 8, 2024 17:53:21.007131100 CEST	49714	443	192.168.2.5	142.250.186.36
Jul 8, 2024 17:53:21.171374083 CEST	443	49715	184.28.90.27	192.168.2.5
Jul 8, 2024 17:53:21.171454906 CEST	49715	443	192.168.2.5	184.28.90.27
Jul 8, 2024 17:53:21.175497055 CEST	49715	443	192.168.2.5	184.28.90.27
Jul 8, 2024 17:53:21.175506115 CEST	443	49715	184.28.90.27	192.168.2.5
Jul 8, 2024 17:53:21.175987959 CEST	443	49715	184.28.90.27	192.168.2.5
Jul 8, 2024 17:53:21.210444927 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:21.215234041 CEST	49715	443	192.168.2.5	184.28.90.27
Jul 8, 2024 17:53:21.217156887 CEST	49715	443	192.168.2.5	184.28.90.27
Jul 8, 2024 17:53:21.263289928 CEST	49718	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:21.264494896 CEST	443	49715	184.28.90.27	192.168.2.5
Jul 8, 2024 17:53:21.299897909 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.299968004 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.300002098 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.300034046 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.300067902 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.300101042 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.300137043 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.300168991 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.300196886 CEST	49720	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:21.300198078 CEST	49720	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:21.300332069 CEST	49720	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:21.300332069 CEST	49720	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:21.409796000 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:21.410053015 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:21.410077095 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:21.411699057 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:21.411780119 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:21.440582037 CEST	443	49715	184.28.90.27	192.168.2.5
Jul 8, 2024 17:53:21.440738916 CEST	443	49715	184.28.90.27	192.168.2.5
Jul 8, 2024 17:53:21.440793991 CEST	49715	443	192.168.2.5	184.28.90.27
Jul 8, 2024 17:53:21.441068888 CEST	49715	443	192.168.2.5	184.28.90.27
Jul 8, 2024 17:53:21.441088915 CEST	443	49715	184.28.90.27	192.168.2.5
Jul 8, 2024 17:53:21.441103935 CEST	49715	443	192.168.2.5	184.28.90.27
Jul 8, 2024 17:53:21.441111088 CEST	443	49715	184.28.90.27	192.168.2.5
Jul 8, 2024 17:53:21.461072922 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:21.461246967 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:21.461328030 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:21.503103971 CEST	49720	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:21.508506060 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.509641886 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:21.509655952 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:21.513314962 CEST	49721	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:21.518615961 CEST	80	49721	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.518695116 CEST	49721	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:21.521084070 CEST	49721	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:21.526910067 CEST	80	49721	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.552017927 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:21.608457088 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.608530045 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.608563900 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.608695984 CEST	49720	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:21.608876944 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.608908892 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.608937979 CEST	49720	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:21.608942986 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.608978033 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.608993053 CEST	49720	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:21.609014034 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.609062910 CEST	49720	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:21.609659910 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.609710932 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.609744072 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.609765053 CEST	49720	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:21.609966993 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.610018969 CEST	49720	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:21.619093895 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.619123936 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.619173050 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.619179010 CEST	49720	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:21.619205952 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.619240046 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:21.619270086 CEST	49720	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:21.639082909 CEST	49722	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:21.640145063 CEST	49723	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:21.654511929 CEST	443	49717	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:21.662791014 CEST	49717	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:21.662806034 CEST	443	49717	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:21.665420055 CEST	443	49717	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:21.665498018 CEST	49717	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:21.667186975 CEST	49720	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:21.723009109 CEST	49717	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:21.723244905 CEST	443	49717	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:21.763998985 CEST	49717	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:21.764013052 CEST	443	49717	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:21.806054115 CEST	49717	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:21.820135117 CEST	49724	443	192.168.2.5	184.28.90.27
Jul 8, 2024 17:53:21.820164919 CEST	443	49724	184.28.90.27	192.168.2.5
Jul 8, 2024 17:53:21.820241928 CEST	49724	443	192.168.2.5	184.28.90.27
Jul 8, 2024 17:53:21.820694923 CEST	49724	443	192.168.2.5	184.28.90.27
Jul 8, 2024 17:53:21.820707083 CEST	443	49724	184.28.90.27	192.168.2.5
Jul 8, 2024 17:53:21.889487028 CEST	49725	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:22.654267073 CEST	49722	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:22.654285908 CEST	49723	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:22.696291924 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:22.696398020 CEST	49720	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:22.699088097 CEST	443	49703	23.1.237.91	192.168.2.5
Jul 8, 2024 17:53:22.699177980 CEST	49703	443	192.168.2.5	23.1.237.91
Jul 8, 2024 17:53:22.699918985 CEST	443	49719	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:22.700180054 CEST	49719	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:22.700212955 CEST	443	49719	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:22.701430082 CEST	80	49721	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:22.701848984 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:22.701883078 CEST	443	49719	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:22.701909065 CEST	49720	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:22.701952934 CEST	49719	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:22.705161095 CEST	80	49722	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:22.705192089 CEST	80	49723	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:22.705235004 CEST	49722	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:22.705286026 CEST	49723	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:22.705354929 CEST	80	49725	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:22.705387115 CEST	80	49722	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:22.705415010 CEST	80	49723	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:22.705420017 CEST	49725	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:22.705430031 CEST	49722	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:22.705465078 CEST	49723	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:22.705522060 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.705555916 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.705570936 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.705605030 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.705631971 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.705672979 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.705701113 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.705732107 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.705749035 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.705749035 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.705749035 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.705749989 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.705780983 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.706566095 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.706595898 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.706640959 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.706649065 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.706680059 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.706691980 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.711802006 CEST	49722	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:22.712044954 CEST	49725	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:22.712116957 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.712168932 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.712205887 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.712213039 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.712243080 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.712261915 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.714241028 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.714286089 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.714322090 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.714329004 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.714359045 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.714370966 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.716903925 CEST	80	49722	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:22.717134953 CEST	80	49725	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:22.718204021 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.718247890 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.718287945 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.718297958 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.718334913 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.718360901 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.719466925 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.719511032 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.719538927 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.719546080 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.719577074 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.719595909 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.721652031 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.721693039 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.721745014 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.721755028 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.721796036 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.723345041 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.723386049 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.723417044 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.723427057 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.723450899 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.723469973 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.724900961 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.724941969 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.724967003 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.724975109 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.725006104 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.725030899 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.725728035 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.725766897 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.725801945 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.725807905 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.725835085 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.725929976 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.726123095 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.726162910 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.726202965 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.726210117 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.726233006 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.726295948 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.727103949 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.727145910 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.727174997 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.727180958 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.727220058 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.727988005 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.728032112 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.728064060 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.728070974 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.728097916 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.728116989 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.729573011 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.729614019 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.729645014 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.729650974 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.729676008 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.729693890 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.730727911 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.730786085 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.730813980 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.730819941 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.730849028 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.730865002 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.731170893 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.731214046 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.731240988 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.731246948 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.731276035 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.731286049 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.731674910 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.731714964 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.731756926 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.731762886 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.731777906 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.731801987 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.731813908 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.731854916 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.731889963 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.731895924 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.731920958 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.731930971 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.732222080 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.732263088 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.732286930 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.732292891 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.732320070 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.732341051 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.733037949 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.733078003 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.733102083 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.733108044 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.733138084 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.733156919 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.733206987 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.733248949 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.733263016 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.733268976 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.733314037 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.733549118 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.733589888 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.733611107 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.733618021 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.733653069 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.733669996 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.734026909 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.734071970 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.734098911 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.734106064 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.734131098 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.734152079 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.734363079 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.734405041 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.734430075 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.734436035 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.734466076 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.734487057 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.734886885 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.734927893 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.734949112 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.734955072 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.734987974 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.735008955 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.735158920 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.735199928 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.735209942 CEST	49726	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:22.735224009 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.735229969 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.735259056 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.735271931 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.735281944 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.735414982 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.735464096 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.735472918 CEST	443	49716	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:22.735502958 CEST	49716	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:22.740201950 CEST	80	49726	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:22.740261078 CEST	49726	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:22.740418911 CEST	49726	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:22.745368958 CEST	80	49726	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:22.747133017 CEST	49721	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:22.816638947 CEST	80	49721	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:22.859483004 CEST	49721	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.053675890 CEST	49719	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:23.054042101 CEST	49719	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:23.054068089 CEST	443	49719	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:23.054136992 CEST	443	49719	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:23.096501112 CEST	49719	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:23.096534967 CEST	443	49719	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:23.112024069 CEST	49727	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.117486000 CEST	80	49727	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.117557049 CEST	49727	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.118375063 CEST	49727	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.123167038 CEST	80	49727	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.139050961 CEST	49719	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:23.176877975 CEST	80	49725	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.176902056 CEST	80	49725	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.176922083 CEST	80	49725	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.176956892 CEST	80	49725	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.176975965 CEST	80	49725	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.176974058 CEST	49725	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.176995993 CEST	80	49725	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.177016020 CEST	80	49725	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.177035093 CEST	80	49725	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.177037001 CEST	49725	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.177037954 CEST	49725	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.177054882 CEST	80	49725	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.177076101 CEST	80	49725	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.177086115 CEST	49725	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.177119970 CEST	49725	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.181972980 CEST	80	49725	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.182055950 CEST	80	49725	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.182101011 CEST	49725	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.195642948 CEST	80	49722	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.195708990 CEST	80	49722	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.195771933 CEST	49722	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.195801020 CEST	80	49722	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.195842981 CEST	80	49722	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.195892096 CEST	49722	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.195897102 CEST	80	49722	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.195962906 CEST	80	49722	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.196007013 CEST	80	49722	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.196008921 CEST	49722	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.196049929 CEST	80	49722	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.196094036 CEST	80	49722	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.196099043 CEST	49722	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.201065063 CEST	80	49722	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.201085091 CEST	80	49722	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.201106071 CEST	49722	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.201152086 CEST	80	49722	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.201199055 CEST	49722	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.204204082 CEST	80	49726	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.204225063 CEST	80	49726	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.204246998 CEST	80	49726	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.204263926 CEST	80	49726	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.204277992 CEST	49726	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.204305887 CEST	49726	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.204356909 CEST	80	49726	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.204375982 CEST	80	49726	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.204396963 CEST	80	49726	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.204413891 CEST	80	49726	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.204416990 CEST	49726	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.204447031 CEST	49726	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.205380917 CEST	80	49726	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.205436945 CEST	80	49726	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.205487967 CEST	49726	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.209184885 CEST	80	49726	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.209203959 CEST	80	49726	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.209223986 CEST	80	49726	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.209242105 CEST	80	49726	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.209265947 CEST	49726	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.209285975 CEST	49726	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.210099936 CEST	80	49726	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.210117102 CEST	80	49726	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.210159063 CEST	49726	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.259763002 CEST	443	49719	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:23.259855986 CEST	443	49719	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:23.260045052 CEST	49719	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:23.266720057 CEST	80	49725	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.266740084 CEST	80	49725	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.266760111 CEST	80	49725	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.266802073 CEST	49725	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.266810894 CEST	80	49725	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.266858101 CEST	49725	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.287270069 CEST	80	49722	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.287290096 CEST	80	49722	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.287307978 CEST	80	49722	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.287338018 CEST	49722	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.287477970 CEST	80	49722	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.287520885 CEST	49722	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.288278103 CEST	49719	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:23.288352966 CEST	443	49719	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:23.290951014 CEST	80	49726	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.290967941 CEST	80	49726	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.291021109 CEST	49726	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.291055918 CEST	80	49726	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.291074038 CEST	80	49726	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.291093111 CEST	80	49726	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.291116953 CEST	49726	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.311449051 CEST	80	49709	185.53.179.170	192.168.2.5
Jul 8, 2024 17:53:23.311501026 CEST	49709	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:23.331851959 CEST	49709	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:23.332171917 CEST	49728	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:23.332195997 CEST	443	49728	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:23.332247972 CEST	49728	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:23.332595110 CEST	49728	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:23.332612038 CEST	443	49728	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:23.337387085 CEST	80	49709	185.53.179.170	192.168.2.5
Jul 8, 2024 17:53:23.341367006 CEST	49726	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.362166882 CEST	443	49724	184.28.90.27	192.168.2.5
Jul 8, 2024 17:53:23.362253904 CEST	49724	443	192.168.2.5	184.28.90.27
Jul 8, 2024 17:53:23.365350008 CEST	49724	443	192.168.2.5	184.28.90.27
Jul 8, 2024 17:53:23.365360022 CEST	443	49724	184.28.90.27	192.168.2.5
Jul 8, 2024 17:53:23.365756035 CEST	443	49724	184.28.90.27	192.168.2.5
Jul 8, 2024 17:53:23.366751909 CEST	49724	443	192.168.2.5	184.28.90.27
Jul 8, 2024 17:53:23.408534050 CEST	443	49724	184.28.90.27	192.168.2.5
Jul 8, 2024 17:53:23.564832926 CEST	80	49727	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.606971979 CEST	49727	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.637681007 CEST	443	49724	184.28.90.27	192.168.2.5
Jul 8, 2024 17:53:23.637845039 CEST	443	49724	184.28.90.27	192.168.2.5
Jul 8, 2024 17:53:23.637974024 CEST	49724	443	192.168.2.5	184.28.90.27
Jul 8, 2024 17:53:23.701214075 CEST	80	49727	208.91.196.253	192.168.2.5
Jul 8, 2024 17:53:23.750648022 CEST	49727	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:53:23.814348936 CEST	49724	443	192.168.2.5	184.28.90.27
Jul 8, 2024 17:53:23.814378977 CEST	443	49724	184.28.90.27	192.168.2.5
Jul 8, 2024 17:53:23.980519056 CEST	443	49728	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:23.980931044 CEST	49728	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:23.980948925 CEST	443	49728	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:23.981430054 CEST	443	49728	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:23.981726885 CEST	49728	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:23.981802940 CEST	443	49728	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:23.981950045 CEST	49728	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:24.024539948 CEST	443	49728	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:24.295981884 CEST	443	49728	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:24.296153069 CEST	443	49728	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:24.296217918 CEST	49728	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:24.297070980 CEST	49728	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:24.297082901 CEST	443	49728	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:24.300775051 CEST	49729	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:24.300828934 CEST	443	49729	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:24.300944090 CEST	49729	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:24.301101923 CEST	49729	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:24.301119089 CEST	443	49729	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:24.974315882 CEST	443	49729	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:24.974687099 CEST	49729	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:24.974756956 CEST	443	49729	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:24.975872993 CEST	443	49729	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:24.976315975 CEST	49729	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:24.976492882 CEST	49729	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:24.976505995 CEST	443	49729	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:24.976531029 CEST	443	49729	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:25.018569946 CEST	49729	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:25.290554047 CEST	443	49729	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:25.290623903 CEST	443	49729	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:25.290767908 CEST	443	49729	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:25.290777922 CEST	49729	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:25.290847063 CEST	49729	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:25.291657925 CEST	49729	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:25.291702032 CEST	443	49729	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:25.297027111 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:25.297056913 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:25.297189951 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:25.297547102 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:25.297558069 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:25.991427898 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:25.991832018 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:25.991849899 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:25.992347956 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:25.992986917 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:25.993082047 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:25.993176937 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:26.036540031 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.040108919 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:26.397480011 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.397553921 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.397576094 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.397619963 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.397624969 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:26.397653103 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.397685051 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.397686005 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:26.397711992 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:26.397735119 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:26.401838064 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.401884079 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.401921034 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:26.401932001 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.401992083 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:26.441369057 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.441441059 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.441478014 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:26.441498041 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.441545963 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:26.441569090 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:26.497571945 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.497648001 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.497685909 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:26.497698069 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.497749090 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:26.527339935 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.527415991 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.527462959 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:26.527472973 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.527522087 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:26.527582884 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:26.548769951 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.548825026 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.548877001 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:26.548891068 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.548929930 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:26.548957109 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:26.563338995 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.563385010 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.563445091 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:26.563452005 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.563496113 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:26.563524008 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.563587904 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:26.563888073 CEST	49730	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:26.563905954 CEST	443	49730	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:26.574975014 CEST	49710	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:26.584007978 CEST	80	49710	185.53.179.170	192.168.2.5
Jul 8, 2024 17:53:26.772916079 CEST	80	49710	185.53.179.170	192.168.2.5
Jul 8, 2024 17:53:26.815174103 CEST	49710	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:26.846757889 CEST	49731	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:26.851973057 CEST	80	49731	185.53.179.170	192.168.2.5
Jul 8, 2024 17:53:26.852132082 CEST	49731	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:26.852468014 CEST	49731	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:26.857996941 CEST	80	49731	185.53.179.170	192.168.2.5
Jul 8, 2024 17:53:27.502660990 CEST	80	49731	185.53.179.170	192.168.2.5
Jul 8, 2024 17:53:27.544332027 CEST	49731	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:30.464061975 CEST	49732	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:30.464114904 CEST	443	49732	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:30.464306116 CEST	49732	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:30.464970112 CEST	49733	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:30.465025902 CEST	443	49733	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:30.465126038 CEST	49733	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:30.466841936 CEST	49733	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:30.466864109 CEST	443	49733	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:30.466981888 CEST	49732	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:30.467000008 CEST	443	49732	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:30.804711103 CEST	443	49714	142.250.186.36	192.168.2.5
Jul 8, 2024 17:53:30.804867983 CEST	443	49714	142.250.186.36	192.168.2.5
Jul 8, 2024 17:53:30.804999113 CEST	49714	443	192.168.2.5	142.250.186.36
Jul 8, 2024 17:53:31.197366953 CEST	443	49732	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:31.197841883 CEST	49732	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:31.197873116 CEST	443	49732	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:31.198123932 CEST	443	49733	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:31.198967934 CEST	49733	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:31.199012041 CEST	443	49733	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:31.199310064 CEST	443	49732	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:31.199368000 CEST	49732	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:31.200465918 CEST	49732	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:31.200630903 CEST	443	49732	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:31.200660944 CEST	443	49733	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:31.200725079 CEST	49733	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:31.200968027 CEST	49732	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:31.200978041 CEST	443	49732	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:31.201915979 CEST	49733	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:31.202004910 CEST	443	49733	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:31.244965076 CEST	49732	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:31.244965076 CEST	49733	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:31.244992018 CEST	443	49733	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:31.293958902 CEST	49733	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:31.464477062 CEST	443	49732	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:31.464510918 CEST	443	49732	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:31.464541912 CEST	443	49732	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:31.464574099 CEST	49732	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:31.464586020 CEST	443	49732	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:31.464611053 CEST	443	49732	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:31.464627981 CEST	49732	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:31.464656115 CEST	49732	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:31.466588020 CEST	49732	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:31.466603994 CEST	443	49732	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:31.896889925 CEST	49714	443	192.168.2.5	142.250.186.36
Jul 8, 2024 17:53:31.896919012 CEST	443	49714	142.250.186.36	192.168.2.5
Jul 8, 2024 17:53:31.900199890 CEST	49733	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:31.901051998 CEST	49736	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:31.901086092 CEST	443	49736	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:31.901226044 CEST	49736	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:31.901969910 CEST	49736	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:31.901988029 CEST	443	49736	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:31.903044939 CEST	49737	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:31.903104067 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:31.903171062 CEST	49737	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:31.903564930 CEST	49737	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:31.903584003 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:31.904432058 CEST	49738	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:31.904443979 CEST	443	49738	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:31.904717922 CEST	49738	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:31.904985905 CEST	49738	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:31.905002117 CEST	443	49738	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:31.915060997 CEST	49740	443	192.168.2.5	142.250.186.164
Jul 8, 2024 17:53:31.915071011 CEST	443	49740	142.250.186.164	192.168.2.5
Jul 8, 2024 17:53:31.915266991 CEST	49740	443	192.168.2.5	142.250.186.164
Jul 8, 2024 17:53:31.915431023 CEST	49740	443	192.168.2.5	142.250.186.164
Jul 8, 2024 17:53:31.915442944 CEST	443	49740	142.250.186.164	192.168.2.5
Jul 8, 2024 17:53:31.940529108 CEST	443	49733	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.163796902 CEST	443	49733	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.163861990 CEST	443	49733	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.163886070 CEST	443	49733	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.163923025 CEST	443	49733	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.163934946 CEST	443	49733	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.163944006 CEST	443	49733	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.163943052 CEST	49733	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.163971901 CEST	443	49733	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.163988113 CEST	49733	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.163988113 CEST	49733	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.164000034 CEST	443	49733	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.164028883 CEST	49733	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.164041042 CEST	443	49733	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.164052963 CEST	49733	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.164086103 CEST	49733	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.164094925 CEST	443	49733	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.164156914 CEST	443	49733	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.165390968 CEST	49733	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.181045055 CEST	49733	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.181066036 CEST	443	49733	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.563026905 CEST	443	49740	142.250.186.164	192.168.2.5
Jul 8, 2024 17:53:32.608901024 CEST	49740	443	192.168.2.5	142.250.186.164
Jul 8, 2024 17:53:32.610719919 CEST	443	49738	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.631820917 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.634229898 CEST	443	49736	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.654015064 CEST	49738	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.656934977 CEST	49736	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.656956911 CEST	443	49736	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.657295942 CEST	49737	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.657315016 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.657388926 CEST	49738	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.657396078 CEST	443	49738	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.657428980 CEST	443	49736	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.657608032 CEST	49740	443	192.168.2.5	142.250.186.164
Jul 8, 2024 17:53:32.657671928 CEST	443	49740	142.250.186.164	192.168.2.5
Jul 8, 2024 17:53:32.658070087 CEST	49736	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.658152103 CEST	443	49736	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.658454895 CEST	49736	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.658498049 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.661309004 CEST	443	49738	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.661412001 CEST	49738	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.661518097 CEST	443	49740	142.250.186.164	192.168.2.5
Jul 8, 2024 17:53:32.661598921 CEST	49740	443	192.168.2.5	142.250.186.164
Jul 8, 2024 17:53:32.673548937 CEST	49737	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.673971891 CEST	49740	443	192.168.2.5	142.250.186.164
Jul 8, 2024 17:53:32.673985958 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.674226046 CEST	443	49740	142.250.186.164	192.168.2.5
Jul 8, 2024 17:53:32.674333096 CEST	49738	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.674536943 CEST	443	49738	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.674650908 CEST	49737	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.674706936 CEST	49740	443	192.168.2.5	142.250.186.164
Jul 8, 2024 17:53:32.674724102 CEST	443	49740	142.250.186.164	192.168.2.5
Jul 8, 2024 17:53:32.674736977 CEST	49738	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.674752951 CEST	443	49738	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.700515032 CEST	443	49736	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.715163946 CEST	49738	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.715274096 CEST	49740	443	192.168.2.5	142.250.186.164
Jul 8, 2024 17:53:32.716500044 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.868988991 CEST	443	49740	142.250.186.164	192.168.2.5
Jul 8, 2024 17:53:32.869044065 CEST	443	49740	142.250.186.164	192.168.2.5
Jul 8, 2024 17:53:32.869129896 CEST	49740	443	192.168.2.5	142.250.186.164
Jul 8, 2024 17:53:32.869148970 CEST	443	49740	142.250.186.164	192.168.2.5
Jul 8, 2024 17:53:32.869400024 CEST	49740	443	192.168.2.5	142.250.186.164
Jul 8, 2024 17:53:32.902431965 CEST	443	49736	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.902462006 CEST	443	49736	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.902524948 CEST	443	49736	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.902538061 CEST	49736	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.902787924 CEST	49736	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.909188032 CEST	49740	443	192.168.2.5	142.250.186.164
Jul 8, 2024 17:53:32.909231901 CEST	443	49740	142.250.186.164	192.168.2.5
Jul 8, 2024 17:53:32.913212061 CEST	49736	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.913233042 CEST	443	49736	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.945594072 CEST	443	49738	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.945656061 CEST	443	49738	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.945686102 CEST	443	49738	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.945708036 CEST	443	49738	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.945724964 CEST	49738	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.945744038 CEST	443	49738	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.945761919 CEST	49738	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.945770025 CEST	443	49738	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.945792913 CEST	443	49738	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.945833921 CEST	49738	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.945842981 CEST	443	49738	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.945857048 CEST	49738	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.953083992 CEST	443	49738	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.953152895 CEST	443	49738	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.953196049 CEST	49738	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.953208923 CEST	443	49738	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.953243971 CEST	49738	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.976632118 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.976699114 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.976744890 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.976766109 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.976788044 CEST	49737	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.976874113 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.976912975 CEST	49737	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.976912975 CEST	49737	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.976942062 CEST	49737	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.983659029 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.983721018 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.983752966 CEST	49737	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.983761072 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.983784914 CEST	49737	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.986123085 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.986169100 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.986191034 CEST	49737	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.986202002 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.986237049 CEST	49737	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.997663975 CEST	49738	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.999352932 CEST	443	49738	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.999393940 CEST	443	49738	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.999464035 CEST	49738	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.999515057 CEST	49738	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:32.999522924 CEST	443	49738	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.999557018 CEST	443	49738	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:32.999604940 CEST	49738	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.003531933 CEST	49738	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.003560066 CEST	443	49738	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.008872032 CEST	49745	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.008891106 CEST	443	49745	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.009047985 CEST	49745	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.009217978 CEST	49745	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.009223938 CEST	443	49745	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.029643059 CEST	49737	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.066667080 CEST	49703	443	192.168.2.5	23.1.237.91
Jul 8, 2024 17:53:33.066729069 CEST	49703	443	192.168.2.5	23.1.237.91
Jul 8, 2024 17:53:33.067092896 CEST	49746	443	192.168.2.5	23.1.237.91
Jul 8, 2024 17:53:33.067148924 CEST	443	49746	23.1.237.91	192.168.2.5
Jul 8, 2024 17:53:33.067228079 CEST	49746	443	192.168.2.5	23.1.237.91
Jul 8, 2024 17:53:33.067687035 CEST	49746	443	192.168.2.5	23.1.237.91
Jul 8, 2024 17:53:33.067707062 CEST	443	49746	23.1.237.91	192.168.2.5
Jul 8, 2024 17:53:33.071844101 CEST	443	49703	23.1.237.91	192.168.2.5
Jul 8, 2024 17:53:33.071870089 CEST	443	49703	23.1.237.91	192.168.2.5
Jul 8, 2024 17:53:33.075393915 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.075455904 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.075495958 CEST	49737	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.075515985 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.075541019 CEST	49737	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.075565100 CEST	49737	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.075911999 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.075953007 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.075987101 CEST	49737	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.075994015 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.076021910 CEST	49737	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.076039076 CEST	49737	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.076966047 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.077065945 CEST	49737	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.077081919 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.077127934 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.077178955 CEST	49737	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.078305960 CEST	49737	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.078320026 CEST	443	49737	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.081986904 CEST	49747	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.082076073 CEST	443	49747	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.082149982 CEST	49747	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.082365990 CEST	49747	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.082403898 CEST	443	49747	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.093966961 CEST	49748	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.093986034 CEST	443	49748	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.094176054 CEST	49748	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.094575882 CEST	49748	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.094583035 CEST	443	49748	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.688174009 CEST	443	49746	23.1.237.91	192.168.2.5
Jul 8, 2024 17:53:33.688257933 CEST	49746	443	192.168.2.5	23.1.237.91
Jul 8, 2024 17:53:33.743530989 CEST	443	49745	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.743875027 CEST	49745	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.743885040 CEST	443	49745	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.744561911 CEST	443	49745	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.745050907 CEST	49745	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.745132923 CEST	443	49745	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.745259047 CEST	49745	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.792498112 CEST	443	49745	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.813144922 CEST	443	49748	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.813352108 CEST	49748	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.813361883 CEST	443	49748	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.814228058 CEST	443	49748	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.814286947 CEST	49748	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.814568996 CEST	49748	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.814608097 CEST	443	49748	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.814732075 CEST	49748	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.814737082 CEST	443	49748	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.841064930 CEST	443	49747	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.841293097 CEST	49747	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.841329098 CEST	443	49747	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.842119932 CEST	443	49747	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.842467070 CEST	49747	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.842551947 CEST	443	49747	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.842597008 CEST	49747	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.857660055 CEST	49748	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:33.888492107 CEST	443	49747	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:33.889820099 CEST	49747	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:34.214543104 CEST	443	49745	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:34.214606047 CEST	443	49745	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:34.214672089 CEST	49745	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:34.214684963 CEST	443	49745	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:34.214761019 CEST	443	49745	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:34.214816093 CEST	49745	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:34.216098070 CEST	443	49748	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:34.216155052 CEST	443	49748	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:34.216200113 CEST	49748	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:34.217576981 CEST	49745	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:34.217587948 CEST	443	49745	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:34.223503113 CEST	49748	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:34.223507881 CEST	443	49748	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:34.265320063 CEST	49753	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:34.265357018 CEST	443	49753	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:34.265425920 CEST	49753	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:34.265793085 CEST	49753	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:34.265800953 CEST	443	49753	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:34.454107046 CEST	443	49747	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:34.454144955 CEST	443	49747	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:34.454161882 CEST	443	49747	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:34.454190016 CEST	443	49747	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:34.454237938 CEST	49747	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:34.454248905 CEST	443	49747	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:34.454305887 CEST	443	49747	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:34.454340935 CEST	49747	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:34.454782963 CEST	49747	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:34.457479000 CEST	443	49747	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:34.457564116 CEST	49747	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:34.457581043 CEST	443	49747	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:34.457604885 CEST	443	49747	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:34.457669020 CEST	49747	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:34.459039927 CEST	49747	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:34.459039927 CEST	49747	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:34.459058046 CEST	443	49747	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:34.459125996 CEST	49747	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:34.503127098 CEST	49755	443	192.168.2.5	99.80.85.24
Jul 8, 2024 17:53:34.503181934 CEST	443	49755	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:34.503515005 CEST	49755	443	192.168.2.5	99.80.85.24
Jul 8, 2024 17:53:34.503515005 CEST	49755	443	192.168.2.5	99.80.85.24
Jul 8, 2024 17:53:34.503562927 CEST	443	49755	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:34.992477894 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:34.992501974 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:34.992741108 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:34.992741108 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:34.992796898 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:35.212177992 CEST	443	49753	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:35.212434053 CEST	49753	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:35.212500095 CEST	443	49753	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:35.212847948 CEST	443	49755	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:35.213007927 CEST	443	49753	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:35.213154078 CEST	49755	443	192.168.2.5	99.80.85.24
Jul 8, 2024 17:53:35.213180065 CEST	443	49755	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:35.213525057 CEST	49753	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:35.213525057 CEST	49753	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:35.213563919 CEST	443	49753	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:35.213639021 CEST	443	49753	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:35.214597940 CEST	443	49755	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:35.215508938 CEST	49755	443	192.168.2.5	99.80.85.24
Jul 8, 2024 17:53:35.215732098 CEST	49755	443	192.168.2.5	99.80.85.24
Jul 8, 2024 17:53:35.215732098 CEST	49755	443	192.168.2.5	99.80.85.24
Jul 8, 2024 17:53:35.215815067 CEST	443	49755	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:35.260683060 CEST	49753	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:35.260787964 CEST	49755	443	192.168.2.5	99.80.85.24
Jul 8, 2024 17:53:35.260855913 CEST	443	49755	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:35.308767080 CEST	49755	443	192.168.2.5	99.80.85.24
Jul 8, 2024 17:53:35.518848896 CEST	443	49753	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:35.519032955 CEST	443	49753	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:35.519097090 CEST	49753	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:35.519700050 CEST	49753	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:35.519720078 CEST	443	49753	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:35.526544094 CEST	49758	443	192.168.2.5	99.80.85.24
Jul 8, 2024 17:53:35.526648998 CEST	443	49758	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:35.526742935 CEST	49758	443	192.168.2.5	99.80.85.24
Jul 8, 2024 17:53:35.527030945 CEST	49758	443	192.168.2.5	99.80.85.24
Jul 8, 2024 17:53:35.527074099 CEST	443	49758	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:35.598218918 CEST	443	49755	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:35.598289013 CEST	443	49755	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:35.598315001 CEST	443	49755	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:35.598334074 CEST	443	49755	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:35.598377943 CEST	443	49755	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:35.598402023 CEST	443	49755	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:35.598396063 CEST	49755	443	192.168.2.5	99.80.85.24
Jul 8, 2024 17:53:35.598486900 CEST	443	49755	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:35.598532915 CEST	49755	443	192.168.2.5	99.80.85.24
Jul 8, 2024 17:53:35.598532915 CEST	49755	443	192.168.2.5	99.80.85.24
Jul 8, 2024 17:53:35.598532915 CEST	49755	443	192.168.2.5	99.80.85.24
Jul 8, 2024 17:53:35.598543882 CEST	443	49755	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:35.598592997 CEST	49755	443	192.168.2.5	99.80.85.24
Jul 8, 2024 17:53:35.600423098 CEST	443	49755	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:35.600522041 CEST	49755	443	192.168.2.5	99.80.85.24
Jul 8, 2024 17:53:35.600542068 CEST	443	49755	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:35.600600004 CEST	443	49755	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:35.600606918 CEST	49755	443	192.168.2.5	99.80.85.24
Jul 8, 2024 17:53:35.600672960 CEST	49755	443	192.168.2.5	99.80.85.24
Jul 8, 2024 17:53:35.600960016 CEST	49755	443	192.168.2.5	99.80.85.24
Jul 8, 2024 17:53:35.600977898 CEST	443	49755	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:35.710963964 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:35.711504936 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:35.711539030 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:35.712416887 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:35.712486982 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:35.713720083 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:35.713790894 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:35.713985920 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:35.713995934 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:35.754677057 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:36.022208929 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.022226095 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.022255898 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.022270918 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.022319078 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:36.022362947 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.022384882 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:36.022877932 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.022927999 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:36.022937059 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.032656908 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.032713890 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:36.032722950 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.042843103 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.042861938 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.042905092 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:36.042912960 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.042962074 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:36.108515024 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.118163109 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.118191957 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.118216038 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.118349075 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:36.118349075 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:36.118426085 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.122042894 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.122109890 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:36.122128963 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.131676912 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.131705046 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.131736994 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:36.131753922 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.131808996 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:36.139695883 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.147252083 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.147278070 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.147301912 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.147327900 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:36.147341967 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.147373915 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:36.153645992 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.153704882 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:36.153717995 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.162893057 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.162985086 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:36.163053036 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.168514013 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.168586016 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:36.168605089 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.172214031 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.172288895 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:36.172303915 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.181446075 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.181519032 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:36.181533098 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.215205908 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.215231895 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.215256929 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.215265036 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:36.215281010 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.215312958 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:36.215612888 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.215667963 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:36.223124027 CEST	49757	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:36.223140955 CEST	443	49757	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:36.251939058 CEST	443	49758	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:36.253127098 CEST	49758	443	192.168.2.5	99.80.85.24
Jul 8, 2024 17:53:36.253150940 CEST	443	49758	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:36.253626108 CEST	443	49758	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:36.254101038 CEST	49758	443	192.168.2.5	99.80.85.24
Jul 8, 2024 17:53:36.254184008 CEST	443	49758	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:36.254262924 CEST	49758	443	192.168.2.5	99.80.85.24
Jul 8, 2024 17:53:36.296545029 CEST	443	49758	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:36.511025906 CEST	443	49758	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:36.511208057 CEST	443	49758	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:36.511516094 CEST	49758	443	192.168.2.5	99.80.85.24
Jul 8, 2024 17:53:36.522514105 CEST	49758	443	192.168.2.5	99.80.85.24
Jul 8, 2024 17:53:36.522563934 CEST	443	49758	99.80.85.24	192.168.2.5
Jul 8, 2024 17:53:36.630302906 CEST	443	49717	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:36.630371094 CEST	443	49717	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:36.630481005 CEST	49717	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:36.715276957 CEST	49717	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:36.715307951 CEST	443	49717	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:38.243029118 CEST	49765	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:38.243083000 CEST	443	49765	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:38.243421078 CEST	49765	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:38.243421078 CEST	49766	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:38.243463993 CEST	443	49766	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:38.243520975 CEST	49766	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:38.244200945 CEST	49765	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:38.244220972 CEST	443	49765	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:38.244393110 CEST	49766	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:38.244410038 CEST	443	49766	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:38.903038979 CEST	443	49766	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:38.904728889 CEST	49766	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:38.904743910 CEST	443	49766	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:38.904896975 CEST	443	49765	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:38.905353069 CEST	443	49766	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:38.905390978 CEST	49765	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:38.905396938 CEST	443	49765	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:38.906225920 CEST	49766	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:38.906332970 CEST	443	49766	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:38.906855106 CEST	443	49765	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:38.906903982 CEST	49766	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:38.907391071 CEST	49765	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:38.907599926 CEST	443	49765	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:38.908865929 CEST	49765	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:38.948537111 CEST	443	49766	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:38.951083899 CEST	49766	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:38.956512928 CEST	443	49765	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:38.984293938 CEST	49765	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:39.175034046 CEST	443	49765	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:39.175092936 CEST	443	49765	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:39.175139904 CEST	443	49765	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:39.175173998 CEST	49765	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:39.175180912 CEST	443	49765	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:39.175195932 CEST	443	49765	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:39.175570011 CEST	49765	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:39.175585985 CEST	443	49765	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:39.180124044 CEST	49765	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:39.181797981 CEST	443	49765	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:39.181924105 CEST	443	49765	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:39.182092905 CEST	49765	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:39.182105064 CEST	443	49765	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:39.186379910 CEST	443	49765	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:39.186780930 CEST	443	49766	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:39.186829090 CEST	49765	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:39.186836958 CEST	443	49765	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:39.187098980 CEST	443	49766	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:39.187230110 CEST	49766	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:39.192939043 CEST	443	49765	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:39.193021059 CEST	49765	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:39.193028927 CEST	443	49765	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:39.195003986 CEST	49766	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:39.195014954 CEST	443	49766	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:39.263278008 CEST	443	49765	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:39.263612032 CEST	49765	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:39.263621092 CEST	443	49765	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:39.265896082 CEST	443	49765	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:39.266076088 CEST	49765	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:39.781621933 CEST	49765	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:39.781652927 CEST	443	49765	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:40.415906906 CEST	49768	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:40.415930033 CEST	443	49768	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:40.420267105 CEST	49768	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:40.420460939 CEST	49768	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:40.420469999 CEST	443	49768	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:41.135303974 CEST	443	49768	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:41.135901928 CEST	49768	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:41.135968924 CEST	443	49768	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:41.136760950 CEST	443	49768	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:41.137582064 CEST	49768	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:41.137763977 CEST	443	49768	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:41.137902021 CEST	49768	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:41.184494972 CEST	443	49768	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:41.191274881 CEST	49768	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:41.425223112 CEST	443	49768	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:41.425322056 CEST	443	49768	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:41.425396919 CEST	443	49768	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:41.425432920 CEST	49768	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:41.425482035 CEST	443	49768	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:41.425606012 CEST	49768	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:41.425614119 CEST	443	49768	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:41.425630093 CEST	443	49768	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:41.425683022 CEST	49768	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:41.430968046 CEST	443	49768	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:41.431262970 CEST	443	49768	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:41.431469917 CEST	49768	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:41.431586981 CEST	49768	443	192.168.2.5	142.250.184.196
Jul 8, 2024 17:53:41.431613922 CEST	443	49768	142.250.184.196	192.168.2.5
Jul 8, 2024 17:53:41.772362947 CEST	80	49710	185.53.179.170	192.168.2.5
Jul 8, 2024 17:53:41.772412062 CEST	49710	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:41.846846104 CEST	49710	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:41.847556114 CEST	49770	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:41.847647905 CEST	443	49770	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:41.847738981 CEST	49770	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:41.848612070 CEST	49770	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:41.848696947 CEST	443	49770	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:41.851757050 CEST	80	49710	185.53.179.170	192.168.2.5
Jul 8, 2024 17:53:42.503071070 CEST	80	49731	185.53.179.170	192.168.2.5
Jul 8, 2024 17:53:42.503329039 CEST	49731	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:42.592514038 CEST	443	49770	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:42.592906952 CEST	49770	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:42.592931986 CEST	443	49770	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:42.593401909 CEST	443	49770	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:42.593980074 CEST	49770	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:42.594054937 CEST	443	49770	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:42.594284058 CEST	49770	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:42.636508942 CEST	443	49770	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:42.855391026 CEST	443	49770	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:42.855566025 CEST	443	49770	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:42.855761051 CEST	49770	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:42.868417025 CEST	49770	443	192.168.2.5	54.76.66.215
Jul 8, 2024 17:53:42.868486881 CEST	443	49770	54.76.66.215	192.168.2.5
Jul 8, 2024 17:53:43.123153925 CEST	49731	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:43.128313065 CEST	80	49731	185.53.179.170	192.168.2.5
Jul 8, 2024 17:53:50.200350046 CEST	61327	53	192.168.2.5	162.159.36.2
Jul 8, 2024 17:53:50.205230951 CEST	53	61327	162.159.36.2	192.168.2.5
Jul 8, 2024 17:53:50.205317974 CEST	61327	53	192.168.2.5	162.159.36.2
Jul 8, 2024 17:53:50.205377102 CEST	61327	53	192.168.2.5	162.159.36.2
Jul 8, 2024 17:53:50.212852001 CEST	53	61327	162.159.36.2	192.168.2.5
Jul 8, 2024 17:53:50.683283091 CEST	53	61327	162.159.36.2	192.168.2.5
Jul 8, 2024 17:53:50.683938026 CEST	61327	53	192.168.2.5	162.159.36.2
Jul 8, 2024 17:53:50.689182043 CEST	53	61327	162.159.36.2	192.168.2.5
Jul 8, 2024 17:53:50.689331055 CEST	61327	53	192.168.2.5	162.159.36.2
Jul 8, 2024 17:53:52.116005898 CEST	61330	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:52.116209030 CEST	61331	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:52.120870113 CEST	80	61330	185.53.179.170	192.168.2.5
Jul 8, 2024 17:53:52.120970964 CEST	61330	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:52.121057987 CEST	80	61331	185.53.179.170	192.168.2.5
Jul 8, 2024 17:53:52.121161938 CEST	61331	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:52.246614933 CEST	61331	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:52.251707077 CEST	80	61331	185.53.179.170	192.168.2.5
Jul 8, 2024 17:53:52.877926111 CEST	443	49746	23.1.237.91	192.168.2.5
Jul 8, 2024 17:53:52.878087997 CEST	49746	443	192.168.2.5	23.1.237.91
Jul 8, 2024 17:53:53.023437023 CEST	80	61331	185.53.179.170	192.168.2.5
Jul 8, 2024 17:53:53.023453951 CEST	80	61331	185.53.179.170	192.168.2.5
Jul 8, 2024 17:53:53.023463011 CEST	80	61331	185.53.179.170	192.168.2.5
Jul 8, 2024 17:53:53.023561954 CEST	61331	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:53.054315090 CEST	49718	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:53.059248924 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:53.077385902 CEST	61331	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:54.343532085 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.343636036 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.343657017 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.343667984 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.343677044 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.343692064 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.343697071 CEST	49718	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:54.343704939 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.343717098 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.343725920 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.343736887 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.343740940 CEST	49718	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:54.343748093 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.343764067 CEST	49718	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:54.343776941 CEST	49718	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:54.348618984 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.348674059 CEST	49718	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:54.348845005 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.382908106 CEST	61333	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:54.382952929 CEST	443	61333	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:54.383012056 CEST	61333	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:54.383325100 CEST	61333	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:54.383342981 CEST	443	61333	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:54.386904001 CEST	61334	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:54.386933088 CEST	443	61334	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:54.387010098 CEST	61334	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:54.387249947 CEST	61334	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:54.387264013 CEST	443	61334	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:54.394757032 CEST	61335	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:54.394776106 CEST	443	61335	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:54.395132065 CEST	61335	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:54.395375967 CEST	61335	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:54.395387888 CEST	443	61335	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:54.397198915 CEST	49718	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:54.433268070 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.433279991 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.433345079 CEST	49718	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:54.433346033 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.433358908 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.433429003 CEST	49718	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:54.433439016 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.433449984 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.433459997 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.433487892 CEST	49718	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:54.434263945 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.434304953 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.434314013 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.434365988 CEST	49718	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:54.434369087 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.434382915 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.434396982 CEST	49718	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:54.434417009 CEST	49718	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:54.435184956 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.435235977 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.435245037 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.435282946 CEST	49718	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:54.435285091 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.435295105 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.435331106 CEST	49718	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:54.435992002 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.436009884 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.436017990 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.436057091 CEST	49718	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:54.436081886 CEST	49718	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:54.522944927 CEST	80	49718	208.91.196.46	192.168.2.5
Jul 8, 2024 17:53:54.562856913 CEST	49718	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:55.039968014 CEST	443	61334	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:55.040285110 CEST	61334	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:55.040302992 CEST	443	61334	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:55.040802956 CEST	443	61334	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:55.041354895 CEST	61334	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:55.041424036 CEST	443	61334	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:55.042558908 CEST	443	61335	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:55.042857885 CEST	61335	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:55.042872906 CEST	443	61335	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:55.043375015 CEST	443	61335	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:55.044004917 CEST	61335	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:55.044090033 CEST	443	61335	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:55.044178963 CEST	61335	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:55.062231064 CEST	443	61333	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:55.062432051 CEST	61333	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:55.062443018 CEST	443	61333	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:55.062724113 CEST	443	61333	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:55.063004971 CEST	61333	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:55.063061953 CEST	443	61333	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:55.063283920 CEST	61333	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:55.084500074 CEST	443	61335	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:55.093255997 CEST	61334	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:55.104495049 CEST	443	61333	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:55.350375891 CEST	443	61333	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:55.350418091 CEST	443	61333	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:55.350594997 CEST	61333	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:55.350816965 CEST	61333	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:55.350843906 CEST	443	61333	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:55.352658987 CEST	443	61335	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:55.352718115 CEST	443	61335	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:55.352799892 CEST	61335	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:55.353514910 CEST	61335	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:55.353519917 CEST	443	61335	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:55.357110023 CEST	61337	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:55.357151031 CEST	443	61337	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:55.357229948 CEST	61337	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:55.357497931 CEST	61337	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:55.357515097 CEST	443	61337	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:55.358968973 CEST	61338	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:55.358990908 CEST	443	61338	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:55.359071970 CEST	61338	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:55.359249115 CEST	61338	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:55.359265089 CEST	443	61338	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:55.991641045 CEST	443	61337	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:55.992016077 CEST	61337	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:55.992050886 CEST	443	61337	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:55.992336035 CEST	443	61337	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:55.992806911 CEST	61337	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:55.992808104 CEST	61337	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:55.992850065 CEST	443	61337	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:55.992886066 CEST	443	61337	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:56.037532091 CEST	443	61338	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:56.037816048 CEST	61338	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:56.037841082 CEST	443	61338	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:56.038964987 CEST	443	61338	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:56.039513111 CEST	61338	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:56.039513111 CEST	61338	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:56.039565086 CEST	443	61338	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:56.039709091 CEST	443	61338	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:56.044328928 CEST	61337	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:56.090178013 CEST	61338	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:56.303143978 CEST	443	61337	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:56.303189993 CEST	443	61337	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:56.303800106 CEST	61337	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:56.304105997 CEST	61337	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:56.304147959 CEST	443	61337	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:56.307199955 CEST	61339	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:56.307248116 CEST	443	61339	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:56.307352066 CEST	61339	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:56.307643890 CEST	61339	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:56.307660103 CEST	443	61339	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:56.321213961 CEST	443	61338	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:56.321283102 CEST	443	61338	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:56.321361065 CEST	443	61338	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:56.321383953 CEST	61338	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:56.321427107 CEST	443	61338	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:56.321448088 CEST	443	61338	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:56.321557999 CEST	61338	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:56.325408936 CEST	61338	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:53:56.325443029 CEST	443	61338	156.146.33.15	192.168.2.5
Jul 8, 2024 17:53:56.950227976 CEST	443	61339	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:56.951051950 CEST	61339	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:56.951081038 CEST	443	61339	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:56.951947927 CEST	443	61339	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:56.952290058 CEST	61339	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:56.952382088 CEST	443	61339	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:56.952408075 CEST	61339	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:56.996500969 CEST	443	61339	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:56.997042894 CEST	61339	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:57.260698080 CEST	443	61339	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:57.260761023 CEST	443	61339	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:57.260834932 CEST	61339	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:57.260852098 CEST	443	61339	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:57.260997057 CEST	443	61339	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:57.261070967 CEST	61339	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:57.262569904 CEST	61339	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:57.262588024 CEST	443	61339	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:57.292485952 CEST	61340	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:57.292577982 CEST	443	61340	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:57.293414116 CEST	61340	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:57.293778896 CEST	61340	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:57.293813944 CEST	443	61340	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:57.671567917 CEST	80	61330	185.53.179.170	192.168.2.5
Jul 8, 2024 17:53:57.671647072 CEST	61330	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:57.871990919 CEST	61330	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:53:57.876856089 CEST	80	61330	185.53.179.170	192.168.2.5
Jul 8, 2024 17:53:57.924112082 CEST	443	61340	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:57.924398899 CEST	61340	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:57.924465895 CEST	443	61340	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:57.925609112 CEST	443	61340	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:57.925940990 CEST	61340	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:57.926069975 CEST	61340	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:57.926083088 CEST	443	61340	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:57.926120043 CEST	443	61340	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:57.965616941 CEST	61340	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:58.232590914 CEST	443	61340	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:58.232783079 CEST	443	61340	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:58.232855082 CEST	61340	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:58.233253002 CEST	61340	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:58.233297110 CEST	443	61340	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:58.245007038 CEST	61341	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:58.245052099 CEST	443	61341	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:58.245223999 CEST	61341	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:58.245330095 CEST	61341	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:58.245337009 CEST	443	61341	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:58.866621017 CEST	443	61341	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:58.867117882 CEST	61341	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:58.867144108 CEST	443	61341	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:58.870675087 CEST	443	61341	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:58.870760918 CEST	61341	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:58.871110916 CEST	61341	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:58.871288061 CEST	443	61341	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:58.871650934 CEST	61341	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:58.871664047 CEST	443	61341	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:58.921478033 CEST	61341	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:59.225915909 CEST	443	61341	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:59.226095915 CEST	443	61341	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:59.227158070 CEST	61341	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:59.227432966 CEST	61341	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:53:59.227452993 CEST	443	61341	87.230.98.78	192.168.2.5
Jul 8, 2024 17:53:59.920631886 CEST	61342	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:53:59.921072960 CEST	61343	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:00.020293951 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:00.020392895 CEST	61342	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:00.020512104 CEST	80	61343	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:00.020750999 CEST	61342	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:00.020901918 CEST	61343	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:00.025547981 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:00.025607109 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:00.025664091 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.220814943 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.220876932 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.220930099 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.220938921 CEST	61342	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:02.220966101 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.221000910 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.221008062 CEST	61342	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:02.221033096 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.221076012 CEST	61342	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:02.221097946 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.221128941 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.221160889 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.221175909 CEST	61342	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:02.221195936 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.221262932 CEST	61342	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:02.226035118 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.226089954 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.226123095 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.226150036 CEST	61342	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:02.226157904 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.226202965 CEST	61342	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:02.226352930 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.247090101 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:02.247430086 CEST	61343	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:02.249306917 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:02.249397993 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:02.249497890 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:02.249584913 CEST	61346	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:02.249605894 CEST	443	61346	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:02.249825954 CEST	61346	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:02.250164986 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:02.250252008 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:02.250268936 CEST	61346	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:02.250279903 CEST	443	61346	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:02.251703978 CEST	61347	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:02.251760006 CEST	443	61347	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:02.251835108 CEST	61347	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:02.252079964 CEST	61347	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:02.252087116 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.252115011 CEST	443	61347	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:02.252156019 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:02.252392054 CEST	80	61343	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.252446890 CEST	80	61343	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.252475023 CEST	80	61343	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.252486944 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:02.257380962 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.257411957 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.257441998 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.273655891 CEST	61342	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:02.311471939 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.311541080 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.311575890 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.311611891 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.311613083 CEST	61342	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:02.311650038 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.311652899 CEST	61342	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:02.311741114 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.311777115 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.311800957 CEST	61342	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:02.311866999 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.311899900 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.311932087 CEST	61342	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:02.311935902 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.312190056 CEST	61342	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:02.312591076 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.312649012 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.312695980 CEST	61342	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:02.312700033 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.312736034 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.312769890 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.312798977 CEST	61342	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:02.313318014 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.313371897 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.313374996 CEST	61342	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:02.313426971 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.313462019 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.313466072 CEST	61342	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:02.313496113 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.313533068 CEST	80	61342	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.313585043 CEST	61342	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:02.326922894 CEST	61348	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.331840992 CEST	80	61348	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.331918955 CEST	61348	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.332073927 CEST	61348	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.336960077 CEST	80	61348	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.349028111 CEST	80	61343	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.401786089 CEST	61343	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:02.712852001 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:02.753756046 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:02.793602943 CEST	80	61348	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.793656111 CEST	80	61348	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.793692112 CEST	80	61348	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.793725014 CEST	80	61348	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.793760061 CEST	80	61348	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.793793917 CEST	80	61348	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.793796062 CEST	61348	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.793832064 CEST	80	61348	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.793863058 CEST	80	61348	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.793864965 CEST	61348	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.795334101 CEST	61348	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.804516077 CEST	61348	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.809360981 CEST	80	61348	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.824273109 CEST	61349	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.829406023 CEST	80	61349	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.832617044 CEST	61349	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.832918882 CEST	61349	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.837804079 CEST	80	61349	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.861475945 CEST	61350	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.863080978 CEST	61352	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.863080978 CEST	61351	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.866408110 CEST	80	61350	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.866580009 CEST	61350	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.866929054 CEST	61350	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.868115902 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.868170023 CEST	80	61351	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.868252039 CEST	61352	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.868252039 CEST	61351	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.868379116 CEST	61351	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.868577957 CEST	61352	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.871820927 CEST	80	61350	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.873250961 CEST	80	61351	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.873414040 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.908266068 CEST	443	61346	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:02.908591986 CEST	80	61348	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.908622026 CEST	80	61348	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.908638000 CEST	80	61348	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.908652067 CEST	80	61348	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.908667088 CEST	80	61348	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.908725023 CEST	61348	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.908759117 CEST	80	61348	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.908773899 CEST	80	61348	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.908788919 CEST	80	61348	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.908802986 CEST	80	61348	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.908813000 CEST	61348	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.908813000 CEST	61348	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.908822060 CEST	80	61348	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.909008026 CEST	61348	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.909008980 CEST	61348	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.909030914 CEST	61346	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:02.909044981 CEST	443	61346	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:02.909549952 CEST	443	61347	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:02.909610987 CEST	80	61348	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.909630060 CEST	80	61348	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.909645081 CEST	80	61348	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.909665108 CEST	80	61348	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.909678936 CEST	80	61348	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.909698009 CEST	61348	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.909795046 CEST	61348	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.909998894 CEST	443	61346	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:02.910068035 CEST	61347	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:02.910079956 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:02.910115957 CEST	61346	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:02.910141945 CEST	443	61347	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:02.910646915 CEST	61346	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:02.910829067 CEST	443	61346	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:02.911614895 CEST	443	61347	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:02.912246943 CEST	61347	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:02.912247896 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:02.912275076 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:02.912707090 CEST	61346	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:02.912709951 CEST	61347	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:02.912722111 CEST	443	61346	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:02.912807941 CEST	443	61347	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:02.913130999 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:02.913340092 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:02.914072037 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:02.914262056 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:02.914277077 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:02.917711973 CEST	61353	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.922708988 CEST	80	61353	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.922795057 CEST	61353	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.923093081 CEST	61353	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:02.928997040 CEST	80	61353	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:02.960499048 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:02.961018085 CEST	61347	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:02.961050034 CEST	61346	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:02.961090088 CEST	443	61347	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:02.961127043 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:02.961143017 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.011810064 CEST	61347	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:03.012089968 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.098061085 CEST	443	61346	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:03.098083019 CEST	443	61346	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:03.098128080 CEST	443	61346	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:03.098159075 CEST	61346	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:03.098315001 CEST	61346	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:03.116533041 CEST	61346	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:03.116547108 CEST	443	61346	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:03.286003113 CEST	80	61349	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.300626993 CEST	61354	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.305594921 CEST	80	61354	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.306062937 CEST	61354	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.306504011 CEST	61354	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.311311960 CEST	80	61354	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.324350119 CEST	80	61351	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.324374914 CEST	80	61351	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.324388981 CEST	80	61351	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.324475050 CEST	80	61351	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.324507952 CEST	61351	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.324527025 CEST	80	61351	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.324553013 CEST	80	61351	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.324568033 CEST	80	61351	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.324584961 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.324584961 CEST	61351	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.324599981 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.324603081 CEST	61351	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.324616909 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.324630976 CEST	80	61351	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.324645042 CEST	61352	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.324657917 CEST	80	61351	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.324671984 CEST	80	61351	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.324687958 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.324687958 CEST	61351	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.324703932 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.324718952 CEST	61351	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.324718952 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.324733973 CEST	61352	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.325054884 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.325079918 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.325083971 CEST	61352	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.325095892 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.325126886 CEST	61352	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.325129032 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.326494932 CEST	61352	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.328552008 CEST	61349	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.329679012 CEST	80	61351	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.329751968 CEST	80	61351	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.329775095 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.329791069 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.329806089 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.329835892 CEST	61351	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.329869032 CEST	61352	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.330115080 CEST	80	61351	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.330140114 CEST	80	61351	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.330156088 CEST	80	61351	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.330248117 CEST	61351	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.341614008 CEST	80	61350	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.341640949 CEST	80	61350	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.341655016 CEST	80	61350	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.341680050 CEST	80	61350	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.341695070 CEST	80	61350	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.341711044 CEST	80	61350	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.341717958 CEST	61350	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.341778994 CEST	61350	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.341849089 CEST	80	61350	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.341886997 CEST	61350	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.341947079 CEST	80	61350	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.341963053 CEST	80	61350	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.344549894 CEST	61350	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.345859051 CEST	80	61350	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.346280098 CEST	61350	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.346518040 CEST	80	61350	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.346571922 CEST	80	61350	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.346590042 CEST	80	61350	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.347753048 CEST	61350	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.364763975 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.364830017 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.364855051 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.364896059 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.364927053 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.364942074 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.364942074 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.364953041 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.364989042 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.364989042 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.364989042 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.365030050 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.365086079 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.368721962 CEST	80	61353	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.368772984 CEST	80	61353	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.368788958 CEST	80	61353	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.368803978 CEST	80	61353	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.368820906 CEST	80	61353	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.368834972 CEST	80	61353	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.368860960 CEST	80	61353	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.368875027 CEST	80	61353	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.368890047 CEST	80	61353	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.368901968 CEST	80	61353	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.368972063 CEST	61353	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.368972063 CEST	61353	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.368972063 CEST	61353	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.368972063 CEST	61353	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.369275093 CEST	61353	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.379868031 CEST	80	61353	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.379884005 CEST	80	61353	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.379898071 CEST	80	61353	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.380090952 CEST	61353	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.411165953 CEST	80	61351	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.411187887 CEST	80	61351	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.411204100 CEST	80	61351	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.411220074 CEST	80	61351	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.411448002 CEST	61351	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.413024902 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.413042068 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.413057089 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.413088083 CEST	61352	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.413187981 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.413230896 CEST	61352	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.413270950 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.413407087 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.413460970 CEST	61352	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.413461924 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.413479090 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.413495064 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.413520098 CEST	61352	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.413996935 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.414043903 CEST	61352	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.414052010 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.414067984 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.414083004 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.414107084 CEST	61352	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.414642096 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.414658070 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.414673090 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.414691925 CEST	61352	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.414707899 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.414719105 CEST	61352	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.414724112 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.414764881 CEST	61352	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.415389061 CEST	80	61352	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.433906078 CEST	61353	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.434156895 CEST	80	61350	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.434175014 CEST	80	61350	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.434191942 CEST	80	61350	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.434207916 CEST	80	61350	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.434252024 CEST	61350	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.434305906 CEST	61350	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.454737902 CEST	80	61353	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.454767942 CEST	80	61353	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.454782009 CEST	80	61353	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.454809904 CEST	80	61353	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.454965115 CEST	61353	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.454965115 CEST	61353	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.460402966 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.460503101 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.460524082 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.460596085 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.460635900 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.460659027 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.467837095 CEST	61352	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.491729021 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.491777897 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.491832972 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.491899014 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.491942883 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.491967916 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.533184052 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.533262014 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.533369064 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.533370018 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.533441067 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.533498049 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.600687027 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.600756884 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.600868940 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.600936890 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.600989103 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.601541042 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.619230032 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.619303942 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.619348049 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.619421005 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.619462967 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.619488955 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.636851072 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.636902094 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.637028933 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.637028933 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.637101889 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.637161970 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.648191929 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.648232937 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.648361921 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.648430109 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.648482084 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.648583889 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.661358118 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.661406994 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.661449909 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.661463976 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.661503077 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.661535025 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.665239096 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.698535919 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.698601007 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.698636055 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.698703051 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.698745966 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.698771000 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.709587097 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.709640980 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.709678888 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.709695101 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.709727049 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.709745884 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.722593069 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.722639084 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.722676992 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.722692013 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.722723007 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.722738981 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.733480930 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.733521938 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.733558893 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.733571053 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.733604908 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.733622074 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.745336056 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.745354891 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.745420933 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.745435953 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.745462894 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.745502949 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.755281925 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.755295992 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.755366087 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.755381107 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.755446911 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.762908936 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.762923956 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.762989044 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.763000965 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.763027906 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.763046980 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.763128996 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.768098116 CEST	80	61354	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:03.771517992 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.771533012 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.771579027 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.771591902 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.771620035 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.771660089 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.786757946 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.786772013 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.786827087 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.786839008 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.786868095 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.786886930 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.795630932 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.795644045 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.795720100 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.795732975 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.795758963 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.795787096 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.806986094 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.807002068 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.807085991 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.807110071 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.807159901 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.814502001 CEST	61354	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:03.815526962 CEST	61355	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:03.815548897 CEST	443	61355	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:03.815607071 CEST	61355	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:03.825406075 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.825794935 CEST	61355	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:03.825813055 CEST	443	61355	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:03.828418016 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.828434944 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.828497887 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.828517914 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.828543901 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.828566074 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.838141918 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.838160038 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.838228941 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.838248968 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.838283062 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.838303089 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.843590975 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.843605995 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.843668938 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.843681097 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.843708992 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.843728065 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.853923082 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.853936911 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.854012012 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.854033947 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.854132891 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.862821102 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.868385077 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.868406057 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.868472099 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.868491888 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.868537903 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.874389887 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.874422073 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.874470949 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.874484062 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.874531984 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.874552965 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.877590895 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.877643108 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:03.877660036 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.877692938 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.887999058 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.896573067 CEST	61345	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:03.896601915 CEST	443	61345	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:04.455379963 CEST	443	61355	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:04.456026077 CEST	61355	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:04.456037045 CEST	443	61355	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:04.456317902 CEST	443	61355	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:04.457218885 CEST	61355	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:04.457271099 CEST	443	61355	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:04.457623005 CEST	61355	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:04.457644939 CEST	443	61355	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:04.723994017 CEST	443	61355	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:04.724009037 CEST	443	61355	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:04.724065065 CEST	61355	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:04.724069118 CEST	443	61355	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:04.724132061 CEST	61355	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:04.726134062 CEST	61355	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:04.726147890 CEST	443	61355	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:04.739526987 CEST	61356	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:04.739619017 CEST	443	61356	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:04.739720106 CEST	61356	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:04.740196943 CEST	61356	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:04.740235090 CEST	443	61356	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:05.384274960 CEST	443	61356	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:05.384800911 CEST	61356	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:05.384871960 CEST	443	61356	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:05.385210037 CEST	443	61356	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:05.385726929 CEST	61356	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:05.385792017 CEST	443	61356	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:05.385881901 CEST	61356	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:05.385917902 CEST	443	61356	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:05.427337885 CEST	61356	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:05.660350084 CEST	443	61356	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:05.660367966 CEST	443	61356	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:05.660451889 CEST	443	61356	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:05.660557985 CEST	61356	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:05.660557985 CEST	61356	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:05.661026955 CEST	61356	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:05.661070108 CEST	443	61356	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:05.842459917 CEST	49713	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:05.849087000 CEST	80	49713	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:05.959693909 CEST	61357	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:05.959786892 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:05.959889889 CEST	61357	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:05.961065054 CEST	61357	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:05.961105108 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:06.622339964 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:06.622785091 CEST	61357	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:06.622854948 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:06.623162031 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:06.623228073 CEST	49720	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:06.623830080 CEST	61357	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:06.623904943 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:06.624351025 CEST	61357	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:06.628048897 CEST	80	49720	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:06.664496899 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:06.993916988 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:06.993932962 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:06.993948936 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:06.994129896 CEST	61357	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:06.994200945 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:06.994278908 CEST	61357	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:07.020397902 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:07.020411968 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:07.020598888 CEST	61357	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:07.020668983 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:07.020808935 CEST	61357	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:07.053518057 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:07.053534031 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:07.053714991 CEST	61357	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:07.053785086 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:07.053855896 CEST	61357	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:07.093107939 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:07.093121052 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:07.093327045 CEST	61357	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:07.093398094 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:07.093458891 CEST	61357	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:07.125232935 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:07.125250101 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:07.125332117 CEST	61357	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:07.125401020 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:07.125468016 CEST	61357	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:07.148910046 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:07.148924112 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:07.149113894 CEST	61357	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:07.149183989 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:07.149250984 CEST	61357	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:07.165775061 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:07.165816069 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:07.165834904 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:07.165852070 CEST	61357	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:07.165910006 CEST	61357	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:07.166150093 CEST	61357	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:07.166184902 CEST	443	61357	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:07.403254986 CEST	61358	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:07.403280020 CEST	443	61358	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:07.403621912 CEST	61358	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:07.403621912 CEST	61358	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:07.403641939 CEST	443	61358	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:07.706357002 CEST	49723	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:07.711189032 CEST	80	49723	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:07.817311049 CEST	49721	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:07.822120905 CEST	80	49721	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:08.024874926 CEST	80	61331	185.53.179.170	192.168.2.5
Jul 8, 2024 17:54:08.024955034 CEST	61331	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:54:08.026299953 CEST	443	61358	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:08.026765108 CEST	61358	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:08.026778936 CEST	443	61358	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:08.027097940 CEST	443	61358	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:08.027638912 CEST	61358	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:08.027712107 CEST	443	61358	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:08.027831078 CEST	61358	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:08.072494984 CEST	443	61358	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:08.277328014 CEST	49725	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:08.283525944 CEST	80	49725	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:08.293309927 CEST	49722	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:08.293359041 CEST	49726	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:08.298670053 CEST	80	49722	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:08.298899889 CEST	80	49726	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:08.336143970 CEST	443	61358	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:08.336226940 CEST	443	61358	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:08.336359978 CEST	61358	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:08.337675095 CEST	61358	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:08.337687969 CEST	443	61358	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:08.488996983 CEST	61331	80	192.168.2.5	185.53.179.170
Jul 8, 2024 17:54:08.489181995 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:08.494102955 CEST	80	61331	185.53.179.170	192.168.2.5
Jul 8, 2024 17:54:08.494213104 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:08.494242907 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:08.494497061 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:08.494801044 CEST	61359	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:08.494895935 CEST	443	61359	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:08.494967937 CEST	61359	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:08.495196104 CEST	61359	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:08.495228052 CEST	443	61359	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:08.588362932 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:08.628300905 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:08.708306074 CEST	49727	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:08.713363886 CEST	80	49727	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:09.120845079 CEST	443	61359	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:09.121218920 CEST	61359	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:09.121289015 CEST	443	61359	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:09.121795893 CEST	443	61359	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:09.122173071 CEST	61359	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:09.122261047 CEST	443	61359	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:09.122349024 CEST	61359	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:09.164501905 CEST	443	61359	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:09.654925108 CEST	443	61359	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:09.655010939 CEST	443	61359	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:09.655272007 CEST	61359	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:09.655951977 CEST	61359	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:09.655986071 CEST	443	61359	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:09.910681009 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:09.916052103 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:09.916071892 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:09.916538954 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:10.228147984 CEST	443	61334	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:10.228338003 CEST	443	61334	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:10.229121923 CEST	61334	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:11.388315916 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.388338089 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.388354063 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.388402939 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:11.388464928 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.388489962 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.388504982 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:11.388813019 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.388868093 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:11.388961077 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.388976097 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.389020920 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:11.389131069 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.389144897 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.389194965 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:11.389477015 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.389489889 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.389528990 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:11.395132065 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.395163059 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.395224094 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:11.414203882 CEST	61334	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:11.414244890 CEST	443	61334	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:11.414680958 CEST	61360	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:11.414731026 CEST	443	61360	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:11.414793968 CEST	61360	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:11.415527105 CEST	61360	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:11.415544033 CEST	443	61360	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:11.419886112 CEST	61361	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:11.419898033 CEST	443	61361	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:11.419950008 CEST	61361	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:11.420615911 CEST	61361	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:11.420628071 CEST	443	61361	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:11.475156069 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.475212097 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.475246906 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.475280046 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.475311995 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:11.475339890 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.475366116 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:11.475382090 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.475426912 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:11.475445032 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.475933075 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.476002932 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:11.476078987 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.476145029 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.476177931 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.476206064 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:11.476573944 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.476619005 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.476648092 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:11.476665974 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.476696968 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.476711988 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:11.476747990 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.476790905 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:11.477385998 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.477518082 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.477581024 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.477606058 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:11.477726936 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.477771044 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:11.477792025 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.510880947 CEST	61362	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:11.515867949 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:11.515949965 CEST	61362	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:11.516233921 CEST	61362	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:11.521203041 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:11.529205084 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:11.564169884 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:11.609214067 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:11.988857031 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:11.988917112 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:11.988951921 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:11.988984108 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:11.989017963 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:11.989048004 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:11.989046097 CEST	61362	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:11.989082098 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:11.989119053 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:11.989120960 CEST	61362	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:11.989120960 CEST	61362	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:11.989147902 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:11.989550114 CEST	61362	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.047215939 CEST	443	61361	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:12.053639889 CEST	61361	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:12.053673029 CEST	443	61361	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:12.054168940 CEST	443	61361	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:12.054670095 CEST	61361	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:12.054748058 CEST	443	61361	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:12.054831982 CEST	61361	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:12.054863930 CEST	443	61361	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:12.072577953 CEST	443	61360	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:12.077179909 CEST	61360	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:12.077192068 CEST	443	61360	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:12.077646971 CEST	443	61360	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:12.108299017 CEST	61360	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:12.108383894 CEST	443	61360	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:12.151885033 CEST	61360	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:12.162650108 CEST	61362	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.163789034 CEST	61363	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.167601109 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.168129921 CEST	61364	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.168524027 CEST	61365	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.169152975 CEST	61366	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.169393063 CEST	80	61363	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.169471025 CEST	61363	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.169733047 CEST	61363	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.172935963 CEST	80	61364	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.173027039 CEST	61364	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.173376083 CEST	61364	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.173635006 CEST	80	61365	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.173743010 CEST	61365	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.174024105 CEST	61365	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.174062967 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.174141884 CEST	61366	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.174485922 CEST	80	61363	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.174597025 CEST	61366	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.178157091 CEST	80	61364	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.178808928 CEST	80	61365	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.179414988 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.269316912 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.269443035 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.269536018 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.269570112 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.269603014 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.269651890 CEST	61362	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.269651890 CEST	61362	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.269927025 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.269988060 CEST	61362	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.270054102 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.270122051 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.270267010 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.270299911 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.270334005 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.270376921 CEST	61362	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.270376921 CEST	61362	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.270782948 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.270833969 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.270983934 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.271033049 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.271080971 CEST	61362	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.271080971 CEST	61362	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.277244091 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.277354002 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.277384996 CEST	61362	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.277393103 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.277431965 CEST	80	61362	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.277502060 CEST	61362	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.329667091 CEST	443	61361	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:12.329695940 CEST	443	61361	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:12.329804897 CEST	443	61361	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:12.329806089 CEST	61361	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:12.329852104 CEST	61361	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:12.615577936 CEST	61361	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:12.615592003 CEST	443	61361	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:12.626979113 CEST	80	61363	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.637170076 CEST	80	61364	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.637190104 CEST	80	61364	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.637206078 CEST	80	61364	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.637300968 CEST	80	61364	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.637305975 CEST	61364	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.637316942 CEST	80	61364	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.637332916 CEST	80	61364	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.637346983 CEST	61364	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.637351036 CEST	80	61364	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.637372971 CEST	61364	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.637558937 CEST	80	61364	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.637574911 CEST	80	61364	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.637588978 CEST	80	61364	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.637609005 CEST	61364	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.637644053 CEST	61364	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.643018007 CEST	80	61365	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.643062115 CEST	80	61365	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.643078089 CEST	80	61365	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.643129110 CEST	61365	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.643285036 CEST	80	61365	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.643300056 CEST	80	61365	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.643315077 CEST	80	61365	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.643328905 CEST	61365	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.643330097 CEST	80	61365	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.643356085 CEST	61365	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.643544912 CEST	80	61365	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.643559933 CEST	80	61365	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.643575907 CEST	80	61365	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.643584013 CEST	61365	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.643614054 CEST	61365	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.643646955 CEST	80	61364	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.645875931 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.646099091 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.646142960 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.646157980 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.646162033 CEST	61366	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.646199942 CEST	61366	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.646306038 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.646321058 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.646336079 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.646351099 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.646363020 CEST	61366	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.646365881 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.646399021 CEST	61366	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.646538019 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.646579027 CEST	61366	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.648298979 CEST	80	61365	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.648355961 CEST	80	61365	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.648403883 CEST	61365	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.650924921 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.650971889 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.650988102 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.651041031 CEST	61366	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.675669909 CEST	61363	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.690661907 CEST	61364	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.726883888 CEST	80	61364	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.726919889 CEST	80	61364	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.726936102 CEST	80	61364	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.727001905 CEST	61364	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.728240967 CEST	80	61364	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.728306055 CEST	61364	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.728559017 CEST	80	61364	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.730488062 CEST	80	61365	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.730547905 CEST	80	61365	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.730564117 CEST	80	61365	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.730611086 CEST	61365	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.730649948 CEST	80	61365	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.730690002 CEST	61365	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.737806082 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.737832069 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.737848043 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.737890005 CEST	61366	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.737931013 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.738030910 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.738079071 CEST	61366	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.738123894 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.738138914 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.738159895 CEST	61366	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.738282919 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.738297939 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.738312006 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.738332987 CEST	61366	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.738353014 CEST	61366	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.738985062 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.739039898 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.739056110 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.739082098 CEST	61366	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.739214897 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.739231110 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.739245892 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.739268064 CEST	61366	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.739288092 CEST	61366	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.739934921 CEST	80	61366	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:12.776101112 CEST	61364	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:12.792366028 CEST	61366	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:13.019699097 CEST	61367	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:13.019727945 CEST	443	61367	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:13.019829035 CEST	61367	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:13.020737886 CEST	61367	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:13.020750046 CEST	443	61367	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:13.430293083 CEST	61368	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:13.432769060 CEST	61369	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:13.711939096 CEST	61370	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:13.749933004 CEST	80	61368	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:13.749952078 CEST	80	61369	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:13.749969006 CEST	80	61370	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:13.750055075 CEST	61368	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:13.750171900 CEST	61369	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:13.750171900 CEST	61370	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:13.750533104 CEST	61370	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:13.750659943 CEST	443	61367	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:13.750710011 CEST	61369	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:13.751059055 CEST	61367	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:13.751081944 CEST	443	61367	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:13.751554966 CEST	443	61367	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:13.752351046 CEST	61367	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:13.752430916 CEST	443	61367	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:13.752624035 CEST	61367	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:13.755374908 CEST	80	61370	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:13.755466938 CEST	80	61369	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:13.796500921 CEST	443	61367	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:14.219997883 CEST	80	61370	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:14.220040083 CEST	80	61370	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:14.220093012 CEST	80	61370	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:14.220102072 CEST	61370	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:14.220128059 CEST	80	61370	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:14.220163107 CEST	80	61370	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:14.220232010 CEST	61370	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:14.220257044 CEST	80	61370	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:14.220289946 CEST	80	61370	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:14.220309019 CEST	61370	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:14.220325947 CEST	80	61370	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:14.220359087 CEST	80	61370	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:14.220372915 CEST	61370	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:14.220393896 CEST	80	61370	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:14.220453978 CEST	61370	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:14.222826004 CEST	80	61369	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:14.225259066 CEST	80	61370	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:14.225296974 CEST	80	61370	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:14.225348949 CEST	61370	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:14.272433043 CEST	61369	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:14.310496092 CEST	80	61370	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:14.310573101 CEST	80	61370	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:14.310590029 CEST	80	61370	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:14.310652971 CEST	80	61370	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:14.310669899 CEST	61370	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:14.310818911 CEST	61370	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:16.039736032 CEST	443	61367	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:16.039798021 CEST	443	61367	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:16.039843082 CEST	61367	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:16.041127920 CEST	61367	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:16.041146994 CEST	443	61367	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:16.063033104 CEST	61372	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:16.063069105 CEST	443	61372	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:16.063133955 CEST	61372	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:16.063661098 CEST	61372	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:16.063683033 CEST	443	61372	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:16.698076010 CEST	443	61372	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:16.748486996 CEST	61372	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:16.758698940 CEST	61372	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:16.758703947 CEST	443	61372	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:16.759387016 CEST	443	61372	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:16.759702921 CEST	61372	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:16.759790897 CEST	443	61372	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:16.759960890 CEST	61372	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:16.800542116 CEST	443	61372	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:17.040208101 CEST	443	61372	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:17.040292025 CEST	443	61372	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:17.040359974 CEST	61372	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:17.683218956 CEST	61372	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:17.683293104 CEST	443	61372	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:17.927154064 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:17.932106972 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:17.932128906 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:17.932146072 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:18.093475103 CEST	443	61347	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:18.093594074 CEST	443	61347	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:18.093771935 CEST	61347	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:19.872684002 CEST	61347	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:19.872715950 CEST	443	61347	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:20.232321024 CEST	61373	443	192.168.2.5	172.217.18.4
Jul 8, 2024 17:54:20.232378960 CEST	443	61373	172.217.18.4	192.168.2.5
Jul 8, 2024 17:54:20.232572079 CEST	61373	443	192.168.2.5	172.217.18.4
Jul 8, 2024 17:54:20.232743979 CEST	61373	443	192.168.2.5	172.217.18.4
Jul 8, 2024 17:54:20.232769966 CEST	443	61373	172.217.18.4	192.168.2.5
Jul 8, 2024 17:54:20.766455889 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.766499996 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.766515017 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.766529083 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.766544104 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.766557932 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.766573906 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.766577959 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:20.766679049 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:20.766690969 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.766716957 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.766731977 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.766746998 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.766758919 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:20.766763926 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.766781092 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:20.766830921 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:20.777832031 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.777899027 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.777915001 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.777966022 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:20.778038025 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.778053045 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.778067112 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.778081894 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:20.778081894 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.778111935 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:20.778301954 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.778362036 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:20.778440952 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.778456926 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.778511047 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.778537035 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.778553009 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.778568029 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:20.778568983 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.778584003 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:20.778609037 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:20.778794050 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.778810024 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.778850079 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:20.779803038 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.779858112 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.779872894 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.779918909 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:20.780051947 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.780097008 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:20.796720982 CEST	61374	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:20.796750069 CEST	443	61374	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:20.796914101 CEST	61374	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:20.797136068 CEST	61374	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:20.797142982 CEST	443	61374	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:20.800793886 CEST	61375	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:20.800847054 CEST	443	61375	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:20.800945997 CEST	61375	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:20.802525043 CEST	61375	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:20.802546978 CEST	443	61375	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:20.854846954 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:20.859484911 CEST	443	61373	172.217.18.4	192.168.2.5
Jul 8, 2024 17:54:20.859988928 CEST	61373	443	192.168.2.5	172.217.18.4
Jul 8, 2024 17:54:20.860055923 CEST	443	61373	172.217.18.4	192.168.2.5
Jul 8, 2024 17:54:20.860363960 CEST	443	61373	172.217.18.4	192.168.2.5
Jul 8, 2024 17:54:20.860800028 CEST	61373	443	192.168.2.5	172.217.18.4
Jul 8, 2024 17:54:20.860866070 CEST	443	61373	172.217.18.4	192.168.2.5
Jul 8, 2024 17:54:20.904845953 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:20.904854059 CEST	61373	443	192.168.2.5	172.217.18.4
Jul 8, 2024 17:54:20.948600054 CEST	80	61344	208.91.196.46	192.168.2.5
Jul 8, 2024 17:54:21.000832081 CEST	61344	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:21.548057079 CEST	443	61375	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:21.548392057 CEST	61375	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:21.548429012 CEST	443	61375	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:21.548932076 CEST	443	61375	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:21.549374104 CEST	443	61374	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:21.549791098 CEST	61375	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:21.549874067 CEST	443	61375	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:21.550136089 CEST	61374	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:21.550153971 CEST	443	61374	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:21.550494909 CEST	61375	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:21.550532103 CEST	443	61375	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:21.551253080 CEST	443	61374	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:21.551585913 CEST	61374	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:21.551753044 CEST	443	61374	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:21.591835976 CEST	61374	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:21.824279070 CEST	443	61375	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:21.824314117 CEST	443	61375	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:21.824414015 CEST	443	61375	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:21.824470997 CEST	61375	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:21.824500084 CEST	61375	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:21.882724047 CEST	61375	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:21.882747889 CEST	443	61375	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:22.037864923 CEST	61376	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:22.037916899 CEST	443	61376	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:22.037991047 CEST	61376	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:22.038305044 CEST	61376	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:22.038324118 CEST	443	61376	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:22.931812048 CEST	443	61376	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:22.932115078 CEST	61376	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:22.932152033 CEST	443	61376	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:22.932991028 CEST	443	61376	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:22.933397055 CEST	61376	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:22.933527946 CEST	61376	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:22.933537006 CEST	443	61376	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:22.933549881 CEST	443	61376	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:22.982904911 CEST	61376	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:23.121382952 CEST	443	61376	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:23.121478081 CEST	443	61376	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:23.121545076 CEST	61376	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:23.122483015 CEST	61376	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:23.122507095 CEST	443	61376	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:23.174747944 CEST	49723	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:23.175575972 CEST	61377	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:23.175616980 CEST	443	61377	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:23.175831079 CEST	61377	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:23.176278114 CEST	61377	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:23.176292896 CEST	443	61377	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:23.181082964 CEST	80	49723	208.91.196.253	192.168.2.5
Jul 8, 2024 17:54:23.181149960 CEST	49723	80	192.168.2.5	208.91.196.253
Jul 8, 2024 17:54:23.805412054 CEST	443	61377	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:23.806057930 CEST	61377	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:23.806070089 CEST	443	61377	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:23.806540966 CEST	443	61377	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:23.807166100 CEST	61377	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:23.807259083 CEST	443	61377	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:23.807399035 CEST	61377	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:23.848579884 CEST	443	61377	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:24.114456892 CEST	443	61377	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:24.114538908 CEST	443	61377	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:24.114643097 CEST	61377	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:24.211373091 CEST	61377	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:24.211397886 CEST	443	61377	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:26.981983900 CEST	443	61360	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:26.982146978 CEST	443	61360	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:26.982342958 CEST	61360	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:27.874979973 CEST	61360	443	192.168.2.5	156.146.33.15
Jul 8, 2024 17:54:27.875011921 CEST	443	61360	156.146.33.15	192.168.2.5
Jul 8, 2024 17:54:30.780987978 CEST	443	61373	172.217.18.4	192.168.2.5
Jul 8, 2024 17:54:30.781142950 CEST	443	61373	172.217.18.4	192.168.2.5
Jul 8, 2024 17:54:30.781322956 CEST	61373	443	192.168.2.5	172.217.18.4
Jul 8, 2024 17:54:32.004734039 CEST	61373	443	192.168.2.5	172.217.18.4
Jul 8, 2024 17:54:32.004796028 CEST	443	61373	172.217.18.4	192.168.2.5
Jul 8, 2024 17:54:36.965341091 CEST	443	61374	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:36.965404987 CEST	443	61374	87.230.98.78	192.168.2.5
Jul 8, 2024 17:54:36.965607882 CEST	61374	443	192.168.2.5	87.230.98.78
Jul 8, 2024 17:54:39.527177095 CEST	49718	80	192.168.2.5	208.91.196.46
Jul 8, 2024 17:54:39.693276882 CEST	80	49718	208.91.196.46	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 8, 2024 17:53:15.607125044 CEST	53	60283	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:15.607583046 CEST	53	55098	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:16.747419119 CEST	53	57450	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:17.701745033 CEST	57721	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:17.703923941 CEST	60120	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:17.733520031 CEST	53	57721	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:17.803678989 CEST	53	60120	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:18.840450048 CEST	62426	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:18.841234922 CEST	57177	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:18.848397017 CEST	53	62426	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:18.931461096 CEST	53	57177	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:20.172880888 CEST	51488	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:20.173058987 CEST	60049	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:20.183975935 CEST	53	51488	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:20.184010983 CEST	53	60049	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:20.712380886 CEST	52451	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:20.712682962 CEST	64531	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:20.713254929 CEST	53775	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:20.713490963 CEST	55335	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:20.720412970 CEST	53	52451	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:20.721462965 CEST	53	64531	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:20.722595930 CEST	53	53775	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:20.723068953 CEST	53	55335	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:20.730345964 CEST	62677	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:20.730698109 CEST	58765	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:20.733148098 CEST	63541	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:20.733417034 CEST	57180	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:20.737704992 CEST	53	62677	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:20.737960100 CEST	53	58765	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:20.768320084 CEST	53	63541	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:20.796709061 CEST	53	57180	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:21.839936972 CEST	50726	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:21.840811968 CEST	60595	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:22.721246958 CEST	53	60595	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:22.734796047 CEST	53	50726	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:26.779195070 CEST	52216	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:26.779606104 CEST	54539	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:26.832046032 CEST	53	52216	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:26.854113102 CEST	53	54539	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:30.433259010 CEST	54926	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:30.433686018 CEST	54819	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:30.454174995 CEST	53	54926	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:30.463619947 CEST	53	54819	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:31.905922890 CEST	56899	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:31.906013966 CEST	53	58529	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:31.906280994 CEST	60915	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:31.912781000 CEST	53	56899	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:31.913887978 CEST	53	60915	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:32.919397116 CEST	53	58505	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:33.101933002 CEST	53	49462	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:33.901290894 CEST	53	52310	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:34.461447001 CEST	53	49397	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:34.488714933 CEST	63353	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:34.488877058 CEST	50144	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:34.496849060 CEST	53	63353	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:34.508212090 CEST	53	50144	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:34.982521057 CEST	59739	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:34.983387947 CEST	57891	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:34.989212036 CEST	53	59739	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:34.990741968 CEST	53	57891	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:36.090784073 CEST	53	53091	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:38.648917913 CEST	53	52818	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:40.605890989 CEST	53	52062	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:50.199408054 CEST	53	53382	162.159.36.2	192.168.2.5
Jul 8, 2024 17:53:50.718700886 CEST	50384	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:50.727629900 CEST	53	50384	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:54.368532896 CEST	57921	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:54.369335890 CEST	50971	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:54.377362013 CEST	53	50971	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:54.379268885 CEST	53	57921	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:54.385682106 CEST	60841	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:54.393837929 CEST	53	60841	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:56.607039928 CEST	49344	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:53:56.698489904 CEST	53	49344	1.1.1.1	192.168.2.5
Jul 8, 2024 17:53:59.216073990 CEST	12625	25704	192.168.2.5	192.168.2.1
Jul 8, 2024 17:54:02.316260099 CEST	65040	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:54:02.324332952 CEST	53	65040	1.1.1.1	192.168.2.5
Jul 8, 2024 17:54:09.700881004 CEST	22116	14641	192.168.2.5	192.168.2.1
Jul 8, 2024 17:54:11.479063034 CEST	65324	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:54:11.510169029 CEST	53	65324	1.1.1.1	192.168.2.5
Jul 8, 2024 17:54:17.453489065 CEST	25657	12625	192.168.2.5	192.168.2.1
Jul 8, 2024 17:54:20.223078012 CEST	59711	53	192.168.2.5	1.1.1.1
Jul 8, 2024 17:54:20.231182098 CEST	53	59711	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jul 8, 2024 17:53:17.803823948 CEST	192.168.2.5	1.1.1.1	c1e0	(Port unreachable)	Destination Unreachable
Jul 8, 2024 17:53:18.931552887 CEST	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Jul 8, 2024 17:53:20.796796083 CEST	192.168.2.5	1.1.1.1	c22e	(Port unreachable)	Destination Unreachable
Jul 8, 2024 17:53:26.854299068 CEST	192.168.2.5	1.1.1.1	c1e0	(Port unreachable)	Destination Unreachable
Jul 8, 2024 17:53:30.463706970 CEST	192.168.2.5	1.1.1.1	c242	(Port unreachable)	Destination Unreachable
Jul 8, 2024 17:53:34.508533001 CEST	192.168.2.5	1.1.1.1	c242	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 8, 2024 17:53:17.701745033 CEST	192.168.2.5	1.1.1.1	0x69b9	Standard query (0)	le100.net	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:17.703923941 CEST	192.168.2.5	1.1.1.1	0x8feb	Standard query (0)	le100.net	65	IN (0x0001)	false
Jul 8, 2024 17:53:18.840450048 CEST	192.168.2.5	1.1.1.1	0xed5f	Standard query (0)	ifdnzact.com	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:18.841234922 CEST	192.168.2.5	1.1.1.1	0xfd7a	Standard query (0)	ifdnzact.com	65	IN (0x0001)	false
Jul 8, 2024 17:53:20.172880888 CEST	192.168.2.5	1.1.1.1	0x9509	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:20.173058987 CEST	192.168.2.5	1.1.1.1	0xd8f4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 8, 2024 17:53:20.712380886 CEST	192.168.2.5	1.1.1.1	0xfe3b	Standard query (0)	delivery.consentmanager.net	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:20.712682962 CEST	192.168.2.5	1.1.1.1	0x841	Standard query (0)	delivery.consentmanager.net	65	IN (0x0001)	false
Jul 8, 2024 17:53:20.713254929 CEST	192.168.2.5	1.1.1.1	0x175f	Standard query (0)	cdn.consentmanager.net	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:20.713490963 CEST	192.168.2.5	1.1.1.1	0xc4d7	Standard query (0)	cdn.consentmanager.net	65	IN (0x0001)	false
Jul 8, 2024 17:53:20.730345964 CEST	192.168.2.5	1.1.1.1	0xa2e2	Standard query (0)	a.delivery.consentmanager.net	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:20.730698109 CEST	192.168.2.5	1.1.1.1	0xa84c	Standard query (0)	a.delivery.consentmanager.net	65	IN (0x0001)	false
Jul 8, 2024 17:53:20.733148098 CEST	192.168.2.5	1.1.1.1	0xe872	Standard query (0)	i1.cdn-image.com	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:20.733417034 CEST	192.168.2.5	1.1.1.1	0x89f3	Standard query (0)	i1.cdn-image.com	65	IN (0x0001)	false
Jul 8, 2024 17:53:21.839936972 CEST	192.168.2.5	1.1.1.1	0x67a6	Standard query (0)	i1.cdn-image.com	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:21.840811968 CEST	192.168.2.5	1.1.1.1	0xc226	Standard query (0)	i1.cdn-image.com	65	IN (0x0001)	false
Jul 8, 2024 17:53:26.779195070 CEST	192.168.2.5	1.1.1.1	0x8055	Standard query (0)	le100.net	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:26.779606104 CEST	192.168.2.5	1.1.1.1	0x7840	Standard query (0)	le100.net	65	IN (0x0001)	false
Jul 8, 2024 17:53:30.433259010 CEST	192.168.2.5	1.1.1.1	0x5cb0	Standard query (0)	www.mydomaincontact.com	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:30.433686018 CEST	192.168.2.5	1.1.1.1	0x360c	Standard query (0)	www.mydomaincontact.com	65	IN (0x0001)	false
Jul 8, 2024 17:53:31.905922890 CEST	192.168.2.5	1.1.1.1	0xe25d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:31.906280994 CEST	192.168.2.5	1.1.1.1	0x4d15	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 8, 2024 17:53:34.488714933 CEST	192.168.2.5	1.1.1.1	0xc3	Standard query (0)	www.mydomaincontact.com	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:34.488877058 CEST	192.168.2.5	1.1.1.1	0xd78d	Standard query (0)	www.mydomaincontact.com	65	IN (0x0001)	false
Jul 8, 2024 17:53:34.982521057 CEST	192.168.2.5	1.1.1.1	0x221f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:34.983387947 CEST	192.168.2.5	1.1.1.1	0x1629	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 8, 2024 17:53:50.718700886 CEST	192.168.2.5	1.1.1.1	0x7004	Standard query (0)	206.23.85.13.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Jul 8, 2024 17:53:54.368532896 CEST	192.168.2.5	1.1.1.1	0xa00e	Standard query (0)	delivery.consentmanager.net	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:54.369335890 CEST	192.168.2.5	1.1.1.1	0x3025	Standard query (0)	cdn.consentmanager.net	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:54.385682106 CEST	192.168.2.5	1.1.1.1	0x3c64	Standard query (0)	a.delivery.consentmanager.net	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:56.607039928 CEST	192.168.2.5	1.1.1.1	0x1e55	Standard query (0)	ifdnzact.com	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:54:02.316260099 CEST	192.168.2.5	1.1.1.1	0x8f33	Standard query (0)	i2.cdn-image.com	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:54:11.479063034 CEST	192.168.2.5	1.1.1.1	0xd26a	Standard query (0)	i3.cdn-image.com	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:54:20.223078012 CEST	192.168.2.5	1.1.1.1	0x8bee	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 8, 2024 17:53:17.733520031 CEST	1.1.1.1	192.168.2.5	0x69b9	No error (0)	le100.net		185.53.179.170	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:18.848397017 CEST	1.1.1.1	192.168.2.5	0xed5f	No error (0)	ifdnzact.com		208.91.196.46	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:20.183975935 CEST	1.1.1.1	192.168.2.5	0x9509	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:20.184010983 CEST	1.1.1.1	192.168.2.5	0xd8f4	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 8, 2024 17:53:20.720412970 CEST	1.1.1.1	192.168.2.5	0xfe3b	No error (0)	delivery.consentmanager.net		87.230.98.78	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:20.722595930 CEST	1.1.1.1	192.168.2.5	0x175f	No error (0)	cdn.consentmanager.net	1376624012.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Jul 8, 2024 17:53:20.722595930 CEST	1.1.1.1	192.168.2.5	0x175f	No error (0)	1376624012.rsc.cdn77.org		156.146.33.15	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:20.722595930 CEST	1.1.1.1	192.168.2.5	0x175f	No error (0)	1376624012.rsc.cdn77.org		156.146.33.138	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:20.722595930 CEST	1.1.1.1	192.168.2.5	0x175f	No error (0)	1376624012.rsc.cdn77.org		212.102.56.181	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:20.722595930 CEST	1.1.1.1	192.168.2.5	0x175f	No error (0)	1376624012.rsc.cdn77.org		212.102.56.178	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:20.722595930 CEST	1.1.1.1	192.168.2.5	0x175f	No error (0)	1376624012.rsc.cdn77.org		156.146.33.140	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:20.722595930 CEST	1.1.1.1	192.168.2.5	0x175f	No error (0)	1376624012.rsc.cdn77.org		195.181.175.40	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:20.722595930 CEST	1.1.1.1	192.168.2.5	0x175f	No error (0)	1376624012.rsc.cdn77.org		195.181.175.15	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:20.723068953 CEST	1.1.1.1	192.168.2.5	0xc4d7	No error (0)	cdn.consentmanager.net	1376624012.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Jul 8, 2024 17:53:20.737704992 CEST	1.1.1.1	192.168.2.5	0xa2e2	No error (0)	a.delivery.consentmanager.net		87.230.98.78	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:20.768320084 CEST	1.1.1.1	192.168.2.5	0xe872	No error (0)	i1.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:22.734796047 CEST	1.1.1.1	192.168.2.5	0x67a6	No error (0)	i1.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:26.832046032 CEST	1.1.1.1	192.168.2.5	0x8055	No error (0)	le100.net		185.53.179.170	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:30.454174995 CEST	1.1.1.1	192.168.2.5	0x5cb0	No error (0)	www.mydomaincontact.com		54.76.66.215	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:30.454174995 CEST	1.1.1.1	192.168.2.5	0x5cb0	No error (0)	www.mydomaincontact.com		99.80.85.24	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:30.454174995 CEST	1.1.1.1	192.168.2.5	0x5cb0	No error (0)	www.mydomaincontact.com		52.30.98.3	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:31.579735041 CEST	1.1.1.1	192.168.2.5	0x15e2	No error (0)	windowsupdatebg.s.llnwi.net		87.248.204.0	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:31.912781000 CEST	1.1.1.1	192.168.2.5	0xe25d	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:31.913887978 CEST	1.1.1.1	192.168.2.5	0x4d15	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 8, 2024 17:53:32.395163059 CEST	1.1.1.1	192.168.2.5	0xe91a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 8, 2024 17:53:32.395163059 CEST	1.1.1.1	192.168.2.5	0xe91a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:34.496849060 CEST	1.1.1.1	192.168.2.5	0xc3	No error (0)	www.mydomaincontact.com		99.80.85.24	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:34.496849060 CEST	1.1.1.1	192.168.2.5	0xc3	No error (0)	www.mydomaincontact.com		54.76.66.215	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:34.496849060 CEST	1.1.1.1	192.168.2.5	0xc3	No error (0)	www.mydomaincontact.com		52.30.98.3	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:34.989212036 CEST	1.1.1.1	192.168.2.5	0x221f	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:34.990741968 CEST	1.1.1.1	192.168.2.5	0x1629	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 8, 2024 17:53:46.133352995 CEST	1.1.1.1	192.168.2.5	0xa7c4	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 8, 2024 17:53:46.133352995 CEST	1.1.1.1	192.168.2.5	0xa7c4	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:50.727629900 CEST	1.1.1.1	192.168.2.5	0x7004	Name error (3)	206.23.85.13.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Jul 8, 2024 17:53:54.377362013 CEST	1.1.1.1	192.168.2.5	0x3025	No error (0)	cdn.consentmanager.net	1376624012.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Jul 8, 2024 17:53:54.377362013 CEST	1.1.1.1	192.168.2.5	0x3025	No error (0)	1376624012.rsc.cdn77.org		156.146.33.15	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:54.377362013 CEST	1.1.1.1	192.168.2.5	0x3025	No error (0)	1376624012.rsc.cdn77.org		195.181.175.40	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:54.377362013 CEST	1.1.1.1	192.168.2.5	0x3025	No error (0)	1376624012.rsc.cdn77.org		212.102.56.181	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:54.377362013 CEST	1.1.1.1	192.168.2.5	0x3025	No error (0)	1376624012.rsc.cdn77.org		212.102.56.178	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:54.377362013 CEST	1.1.1.1	192.168.2.5	0x3025	No error (0)	1376624012.rsc.cdn77.org		195.181.175.15	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:54.377362013 CEST	1.1.1.1	192.168.2.5	0x3025	No error (0)	1376624012.rsc.cdn77.org		156.146.33.141	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:54.377362013 CEST	1.1.1.1	192.168.2.5	0x3025	No error (0)	1376624012.rsc.cdn77.org		156.146.33.137	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:54.379268885 CEST	1.1.1.1	192.168.2.5	0xa00e	No error (0)	delivery.consentmanager.net		87.230.98.78	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:54.393837929 CEST	1.1.1.1	192.168.2.5	0x3c64	No error (0)	a.delivery.consentmanager.net		87.230.98.78	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:53:56.698489904 CEST	1.1.1.1	192.168.2.5	0x1e55	No error (0)	ifdnzact.com		208.91.196.46	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:54:02.324332952 CEST	1.1.1.1	192.168.2.5	0x8f33	No error (0)	i2.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:54:11.510169029 CEST	1.1.1.1	192.168.2.5	0xd26a	No error (0)	i3.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:54:20.231182098 CEST	1.1.1.1	192.168.2.5	0x8bee	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:54:33.443180084 CEST	1.1.1.1	192.168.2.5	0x7f72	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Jul 8, 2024 17:54:33.443180084 CEST	1.1.1.1	192.168.2.5	0x7f72	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

ifdnzact.com

cdn.consentmanager.net

a.delivery.consentmanager.net

i1.cdn-image.com

i2.cdn-image.com

i3.cdn-image.com

fs.microsoft.com

www.mydomaincontact.com

https:

www.google.com

le100.net

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	185.53.179.170	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:53:17.755484104 CEST	424	OUT	GET / HTTP/1.1 Host: le100.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:53:18.656869888 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:53:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Redirect: skenzo X-Buckets: bucket011 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_qXAn18myIwc4gmCI8Y1wfFsRzFFv2OP0CkoDeLqNp3lSPsqlsQLemQ8asVm8t8Og8es+r3f6PgqEvPcOEAoF6g== X-Template: tpl_CleanPeppermintBlack_twoclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Domain: le100.net X-Subdomain: Content-Encoding: gzip Data Raw: 32 31 36 0d 0a 1f 8b 08 00 00 00 00 00 04 03 b5 59 eb 73 db c6 11 ff 0c fe 15 17 68 5c 51 29 41 90 92 68 99 30 a9 74 2c bb 91 67 9c 46 93 a8 d3 f4 13 e7 08 1c c1 8b f0 ea e1 28 52 ea e8 7f ef ee 3d c0 a3 08 2a 6e 46 86 2d 89 bc c7 de ee de ee 6f 1f 98 7c f7 f1 e7 ab db 7f df 7c 22 4b 99 67 e4 e6 9f 1f be 7c be 22 7e 10 86 ff 3a bb 0a c3 8f b7 1f c9 6f d7 b7 3f 7d 21 c3 fe 80 dc 0a 5a d4 5c f2 b2 a0 59 18 7e fa 87 df 21 e6 f1 97 52 56 51 18 ae d7 eb fe fa ac 5f 8a 34 bc fd 25 dc 20 cd 21 12 31 1f 03 e9 50 e8 27 32 f1 2f 3b 13 75 f0 26 cf 8a 7a da 42 66 38 1e 8f f5 6e 9f c0 a2 28 a3 45 3a f5 59 e1 93 e6 13 d2 60 34 b9 54 dc 4c 72 26 29 08 23 ab 80 fd 67 c5 ef a7 fe 55 59 48 56 c8 e0 f6 a1 62 3e 89 f5 b7 a9 2f d9 46 86 78 f6 7b 12 2f a9 a8 99 9c ae e4 22 78 e7 87 2e a1 82 e6 6c ea df 73 b6 ae 4a 21 9d ed 6b 9e c8 e5 34 61 f7 3c 66 81 fa d2 23 bc 00 e5 d0 2c a8 63 9a b1 e9 b0 47 72 ba e1 f9 2a b7 03 20 2d ea 6b 22 b9 cc d8 65 c6 86 83 41 bf 60 72 12 ea 81 46 9b 6a 51 2d 1f 32 46 72 96 70 3a f5 eb 58 30 Data Ascii: 216Ysh\Q)Ah0t,gF(R=nF-o\|\|"Kg\|"~:o?}!Z\Y~!RVQ_4% !1P'2/;u&zBf8n(E:Y`4TLr&)#gUYHVb>/Fx{/"x.lsJ!k4a<f#,cGr -k"eA`rFjQ-2Frp:X0
Jul 8, 2024 17:53:18.656925917 CEST	1236	IN	Data Raw: 90 f9 b2 73 54 03 e9 59 c6 8b bb 9e f3 79 36 2f b3 64 77 80 65 e5 9a fc 57 91 8c cb ac 14 11 11 e9 bc 3b e8 c1 bf 93 f7 6a 18 15 10 d0 8c a7 05 cc f1 74 29 f5 f0 02 14 14 91 e1 79 b5 21 54 80 34 3d 52 c3 ad 07 35 13 7c a1 57 2c 19 ae 8e c8 e9 a0 Data Ascii: sTYy6/dweW;jt)y!T4=R5\|W,&/RCd@F[O)Dd<hT^"aHFhX$HX\F%j*U<SFX-N%4ZLGO5[/750g~::gs.\CP9-&f9
Jul 8, 2024 17:53:18.656964064 CEST	851	IN	Data Raw: 7f aa 31 45 06 8a 32 a4 d3 4f f9 02 2a b1 a2 0c 74 31 46 6c c0 b0 96 33 54 b6 6a ed 86 0c b5 29 58 03 87 8e 87 6b e1 a0 2d 87 c9 e1 2b 31 39 fc 96 4c 5e bf 12 93 d7 af cf 24 d4 31 0c b4 ab 00 c2 1a 96 76 4f 32 84 32 51 c1 58 bf 66 59 c6 c4 2f d0 Data Ascii: 1E2O*t1Fl3Tj)Xk-+19L^$1vO22QXfY/(HZD{37NcUqu um604Jl`,L)Gw\|nw4Fh)l>nb)"T-';Th\|V)ji\|r1k@_@kY
Jul 8, 2024 17:53:26.574975014 CEST	362	OUT	GET /favicon.ico HTTP/1.1 Host: le100.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://le100.net/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:53:26.772916079 CEST	230	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:53:26 GMT Content-Type: image/x-icon Content-Length: 0 Connection: keep-alive Last-Modified: Tue, 02 Jul 2024 08:23:45 GMT ETag: "6683b911-0" Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49713	208.91.196.46	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:53:18.867212057 CEST	482	OUT	GET /?dn=le100.net&pid=9PO755G95 HTTP/1.1 Host: ifdnzact.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://le100.net/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:53:20.615292072 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 15:53:08 GMT Server: Apache Set-Cookie: vsid=929vr467999588483095861; expires=Sat, 07-Jul-2029 15:53:08 GMT; Max-Age=157680000; path=/; domain=ifdnzact.com; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_KG3vNCQwh8InXSY1TAIeg1e3xlRAJWonQT1cJkj7axyo/aQFEEdrqz+ftQ0hqUKHp/AThAQYUa0K88C5fZS1Xg== Keep-Alive: timeout=5, max=123 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 38 62 65 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 [TRUNCATED] Data Ascii: 8be2<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in
Jul 8, 2024 17:53:20.615314960 CEST	1236	IN	Data Raw: 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 6e 3d 22 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e Data Ascii: window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","E
Jul 8, 2024 17:53:20.615330935 CEST	1236	IN	Data Raw: 66 28 22 63 6d 70 6c 61 6e 67 3d 22 29 2b 38 2c 32 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7d 65 6c 73 65 7b 69 66 28 22 63 6d 70 5f 73 65 74 6c 61 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 65 74 6c Data Ascii: f("cmplang=")+8,2).toUpperCase())}else{if("cmp_setlang" in window&&window.cmp_setlang!=""){c.push(window.cmp_setlang.toUpperCase())}else{if(a.length>0){for(var d=0;d<a.length;d++){c.push(a[d])}}}}}if("language" in navigator){c.push(navigator.l
Jul 8, 2024 17:53:20.615396023 CEST	672	IN	Data Raw: 77 7d 76 61 72 20 6b 3d 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 68 29 3f 68 2e 63 6d 70 5f 70 72 6f 74 6f 3a 22 68 74 74 70 73 3a 22 3b 69 66 28 6b 21 3d 22 68 74 74 70 3a 22 26 26 6b 21 3d 22 68 74 74 70 73 3a 22 29 7b 6b 3d 22 68 74 74 Data Ascii: w}var k=("cmp_proto" in h)?h.cmp_proto:"https:";if(k!="http:"&&k!="https:"){k="https:"}var g=("cmp_ref" in h)?h.cmp_ref:location.href;var j=u.createElement("script");j.setAttribute("data-cmp-ab","1");var c=x("cmpdesign","cmp_design" in h?h.cmp
Jul 8, 2024 17:53:20.615411997 CEST	1236	IN	Data Raw: 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 66 29 3a 22 22 29 2b 28 72 21 3d 22 22 3f 22 26 63 6d 70 67 70 70 6b 65 79 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 72 29 3a 22 22 29 2b 28 6e 21 3d 22 22 3f 22 26 63 6d 70 61 74 Data Ascii: eURIComponent(f):"")+(r!=""?"&cmpgppkey="+encodeURIComponent(r):"")+(n!=""?"&cmpatt="+encodeURIComponent(n):"")+("cmp_params" in h?"&"+h.cmp_params:"")+(u.cookie.length>0?"&__cmpfcc=1":"")+"&l="+o.toLowerCase()+"&o="+(new Date()).getTime();j.t
Jul 8, 2024 17:53:20.615432024 CEST	1236	IN	Data Raw: 74 3d 76 28 22 73 63 72 69 70 74 22 29 7d 69 66 28 74 2e 6c 65 6e 67 74 68 3d 3d 30 29 7b 74 3d 76 28 22 68 65 61 64 22 29 7d 69 66 28 74 2e 6c 65 6e 67 74 68 3e 30 29 7b 74 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 7d 7d 7d 7d 29 28 Data Ascii: t=v("script")}if(t.length==0){t=v("head")}if(t.length>0){t[0].appendChild(j)}}}})();window.cmp_addFrame=function(b){if(!window.frames[b]){if(document.body){var a=document.createElement("iframe");a.style.cssText="display:none";if("cmp_cdn" in w
Jul 8, 2024 17:53:20.615448952 CEST	1236	IN	Data Raw: 7d 7d 65 6c 73 65 7b 69 66 28 61 5b 30 5d 3d 3d 3d 22 67 65 74 55 53 50 44 61 74 61 22 29 7b 61 5b 32 5d 28 7b 76 65 72 73 69 6f 6e 3a 31 2c 75 73 70 53 74 72 69 6e 67 3a 77 69 6e 64 6f 77 2e 63 6d 70 5f 72 63 28 22 22 29 7d 2c 74 72 75 65 29 7d Data Ascii: }}else{if(a[0]==="getUSPData"){a[2]({version:1,uspString:window.cmp_rc("")},true)}else{if(a[0]==="getTCData"){__cmp.a.push([].slice.apply(a))}else{if(a[0]==="addEventListener"\|\|a[0]==="removeEventListener"){__cmp.a.push([].slice.apply(a))}else
Jul 8, 2024 17:53:20.615466118 CEST	1236	IN	Data Raw: 72 65 74 75 72 6e 7b 73 65 63 74 69 6f 6e 49 64 3a 33 2c 67 70 70 56 65 72 73 69 6f 6e 3a 31 2c 73 65 63 74 69 6f 6e 4c 69 73 74 3a 5b 5d 2c 61 70 70 6c 69 63 61 62 6c 65 53 65 63 74 69 6f 6e 73 3a 5b 30 5d 2c 67 70 70 53 74 72 69 6e 67 3a 22 22 Data Ascii: return{sectionId:3,gppVersion:1,sectionList:[],applicableSections:[0],gppString:"",pingData:window.cmp_gpp_ping()}}else{if(g==="hasSection"\|\|g==="getSection"\|\|g==="getField"){return null}else{__gpp.q.push([].slice.apply(a))}}}}}};window.cmp_ms
Jul 8, 2024 17:53:20.615492105 CEST	896	IN	Data Raw: 6c 49 64 3a 62 2e 63 61 6c 6c 49 64 7d 7d 3b 64 2e 73 6f 75 72 63 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 61 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 3a 65 2c 22 2a 22 29 7d 2c 22 70 61 72 61 6d 65 74 65 72 22 20 69 6e 20 62 3f 62 Data Ascii: lId:b.callId}};d.source.postMessage(a?JSON.stringify(e):e,"*")},"parameter" in b?b.parameter:null,"version" in b?b.version:1)}};window.cmp_setStub=function(a){if(!(a in window)\|\|(typeof(window[a])!=="function"&&typeof(window[a])!=="object"&&(t
Jul 8, 2024 17:53:20.621504068 CEST	1236	IN	Data Raw: 6e 64 6f 77 29 7c 7c 21 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 69 73 61 62 6c 65 74 63 66 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 61 64 64 46 72 61 6d 65 28 22 5f 5f 74 63 66 61 70 69 4c 6f 63 61 74 6f 72 22 29 7d 69 66 28 21 28 22 63 6d 70 5f 64 69 Data Ascii: ndow)\|\|!window.cmp_disabletcf){window.cmp_addFrame("__tcfapiLocator")}if(!("cmp_disablegpp" in window)\|\|!window.cmp_disablegpp){window.cmp_addFrame("__gppLocator")}window.cmp_setStub("__cmp");if(!("cmp_disabletcf" in window)\|\|!window.cmp_disab
Jul 8, 2024 17:53:20.621579885 CEST	1236	IN	Data Raw: 74 65 6e 74 3d 22 61 3d 27 32 39 35 39 30 27 20 62 3d 27 33 33 35 34 38 27 20 63 3d 27 6c 65 31 30 30 2e 6e 65 74 27 20 64 3d 27 65 6e 74 69 74 79 5f 6d 61 70 70 65 64 27 22 20 2f 3e 3c 74 69 74 6c 65 3e 4c 65 31 30 30 2e 6e 65 74 3c 2f 74 69 74 Data Ascii: tent="a='29590' b='33548' c='le100.net' d='entity_mapped'" /><title>Le100.net</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
Jul 8, 2024 17:53:20.731929064 CEST	333	OUT	GET /px.js?ch=1 HTTP/1.1 Host: ifdnzact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/?dn=le100.net&pid=9PO755G95 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:53:20.835083008 CEST	628	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 15:53:09 GMT Server: Apache Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=122 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 76 61 72 20 61 62 70 3d 61 62 70 7c 7c 66 61 6c 73 65 3b 76 61 72 20 73 63 72 69 70 74 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 76 61 72 20 73 63 72 69 70 74 3d 73 63 72 69 70 74 73 5b 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 66 28 73 63 72 69 70 74 29 7b 76 61 72 20 71 75 65 72 79 3d 73 63 72 69 70 74 2e 73 72 63 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 2e 73 70 6c 69 74 28 22 26 22 29 3b 76 61 72 20 70 61 72 61 6d 73 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 71 75 65 72 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 70 61 72 61 6d 3d 71 75 65 72 79 5b 69 5d 2e 73 70 6c 69 74 28 22 3d 22 29 3b 70 61 72 61 6d 73 5b 70 61 72 61 6d 5b 30 5d 5d 3d 70 61 72 61 6d 5b 31 5d 7d 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 31 29 61 62 70 3d 74 72 75 65 3b 65 6c 73 65 20 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 32 29 61 62 70 3d 61 62 70 26 [TRUNCATED] Data Ascii: var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49718	208.91.196.46	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:53:20.738050938 CEST	333	OUT	GET /px.js?ch=2 HTTP/1.1 Host: ifdnzact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/?dn=le100.net&pid=9PO755G95 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:53:21.210444927 CEST	628	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 15:53:10 GMT Server: Apache Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=121 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 76 61 72 20 61 62 70 3d 61 62 70 7c 7c 66 61 6c 73 65 3b 76 61 72 20 73 63 72 69 70 74 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 76 61 72 20 73 63 72 69 70 74 3d 73 63 72 69 70 74 73 5b 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 66 28 73 63 72 69 70 74 29 7b 76 61 72 20 71 75 65 72 79 3d 73 63 72 69 70 74 2e 73 72 63 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 2e 73 70 6c 69 74 28 22 26 22 29 3b 76 61 72 20 70 61 72 61 6d 73 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 71 75 65 72 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 70 61 72 61 6d 3d 71 75 65 72 79 5b 69 5d 2e 73 70 6c 69 74 28 22 3d 22 29 3b 70 61 72 61 6d 73 5b 70 61 72 61 6d 5b 30 5d 5d 3d 70 61 72 61 6d 5b 31 5d 7d 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 31 29 61 62 70 3d 74 72 75 65 3b 65 6c 73 65 20 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 32 29 61 62 70 3d 61 62 70 26 [TRUNCATED] Data Ascii: var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};
Jul 8, 2024 17:53:53.054315090 CEST	482	OUT	GET /?dn=le100.net&pid=9PO755G95 HTTP/1.1 Host: ifdnzact.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://le100.net/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:53:54.343532085 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 15:53:41 GMT Server: Apache Set-Cookie: vsid=917vr4679996222205519; expires=Sat, 07-Jul-2029 15:53:42 GMT; Max-Age=157680000; path=/; domain=ifdnzact.com; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_KG3vNCQwh8InXSY1TAIeg1e3xlRAJWonQT1cJkj7axyo/aQFEEdrqz+ftQ0hqUKHp/AThAQYUa0K88C5fZS1Xg== Keep-Alive: timeout=5, max=128 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 38 62 36 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 [TRUNCATED] Data Ascii: 8b6a<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in w
Jul 8, 2024 17:53:54.343636036 CEST	1236	IN	Data Raw: 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 6e 3d 22 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f Data Ascii: indow)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES"
Jul 8, 2024 17:53:54.343657017 CEST	1236	IN	Data Raw: 22 63 6d 70 6c 61 6e 67 3d 22 29 2b 38 2c 32 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7d 65 6c 73 65 7b 69 66 28 22 63 6d 70 5f 73 65 74 6c 61 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 65 74 6c 61 6e Data Ascii: "cmplang=")+8,2).toUpperCase())}else{if("cmp_setlang" in window&&window.cmp_setlang!=""){c.push(window.cmp_setlang.toUpperCase())}else{if(a.length>0){for(var d=0;d<a.length;d++){c.push(a[d])}}}}}if("language" in navigator){c.push(navigator.lan
Jul 8, 2024 17:53:54.343667984 CEST	1236	IN	Data Raw: 76 61 72 20 6b 3d 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 68 29 3f 68 2e 63 6d 70 5f 70 72 6f 74 6f 3a 22 68 74 74 70 73 3a 22 3b 69 66 28 6b 21 3d 22 68 74 74 70 3a 22 26 26 6b 21 3d 22 68 74 74 70 73 3a 22 29 7b 6b 3d 22 68 74 74 70 73 Data Ascii: var k=("cmp_proto" in h)?h.cmp_proto:"https:";if(k!="http:"&&k!="https:"){k="https:"}var g=("cmp_ref" in h)?h.cmp_ref:location.href;var j=u.createElement("script");j.setAttribute("data-cmp-ab","1");var c=x("cmpdesign","cmp_design" in h?h.cmp_d
Jul 8, 2024 17:53:54.343677044 CEST	1236	IN	Data Raw: 68 65 61 64 22 29 7d 69 66 28 74 2e 6c 65 6e 67 74 68 3e 30 29 7b 74 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 7d 7d 7d 76 61 72 20 6d 3d 22 6a 73 22 3b 76 61 72 20 70 3d 78 28 22 63 6d 70 64 65 62 75 67 75 6e 6d 69 6e 69 6d 69 7a 65 Data Ascii: head")}if(t.length>0){t[0].appendChild(j)}}}var m="js";var p=x("cmpdebugunminimized","cmpdebugunminimized" in h?h.cmpdebugunminimized:0)>0?"":".min";var a=x("cmpdebugcoverage","cmp_debugcoverage" in h?h.cmp_debugcoverage:"");if(a=="1"){m="inst
Jul 8, 2024 17:53:54.343692064 CEST	1236	IN	Data Raw: 62 29 7d 7d 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 72 63 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3b 76 61 72 20 66 3d 22 22 3b 76 61 72 20 64 3d 30 3b 77 68 69 6c 65 28 62 21 3d 22 22 Data Ascii: b)}}};window.cmp_rc=function(h){var b=document.cookie;var f="";var d=0;while(b!=""&&d<100){d++;while(b.substr(0,1)==" "){b=b.substr(1,b.length)}var g=b.substring(0,b.indexOf("="));if(b.indexOf(";")!=-1){var c=b.substring(b.indexOf("=")+1,b.ind
Jul 8, 2024 17:53:54.343704939 CEST	776	IN	Data Raw: 70 70 2e 71 7c 7c 5b 5d 3b 69 66 28 21 61 2e 6c 65 6e 67 74 68 29 7b 72 65 74 75 72 6e 20 5f 5f 67 70 70 2e 71 7d 76 61 72 20 67 3d 61 5b 30 5d 3b 76 61 72 20 66 3d 61 2e 6c 65 6e 67 74 68 3e 31 3f 61 5b 31 5d 3a 6e 75 6c 6c 3b 76 61 72 20 65 3d Data Ascii: pp.q\|\|[];if(!a.length){return __gpp.q}var g=a[0];var f=a.length>1?a[1]:null;var e=a.length>2?a[2]:null;if(g==="ping"){return window.cmp_gpp_ping()}else{if(g==="addEventListener"){__gpp.e=__gpp.e\|\|[];if(!("lastId" in __gpp)){__gpp.lastId=0}__gp
Jul 8, 2024 17:53:54.343717098 CEST	1236	IN	Data Raw: 5f 70 69 6e 67 28 29 7d 7d 65 6c 73 65 7b 69 66 28 67 3d 3d 3d 22 68 61 73 53 65 63 74 69 6f 6e 22 7c 7c 67 3d 3d 3d 22 67 65 74 53 65 63 74 69 6f 6e 22 7c 7c 67 3d 3d 3d 22 67 65 74 46 69 65 6c 64 22 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 65 Data Ascii: _ping()}}else{if(g==="hasSection"\|\|g==="getSection"\|\|g==="getField"){return null}else{__gpp.q.push([].slice.apply(a))}}}}}};window.cmp_msghandler=function(d){var a=typeof d.data==="string";try{var c=a?JSON.parse(d.data):d.data}catch(f){var c=n
Jul 8, 2024 17:53:54.343725920 CEST	1236	IN	Data Raw: 22 20 69 6e 20 62 3f 62 2e 76 65 72 73 69 6f 6e 3a 31 29 7d 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 65 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 28 61 20 69 6e 20 77 69 6e 64 6f 77 29 7c 7c 28 74 79 70 65 6f 66 28 77 69 Data Ascii: " in b?b.version:1)}};window.cmp_setStub=function(a){if(!(a in window)\|\|(typeof(window[a])!=="function"&&typeof(window[a])!=="object"&&(typeof(window[a])==="undefined"\|\|window[a]!==null))){window[a]=window.cmp_stub;window[a].msgHandler=window.
Jul 8, 2024 17:53:54.343736887 CEST	1236	IN	Data Raw: 74 75 62 28 22 5f 5f 67 70 70 22 29 7d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 61 62 70 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 Data Ascii: tub("__gpp")};</script><script type="text/javascript">var abp;</script><script type="text/javascript" src="http://ifdnzact.com/px.js?ch=1"></script><script type="text/javascript" src="http://ifdnzact.com/px.js?ch=2"></script><script type="text
Jul 8, 2024 17:53:54.343748093 CEST	1236	IN	Data Raw: 64 69 61 5f 5f 2f 66 6f 6e 74 73 2f 6d 6f 6e 74 73 65 72 72 61 74 2d 72 65 67 75 6c 61 72 2f 6d 6f 6e 74 73 65 72 72 61 74 2d 72 65 67 75 6c 61 72 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 Data Ascii: dia__/fonts/montserrat-regular/montserrat-regular.eot?#iefix") format("embedded-opentype"),url("http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff") format("woff"),url("http://i1.cdn-image.com/__media__/fonts/mo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49720	208.91.196.253	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:53:20.790116072 CEST	324	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:53:21.299897909 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:53:10 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Thu, 16 Feb 2023 16:29:54 GMT Connection: keep-alive ETag: "63ee5a02-20f3" Expires: Mon, 22 Jul 2024 15:53:10 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 2a 2f 0d 0a 76 61 72 20 73 68 6f 77 50 6f 70 3d 31 3b 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 53 65 61 72 63 68 54 65 78 74 28 74 29 7b 74 2e 76 61 6c 75 65 3d 22 22 2c 74 2e 73 65 6c 65 63 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 72 65 70 6c 61 63 65 53 74 72 69 6e 67 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 65 2c 6e 2c 22 67 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 75 62 6d 69 74 53 65 61 72 63 68 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2b 3d 67 65 6e 65 72 61 74 65 42 72 6f 77 4c 6f 67 55 52 4c 28 22 73 72 63 71 72 79 22 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 74 5d 2c 30 3d 3d 64 2e 65 6c 65 6d 65 6e 74 73 2e 71 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 7c 7c 22 45 6e 74 65 72 20 4b 65 79 77 6f 72 64 [TRUNCATED] Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function change
Jul 8, 2024 17:53:21.299968004 CEST	1236	IN	Data Raw: 53 74 61 74 75 73 28 74 29 7b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 61 64 64 62 6f 6f 6b 6d 61 72 6b 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 41 73 48 6f 6d 65 50 61 67 65 28 74 2c 65 29 7b 72 65 Data Ascii: Status(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate(){var t=new Array("Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"),e=new Array("January","February","March","April
Jul 8, 2024 17:53:21.300002098 CEST	1236	IN	Data Raw: 43 6c 69 63 6b 55 52 4c 28 6c 69 6e 6b 73 5b 69 5d 2c 22 6f 6c 6f 64 22 29 2c 6c 69 6e 6b 73 5b 69 5d 2e 69 6e 6e 65 72 48 54 4d 4c 3d 74 65 6d 70 44 61 74 61 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 6f 64 69 66 79 4b Data Ascii: ClickURL(links[i],"olod"),links[i].innerHTML=tempData)}catch(t){}}function modifyKeywordClickURL(t,e){return t.href=t.href+generateBrowLogURL(e),"undefined"!=typeof prctu&&0<prctu.length&&(t.href=prctu+getEscapedString(t.href)),!0}function gen
Jul 8, 2024 17:53:21.300034046 CEST	1236	IN	Data Raw: 73 2e 67 65 74 4c 6f 63 61 6c 54 69 6d 65 5a 6f 6e 65 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2b 74 68 69 73 2e 66 64 2b 74 68 69 73 2e 67 65 74 53 63 72 65 65 6e 48 65 69 67 68 74 28 29 2b 74 68 69 73 2e 66 64 2b 74 68 69 73 2e 67 65 74 53 63 72 Data Ascii: s.getLocalTimeZone().toString()+this.fd+this.getScreenHeight()+this.fd+this.getScreenWidth()+this.fd+(this.isCookieSupported()?1:0).toString()+this.fd+this.getABPStatus()),this.browserdata},this.getMousePositionData=function(){return this.fd+m
Jul 8, 2024 17:53:21.300067902 CEST	1236	IN	Data Raw: 5f 54 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 7d 63 61 74 63 68 28 74 29 7b 65 3d 30 7d 72 65 74 75 72 6e 20 65 7d 2c 5f 77 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 30 3b 74 72 79 Data Ascii: _Top.document.body.clientHeight)}catch(t){e=0}return e},_ww:function(){var e=0;try{"number"==typeof this._Top.window.innerWidth?e=this._Top.window.innerWidth:this._Top.document.documentElement&&this._Top.document.documentElement.clientWidth?e=
Jul 8, 2024 17:53:21.300101042 CEST	1236	IN	Data Raw: 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 65 77 65 62 6b 69 74 22 29 26 26 28 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 62 6c 75 72 28 29 2c 74 68 69 73 2e 5f 54 6f 70 Data Ascii: userAgent.toLowerCase().indexOf("applewebkit")&&(this._Top.window.blur(),this._Top.window.focus()),_npW.Init=function(e){with(e)Params=e.Params,Main=function(){void 0===window.mozPaintCount\|\|(t=window.open("about:blank"))&&t.close();var t=Para
Jul 8, 2024 17:53:21.300137043 CEST	1236	IN	Data Raw: 68 6f 77 50 6f 70 26 26 28 73 68 6f 77 50 6f 70 3d 30 29 2c 21 31 3b 31 21 3d 73 68 6f 77 50 6f 70 7c 7c 72 65 6e 64 65 72 46 41 43 50 28 74 29 7c 7c 73 68 70 70 28 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 68 70 70 Data Ascii: howPop&&(showPop=0),!1;1!=showPop\|\|renderFACP(t)\|\|shpp(t)}catch(t){}}function shpp(t){if("undefined"!=typeof __pp&&1==showPop&&!renderFACP(t))try{if(t\|\|((t=window.event\|\|window.Event).cancelBubble=!0),t.button&&2==t.button)return;try{var e=!1;
Jul 8, 2024 17:53:21.300168991 CEST	124	IN	Data Raw: 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 42 72 6f 77 73 65 72 44 65 74 61 69 6c 73 28 29 7b 72 65 6c 70 6c 61 63 65 41 6c 6c 41 4c 69 Data Ascii: avigator.userAgent)}catch(t){}return t}function setBrowserDetails(){relplaceAllALinks&&relplaceAllALinks(/(\/trf\|\.cfm)\?/)}
Jul 8, 2024 17:53:21.503103971 CEST	389	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:53:21.608457088 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:53:10 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Mon, 22 Jul 2024 15:53:10 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 30 f2 00 2c c1 00 2c 37 03 90 81 f9 8f 29 b2 13 3b 91 25 a0 9b ae dd a1 ab d6 7a bc 0f e7 7c b7 4e fd b0 ab 8a 28 f1 09 c8 13 96 00 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c [TRUNCATED] Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0P%@a@a0@a0P0P(P(P((@a@a0@a0P0P(P(P((@a@a0@aPeaLt[=ul=HhOnNc=e{l[,lu_cnk,n;~'^a$sbV&aqcm3Ts*l#zXtH+8c/BH1>CXHay/AIl2g}s/Q8{.;R91oeGo-V:;u$5'.lW:Q\v_:z4',l]2z4'e,~O]%>\|v_2U}8u=hL4$7aj;eMhL\>',/]I,{}a91\|Jz
Jul 8, 2024 17:53:21.608530045 CEST	1236	IN	Data Raw: b1 73 e2 d5 85 ed aa 5b 43 07 31 c7 b0 d3 f6 53 17 56 dd 8c e8 20 e6 18 96 72 88 08 4b e8 20 e6 18 96 f8 01 7c 65 61 db 1a 97 d0 8b 98 d7 b0 f2 73 62 f8 8c 1a 3f 6a d3 c2 07 f0 95 33 ce 55 85 55 39 23 1e fd 63 98 c5 54 ba 3f 16 93 15 b6 b5 82 34 Data Ascii: s[C1SV rK \|easb?j3UU9#cT?4JYA)O(W.:+FOQX3DWsn]{d^Va4\>gDbvU1aEjass+e9<lNTX3KVaV\|
Jul 8, 2024 17:53:21.608563900 CEST	777	IN	Data Raw: 25 2e ef 57 dd a0 c2 fa 1c c0 aa e8 eb 95 1b c5 d4 5b fa 3a 36 49 9f c6 4e 1c c7 e2 da be 36 5d 2d 64 90 a8 9a 5d f2 ed da c6 e2 aa 17 e6 75 3d 7d 75 9d 7f 66 3b cf b2 a2 7d d2 e7 62 71 d3 a3 b0 1e ad de d5 d4 97 a3 98 43 58 c1 c6 de 5f 79 c4 e0 Data Ascii: %.W[:6IN6]-d]u=}uf;}bqCX_y:RHn\nv[U+,UnCX9r}K5G.ek8}`]~y/GXTW=)l`c~yq,%+,~Oaxpz[5$%4
Jul 8, 2024 17:53:21.608876944 CEST	1236	IN	Data Raw: 21 b1 2c 7d f5 28 ac a9 c6 0c 89 c6 c4 84 be 2e 15 f6 da d8 93 21 11 63 e2 49 4f 97 36 4e 5c 5e aa 26 1a 33 24 ba 4d cc e8 ab 4f 61 6d 34 e6 b9 d9 a3 73 46 5f fd 0a 7b 55 7d 63 8a 70 d7 91 d1 57 ef c2 3e 55 fe c7 06 dc 73 b8 eb 18 e6 4b df 83 7b Data Ascii: !,}(.!cIO6N\^&3$MOam4sF_{U}cpW>UsK{^/A}_dwo{gCQ'rX$#R;&?zv'\|\| !Wh@i]izP^:=c'v_1C/=COs\|E^0x9_j]_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49721	208.91.196.253	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:53:21.521084070 CEST	392	OUT	GET /__media__/pics/28905/arrrow.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:53:22.701430082 CEST	326	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:53:10 GMT Content-Type: image/png Content-Length: 283 Last-Modified: Tue, 04 Jan 2022 14:44:27 GMT Connection: keep-alive ETag: "61d45d4b-11b" Expires: Mon, 22 Jul 2024 15:53:10 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Jul 8, 2024 17:53:22.816638947 CEST	283	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 1b 08 03 00 00 00 ad 28 94 ae 00 00 00 48 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR(HPLTEGpLztRNSt@fU2'dgkIDAT} P{O5$vaWJIih^JF5PzHLzF/h:{t
Jul 8, 2024 17:54:07.817311049 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49722	208.91.196.253	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:53:22.711802006 CEST	381	OUT	GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive Origin: http://ifdnzact.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:53:23.195642948 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:53:12 GMT Content-Type: application/font-woff Content-Length: 17312 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-43a0" Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 a0 00 10 00 00 00 00 73 60 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 6c 00 00 00 1c 00 00 00 1c 69 99 f4 2b 47 44 45 46 00 00 01 88 00 00 00 1e 00 00 00 1e 00 27 01 0d 47 50 4f 53 00 00 01 a8 00 00 0c c5 00 00 16 c0 c0 0d d5 ee 47 53 55 42 00 00 0e 70 00 00 00 20 00 00 00 20 6c 91 74 8f 4f 53 2f 32 00 00 0e 90 00 00 00 54 00 00 00 60 a6 e9 3d 09 63 6d 61 70 00 00 0e e4 00 00 02 75 00 00 03 86 c7 ce be ea 67 61 73 70 00 00 11 5c 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 11 64 00 00 28 0b 00 00 47 38 61 9a 3f 94 68 65 61 64 00 00 39 70 00 00 00 34 00 00 00 36 09 88 d5 e9 68 68 65 61 00 00 39 a4 00 00 00 21 00 00 00 24 07 97 04 27 68 6d 74 78 00 00 39 c8 00 00 02 ad 00 00 04 1a 59 f7 2d 9c 6c 6f 63 61 00 00 3c 78 00 00 02 09 00 00 02 10 b1 e6 c4 00 6d 61 78 70 00 00 3e 84 00 00 00 1f 00 00 00 20 01 50 00 37 6e 61 6d 65 00 00 3e a4 00 00 02 df 00 00 06 99 17 bc cd 9c 70 6f 73 74 00 00 41 84 00 00 02 11 00 00 [TRUNCATED] Data Ascii: wOFFCs`FFTMli+GDEF'GPOSGSUBp ltOS/2T`=cmapugasp\glyfd(G8a?head9p46hhea9!$'hmtx9Y-loca<xmaxp> P7name>postA8Y,prepChh<'d:x[l\vb{l7ho+.!Qp1OPP%hUUUEMpQZA1I !C@==:cBP5:>9{^k)wJx)R~gO>m~6BJ:tIY_dq/mxel\|icKclzjo%;^x}olegOVV=\5]z_ono;555nO/ctR4tKTCmH]nT::tjAJwU$![yJ+u)IH7IH%}nZef/ ?(OA7)qpf#xxMO;jq77DsO@tD1Et0F`fd9wIXFafxlC[0F0
Jul 8, 2024 17:53:23.195708990 CEST	1236	IN	Data Raw: 44 dd ee 45 e9 61 dc 63 28 f3 38 3c 47 b9 6a d1 ec 05 2c 04 99 99 84 53 82 59 a7 e4 3e ac 74 b8 ef 32 73 9a 59 a7 e0 96 83 47 12 0e f3 70 58 94 61 f7 8a 84 dc e7 d0 f4 39 14 0a fc 77 01 85 96 51 e8 02 0a 45 51 28 86 42 19 70 bc 03 8e 14 56 c3 28 Data Ascii: DEac(8<Gj,SY>t2sYGpXa9wQEQ(BpV(G9X`-J!G4Bap["8&`KfY3k00d'8<YQuk{"333J/<y6A>4sDCs9jfV4s%>
Jul 8, 2024 17:53:23.195801020 CEST	1236	IN	Data Raw: c1 69 10 bc 67 55 37 6b 7c c1 66 8e 63 f7 57 c3 fb 12 68 cc 1e 71 1a ee 09 50 ed 83 7b 1a ee df 06 5d 0f e8 e6 ed 2a dc 0f c2 59 e5 3f c3 ca 27 d1 3c 85 6f fa 43 a9 d3 3e a3 8d 48 f2 f6 e4 84 ad b4 46 83 04 08 92 76 77 37 79 9b d7 fd 63 58 f7 66 Data Ascii: igU7k\|fcWhqP{]*Y?'<oC>HFvw7ycXfF~]mw(7(8CaW`kub-X&r6ZEkI/c#+p~oxjyu,.yB2KPa~M#cN-GE_T1Gha^l6
Jul 8, 2024 17:53:23.195842981 CEST	1236	IN	Data Raw: e0 5c a7 bb ca 01 ee 4f f0 74 84 be 92 3c 22 82 7c 5c bd cc 9b 61 64 0d 6b fe 0c 4c 26 6d 67 9c b5 e7 ad 79 a2 f0 aa dd 63 a2 a0 3a 41 cc f9 ec fb 39 d3 9b 35 11 75 4d 5a 09 97 d5 42 c0 3d 46 0f 1a b1 3d e8 ff 67 2d 49 84 6e 44 c5 0f f4 0d 91 39 Data Ascii: \Ot<"\|\adkL&mgyc:A95uMZB=F=g-InD9N--SO7S"SDkQ{g:/^-k>{I.sfmg$BTiv\NuK//?[A-?-G\|\|zW\|\|_^qv>I!(&e^H
Jul 8, 2024 17:53:23.195897102 CEST	1174	IN	Data Raw: bb fc 6b fd bb fd eb 03 a6 c9 5b 02 66 05 74 07 4c 09 38 10 34 47 f8 77 ad a2 76 0c 1c 5d b5 f5 00 fe b7 75 d5 d6 13 f8 df d6 55 65 88 87 e7 c2 6c 97 49 11 f9 1e f1 a8 b8 70 8e 1b 6e d4 ea cc 0a a5 51 0f 89 26 b3 d1 20 57 28 65 5a 9d 3c 18 7c 5c Data Ascii: k[ftL84Gwv]uUelIpnQ& W(eZ<\|\drDwQi%smna72-k@@o7.;pF<p8^&GT\bh84`J]\|.j-e)\|&z}ek.>O4:\|@
Jul 8, 2024 17:53:23.195962906 CEST	1236	IN	Data Raw: 99 85 22 1f 42 52 62 23 26 75 c4 4f d1 07 97 c8 94 d9 0d e9 a9 53 92 13 57 57 15 45 af bb be ae 8f 0d 41 c8 06 ef d0 bb a6 ea cc e4 ea 34 86 33 07 f5 e6 07 b4 31 4c ee ed 9a 43 a4 f7 1c a6 41 06 07 3d 82 71 76 75 c2 b9 99 b6 1e ce 8a 73 5d a9 85 Data Ascii: "BRb#&uOSWWEA431LCA=qvus]Z/i0S9(gGg%n]m "B \>pSY}GK5%g}W0(DXq",7#!])'DoAm2nDF.\==4Q3;\|Fv
Jul 8, 2024 17:53:23.196007013 CEST	1236	IN	Data Raw: a7 85 c5 37 3e d3 b1 e2 be a6 f0 8c 70 ef a0 69 2f cf 8b 8b b9 4f dc bf 40 a4 73 3c d3 5b 8e ee 9d 86 fa e9 d5 bd 7f 44 bf 9d 68 bd 4a 12 37 6f c6 31 13 6d 3f 91 93 a2 bc 86 51 21 45 cb 89 36 82 bd 83 69 63 71 ef 69 e1 e7 33 bd 1b 1b 2c b0 5e 58 Data Ascii: 7>pi/O@s<[DhJ7o1m?Q!E6icqi3,^XvYXmfEppoggx(t/HMo'Wl;c?H+,(P76iCJ%4A==p#Du&-!%*'0tw\|p5=
Jul 8, 2024 17:53:23.196049929 CEST	1236	IN	Data Raw: 70 07 e3 29 0d 95 fc 30 49 c8 a9 7f d4 13 9d 56 d4 21 34 5b c1 44 a9 80 0f 3b a6 a4 ae 4f cc b6 d4 05 a9 63 6b 62 83 d3 96 3e 57 97 94 b7 2d 66 66 74 70 52 75 7d 74 d4 f4 2c a5 36 34 d0 c7 5b fb c0 f4 cc e6 38 ad dc 37 d4 d3 4b 2d fa 60 38 8b 3e Data Ascii: p)0IV!4[D;Ockb>W-fftpRu}t,64[87K-`8>;W sj9T.D9Qp\|{.=J8tn);/]8*$P{o=on{AS b>'{3gNM_i8<o
Jul 8, 2024 17:53:23.196094036 CEST	672	IN	Data Raw: 3d df 0c e4 51 10 ad e7 d8 79 e4 2d 95 50 12 cc e2 59 d0 c0 8a 1c 5a e9 38 d8 c7 a6 e4 32 ca a7 ef 2d ed 55 31 0b 8e d7 4f 2a 4f 0a 0c 0a 33 1b fb b8 64 7d b3 e2 0b ca a6 aa 55 ab a0 2b bb a0 46 33 c1 cf 2c 9f 21 d6 12 48 0a 6c 24 67 59 7c 8f 1a Data Ascii: =Qy-PYZ82-U1OO3d}U+F3,!Hl$gY\|l{;[g,lUUiNkgkc(j3bzG5DN#YMRTn}=\|;mhe@,^xTWV^_NFF$'fF8*T
Jul 8, 2024 17:53:23.201065063 CEST	1236	IN	Data Raw: 3d b3 c1 0d 68 b1 24 9d 98 d3 89 d1 e4 23 6e e1 8b bf 92 5a 87 1f 06 e7 d6 87 f9 0d c8 ad f3 62 0e 9b bf c0 72 d8 6e 03 b2 d8 3c 1a 49 e7 4c f6 e8 5d db 0e f5 65 b3 e1 13 9a 5a e8 83 71 71 48 18 66 a5 33 0c 39 aa 64 3f 8c 7f 30 dd b4 c3 38 ca 60 Data Ascii: =h$#nZbrn<IL]eZqqHf39d?08`x:ig0V^n]aqr5`R+5tV1Y=dz\|"O,4'&8px;\g6K8atI<R@P!Xry\HwwS@5
Jul 8, 2024 17:53:23.201085091 CEST	1236	IN	Data Raw: 0b 6b 87 a2 e3 1b fa 73 c6 32 29 c0 e5 69 cd 84 a7 75 06 15 17 45 f7 25 5c 25 67 95 3b da 06 a0 a3 7c 37 26 8a 04 21 3d 09 4a 5a 8b 19 6e 14 3b 46 4c 61 b4 91 c9 c0 af 11 76 8d 18 1f 93 9f 56 5d bf b1 ad b0 78 69 f5 ca 8f 17 55 a5 57 e7 cc fb 3c Data Ascii: ks2)iuE%\%g;\|7&!=JZn;FLavV]xiUW<%^1zfJ\`XcQKO,UIIk<Co"YQHqYXZS*v}ZesW:ByM~dPL_i&2}7C:<._.0P:;:aR]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49725	208.91.196.253	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:53:22.712044954 CEST	387	OUT	GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive Origin: http://ifdnzact.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:53:23.176877975 CEST	278	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:53:11 GMT Content-Type: application/font-woff Content-Length: 17264 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-4370" Access-Control-Allow-Origin: * Accept-Ranges: bytes
Jul 8, 2024 17:53:23.176902056 CEST	1236	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 70 00 10 00 00 00 00 71 40 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 43 54 00 00 00 1c 00 00 00 1c 6a aa b6 37 47 44 45 46 00 00 37 84 00 00 00 1e 00 00 00 1e 00 27 Data Ascii: wOFFCpq@FFTMCTj7GDEF7'GPOS7)MsMGSUB7 ltOS/2V`]@cmapugasp7\|glyfx)Gheadl66hhea!$
Jul 8, 2024 17:53:23.176922083 CEST	1236	IN	Data Raw: 27 75 10 61 ed e5 79 7b d1 aa 23 ec b5 07 f0 c1 f7 17 31 5c be e6 00 00 78 9c ad 92 57 4c 55 41 10 86 bf bd 5c ae 8a 05 41 44 44 c5 c3 51 40 ac 28 22 82 0d 15 0b 76 11 b1 a1 82 2d c6 5e 12 51 23 24 f6 82 15 b0 c4 96 60 2f 88 1a 1b d8 22 1a 35 21 Data Ascii: 'uay{#1\xWLUA\ADDQ@("v-^Q#$`/"5!`x0A("Lfu#HTV(pMy5I$)E[$:p%F8(--47StWBp-[-Mw]uOKoc>9)ST42`&"EzPQhZCMEu
Jul 8, 2024 17:53:23.176956892 CEST	1236	IN	Data Raw: 5d 62 59 70 6d 60 5b 50 14 2b bb ea a2 a8 20 c5 dd 5f 5d 5d b1 e0 ae 7c bb a8 e8 92 97 ef dc fb de 4c 26 13 58 bf 3f 65 26 33 b9 f7 dc 73 ce 3d ed 9e 73 ee 70 84 2b 19 be c9 7d 4a ce 72 ae dc 44 8e f3 d6 2b 79 2d ef a5 33 98 12 7d 14 b2 69 db 83 Data Ascii: ]bYpm`[P+ _]]\|L&X?e&3s=sp+}JrD+y-3}i*>zHWg xNzeM3?(\|xasS9r\+Y~r>gA={sGHcw$p.\01Qua
Jul 8, 2024 17:53:23.176975965 CEST	1236	IN	Data Raw: 5f 6f 77 0f 3d 45 2a 5a 38 66 0b 93 11 a7 5c f2 36 4a 04 c3 ca 0b f1 91 d3 1d 63 36 41 67 f0 62 84 ca 14 b6 e7 2b ef 6c 2c 9d b3 f3 db 9d 73 4a 4f 74 35 d5 59 ea 9a 3b 4b 4b 3b 4b c9 db 3d 0f 66 64 2d 69 58 b1 a2 61 49 56 c6 83 43 c3 a9 7d 69 69 Data Ascii: _ow=E*Z8f\6Jc6Agb+l,sJOt5Y;KK;K=fd-iXaIVC}ii}@9fNDyhe'rA%.D1%S:`(6-!s(Mupn18w<5JK=1@lJ.%a-%.BAhi?^tEl4Gb /Di
Jul 8, 2024 17:53:23.176995993 CEST	896	IN	Data Raw: 2e 83 5b 5f 2b 2a 69 dd bb 07 2e 3f 19 23 5c bb 46 4e f5 fe 9c b1 45 ff 0b db 8f 70 94 d9 7c c4 35 08 5f c9 14 41 64 44 40 0c b1 24 4c b2 69 28 c2 00 39 39 97 e6 6f b5 3c b2 a6 a4 67 51 72 6e e6 c1 8a a9 19 f7 75 e5 6e 88 cf 9c da 43 5a 23 67 c6 Data Ascii: .[_+*i.?#\FNEp\|5_AdD@$Li(99o<gQrnunCZ#gZN,ZXP:uJ!"Lg9wZH>4cf2;B(YX,m^Xf62O^y2SCyW.]@1(k.pB7C=t7?'
Jul 8, 2024 17:53:23.177016020 CEST	1236	IN	Data Raw: 14 42 fc 7d f7 95 ce 4c ad 6a c8 8b 4b 1a f8 eb 40 ed 74 e1 ed d6 a6 2d ad 1d a2 bd c0 93 2a 49 25 5f d2 88 d4 9b da 7a 4f 76 66 50 e2 9f 28 1c b2 d7 2c 16 df f6 a4 86 05 96 15 29 35 34 98 21 5f 0a ef 25 24 f5 75 09 2f 42 c8 9e 72 8a 63 2e 42 f9 Data Ascii: B}LjK@t-*I%_zOvfP(,)54!_%$u/Brc.Br.z)))D>E2y=L^TTbJr`sju49o#iar\wlm%XW^8}qqD29@Nu6^nHI,%"SI]]W
Jul 8, 2024 17:53:23.177035093 CEST	1236	IN	Data Raw: 18 86 b8 f2 7a e4 27 3e 2a b5 72 29 5d a7 ed 3c ed f2 e2 c6 b7 d7 be 2c 7f 73 cd fb eb 5f e0 5f 7a f9 ee d3 17 4c b2 3a 98 21 bc 02 d9 c2 93 75 32 53 dd aa 55 a2 5d 6d 1c fe 9a 7b 81 c5 79 34 9a 43 a9 e2 f1 b7 b1 a5 a5 05 9e 82 42 e1 05 21 85 3e Data Ascii: z'>*r)]<,s__zL:!u2SU]m{y4CB!>u(S0$F!viw-m4-3/e^sR+6fwKfBz\Ftv2#s'VzxwUG&WNp04!1 j%JCB7cG>T\|d9=
Jul 8, 2024 17:53:23.177054882 CEST	1236	IN	Data Raw: 98 5f c9 60 78 8e c6 45 af a2 71 ad 13 3a 39 5d 2b da cb cb db 47 63 44 16 6c 4c 4a e2 1c e0 2d 63 f0 fc 47 c3 d3 50 c9 d1 32 6f 8c de 59 2f 73 82 fc 86 5f f3 44 35 94 c4 45 fa b7 4d 0e 2a e5 9d 68 be 1a 17 9d 52 14 17 bd 8e 43 9f 20 ae d1 cb d6 Data Ascii: _`xEq:9]+GcDlLJ-cGP2oY/s_D5EMhRC FzZCHFCVr_3-/;8]Vq1J:lEdu^IgpY{TFxjy=[fH%^{!-f[b2(GX[Q0b
Jul 8, 2024 17:53:23.177076101 CEST	1236	IN	Data Raw: 26 c3 a6 92 85 b8 8e 68 c0 ba ea 8c 8c ea cc a1 a7 44 74 be 94 02 5d db be f0 3b 48 00 da 8c 48 b4 eb 23 d5 c0 e0 30 27 8c 12 55 b4 38 e8 8a b8 c8 65 0c 9b 10 da 14 e5 ca ef 10 16 43 63 66 83 21 ab 46 18 2a ae b8 b7 da ba 78 b6 88 d6 8f a6 a2 bf Data Ascii: &hDt];HH#0'U8eCcf!Fxdu8,uY2ZRJJ/nDKZ9qB.b,9[99U]{S&!b,WC'$JCEm:+fw;U\WxG
Jul 8, 2024 17:53:23.181972980 CEST	1236	IN	Data Raw: 74 fa 74 72 4a 38 96 d7 9d b7 cb f2 57 df 6e 5f d6 93 49 ad aa bd 37 1b e7 a0 54 e3 8c 2e 4b 69 a9 a5 aa 0a 87 bf e4 d3 ed 23 fc eb 7b 55 b7 8a 1b c9 17 3e c2 8d 63 9d 4e 23 f9 42 1a cc da 53 84 7b a5 44 a9 3d 2f d8 c1 ec 25 8b 51 d0 de 30 db 7b Data Ascii: ttrJ8Wn_I7T.Ki#{U>cN#BS{D=/%Q0{ZNpE`<eDcyUrAZ/-Z=_}foA[?"."F*[3A7f/oU3"Z(M]azxlrGcSN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49726	208.91.196.253	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:53:22.740418911 CEST	297	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:53:23.204204082 CEST	329	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:53:12 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Mon, 22 Jul 2024 15:53:12 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Jul 8, 2024 17:53:23.204225063 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((
Jul 8, 2024 17:53:23.204246998 CEST	224	IN	Data Raw: a2 c2 14 56 7e 4e ec 57 58 1b 33 a2 c2 14 56 7e 4e ec 57 d8 4e 61 28 ec aa 39 b1 57 61 8d cc 88 7e 5b 5f 46 2b 13 4f bf 39 31 ac 98 c2 14 96 b8 5f fa 14 b6 6b 66 c5 16 f2 28 60 d5 cc 7e 39 94 29 6c d9 cc 82 f9 3b 1d 65 b4 b3 61 be 96 28 ac 9d ef Data Ascii: V~NWX3V~NWNa(9Wa~[_F+O91_kf(`~9)l;ea(\|kvsbX.),q\,+ZwqM8]K`q4#z 0'smsmS+*eb91'jj=\|Jt8'O"W.L.:\u$~8Ur
Jul 8, 2024 17:53:23.204263926 CEST	1236	IN	Data Raw: aa 23 f1 d3 39 cc 88 bf f8 cd 54 39 f7 ad 6d 9e fd f0 c2 9a 9b 11 1d c3 1c c4 32 76 4f 98 11 1d c3 1c c4 12 b7 4f 98 11 1d c3 bc 88 25 ce 89 e1 5b de 6b 98 17 b1 c4 39 31 7c c9 1b 12 13 ac ed a0 b3 85 b5 f7 1d 6f 48 74 5f 9f 33 27 86 19 d1 90 68 Data Ascii: #9T9m2vOO%[k91\|oHt_3'hLL?*l!m9hgDwx"#Q8pvg{-nr34/=0isbz9_X?vq:1qN:\|%n0#Si^NfA(G\|cN,S
Jul 8, 2024 17:53:23.204356909 CEST	1236	IN	Data Raw: 76 8a 3a 8a b0 91 14 a6 30 85 29 4c 61 0a 53 58 5d fc bd c4 32 36 b6 92 c2 3e e4 6f fe 96 b1 b4 95 14 f6 21 3f 9a f2 b3 29 85 29 4c 61 0a 9b 2b 0f ce 9e 9c cb 17 b6 f2 af 71 76 95 e8 32 31 cb 97 45 7c f2 af 4a 57 98 c2 92 fa 7a 5d 8b f8 b9 22 1a Data Ascii: v:0)LaSX]26>o!?))La+qv21E\|JWz]"s21_iE-Lc.:\uil!BV6/LT}RKpc.:\u}a7 Vk10}}\m-ony(N7!Xs5!,}(.
Jul 8, 2024 17:53:23.204375982 CEST	448	IN	Data Raw: 93 3c 64 22 44 e2 75 9f 9f d4 09 cb 7e fd d6 19 0b 93 eb 44 60 01 27 f1 aa 8f 4f 4c 80 e5 91 0e d9 52 d9 e4 3a 11 32 11 22 f1 32 8d 28 39 7f f1 66 75 a4 8a 6c ee 3c 0f c2 40 d8 65 1a 31 37 9b d9 38 1d d3 eb 44 14 62 28 c3 ae d2 88 0f b4 0a 5e db Data Ascii: <d"Du~D`'OLR:2"2(9ful<@e178Db(^knX]B{ST1Sb<NDG+OKbyJ(P]%4wzl7dhawh@#^D }c3Ny=u"fPLmyG
Jul 8, 2024 17:53:23.204396963 CEST	1236	IN	Data Raw: 22 53 36 ef 5e 2f 8b 98 b2 4b 8f a1 0e 8c 74 bc ae 11 d5 e3 e0 32 c7 b1 fc 10 16 75 2b 8e 19 a5 0a 33 ea 44 10 06 c2 5e d4 88 51 fd 78 d1 4d 6e e1 41 98 56 62 3a 0c 2c 3c a5 4e 04 61 20 ec 55 8d 28 c6 90 4f 29 4c 78 49 84 f1 36 e7 61 d8 6b cd 8e Data Ascii: "S6^/Kt2u+3D^QxMnAVb:,<Na U(O)LxI6ak/a4$#Wy0DWw)t"a/jD7uB"l\|uUcvDa}Yn,h`Jap$@+)950v(-E<h>3:/\|NlN{Q'"!s7
Jul 8, 2024 17:53:23.204413891 CEST	224	IN	Data Raw: 75 25 73 6b ed a7 2c 0b a3 3d ab c0 02 92 d8 09 8d 48 cd 6d 46 79 8d db 8e cf 11 9a 1b 20 f2 22 37 3d 7d 69 57 11 b4 66 47 1c 4c 0a 20 30 d8 d1 d7 88 25 77 b1 2e 15 35 bb 48 1b 14 83 87 ac 4a 71 42 66 21 37 db b4 36 96 d9 81 71 0e 0c 76 1c 4d 61 Data Ascii: u%sk,=HmFy "7=}iWfGL 0%w.5HJqBf!76qvMaUsr\^s>l9}0][NG#(Z]LnhD-hvu?@:6(4k%5$FDwR<`{qh
Jul 8, 2024 17:53:23.205380917 CEST	1236	IN	Data Raw: 3e 65 e5 c9 bd c9 8e cf 7c 56 11 08 00 62 c7 b4 4d d4 95 01 7a 6d b3 98 cb f9 bc 48 8c fe ec 4a 4b 21 17 9e c8 9e 79 e6 f2 df 10 3a 11 12 11 8d e7 c3 1a 51 ec 3d 7c ac fb 6f d2 26 ed 6e 0a 0b df ff 2c 5d c2 16 37 40 ec 16 0b 64 07 64 00 9d 08 c0 Data Ascii: >e\|VbMzmHJK!y:Q=\|o&n,]7@ddPZv~T",P=zwk/vF#+pv,3aq%laub6TKq5a)1{Nuck6qDLQ98V;DT"fnn
Jul 8, 2024 17:53:23.205436945 CEST	224	IN	Data Raw: 24 89 8a 30 b3 4d 4c 2d b1 2a d5 67 75 c0 d1 3d 4a d1 32 fb 8c 5f 2b a7 bd a8 b0 29 f8 88 5f 25 64 15 61 c4 9b e3 59 97 e7 d8 b2 25 62 46 d8 76 10 c4 94 3e 49 2d 02 42 e4 91 9f 03 b2 65 58 fc 5e 6a 2e c6 83 3f e1 17 13 c8 4a ca 0e bf 6e e9 e3 10 Data Ascii: $0ML-*gu=J2_+)_%daY%bFv>I-BeX^j.?JnuvvOJ_`1DT].])Ya-@?#Ov'Q>$1vCR5I%SaIK,\|hDw(&yL'u~Qd,K;Y%(LI
Jul 8, 2024 17:53:23.209184885 CEST	1236	IN	Data Raw: b3 63 14 7c 21 e0 4d 1c 87 30 d1 1f 90 e4 c4 e2 07 ea 14 26 15 70 87 ad e4 43 84 dd ca 71 4b 2c f8 93 0e df 41 1f 78 9e 9e 28 92 9f 62 6d a3 7e 39 c0 50 13 c4 3b 33 f6 29 6c b3 f7 7b 65 5b d8 9f 9f e9 a0 0a db 13 4d ed ff b3 1d b1 fa 7b f4 b5 59 Data Ascii: c\|!M0&pCqK,Ax(bm~9P;3)l{e[M{Y40H1PRB9$pHl!S>\[_0lSRC.a!NM>#,%ko'0BY@x}&i:Uz/bD83lA RE'Tb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49727	208.91.196.253	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:53:23.118375063 CEST	300	OUT	GET /__media__/pics/28905/arrrow.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:53:23.564832926 CEST	326	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:53:12 GMT Content-Type: image/png Content-Length: 283 Last-Modified: Tue, 04 Jan 2022 14:44:27 GMT Connection: keep-alive ETag: "61d45d4b-11b" Expires: Mon, 22 Jul 2024 15:53:12 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Jul 8, 2024 17:53:23.701214075 CEST	283	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 1b 08 03 00 00 00 ad 28 94 ae 00 00 00 48 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR(HPLTEGpLztRNSt@fU2'dgkIDAT} P{O5$vaWJIih^JF5PzHLzF/h:{t
Jul 8, 2024 17:54:08.708306074 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49731	185.53.179.170	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:53:26.852468014 CEST	273	OUT	GET /favicon.ico HTTP/1.1 Host: le100.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:53:27.502660990 CEST	230	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:53:27 GMT Content-Type: image/x-icon Content-Length: 0 Connection: keep-alive Last-Modified: Tue, 02 Jul 2024 08:23:45 GMT ETag: "6683b911-0" Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	61331	185.53.179.170	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:53:52.246614933 CEST	424	OUT	GET / HTTP/1.1 Host: le100.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:53:53.023437023 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:53:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Redirect: skenzo X-Buckets: bucket011 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_qXAn18myIwc4gmCI8Y1wfFsRzFFv2OP0CkoDeLqNp3lSPsqlsQLemQ8asVm8t8Og8es+r3f6PgqEvPcOEAoF6g== X-Template: tpl_CleanPeppermintBlack_twoclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Domain: le100.net X-Subdomain: Content-Encoding: gzip Data Raw: 32 31 36 0d 0a 1f 8b 08 00 00 00 00 00 04 03 b5 59 eb 73 db c6 11 ff 0c fe 15 17 68 5c 51 29 41 90 92 68 99 30 a9 74 2c bb 91 67 9c 46 93 a8 d3 f4 13 e7 08 1c c1 8b f0 ea e1 28 52 ea e8 7f ef ee 3d c0 a3 08 2a 6e 46 86 2d 89 bc c7 de ee de ee 6f 1f 98 7c f7 f1 e7 ab db 7f df 7c 22 4b 99 67 e4 e6 9f 1f be 7c be 22 7e 10 86 ff 3a bb 0a c3 8f b7 1f c9 6f d7 b7 3f 7d 21 c3 fe 80 dc 0a 5a d4 5c f2 b2 a0 59 18 7e fa 87 df 21 e6 f1 97 52 56 51 18 ae d7 eb fe fa ac 5f 8a 34 bc fd 25 dc 20 cd 21 12 31 1f 03 e9 50 e8 27 32 f1 2f 3b 13 75 f0 26 cf 8a 7a da 42 66 38 1e 8f f5 6e 9f c0 a2 28 a3 45 3a f5 59 e1 93 e6 13 d2 60 34 b9 54 dc 4c 72 26 29 08 23 ab 80 fd 67 c5 ef a7 fe 55 59 48 56 c8 e0 f6 a1 62 3e 89 f5 b7 a9 2f d9 46 86 78 f6 7b 12 2f a9 a8 99 9c ae e4 22 78 e7 87 2e a1 82 e6 6c ea df 73 b6 ae 4a 21 9d ed 6b 9e c8 e5 34 61 f7 3c 66 81 fa d2 23 bc 00 e5 d0 2c a8 63 9a b1 e9 b0 47 72 ba e1 f9 2a b7 03 20 2d ea 6b 22 b9 cc d8 65 c6 86 83 41 bf 60 72 12 ea 81 46 9b 6a 51 2d 1f 32 46 72 96 70 3a f5 eb 58 30 Data Ascii: 216Ysh\Q)Ah0t,gF(R=nF-o\|\|"Kg\|"~:o?}!Z\Y~!RVQ_4% !1P'2/;u&zBf8n(E:Y`4TLr&)#gUYHVb>/Fx{/"x.lsJ!k4a<f#,cGr -k"eA`rFjQ-2Frp:X0
Jul 8, 2024 17:53:53.023453951 CEST	1236	IN	Data Raw: 90 f9 b2 73 54 03 e9 59 c6 8b bb 9e f3 79 36 2f b3 64 77 80 65 e5 9a fc 57 91 8c cb ac 14 11 11 e9 bc 3b e8 c1 bf 93 f7 6a 18 15 10 d0 8c a7 05 cc f1 74 29 f5 f0 02 14 14 91 e1 79 b5 21 54 80 34 3d 52 c3 ad 07 35 13 7c a1 57 2c 19 ae 8e c8 e9 a0 Data Ascii: sTYy6/dweW;jt)y!T4=R5\|W,&/RCd@F[O)Dd<hT^"aHFhX$HX\F%j*U<SFX-N%4ZLGO5[/750g~::gs.\CP9-&f9
Jul 8, 2024 17:53:53.023463011 CEST	851	IN	Data Raw: 7f aa 31 45 06 8a 32 a4 d3 4f f9 02 2a b1 a2 0c 74 31 46 6c c0 b0 96 33 54 b6 6a ed 86 0c b5 29 58 03 87 8e 87 6b e1 a0 2d 87 c9 e1 2b 31 39 fc 96 4c 5e bf 12 93 d7 af cf 24 d4 31 0c b4 ab 00 c2 1a 96 76 4f 32 84 32 51 c1 58 bf 66 59 c6 c4 2f d0 Data Ascii: 1E2O*t1Fl3Tj)Xk-+19L^$1vO22QXfY/(HZD{37NcUqu um604Jl`,L)Gw\|nw4Fh)l>nb)"T-';Th\|V)ji\|r1k@_@kY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	61342	208.91.196.46	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:54:00.020750999 CEST	2805	OUT	GET /Spam_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%2FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%2BD6EslT4YXZEgi5MQZoS4%2BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%2FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%2BF%2FqfFDeim2hVuLdV2hx9V%2F15hYqnNxwr7w%2FxJkFs&yep=kYWX2UB9hpPluHNh59n0TG5bw0%2FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%2FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%2FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%2Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%2B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%2FqYu%2FBmO%2BefvXO46i%2BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%2BZbCkucnl%2BKaGVQ4CSuga7KRLSemy%2FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%2F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%2FCiWxSUGpEEgdBffigSWf9bQ%2BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%2BRbYTMJnnWjleatxujX%2BIiC4edOKDRJ%2FnR1G4wl1D1zw1q7mWlz%2F%2FnAQ9gKAY08BXIzyLlH48v [TRUNCATED] Host: ifdnzact.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:54:02.220814943 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 15:53:49 GMT Server: Apache Set-Cookie: vsid=919vr467999629561689733; expires=Sat, 07-Jul-2029 15:53:49 GMT; Max-Age=157680000; path=/; domain=ifdnzact.com; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_kZuN0zE/Eb2cMK+2ievMswCXfwQxvVlSX3eLjwsj7S1UiFOqlwi31giqeAYkI4YdcjA9/xRlmpcCGuq/3bpVVA== Keep-Alive: timeout=5, max=127 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 39 37 65 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 [TRUNCATED] Data Ascii: 97e6<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in
Jul 8, 2024 17:54:02.220876932 CEST	1236	IN	Data Raw: 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 6e 3d 22 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e Data Ascii: window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","E
Jul 8, 2024 17:54:02.220930099 CEST	448	IN	Data Raw: 66 28 22 63 6d 70 6c 61 6e 67 3d 22 29 2b 38 2c 32 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7d 65 6c 73 65 7b 69 66 28 22 63 6d 70 5f 73 65 74 6c 61 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 65 74 6c Data Ascii: f("cmplang=")+8,2).toUpperCase())}else{if("cmp_setlang" in window&&window.cmp_setlang!=""){c.push(window.cmp_setlang.toUpperCase())}else{if(a.length>0){for(var d=0;d<a.length;d++){c.push(a[d])}}}}}if("language" in navigator){c.push(navigator.l
Jul 8, 2024 17:54:02.220966101 CEST	1236	IN	Data Raw: 66 28 67 2e 69 6e 64 65 78 4f 66 28 62 29 21 3d 2d 31 29 7b 68 3d 62 3b 62 72 65 61 6b 7d 7d 69 66 28 68 3d 3d 22 22 26 26 74 79 70 65 6f 66 28 63 6d 70 5f 67 65 74 6c 61 6e 67 2e 64 65 66 61 75 6c 74 6c 61 6e 67 29 3d 3d 22 73 74 72 69 6e 67 22 Data Ascii: f(g.indexOf(b)!=-1){h=b;break}}if(h==""&&typeof(cmp_getlang.defaultlang)=="string"&&cmp_getlang.defaultlang!==""){return cmp_getlang.defaultlang}else{if(h==""){h="EN"}}h=h.toUpperCase();return h};(function(){var u=document;var v=u.getElementsB
Jul 8, 2024 17:54:02.221000910 CEST	1236	IN	Data Raw: 6d 70 5f 68 6f 73 74 2b 22 2f 64 65 6c 69 76 65 72 79 2f 63 6d 70 2e 70 68 70 3f 22 2b 28 22 63 6d 70 5f 69 64 22 20 69 6e 20 68 26 26 68 2e 63 6d 70 5f 69 64 3e 30 3f 22 69 64 3d 22 2b 68 2e 63 6d 70 5f 69 64 3a 22 22 29 2b 28 22 63 6d 70 5f 63 Data Ascii: mp_host+"/delivery/cmp.php?"+("cmp_id" in h&&h.cmp_id>0?"id="+h.cmp_id:"")+("cmp_cdid" in h?"&cdid="+h.cmp_cdid:"")+"&h="+encodeURIComponent(g)+(c!=""?"&cmpdesign="+encodeURIComponent(c):"")+(f!=""?"&cmpregulationkey="+encodeURIComponent(f):""
Jul 8, 2024 17:54:02.221033096 CEST	448	IN	Data Raw: 53 63 72 69 70 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 7b 75 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 7d 65 6c 73 65 7b 69 66 28 75 2e 62 6f 64 79 29 Data Ascii: Script.parentElement){u.currentScript.parentElement.appendChild(j)}else{if(u.body){u.body.appendChild(j)}else{var t=v("body");if(t.length==0){t=v("div")}if(t.length==0){t=v("span")}if(t.length==0){t=v("ins")}if(t.length==0){t=v("script")}if(t.
Jul 8, 2024 17:54:02.221097946 CEST	1236	IN	Data Raw: 22 3b 69 66 28 22 63 6d 70 5f 63 64 6e 22 20 69 6e 20 77 69 6e 64 6f 77 26 26 22 63 6d 70 5f 75 6c 74 72 61 62 6c 6f 63 6b 69 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6d 70 5f 75 6c 74 72 61 62 6c 6f 63 6b 69 6e 67 3e Data Ascii: ";if("cmp_cdn" in window&&"cmp_ultrablocking" in window&&window.cmp_ultrablocking>0){a.src="//"+window.cmp_cdn+"/delivery/empty.html"}a.name=b;a.setAttribute("title","Intentionally hidden, please ignore");a.setAttribute("role","none");a.setAtt
Jul 8, 2024 17:54:02.221128941 CEST	224	IN	Data Raw: 6c 69 63 65 2e 61 70 70 6c 79 28 61 29 29 7d 65 6c 73 65 7b 69 66 28 61 2e 6c 65 6e 67 74 68 3d 3d 34 26 26 61 5b 33 5d 3d 3d 3d 66 61 6c 73 65 29 7b 61 5b 32 5d 28 7b 7d 2c 66 61 6c 73 65 29 7d 65 6c 73 65 7b 5f 5f 63 6d 70 2e 61 2e 70 75 73 68 Data Ascii: lice.apply(a))}else{if(a.length==4&&a[3]===false){a[2]({},false)}else{__cmp.a.push([].slice.apply(a))}}}}}}};window.cmp_gpp_ping=function(){return{gppVersion:"1.0",cmpStatus:"stub",cmpDisplayStatus:"hidden",supportedAPIs:["t
Jul 8, 2024 17:54:02.221160889 CEST	1236	IN	Data Raw: 63 66 63 61 22 2c 22 75 73 6e 61 74 22 2c 22 75 73 63 61 22 2c 22 75 73 76 61 22 2c 22 75 73 63 6f 22 2c 22 75 73 75 74 22 2c 22 75 73 63 74 22 5d 2c 63 6d 70 49 64 3a 33 31 7d 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 70 70 73 74 75 62 3d 66 75 Data Ascii: cfca","usnat","usca","usva","usco","usut","usct"],cmpId:31}};window.cmp_gppstub=function(){var a=arguments;__gpp.q=__gpp.q\|\|[];if(!a.length){return __gpp.q}var g=a[0];var f=a.length>1?a[1]:null;var e=a.length>2?a[2]:null;if(g==="ping"){return
Jul 8, 2024 17:54:02.221195936 CEST	224	IN	Data Raw: 2e 70 61 72 61 6d 65 74 65 72 2c 66 75 6e 63 74 69 6f 6e 28 68 2c 67 29 7b 76 61 72 20 65 3d 7b 5f 5f 63 6d 70 52 65 74 75 72 6e 3a 7b 72 65 74 75 72 6e 56 61 6c 75 65 3a 68 2c 73 75 63 63 65 73 73 3a 67 2c 63 61 6c 6c 49 64 3a 62 2e 63 61 6c 6c Data Ascii: .parameter,function(h,g){var e={__cmpReturn:{returnValue:h,success:g,callId:b.callId}};d.source.postMessage(a?JSON.stringify(e):e,"*")})}if(typeof(c)==="object"&&c!==null&&"__uspapiCall" in c){var b=c.__uspapiCall;window.__u
Jul 8, 2024 17:54:02.226035118 CEST	1236	IN	Data Raw: 73 70 61 70 69 28 62 2e 63 6f 6d 6d 61 6e 64 2c 62 2e 76 65 72 73 69 6f 6e 2c 66 75 6e 63 74 69 6f 6e 28 68 2c 67 29 7b 76 61 72 20 65 3d 7b 5f 5f 75 73 70 61 70 69 52 65 74 75 72 6e 3a 7b 72 65 74 75 72 6e 56 61 6c 75 65 3a 68 2c 73 75 63 63 65 Data Ascii: spapi(b.command,b.version,function(h,g){var e={__uspapiReturn:{returnValue:h,success:g,callId:b.callId}};d.source.postMessage(a?JSON.stringify(e):e,"*")})}if(typeof(c)==="object"&&c!==null&&"__tcfapiCall" in c){var b=c.__tcfapiCall;window.__tc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	61343	208.91.196.46	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:54:02.247430086 CEST	2722	OUT	GET /px.js?ch=1 HTTP/1.1 Host: ifdnzact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/Spam_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%2FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%2BD6EslT4YXZEgi5MQZoS4%2BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%2FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%2BF%2FqfFDeim2hVuLdV2hx9V%2F15hYqnNxwr7w%2FxJkFs&yep=kYWX2UB9hpPluHNh59n0TG5bw0%2FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%2FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%2FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%2Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%2B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%2FqYu%2FBmO%2BefvXO46i%2BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%2BZbCkucnl%2BKaGVQ4CSuga7KRLSemy%2FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%2F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%2FCiWxSUGpEEgdBffigSWf9bQ%2BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%2BRbYTMJnnWjleatxujX%2BIiC4edOKDRJ%2FnR1G4wl1D1zw1q7mWlz%2F [TRUNCATED] Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=919vr467999629561689733
Jul 8, 2024 17:54:02.349028111 CEST	628	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 15:53:51 GMT Server: Apache Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=127 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 76 61 72 20 61 62 70 3d 61 62 70 7c 7c 66 61 6c 73 65 3b 76 61 72 20 73 63 72 69 70 74 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 76 61 72 20 73 63 72 69 70 74 3d 73 63 72 69 70 74 73 5b 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 66 28 73 63 72 69 70 74 29 7b 76 61 72 20 71 75 65 72 79 3d 73 63 72 69 70 74 2e 73 72 63 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 2e 73 70 6c 69 74 28 22 26 22 29 3b 76 61 72 20 70 61 72 61 6d 73 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 71 75 65 72 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 70 61 72 61 6d 3d 71 75 65 72 79 5b 69 5d 2e 73 70 6c 69 74 28 22 3d 22 29 3b 70 61 72 61 6d 73 5b 70 61 72 61 6d 5b 30 5d 5d 3d 70 61 72 61 6d 5b 31 5d 7d 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 31 29 61 62 70 3d 74 72 75 65 3b 65 6c 73 65 20 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 32 29 61 62 70 3d 61 62 70 26 [TRUNCATED] Data Ascii: var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	61344	208.91.196.46	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:54:02.252486944 CEST	2722	OUT	GET /px.js?ch=2 HTTP/1.1 Host: ifdnzact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/Spam_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%2FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%2BD6EslT4YXZEgi5MQZoS4%2BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%2FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%2BF%2FqfFDeim2hVuLdV2hx9V%2F15hYqnNxwr7w%2FxJkFs&yep=kYWX2UB9hpPluHNh59n0TG5bw0%2FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%2FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%2FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%2Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%2B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%2FqYu%2FBmO%2BefvXO46i%2BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%2BZbCkucnl%2BKaGVQ4CSuga7KRLSemy%2FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%2F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%2FCiWxSUGpEEgdBffigSWf9bQ%2BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%2BRbYTMJnnWjleatxujX%2BIiC4edOKDRJ%2FnR1G4wl1D1zw1q7mWlz%2F [TRUNCATED] Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=919vr467999629561689733
Jul 8, 2024 17:54:02.712852001 CEST	628	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 15:53:51 GMT Server: Apache Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=128 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 76 61 72 20 61 62 70 3d 61 62 70 7c 7c 66 61 6c 73 65 3b 76 61 72 20 73 63 72 69 70 74 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 76 61 72 20 73 63 72 69 70 74 3d 73 63 72 69 70 74 73 5b 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 66 28 73 63 72 69 70 74 29 7b 76 61 72 20 71 75 65 72 79 3d 73 63 72 69 70 74 2e 73 72 63 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 2e 73 70 6c 69 74 28 22 26 22 29 3b 76 61 72 20 70 61 72 61 6d 73 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 71 75 65 72 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 70 61 72 61 6d 3d 71 75 65 72 79 5b 69 5d 2e 73 70 6c 69 74 28 22 3d 22 29 3b 70 61 72 61 6d 73 5b 70 61 72 61 6d 5b 30 5d 5d 3d 70 61 72 61 6d 5b 31 5d 7d 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 31 29 61 62 70 3d 74 72 75 65 3b 65 6c 73 65 20 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 32 29 61 62 70 3d 61 62 70 26 [TRUNCATED] Data Ascii: var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};
Jul 8, 2024 17:54:08.489181995 CEST	2967	OUT	GET /favicon.ico HTTP/1.1 Host: ifdnzact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ifdnzact.com/Spam_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%2FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%2BD6EslT4YXZEgi5MQZoS4%2BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%2FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%2BF%2FqfFDeim2hVuLdV2hx9V%2F15hYqnNxwr7w%2FxJkFs&yep=kYWX2UB9hpPluHNh59n0TG5bw0%2FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%2FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%2FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%2Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%2B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%2FqYu%2FBmO%2BefvXO46i%2BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%2BZbCkucnl%2BKaGVQ4CSuga7KRLSemy%2FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%2F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%2FCiWxSUGpEEgdBffigSWf9bQ%2BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%2BRbYTMJnnWjleatxujX%2BIiC4edOKDRJ%2FnR1G4wl1D1zw1q7mWlz%2F [TRUNCATED] Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=919vr467999629561689733; __cmpcc=1; __cmpcccx68884=aBQBeHQsAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Jul 8, 2024 17:54:08.588362932 CEST	210	IN	HTTP/1.1 404 Not Found Date: Mon, 08 Jul 2024 15:53:57 GMT Server: Apache Content-Length: 10 Keep-Alive: timeout=5, max=123 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 4e 6f 20 66 61 76 69 63 6f 6e Data Ascii: No favicon
Jul 8, 2024 17:54:09.910681009 CEST	3029	OUT	GET /Malware_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%2FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%2BD6EslT4YXZEgi5MQZoS4%2BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%2FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%2BF%2FqfFDeim2hVuLdV2hx9V%2F15hYqnNxwr7w%2FxJkFs&yep=kYWX2UB9hpPluHNh59n0TG5bw0%2FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%2FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%2FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%2Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%2B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%2FqYu%2FBmO%2BefvXO46i%2BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%2BZbCkucnl%2BKaGVQ4CSuga7KRLSemy%2FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%2F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%2FCiWxSUGpEEgdBffigSWf9bQ%2BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%2BRbYTMJnnWjleatxujX%2BIiC4edOKDRJ%2FnR1G4wl1D1zw1q7mWlz%2F%2FnAQ9gKAY08BXIzyLlH [TRUNCATED] Host: ifdnzact.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=919vr467999629561689733; __cmpcc=1; __cmpcccx68884=aBQBeHQsAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Jul 8, 2024 17:54:11.388315916 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 15:53:58 GMT Server: Apache X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_WE2Hxigh8Bl/BJs2x0ysKlzfwMTrXTY6M/ZKSlXSQPAW3kHmLyUc+VRbU2eQIf8W+IHUOCYCsPtFSd7UbybLhQ== Keep-Alive: timeout=5, max=127 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 39 33 64 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 [TRUNCATED] Data Ascii: 93d6<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){win
Jul 8, 2024 17:54:11.388338089 CEST	1236	IN	Data Raw: 64 6f 77 2e 63 6d 70 5f 63 6f 64 65 73 72 63 3d 22 31 22 7d 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 65 74 73 75 70 70 6f 72 74 65 64 4c 61 6e 67 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 5b 22 44 45 22 2c 22 45 4e 22 2c 22 46 52 22 2c Data Ascii: dow.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR","ZH","TR","UK","AR","BS"];if("cmp_customl
Jul 8, 2024 17:54:11.388354063 CEST	1236	IN	Data Raw: 28 61 2e 6c 65 6e 67 74 68 3e 30 29 7b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 63 2e 70 75 73 68 28 61 5b 64 5d 29 7d 7d 7d 7d 7d 69 66 28 22 6c 61 6e 67 75 61 67 65 22 20 69 6e 20 6e 61 76 69 67 61 74 Data Ascii: (a.length>0){for(var d=0;d<a.length;d++){c.push(a[d])}}}}}if("language" in navigator){c.push(navigator.language)}if("userLanguage" in navigator){c.push(navigator.userLanguage)}var h="";for(var d=0;d<c.length;d++){var b=c[d].toUpperCase();if(g.
Jul 8, 2024 17:54:11.388464928 CEST	1236	IN	Data Raw: 3d 75 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 6a 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6d 70 2d 61 62 22 2c 22 31 22 29 3b 76 61 72 20 63 3d 78 28 22 63 6d 70 64 65 73 69 67 6e 22 2c 22 Data Ascii: =u.createElement("script");j.setAttribute("data-cmp-ab","1");var c=x("cmpdesign","cmp_design" in h?h.cmp_design:"");var f=x("cmpregulationkey","cmp_regulationkey" in h?h.cmp_regulationkey:"");var r=x("cmpgppkey","cmp_gppkey" in h?h.cmp_gppkey:
Jul 8, 2024 17:54:11.388489962 CEST	896	IN	Data Raw: 30 3f 22 22 3a 22 2e 6d 69 6e 22 3b 76 61 72 20 61 3d 78 28 22 63 6d 70 64 65 62 75 67 63 6f 76 65 72 61 67 65 22 2c 22 63 6d 70 5f 64 65 62 75 67 63 6f 76 65 72 61 67 65 22 20 69 6e 20 68 3f 68 2e 63 6d 70 5f 64 65 62 75 67 63 6f 76 65 72 61 67 Data Ascii: 0?"":".min";var a=x("cmpdebugcoverage","cmp_debugcoverage" in h?h.cmp_debugcoverage:"");if(a=="1"){m="instrumented";p=""}var j=u.createElement("script");j.src=k+"//"+h.cmp_cdn+"/delivery/"+m+"/cmp"+b+p+".js";j.type="text/javascript";j.setAttri
Jul 8, 2024 17:54:11.388813019 CEST	1236	IN	Data Raw: 65 3d 62 3b 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 49 6e 74 65 6e 74 69 6f 6e 61 6c 6c 79 20 68 69 64 64 65 6e 2c 20 70 6c 65 61 73 65 20 69 67 6e 6f 72 65 22 29 3b 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 Data Ascii: e=b;a.setAttribute("title","Intentionally hidden, please ignore");a.setAttribute("role","none");a.setAttribute("tabindex","-1");document.body.appendChild(a)}else{window.setTimeout(window.cmp_addFrame,10,b)}}};window.cmp_rc=function(h){var b=do
Jul 8, 2024 17:54:11.388961077 CEST	1236	IN	Data Raw: 7b 72 65 74 75 72 6e 7b 67 70 70 56 65 72 73 69 6f 6e 3a 22 31 2e 30 22 2c 63 6d 70 53 74 61 74 75 73 3a 22 73 74 75 62 22 2c 63 6d 70 44 69 73 70 6c 61 79 53 74 61 74 75 73 3a 22 68 69 64 64 65 6e 22 2c 73 75 70 70 6f 72 74 65 64 41 50 49 73 3a Data Ascii: {return{gppVersion:"1.0",cmpStatus:"stub",cmpDisplayStatus:"hidden",supportedAPIs:["tcfca","usnat","usca","usva","usco","usut","usct"],cmpId:31}};window.cmp_gppstub=function(){var a=arguments;__gpp.q=__gpp.q\|\|[];if(!a.length){return __gpp.q}va
Jul 8, 2024 17:54:11.388976097 CEST	1236	IN	Data Raw: 63 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 63 21 3d 3d 6e 75 6c 6c 26 26 22 5f 5f 63 6d 70 43 61 6c 6c 22 20 69 6e 20 63 29 7b 76 61 72 20 62 3d 63 2e 5f 5f 63 6d 70 43 61 6c 6c 3b 77 69 6e 64 6f 77 2e 5f 5f 63 6d 70 28 62 2e 63 6f 6d 6d 61 6e Data Ascii: c)==="object"&&c!==null&&"__cmpCall" in c){var b=c.__cmpCall;window.__cmp(b.command,b.parameter,function(h,g){var e={__cmpReturn:{returnValue:h,success:g,callId:b.callId}};d.source.postMessage(a?JSON.stringify(e):e,"*")})}if(typeof(c)==="objec
Jul 8, 2024 17:54:11.389131069 CEST	1236	IN	Data Raw: 3b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 77 69 6e 64 6f 77 2e 63 6d 70 5f 6d 73 67 68 61 6e 64 6c 65 72 2c 66 61 6c 73 65 29 7d 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 65 74 47 70 Data Ascii: ;window.addEventListener("message",window.cmp_msghandler,false)}};window.cmp_setGppStub=function(a){if(!(a in window)\|\|(typeof(window[a])!=="function"&&typeof(window[a])!=="object"&&(typeof(window[a])==="undefined"\|\|window[a]!==null))){window[
Jul 8, 2024 17:54:11.389144897 CEST	896	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 41 42 50 44 65 74 65 63 74 28 29 7b 74 72 79 7b 69 66 28 21 61 62 70 29 20 72 65 74 75 72 6e 3b 76 61 72 20 69 6d 67 6c 6f 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 Data Ascii: unction handleABPDetect(){try{if(!abp) return;var imglog = document.createElement("img");imglog.style.height="0px";imglog.style.width="0px";imglog.src="http://ifdnzact.com/sk-logabpstatus.php?a=RG1DYzMwMWxaTi9sQVIyYjArOTVJSGo5Z1JlWSt5czU4VlFVV
Jul 8, 2024 17:54:11.389477015 CEST	1236	IN	Data Raw: 64 6e 2d 69 6d 61 67 65 2e 63 6f 6d 2f 5f 5f 6d 65 64 69 61 5f 5f 2f 66 6f 6e 74 73 2f 6d 6f 6e 74 73 65 72 72 61 74 2d 72 65 67 75 6c 61 72 2f 6d 6f 6e 74 73 65 72 72 61 74 2d 72 65 67 75 6c 61 72 2e 65 6f 74 22 29 3b 73 72 63 3a 20 75 72 6c 28 Data Ascii: dn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot");src: url("http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix") format("embedded-opentype"),url("http://i3.cdn-image.com/__media__/fo
Jul 8, 2024 17:54:17.927154064 CEST	3028	OUT	GET /Pop_Up_Removal.cfm?domain=le100.net&fp=EzVFF1z5BNcjvM%2BM%2FOKCHBPjV4tK%2Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%2FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%2BD6EslT4YXZEgi5MQZoS4%2BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%2FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%2BF%2FqfFDeim2hVuLdV2hx9V%2F15hYqnNxwr7w%2FxJkFs&yep=kYWX2UB9hpPluHNh59n0TG5bw0%2FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%2FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%2FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%2Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%2B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%2FqYu%2FBmO%2BefvXO46i%2BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%2BZbCkucnl%2BKaGVQ4CSuga7KRLSemy%2FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%2F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%2FCiWxSUGpEEgdBffigSWf9bQ%2BSJsdPxnCM7x89z94cGjVfyqKf4QVJA5%2BRbYTMJnnWjleatxujX%2BIiC4edOKDRJ%2FnR1G4wl1D1zw1q7mWlz%2F%2FnAQ9gKAY08BXIzyLlH4 [TRUNCATED] Host: ifdnzact.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=919vr467999629561689733; __cmpcc=1; __cmpcccx68884=aBQBeHRjAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Jul 8, 2024 17:54:20.766455889 CEST	1236	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 15:54:06 GMT Server: Apache X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_oj7umL2mgXa3Qa/kHuHL7dDW7fl85UHwC2R5hwOgxj1Ur4jnxQEF6pCwOldkfKP7gwmHWMy9Ufwe14NBxRKMgQ== Keep-Alive: timeout=5, max=119 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 39 35 39 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 [TRUNCATED] Data Ascii: 9593<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){win

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	61348	208.91.196.253	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:54:02.332073927 CEST	324	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:54:02.793602943 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:53:51 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Thu, 16 Feb 2023 21:03:44 GMT Connection: keep-alive ETag: "63ee9a30-20f3" Expires: Mon, 22 Jul 2024 15:53:51 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 2a 2f 0d 0a 76 61 72 20 73 68 6f 77 50 6f 70 3d 31 3b 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 53 65 61 72 63 68 54 65 78 74 28 74 29 7b 74 2e 76 61 6c 75 65 3d 22 22 2c 74 2e 73 65 6c 65 63 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 72 65 70 6c 61 63 65 53 74 72 69 6e 67 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 65 2c 6e 2c 22 67 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 75 62 6d 69 74 53 65 61 72 63 68 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2b 3d 67 65 6e 65 72 61 74 65 42 72 6f 77 4c 6f 67 55 52 4c 28 22 73 72 63 71 72 79 22 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 74 5d 2c 30 3d 3d 64 2e 65 6c 65 6d 65 6e 74 73 2e 71 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 7c 7c 22 45 6e 74 65 72 20 4b 65 79 77 6f 72 64 [TRUNCATED] Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function change
Jul 8, 2024 17:54:02.793656111 CEST	1236	IN	Data Raw: 53 74 61 74 75 73 28 74 29 7b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 61 64 64 62 6f 6f 6b 6d 61 72 6b 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 41 73 48 6f 6d 65 50 61 67 65 28 74 2c 65 29 7b 72 65 Data Ascii: Status(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate(){var t=new Array("Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"),e=new Array("January","February","March","April
Jul 8, 2024 17:54:02.793692112 CEST	1236	IN	Data Raw: 43 6c 69 63 6b 55 52 4c 28 6c 69 6e 6b 73 5b 69 5d 2c 22 6f 6c 6f 64 22 29 2c 6c 69 6e 6b 73 5b 69 5d 2e 69 6e 6e 65 72 48 54 4d 4c 3d 74 65 6d 70 44 61 74 61 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 6f 64 69 66 79 4b Data Ascii: ClickURL(links[i],"olod"),links[i].innerHTML=tempData)}catch(t){}}function modifyKeywordClickURL(t,e){return t.href=t.href+generateBrowLogURL(e),"undefined"!=typeof prctu&&0<prctu.length&&(t.href=prctu+getEscapedString(t.href)),!0}function gen
Jul 8, 2024 17:54:02.793725014 CEST	1236	IN	Data Raw: 73 2e 67 65 74 4c 6f 63 61 6c 54 69 6d 65 5a 6f 6e 65 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2b 74 68 69 73 2e 66 64 2b 74 68 69 73 2e 67 65 74 53 63 72 65 65 6e 48 65 69 67 68 74 28 29 2b 74 68 69 73 2e 66 64 2b 74 68 69 73 2e 67 65 74 53 63 72 Data Ascii: s.getLocalTimeZone().toString()+this.fd+this.getScreenHeight()+this.fd+this.getScreenWidth()+this.fd+(this.isCookieSupported()?1:0).toString()+this.fd+this.getABPStatus()),this.browserdata},this.getMousePositionData=function(){return this.fd+m
Jul 8, 2024 17:54:02.793760061 CEST	1236	IN	Data Raw: 5f 54 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 7d 63 61 74 63 68 28 74 29 7b 65 3d 30 7d 72 65 74 75 72 6e 20 65 7d 2c 5f 77 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 30 3b 74 72 79 Data Ascii: _Top.document.body.clientHeight)}catch(t){e=0}return e},_ww:function(){var e=0;try{"number"==typeof this._Top.window.innerWidth?e=this._Top.window.innerWidth:this._Top.document.documentElement&&this._Top.document.documentElement.clientWidth?e=
Jul 8, 2024 17:54:02.793793917 CEST	1236	IN	Data Raw: 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 65 77 65 62 6b 69 74 22 29 26 26 28 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 62 6c 75 72 28 29 2c 74 68 69 73 2e 5f 54 6f 70 Data Ascii: userAgent.toLowerCase().indexOf("applewebkit")&&(this._Top.window.blur(),this._Top.window.focus()),_npW.Init=function(e){with(e)Params=e.Params,Main=function(){void 0===window.mozPaintCount\|\|(t=window.open("about:blank"))&&t.close();var t=Para
Jul 8, 2024 17:54:02.793832064 CEST	1236	IN	Data Raw: 68 6f 77 50 6f 70 26 26 28 73 68 6f 77 50 6f 70 3d 30 29 2c 21 31 3b 31 21 3d 73 68 6f 77 50 6f 70 7c 7c 72 65 6e 64 65 72 46 41 43 50 28 74 29 7c 7c 73 68 70 70 28 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 68 70 70 Data Ascii: howPop&&(showPop=0),!1;1!=showPop\|\|renderFACP(t)\|\|shpp(t)}catch(t){}}function shpp(t){if("undefined"!=typeof __pp&&1==showPop&&!renderFACP(t))try{if(t\|\|((t=window.event\|\|window.Event).cancelBubble=!0),t.button&&2==t.button)return;try{var e=!1;
Jul 8, 2024 17:54:02.793863058 CEST	124	IN	Data Raw: 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 42 72 6f 77 73 65 72 44 65 74 61 69 6c 73 28 29 7b 72 65 6c 70 6c 61 63 65 41 6c 6c 41 4c 69 Data Ascii: avigator.userAgent)}catch(t){}return t}function setBrowserDetails(){relplaceAllALinks&&relplaceAllALinks(/(\/trf\|\.cfm)\?/)}
Jul 8, 2024 17:54:02.804516077 CEST	389	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:54:02.908591986 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:53:51 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Mon, 22 Jul 2024 15:53:51 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 30 f2 00 2c c1 00 2c 37 03 90 81 f9 8f 29 b2 13 3b 91 25 a0 9b ae dd a1 ab d6 7a bc 0f e7 7c b7 4e fd b0 ab 8a 28 f1 09 c8 13 96 00 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c [TRUNCATED] Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0P%@a@a0@a0P0P(P(P((@a@a0@a0P0P(P(P((@a@a0@aPeaLt[=ul=HhOnNc=e{l[,lu_cnk,n;~'^a$sbV&aqcm3Ts*l#zXtH+8c/BH1>CXHay/AIl2g}s/Q8{.;R91oeGo-V:;u$5'.lW:Q\v_:z4',l]2z4'e,~O]%>\|v_2U}8u=hL4$7aj;eMhL\>',/]I,{}a91\|Jz
Jul 8, 2024 17:54:02.908622026 CEST	1236	IN	Data Raw: b1 73 e2 d5 85 ed aa 5b 43 07 31 c7 b0 d3 f6 53 17 56 dd 8c e8 20 e6 18 96 72 88 08 4b e8 20 e6 18 96 f8 01 7c 65 61 db 1a 97 d0 8b 98 d7 b0 f2 73 62 f8 8c 1a 3f 6a d3 c2 07 f0 95 33 ce 55 85 55 39 23 1e fd 63 98 c5 54 ba 3f 16 93 15 b6 b5 82 34 Data Ascii: s[C1SV rK \|easb?j3UU9#cT?4JYA)O(W.:+FOQX3DWsn]{d^Va4\>gDbvU1aEjass+e9<lNTX3KVaV\|
Jul 8, 2024 17:54:02.908638000 CEST	1236	IN	Data Raw: 25 2e ef 57 dd a0 c2 fa 1c c0 aa e8 eb 95 1b c5 d4 5b fa 3a 36 49 9f c6 4e 1c c7 e2 da be 36 5d 2d 64 90 a8 9a 5d f2 ed da c6 e2 aa 17 e6 75 3d 7d 75 9d 7f 66 3b cf b2 a2 7d d2 e7 62 71 d3 a3 b0 1e ad de d5 d4 97 a3 98 43 58 c1 c6 de 5f 79 c4 e0 Data Ascii: %.W[:6IN6]-d]u=}uf;}bqCX_y:RHn\nv[U+,UnCX9r}K5G.ek8}`]~y/GXTW=)l`c~yq,%+,~Oaxpz[5$%4
Jul 8, 2024 17:54:02.908652067 CEST	1236	IN	Data Raw: 10 0f 13 06 c6 10 88 d7 f8 3a 4a d8 8a 06 12 02 e1 82 0f 92 73 94 30 94 63 08 c4 a9 02 ec 34 61 e8 40 23 10 49 20 9e a0 e6 0c 61 28 c7 10 88 c3 05 d8 2b 84 a1 1c 43 20 f8 1c 32 27 09 43 39 86 40 01 76 2f 61 60 0c 01 be ee 25 0c e5 18 02 05 d8 ad Data Ascii: :Js0c4a@#I a(+C 2'C9@v/a`%10HE10t7(!~/CZwho[JeGc`G}"(l]P!Pu]6Q!P +1J#fKH>g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	61349	208.91.196.253	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:54:02.832918882 CEST	393	OUT	GET /__media__/pics/28905/res-arw.png HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:54:03.286003113 CEST	672	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:53:52 GMT Content-Type: image/png Content-Length: 346 Last-Modified: Tue, 04 Jan 2022 14:44:28 GMT Connection: keep-alive ETag: "61d45d4c-15a" Expires: Mon, 22 Jul 2024 15:53:52 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 1d 08 03 00 00 00 f8 b5 4e 88 00 00 00 45 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 57 d4 34 b7 00 00 00 16 74 52 4e 53 00 51 a8 e4 9d fa 21 30 f4 13 ba 01 72 90 da 3e 7e 03 c7 5f 0a 88 8d 4f 23 a5 00 00 00 ae 49 44 41 54 28 cf 85 93 e1 12 83 20 0c 83 11 41 d4 82 0a 6a de ff 51 37 b7 dd 4e a4 94 ef 77 ae 85 34 51 e7 7e a8 06 2b c6 30 34 34 33 80 b9 8b 92 c4 e1 a2 df 26 41 a3 3f 1a 58 bd 92 3c e6 62 f1 b5 51 e6 af c1 68 1c a7 a0 c1 e2 46 62 5d 30 c8 e0 5c c8 c7 80 75 21 a0 e0 e1 02 4d 23 18 32 17 e8 04 cb dd 05 7e 4c ee 82 a9 48 ac 76 e2 63 b2 37 07 4e 90 f6 a8 a8 6e 0c ec e3 14 9a db 40 fc ad 7f 1b ca 84 cd c5 37 a9 88 ef 6d 03 1f 99 24 5c ef 4b 27 c7 e9 4d 5c 1a a1 54 6a 47 ab 25 47 df ec 9a 5f fc a1 a2 5c 58 6a 55 fa 05 63 50 20 91 7b 34 90 ee 00 00 00 00 [TRUNCATED] Data Ascii: PNGIHDR"NEPLTEGpLW4tRNSQ!0r>~_O#IDAT( AjQ7Nw4Q~+0443&A?X<bQhFb]0\u!M#2~LHvc7Nn@7m$\K'M\TjG%G_\XjUcP {4IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	61350	208.91.196.253	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:54:02.866929054 CEST	381	OUT	GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive Origin: http://ifdnzact.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:54:03.341614008 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:53:52 GMT Content-Type: application/font-woff Content-Length: 17312 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-43a0" Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 a0 00 10 00 00 00 00 73 60 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 6c 00 00 00 1c 00 00 00 1c 69 99 f4 2b 47 44 45 46 00 00 01 88 00 00 00 1e 00 00 00 1e 00 27 01 0d 47 50 4f 53 00 00 01 a8 00 00 0c c5 00 00 16 c0 c0 0d d5 ee 47 53 55 42 00 00 0e 70 00 00 00 20 00 00 00 20 6c 91 74 8f 4f 53 2f 32 00 00 0e 90 00 00 00 54 00 00 00 60 a6 e9 3d 09 63 6d 61 70 00 00 0e e4 00 00 02 75 00 00 03 86 c7 ce be ea 67 61 73 70 00 00 11 5c 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 11 64 00 00 28 0b 00 00 47 38 61 9a 3f 94 68 65 61 64 00 00 39 70 00 00 00 34 00 00 00 36 09 88 d5 e9 68 68 65 61 00 00 39 a4 00 00 00 21 00 00 00 24 07 97 04 27 68 6d 74 78 00 00 39 c8 00 00 02 ad 00 00 04 1a 59 f7 2d 9c 6c 6f 63 61 00 00 3c 78 00 00 02 09 00 00 02 10 b1 e6 c4 00 6d 61 78 70 00 00 3e 84 00 00 00 1f 00 00 00 20 01 50 00 37 6e 61 6d 65 00 00 3e a4 00 00 02 df 00 00 06 99 17 bc cd 9c 70 6f 73 74 00 00 41 84 00 00 02 11 00 00 [TRUNCATED] Data Ascii: wOFFCs`FFTMli+GDEF'GPOSGSUBp ltOS/2T`=cmapugasp\glyfd(G8a?head9p46hhea9!$'hmtx9Y-loca<xmaxp> P7name>postA8Y,prepChh<'d:x[l\vb{l7ho+.!Qp1OPP%hUUUEMpQZA1I !C@==:cBP5:>9{^k)wJx)R~gO>m~6BJ:tIY_dq/mxel\|icKclzjo%;^x}olegOVV=\5]z_ono;555nO/ctR4tKTCmH]nT::tjAJwU$![yJ+u)IH7IH%}nZef/ ?(OA7)qpf#xxMO;jq77DsO@tD1Et0F`fd9wIXFafxlC[0F0
Jul 8, 2024 17:54:03.341640949 CEST	224	IN	Data Raw: 44 dd ee 45 e9 61 dc 63 28 f3 38 3c 47 b9 6a d1 ec 05 2c 04 99 99 84 53 82 59 a7 e4 3e ac 74 b8 ef 32 73 9a 59 a7 e0 96 83 47 12 0e f3 70 58 94 61 f7 8a 84 dc e7 d0 f4 39 14 0a fc 77 01 85 96 51 e8 02 0a 45 51 28 86 42 19 70 bc 03 8e 14 56 c3 28 Data Ascii: DEac(8<Gj,SY>t2sYGpXa9wQEQ(BpV(G9X`-J!G4Bap["8&`KfY3k00d'8<YQuk{"333J/<y6A>4sDCs9jfV4
Jul 8, 2024 17:54:03.341655016 CEST	1236	IN	Data Raw: 73 f0 ce e2 25 b6 86 a9 8b df bb c1 d8 e3 16 f0 94 94 3e 8d b9 22 9e 1c 3c 15 d1 20 8b a7 0c 9e 8a 78 ca e2 29 8b 1e 09 bc 39 68 52 c0 5b 91 88 ac 21 56 fc 58 6f e1 9b 59 ab 7e 9e 0c c0 69 90 ef 07 dd 3c 96 a2 60 5e c6 5a 06 6b 45 ac e5 88 9b 6a Data Ascii: s%>"< x)9hR[!VXoY~i<`^ZkEj7M-H#V\B*3`_{)s^>\ry<9:<G0)mh[Jx+&K<F26<aq,Sf,oY-N
Jul 8, 2024 17:54:03.341680050 CEST	1236	IN	Data Raw: d2 47 0c d4 68 e7 61 f6 bd 14 5e cc de 17 d7 95 6c a7 36 dc c7 f7 0e 14 ee 04 67 97 7b 19 0f ef e3 21 82 87 39 ea 70 e8 ba 3d 39 63 f7 e4 25 bc 65 58 d1 bc 8c a0 f9 28 3c 43 28 18 e6 72 98 6b 2a 7c 92 95 32 ba 3a 96 cb 7b 78 ca e1 69 01 4f 51 5b Data Ascii: Gha^l6g{!9p=9c%eX(<C(rk\|2:{xiOQ[/gsvi7V,"Va[E`gYF5jm ;Qqa{>ynhciF0::I$UvI2&hwKs`!\|.v+Cx'Q1i#~Qun?
Jul 8, 2024 17:54:03.341695070 CEST	1236	IN	Data Raw: 76 94 09 3e 03 c4 de 49 f9 21 28 26 65 90 b5 99 c1 5e 48 c2 ac 65 52 cc 5b 54 76 5a 79 48 ae f1 39 f8 3f 52 7b ad aa 00 00 00 00 01 00 00 00 0a 00 1c 00 1e 00 01 6c 61 74 6e 00 08 00 04 00 00 00 00 ff ff 00 00 00 00 00 00 78 9c 63 60 66 0a 66 da Data Ascii: v>I!(&e^HeR[TvZyH9?R{latnxc`ff@9 E@7@5'~ 9&)@JExWLUA\ADDQ@("v-^Q#$`/"5!`x0A("Lf
Jul 8, 2024 17:54:03.341711044 CEST	950	IN	Data Raw: 04 c4 04 05 c5 84 97 4f ea 98 34 09 c6 3a 7c 40 8c b1 b6 7f 90 d3 c8 5f 3f 5c 77 24 c7 85 23 6c 63 a2 59 0f 46 8a 41 ee 23 53 28 4d 66 a5 8b 4c 29 0b 53 24 98 b5 3a 17 b9 17 ae db 64 4c d4 c2 d7 96 bf ee dc a7 0a 5e 71 7a c9 ae a4 40 bf 31 1d 4a Data Ascii: O4:\|@_?\w$#lcYFA#S(MfL)S$:dL^qz@1JUSfTcx&(,u\|kiT4ZBKq831&Dh@{IC$uP{3?+WT//?Azowgr/~8>M@l4Gyveoe{'~Pj2YgV2
Jul 8, 2024 17:54:03.341849089 CEST	1236	IN	Data Raw: 99 85 22 1f 42 52 62 23 26 75 c4 4f d1 07 97 c8 94 d9 0d e9 a9 53 92 13 57 57 15 45 af bb be ae 8f 0d 41 c8 06 ef d0 bb a6 ea cc e4 ea 34 86 33 07 f5 e6 07 b4 31 4c ee ed 9a 43 a4 f7 1c a6 41 06 07 3d 82 71 76 75 c2 b9 99 b6 1e ce 8a 73 5d a9 85 Data Ascii: "BRb#&uOSWWEA431LCA=qvus]Z/i0S9(gGg%n]m "B \>pSY}GK5%g}W0(DXq",7#!])'DoAm2nDF.\==4Q3;\|Fv
Jul 8, 2024 17:54:03.341947079 CEST	1236	IN	Data Raw: a7 85 c5 37 3e d3 b1 e2 be a6 f0 8c 70 ef a0 69 2f cf 8b 8b b9 4f dc bf 40 a4 73 3c d3 5b 8e ee 9d 86 fa e9 d5 bd 7f 44 bf 9d 68 bd 4a 12 37 6f c6 31 13 6d 3f 91 93 a2 bc 86 51 21 45 cb 89 36 82 bd 83 69 63 71 ef 69 e1 e7 33 bd 1b 1b 2c b0 5e 58 Data Ascii: 7>pi/O@s<[DhJ7o1m?Q!E6icqi3,^XvYXmfEppoggx(t/HMo'Wl;c?H+,(P76iCJ%4A==p#Du&-!%*'0tw\|p5=
Jul 8, 2024 17:54:03.341963053 CEST	448	IN	Data Raw: 70 07 e3 29 0d 95 fc 30 49 c8 a9 7f d4 13 9d 56 d4 21 34 5b c1 44 a9 80 0f 3b a6 a4 ae 4f cc b6 d4 05 a9 63 6b 62 83 d3 96 3e 57 97 94 b7 2d 66 66 74 70 52 75 7d 74 d4 f4 2c a5 36 34 d0 c7 5b fb c0 f4 cc e6 38 ad dc 37 d4 d3 4b 2d fa 60 38 8b 3e Data Ascii: p)0IV!4[D;Ockb>W-fftpRu}t,64[87K-`8>;W sj9T.D9Qp\|{.=J8tn);/]8*$P{o=on{AS b>'{3gNM_i8<o
Jul 8, 2024 17:54:03.345859051 CEST	1236	IN	Data Raw: 44 dc dd 04 44 97 82 ae 9c e2 8e 86 f8 01 68 bc 06 63 a1 b0 fc c0 0f 7e 81 8f a8 36 41 82 31 51 27 9e 40 d5 2e 4a 1d b3 11 30 43 c5 2f 75 99 98 ac 5e a3 f5 87 25 b2 b2 8c b0 95 70 24 7a e4 e8 d0 8a a2 2c ad 26 ac ac 3c 93 ea 24 42 ba 83 31 1f cb Data Ascii: DDhc~6A1Q'@.J0C/u^%p$z,&<$B1k4Fo98wap^u8mH,)i8\30tM75,*;jdME8]G{>qf1nUp<7#m9&hCYtFg#"&uBT=z{g
Jul 8, 2024 17:54:03.346518040 CEST	1236	IN	Data Raw: d8 99 09 7c b8 4f a4 9a 09 cd 5b 69 22 2e b5 94 e0 81 b8 06 c4 b3 50 3c 9c 87 ea be 9a 8c 14 aa d9 ab 7c 7b 82 c6 06 e1 e3 65 a9 a2 a7 51 ab cd 1a 4d 95 58 be 63 31 7d 2a 89 b1 eb 4e b8 ce a0 94 69 62 81 be c2 1e aa 33 dd 2d ec f5 d6 53 a2 ea 70 Data Ascii: \|O[i".P<\|{eQMXc1}*Nib3-SpR+mArEK$MvbY^`x^E)KYcc0s$!0U]2X)){]D1WOk2:5xf[[G]bg=h$#n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	61351	208.91.196.253	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:54:02.868379116 CEST	387	OUT	GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive Origin: http://ifdnzact.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:54:03.324350119 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:53:52 GMT Content-Type: application/font-woff Content-Length: 17264 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-4370" Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 70 00 10 00 00 00 00 71 40 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 43 54 00 00 00 1c 00 00 00 1c 6a aa b6 37 47 44 45 46 00 00 37 84 00 00 00 1e 00 00 00 1e 00 27 01 0d 47 50 4f 53 00 00 37 c4 00 00 0b 8e 00 00 13 c6 29 4d 73 4d 47 53 55 42 00 00 37 a4 00 00 00 20 00 00 00 20 6c 91 74 8f 4f 53 2f 32 00 00 01 e8 00 00 00 56 00 00 00 60 a5 bd 5d 40 63 6d 61 70 00 00 04 ec 00 00 02 75 00 00 03 86 c7 ce be ea 67 61 73 70 00 00 37 7c 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 09 78 00 00 29 05 00 00 47 f8 1b fa 03 ac 68 65 61 64 00 00 01 6c 00 00 00 36 00 00 00 36 fa 9a cf bf 68 68 65 61 00 00 01 a4 00 00 00 21 00 00 00 24 07 c7 04 70 68 6d 74 78 00 00 02 40 00 00 02 aa 00 00 04 1a 57 5c 36 b8 6c 6f 63 61 00 00 07 6c 00 00 02 0a 00 00 02 10 c1 de d4 3a 6d 61 78 70 00 00 01 c8 00 00 00 1f 00 00 00 20 01 50 00 38 6e 61 6d 65 00 00 32 80 00 00 02 e7 00 00 06 b4 4e ce 98 3d 70 6f 73 74 00 00 35 68 00 00 02 11 00 00 [TRUNCATED] Data Ascii: wOFFCpq@FFTMCTj7GDEF7'GPOS7)MsMGSUB7 ltOS/2V`]@cmapugasp7\|glyfx)Gheadl66hhea!$phmtx@W\6local:maxp P8name2N=post5h8',prepdhBL_<'d:jxc`d``>X"]?xc`d``dg0e`g& fB0xc`f`@9 EOa>[$$H)00>xm[HTQdf^a)"0#]0M "%a&Q7)H>DDEKDqI:X}SAM?c^Dq\hVP2DFD>Q4:r5APQ/!T5R4Zejom1Z}$q5=.3Cr>qe!Sa%tr7#^#{4@\*q1T0dwrqk\Gq[#w8Y7rd(\|"8NkG3WvvI7&M99/&s
Jul 8, 2024 17:54:03.324374914 CEST	224	IN	Data Raw: 98 bc 13 08 38 59 4c 30 8b 51 04 78 86 76 1d c2 31 7d c8 7a 2f 0e 33 a3 32 c9 e4 19 07 10 64 6d c4 74 c2 6b 12 d4 4d be 7f 05 75 3a 47 de 96 f9 dc bf 72 ed 48 2e da 0c 1c fe 69 92 60 f2 bb cd 80 be 4c 37 c6 83 ec 35 fe eb c5 73 55 39 63 66 90 2e Data Ascii: 8YL0Qxv1}z/32dmtkMu:GrH.i`L75sU9cf.''6yYyNoX._a_/rqf.0&rov_=#0<}2QNQ4e:@ZocRy&U0NWi61/>JPW[
Jul 8, 2024 17:54:03.324388981 CEST	1236	IN	Data Raw: 50 a8 1b 50 2c 53 38 aa 2f 10 71 b1 27 e5 34 82 54 44 07 93 7f 74 99 ac 17 50 6f 46 d8 13 e7 c9 de 83 3c 53 80 0e 7d c5 ff d0 b2 78 87 2c d3 c3 9e b8 81 ad fa 14 27 75 10 61 ed e5 79 7b d1 aa 23 ec b5 07 f0 c1 f7 17 31 5c be e6 00 00 78 9c ad 92 Data Ascii: PP,S8/q'4TDtPoF<S}x,'uay{#1\xWLUA\ADDQ@("v-^Q#$`/"5!`x0A("Lfu#HTV(pMy5I$)E[$:p%F8(--47StWBp-[-Mw]uO
Jul 8, 2024 17:54:03.324475050 CEST	502	IN	Data Raw: 06 0e 96 22 00 00 78 9c 95 7c 07 60 54 55 d6 f0 3b f7 25 33 81 50 52 66 32 21 8d cc 4c 32 e9 75 5a 7a ef 05 92 10 d2 3b 10 92 10 c2 d0 06 04 04 29 d2 25 94 48 93 5d 62 59 70 6d 60 5b 50 14 2b bb ea a2 a8 20 c5 dd 5f 5d 5d b1 e0 ae 7c bb a8 e8 92 Data Ascii: "x\|`TU;%3PRf2!L2uZz;)%H]bYpm`[P+ _]]\|L&X?e&3s=sp+}JrD+y-3}i*>zHWg xNzeM3?(\|xasS9r\+Y~r>gA=
Jul 8, 2024 17:54:03.324527025 CEST	1236	IN	Data Raw: 92 87 c9 42 7c 12 cd ba 30 99 d2 8b 32 c0 64 34 e8 20 b0 63 eb 23 11 6a eb a0 65 b0 22 71 aa 67 95 9f 3a 3c a3 b4 a9 4e 18 2e 5b 5d 38 27 75 61 bf d1 5f bd d0 e8 36 bf 75 61 5d 5c 5a 6c 45 4d 55 c9 ac ba 0e 43 6c 7a 4a be 21 22 a5 a0 b1 f2 60 72 Data Ascii: B\|02d4 c#je"qg:<N.[]8'ua_6ua]\ZlEMUClzJ!"`rJOQz1<L{r&~J}r8/\^6H/{"eYBeexy~WIq8&}8>Vb\_fy9**[Z5yE3w.<hqV>15sD=7G4
Jul 8, 2024 17:54:03.324553013 CEST	1236	IN	Data Raw: 9e e5 a3 5d 52 52 b6 a2 a4 78 75 f1 ea cf a0 e2 fb ef 9f e8 bd 37 37 63 ed d6 0b 3b e3 d5 b9 c2 c3 05 8d 25 83 9f 5c 14 2e fe 29 2d 34 28 14 ce 56 d7 dc dd dc 88 78 51 e6 5e 45 d9 97 33 4b 2b d7 52 23 18 07 ee f0 66 c1 6a 30 d0 9f 82 f8 35 6b 0e Data Ascii: ]RRxu77c;%\.)-4(VxQ^E3K+R#fj05kV\|>h98GFOFN=(;%=+<1Ux~=^1rJh$wTSjtONzSQ2L/[ G?4>ggi+Bu[>{@
Jul 8, 2024 17:54:03.324568033 CEST	448	IN	Data Raw: 7a 15 78 96 97 b7 af e8 bc 8b 5c 9d 31 e3 d0 21 16 bb 0f 5b c9 d6 e1 63 74 0d 15 8d dd 49 ce d6 e4 64 0e 20 0d 2d 6d 00 f9 86 c5 e5 da 30 33 09 e8 5c 61 25 75 6d 09 54 7e 23 50 ee 38 12 80 3a 12 44 b9 63 14 1d 68 2a 1e c8 68 08 4d a5 4e 29 37 6a Data Ascii: zx\1![ctId -m03\a%umT~#P8:Dch*hMN)7j5J%Y0cY%+[YV6pzo)zLb"DDUvd41Xr6tml"? W3pG4V90/<z}FNq`FeZ!NG
Jul 8, 2024 17:54:03.324630976 CEST	1236	IN	Data Raw: 14 42 fc 7d f7 95 ce 4c ad 6a c8 8b 4b 1a f8 eb 40 ed 74 e1 ed d6 a6 2d ad 1d a2 bd c0 93 2a 49 25 5f d2 88 d4 9b da 7a 4f 76 66 50 e2 9f 28 1c b2 d7 2c 16 df f6 a4 86 05 96 15 29 35 34 98 21 5f 0a ef 25 24 f5 75 09 2f 42 c8 9e 72 8a 63 2e 42 f9 Data Ascii: B}LjK@t-*I%_zOvfP(,)54!_%$u/Brc.Br.z)))D>E2y=L^TTbJr`sju49o#iar\wlm%XW^8}qqD29@Nu6^nHI,%"SI]]W
Jul 8, 2024 17:54:03.324657917 CEST	224	IN	Data Raw: 18 86 b8 f2 7a e4 27 3e 2a b5 72 29 5d a7 ed 3c ed f2 e2 c6 b7 d7 be 2c 7f 73 cd fb eb 5f e0 5f 7a f9 ee d3 17 4c b2 3a 98 21 bc 02 d9 c2 93 75 32 53 dd aa 55 a2 5d 6d 1c fe 9a 7b 81 c5 79 34 9a 43 a9 e2 f1 b7 b1 a5 a5 05 9e 82 42 e1 05 21 85 3e Data Ascii: z'>*r)]<,s__zL:!u2SU]m{y4CB!>u(S0$F!viw-m4-3/e^sR+6fwKfBz\Ftv2#s'VzxwUG&WNp04!1 j%J
Jul 8, 2024 17:54:03.324671984 CEST	1236	IN	Data Raw: 86 e8 43 42 37 85 e0 63 08 a9 c7 47 ad 3e 54 7c 64 39 3d d3 f0 0d 7e 3c 79 8b cd c5 9d e3 3c c4 04 83 97 07 4b c3 04 9b 65 a3 03 38 7e fc 05 e1 c3 0f 2f 40 f4 a3 27 84 1f 4f fe 01 c6 6b f2 9e 5a b2 fc 99 e4 78 c3 ec d2 d2 f9 b1 70 43 b8 78 f1 02 Data Ascii: CB7cG>T\|d9=~<y<Ke8~/@'OkZxpCxD^A)_+L_Zjt{dac\GHYyfN6$$qS\ew$.c4D:=->Pr:r,AK~S5<,<9QBr~~(r
Jul 8, 2024 17:54:03.329679012 CEST	1236	IN	Data Raw: 8d 62 32 f8 28 47 19 b5 58 18 5b b4 e8 da eb 51 30 62 e8 d4 5b 8e 3b 55 30 96 c8 a6 8e 2b b0 9b be 4c cf 3f 42 a4 bd a0 21 e6 71 eb 50 8e 79 6a e3 68 96 cc d5 a1 2a 01 bf 43 c1 05 4f 87 d2 c4 0f 6d 09 7f b6 57 27 38 87 f9 cc 0f 3a 56 34 42 51 7c Data Ascii: b2(GX[Q0b[;U0+L?B!qPyjh*COmW'8:V4BQ\|E=D>%`:((~%j^MoQjQpLvk?r [dV++t0:>PmZ{CJ1DzyZ+cDqZ2RlhKFO#ViC#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	61352	208.91.196.253	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:54:02.868577957 CEST	385	OUT	GET /__media__/fonts/montserrat-medium/montserrat-medium.woff HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive Origin: http://ifdnzact.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:54:03.324584961 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:53:52 GMT Content-Type: application/font-woff Content-Length: 33316 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-8224" Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 77 4f 46 46 00 01 00 00 00 00 82 24 00 13 00 00 00 01 26 88 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 a8 00 00 00 1c 00 00 00 1c 86 39 f0 ac 47 44 45 46 00 00 01 c4 00 00 00 4d 00 00 00 68 06 21 07 01 47 50 4f 53 00 00 02 14 00 00 2a cb 00 00 82 36 c5 fa 25 64 47 53 55 42 00 00 2c e0 00 00 01 9a 00 00 03 24 57 60 3a 43 4f 53 2f 32 00 00 2e 7c 00 00 00 53 00 00 00 60 61 e5 ae a1 63 6d 61 70 00 00 2e d0 00 00 01 89 00 00 01 e2 17 09 75 62 63 76 74 20 00 00 30 5c 00 00 00 3c 00 00 00 3c 0e 59 11 ef 66 70 67 6d 00 00 30 98 00 00 01 b1 00 00 02 65 53 b4 2f a7 67 61 73 70 00 00 32 4c 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 32 54 00 00 46 90 00 00 8b a8 1f 92 91 ac 68 65 61 64 00 00 78 e4 00 00 00 36 00 00 00 36 15 9e 06 99 68 68 65 61 00 00 79 1c 00 00 00 20 00 00 00 24 0f ac 07 51 68 6d 74 78 00 00 79 3c 00 00 02 4a 00 00 03 a4 2e 37 56 bc 6c 6f 63 61 00 00 7b 88 00 00 01 c8 00 00 01 d4 ce bd f0 aa 6d 61 78 70 00 00 7d 50 00 00 00 20 00 00 [TRUNCATED] Data Ascii: wOFF$&FFTM9GDEFMh!GPOS6%dGSUB,$W`:COS/2.\|S`acmap.ubcvt 0\<<Yfpgm0eS/gasp2Lglyf2TFheadx66hheay $Qhmtxy<J.7Vloca{maxp}P name}pgqpostJprepxQ>webf\-hRFSx%=@Py>]aJ5$`&MNuI@Z2(]eAM{F=Y0]OK>m#x}l\m/bq!ImjHeXM[&0]i3(MQ6baetPx"7x^uYg9?Bss<TzW-i}mr?Z?WnU/Se{Z~l=u{k6<Xs{o>^U8_R\|%uxZ_%50tAF/I\|:UWuoN=sWq<~=>5?n[o}7QYfIqUOI8sJJ;uPg~o:
Jul 8, 2024 17:54:03.324599981 CEST	1236	IN	Data Raw: 4f ab 3a d5 8a 5f cd 5e 2b 0a 71 cf 49 fc 0a eb d1 2c b5 2c e7 77 34 50 cf 23 00 b3 35 79 f7 45 51 c7 6f f2 b7 a9 eb e3 a8 75 70 ab e4 67 18 10 dc da 55 ad 7d 1a e7 d1 6f 49 bc a1 d9 96 50 ef 63 05 d7 eb 55 54 df c1 35 de 49 1c 1d 77 eb 83 f3 a6 Data Ascii: O:_^+qI,,w4P#5yEQoupgU}oIPcUT5IwZ5P~Ww&f#G_~gWRZ e>~wlT>mpgevGO?Y{3{]O-t}mw&YwRzClO^u`o7jN~6sd4{gU^,'n1
Jul 8, 2024 17:54:03.324616909 CEST	726	IN	Data Raw: 6b 67 f3 ac ed ec cf b9 9d 43 d0 48 65 e6 15 ad ce 48 78 11 52 dc a8 7d a6 01 75 fd a6 a9 1b 24 8a 16 75 00 34 fa a1 f7 f8 0b b6 46 2f a9 36 d0 58 1d b5 f3 06 68 eb c2 5f e5 e9 f3 42 59 a4 f0 24 7f 1f c8 90 6f 73 6d e7 d5 6c d2 71 16 0a 9d ad 9d Data Ascii: kgCHeHxR}u$u4F/6Xh_BY$osmlq(Y8qtW_3\`tvET}@aa AZ\|Lv-0&jTI=XZ]N^cf%:^[AZ14;8P+^Wb:P7B
Jul 8, 2024 17:54:03.324687958 CEST	1236	IN	Data Raw: 96 41 fd 29 35 dd 7a cc ee 9d 01 2c 1f 04 0d 7d 4a 8e 8c 96 03 bf 13 52 2e 24 06 07 63 b2 de 6a 37 8e ed 9d 7e 4a c5 fd b8 5a 89 16 e3 ba f8 01 50 ea 18 ee 28 94 1e 9a b3 be 52 56 88 16 c3 51 d4 26 69 6d a8 dd 42 a7 1c 6f bd a9 32 8d a1 5e f3 4c Data Ascii: A)5z,}JR.$cj7~JZP(RVQ&imBo2^Lx>F\\dOMe(~saZ}VN1[\_JY~]v^d!UkYf3NHqI!`fF+dr4_?{pX0Jw
Jul 8, 2024 17:54:03.324703932 CEST	1236	IN	Data Raw: 49 4a 4c 1b fa 01 ba bc e0 5a 9f a2 f4 3e ce 88 96 1b c6 87 c3 5e 9f 96 1e c6 73 09 3d 8c 5e 1f e5 9c 1e a1 5c 1b c7 68 60 a4 8b d8 b9 bd 78 b6 31 3c 31 cc 3e 1e e5 dd 4a 15 e0 e8 8e 6a d4 97 69 95 ba 4e 8d 6c d0 ca 98 d3 94 6a 92 8c 83 4b f2 1d Data Ascii: IJLZ>^s=^\h`x1<1>JjiNljKI\E0$&qWV>*-M^+{IL&<-ZM`DOo[8jqht<]-)-2j1+1'9l#WaLKDY;Ctm'E,w\C
Jul 8, 2024 17:54:03.324718952 CEST	448	IN	Data Raw: 79 03 b9 e3 4d 7a b7 3d 2a 4a 93 c2 e2 c6 3b e9 fd ee d4 6f 90 ee 46 cd d8 b4 9e eb ce 4c 9e 9f 12 bb e8 04 29 cd f2 c2 41 3c 3d 90 61 47 29 b4 f4 39 ec cd 30 bd 1e 27 8d 05 ed 2d e9 3c 22 73 c6 99 c5 be e4 d6 6f 2c 2b bd df 64 cb 06 5c 4e ef 8d Data Ascii: yMz=*J;oFL)A<=aG)90'-<"so,+d\N)_t}2Eb1q$!>Y[.uG$D!38QZjo^V-sq8~I[IFf/RLR+u$[#k>QIU\|GjFO'
Jul 8, 2024 17:54:03.325054884 CEST	1236	IN	Data Raw: 2d f4 63 9b 44 46 a0 07 87 d0 1f 2d ba 91 6d 1c 61 8c 86 48 e1 27 51 97 8b f8 3c c1 08 7e d3 8f 07 21 67 49 b4 e5 31 f4 63 bd b1 42 30 0f af 10 ed 3f 82 16 5d a1 85 ba 03 fb bb b4 98 74 5a bb 7a 07 66 a4 53 c0 b0 69 e7 71 3c 7f 49 ec ec fa 04 f0 Data Ascii: -cDF-maH'Q<~!gI1cB0?]tZzfSiq<I2}dCV~(-\|Ax6T-On.NV9:z7$Ji(#c-B>Ii(tYg}'o,Lo]y`@&)J_f8#Y-S67{
Jul 8, 2024 17:54:03.325079918 CEST	1236	IN	Data Raw: ae 6d 3a 65 bd 1d 3f 7a b8 c9 b7 25 67 f7 2d cf 66 41 91 79 30 53 be 4f 1b 53 8e e1 9f a9 76 1d af 6e e3 29 56 1d 9f bb ce 1d ef fa a6 d8 48 99 cb 19 16 4a 65 74 c2 34 57 a5 d9 48 fe d8 aa 0e 40 a3 68 54 bb c0 43 0f d0 72 78 50 a4 6d 37 67 db b3 Data Ascii: m:e?z%g-fAy0SOSvn)VHJet4WH@hTCrxPm7g+v06+brcX~4NOhuP\| czb%\|!#;IW#dv?=2'Rv^}\|nYi]Vj=V\kolgNk*}8$Ul\|fl6]d5pr}>
Jul 8, 2024 17:54:03.325095892 CEST	448	IN	Data Raw: 61 48 a5 c1 85 6c d9 f2 de d6 7b b0 c6 82 a9 bf 0b 35 ac ab 3f 26 f6 f0 99 dc 32 e8 b6 a9 07 d0 1f e6 b3 86 1c a1 86 ed 88 72 1c 8b c7 2b 0f 78 8f 30 7b 2c 7f e5 63 42 7d 91 ff 53 72 11 ef df 63 a2 a5 a0 bd c4 ec 6c d7 c9 b8 a2 e6 99 78 5e a1 9a Data Ascii: aHl{5?&2r+x0{,cB}Srclx^6%+ppcTz7kvSo-MoIN@%>^YE:wD;L{f-3<q;6?D1{Xx~BSbHaf/288G#_mb=DuF}-Qw_:vz
Jul 8, 2024 17:54:03.325129032 CEST	1236	IN	Data Raw: 12 57 d7 43 5a 3f 4a 3f fa 2d 93 39 ce 28 c0 73 fa 18 e3 3c 39 16 f4 8d 80 ff f7 7d 3b d6 eb 94 bf 56 e9 bc 3c 03 74 d6 a7 2f 7a 5e 9b 71 c6 45 c6 8c 66 62 cf 9a d5 f7 0f e3 4d 87 73 1a ad 41 8f 4b 62 e1 2b a5 b9 7a b7 f5 83 47 ed 8c 13 5b 2c ef Data Ascii: WCZ?J?-9(s<9};V<t/z^qEfbMsAKb+zG[,>OId)!APW`vzy=QZ&D[%9f$G"Eks4*eKd_%g$=hv8^a}v30O8~5_Nm\Nm$7"
Jul 8, 2024 17:54:03.329775095 CEST	1236	IN	Data Raw: 59 e9 16 08 6f f5 dc 41 ae 51 7d 35 0b 87 6f 0f d8 69 b3 e9 2c 61 db 0f cc f7 52 ed 5c d3 c8 b5 ff 9a 7f 2c bc c5 ec ae 7c c6 9a 4d ce aa 87 19 cb da f4 42 6c 24 28 af 8b 39 c9 31 ae 1f 77 4b 32 05 99 29 12 d2 97 d1 27 06 0f 12 f3 d4 80 ab b7 99 Data Ascii: YoAQ}5oi,aR\,\|MBl$(91wK2)'?g[5nn#23>hPl['iy=I:r+''.]nyN+gpfCFf\0r2y'fU`]k4`O,z(6XW6V8j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	61353	208.91.196.253	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:54:02.923093081 CEST	297	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:54:03.368721962 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:53:52 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Mon, 22 Jul 2024 15:53:52 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 30 f2 00 2c c1 00 2c 37 03 90 81 f9 8f 29 b2 13 3b 91 25 a0 9b ae dd a1 ab d6 7a bc 0f e7 7c b7 4e fd b0 ab 8a 28 f1 09 c8 13 96 00 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c [TRUNCATED] Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0P%@a@a0@a0P0P(P(P((@a@a0@a0P0P(P(P((@a@a0@aPeaLt[=ul=HhOnNc=e{l[,lu_cnk,n;~'^a$sbV&aqcm3Ts*l#zXtH+8c/BH1>CXHay/AIl2g}s/Q8{.;R91oeGo-V:;u$5'.lW:Q\v_:z4',l]2z4'e,~O]%>\|v_2U}8u=hL4$7aj;eMhL\>',/]I,{}a91\|Jz
Jul 8, 2024 17:54:03.368772984 CEST	1236	IN	Data Raw: b1 73 e2 d5 85 ed aa 5b 43 07 31 c7 b0 d3 f6 53 17 56 dd 8c e8 20 e6 18 96 72 88 08 4b e8 20 e6 18 96 f8 01 7c 65 61 db 1a 97 d0 8b 98 d7 b0 f2 73 62 f8 8c 1a 3f 6a d3 c2 07 f0 95 33 ce 55 85 55 39 23 1e fd 63 98 c5 54 ba 3f 16 93 15 b6 b5 82 34 Data Ascii: s[C1SV rK \|easb?j3UU9#cT?4JYA)O(W.:+FOQX3DWsn]{d^Va4\>gDbvU1aEjass+e9<lNTX3KVaV\|
Jul 8, 2024 17:54:03.368788958 CEST	1236	IN	Data Raw: 25 2e ef 57 dd a0 c2 fa 1c c0 aa e8 eb 95 1b c5 d4 5b fa 3a 36 49 9f c6 4e 1c c7 e2 da be 36 5d 2d 64 90 a8 9a 5d f2 ed da c6 e2 aa 17 e6 75 3d 7d 75 9d 7f 66 3b cf b2 a2 7d d2 e7 62 71 d3 a3 b0 1e ad de d5 d4 97 a3 98 43 58 c1 c6 de 5f 79 c4 e0 Data Ascii: %.W[:6IN6]-d]u=}uf;}bqCX_y:RHn\nv[U+,UnCX9r}K5G.ek8}`]~y/GXTW=)l`c~yq,%+,~Oaxpz[5$%4
Jul 8, 2024 17:54:03.368803978 CEST	1236	IN	Data Raw: 10 0f 13 06 c6 10 88 d7 f8 3a 4a d8 8a 06 12 02 e1 82 0f 92 73 94 30 94 63 08 c4 a9 02 ec 34 61 e8 40 23 10 49 20 9e a0 e6 0c 61 28 c7 10 88 c3 05 d8 2b 84 a1 1c 43 20 f8 1c 32 27 09 43 39 86 40 01 76 2f 61 60 0c 01 be ee 25 0c e5 18 02 05 d8 ad Data Ascii: :Js0c4a@#I a(+C 2'C9@v/a`%10HE10t7(!~/CZwho[JeGc`G}"(l]P!Pu]6Q!P +1J#fKH>g
Jul 8, 2024 17:54:03.368820906 CEST	1225	IN	Data Raw: 21 87 bd da 0a 73 37 85 3d e4 60 30 84 2d 19 3d e1 b2 c3 be 73 8c 65 41 0e 43 20 87 35 1a d1 1d 5f d6 11 df c5 12 16 bd 8c cc 4b 06 64 32 9d 08 c2 40 d8 e9 4f 49 cc d3 f4 5c 4e 7f 3d 7e fd 53 11 66 c7 15 45 47 ac e6 d2 89 20 0c 84 9d d6 88 89 2d Data Ascii: !s7=`0-=seAC 5_Kd2@OI\N=~SfEG -e71NqEa\eUtb!&,4Bnv"lr)YcIb&Y7/5aQ.rd"}5[tDNkR^@&v.;x&3Z5"SsR"Q}
Jul 8, 2024 17:54:03.368834972 CEST	1236	IN	Data Raw: 3e 65 e5 c9 bd c9 8e cf 7c 56 11 08 00 62 c7 b4 4d d4 95 01 7a 6d b3 98 cb f9 bc 48 8c fe ec 4a 4b 21 17 9e c8 9e 79 e6 f2 df 10 3a 11 12 11 8d e7 c3 1a 51 ec 3d 7c ac fb 6f d2 26 ed 6e 0a 0b df ff 2c 5d c2 16 37 40 ec 16 0b 64 07 64 00 9d 08 c0 Data Ascii: >e\|VbMzmHJK!y:Q=\|o&n,]7@ddPZv~T",P=zwk/vF#+pv,3aq%laub6TKq5a)1{Nuck6qDLQ98V;DT"fnn
Jul 8, 2024 17:54:03.368860960 CEST	1236	IN	Data Raw: 24 89 8a 30 b3 4d 4c 2d b1 2a d5 67 75 c0 d1 3d 4a d1 32 fb 8c 5f 2b a7 bd a8 b0 29 f8 88 5f 25 64 15 61 c4 9b e3 59 97 e7 d8 b2 25 62 46 d8 76 10 c4 94 3e 49 2d 02 42 e4 91 9f 03 b2 65 58 fc 5e 6a 2e c6 83 3f e1 17 13 c8 4a ca 0e bf 6e e9 e3 10 Data Ascii: $0ML-*gu=J2_+)_%daY%bFv>I-BeX^j.?JnuvvOJ_`1DT].])Ya-@?#Ov'Q>$1vCR5I%SaIK,\|hDw(&yL'u~Qd,K;Y%(LIc\|!M0
Jul 8, 2024 17:54:03.368875027 CEST	448	IN	Data Raw: d6 5d 7b a9 93 cb 4f 20 ac e5 eb 3b 41 8c 89 7b 09 b5 84 42 90 65 4a d1 54 0c 2b 99 ef e3 0a 62 a3 9b 61 2a f8 65 69 89 39 e9 e5 4e d0 06 a3 ef 81 a8 55 3b 62 ac 10 67 54 fd 17 83 f1 14 c2 b6 e3 34 71 af 17 0f a2 2d 9f a2 c2 f7 6f 72 4e 9e a3 eb Data Ascii: ]{O ;A{BeJT+ba*ei9NU;bgT4q-orN8G7!_eulF0\fCY,XqN!EQuXbf2\|+^es01eB&\|(55fLhs8uU(Y;('3lVT$5,UDnH)
Jul 8, 2024 17:54:03.368890047 CEST	1236	IN	Data Raw: 5b 8f eb e8 cc 5a 22 44 f7 a6 a8 9e 4c d9 41 98 ff 0d f2 88 db 82 c6 b8 18 86 d0 23 44 ed 05 73 22 f2 21 cc 6b 9a cf 6a 25 91 c9 0d a1 ee 50 3f 77 d6 37 7e 1a 61 d9 bf 7e 6f d2 44 ca e5 1f 97 91 08 aa 54 c7 3e 53 bb 19 a1 99 82 a4 27 df b7 d5 4a Data Ascii: [Z"DLA#Ds"!kj%P?w7~a~oDT>S'J=/WIG1+DKSadGrOb{[i=#w>krP1aMK'RtknQUsM"Z4&h:[wkKN"a{!l?:z
Jul 8, 2024 17:54:03.368901968 CEST	224	IN	Data Raw: f1 bf a2 9a ea bb 09 0e f2 70 73 33 19 76 82 a3 e3 cf ec e7 5c 07 7d 6b bb 38 25 17 ed dd d3 00 77 a5 45 87 b7 61 e0 43 00 5c 4c c7 d8 2c 51 50 82 e6 7d 40 7e 5b e4 4c 23 65 6f c3 b5 f4 30 bd bf ce 35 7a f0 74 43 97 23 3d c7 99 81 c0 03 84 ed b9 Data Ascii: ps3v\}k8%wEaC\L,QP}@~[L#eo05ztC#=,,+Kz$i(bDq\N FQZF!^(:49yUb,u =kQ{M[,Qfq{A116"HR6CB.+dA-?E,Ig
Jul 8, 2024 17:54:03.379868031 CEST	1236	IN	Data Raw: 45 d8 c1 94 98 ab 10 93 bd 48 92 c7 f0 a2 2c 91 c1 b2 f8 84 33 4d be cc b5 2e 7d bc a6 a3 ce e6 5a a6 c3 e2 35 03 dd ec c9 77 94 0e d7 d2 27 d4 33 fd ab 70 57 ac da 89 3a 08 3c db b9 ae fe 01 c2 f6 ed 9b 87 3c 1e 75 96 79 61 e4 38 a6 57 c6 75 ea Data Ascii: EH,3M.}Z5w'3pW:<<uya8Wu_+7<.tPG5f2eH/fA3l)1#!Tssy$%i_uvRPU3ZC(iMkmHm\|L<#%zhC6C4A1C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	61354	208.91.196.253	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:54:03.306504011 CEST	301	OUT	GET /__media__/pics/28905/res-arw.png HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:54:03.768098116 CEST	672	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:53:52 GMT Content-Type: image/png Content-Length: 346 Last-Modified: Tue, 04 Jan 2022 14:44:28 GMT Connection: keep-alive ETag: "61d45d4c-15a" Expires: Mon, 22 Jul 2024 15:53:52 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 1d 08 03 00 00 00 f8 b5 4e 88 00 00 00 45 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 57 d4 34 b7 00 00 00 16 74 52 4e 53 00 51 a8 e4 9d fa 21 30 f4 13 ba 01 72 90 da 3e 7e 03 c7 5f 0a 88 8d 4f 23 a5 00 00 00 ae 49 44 41 54 28 cf 85 93 e1 12 83 20 0c 83 11 41 d4 82 0a 6a de ff 51 37 b7 dd 4e a4 94 ef 77 ae 85 34 51 e7 7e a8 06 2b c6 30 34 34 33 80 b9 8b 92 c4 e1 a2 df 26 41 a3 3f 1a 58 bd 92 3c e6 62 f1 b5 51 e6 af c1 68 1c a7 a0 c1 e2 46 62 5d 30 c8 e0 5c c8 c7 80 75 21 a0 e0 e1 02 4d 23 18 32 17 e8 04 cb dd 05 7e 4c ee 82 a9 48 ac 76 e2 63 b2 37 07 4e 90 f6 a8 a8 6e 0c ec e3 14 9a db 40 fc ad 7f 1b ca 84 cd c5 37 a9 88 ef 6d 03 1f 99 24 5c ef 4b 27 c7 e9 4d 5c 1a a1 54 6a 47 ab 25 47 df ec 9a 5f fc a1 a2 5c 58 6a 55 fa 05 63 50 20 91 7b 34 90 ee 00 00 00 00 [TRUNCATED] Data Ascii: PNGIHDR"NEPLTEGpLW4tRNSQ!0r>~_O#IDAT( AjQ7Nw4Q~+0443&A?X<bQhFb]0\u!M#2~LHvc7Nn@7m$\K'M\TjG%G_\XjUcP {4IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49723	208.91.196.253	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:54:07.706357002 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	61362	208.91.196.253	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:54:11.516233921 CEST	324	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:54:11.988857031 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:54:00 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Thu, 16 Feb 2023 20:41:15 GMT Connection: keep-alive ETag: "63ee94eb-20f3" Expires: Mon, 22 Jul 2024 15:54:00 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 2a 2f 0d 0a 76 61 72 20 73 68 6f 77 50 6f 70 3d 31 3b 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 53 65 61 72 63 68 54 65 78 74 28 74 29 7b 74 2e 76 61 6c 75 65 3d 22 22 2c 74 2e 73 65 6c 65 63 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 72 65 70 6c 61 63 65 53 74 72 69 6e 67 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 65 2c 6e 2c 22 67 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 75 62 6d 69 74 53 65 61 72 63 68 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2b 3d 67 65 6e 65 72 61 74 65 42 72 6f 77 4c 6f 67 55 52 4c 28 22 73 72 63 71 72 79 22 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 74 5d 2c 30 3d 3d 64 2e 65 6c 65 6d 65 6e 74 73 2e 71 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 7c 7c 22 45 6e 74 65 72 20 4b 65 79 77 6f 72 64 [TRUNCATED] Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function change
Jul 8, 2024 17:54:11.988917112 CEST	1236	IN	Data Raw: 53 74 61 74 75 73 28 74 29 7b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 61 64 64 62 6f 6f 6b 6d 61 72 6b 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 41 73 48 6f 6d 65 50 61 67 65 28 74 2c 65 29 7b 72 65 Data Ascii: Status(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate(){var t=new Array("Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"),e=new Array("January","February","March","April
Jul 8, 2024 17:54:11.988951921 CEST	1236	IN	Data Raw: 43 6c 69 63 6b 55 52 4c 28 6c 69 6e 6b 73 5b 69 5d 2c 22 6f 6c 6f 64 22 29 2c 6c 69 6e 6b 73 5b 69 5d 2e 69 6e 6e 65 72 48 54 4d 4c 3d 74 65 6d 70 44 61 74 61 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 6f 64 69 66 79 4b Data Ascii: ClickURL(links[i],"olod"),links[i].innerHTML=tempData)}catch(t){}}function modifyKeywordClickURL(t,e){return t.href=t.href+generateBrowLogURL(e),"undefined"!=typeof prctu&&0<prctu.length&&(t.href=prctu+getEscapedString(t.href)),!0}function gen
Jul 8, 2024 17:54:11.988984108 CEST	1236	IN	Data Raw: 73 2e 67 65 74 4c 6f 63 61 6c 54 69 6d 65 5a 6f 6e 65 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2b 74 68 69 73 2e 66 64 2b 74 68 69 73 2e 67 65 74 53 63 72 65 65 6e 48 65 69 67 68 74 28 29 2b 74 68 69 73 2e 66 64 2b 74 68 69 73 2e 67 65 74 53 63 72 Data Ascii: s.getLocalTimeZone().toString()+this.fd+this.getScreenHeight()+this.fd+this.getScreenWidth()+this.fd+(this.isCookieSupported()?1:0).toString()+this.fd+this.getABPStatus()),this.browserdata},this.getMousePositionData=function(){return this.fd+m
Jul 8, 2024 17:54:11.989017963 CEST	1236	IN	Data Raw: 5f 54 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 7d 63 61 74 63 68 28 74 29 7b 65 3d 30 7d 72 65 74 75 72 6e 20 65 7d 2c 5f 77 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 30 3b 74 72 79 Data Ascii: _Top.document.body.clientHeight)}catch(t){e=0}return e},_ww:function(){var e=0;try{"number"==typeof this._Top.window.innerWidth?e=this._Top.window.innerWidth:this._Top.document.documentElement&&this._Top.document.documentElement.clientWidth?e=
Jul 8, 2024 17:54:11.989048004 CEST	1	IN	Data Raw: 75 Data Ascii: u
Jul 8, 2024 17:54:11.989082098 CEST	1236	IN	Data Raw: 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 65 77 65 62 6b 69 74 22 29 26 26 28 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 62 6c 75 72 28 29 2c 74 68 69 73 2e 5f 54 6f 70 2e Data Ascii: serAgent.toLowerCase().indexOf("applewebkit")&&(this._Top.window.blur(),this._Top.window.focus()),_npW.Init=function(e){with(e)Params=e.Params,Main=function(){void 0===window.mozPaintCount\|\|(t=window.open("about:blank"))&&t.close();var t=Param
Jul 8, 2024 17:54:11.989119053 CEST	1236	IN	Data Raw: 6f 77 50 6f 70 26 26 28 73 68 6f 77 50 6f 70 3d 30 29 2c 21 31 3b 31 21 3d 73 68 6f 77 50 6f 70 7c 7c 72 65 6e 64 65 72 46 41 43 50 28 74 29 7c 7c 73 68 70 70 28 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 68 70 70 28 Data Ascii: owPop&&(showPop=0),!1;1!=showPop\|\|renderFACP(t)\|\|shpp(t)}catch(t){}}function shpp(t){if("undefined"!=typeof __pp&&1==showPop&&!renderFACP(t))try{if(t\|\|((t=window.event\|\|window.Event).cancelBubble=!0),t.button&&2==t.button)return;try{var e=!1;i
Jul 8, 2024 17:54:11.989147902 CEST	123	IN	Data Raw: 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 42 72 6f 77 73 65 72 44 65 74 61 69 6c 73 28 29 7b 72 65 6c 70 6c 61 63 65 41 6c 6c 41 4c 69 6e Data Ascii: vigator.userAgent)}catch(t){}return t}function setBrowserDetails(){relplaceAllALinks&&relplaceAllALinks(/(\/trf\|\.cfm)\?/)}
Jul 8, 2024 17:54:12.162650108 CEST	389	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:54:12.269316912 CEST	329	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:54:01 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Mon, 22 Jul 2024 15:54:01 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Jul 8, 2024 17:54:12.269443035 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((
Jul 8, 2024 17:54:12.269536018 CEST	1236	IN	Data Raw: a2 c2 14 56 7e 4e ec 57 58 1b 33 a2 c2 14 56 7e 4e ec 57 d8 4e 61 28 ec aa 39 b1 57 61 8d cc 88 7e 5b 5f 46 2b 13 4f bf 39 31 ac 98 c2 14 96 b8 5f fa 14 b6 6b 66 c5 16 f2 28 60 d5 cc 7e 39 94 29 6c d9 cc 82 f9 3b 1d 65 b4 b3 61 be 96 28 ac 9d ef Data Ascii: V~NWX3V~NWNa(9Wa~[_F+O91_kf(`~9)l;ea(\|kvsbX.),q\,+ZwqM8]K`q4#z 0'smsmS+*eb91'jj=\|Jt8'O"W.L.:\u$~8Ur#9T9m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	61363	208.91.196.253	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:54:12.169733047 CEST	393	OUT	GET /__media__/pics/28905/res-arw.png HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:54:12.626979113 CEST	672	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:54:01 GMT Content-Type: image/png Content-Length: 346 Last-Modified: Tue, 04 Jan 2022 14:44:28 GMT Connection: keep-alive ETag: "61d45d4c-15a" Expires: Mon, 22 Jul 2024 15:54:01 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 1d 08 03 00 00 00 f8 b5 4e 88 00 00 00 45 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 57 d4 34 b7 00 00 00 16 74 52 4e 53 00 51 a8 e4 9d fa 21 30 f4 13 ba 01 72 90 da 3e 7e 03 c7 5f 0a 88 8d 4f 23 a5 00 00 00 ae 49 44 41 54 28 cf 85 93 e1 12 83 20 0c 83 11 41 d4 82 0a 6a de ff 51 37 b7 dd 4e a4 94 ef 77 ae 85 34 51 e7 7e a8 06 2b c6 30 34 34 33 80 b9 8b 92 c4 e1 a2 df 26 41 a3 3f 1a 58 bd 92 3c e6 62 f1 b5 51 e6 af c1 68 1c a7 a0 c1 e2 46 62 5d 30 c8 e0 5c c8 c7 80 75 21 a0 e0 e1 02 4d 23 18 32 17 e8 04 cb dd 05 7e 4c ee 82 a9 48 ac 76 e2 63 b2 37 07 4e 90 f6 a8 a8 6e 0c ec e3 14 9a db 40 fc ad 7f 1b ca 84 cd c5 37 a9 88 ef 6d 03 1f 99 24 5c ef 4b 27 c7 e9 4d 5c 1a a1 54 6a 47 ab 25 47 df ec 9a 5f fc a1 a2 5c 58 6a 55 fa 05 63 50 20 91 7b 34 90 ee 00 00 00 00 [TRUNCATED] Data Ascii: PNGIHDR"NEPLTEGpLW4tRNSQ!0r>~_O#IDAT( AjQ7Nw4Q~+0443&A?X<bQhFb]0\u!M#2~LHvc7Nn@7m$\K'M\TjG%G_\XjUcP {4IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	61364	208.91.196.253	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:54:12.173376083 CEST	381	OUT	GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive Origin: http://ifdnzact.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:54:12.637170076 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:54:01 GMT Content-Type: application/font-woff Content-Length: 17312 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-43a0" Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 a0 00 10 00 00 00 00 73 60 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 6c 00 00 00 1c 00 00 00 1c 69 99 f4 2b 47 44 45 46 00 00 01 88 00 00 00 1e 00 00 00 1e 00 27 01 0d 47 50 4f 53 00 00 01 a8 00 00 0c c5 00 00 16 c0 c0 0d d5 ee 47 53 55 42 00 00 0e 70 00 00 00 20 00 00 00 20 6c 91 74 8f 4f 53 2f 32 00 00 0e 90 00 00 00 54 00 00 00 60 a6 e9 3d 09 63 6d 61 70 00 00 0e e4 00 00 02 75 00 00 03 86 c7 ce be ea 67 61 73 70 00 00 11 5c 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 11 64 00 00 28 0b 00 00 47 38 61 9a 3f 94 68 65 61 64 00 00 39 70 00 00 00 34 00 00 00 36 09 88 d5 e9 68 68 65 61 00 00 39 a4 00 00 00 21 00 00 00 24 07 97 04 27 68 6d 74 78 00 00 39 c8 00 00 02 ad 00 00 04 1a 59 f7 2d 9c 6c 6f 63 61 00 00 3c 78 00 00 02 09 00 00 02 10 b1 e6 c4 00 6d 61 78 70 00 00 3e 84 00 00 00 1f 00 00 00 20 01 50 00 37 6e 61 6d 65 00 00 3e a4 00 00 02 df 00 00 06 99 17 bc cd 9c 70 6f 73 74 00 00 41 84 00 00 02 11 00 00 [TRUNCATED] Data Ascii: wOFFCs`FFTMli+GDEF'GPOSGSUBp ltOS/2T`=cmapugasp\glyfd(G8a?head9p46hhea9!$'hmtx9Y-loca<xmaxp> P7name>postA8Y,prepChh<'d:x[l\vb{l7ho+.!Qp1OPP%hUUUEMpQZA1I !C@==:cBP5:>9{^k)wJx)R~gO>m~6BJ:tIY_dq/mxel\|icKclzjo%;^x}olegOVV=\5]z_ono;555nO/ctR4tKTCmH]nT::tjAJwU$![yJ+u)IH7IH%}nZef/ ?(OA7)qpf#xxMO;jq77DsO@tD1Et0F`fd9wIXFafxlC[0F0
Jul 8, 2024 17:54:12.637190104 CEST	1236	IN	Data Raw: 44 dd ee 45 e9 61 dc 63 28 f3 38 3c 47 b9 6a d1 ec 05 2c 04 99 99 84 53 82 59 a7 e4 3e ac 74 b8 ef 32 73 9a 59 a7 e0 96 83 47 12 0e f3 70 58 94 61 f7 8a 84 dc e7 d0 f4 39 14 0a fc 77 01 85 96 51 e8 02 0a 45 51 28 86 42 19 70 bc 03 8e 14 56 c3 28 Data Ascii: DEac(8<Gj,SY>t2sYGpXa9wQEQ(BpV(G9X`-J!G4Bap["8&`KfY3k00d'8<YQuk{"333J/<y6A>4sDCs9jfV4s%>
Jul 8, 2024 17:54:12.637206078 CEST	1236	IN	Data Raw: c1 69 10 bc 67 55 37 6b 7c c1 66 8e 63 f7 57 c3 fb 12 68 cc 1e 71 1a ee 09 50 ed 83 7b 1a ee df 06 5d 0f e8 e6 ed 2a dc 0f c2 59 e5 3f c3 ca 27 d1 3c 85 6f fa 43 a9 d3 3e a3 8d 48 f2 f6 e4 84 ad b4 46 83 04 08 92 76 77 37 79 9b d7 fd 63 58 f7 66 Data Ascii: igU7k\|fcWhqP{]*Y?'<oC>HFvw7ycXfF~]mw(7(8CaW`kub-X&r6ZEkI/c#+p~oxjyu,.yB2KPa~M#cN-GE_T1Gha^l6
Jul 8, 2024 17:54:12.637300968 CEST	1236	IN	Data Raw: e0 5c a7 bb ca 01 ee 4f f0 74 84 be 92 3c 22 82 7c 5c bd cc 9b 61 64 0d 6b fe 0c 4c 26 6d 67 9c b5 e7 ad 79 a2 f0 aa dd 63 a2 a0 3a 41 cc f9 ec fb 39 d3 9b 35 11 75 4d 5a 09 97 d5 42 c0 3d 46 0f 1a b1 3d e8 ff 67 2d 49 84 6e 44 c5 0f f4 0d 91 39 Data Ascii: \Ot<"\|\adkL&mgyc:A95uMZB=F=g-InD9N--SO7S"SDkQ{g:/^-k>{I.sfmg$BTiv\NuK//?[A-?-G\|\|zW\|\|_^qv>I!(&e^H
Jul 8, 2024 17:54:12.637316942 CEST	1236	IN	Data Raw: bb fc 6b fd bb fd eb 03 a6 c9 5b 02 66 05 74 07 4c 09 38 10 34 47 f8 77 ad a2 76 0c 1c 5d b5 f5 00 fe b7 75 d5 d6 13 f8 df d6 55 65 88 87 e7 c2 6c 97 49 11 f9 1e f1 a8 b8 70 8e 1b 6e d4 ea cc 0a a5 51 0f 89 26 b3 d1 20 57 28 65 5a 9d 3c 18 7c 5c Data Ascii: k[ftL84Gwv]uUelIpnQ& W(eZ<\|\drDwQi%smna72-k@@o7.;pF<p8^&GT\bh84`J]\|.j-e)\|&z}ek.>O4:\|@
Jul 8, 2024 17:54:12.637332916 CEST	1236	IN	Data Raw: a6 41 06 07 3d 82 71 76 75 c2 b9 99 b6 1e ce 8a 73 5d a9 85 e8 d7 5a 2f 69 f6 ac 30 53 b1 39 28 bd 91 67 f3 47 fa a3 0e 67 25 cc 82 6e 09 02 a0 5d 6d 20 ee e4 22 e7 42 f7 20 5c 3e 06 e4 91 70 53 b8 02 59 90 b7 e5 d3 7d fb 0f ec 47 1c 09 dc c3 c4 Data Ascii: A=qvus]Z/i0S9(gGg%n]m "B \>pSY}GK5%g}W0(DXq",7#!])'DoAm2nDF.\==4Q3;\|Fv;fQd&+Y;6S"tQ8(/"'h=DjYEYw
Jul 8, 2024 17:54:12.637351036 CEST	1236	IN	Data Raw: 89 36 82 bd 83 69 63 71 ef 69 e1 e7 33 bd 1b 1b 2c b0 5e 58 76 e0 e4 83 dd b0 59 58 6d e1 c0 66 45 d8 17 70 1e fa 8b 70 6f 1a 0c 1a a0 fa fc 19 e1 b3 8d c2 67 67 04 78 96 9e 0f 28 0d 74 1c 2f 48 b2 e7 4d c5 8e d7 8c 02 0d 6f 80 b8 95 27 57 6c 3b Data Ascii: 6icqi3,^XvYXmfEppoggx(t/HMo'Wl;c?H+,(P76iCJ%4A==p#Du&-!%'0tw\|p5=\"\#,yBtlm9[T(.AujjWH1.
Jul 8, 2024 17:54:12.637558937 CEST	1236	IN	Data Raw: c7 5b fb c0 f4 cc e6 38 ad dc 37 d4 d3 4b 2d fa 60 38 8b 3e 80 e9 a7 0f 3b 57 20 73 d3 c0 9e 6a f9 39 54 11 15 94 94 d7 d3 92 91 d1 bd 1e 1e ff 2e 44 a3 9d 93 39 b3 fa ce bc e3 c7 e7 51 fa b2 70 7f 92 f1 7c 85 7b 1b 2e 1a 1a b5 e8 3d 91 4a 38 d1 Data Ascii: [87K-`8>;W sj9T.D9Qp\|{.=J8tn);/]8*$P{o=on{AS b>'{3gNM_i8<o{:K_3g/s)""]n`ixm<c6Y1
Jul 8, 2024 17:54:12.637574911 CEST	1236	IN	Data Raw: bb a0 46 33 c1 cf 2c 9f 21 d6 12 48 0a 6c 24 67 59 7c 8f 1a 09 1b 85 0b e4 6c 7b 3b 5b 67 2c 6c 84 55 e4 55 69 cf d9 4e 6b 13 e9 d9 97 d2 b4 67 6b 63 e3 d6 c6 ba a8 d4 c8 c8 d4 28 f2 6a fd e6 ba ba cd 33 62 f5 e3 f5 7a 89 47 35 44 4e b6 23 87 dc Data Ascii: F3,!Hl$gY\|l{;[g,lUUiNkgkc(j3bzG5DN#YMRTn}=\|;mhe@,^xTWV^_NFF$'fF8TD(5LSON+ uSjGF*}FU14O<;?)_ONYR[>
Jul 8, 2024 17:54:12.637588978 CEST	1236	IN	Data Raw: f7 6c 10 bc 14 ba 7f 76 78 47 19 3c c5 90 f0 98 d4 3a 83 4c 13 f7 76 30 95 d2 3e 4b 70 8f 33 b8 aa 21 e0 0e e6 ad 33 8a 2a 27 16 0f c2 35 af df e0 0e 93 f0 1d 64 f8 d8 39 d2 19 23 e7 ac 39 4e f8 ac 9f 3a c8 dc 20 5c b3 07 ca 1f ed b9 59 44 82 c8 Data Ascii: lvxG<:Lv0>Kp3!3*'5d9#9N: \YDLvj`::T;Zxd5'qd7p 26`GZuHQP2zO\byeyKuqCF;pYm,4\HlaPfA&1UP+9$
Jul 8, 2024 17:54:12.643646955 CEST	1058	IN	Data Raw: df 83 34 b7 72 3e 78 f2 44 8a 87 3b 07 ee d4 5a 13 8c dc cd 1a 1a b9 cb 60 bc 42 19 b3 23 2b 29 e3 c4 72 4d 90 76 67 c6 ec 13 bf 2d 0a 6c 1d 91 93 e3 39 7b 04 5f bf 53 bb 34 af e3 b8 6c f2 d6 8a cd 1d c7 e0 37 96 15 ba ff 08 1f 94 cf 55 ff 5d cc Data Ascii: 4r>xD;Z`B#+)rMvg-l9{_S4l7U]!z1tqScP5vG1sVp\|~8:Ap-Q~'J hXU;#x`CU?ZMsz2jW&70Kxr[Ye]]~{_2K :

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	61365	208.91.196.253	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:54:12.174024105 CEST	387	OUT	GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive Origin: http://ifdnzact.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:54:12.643018007 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:54:01 GMT Content-Type: application/font-woff Content-Length: 17264 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-4370" Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 70 00 10 00 00 00 00 71 40 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 43 54 00 00 00 1c 00 00 00 1c 6a aa b6 37 47 44 45 46 00 00 37 84 00 00 00 1e 00 00 00 1e 00 27 01 0d 47 50 4f 53 00 00 37 c4 00 00 0b 8e 00 00 13 c6 29 4d 73 4d 47 53 55 42 00 00 37 a4 00 00 00 20 00 00 00 20 6c 91 74 8f 4f 53 2f 32 00 00 01 e8 00 00 00 56 00 00 00 60 a5 bd 5d 40 63 6d 61 70 00 00 04 ec 00 00 02 75 00 00 03 86 c7 ce be ea 67 61 73 70 00 00 37 7c 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 09 78 00 00 29 05 00 00 47 f8 1b fa 03 ac 68 65 61 64 00 00 01 6c 00 00 00 36 00 00 00 36 fa 9a cf bf 68 68 65 61 00 00 01 a4 00 00 00 21 00 00 00 24 07 c7 04 70 68 6d 74 78 00 00 02 40 00 00 02 aa 00 00 04 1a 57 5c 36 b8 6c 6f 63 61 00 00 07 6c 00 00 02 0a 00 00 02 10 c1 de d4 3a 6d 61 78 70 00 00 01 c8 00 00 00 1f 00 00 00 20 01 50 00 38 6e 61 6d 65 00 00 32 80 00 00 02 e7 00 00 06 b4 4e ce 98 3d 70 6f 73 74 00 00 35 68 00 00 02 11 00 00 [TRUNCATED] Data Ascii: wOFFCpq@FFTMCTj7GDEF7'GPOS7)MsMGSUB7 ltOS/2V`]@cmapugasp7\|glyfx)Gheadl66hhea!$phmtx@W\6local:maxp P8name2N=post5h8',prepdhBL_<'d:jxc`d``>X"]?xc`d``dg0e`g& fB0xc`f`@9 EOa>[$$H)00>xm[HTQdf^a)"0#]0M "%a&Q7)H>DDEKDqI:X}SAM?c^Dq\hVP2DFD>Q4:r5APQ/!T5R4Zejom1Z}$q5=.3Cr>qe!Sa%tr7#^#{4@\*q1T0dwrqk\Gq[#w8Y7rd(\|"8NkG3WvvI7&M99/&s
Jul 8, 2024 17:54:12.643062115 CEST	1236	IN	Data Raw: 98 bc 13 08 38 59 4c 30 8b 51 04 78 86 76 1d c2 31 7d c8 7a 2f 0e 33 a3 32 c9 e4 19 07 10 64 6d c4 74 c2 6b 12 d4 4d be 7f 05 75 3a 47 de 96 f9 dc bf 72 ed 48 2e da 0c 1c fe 69 92 60 f2 bb cd 80 be 4c 37 c6 83 ec 35 fe eb c5 73 55 39 63 66 90 2e Data Ascii: 8YL0Qxv1}z/32dmtkMu:GrH.i`L75sU9cf.''6yYyNoX._a_/rqf.0&rov_=#0<}2QNQ4e:@ZocRy&U0NWi61/>JPW[PP,S8/q'4TD
Jul 8, 2024 17:54:12.643078089 CEST	1236	IN	Data Raw: 17 0f f8 24 bf c6 37 f8 01 3f 13 e2 42 5a 28 09 35 e1 44 18 09 53 c1 17 6d 31 25 ae 8b 0d f1 5c bc 0e c5 42 b9 50 39 d4 09 7d 0d dd 86 63 e1 6c b8 12 ae 87 27 11 3a b2 18 29 47 ba 11 3f fa 30 5a 8d 7e 8a 5e 4b a6 b4 22 d5 a4 a6 d4 91 86 d2 4c 9e Data Ascii: $7?BZ(5DSm1%\BP9}cl':)G?0Z~^K"LG$*SP6\|=77X#i{Iikc-`jCkjW}e;NI9O]\p}[o{okzc"x\|`TU;%
Jul 8, 2024 17:54:12.643285036 CEST	1236	IN	Data Raw: 91 71 b8 96 8a ca 84 5a 29 0f 02 04 a3 41 3d d5 27 8a a0 8d e6 72 38 f0 fb b6 de 5d 7f 9f 9f 58 d3 92 3e bd 6e 5a 58 c8 43 a4 aa bb e9 65 7e 71 c5 bc 15 c5 ad 69 c9 f3 b2 dc 1b 5e 42 58 a1 88 97 12 61 4d 42 c0 d2 fe 68 8d 6a 23 e8 79 a8 b4 54 57 Data Ascii: qZ)A='r8]X>nZXCe~qi^BXaMBhj#yTW[k{?mHZiSk X'UgW7-4_;-T[Hm<l QD<$hVHl/RUiiEe[sygdU
Jul 8, 2024 17:54:12.643300056 CEST	1236	IN	Data Raw: f0 38 cc 14 de 13 96 41 62 df 9b 23 fc f5 11 fd 25 c3 5d 89 33 32 11 9d e7 2d f6 ff f3 38 91 9b 80 ff c7 3d f3 07 4a 1b 06 d3 97 ac 27 cf 9f 3f 61 bd 91 f3 6f 84 5a 0c 27 d0 c1 6a 04 7f f8 d2 06 f3 0b 71 0f e8 70 c0 19 7a 20 f3 ad f7 08 4b ac 56 Data Ascii: 8Ab#%]32-8=J'?aoZ'jqpz KVKA ,ys82.\my!lul=O*c1%.I-5?z}aaC-."}w4kq\|0zpEK\|[c{ZC0.}><&<
Jul 8, 2024 17:54:12.643315077 CEST	1236	IN	Data Raw: 98 21 5f 0a ef 25 24 f5 75 09 2f 42 c8 9e 72 8a 63 2e 42 f9 80 fc 84 72 e7 2e 7a 19 29 00 d4 e0 d4 d5 91 29 91 91 29 44 b1 86 3e 45 32 79 19 de 3d 1c cd 9d c3 f1 4c 5e 54 cc f4 88 54 d9 62 e8 4a 0b 72 c4 a0 c9 0f f1 60 b3 a7 90 98 a1 73 c8 92 6a Data Ascii: !_%$u/Brc.Br.z)))D>E2y=L^TTbJr`sju49o#iar\wlm%XW^8}qqD29@Nu6^nHI,%"SI]]WRVX;o5;a/E)EI\|}p`Sg_=\|
Jul 8, 2024 17:54:12.643330097 CEST	1236	IN	Data Raw: 79 34 9a 43 a9 e2 f1 b7 b1 a5 a5 05 9e 82 42 e1 05 21 85 3e b2 1c 86 15 75 88 fa 28 03 8e 53 88 a9 c5 30 24 c6 8b 46 ff f4 90 c2 b2 8e d2 21 c0 88 87 00 e4 a1 d9 76 0e d0 69 77 2d 6d 34 e4 c7 86 14 2d c8 ea 33 a6 bc db 99 95 17 1b bb b4 a3 bf 2f Data Ascii: y4CB!>u(S0$F!viw-m4-3/e^sR+6fwKfBz\Ftv2#s'VzxwUG&WNp04!1 j%JCB7cG>T\|d9=~<y<Ke8~/@'OkZxpCx
Jul 8, 2024 17:54:12.643544912 CEST	1236	IN	Data Raw: 2a e5 9d 68 be 1a 17 9d 52 14 17 bd 8e 43 9f 20 ae d1 cb d6 f0 e2 fc 46 ad e2 ec 7a 9d 16 e1 b5 5a 43 48 c8 46 ea 89 43 9d 56 f8 72 8c 5f b6 ad 33 11 2d 84 2f 3b f1 c9 a5 85 10 38 5d cb 56 fe da 9f 13 07 71 d2 2a b1 31 d9 83 cb 97 ed 09 0a 4a 98 Data Ascii: hRC FzZCHFCVr_3-/;8]Vq1J:lEdu^IgpY{TFxjy=[fH%^{!-f[b2(GX[Q0b[;U0+L?B!qPyjh*COmW'8:V4BQ
Jul 8, 2024 17:54:12.643559933 CEST	1236	IN	Data Raw: 66 83 21 ab 46 18 2a ae b8 b7 da ba 78 b6 88 d6 8f a6 a2 bf f4 0b 64 75 b3 f7 38 c4 0a b6 96 2c aa 75 85 80 ab 59 d3 32 0b ea db da 5a 0f 95 f8 52 ec 4a 4a d6 2f 6e 0b 0e 98 a4 44 cc be ce ce 4b 05 5a b7 c6 98 39 08 71 42 9f e9 ea 14 2a 8f 2e 98 Data Ascii: f!Fxdu8,uY2ZRJJ/nDKZ9qB.b,9[99U]{S&!b,WC'$JCEm:+fw;U\WxG#QoVLi]5Kn$ccS=Sw*:3b{
Jul 8, 2024 17:54:12.643575907 CEST	834	IN	Data Raw: da 53 84 7b a5 44 a9 3d 2f d8 c1 ec 25 8b 51 d0 de 30 db 7b 9b 18 85 5a 1c c7 b0 e4 09 9a 4e 70 8e 45 60 3c 83 65 44 63 79 83 e5 ea 55 a3 72 d5 b4 41 5a 2f a3 8d 2d 9e 5a 0d ff b5 3d 5f ff bb 7d ef be bb ef ef db 66 d7 d7 cf 91 12 d7 6f 41 d4 5b Data Ascii: S{D=/%Q0{ZNpE`<eDcyUrAZ/-Z=_}foA[?"."F[3A7f/oU3"Z(M]azxlrGcSNOsXfLq,9`o+cn<PQ=-'~joz7l
Jul 8, 2024 17:54:12.648298979 CEST	1236	IN	Data Raw: 93 79 5e e9 5a 8d d9 6f a6 d4 e7 02 37 70 ec 4b 6c ac ce 76 85 b1 d8 5f 1a 5b e2 91 e9 38 76 f8 18 f7 24 47 6b 67 b4 bb cf 69 ac ab 67 86 38 94 d0 f5 a1 80 ad ef ed 88 81 6a 0c 2e 8b 9c 71 aa 71 c0 8d c2 b9 01 f9 0c 37 6f 47 ec c6 ae 7d da 19 df Data Ascii: y^Zo7pKlv_[8v$Gkgig8j.qq7oG}Mge7]Z{IIsCXoRm4o^O_#=kUab5:ZxQgf>Q.vE3xctyD\|\<=m`4//

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	61366	208.91.196.253	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:54:12.174597025 CEST	385	OUT	GET /__media__/fonts/montserrat-medium/montserrat-medium.woff HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive Origin: http://ifdnzact.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:54:12.645875931 CEST	278	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:54:01 GMT Content-Type: application/font-woff Content-Length: 33316 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-8224" Access-Control-Allow-Origin: * Accept-Ranges: bytes
Jul 8, 2024 17:54:12.646099091 CEST	1236	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 82 24 00 13 00 00 00 01 26 88 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 a8 00 00 00 1c 00 00 00 1c 86 39 f0 ac 47 44 45 46 00 00 01 c4 00 00 00 4d 00 00 00 68 06 21 Data Ascii: wOFF$&FFTM9GDEFMh!GPOS*6%dGSUB,$W`:COS/2.\|S`acmap.ubcvt 0\<<Yfpgm0eS/gasp2Lglyf2TF
Jul 8, 2024 17:54:12.646142960 CEST	1236	IN	Data Raw: 65 ea 0f 01 f9 ea db 80 22 75 14 b0 5c bd 0e 58 a2 c6 01 85 b8 d2 a0 96 02 c2 84 72 3e 53 82 f3 85 e0 72 45 80 72 b5 02 b0 05 e7 4a d4 06 d4 43 60 25 60 03 f8 5f 29 8e 57 01 aa 88 dd cd 6a 35 a0 18 7c b7 4c ad c1 73 e5 c0 47 05 60 39 fa ba 52 dd Data Ascii: e"u\Xr>SrErJC`%`_)Wj5\|LsG`9RpO5@mk&R=WO/?,Q/65K7#UCOjPU#725lPQ5@PB`8_qB*k6F6wG6Ws
Jul 8, 2024 17:54:12.646157980 CEST	1236	IN	Data Raw: b2 52 6a 65 45 d4 ca 9c 80 56 56 42 ad cc 09 68 65 25 d4 ca 8a a8 95 95 50 2b 5b ae fe 1f a0 08 6d d8 c9 36 3c c0 36 ac a3 9e 5a 16 d0 53 d7 51 4f 75 d8 9e 46 b6 a7 9c ed 69 64 7b ca d9 9e 4d 94 a7 1a a8 a7 96 52 4f dd 42 3d 75 33 f5 d4 62 ea a9 Data Ascii: RjeEVVBhe%P+[m6<6ZSQOuFid{MROB=u3bSG=K)C[V:vub"VE5k5bX!kZ#VN5kkjxyk#[o/(}GR~'(
Jul 8, 2024 17:54:12.646306038 CEST	1236	IN	Data Raw: f1 93 16 96 5b bb 67 10 1e f5 a0 dd 82 a9 bf 0b 3b b1 ff be 85 0a 3c 5d 81 f2 1e b5 25 cd b7 ad 52 8f d3 5b fc b8 ed 19 b1 e5 48 3b 1e e2 88 7a 02 90 cf 9e ae 65 8f ff 5f ce 96 65 c0 cc 13 ea 19 f5 3c f4 52 b1 2c fc 67 f5 8e 3a af de 07 74 a9 2b Data Ascii: [g;<]%R[H;ze_e<R,g:t+y"J^_/wBx~I:n;4(zK6,U{~:6B8;388l"q8=- OwlT!EP_zoa,Uj1JoFEGp[/G
Jul 8, 2024 17:54:12.646321058 CEST	896	IN	Data Raw: 3e 53 68 24 39 e0 a1 30 45 07 10 cf 62 40 3a 77 a3 cd dc f9 d4 7b 7f 50 d6 49 d8 51 5d 99 d2 8c 8b 2e 86 25 f3 22 a3 8d 23 fa 36 c6 d6 05 1b d1 33 89 51 34 e0 d5 b7 df b5 f1 9b 92 51 ff d7 03 fd 56 6d ed df 85 56 d6 2c 34 da 94 3e e7 b5 7b 88 57 Data Ascii: >Sh$90Eb@:w{PIQ].%"#63Q4QVmV,4>{W/5alex"~6:v2oRg~2g2fr_2cd3#VO}&Zb10>yVZ}En7X1vHBoY^u\|.f?
Jul 8, 2024 17:54:12.646336079 CEST	1236	IN	Data Raw: 2d f4 63 9b 44 46 a0 07 87 d0 1f 2d ba 91 6d 1c 61 8c 86 48 e1 27 51 97 8b f8 3c c1 08 7e d3 8f 07 21 67 49 b4 e5 31 f4 63 bd b1 42 30 0f af 10 ed 3f 82 16 5d a1 85 ba 03 fb bb b4 98 74 5a bb 7a 07 66 a4 53 c0 b0 69 e7 71 3c 7f 49 ec ec fa 04 f0 Data Ascii: -cDF-maH'Q<~!gI1cB0?]tZzfSiq<I2}dCV~(-\|Ax6T-On.NV9:z7$Ji(#c-B>Ii(tYg}'o,Lo]y`@&)J_f8#Y-S67{
Jul 8, 2024 17:54:12.646351099 CEST	1236	IN	Data Raw: ae 6d 3a 65 bd 1d 3f 7a b8 c9 b7 25 67 f7 2d cf 66 41 91 79 30 53 be 4f 1b 53 8e e1 9f a9 76 1d af 6e e3 29 56 1d 9f bb ce 1d ef fa a6 d8 48 99 cb 19 16 4a 65 74 c2 34 57 a5 d9 48 fe d8 aa 0e 40 a3 68 54 bb c0 43 0f d0 72 78 50 a4 6d 37 67 db b3 Data Ascii: m:e?z%g-fAy0SOSvn)VHJet4WH@hTCrxPm7g+v06+brcX~4NOhuP\| czb%\|!#;IW#dv?=2'Rv^}\|nYi]Vj=V\kolgNk*}8$Ul\|fl6]d5pr}>
Jul 8, 2024 17:54:12.646365881 CEST	448	IN	Data Raw: 61 48 a5 c1 85 6c d9 f2 de d6 7b b0 c6 82 a9 bf 0b 35 ac ab 3f 26 f6 f0 99 dc 32 e8 b6 a9 07 d0 1f e6 b3 86 1c a1 86 ed 88 72 1c 8b c7 2b 0f 78 8f 30 7b 2c 7f e5 63 42 7d 91 ff 53 72 11 ef df 63 a2 a5 a0 bd c4 ec 6c d7 c9 b8 a2 e6 99 78 5e a1 9a Data Ascii: aHl{5?&2r+x0{,cB}Srclx^6%+ppcTz7kvSo-MoIN@%>^YE:wD;L{f-3<q;6?D1{Xx~BSbHaf/288G#_mb=DuF}-Qw_:vz
Jul 8, 2024 17:54:12.646538019 CEST	1236	IN	Data Raw: 12 57 d7 43 5a 3f 4a 3f fa 2d 93 39 ce 28 c0 73 fa 18 e3 3c 39 16 f4 8d 80 ff f7 7d 3b d6 eb 94 bf 56 e9 bc 3c 03 74 d6 a7 2f 7a 5e 9b 71 c6 45 c6 8c 66 62 cf 9a d5 f7 0f e3 4d 87 73 1a ad 41 8f 4b 62 e1 2b a5 b9 7a b7 f5 83 47 ed 8c 13 5b 2c ef Data Ascii: WCZ?J?-9(s<9};V<t/z^qEfbMsAKb+zG[,>OId)!APW`vzy=QZ&D[%9f$G"Eks4*eKd_%g$=hv8^a}v30O8~5_Nm\Nm$7"
Jul 8, 2024 17:54:12.650924921 CEST	1236	IN	Data Raw: 59 e9 16 08 6f f5 dc 41 ae 51 7d 35 0b 87 6f 0f d8 69 b3 e9 2c 61 db 0f cc f7 52 ed 5c d3 c8 b5 ff 9a 7f 2c bc c5 ec ae 7c c6 9a 4d ce aa 87 19 cb da f4 42 6c 24 28 af 8b 39 c9 31 ae 1f 77 4b 32 05 99 29 12 d2 97 d1 27 06 0f 12 f3 d4 80 ab b7 99 Data Ascii: YoAQ}5oi,aR\,\|MBl$(91wK2)'?g[5nn#23>hPl['iy=I:r+''.]nyN+gpfCFf\0r2y'fU`]k4`O,z(6XW6V8j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	61370	208.91.196.253	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:54:13.750533104 CEST	297	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:54:14.219997883 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:54:03 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Mon, 22 Jul 2024 15:54:03 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 30 f2 00 2c c1 00 2c 37 03 90 81 f9 8f 29 b2 13 3b 91 25 a0 9b ae dd a1 ab d6 7a bc 0f e7 7c b7 4e fd b0 ab 8a 28 f1 09 c8 13 96 00 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c [TRUNCATED] Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0P%@a@a0@a0P0P(P(P((@a@a0@a0P0P(P(P((@a@a0@aPeaLt[=ul=HhOnNc=e{l[,lu_cnk,n;~'^a$sbV&aqcm3Ts*l#zXtH+8c/BH1>CXHay/AIl2g}s/Q8{.;R91oeGo-V:;u$5'.lW:Q\v_:z4',l]2z4'e,~O]%>\|v_2U}8u=hL4$7aj;eMhL\>',/]I,{}a91\|Jz
Jul 8, 2024 17:54:14.220040083 CEST	1236	IN	Data Raw: b1 73 e2 d5 85 ed aa 5b 43 07 31 c7 b0 d3 f6 53 17 56 dd 8c e8 20 e6 18 96 72 88 08 4b e8 20 e6 18 96 f8 01 7c 65 61 db 1a 97 d0 8b 98 d7 b0 f2 73 62 f8 8c 1a 3f 6a d3 c2 07 f0 95 33 ce 55 85 55 39 23 1e fd 63 98 c5 54 ba 3f 16 93 15 b6 b5 82 34 Data Ascii: s[C1SV rK \|easb?j3UU9#cT?4JYA)O(W.:+FOQX3DWsn]{d^Va4\>gDbvU1aEjass+e9<lNTX3KVaV\|
Jul 8, 2024 17:54:14.220093012 CEST	1236	IN	Data Raw: 25 2e ef 57 dd a0 c2 fa 1c c0 aa e8 eb 95 1b c5 d4 5b fa 3a 36 49 9f c6 4e 1c c7 e2 da be 36 5d 2d 64 90 a8 9a 5d f2 ed da c6 e2 aa 17 e6 75 3d 7d 75 9d 7f 66 3b cf b2 a2 7d d2 e7 62 71 d3 a3 b0 1e ad de d5 d4 97 a3 98 43 58 c1 c6 de 5f 79 c4 e0 Data Ascii: %.W[:6IN6]-d]u=}uf;}bqCX_y:RHn\nv[U+,UnCX9r}K5G.ek8}`]~y/GXTW=)l`c~yq,%+,~Oaxpz[5$%4
Jul 8, 2024 17:54:14.220128059 CEST	1236	IN	Data Raw: 10 0f 13 06 c6 10 88 d7 f8 3a 4a d8 8a 06 12 02 e1 82 0f 92 73 94 30 94 63 08 c4 a9 02 ec 34 61 e8 40 23 10 49 20 9e a0 e6 0c 61 28 c7 10 88 c3 05 d8 2b 84 a1 1c 43 20 f8 1c 32 27 09 43 39 86 40 01 76 2f 61 60 0c 01 be ee 25 0c e5 18 02 05 d8 ad Data Ascii: :Js0c4a@#I a(+C 2'C9@v/a`%10HE10t7(!~/CZwho[JeGc`G}"(l]P!Pu]6Q!P +1J#fKH>g
Jul 8, 2024 17:54:14.220163107 CEST	1225	IN	Data Raw: 21 87 bd da 0a 73 37 85 3d e4 60 30 84 2d 19 3d e1 b2 c3 be 73 8c 65 41 0e 43 20 87 35 1a d1 1d 5f d6 11 df c5 12 16 bd 8c cc 4b 06 64 32 9d 08 c2 40 d8 e9 4f 49 cc d3 f4 5c 4e 7f 3d 7e fd 53 11 66 c7 15 45 47 ac e6 d2 89 20 0c 84 9d d6 88 89 2d Data Ascii: !s7=`0-=seAC 5_Kd2@OI\N=~SfEG -e71NqEa\eUtb!&,4Bnv"lr)YcIb&Y7/5aQ.rd"}5[tDNkR^@&v.;x&3Z5"SsR"Q}
Jul 8, 2024 17:54:14.220257044 CEST	1236	IN	Data Raw: 3e 65 e5 c9 bd c9 8e cf 7c 56 11 08 00 62 c7 b4 4d d4 95 01 7a 6d b3 98 cb f9 bc 48 8c fe ec 4a 4b 21 17 9e c8 9e 79 e6 f2 df 10 3a 11 12 11 8d e7 c3 1a 51 ec 3d 7c ac fb 6f d2 26 ed 6e 0a 0b df ff 2c 5d c2 16 37 40 ec 16 0b 64 07 64 00 9d 08 c0 Data Ascii: >e\|VbMzmHJK!y:Q=\|o&n,]7@ddPZv~T",P=zwk/vF#+pv,3aq%laub6TKq5a)1{Nuck6qDLQ98V;DT"fnn
Jul 8, 2024 17:54:14.220289946 CEST	1236	IN	Data Raw: 24 89 8a 30 b3 4d 4c 2d b1 2a d5 67 75 c0 d1 3d 4a d1 32 fb 8c 5f 2b a7 bd a8 b0 29 f8 88 5f 25 64 15 61 c4 9b e3 59 97 e7 d8 b2 25 62 46 d8 76 10 c4 94 3e 49 2d 02 42 e4 91 9f 03 b2 65 58 fc 5e 6a 2e c6 83 3f e1 17 13 c8 4a ca 0e bf 6e e9 e3 10 Data Ascii: $0ML-*gu=J2_+)_%daY%bFv>I-BeX^j.?JnuvvOJ_`1DT].])Ya-@?#Ov'Q>$1vCR5I%SaIK,\|hDw(&yL'u~Qd,K;Y%(LIc\|!M0
Jul 8, 2024 17:54:14.220325947 CEST	448	IN	Data Raw: d6 5d 7b a9 93 cb 4f 20 ac e5 eb 3b 41 8c 89 7b 09 b5 84 42 90 65 4a d1 54 0c 2b 99 ef e3 0a 62 a3 9b 61 2a f8 65 69 89 39 e9 e5 4e d0 06 a3 ef 81 a8 55 3b 62 ac 10 67 54 fd 17 83 f1 14 c2 b6 e3 34 71 af 17 0f a2 2d 9f a2 c2 f7 6f 72 4e 9e a3 eb Data Ascii: ]{O ;A{BeJT+ba*ei9NU;bgT4q-orN8G7!_eulF0\fCY,XqN!EQuXbf2\|+^es01eB&\|(55fLhs8uU(Y;('3lVT$5,UDnH)
Jul 8, 2024 17:54:14.220359087 CEST	1236	IN	Data Raw: 5b 8f eb e8 cc 5a 22 44 f7 a6 a8 9e 4c d9 41 98 ff 0d f2 88 db 82 c6 b8 18 86 d0 23 44 ed 05 73 22 f2 21 cc 6b 9a cf 6a 25 91 c9 0d a1 ee 50 3f 77 d6 37 7e 1a 61 d9 bf 7e 6f d2 44 ca e5 1f 97 91 08 aa 54 c7 3e 53 bb 19 a1 99 82 a4 27 df b7 d5 4a Data Ascii: [Z"DLA#Ds"!kj%P?w7~a~oDT>S'J=/WIG1+DKSadGrOb{[i=#w>krP1aMK'RtknQUsM"Z4&h:[wkKN"a{!l?:z
Jul 8, 2024 17:54:14.220393896 CEST	1236	IN	Data Raw: f1 bf a2 9a ea bb 09 0e f2 70 73 33 19 76 82 a3 e3 cf ec e7 5c 07 7d 6b bb 38 25 17 ed dd d3 00 77 a5 45 87 b7 61 e0 43 00 5c 4c c7 d8 2c 51 50 82 e6 7d 40 7e 5b e4 4c 23 65 6f c3 b5 f4 30 bd bf ce 35 7a f0 74 43 97 23 3d c7 99 81 c0 03 84 ed b9 Data Ascii: ps3v\}k8%wEaC\L,QP}@~[L#eo05ztC#=,,+Kz$i(bDq\N FQZF!^(:49yUb,u =kQ{M[,Qfq{A116"HR6CB.+dA-?E,IgEH,
Jul 8, 2024 17:54:14.225259066 CEST	1236	IN	Data Raw: ab 8e cd 8b 44 ec 5d 64 b5 6d 65 67 d5 17 4d 2a 5c b7 6d 45 a2 d8 04 ca 6f 25 fb 13 cd 32 ec cc 42 0c 67 ad ea 2a a9 da ca 71 dc 00 41 0f bd 10 5c 76 4b ec 5d 66 c2 62 33 d4 48 1e bf 95 6f d1 a6 39 55 7a 51 ec 75 04 61 d6 e1 4e 3a 5c 87 22 29 a3 Data Ascii: D]dmegM\mEo%2BgqA\vK]fb3Ho9UzQuaN:\")jm^&Ih#a'4{_)G6Xzgd4LWl[r$e=u@MK\S,m>P^J]#6YbBC9t'_vZ"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	61369	208.91.196.253	80	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 8, 2024 17:54:13.750710011 CEST	301	OUT	GET /__media__/pics/28905/res-arw.png HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 8, 2024 17:54:14.222826004 CEST	672	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 08 Jul 2024 15:54:03 GMT Content-Type: image/png Content-Length: 346 Last-Modified: Tue, 04 Jan 2022 14:44:28 GMT Connection: keep-alive ETag: "61d45d4c-15a" Expires: Mon, 22 Jul 2024 15:54:03 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 1d 08 03 00 00 00 f8 b5 4e 88 00 00 00 45 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 57 d4 34 b7 00 00 00 16 74 52 4e 53 00 51 a8 e4 9d fa 21 30 f4 13 ba 01 72 90 da 3e 7e 03 c7 5f 0a 88 8d 4f 23 a5 00 00 00 ae 49 44 41 54 28 cf 85 93 e1 12 83 20 0c 83 11 41 d4 82 0a 6a de ff 51 37 b7 dd 4e a4 94 ef 77 ae 85 34 51 e7 7e a8 06 2b c6 30 34 34 33 80 b9 8b 92 c4 e1 a2 df 26 41 a3 3f 1a 58 bd 92 3c e6 62 f1 b5 51 e6 af c1 68 1c a7 a0 c1 e2 46 62 5d 30 c8 e0 5c c8 c7 80 75 21 a0 e0 e1 02 4d 23 18 32 17 e8 04 cb dd 05 7e 4c ee 82 a9 48 ac 76 e2 63 b2 37 07 4e 90 f6 a8 a8 6e 0c ec e3 14 9a db 40 fc ad 7f 1b ca 84 cd c5 37 a9 88 ef 6d 03 1f 99 24 5c ef 4b 27 c7 e9 4d 5c 1a a1 54 6a 47 ab 25 47 df ec 9a 5f fc a1 a2 5c 58 6a 55 fa 05 63 50 20 91 7b 34 90 ee 00 00 00 00 [TRUNCATED] Data Ascii: PNGIHDR"NEPLTEGpLW4tRNSQ!0r>~_O#IDAT( AjQ7Nw4Q~+0443&A?X<bQhFb]0\u!M#2~LHvc7Nn@7m$\K'M\TjG%G_\XjUcP {4IENDB`

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49715	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:21 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-08 15:53:21 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=173818 Date: Mon, 08 Jul 2024 15:53:21 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49716	156.146.33.15	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:21 UTC	542	OUT	GET /delivery/js/cmp_en.min.js HTTP/1.1 Host: cdn.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:53:22 UTC	642	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 15:53:21 GMT Content-Type: application/javascript Content-Length: 431927 Connection: close Last-Modified: Wed, 03 Jul 2024 21:59:15 GMT ETag: "69737-61c5ef0ef92c0" Cache-Control: max-age=86400 Expires: Thu, 04 Jul 2024 22:00:30 GMT Edge-Control: max-age=86400 X-77-NZT: EgwBnJIhDQH3C+cAAAwBJRPCNAH3AxgAAA X-77-NZT-Ray: 0d1fa518f585bb07710b8c66900c4723 X-Accel-Expires: @1720476034 X-Accel-Date: 1720394854 X-77-Cache: HIT X-77-Age: 59147 Vary: Accept-Encoding Server: CDN77-Turbo X-Accel-Date-Max: 1720050177 X-Cache: HIT X-Age: 59147 X-77-POP: frankfurtDE Accept-Ranges: bytes
2024-07-08 15:53:22 UTC	15742	IN	Data Raw: 77 69 6e 64 6f 77 2e 63 6d 70 63 63 73 76 65 72 73 69 6f 6e 62 75 69 6c 64 3d 22 32 30 32 34 2d 37 2d 33 2e 32 31 2e 35 37 22 3b 69 66 28 21 28 22 72 70 6c 22 20 69 6e 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 29 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 72 70 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 63 2e 73 70 6c 69 74 28 61 29 2e 6a 6f 69 6e 28 62 29 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 66 61 6c 73 65 7d 29 7d 69 66 28 21 28 22 63 6d 70 5f 75 6e 71 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 75 6e 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 Data Ascii: window.cmpccsversionbuild="2024-7-3.21.57";if(!("rpl" in String.prototype)){Object.defineProperty(String.prototype,"rpl",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("cmp_unq" in window)){window.cmp_unq=function(a){re
2024-07-08 15:53:22 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 44 61 74 65 28 74 68 69 73 2e 72 65 61 64 49 6e 74 28 33 36 29 2a 31 30 30 29 7d 3b 74 68 69 73 2e 72 65 61 64 4c 61 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 61 64 53 74 72 69 6e 67 28 32 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 3b 74 68 69 73 2e 72 65 61 64 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 65 3d 22 22 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 63 3b 64 2b 2b 29 7b 65 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 74 68 69 73 2e 72 65 61 64 49 6e 74 28 36 29 2b 36 35 29 7d 72 65 74 75 72 6e 20 65 7d 3b 74 68 69 73 2e 72 65 61 64 42 6f 6f 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 61 72 73 65 Data Ascii: ){return new Date(this.readInt(36)*100)};this.readLang=function(){return this.readString(2).toLowerCase()};this.readString=function(c){var e="";for(var d=0;d<c;d++){e+=String.fromCharCode(this.readInt(6)+65)}return e};this.readBool=function(){return parse
2024-07-08 15:53:22 UTC	16384	IN	Data Raw: 72 70 6f 73 65 4f 6e 65 54 72 65 61 74 6d 65 6e 74 3b 63 2e 50 75 62 6c 69 73 68 65 72 43 43 3d 74 68 69 73 2e 50 75 62 6c 69 73 68 65 72 43 43 3b 63 2e 56 65 6e 64 6f 72 73 4c 49 3d 74 68 69 73 2e 56 65 6e 64 6f 72 73 4c 49 3b 63 2e 50 75 62 6c 69 73 68 65 72 52 65 73 74 72 69 63 74 69 6f 6e 73 3d 74 68 69 73 2e 50 75 62 6c 69 73 68 65 72 52 65 73 74 72 69 63 74 69 6f 6e 73 3b 76 61 72 20 64 3d 63 2e 74 6f 53 74 72 69 6e 67 28 29 3b 76 61 72 20 68 3d 74 68 69 73 2e 6e 65 77 46 72 6f 6d 4d 61 6e 69 66 65 73 74 28 32 29 3b 68 2e 69 73 43 75 73 74 6f 6d 46 6f 72 6d 61 74 3d 74 72 75 65 3b 68 2e 72 65 61 64 28 64 29 3b 69 66 28 74 68 69 73 2e 67 70 70 53 65 63 74 69 6f 6e 49 64 73 2e 69 6e 64 65 78 4f 66 28 32 29 3d 3d 2d 31 29 7b 74 68 69 73 2e 67 70 70 53 Data Ascii: rposeOneTreatment;c.PublisherCC=this.PublisherCC;c.VendorsLI=this.VendorsLI;c.PublisherRestrictions=this.PublisherRestrictions;var d=c.toString();var h=this.newFromManifest(2);h.isCustomFormat=true;h.read(d);if(this.gppSectionIds.indexOf(2)==-1){this.gppS
2024-07-08 15:53:22 UTC	16384	IN	Data Raw: 73 75 62 73 74 72 69 6e 67 28 30 2c 63 5b 65 5d 2e 6c 65 6e 67 74 68 2b 31 29 3d 3d 63 5b 65 5d 2b 22 2e 22 29 7b 66 2e 70 75 73 68 28 63 5b 65 5d 5b 6d 5d 28 29 29 7d 65 6c 73 65 7b 69 66 28 63 5b 65 5d 2e 6c 65 6e 67 74 68 3d 3d 35 29 7b 76 61 72 20 6b 3d 63 5b 65 5d 2e 73 75 62 73 74 72 69 6e 67 28 33 2c 35 29 2b 22 2d 22 2b 63 5b 65 5d 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 32 29 3b 69 66 28 67 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 6b 2e 6c 65 6e 67 74 68 2b 31 29 3d 3d 6b 2b 22 2e 22 29 7b 66 2e 70 75 73 68 28 63 5b 65 5d 5b 6d 5d 28 29 29 7d 7d 65 6c 73 65 7b 69 66 28 6a 3d 3d 63 5b 65 5d 2b 22 2f 22 7c 7c 6a 3d 3d 22 2f 22 2b 63 5b 65 5d 29 7b 66 2e 70 75 73 68 28 63 5b 65 5d 5b 6d 5d 28 29 29 7d 65 6c 73 65 7b 69 66 28 6a 3d 3d 63 5b 65 5d 2e 72 Data Ascii: substring(0,c[e].length+1)==c[e]+"."){f.push(c[e][m]())}else{if(c[e].length==5){var k=c[e].substring(3,5)+"-"+c[e].substring(0,2);if(g.substring(0,k.length+1)==k+"."){f.push(c[e][m]())}}else{if(j==c[e]+"/"\|\|j=="/"+c[e]){f.push(c[e][m]())}else{if(j==c[e].r
2024-07-08 15:53:22 UTC	16384	IN	Data Raw: 6f 66 28 64 2e 68 61 73 41 74 74 72 69 62 75 74 65 29 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 72 65 74 75 72 6e 20 64 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 61 29 7d 65 6c 73 65 7b 74 72 79 7b 76 61 72 20 62 3d 22 61 74 74 72 69 62 75 74 65 73 22 20 69 6e 20 64 26 26 61 20 69 6e 20 64 2e 61 74 74 72 69 62 75 74 65 73 7d 63 61 74 63 68 28 63 29 7b 76 61 72 20 62 3d 66 61 6c 73 65 7d 72 65 74 75 72 6e 20 62 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 6d 70 5f 73 6e 61 70 73 68 6f 74 28 29 7b 74 68 69 73 2e 68 61 73 53 65 74 74 69 6e 67 73 53 6e 61 70 73 68 6f 74 3d 66 61 6c 73 65 3b 74 68 69 73 2e 63 6f 6e 73 65 6e 74 73 74 72 69 6e 67 3d 22 22 3b 74 68 69 73 2e 63 6f 6e 73 65 6e 74 64 61 74 61 3d 6e 65 77 20 63 6d 70 5f 63 73 28 29 3b 74 68 69 73 2e Data Ascii: of(d.hasAttribute)==="function"){return d.hasAttribute(a)}else{try{var b="attributes" in d&&a in d.attributes}catch(c){var b=false}return b}}}}function cmp_snapshot(){this.hasSettingsSnapshot=false;this.consentstring="";this.consentdata=new cmp_cs();this.
2024-07-08 15:53:22 UTC	16384	IN	Data Raw: 6d 6e 67 72 2e 67 70 70 4d 73 70 61 43 6f 76 65 72 65 64 54 72 61 6e 73 61 63 74 69 6f 6e 3d 3d 3d 31 29 7b 62 2e 73 65 74 47 70 70 46 69 65 6c 64 28 61 2c 22 4d 73 70 61 4f 70 74 4f 75 74 4f 70 74 69 6f 6e 4d 6f 64 65 22 2c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 67 70 70 4d 73 70 61 4f 70 74 4f 75 74 4f 70 74 69 6f 6e 4d 6f 64 65 29 3b 62 2e 73 65 74 47 70 70 46 69 65 6c 64 28 61 2c 22 4d 73 70 61 53 65 72 76 69 63 65 50 72 6f 76 69 64 65 72 4d 6f 64 65 22 2c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 67 70 70 4d 73 70 61 53 65 72 76 69 63 65 50 72 6f 76 69 64 65 72 4d 6f 64 65 29 7d 65 6c 73 65 7b 62 2e 73 65 74 47 70 70 46 69 65 6c 64 28 61 2c 22 4d 73 70 61 4f 70 74 4f 75 74 4f 70 74 69 6f 6e 4d 6f 64 65 22 2c 30 29 3b 62 2e 73 65 74 47 70 70 Data Ascii: mngr.gppMspaCoveredTransaction===1){b.setGppField(a,"MspaOptOutOptionMode",window.cmpmngr.gppMspaOptOutOptionMode);b.setGppField(a,"MspaServiceProviderMode",window.cmpmngr.gppMspaServiceProviderMode)}else{b.setGppField(a,"MspaOptOutOptionMode",0);b.setGpp
2024-07-08 15:53:22 UTC	16384	IN	Data Raw: 2e 73 70 6c 69 74 28 22 23 22 29 3b 69 66 28 61 2e 6c 65 6e 67 74 68 3e 3d 34 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 6c 6f 67 28 22 49 6d 70 6f 72 74 20 63 6f 6e 73 65 6e 74 3a 20 20 22 2b 61 29 3b 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 6c 6f 61 64 43 53 28 61 5b 30 5d 2c 61 5b 33 5d 2c 61 5b 31 5d 2c 61 5b 32 5d 2c 22 22 29 3b 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 68 61 73 45 78 69 73 74 69 6e 67 43 68 6f 69 63 65 3d 74 72 75 65 3b 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 63 6f 6e 73 65 6e 74 54 79 70 65 3d 31 36 3b 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 73 74 6f 72 65 43 6f 6e 73 65 6e 74 28 61 5b 30 5d 2c 33 30 2c 61 5b 32 5d 2c 61 5b 31 5d 2c 61 5b 33 5d 2c 22 5f 22 2b 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 67 Data Ascii: .split("#");if(a.length>=4){window.cmpmngr.log("Import consent: "+a);window.cmpmngr.loadCS(a[0],a[3],a[1],a[2],"");window.cmpmngr.hasExistingChoice=true;window.cmpmngr.consentType=16;window.cmpmngr.storeConsent(a[0],30,a[2],a[1],a[3],"_"+window.cmpmngr.g
2024-07-08 15:53:22 UTC	16384	IN	Data Raw: 63 6d 70 5f 68 63 28 22 70 69 77 69 6b 22 29 29 7b 74 68 69 73 2e 73 65 6e 64 50 69 77 69 6b 54 72 61 63 6b 69 6e 67 28 29 7d 69 66 28 63 6d 70 5f 68 63 28 22 6d 61 74 6f 6d 6f 22 29 29 7b 74 68 69 73 2e 73 65 6e 64 4d 61 74 6f 6d 6f 54 72 61 63 6b 69 6e 67 28 29 7d 69 66 28 63 6d 70 5f 68 63 28 22 70 69 61 6e 6f 22 29 29 7b 74 68 69 73 2e 73 65 6e 64 50 69 61 6e 6f 54 72 61 63 6b 69 6e 67 28 29 7d 69 66 28 63 6d 70 5f 68 63 28 22 68 75 62 73 70 6f 74 22 29 29 7b 74 68 69 73 2e 73 65 6e 64 48 75 62 73 70 6f 74 43 6f 6e 73 65 6e 74 28 29 7d 69 66 28 63 6d 70 5f 68 63 28 22 67 69 6f 73 67 22 29 29 7b 74 68 69 73 2e 73 65 6e 64 47 69 6f 73 67 54 72 61 63 6b 69 6e 67 28 29 7d 69 66 28 63 6d 70 5f 68 63 28 22 61 77 69 6e 22 29 29 7b 74 68 69 73 2e 73 65 6e 64 Data Ascii: cmp_hc("piwik")){this.sendPiwikTracking()}if(cmp_hc("matomo")){this.sendMatomoTracking()}if(cmp_hc("piano")){this.sendPianoTracking()}if(cmp_hc("hubspot")){this.sendHubspotConsent()}if(cmp_hc("giosg")){this.sendGiosgTracking()}if(cmp_hc("awin")){this.send
2024-07-08 15:53:22 UTC	16384	IN	Data Raw: 2e 63 6d 70 6d 6e 67 72 2e 6c 61 79 65 72 4c 6f 67 69 63 3d 3d 36 29 7b 69 66 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 75 73 70 73 53 74 72 69 6e 67 3d 3d 22 31 2d 2d 2d 22 7c 7c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 75 73 70 73 53 74 72 69 6e 67 3d 3d 22 22 29 7b 61 3d 74 72 75 65 7d 65 6c 73 65 7b 69 66 28 21 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 68 61 73 43 43 50 41 4f 70 74 65 64 4f 75 74 28 29 29 7b 69 66 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 63 6f 6e 73 65 6e 74 73 74 72 69 6e 67 3d 3d 22 22 29 7b 61 3d 74 72 75 65 7d 7d 7d 7d 7d 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 70 75 72 70 6f 73 65 73 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 7b 69 66 28 77 69 6e 64 6f 77 2e 63 6d 70 6d Data Ascii: .cmpmngr.layerLogic==6){if(window.cmpmngr.uspsString=="1---"\|\|window.cmpmngr.uspsString==""){a=true}else{if(!window.cmpmngr.hasCCPAOptedOut()){if(window.cmpmngr.consentstring==""){a=true}}}}}for(var g=0;g<window.cmpmngr.purposes.length;g++){if(window.cmpm
2024-07-08 15:53:22 UTC	16384	IN	Data Raw: 2e 73 65 74 41 74 74 72 69 62 75 74 65 49 66 4e 6f 74 45 78 69 73 74 73 28 4a 2c 22 64 61 74 61 2d 63 6d 70 2d 68 69 64 65 2d 64 69 73 70 6c 61 79 22 2c 4a 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 29 3b 4a 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6d 70 2d 68 69 64 65 2d 68 22 2c 4a 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 29 3b 4a 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6d 70 2d 68 69 64 65 2d 6f 76 65 72 66 6c 6f 77 79 22 2c 4a 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 29 3b 4a 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6d 70 2d 68 69 64 65 2d 70 6f 73 69 74 69 6f 6e 22 2c 4a 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 29 3b 4a 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 46 3b 4a 2e 73 Data Ascii: .setAttributeIfNotExists(J,"data-cmp-hide-display",J.style.display);J.setAttribute("data-cmp-hide-h",J.style.height);J.setAttribute("data-cmp-hide-overflowy",J.style.overflowY);J.setAttribute("data-cmp-hide-position",J.style.position);J.style.height=F;J.s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49719	87.230.98.78	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:23 UTC	648	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dle100.net%26pid%3D9PO755G95&&l=en&o=1720453999390 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:53:23 UTC	502	IN	HTTP/1.1 200 OK date: Mon, 08 Jul 2024 15:53:23 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=1; Expires=Thu, 07-Aug-2025 15:53:23 GMT; Path=/; SameSite=Lax; Secure last-modified: Mon, 08 Jul 2024 15:53:23 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-07-08 15:53:23 UTC	1043	IN	Data Raw: 34 30 37 0d 0a 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 7b 0d 0a 20 76 61 72 20 63 76 61 6c 20 3d 20 22 22 3b 0d 0a 20 74 72 79 7b 63 76 61 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3b 7d 63 61 74 63 68 28 65 29 7b 63 76 61 6c 20 3d 20 22 22 3b 7d 0d 0a 20 76 61 72 20 6c 20 3d 20 22 22 3b 20 69 66 28 22 63 6d 70 5f 67 65 74 6c 61 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 20 6c 20 3d 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 65 74 6c 61 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 20 7d 0d 0a 20 76 61 72 20 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 20 73 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 Data Ascii: 407(function (){ var cval = ""; try{cval = document.cookie;}catch(e){cval = "";} var l = ""; if("cmp_getlang" in window){ l = window.cmp_getlang().toLowerCase(); } var s = document.createElement("script"); s.src = "https://a.delivery.consent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49724	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:23 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-08 15:53:23 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=173749 Date: Mon, 08 Jul 2024 15:53:23 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-08 15:53:23 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49728	87.230.98.78	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:23 UTC	661	OUT	GET /delivery/cmp.php?__cmpcc=1&id=68884&o=1720454003&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dle100.net%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:53:24 UTC	502	IN	HTTP/1.1 200 OK date: Mon, 08 Jul 2024 15:53:24 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=1; Expires=Thu, 07-Aug-2025 15:53:24 GMT; Path=/; SameSite=Lax; Secure last-modified: Mon, 08 Jul 2024 15:53:24 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-07-08 15:53:24 UTC	1043	IN	Data Raw: 34 30 37 0d 0a 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 7b 0d 0a 20 76 61 72 20 63 76 61 6c 20 3d 20 22 22 3b 0d 0a 20 74 72 79 7b 63 76 61 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3b 7d 63 61 74 63 68 28 65 29 7b 63 76 61 6c 20 3d 20 22 22 3b 7d 0d 0a 20 76 61 72 20 6c 20 3d 20 22 22 3b 20 69 66 28 22 63 6d 70 5f 67 65 74 6c 61 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 20 6c 20 3d 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 65 74 6c 61 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 20 7d 0d 0a 20 76 61 72 20 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 20 73 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 Data Ascii: 407(function (){ var cval = ""; try{cval = document.cookie;}catch(e){cval = "";} var l = ""; if("cmp_getlang" in window){ l = window.cmp_getlang().toLowerCase(); } var s = document.createElement("script"); s.src = "https://a.delivery.consent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49729	87.230.98.78	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:24 UTC	661	OUT	GET /delivery/cmp.php?__cmpcc=2&id=68884&o=1720454004&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dle100.net%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:53:25 UTC	409	IN	HTTP/1.1 200 OK date: Mon, 08 Jul 2024 15:53:25 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Mon, 08 Jul 2024 15:53:25 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-07-08 15:53:25 UTC	5548	IN	Data Raw: 31 35 39 46 0d 0a 2f 2a 6e 63 70 78 2a 2f 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 64 6f 6e 74 53 68 6f 77 22 3a 31 2c 22 64 6f 6e 74 53 68 6f 77 52 65 61 73 6f 6e 22 3a 22 4e 6f 20 63 6f 6f 6b 69 65 20 73 75 70 70 6f 72 74 22 2c 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 6e 6f 74 50 6f 73 73 69 62 6c 65 22 3a 31 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c Data Ascii: 159F/ncpx/window.cmp_config_data_cs="";window.cmp_config_data={"dontShow":1,"dontShowReason":"No cookie support","intID":68884,"uid":41321,"dbgdesignid":27746,"notPossible":1,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49730	156.146.33.15	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:25 UTC	611	OUT	GET /delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfMjY.js HTTP/1.1 Host: cdn.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:53:26 UTC	619	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 15:53:26 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * X-XSS-Protection: 0 Expires: Mon, 08 Jul 2024 16:20:28 GMT Cache-Control: public, max-age=1800 Edge-Control: public, max-age=1800 Last-Modified: Mon, 08 Jul 2024 15:50:28 GMT X-77-NZT: EggBnJIhDQFBDAGckiEnAfeyAAAA X-77-NZT-Ray: 0d1fa518f585a39e760b8c662a44a90a X-Accel-Expires: @1720455628 X-Accel-Date: 1720453828 X-77-Cache: HIT X-77-Age: 178 Vary: Accept-Encoding Server: CDN77-Turbo X-Cache: MISS X-77-POP: frankfurtDE
2024-07-08 15:53:26 UTC	15765	IN	Data Raw: 31 61 36 32 32 0d 0a 69 66 28 21 28 22 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 7d 3b 7d 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 76 67 5f 6e 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 6d 70 5f 68 74 6d 6c 28 22 73 76 67 22 2c 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 78 6d 6c 6e 73 3a 73 76 67 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 76 69 65 77 42 6f 78 22 3a 22 30 20 30 20 35 31 32 20 32 35 36 22 7d 2c 20 22 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 78 29 7b 78 Data Ascii: 1a622if(!("cmp_config_data" in window)){window.cmp_config_data={};}window.cmp_svg_no=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","viewBox":"0 0 512 256"}, "", function (x){x
2024-07-08 15:53:26 UTC	16384	IN	Data Raw: 33 30 2e 36 32 37 2c 36 38 2e 32 36 37 20 2d 36 38 2e 32 36 36 39 39 2c 36 38 2e 32 36 37 20 7a 22 2c 22 66 69 6c 6c 22 3a 22 23 37 37 37 22 2c 22 63 6c 61 73 73 22 3a 22 63 6d 70 73 76 67 67 72 61 79 66 69 6c 6c 22 7d 29 7d 29 2e 63 68 69 6c 64 28 22 67 22 2c 20 7b 22 69 64 22 3a 22 73 76 67 5f 31 64 22 7d 2c 20 22 22 2c 20 74 72 75 65 2c 20 66 75 6e 63 74 69 6f 6e 20 28 78 29 7b 78 2e 63 68 69 6c 64 28 22 70 61 74 68 22 2c 20 7b 22 69 64 22 3a 22 70 61 74 68 33 37 35 36 22 2c 22 64 22 3a 22 6d 31 31 30 2e 39 33 33 2c 32 33 38 2e 39 33 33 6c 32 34 37 2e 34 36 37 2c 30 63 34 2e 37 31 38 39 39 2c 30 20 38 2e 35 33 32 39 39 2c 2d 33 2e 38 32 33 20 38 2e 35 33 32 39 39 2c 2d 38 2e 35 33 33 73 2d 33 2e 38 31 34 2c 2d 38 2e 35 33 32 39 39 20 2d 38 2e 35 33 32 Data Ascii: 30.627,68.267 -68.26699,68.267 z","fill":"#777","class":"cmpsvggrayfill"})}).child("g", {"id":"svg_1d"}, "", true, function (x){x.child("path", {"id":"path3756","d":"m110.933,238.933l247.467,0c4.71899,0 8.53299,-3.823 8.53299,-8.533s-3.814,-8.53299 -8.532
2024-07-08 15:53:26 UTC	16384	IN	Data Raw: 72 76 35 35 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 6d 70 5f 68 74 6d 6c 28 22 73 76 67 22 2c 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 78 6d 6c 6e 73 3a 73 76 67 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 68 65 69 67 68 74 22 3a 22 33 32 70 78 22 2c 22 76 69 65 77 42 6f 78 22 3a 22 30 20 30 20 33 32 20 33 32 22 2c 22 77 69 64 74 68 22 3a 22 33 32 70 78 22 2c 22 63 6c 61 73 73 22 3a 22 63 6d 70 69 63 6f 73 76 67 66 69 6c 6c 22 7d 2c 20 22 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 78 29 7b 78 2e 63 68 69 6c 64 28 22 70 61 74 68 22 2c 20 7b 22 69 64 22 3a 22 63 6d 70 73 76 67 61 Data Ascii: rv55=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","height":"32px","viewBox":"0 0 32 32","width":"32px","class":"cmpicosvgfill"}, "", function (x){x.child("path", {"id":"cmpsvga
2024-07-08 15:53:26 UTC	16384	IN	Data Raw: 3a 31 2c 22 6c 22 3a 22 5c 2f 64 65 6c 69 76 65 72 79 5c 2f 69 63 6f 6e 73 5c 2f 69 63 6f 6e 73 5f 76 34 30 2e 70 6e 67 22 2c 22 70 73 22 3a 22 63 31 2c 32 22 2c 22 63 70 22 3a 22 22 2c 22 6c 70 22 3a 22 22 2c 22 66 70 22 3a 22 22 2c 22 73 70 22 3a 22 22 2c 22 66 22 3a 22 22 2c 22 73 66 22 3a 22 22 2c 22 69 33 69 64 22 3a 30 2c 22 67 69 64 22 3a 37 2c 22 66 62 22 3a 30 2c 22 61 76 22 3a 22 22 2c 22 64 76 22 3a 22 22 2c 22 73 76 22 3a 30 2c 22 70 76 22 3a 30 2c 22 6c 65 67 52 4f 57 22 3a 30 7d 2c 7b 22 69 64 22 3a 22 63 34 39 39 30 38 22 2c 22 77 73 69 64 22 3a 36 38 38 38 34 2c 22 6e 22 3a 22 61 70 6c 6c 65 22 2c 22 6e 6f 6e 65 75 22 3a 30 2c 22 6c 22 3a 22 22 2c 22 70 73 22 3a 22 63 31 2c 31 30 22 2c 22 63 70 22 3a 22 22 2c 22 6c 70 22 3a 22 22 2c 22 66 Data Ascii: :1,"l":"\/delivery\/icons\/icons_v40.png","ps":"c1,2","cp":"","lp":"","fp":"","sp":"","f":"","sf":"","i3id":0,"gid":7,"fb":0,"av":"","dv":"","sv":0,"pv":0,"legROW":0},{"id":"c49908","wsid":68884,"n":"aplle","noneu":0,"l":"","ps":"c1,10","cp":"","lp":"","f
2024-07-08 15:53:26 UTC	16384	IN	Data Raw: 73 65 20 6e 6f 6e 2d 70 72 65 63 69 73 65 20 6c 6f 63 61 74 69 6f 6e 20 73 75 67 67 65 73 74 73 20 74 68 61 74 20 74 68 65 79 20 61 72 65 20 69 6e 20 61 6e 20 75 72 62 61 6e 20 7a 6f 6e 65 2e 22 2c 22 69 6c 32 22 3a 22 41 20 6c 61 72 67 65 20 70 72 6f 64 75 63 65 72 20 6f 66 20 77 61 74 65 72 63 6f 6c 6f 75 72 20 70 61 69 6e 74 73 20 77 61 6e 74 73 20 74 6f 20 63 61 72 72 79 20 6f 75 74 20 61 6e 20 6f 6e 6c 69 6e 65 20 61 64 76 65 72 74 69 73 69 6e 67 20 63 61 6d 70 61 69 67 6e 20 66 6f 72 20 69 74 73 20 6c 61 74 65 73 74 20 77 61 74 65 72 63 6f 6c 6f 75 72 20 72 61 6e 67 65 2c 20 64 69 76 65 72 73 69 66 79 69 6e 67 20 69 74 73 20 61 75 64 69 65 6e 63 65 20 74 6f 20 72 65 61 63 68 20 61 73 20 6d 61 6e 79 20 61 6d 61 74 65 75 72 20 61 6e 64 20 70 72 6f 66 Data Ascii: se non-precise location suggests that they are in an urban zone.","il2":"A large producer of watercolour paints wants to carry out an online advertising campaign for its latest watercolour range, diversifying its audience to reach as many amateur and prof
2024-07-08 15:53:26 UTC	16384	IN	Data Raw: 57 22 3a 30 2c 22 6c 65 67 50 4f 50 49 41 22 3a 30 2c 22 6c 65 67 50 44 50 4c 22 3a 30 2c 22 6c 65 67 4c 46 50 44 50 50 50 22 3a 30 2c 22 6c 65 67 50 49 50 4c 22 3a 30 2c 22 6c 65 67 50 44 50 41 22 3a 30 2c 22 6c 65 67 50 50 41 22 3a 30 2c 22 6c 65 67 50 44 50 41 54 22 3a 30 2c 22 6c 65 67 44 53 47 4c 50 44 22 3a 30 2c 22 6c 65 67 47 44 50 52 55 4b 22 3a 30 2c 22 6c 65 67 55 53 56 43 44 50 41 22 3a 30 2c 22 6c 65 67 55 53 43 50 41 22 3a 30 2c 22 6c 65 67 55 53 55 43 50 41 22 3a 30 2c 22 6c 65 67 55 53 43 41 50 44 50 22 3a 30 2c 22 6c 65 67 41 50 50 49 22 3a 30 2c 22 6c 65 67 44 50 44 50 41 22 3a 30 2c 22 6c 65 67 55 53 54 44 50 53 41 22 3a 30 2c 22 6c 65 67 55 53 4f 43 44 50 41 22 3a 30 2c 22 6c 65 67 55 53 4d 54 43 44 50 41 22 3a 30 2c 22 6c 65 67 55 53 Data Ascii: W":0,"legPOPIA":0,"legPDPL":0,"legLFPDPPP":0,"legPIPL":0,"legPDPA":0,"legPPA":0,"legPDPAT":0,"legDSGLPD":0,"legGDPRUK":0,"legUSVCDPA":0,"legUSCPA":0,"legUSUCPA":0,"legUSCAPDP":0,"legAPPI":0,"legDPDPA":0,"legUSTDPSA":0,"legUSOCDPA":0,"legUSMTCDPA":0,"legUS
2024-07-08 15:53:26 UTC	10395	IN	Data Raw: 67 22 3a 22 45 4e 22 2c 22 73 74 72 54 79 70 65 22 3a 22 74 78 74 73 75 62 73 65 72 76 69 63 65 73 22 2c 22 73 74 72 54 65 78 74 22 3a 22 57 68 65 6e 20 65 6e 61 62 6c 69 6e 67 20 74 68 69 73 20 76 65 6e 64 6f 72 2c 20 6f 74 68 65 72 20 76 65 6e 64 6f 72 73 20 77 69 6c 6c 20 61 6c 73 6f 20 62 65 20 65 6e 61 62 6c 65 64 2e 20 54 68 65 73 65 20 61 72 65 3a 22 7d 2c 7b 22 73 74 72 4c 61 6e 67 22 3a 22 45 4e 22 2c 22 73 74 72 54 79 70 65 22 3a 22 63 6f 6d 70 61 6e 79 69 6e 66 6f 5f 64 61 74 61 63 6f 6e 74 72 6f 6c 6c 65 72 22 2c 22 73 74 72 54 65 78 74 22 3a 22 44 61 74 61 20 63 6f 6e 74 72 6f 6c 6c 65 72 22 7d 2c 7b 22 73 74 72 4c 61 6e 67 22 3a 22 45 4e 22 2c 22 73 74 72 54 79 70 65 22 3a 22 63 6f 6d 70 61 6e 79 69 6e 66 6f 5f 63 6f 6e 74 72 6f 6c 6c 65 72 Data Ascii: g":"EN","strType":"txtsubservices","strText":"When enabling this vendor, other vendors will also be enabled. These are:"},{"strLang":"EN","strType":"companyinfo_datacontroller","strText":"Data controller"},{"strLang":"EN","strType":"companyinfo_controller

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49732	54.76.66.215	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:31 UTC	677	OUT	GET /index.php?domain_name=le100.net HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:53:31 UTC	296	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 15:53:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: nginx/1.20.1 X-Powered-By: PHP/7.3.33 Set-Cookie: pct-2444609017588254eb9aa441d74694fe=1; expires=Mon, 08-Jul-2024 16:53:31 GMT; Max-Age=3600
2024-07-08 15:53:31 UTC	5796	IN	Data Raw: 31 36 39 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 61 6c 65 20 6f 66 66 65 72 20 66 6f 72 3a 20 6c 65 31 30 30 2e 6e 65 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d Data Ascii: 169c<!DOCTYPE html><html><head> <meta charset="UTF-8"> <title>Sale offer for: le100.net</title> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"> <link href="https://fonts.googleapis.com/css?family=
2024-07-08 15:53:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49733	54.76.66.215	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:31 UTC	651	OUT	GET /scripts/select2/select2.css HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mydomaincontact.com/index.php?domain_name=le100.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-2444609017588254eb9aa441d74694fe=1
2024-07-08 15:53:32 UTC	235	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 15:53:31 GMT Content-Type: text/css Content-Length: 19226 Connection: close Server: nginx/1.20.1 Last-Modified: Thu, 11 Apr 2024 15:42:26 GMT ETag: "661804e2-4b1a" Accept-Ranges: bytes
2024-07-08 15:53:32 UTC	16149	IN	Data Raw: 2f 2a 0a 56 65 72 73 69 6f 6e 3a 20 33 2e 33 2e 32 20 54 69 6d 65 73 74 61 6d 70 3a 20 4d 6f 6e 20 4d 61 72 20 32 35 20 31 32 3a 31 34 3a 31 38 20 50 44 54 20 32 30 31 33 0a 2a 2f 0a 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 2f 2a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 20 66 6f 72 20 69 65 37 20 2a 2f 0a 20 20 20 20 7a 6f 6f 6d 3a 20 31 3b 0a 20 20 20 20 2a 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 7d 0a 0a 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2c 0a 2e 73 65 6c 65 Data Ascii: /Version: 3.3.2 Timestamp: Mon Mar 25 12:14:18 PDT 2013/.select2-container { position: relative; display: inline-block; /* inline-block for ie7 / zoom: 1; display: inline; vertical-align: middle;}.select2-container,.sele
2024-07-08 15:53:32 UTC	3077	IN	Data Raw: 20 20 20 20 20 20 20 20 20 2d 6d 73 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 34 65 34 65 34 3b 0a 20 20 20 20 66 69 6c 74 65 72 3a 20 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 20 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 65 65 65 65 65 65 27 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 66 34 66 34 66 34 27 2c 20 47 72 61 64 69 65 6e 74 54 79 70 65 3d 30 20 29 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 Data Ascii: -ms-user-select: none; user-select: none; background-color: #e4e4e4; filter: progid:DXImageTransform.Microsoft.gradient( startColorstr='#eeeeee', endColorstr='#f4f4f4', GradientType=0 ); background-image: -webkit-gradie

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49736	54.76.66.215	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:32 UTC	639	OUT	GET /forms/style.css HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mydomaincontact.com/index.php?domain_name=le100.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-2444609017588254eb9aa441d74694fe=1
2024-07-08 15:53:32 UTC	233	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 15:53:32 GMT Content-Type: text/css Content-Length: 3575 Connection: close Server: nginx/1.20.1 Last-Modified: Thu, 11 Apr 2024 15:42:26 GMT ETag: "661804e2-df7" Accept-Ranges: bytes
2024-07-08 15:53:32 UTC	3575	IN	Data Raw: 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 0a 0a 62 6f 64 79 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 63 65 66 66 31 3b 0a 09 63 6f 6c 6f 72 3a 20 23 32 36 33 32 33 38 3b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 09 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 20 6f 70 74 69 6d 69 7a 65 4c 65 67 69 62 69 6c 69 74 79 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 72 65 6d 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 72 65 6d 3b 0a 7d 0a 0a 68 31 2c 68 32 2c 68 33 2c 68 33 2c 68 34 2c 68 35 2c 68 36 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 53 6f 75 72 63 65 20 53 65 72 69 66 20 50 72 6f 27 2c 73 65 72 69 66 7d 0a 0a 2e Data Ascii: *{margin:0;padding:0}body {background:#eceff1;color: #263238;font-family: 'Source Sans Pro', sans-serif;text-rendering: optimizeLegibility;font-size:1.2rem;line-height:1.5rem;}h1,h2,h3,h3,h4,h5,h6 {font-family:'Source Serif Pro',serif}.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49737	54.76.66.215	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:32 UTC	627	OUT	GET /scripts/jquery.js HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mydomaincontact.com/index.php?domain_name=le100.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-2444609017588254eb9aa441d74694fe=1
2024-07-08 15:53:32 UTC	250	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 15:53:32 GMT Content-Type: application/javascript Content-Length: 85260 Connection: close Server: nginx/1.20.1 Last-Modified: Thu, 11 Apr 2024 15:42:26 GMT ETag: "661804e2-14d0c" Accept-Ranges: bytes
2024-07-08 15:53:32 UTC	16134	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 35 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2c 20 4a 6f 68 6e 20 52 65 73 69 67 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6f 72 20 47 50 4c 20 56 65 72 73 69 6f 6e 20 32 20 6c 69 63 65 6e 73 65 73 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2c 20 54 68 65 20 44 Data Ascii: /! jQuery JavaScript Library v1.5.1 * http://jquery.com/ * * Copyright 2011, John Resig * Dual licensed under the MIT or GPL Version 2 licenses. * http://jquery.org/license * * Includes Sizzle.js * http://sizzlejs.com/ * Copyright 2011, The D
2024-07-08 15:53:32 UTC	10458	IN	Data Raw: 65 73 74 28 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 29 29 2c 68 72 65 66 4e 6f 72 6d 61 6c 69 7a 65 64 3a 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3d 3d 3d 22 2f 61 22 2c 6f 70 61 63 69 74 79 3a 2f 5e 30 2e 35 35 24 2f 2e 74 65 73 74 28 66 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 29 2c 63 73 73 46 6c 6f 61 74 3a 21 21 66 2e 73 74 79 6c 65 2e 63 73 73 46 6c 6f 61 74 2c 63 68 65 63 6b 4f 6e 3a 69 2e 76 61 6c 75 65 3d 3d 3d 22 6f 6e 22 2c 6f 70 74 53 65 6c 65 63 74 65 64 3a 68 2e 73 65 6c 65 63 74 65 64 2c 64 65 6c 65 74 65 45 78 70 61 6e 64 6f 3a 21 30 2c 6f 70 74 44 69 73 61 62 6c 65 64 3a 21 31 2c 63 68 65 63 6b 43 6c 6f 6e 65 3a 21 31 2c 6e 6f 43 6c 6f 6e 65 45 76 65 6e 74 3a 21 30 2c 6e 6f 43 6c 6f 6e Data Ascii: est(f.getAttribute("style")),hrefNormalized:f.getAttribute("href")==="/a",opacity:/^0.55$/.test(f.style.opacity),cssFloat:!!f.style.cssFloat,checkOn:i.value==="on",optSelected:h.selected,deleteExpando:!0,optDisabled:!1,checkClone:!1,noCloneEvent:!0,noClon
2024-07-08 15:53:32 UTC	16384	IN	Data Raw: 2e 74 79 70 65 3d 6e 2c 6a 2e 67 75 69 64 7c 7c 28 6a 2e 67 75 69 64 3d 66 2e 67 75 69 64 29 3b 76 61 72 20 71 3d 6c 5b 6e 5d 2c 72 3d 64 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 6e 5d 7c 7c 7b 7d 3b 69 66 28 21 71 29 7b 71 3d 6c 5b 6e 5d 3d 5b 5d 3b 69 66 28 21 72 2e 73 65 74 75 70 7c 7c 72 2e 73 65 74 75 70 2e 63 61 6c 6c 28 63 2c 67 2c 70 2c 6d 29 3d 3d 3d 21 31 29 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 6e 2c 6d 2c 21 31 29 3a 63 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 63 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 6e 2c 6d 29 7d 72 2e 61 64 64 26 26 28 72 2e 61 64 64 2e 63 61 6c 6c 28 63 2c 6a 29 2c 6a 2e 68 61 6e 64 6c 65 72 2e 67 75 69 64 7c 7c 28 6a 2e 68 61 Data Ascii: .type=n,j.guid\|\|(j.guid=f.guid);var q=l[n],r=d.event.special[n]\|\|{};if(!q){q=l[n]=[];if(!r.setup\|\|r.setup.call(c,g,p,m)===!1)c.addEventListener?c.addEventListener(n,m,!1):c.attachEvent&&c.attachEvent("on"+n,m)}r.add&&(r.add.call(c,j),j.handler.guid\|\|(j.ha
2024-07-08 15:53:33 UTC	16384	IN	Data Raw: 2d 30 7d 65 6c 73 65 20 61 5b 32 5d 26 26 6b 2e 65 72 72 6f 72 28 61 5b 30 5d 29 3b 61 5b 30 5d 3d 65 2b 2b 3b 72 65 74 75 72 6e 20 61 7d 2c 41 54 54 52 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 29 7b 76 61 72 20 67 3d 61 5b 31 5d 3d 61 5b 31 5d 2e 72 65 70 6c 61 63 65 28 69 2c 22 22 29 3b 21 66 26 26 6c 2e 61 74 74 72 4d 61 70 5b 67 5d 26 26 28 61 5b 31 5d 3d 6c 2e 61 74 74 72 4d 61 70 5b 67 5d 29 2c 61 5b 34 5d 3d 28 61 5b 34 5d 7c 7c 61 5b 35 5d 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 69 2c 22 22 29 2c 61 5b 32 5d 3d 3d 3d 22 7e 3d 22 26 26 28 61 5b 34 5d 3d 22 20 22 2b 61 5b 34 5d 2b 22 20 22 29 3b 72 65 74 75 72 6e 20 61 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 2c 65 2c 66 29 7b 69 66 28 62 5b 31 5d Data Ascii: -0}else a[2]&&k.error(a[0]);a[0]=e++;return a},ATTR:function(a,b,c,d,e,f){var g=a[1]=a[1].replace(i,"");!f&&l.attrMap[g]&&(a[1]=l.attrMap[g]),a[4]=(a[4]\|\|a[5]\|\|"").replace(i,""),a[2]==="~="&&(a[4]=" "+a[4]+" ");return a},PSEUDO:function(b,c,d,e,f){if(b[1]
2024-07-08 15:53:33 UTC	16384	IN	Data Raw: 5d 3d 68 3f 66 3a 31 29 3b 72 65 74 75 72 6e 7b 66 72 61 67 6d 65 6e 74 3a 66 2c 63 61 63 68 65 61 62 6c 65 3a 67 7d 7d 2c 64 2e 66 72 61 67 6d 65 6e 74 73 3d 7b 7d 2c 64 2e 65 61 63 68 28 7b 61 70 70 65 6e 64 54 6f 3a 22 61 70 70 65 6e 64 22 2c 70 72 65 70 65 6e 64 54 6f 3a 22 70 72 65 70 65 6e 64 22 2c 69 6e 73 65 72 74 42 65 66 6f 72 65 3a 22 62 65 66 6f 72 65 22 2c 69 6e 73 65 72 74 41 66 74 65 72 3a 22 61 66 74 65 72 22 2c 72 65 70 6c 61 63 65 41 6c 6c 3a 22 72 65 70 6c 61 63 65 57 69 74 68 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 64 2e 66 6e 5b 61 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 65 3d 5b 5d 2c 66 3d 64 28 63 29 2c 67 3d 74 68 69 73 2e 6c 65 6e 67 74 68 3d 3d 3d 31 26 26 74 68 69 73 5b 30 5d 2e 70 61 72 65 6e 74 4e 6f Data Ascii: ]=h?f:1);return{fragment:f,cacheable:g}},d.fragments={},d.each({appendTo:"append",prependTo:"prepend",insertBefore:"before",insertAfter:"after",replaceAll:"replaceWith"},function(a,b){d.fn[a]=function(c){var e=[],f=d(c),g=this.length===1&&this[0].parentNo
2024-07-08 15:53:33 UTC	9516	IN	Data Raw: 6c 69 6e 65 22 2c 74 68 69 73 2e 73 74 79 6c 65 2e 7a 6f 6f 6d 3d 31 29 7d 65 6c 73 65 20 74 68 69 73 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 22 7d 64 2e 69 73 41 72 72 61 79 28 61 5b 63 5d 29 26 26 28 28 62 2e 73 70 65 63 69 61 6c 45 61 73 69 6e 67 3d 62 2e 73 70 65 63 69 61 6c 45 61 73 69 6e 67 7c 7c 7b 7d 29 5b 63 5d 3d 61 5b 63 5d 5b 31 5d 2c 61 5b 63 5d 3d 61 5b 63 5d 5b 30 5d 29 7d 62 2e 6f 76 65 72 66 6c 6f 77 21 3d 6e 75 6c 6c 26 26 28 74 68 69 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 65 6e 22 29 2c 62 2e 63 75 72 41 6e 69 6d 3d 64 2e 65 78 74 65 6e 64 28 7b 7d 2c 61 29 2c 64 2e 65 61 63 68 28 61 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 65 29 7b 76 61 72 20 66 3d 6e 65 77 20 64 2e 66 Data Ascii: line",this.style.zoom=1)}else this.style.display="inline-block"}d.isArray(a[c])&&((b.specialEasing=b.specialEasing\|\|{})[c]=a[c][1],a[c]=a[c][0])}b.overflow!=null&&(this.style.overflow="hidden"),b.curAnim=d.extend({},a),d.each(a,function(c,e){var f=new d.f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49738	54.76.66.215	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:32 UTC	640	OUT	GET /scripts/select2/select2.min.js HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mydomaincontact.com/index.php?domain_name=le100.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-2444609017588254eb9aa441d74694fe=1
2024-07-08 15:53:32 UTC	249	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 15:53:32 GMT Content-Type: application/javascript Content-Length: 41867 Connection: close Server: nginx/1.20.1 Last-Modified: Thu, 11 Apr 2024 15:42:26 GMT ETag: "661804e2-a38b" Accept-Ranges: bytes
2024-07-08 15:53:32 UTC	16135	IN	Data Raw: 2f 2a 0a 43 6f 70 79 72 69 67 68 74 20 32 30 31 32 20 49 67 6f 72 20 56 61 79 6e 62 65 72 67 0a 0a 56 65 72 73 69 6f 6e 3a 20 33 2e 33 2e 32 20 54 69 6d 65 73 74 61 6d 70 3a 20 4d 6f 6e 20 4d 61 72 20 32 35 20 31 32 3a 31 34 3a 31 38 20 50 44 54 20 32 30 31 33 0a 0a 54 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 22 29 20 6f 72 20 74 68 65 20 47 4e 55 0a 47 65 6e 65 72 61 6c 20 50 75 62 6c 69 63 20 4c 69 63 65 6e 73 65 20 76 65 72 73 69 6f 6e 20 32 20 28 74 68 65 20 22 47 50 4c 20 4c 69 63 65 6e 73 65 22 29 2e 20 59 6f 75 20 6d 61 79 20 63 68 6f 6f 73 65 Data Ascii: /*Copyright 2012 Igor VaynbergVersion: 3.3.2 Timestamp: Mon Mar 25 12:14:18 PDT 2013This software is licensed under the Apache License, Version 2.0 (the "Apache License") or the GNUGeneral Public License version 2 (the "GPL License"). You may choose
2024-07-08 15:53:32 UTC	16379	IN	Data Raw: 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 6f 70 65 6e 65 64 28 29 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 49 64 2c 63 3d 22 73 63 72 6f 6c 6c 2e 22 2b 62 2c 64 3d 22 72 65 73 69 7a 65 2e 22 2b 62 2c 65 3d 22 6f 72 69 65 6e 74 61 74 69 6f 6e 63 68 61 6e 67 65 2e 22 2b 62 3b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 70 61 72 65 6e 74 73 28 29 2e 61 64 64 28 77 69 6e 64 6f 77 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 28 74 68 69 73 29 2e 75 6e 62 69 6e 64 28 63 29 2e 75 6e 62 69 6e 64 28 64 29 2e 75 6e 62 69 6e 64 28 65 29 7d 29 2c 74 68 69 73 2e 63 6c 65 61 72 44 72 6f 70 64 6f 77 6e 41 6c 69 67 6e 6d 65 6e 74 50 72 65 66 65 72 65 6e 63 65 28 29 2c 61 28 22 23 73 65 6c 65 63 74 32 2d 64 72 6f 70 2d 6d 61 73 6b 22 Data Ascii: ion(){if(this.opened()){var b=this.containerId,c="scroll."+b,d="resize."+b,e="orientationchange."+b;this.container.parents().add(window).each(function(){a(this).unbind(c).unbind(d).unbind(e)}),this.clearDropdownAlignmentPreference(),a("#select2-drop-mask"
2024-07-08 15:53:32 UTC	9353	IN	Data Raw: 52 26 26 75 28 61 29 7d 7d 7d 29 29 2c 74 68 69 73 2e 73 65 61 72 63 68 2e 62 69 6e 64 28 22 6b 65 79 75 70 22 2c 74 68 69 73 2e 62 69 6e 64 28 74 68 69 73 2e 72 65 73 69 7a 65 53 65 61 72 63 68 29 29 2c 74 68 69 73 2e 73 65 61 72 63 68 2e 62 69 6e 64 28 22 62 6c 75 72 22 2c 74 68 69 73 2e 62 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 61 63 74 69 76 65 22 29 2c 74 68 69 73 2e 73 65 61 72 63 68 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 73 65 6c 65 63 74 32 2d 66 6f 63 75 73 65 64 22 29 2c 74 68 69 73 2e 6f 70 65 6e 65 64 28 29 7c 7c 74 68 69 73 2e 63 6c 65 61 72 53 65 61 72 63 68 28 29 2c 61 2e 73 74 6f 70 49 6d 6d Data Ascii: R&&u(a)}}})),this.search.bind("keyup",this.bind(this.resizeSearch)),this.search.bind("blur",this.bind(function(a){this.container.removeClass("select2-container-active"),this.search.removeClass("select2-focused"),this.opened()\|\|this.clearSearch(),a.stopImm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49740	142.250.186.164	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:32 UTC	640	OUT	GET /recaptcha/api.js?hl=en HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mydomaincontact.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:53:32 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Mon, 08 Jul 2024 15:53:32 GMT Date: Mon, 08 Jul 2024 15:53:32 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-08 15:53:32 UTC	862	IN	Data Raw: 35 39 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-07-08 15:53:32 UTC	579	IN	Data Raw: 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e 67 65 74 56 61 6c 75 65 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 69 66 28 6c 21 3d 3d 27 74 72 65 61 74 6d 65 6e 74 5f 31 2e 31 27 26 26 6c 21 3d 3d 27 74 72 65 61 74 6d 65 6e 74 5f 31 2e 32 27 26 26 6c 21 3d 3d 27 63 6f 6e 74 72 6f 6c 5f 31 2e 31 27 29 7b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 7d 7d 29 3b 7d 65 6c 73 65 7b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 7d 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 4b 62 54 76 78 54 78 77 63 77 35 56 71 7a 72 74 4e 2d 49 43 77 57 74 2f 72 65 63 61 70 74 Data Ascii: onLabel){v.cookieDeprecationLabel.getValue().then(function(l){if(l!=='treatment_1.1'&&l!=='treatment_1.2'&&l!=='control_1.1'){d.head.prepend(m);}});}else{d.head.prepend(m);}po.src='https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recapt
2024-07-08 15:53:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49745	54.76.66.215	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:33 UTC	625	OUT	GET /forms/script.js HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mydomaincontact.com/index.php?domain_name=le100.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-2444609017588254eb9aa441d74694fe=1
2024-07-08 15:53:34 UTC	247	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 15:53:33 GMT Content-Type: application/javascript Content-Length: 2421 Connection: close Server: nginx/1.20.1 Last-Modified: Thu, 11 Apr 2024 15:42:26 GMT ETag: "661804e2-975" Accept-Ranges: bytes
2024-07-08 15:53:34 UTC	2421	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 24 28 27 69 6e 70 75 74 2e 69 6e 70 75 74 74 65 78 74 3a 66 69 72 73 74 27 29 2e 66 6f 63 75 73 28 29 3b 0a 0a 0a 09 2f 2f 20 2d 2d 20 69 6e 69 74 69 61 74 65 20 73 61 6c 65 20 6f 72 20 73 65 6e 64 20 6f 66 66 65 72 0a 09 24 28 22 69 6e 70 75 74 2e 73 75 62 6d 69 74 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 09 09 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0a 09 09 24 28 74 68 69 73 29 2e 61 64 64 43 6c 61 73 73 28 22 73 70 69 6e 6e 65 72 22 29 3b 0a 09 09 24 28 22 2e 69 6e 70 75 74 45 72 72 6f 72 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 69 6e 70 75 74 45 72 72 6f 72 22 29 3b 0a 0a 20 20 20 20 20 20 20 20 Data Ascii: $(document).ready(function() { $('input.inputtext:first').focus();// -- initiate sale or send offer$("input.submit").click(function(e) {e.preventDefault();$(this).addClass("spinner");$(".inputError").removeClass("inputError");

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49748	54.76.66.215	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:33 UTC	631	OUT	GET /forms/script-addon.js HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mydomaincontact.com/index.php?domain_name=le100.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-2444609017588254eb9aa441d74694fe=1
2024-07-08 15:53:34 UTC	246	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 15:53:34 GMT Content-Type: application/javascript Content-Length: 396 Connection: close Server: nginx/1.20.1 Last-Modified: Thu, 11 Apr 2024 15:42:26 GMT ETag: "661804e2-18c" Accept-Ranges: bytes
2024-07-08 15:53:34 UTC	396	IN	Data Raw: 2f 2f 20 2d 2d 20 61 64 64 69 74 69 6f 6e 61 6c 20 73 63 72 69 70 74 20 66 6f 72 20 74 68 65 20 73 61 6c 65 20 6f 66 66 65 72 20 76 65 72 73 69 6f 6e 20 6f 66 20 74 68 65 20 66 6f 72 6d 0a 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 24 28 22 23 63 75 72 72 65 6e 63 79 22 29 2e 73 65 6c 65 63 74 32 28 7b 6d 69 6e 69 6d 75 6d 52 65 73 75 6c 74 73 46 6f 72 53 65 61 72 63 68 3a 20 2d 31 7d 29 3b 0a 7d 29 3b 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 53 61 6c 65 50 72 69 63 65 56 61 6c 69 64 28 29 20 7b 0a 20 20 20 20 24 28 22 23 70 72 69 63 65 48 6f 6c 64 65 72 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 69 6e 70 75 74 45 72 72 6f 72 27 29 3b 0a 20 20 20 20 76 61 72 20 76 61 6c 20 3d 20 24 28 Data Ascii: // -- additional script for the sale offer version of the form$(document).ready(function() { $("#currency").select2({minimumResultsForSearch: -1});});function isSalePriceValid() { $("#priceHolder").removeClass('inputError'); var val = $(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49747	54.76.66.215	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:33 UTC	686	OUT	GET /images/trust.svg HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mydomaincontact.com/index.php?domain_name=le100.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-2444609017588254eb9aa441d74694fe=1
2024-07-08 15:53:34 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 15:53:34 GMT Content-Type: image/svg+xml Content-Length: 20199 Connection: close Server: nginx/1.20.1 Last-Modified: Thu, 11 Apr 2024 15:42:26 GMT ETag: "661804e2-4ee7" Accept-Ranges: bytes
2024-07-08 15:53:34 UTC	16144	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 38 20 33 38 22 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 09 2e 73 74 30 7b 66 69 6c 6c 3a 23 62 30 62 65 63 35 3b 7d 0a 3c 2f 73 74 79 6c 65 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 32 34 34 2e 37 20 31 32 2e 32 76 32 2e 31 63 30 20 30 2e 33 2d 30 2e 31 20 30 2e 36 2d 30 2e 32 20 30 2e 38 73 2d 30 2e 34 20 30 2e 33 2d 30 2e 36 20 30 2e 33 63 2d 30 2e 32 20 30 2d 30 2e 34 2d 30 2e 31 2d 30 2e 36 2d 30 2e 33 73 2d 30 2e 32 2d 30 2e 34 2d 30 2e 32 2d 30 2e 38 76 2d 32 2e 35 63 30 2d 30 2e 34 20 30 2d 30 2e 37 20 30 2d 30 2e 39 73 2d 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 288 38"><style type="text/css">.st0{fill:#b0bec5;}</style><path class="st0" d="M244.7 12.2v2.1c0 0.3-0.1 0.6-0.2 0.8s-0.4 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8v-2.5c0-0.4 0-0.7 0-0.9s-0
2024-07-08 15:53:34 UTC	4055	IN	Data Raw: 2d 30 2e 32 20 30 2e 33 2d 30 2e 32 20 30 2e 32 2d 30 2e 31 20 30 2e 34 2d 30 2e 31 63 30 2e 31 20 30 20 30 2e 33 20 30 20 30 2e 34 20 30 2e 31 73 30 2e 32 20 30 2e 31 20 30 2e 33 20 30 2e 32 20 30 2e 32 20 30 2e 32 20 30 2e 32 20 30 2e 33 20 30 2e 31 20 30 2e 32 20 30 2e 31 20 30 2e 34 20 30 20 30 2e 33 2d 30 2e 31 20 30 2e 34 20 2d 30 2e 31 20 30 2e 32 2d 30 2e 32 20 30 2e 33 20 2d 30 2e 32 20 30 2e 32 2d 30 2e 33 20 30 2e 32 20 2d 30 2e 33 20 30 2e 31 2d 30 2e 34 20 30 2e 31 63 2d 30 2e 31 20 30 2d 30 2e 33 20 30 2d 30 2e 34 2d 30 2e 31 73 2d 30 2e 32 2d 30 2e 31 2d 30 2e 33 2d 30 2e 32 20 2d 30 2e 32 2d 30 2e 32 2d 30 2e 32 2d 30 2e 33 53 31 35 37 2e 33 20 31 30 2e 35 20 31 35 37 2e 33 20 31 30 2e 34 7a 4d 31 35 37 2e 34 20 31 32 2e 37 68 31 2e 38 76 Data Ascii: -0.2 0.3-0.2 0.2-0.1 0.4-0.1c0.1 0 0.3 0 0.4 0.1s0.2 0.1 0.3 0.2 0.2 0.2 0.2 0.3 0.1 0.2 0.1 0.4 0 0.3-0.1 0.4 -0.1 0.2-0.2 0.3 -0.2 0.2-0.3 0.2 -0.3 0.1-0.4 0.1c-0.1 0-0.3 0-0.4-0.1s-0.2-0.1-0.3-0.2 -0.2-0.2-0.2-0.3S157.3 10.5 157.3 10.4zM157.4 12.7h1.8v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49753	54.76.66.215	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:35 UTC	693	OUT	GET /scripts/select2/select2.png HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mydomaincontact.com/scripts/select2/select2.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-2444609017588254eb9aa441d74694fe=1
2024-07-08 15:53:35 UTC	233	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 15:53:35 GMT Content-Type: image/png Content-Length: 613 Connection: close Server: nginx/1.20.1 Last-Modified: Thu, 11 Apr 2024 15:42:26 GMT ETag: "661804e2-265" Accept-Ranges: bytes
2024-07-08 15:53:35 UTC	613	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 28 08 06 00 00 00 a2 bb 99 ff 00 00 02 2c 49 44 41 54 78 da ed d9 cf 4b 14 61 1c c7 f1 b5 08 4a 8c 85 d6 2e 62 5d 2a 28 c9 88 0e 11 76 a9 64 d6 0d a2 3c 14 fd a0 1f 50 04 fd 03 86 21 52 07 71 b7 54 e8 d0 a1 48 04 23 08 bc 47 14 11 79 ed 52 d8 af a5 8b 94 85 81 48 74 30 4c 98 3e bd 85 ef e1 39 b8 2c 6d 29 db d7 79 e0 75 98 d9 85 7d de 3b cf cc 0e b3 29 49 cb 4a 12 bc 2c 83 ff c7 51 28 14 ee e3 58 b0 1d e1 1e 56 b8 0b 26 ea 12 84 4f 68 c2 46 14 21 0c 7b 0c 6e c6 7b 08 93 98 80 2c fa a0 d7 25 5d 8f d7 90 19 47 63 8a e1 35 78 0b 3e 40 e6 33 b6 bb 0c 26 ac 05 93 c1 32 1e 0b 96 f7 99 25 0f e6 43 d3 c8 2c 62 f0 45 08 13 d8 80 75 c1 39 3d 54 36 98 37 9d c4 29 9c 08 9c 45 ba c2 09 0d e3 f1 22 1f Data Ascii: PNGIHDR<(,IDATxKaJ.b]*(vd<P!RqTH#GyRHt0L>9,m)yu};)IJ,Q(XV&OhF!{n{,%]Gc5x>@3&2%C,bEu9=T67)E"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49755	99.80.85.24	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:35 UTC	411	OUT	GET /images/trust.svg HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-2444609017588254eb9aa441d74694fe=1
2024-07-08 15:53:35 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 15:53:35 GMT Content-Type: image/svg+xml Content-Length: 20199 Connection: close Server: nginx/1.20.1 Last-Modified: Thu, 11 Apr 2024 15:42:26 GMT ETag: "661804e2-4ee7" Accept-Ranges: bytes
2024-07-08 15:53:35 UTC	16144	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 38 38 20 33 38 22 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 09 2e 73 74 30 7b 66 69 6c 6c 3a 23 62 30 62 65 63 35 3b 7d 0a 3c 2f 73 74 79 6c 65 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 30 22 20 64 3d 22 4d 32 34 34 2e 37 20 31 32 2e 32 76 32 2e 31 63 30 20 30 2e 33 2d 30 2e 31 20 30 2e 36 2d 30 2e 32 20 30 2e 38 73 2d 30 2e 34 20 30 2e 33 2d 30 2e 36 20 30 2e 33 63 2d 30 2e 32 20 30 2d 30 2e 34 2d 30 2e 31 2d 30 2e 36 2d 30 2e 33 73 2d 30 2e 32 2d 30 2e 34 2d 30 2e 32 2d 30 2e 38 76 2d 32 2e 35 63 30 2d 30 2e 34 20 30 2d 30 2e 37 20 30 2d 30 2e 39 73 2d 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 288 38"><style type="text/css">.st0{fill:#b0bec5;}</style><path class="st0" d="M244.7 12.2v2.1c0 0.3-0.1 0.6-0.2 0.8s-0.4 0.3-0.6 0.3c-0.2 0-0.4-0.1-0.6-0.3s-0.2-0.4-0.2-0.8v-2.5c0-0.4 0-0.7 0-0.9s-0
2024-07-08 15:53:35 UTC	4055	IN	Data Raw: 2d 30 2e 32 20 30 2e 33 2d 30 2e 32 20 30 2e 32 2d 30 2e 31 20 30 2e 34 2d 30 2e 31 63 30 2e 31 20 30 20 30 2e 33 20 30 20 30 2e 34 20 30 2e 31 73 30 2e 32 20 30 2e 31 20 30 2e 33 20 30 2e 32 20 30 2e 32 20 30 2e 32 20 30 2e 32 20 30 2e 33 20 30 2e 31 20 30 2e 32 20 30 2e 31 20 30 2e 34 20 30 20 30 2e 33 2d 30 2e 31 20 30 2e 34 20 2d 30 2e 31 20 30 2e 32 2d 30 2e 32 20 30 2e 33 20 2d 30 2e 32 20 30 2e 32 2d 30 2e 33 20 30 2e 32 20 2d 30 2e 33 20 30 2e 31 2d 30 2e 34 20 30 2e 31 63 2d 30 2e 31 20 30 2d 30 2e 33 20 30 2d 30 2e 34 2d 30 2e 31 73 2d 30 2e 32 2d 30 2e 31 2d 30 2e 33 2d 30 2e 32 20 2d 30 2e 32 2d 30 2e 32 2d 30 2e 32 2d 30 2e 33 53 31 35 37 2e 33 20 31 30 2e 35 20 31 35 37 2e 33 20 31 30 2e 34 7a 4d 31 35 37 2e 34 20 31 32 2e 37 68 31 2e 38 76 Data Ascii: -0.2 0.3-0.2 0.2-0.1 0.4-0.1c0.1 0 0.3 0 0.4 0.1s0.2 0.1 0.3 0.2 0.2 0.2 0.2 0.3 0.1 0.2 0.1 0.4 0 0.3-0.1 0.4 -0.1 0.2-0.2 0.3 -0.2 0.2-0.3 0.2 -0.3 0.1-0.4 0.1c-0.1 0-0.3 0-0.4-0.1s-0.2-0.1-0.3-0.2 -0.2-0.2-0.2-0.3S157.3 10.5 157.3 10.4zM157.4 12.7h1.8v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49757	142.250.184.196	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:35 UTC	963	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfbieIZAAAAAP0ROP-R-UOaui3c-7SDJ_GhtUsh&co=aHR0cHM6Ly93d3cubXlkb21haW5jb250YWN0LmNvbTo0NDM.&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=6bw44qgzuywj HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mydomaincontact.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:53:36 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 08 Jul 2024 15:53:35 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-OaXS9-qQEDCYOU47k4L6bA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-08 15:53:36 UTC	499	IN	Data Raw: 32 61 65 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2aea<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-07-08 15:53:36 UTC	1390	IN	Data Raw: 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 35 6d 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 Data Ascii: FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04
2024-07-08 15:53:36 UTC	1390	IN	Data Raw: 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 6d 78 4b 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b Data Ascii: EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2) format('woff2');
2024-07-08 15:53:36 UTC	1390	IN	Data Raw: 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f Data Ascii: 4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/robo
2024-07-08 15:53:36 UTC	1390	IN	Data Raw: 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e Data Ascii: format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCn
2024-07-08 15:53:36 UTC	1390	IN	Data Raw: 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 Data Ascii: nqEu92Fr1MmYUtfChc4EsA.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-s
2024-07-08 15:53:36 UTC	1390	IN	Data Raw: 38 4f 43 5f 78 72 79 50 6c 77 4b 2d 5f 50 37 56 61 53 47 6c 57 2d 66 2d 5f 4e 65 5a 49 74 4a 52 6d 6e 42 34 70 62 4a 4a 66 6c 77 6c 37 5f 4b 43 6c 7a 46 57 6e 30 71 53 4b 36 31 57 47 49 46 69 61 41 36 35 6a 4f 52 38 5a 55 4e 31 59 71 61 68 76 61 4a 6c 54 6c 61 6c 51 4e 42 50 34 51 31 44 68 6c 59 50 30 49 69 6c 33 54 57 64 50 47 46 2d 4d 45 69 36 5f 61 4e 5a 35 55 6c 6f 33 65 39 54 35 55 4b 66 33 37 5a 2d 6e 70 4a 62 70 69 58 75 7a 54 4e 5f 66 42 34 34 36 69 75 38 4b 6d 63 70 6f 34 2d 68 58 73 73 74 35 33 6c 73 4b 55 61 75 42 59 41 77 6b 6f 5a 65 62 77 78 57 73 44 68 76 58 5a 4f 45 4c 6b 38 67 68 54 6c 74 69 4a 41 50 50 76 53 6c 49 54 32 44 6c 48 41 44 66 4f 7a 6d 57 4d 41 76 32 77 64 6c 71 76 67 61 57 57 35 6d 6b 37 45 71 37 51 69 61 4f 6b 52 74 6f 75 75 Data Ascii: 8OC_xryPlwK-_P7VaSGlW-f-_NeZItJRmnB4pbJJflwl7_KClzFWn0qSK61WGIFiaA65jOR8ZUN1YqahvaJlTlalQNBP4Q1DhlYP0Iil3TWdPGF-MEi6_aNZ5Ulo3e9T5UKf37Z-npJbpiXuzTN_fB446iu8Kmcpo4-hXsst53lsKUauBYAwkoZebwxWsDhvXZOELk8ghTltiJAPPvSlIT2DlHADfOzmWMAv2wdlqvgaWW5mk7Eq7QiaOkRtouu
2024-07-08 15:53:36 UTC	1390	IN	Data Raw: 5f 50 56 39 4b 41 57 76 52 2d 50 41 63 68 32 32 6f 66 6c 76 36 72 65 74 52 48 73 67 62 63 34 7a 4c 65 32 54 44 6b 33 73 32 76 74 73 4f 65 6e 53 63 6d 4f 6e 30 31 4a 30 30 44 72 4c 43 59 77 52 54 69 36 2d 6b 41 59 34 70 6e 5a 59 33 55 6d 6e 35 5a 58 37 72 78 5a 52 49 70 71 5f 53 31 32 66 71 57 47 33 35 76 55 70 4f 42 4a 6d 77 47 31 49 69 76 67 77 4e 52 4b 6a 36 61 41 4a 58 42 43 71 46 30 6b 76 42 31 57 6c 71 38 71 59 54 78 66 69 38 43 62 32 43 50 4d 5a 56 63 56 59 54 4b 31 5a 71 33 50 41 4b 62 51 4c 6b 49 6a 35 30 34 6d 66 31 36 4d 61 36 61 6c 6f 49 70 50 50 56 56 5a 58 41 37 79 59 4e 6e 45 59 4a 69 47 46 50 47 30 31 52 59 6f 4c 4b 66 7a 73 77 68 30 63 43 6b 58 5f 51 69 30 4c 45 52 59 38 4a 48 77 51 56 4a 70 34 51 4a 61 55 58 53 36 32 31 52 45 58 42 56 78 Data Ascii: _PV9KAWvR-PAch22oflv6retRHsgbc4zLe2TDk3s2vtsOenScmOn01J00DrLCYwRTi6-kAY4pnZY3Umn5ZX7rxZRIpq_S12fqWG35vUpOBJmwG1IivgwNRKj6aAJXBCqF0kvB1Wlq8qYTxfi8Cb2CPMZVcVYTK1Zq3PAKbQLkIj504mf16Ma6aloIpPPVVZXA7yYNnEYJiGFPG01RYoLKfzswh0cCkX_Qi0LERY8JHwQVJp4QJaUXS621REXBVx
2024-07-08 15:53:36 UTC	765	IN	Data Raw: 48 6c 6b 61 6a 4a 68 54 7a 51 35 52 7a 5a 78 61 6b 4a 58 64 47 4e 75 51 32 78 6a 57 6e 46 55 61 6a 49 35 62 6c 64 61 63 7a 51 76 5a 46 6b 76 56 6a 52 61 62 55 78 6a 51 56 46 34 56 58 70 59 4f 56 6c 52 4b 33 6c 4e 59 57 51 30 63 58 59 30 57 69 74 58 56 53 73 32 52 45 52 52 4f 44 46 68 4d 31 6f 77 51 6c 6c 76 51 55 78 50 59 57 34 72 57 57 56 49 4b 30 78 4c 57 58 64 48 4e 48 52 55 54 30 56 72 4d 45 4a 35 62 6d 4a 4b 4d 6a 56 43 61 6e 70 6f 53 47 45 35 55 6d 52 48 52 47 78 4c 55 6d 52 4c 57 6a 4a 4e 4d 6c 42 51 55 32 68 5a 56 6b 52 70 62 6e 64 6e 62 57 4e 30 59 6b 70 42 63 6c 45 30 52 47 49 79 61 58 70 76 5a 48 42 35 64 32 74 52 61 6b 52 4c 61 45 59 79 4e 58 67 31 51 6e 52 6e 65 47 70 31 63 56 42 55 56 45 31 48 51 56 4d 78 62 57 31 75 54 33 63 79 4d 54 52 70 Data Ascii: HlkajJhTzQ5RzZxakJXdGNuQ2xjWnFUajI5bldaczQvZFkvVjRabUxjQVF4VXpYOVlRK3lNYWQ0cXY0WitXVSs2RERRODFhM1owQllvQUxPYW4rWWVIK0xLWXdHNHRUT0VrMEJ5bmJKMjVCanpoSGE5UmRHRGxLUmRLWjJNMlBQU2hZVkRpbndnbWN0YkpBclE0RGIyaXpvZHB5d2tRakRLaEYyNXg1QnRneGp1cVBUVE1HQVMxbW1uT3cyMTRp
2024-07-08 15:53:36 UTC	1390	IN	Data Raw: 32 63 36 63 0d 0a 64 58 67 79 55 54 68 7a 55 44 46 76 61 54 4a 33 54 47 56 70 53 55 74 46 4c 33 70 7a 62 46 42 61 54 57 70 55 52 46 56 5a 52 57 31 6d 53 48 68 6e 55 7a 4a 52 56 33 70 6e 65 6e 4e 77 64 55 34 79 61 54 59 79 52 32 5a 61 5a 6b 6c 4a 62 47 39 45 51 54 68 58 61 47 64 59 59 6d 56 47 65 6a 4a 4c 4f 43 74 43 62 56 64 31 62 6d 68 47 61 6d 52 4e 5a 6d 6c 59 57 6b 4e 43 64 33 64 4c 4d 57 4a 6a 59 57 6c 49 4f 54 6b 35 61 46 70 56 59 31 5a 71 52 53 74 4a 61 6b 78 4e 4d 31 68 71 57 69 39 33 4d 6e 56 53 59 32 4e 35 63 30 5a 74 63 30 6c 44 4c 33 45 77 56 48 4a 6f 4e 33 42 70 53 30 38 34 4d 6c 56 34 55 55 49 79 4e 6b 4a 4c 61 47 74 30 52 6d 78 53 4e 43 74 33 57 6c 4a 6d 59 33 64 46 62 55 39 53 62 48 64 32 63 33 6c 58 61 32 52 57 56 46 5a 52 61 47 31 52 55 Data Ascii: 2c6cdXgyUThzUDFvaTJ3TGVpSUtFL3pzbFBaTWpURFVZRW1mSHhnUzJRV3pnenNwdU4yaTYyR2ZaZklJbG9EQThXaGdYYmVGejJLOCtCbVd1bmhGamRNZmlYWkNCd3dLMWJjYWlIOTk5aFpVY1ZqRStJakxNM1hqWi93MnVSY2N5c0Ztc0lDL3EwVHJoN3BpS084MlV4UUIyNkJLaGt0RmxSNCt3WlJmY3dFbU9SbHd2c3lXa2RWVFZRaG1RU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49758	99.80.85.24	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:36 UTC	422	OUT	GET /scripts/select2/select2.png HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-2444609017588254eb9aa441d74694fe=1
2024-07-08 15:53:36 UTC	233	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 15:53:36 GMT Content-Type: image/png Content-Length: 613 Connection: close Server: nginx/1.20.1 Last-Modified: Thu, 11 Apr 2024 15:42:26 GMT ETag: "661804e2-265" Accept-Ranges: bytes
2024-07-08 15:53:36 UTC	613	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 3c 00 00 00 28 08 06 00 00 00 a2 bb 99 ff 00 00 02 2c 49 44 41 54 78 da ed d9 cf 4b 14 61 1c c7 f1 b5 08 4a 8c 85 d6 2e 62 5d 2a 28 c9 88 0e 11 76 a9 64 d6 0d a2 3c 14 fd a0 1f 50 04 fd 03 86 21 52 07 71 b7 54 e8 d0 a1 48 04 23 08 bc 47 14 11 79 ed 52 d8 af a5 8b 94 85 81 48 74 30 4c 98 3e bd 85 ef e1 39 b8 2c 6d 29 db d7 79 e0 75 98 d9 85 7d de 3b cf cc 0e b3 29 49 cb 4a 12 bc 2c 83 ff c7 51 28 14 ee e3 58 b0 1d e1 1e 56 b8 0b 26 ea 12 84 4f 68 c2 46 14 21 0c 7b 0c 6e c6 7b 08 93 98 80 2c fa a0 d7 25 5d 8f d7 90 19 47 63 8a e1 35 78 0b 3e 40 e6 33 b6 bb 0c 26 ac 05 93 c1 32 1e 0b 96 f7 99 25 0f e6 43 d3 c8 2c 62 f0 45 08 13 d8 80 75 c1 39 3d 54 36 98 37 9d c4 29 9c 08 9c 45 ba c2 09 0d e3 f1 22 1f Data Ascii: PNGIHDR<(,IDATxKaJ.b]*(vd<P!RqTH#GyRHt0L>9,m)yu};)IJ,Q(XV&OhF!{n{,%]Gc5x>@3&2%C,bEu9=T67)E"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49717	87.230.98.78	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:36 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-07-08 15:53:36 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49766	142.250.184.196	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:38 UTC	856	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfbieIZAAAAAP0ROP-R-UOaui3c-7SDJ_GhtUsh&co=aHR0cHM6Ly93d3cubXlkb21haW5jb250YWN0LmNvbTo0NDM.&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=6bw44qgzuywj Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:53:39 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Mon, 08 Jul 2024 15:53:39 GMT Date: Mon, 08 Jul 2024 15:53:39 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-08 15:53:39 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 4b 62 54 76 78 54 78 77 63 77 35 56 71 7a 72 74 4e 2d 49 43 77 57 74 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/rKbTvxTxwcw5VqzrtN-ICwWt/recaptcha__en.js');
2024-07-08 15:53:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49765	142.250.184.196	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:38 UTC	844	OUT	GET /js/bg/afyAhS2Qsep4R8kB-t327Ct0yEitujmPfyHorrAGcXw.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfbieIZAAAAAP0ROP-R-UOaui3c-7SDJ_GhtUsh&co=aHR0cHM6Ly93d3cubXlkb21haW5jb250YWN0LmNvbTo0NDM.&hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&size=normal&cb=6bw44qgzuywj Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:53:39 UTC	810	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18294 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 08 Jul 2024 13:23:57 GMT Expires: Tue, 08 Jul 2025 13:23:57 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 25 Jun 2024 11:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 8982 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-08 15:53:39 UTC	580	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5a 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 2c 51 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 54 29 7b 69 66 28 21 28 54 3d 28 74 3d 6e 75 6c 6c 2c 42 2e 74 72 75 73 74 65 64 54 79 70 65 73 29 2c 54 29 7c 7c 21 54 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 74 3b 74 72 79 7b 74 3d 54 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 5a 2c 63 72 65 61 74 65 53 63 72 Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var Z=function(t){return t},Q=function(t,T){if(!(T=(t=null,B.trustedTypes),T)\|\|!T.createPolicy)return t;try{t=T.createPolicy("bg",{createHTML:Z,createScr
2024-07-08 15:53:39 UTC	1390	IN	Data Raw: 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 46 3d 66 75 6e 63 74 69 6f 6e 28 54 2c 74 29 7b 66 6f 72 28 74 3d 5b 5d 3b 54 2d 2d 3b 29 74 2e 70 75 73 68 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 32 35 35 7c 30 29 3b 72 65 74 75 72 6e 20 74 7d 2c 58 2c 74 58 3d 66 75 6e 63 74 69 6f 6e 28 54 2c 74 2c 42 29 7b 69 66 28 28 74 3d 74 79 70 65 6f 66 20 54 2c 74 29 3d 3d 22 6f 62 6a 65 63 74 22 29 69 66 28 54 29 7b 69 66 28 54 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 72 65 74 75 72 6e 22 61 72 72 61 79 22 3b 69 66 28 54 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 72 65 74 75 72 6e 20 74 3b 69 66 28 28 42 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 54 29 2c 42 29 3d 3d Data Ascii: he-2.0','/','var F=function(T,t){for(t=[];T--;)t.push(Math.random()255\|0);return t},X,tX=function(T,t,B){if((t=typeof T,t)=="object")if(T){if(T instanceof Array)return"array";if(T instanceof Object)return t;if((B=Object.prototype.toString.call(T),B)==
2024-07-08 15:53:39 UTC	1390	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 54 7d 2c 42 2e 63 6f 6e 63 61 74 3d 66 75 6e 63 74 69 6f 6e 28 51 29 7b 54 3d 51 7d 2c 42 7d 2c 73 38 3d 66 75 6e 63 74 69 6f 6e 28 54 2c 74 2c 42 2c 51 2c 6d 2c 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 77 28 29 7b 69 66 28 54 2e 75 3d 3d 54 29 7b 69 66 28 54 2e 6a 29 7b 76 61 72 20 5a 3d 5b 51 41 2c 42 2c 74 2c 76 6f 69 64 20 30 2c 6d 2c 6c 2c 61 72 67 75 6d 65 6e 74 73 5d 3b 69 66 28 51 3d 3d 32 29 76 61 72 20 45 3d 4c 28 66 61 6c 73 65 2c 54 2c 21 28 70 28 5a 2c 54 29 2c 31 29 29 3b 65 6c 73 65 20 69 66 28 51 3d 3d 31 29 7b 76 61 72 20 4a 3d 21 54 2e 54 2e 6c 65 6e 67 74 68 3b 28 70 28 5a 2c 54 29 2c 4a 29 26 26 4c 28 66 61 6c 73 65 2c 54 2c 66 61 6c 73 65 29 7d 65 6c 73 65 20 45 3d 45 38 28 5a 2c 54 29 3b 72 65 74 75 72 6e 20 45 Data Ascii: ){return T},B.concat=function(Q){T=Q},B},s8=function(T,t,B,Q,m,l){function w(){if(T.u==T){if(T.j){var Z=[QA,B,t,void 0,m,l,arguments];if(Q==2)var E=L(false,T,!(p(Z,T),1));else if(Q==1){var J=!T.T.length;(p(Z,T),J)&&L(false,T,false)}else E=E8(Z,T);return E
2024-07-08 15:53:39 UTC	1390	IN	Data Raw: 2b 2b 29 74 5b 42 5d 2b 3d 54 5b 42 5d 3b 66 6f 72 28 42 3d 28 54 3d 5b 31 33 2c 38 2c 31 33 2c 31 32 2c 31 36 2c 35 2c 33 2c 31 30 2c 31 35 5d 2c 30 29 3b 42 3c 39 3b 42 2b 2b 29 74 5b 33 5d 28 74 2c 42 25 33 2c 54 5b 42 5d 29 7d 7d 2c 64 2c 69 4c 3d 66 75 6e 63 74 69 6f 6e 28 54 2c 74 2c 42 2c 51 2c 6d 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 7d 72 65 74 75 72 6e 20 42 3d 28 51 3d 28 54 3d 77 59 28 54 2c 66 75 6e 63 74 69 6f 6e 28 77 29 7b 6c 26 26 28 74 26 26 6b 36 28 74 29 2c 6d 3d 77 2c 6c 28 29 2c 6c 3d 76 6f 69 64 20 30 29 7d 2c 21 28 6d 3d 76 6f 69 64 20 30 2c 21 74 29 29 2c 54 29 5b 30 5d 2c 54 5b 31 5d 29 2c 7b 69 6e 76 6f 6b 65 3a 66 75 6e 63 74 69 6f 6e 28 77 2c 5a 2c 45 2c 4a 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 29 7b 6d 28 66 75 6e 63 Data Ascii: ++)t[B]+=T[B];for(B=(T=[13,8,13,12,16,5,3,10,15],0);B<9;B++)t[3](t,B%3,T[B])}},d,iL=function(T,t,B,Q,m){function l(){}return B=(Q=(T=wY(T,function(w){l&&(t&&k6(t),m=w,l(),l=void 0)},!(m=void 0,!t)),T)[0],T[1]),{invoke:function(w,Z,E,J){function g(){m(func
2024-07-08 15:53:39 UTC	1390	IN	Data Raw: 74 28 66 75 6e 63 74 69 6f 6e 28 77 29 7b 77 28 6d 2e 46 29 7d 29 7d 7d 2c 24 36 3d 66 75 6e 63 74 69 6f 6e 28 54 2c 74 2c 42 2c 51 2c 6d 2c 6c 29 7b 66 6f 72 28 28 74 3d 76 28 28 42 3d 54 5b 65 75 5d 7c 7c 7b 7d 2c 54 29 29 2c 42 2e 41 55 3d 76 28 54 29 2c 42 29 2e 49 3d 5b 5d 2c 6d 3d 54 2e 75 3d 3d 54 3f 28 41 28 54 29 7c 30 29 2d 31 3a 31 2c 51 3d 76 28 54 29 2c 6c 3d 30 3b 6c 3c 6d 3b 6c 2b 2b 29 42 2e 49 2e 70 75 73 68 28 76 28 54 29 29 3b 66 6f 72 28 42 2e 64 47 3d 75 28 74 2c 54 29 3b 6d 2d 2d 3b 29 42 2e 49 5b 6d 5d 3d 75 28 42 2e 49 5b 6d 5d 2c 54 29 3b 72 65 74 75 72 6e 20 42 2e 65 41 3d 75 28 51 2c 54 29 2c 42 7d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 54 2c 74 2c 42 2c 51 2c 6d 2c 6c 2c 77 2c 5a 2c 45 2c 4a 2c 67 2c 66 2c 6b 2c 57 29 7b 69 66 28 Data Ascii: t(function(w){w(m.F)})}},$6=function(T,t,B,Q,m,l){for((t=v((B=T[eu]\|\|{},T)),B.AU=v(T),B).I=[],m=T.u==T?(A(T)\|0)-1:1,Q=v(T),l=0;l<m;l++)B.I.push(v(T));for(B.dG=u(t,T);m--;)B.I[m]=u(B.I[m],T);return B.eA=u(Q,T),B},V=function(T,t,B,Q,m,l,w,Z,E,J,g,f,k,W){if(
2024-07-08 15:53:39 UTC	1390	IN	Data Raw: 28 74 68 69 73 2e 52 2f 74 68 69 73 2e 6e 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 51 2c 6d 29 7b 74 68 69 73 2e 59 2b 3d 28 6d 3d 51 2d 28 74 68 69 73 2e 6e 2b 2b 2c 74 68 69 73 2e 59 29 2c 6d 29 2f 74 68 69 73 2e 6e 2c 74 68 69 73 2e 52 2b 3d 6d 2a 28 51 2d 74 68 69 73 2e 59 29 7d 29 2c 6e 65 77 20 42 29 2c 74 3d 6e 65 77 20 42 2c 66 75 6e 63 74 69 6f 6e 28 51 29 7b 72 65 74 75 72 6e 20 74 3d 28 51 3d 5b 54 2e 4b 6c 28 29 2c 74 2e 4b 6c 28 29 5d 2c 6e 65 77 20 42 29 2c 51 7d 29 5d 7d 2c 55 38 3d 66 75 6e 63 74 69 6f 6e 28 54 2c 74 2c 42 2c 51 29 7b 72 65 74 75 72 6e 20 75 28 32 31 35 2c 28 78 28 28 28 51 3d 75 28 34 36 39 2c 42 29 2c 42 2e 69 26 26 51 3c 42 2e 58 3f 28 78 28 34 36 39 2c 42 2c 42 2e 58 29 2c 54 4d 28 74 2c 42 29 29 3a 78 28 34 36 39 2c 42 2c Data Ascii: (this.R/this.n)},function(Q,m){this.Y+=(m=Q-(this.n++,this.Y),m)/this.n,this.R+=m*(Q-this.Y)}),new B),t=new B,function(Q){return t=(Q=[T.Kl(),t.Kl()],new B),Q})]},U8=function(T,t,B,Q){return u(215,(x(((Q=u(469,B),B.i&&Q<B.X?(x(469,B,B.X),TM(t,B)):x(469,B,
2024-07-08 15:53:39 UTC	1390	IN	Data Raw: 2c 30 29 2c 6d 2e 41 3d 6e 75 6c 6c 2c 6d 2e 55 67 3d 28 28 6d 2e 4f 3d 31 2c 6d 29 2e 57 3d 76 6f 69 64 20 30 2c 38 30 30 31 29 2c 6d 2e 6a 3d 5b 5d 2c 28 28 6d 2e 42 62 3d 28 6d 2e 6f 3d 30 2c 42 29 2c 6d 29 2e 67 47 3d 66 61 6c 73 65 2c 28 6d 2e 4a 3d 76 6f 69 64 20 30 2c 6d 2e 75 3d 6d 2c 6d 2e 6c 3d 66 61 6c 73 65 2c 6d 2e 6e 6c 3d 30 2c 6d 2e 52 65 3d 74 2c 6d 2e 62 55 3d 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 74 68 69 73 2e 75 3d 5a 7d 2c 6d 2e 58 3d 28 6d 2e 74 55 3d 21 28 6d 2e 43 3d 66 61 6c 73 65 2c 31 29 2c 30 29 2c 6d 29 2e 4c 3d 28 6d 2e 76 3d 28 6d 2e 44 3d 28 6d 2e 72 47 3d 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 29 2c 30 29 2c 6d 2e 4b 3d 30 2c 66 61 6c 73 65 29 2c 6d 2e 4e 3d 5b 5d 2c 6d 2e 56 4b 3d 32 35 2c 6d 2e 42 3d 76 6f 69 64 20 30 2c Data Ascii: ,0),m.A=null,m.Ug=((m.O=1,m).W=void 0,8001),m.j=[],((m.Bb=(m.o=0,B),m).gG=false,(m.J=void 0,m.u=m,m.l=false,m.nl=0,m.Re=t,m.bU=function(Z){this.u=Z},m.X=(m.tU=!(m.C=false,1),0),m).L=(m.v=(m.D=(m.rG=void 0,void 0),0),m.K=0,false),m.N=[],m.VK=25,m.B=void 0,
2024-07-08 15:53:39 UTC	1390	IN	Data Raw: 20 30 2c 45 3d 3d 32 26 26 28 5a 2e 44 3d 56 28 33 32 2c 5a 2c 66 61 6c 73 65 29 2c 5a 2e 55 3d 76 6f 69 64 20 30 29 29 29 7d 29 29 2c 66 75 6e 63 74 69 6f 6e 28 5a 29 7b 66 44 28 5a 2c 34 29 7d 29 29 2c 46 28 34 29 29 29 2c 6d 29 2c 5b 5d 29 2c 6d 29 2c 46 28 34 29 29 2c 66 75 6e 63 74 69 6f 6e 28 5a 2c 45 2c 4a 2c 67 29 7b 78 28 28 45 3d 75 28 28 4a 3d 28 67 3d 28 4a 3d 28 45 3d 76 28 5a 29 2c 76 28 5a 29 29 2c 76 29 28 5a 29 2c 75 29 28 4a 2c 5a 29 2c 45 29 2c 5a 29 2c 67 29 2c 5a 2c 45 20 69 6e 20 4a 7c 30 29 7d 29 29 2c 34 35 29 2c 6d 2c 35 31 34 29 2c 30 29 2c 66 75 6e 63 74 69 6f 6e 28 5a 2c 45 2c 4a 2c 67 29 7b 28 4a 3d 28 45 3d 28 4a 3d 76 28 28 67 3d 76 28 5a 29 2c 5a 29 29 2c 76 28 5a 29 29 2c 75 28 4a 2c 5a 29 29 2c 67 3d 75 28 67 2c 5a 29 2c Data Ascii: 0,E==2&&(Z.D=V(32,Z,false),Z.U=void 0)))})),function(Z){fD(Z,4)})),F(4))),m),[]),m),F(4)),function(Z,E,J,g){x((E=u((J=(g=(J=(E=v(Z),v(Z)),v)(Z),u)(J,Z),E),Z),g),Z,E in J\|0)})),45),m,514),0),function(Z,E,J,g){(J=(E=(J=v((g=v(Z),Z)),v(Z)),u(J,Z)),g=u(g,Z),
2024-07-08 15:53:39 UTC	1390	IN	Data Raw: 2c 5a 29 2c 4a 2e 6c 65 6e 67 74 68 29 2c 30 29 3b 67 2d 2d 3b 29 66 3d 28 28 66 7c 30 29 2b 28 75 4c 28 5a 29 7c 30 29 29 25 6b 2c 57 2b 3d 77 5b 4a 5b 66 5d 5d 3b 78 28 45 2c 5a 2c 57 29 7d 29 2c 6d 29 2c 5b 31 36 30 2c 30 2c 30 5d 29 2c 5b 32 30 34 38 5d 29 29 2c 6d 29 2c 66 75 6e 63 74 69 6f 6e 28 5a 2c 45 2c 4a 2c 67 29 7b 69 66 28 4a 3d 5a 2e 5a 2e 70 6f 70 28 29 29 7b 66 6f 72 28 67 3d 41 28 5a 29 3b 67 3e 30 3b 67 2d 2d 29 45 3d 76 28 5a 29 2c 4a 5b 45 5d 3d 5a 2e 6a 5b 45 5d 3b 4a 5b 4a 5b 35 30 31 5d 3d 5a 2e 6a 5b 35 30 31 5d 2c 33 34 37 5d 3d 5a 2e 6a 5b 33 34 37 5d 2c 5a 2e 6a 3d 4a 7d 65 6c 73 65 20 78 28 34 36 39 2c 5a 2c 5a 2e 58 29 7d 29 2c 6d 29 2c 6d 29 2c 6d 29 2c 66 75 6e 63 74 69 6f 6e 28 5a 2c 45 2c 4a 2c 67 29 7b 78 28 28 45 3d 28 Data Ascii: ,Z),J.length),0);g--;)f=((f\|0)+(uL(Z)\|0))%k,W+=w[J[f]];x(E,Z,W)}),m),[160,0,0]),[2048])),m),function(Z,E,J,g){if(J=Z.Z.pop()){for(g=A(Z);g>0;g--)E=v(Z),J[E]=Z.j[E];J[J[501]=Z.j[501],347]=Z.j[347],Z.j=J}else x(469,Z,Z.X)}),m),m),m),function(Z,E,J,g){x((E=(
2024-07-08 15:53:39 UTC	1390	IN	Data Raw: 31 38 7c 32 34 30 2c 74 5b 42 2b 2b 5d 3d 6d 3e 3e 31 32 26 36 33 7c 31 32 38 29 3a 74 5b 42 2b 2b 5d 3d 6d 3e 3e 31 32 7c 32 32 34 2c 74 5b 42 2b 2b 5d 3d 6d 3e 3e 36 26 36 33 7c 31 32 38 29 2c 74 5b 42 2b 2b 5d 3d 6d 26 36 33 7c 31 32 38 29 3b 72 65 74 75 72 6e 20 74 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 54 2c 74 2c 42 29 7b 69 66 28 54 3d 3d 34 36 39 7c 7c 54 3d 3d 33 38 36 29 74 2e 6a 5b 54 5d 3f 74 2e 6a 5b 54 5d 2e 63 6f 6e 63 61 74 28 42 29 3a 74 2e 6a 5b 54 5d 3d 42 65 28 42 2c 74 29 3b 65 6c 73 65 7b 69 66 28 74 2e 74 55 26 26 54 21 3d 31 38 39 29 72 65 74 75 72 6e 3b 54 3d 3d 34 35 33 7c 7c 54 3d 3d 33 39 30 7c 7c 54 3d 3d 34 33 35 7c 7c 54 3d 3d 31 37 32 7c 7c 54 3d 3d 35 30 31 7c 7c 54 3d 3d 34 35 39 7c 7c 54 3d 3d 36 35 7c 7c 54 3d 3d 38 37 Data Ascii: 18\|240,t[B++]=m>>12&63\|128):t[B++]=m>>12\|224,t[B++]=m>>6&63\|128),t[B++]=m&63\|128);return t},x=function(T,t,B){if(T==469\|\|T==386)t.j[T]?t.j[T].concat(B):t.j[T]=Be(B,t);else{if(t.tU&&T!=189)return;T==453\|\|T==390\|\|T==435\|\|T==172\|\|T==501\|\|T==459\|\|T==65\|\|T==87

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49768	142.250.184.196	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:41 UTC	878	OUT	GET /recaptcha/api2/bframe?hl=en&v=rKbTvxTxwcw5VqzrtN-ICwWt&k=6LfbieIZAAAAAP0ROP-R-UOaui3c-7SDJ_GhtUsh HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.mydomaincontact.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:53:41 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 08 Jul 2024 15:53:41 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-4Yidge-E2gI_7TRub6HdoA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-08 15:53:41 UTC	499	IN	Data Raw: 31 64 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d14<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-07-08 15:53:41 UTC	1390	IN	Data Raw: 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 35 6d 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 Data Ascii: -FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-0
2024-07-08 15:53:41 UTC	1390	IN	Data Raw: 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 6d 78 4b 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 Data Ascii: 1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2) format('woff2')
2024-07-08 15:53:41 UTC	1390	IN	Data Raw: 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 Data Ascii: c4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/rob
2024-07-08 15:53:41 UTC	1390	IN	Data Raw: 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 Data Ascii: ) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlC
2024-07-08 15:53:41 UTC	1390	IN	Data Raw: 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d Data Ascii: CnqEu92Fr1MmYUtfChc4EsA.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-
2024-07-08 15:53:41 UTC	3	IN	Data Raw: 3e 0d 0a Data Ascii: >
2024-07-08 15:53:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49770	54.76.66.215	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:42 UTC	681	OUT	GET /favicon.ico HTTP/1.1 Host: www.mydomaincontact.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mydomaincontact.com/index.php?domain_name=le100.net Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pct-2444609017588254eb9aa441d74694fe=1
2024-07-08 15:53:42 UTC	150	IN	HTTP/1.1 404 Not Found Date: Mon, 08 Jul 2024 15:53:42 GMT Content-Type: text/html Content-Length: 555 Connection: close Server: nginx/1.20.1
2024-07-08 15:53:42 UTC	555	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 30 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.20.1</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	61335	87.230.98.78	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:55 UTC	648	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dle100.net%26pid%3D9PO755G95&&l=en&o=1720454033044 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:53:55 UTC	502	IN	HTTP/1.1 200 OK date: Mon, 08 Jul 2024 15:53:55 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=1; Expires=Thu, 07-Aug-2025 15:53:55 GMT; Path=/; SameSite=Lax; Secure last-modified: Mon, 08 Jul 2024 15:53:55 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-07-08 15:53:55 UTC	1043	IN	Data Raw: 34 30 37 0d 0a 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 7b 0d 0a 20 76 61 72 20 63 76 61 6c 20 3d 20 22 22 3b 0d 0a 20 74 72 79 7b 63 76 61 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3b 7d 63 61 74 63 68 28 65 29 7b 63 76 61 6c 20 3d 20 22 22 3b 7d 0d 0a 20 76 61 72 20 6c 20 3d 20 22 22 3b 20 69 66 28 22 63 6d 70 5f 67 65 74 6c 61 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 20 6c 20 3d 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 65 74 6c 61 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 20 7d 0d 0a 20 76 61 72 20 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 20 73 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 Data Ascii: 407(function (){ var cval = ""; try{cval = document.cookie;}catch(e){cval = "";} var l = ""; if("cmp_getlang" in window){ l = window.cmp_getlang().toLowerCase(); } var s = document.createElement("script"); s.src = "https://a.delivery.consent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	61333	156.146.33.15	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:55 UTC	603	OUT	GET /delivery/js/cmp_en.min.js HTTP/1.1 Host: cdn.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=425342-425342 If-Range: "69737-61c5ef0ef92c0"
2024-07-08 15:53:55 UTC	671	IN	HTTP/1.1 206 Partial Content Date: Mon, 08 Jul 2024 15:53:55 GMT Content-Type: application/javascript Content-Length: 1 Connection: close Last-Modified: Wed, 03 Jul 2024 21:59:15 GMT ETag: "69737-61c5ef0ef92c0" Cache-Control: max-age=86400 Expires: Thu, 04 Jul 2024 22:00:30 GMT Edge-Control: max-age=86400 X-77-NZT: EgwBnJIhDQH3LecAAAwBJRPCNAH3AxgAAA X-77-NZT-Ray: 0d1fa518bf84e752930b8c66d2b8db0e X-Accel-Expires: @1720476034 X-Accel-Date: 1720394854 X-77-Cache: HIT X-77-Age: 59181 Vary: Accept-Encoding Server: CDN77-Turbo X-Accel-Date-Max: 1720050177 X-Cache: HIT X-Age: 59181 X-77-POP: frankfurtDE Content-Range: bytes 425342-425342/431927
2024-07-08 15:53:55 UTC	1	IN	Data Raw: 7b Data Ascii: {

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	61337	87.230.98.78	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:55 UTC	661	OUT	GET /delivery/cmp.php?__cmpcc=1&id=68884&o=1720454035&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dle100.net%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:53:56 UTC	502	IN	HTTP/1.1 200 OK date: Mon, 08 Jul 2024 15:53:56 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=1; Expires=Thu, 07-Aug-2025 15:53:56 GMT; Path=/; SameSite=Lax; Secure last-modified: Mon, 08 Jul 2024 15:53:56 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-07-08 15:53:56 UTC	1043	IN	Data Raw: 34 30 37 0d 0a 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 7b 0d 0a 20 76 61 72 20 63 76 61 6c 20 3d 20 22 22 3b 0d 0a 20 74 72 79 7b 63 76 61 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3b 7d 63 61 74 63 68 28 65 29 7b 63 76 61 6c 20 3d 20 22 22 3b 7d 0d 0a 20 76 61 72 20 6c 20 3d 20 22 22 3b 20 69 66 28 22 63 6d 70 5f 67 65 74 6c 61 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 20 6c 20 3d 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 65 74 6c 61 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 20 7d 0d 0a 20 76 61 72 20 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 20 73 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 Data Ascii: 407(function (){ var cval = ""; try{cval = document.cookie;}catch(e){cval = "";} var l = ""; if("cmp_getlang" in window){ l = window.cmp_getlang().toLowerCase(); } var s = document.createElement("script"); s.src = "https://a.delivery.consent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	61338	156.146.33.15	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:56 UTC	603	OUT	GET /delivery/js/cmp_en.min.js HTTP/1.1 Host: cdn.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=425342-431926 If-Range: "69737-61c5ef0ef92c0"
2024-07-08 15:53:56 UTC	674	IN	HTTP/1.1 206 Partial Content Date: Mon, 08 Jul 2024 15:53:56 GMT Content-Type: application/javascript Content-Length: 6585 Connection: close Last-Modified: Wed, 03 Jul 2024 21:59:15 GMT ETag: "69737-61c5ef0ef92c0" Cache-Control: max-age=86400 Expires: Thu, 04 Jul 2024 22:00:30 GMT Edge-Control: max-age=86400 X-77-NZT: EgwBnJIhDQH3LucAAAwBJRPCNAH3AxgAAA X-77-NZT-Ray: 0d1fa51882749072940b8c66380e3b0d X-Accel-Expires: @1720476034 X-Accel-Date: 1720394854 X-77-Cache: HIT X-77-Age: 59182 Vary: Accept-Encoding Server: CDN77-Turbo X-Accel-Date-Max: 1720050177 X-Cache: HIT X-Age: 59182 X-77-POP: frankfurtDE Content-Range: bytes 425342-431926/431927
2024-07-08 15:53:56 UTC	6585	IN	Data Raw: 7b 63 2b 3d 22 2e 70 75 61 22 7d 7d 72 65 74 75 72 6e 20 63 7d 3b 74 68 69 73 2e 63 68 65 63 6b 43 75 73 74 6f 6d 42 75 74 74 6f 6e 45 6e 61 62 6c 65 64 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 74 79 70 65 6f 66 28 63 29 21 3d 3d 22 73 74 72 69 6e 67 22 29 7b 63 3d 22 22 7d 69 66 28 21 28 22 63 6d 70 5f 63 75 73 74 6f 6d 62 75 74 74 6f 6e 22 2b 63 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 72 65 74 75 72 6e 20 74 72 75 65 7d 76 61 72 20 64 3d 22 63 6d 70 5f 63 75 73 74 6f 6d 62 75 74 74 6f 6e 22 2b 63 2b 22 5f 6c 6f 67 69 63 22 20 69 6e 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 5b 22 63 6d 70 5f 63 75 73 74 6f 6d 62 75 74 74 6f 6e 22 2b 63 2b 22 5f 6c 6f 67 69 63 22 5d 3a 30 3b 76 61 72 20 68 3d 22 63 6d 70 5f 63 75 73 74 6f 6d 62 75 74 74 6f 6e 22 2b Data Ascii: {c+=".pua"}}return c};this.checkCustomButtonEnabled=function(c){if(typeof(c)!=="string"){c=""}if(!("cmp_custombutton"+c in window)){return true}var d="cmp_custombutton"+c+"_logic" in window?window["cmp_custombutton"+c+"_logic"]:0;var h="cmp_custombutton"+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	61339	87.230.98.78	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:56 UTC	661	OUT	GET /delivery/cmp.php?__cmpcc=2&id=68884&o=1720454036&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dle100.net%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:53:57 UTC	409	IN	HTTP/1.1 200 OK date: Mon, 08 Jul 2024 15:53:57 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Mon, 08 Jul 2024 15:53:57 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-07-08 15:53:57 UTC	5543	IN	Data Raw: 31 35 39 46 0d 0a 2f 2a 6e 63 70 78 2a 2f 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 64 6f 6e 74 53 68 6f 77 22 3a 31 2c 22 64 6f 6e 74 53 68 6f 77 52 65 61 73 6f 6e 22 3a 22 4e 6f 20 63 6f 6f 6b 69 65 20 73 75 70 70 6f 72 74 22 2c 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 6e 6f 74 50 6f 73 73 69 62 6c 65 22 3a 31 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c Data Ascii: 159F/ncpx/window.cmp_config_data_cs="";window.cmp_config_data={"dontShow":1,"dontShowReason":"No cookie support","intID":68884,"uid":41321,"dbgdesignid":27746,"notPossible":1,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,
2024-07-08 15:53:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	61340	87.230.98.78	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:57 UTC	742	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2F&o=1720454035961&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:53:58 UTC	380	IN	HTTP/1.1 200 OK date: Mon, 08 Jul 2024 15:53:58 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Mon, 08 Jul 2024 15:53:58 GMT content-length: 43 content-type: image/gif connection: close
2024-07-08 15:53:58 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	61341	87.230.98.78	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:53:58 UTC	511	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2F&o=1720454035961&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:53:59 UTC	380	IN	HTTP/1.1 200 OK date: Mon, 08 Jul 2024 15:53:59 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Mon, 08 Jul 2024 15:53:59 GMT content-length: 43 content-type: image/gif connection: close
2024-07-08 15:53:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	61346	87.230.98.78	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:54:02 UTC	3227	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FSpam_Removal.cfm%3Fdomain%3Dle100.net%26fp%3DEzVFF1z5BNcjvM%252BM%252FOKCHBPjV4tK%252Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%252FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%252BD6EslT4YXZEgi5MQZoS4%252BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%252FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%252BF%252FqfFDeim2hVuLdV2hx9V%252F15hYqnNxwr7w%252FxJkFs%26yep%3DkYWX2UB9hpPluHNh59n0TG5bw0%252FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%252FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%252FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%252Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%252B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%252FqYu%252FBmO%252BefvXO46i%252BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%252BZbCkucnl%252BKaGVQ4CSuga7KRLSemy%252FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%252F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%252FCiWxSUGpEEgd [TRUNCATED] Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:54:03 UTC	502	IN	HTTP/1.1 200 OK date: Mon, 08 Jul 2024 15:54:03 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=1; Expires=Thu, 07-Aug-2025 15:54:03 GMT; Path=/; SameSite=Lax; Secure last-modified: Mon, 08 Jul 2024 15:54:03 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-07-08 15:54:03 UTC	3622	IN	Data Raw: 45 31 41 0d 0a 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 7b 0d 0a 20 76 61 72 20 63 76 61 6c 20 3d 20 22 22 3b 0d 0a 20 74 72 79 7b 63 76 61 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3b 7d 63 61 74 63 68 28 65 29 7b 63 76 61 6c 20 3d 20 22 22 3b 7d 0d 0a 20 76 61 72 20 6c 20 3d 20 22 22 3b 20 69 66 28 22 63 6d 70 5f 67 65 74 6c 61 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 20 6c 20 3d 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 65 74 6c 61 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 20 7d 0d 0a 20 76 61 72 20 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 20 73 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 Data Ascii: E1A(function (){ var cval = ""; try{cval = document.cookie;}catch(e){cval = "";} var l = ""; if("cmp_getlang" in window){ l = window.cmp_getlang().toLowerCase(); } var s = document.createElement("script"); s.src = "https://a.delivery.consent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	61345	156.146.33.15	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:54:02 UTC	542	OUT	GET /delivery/js/cmp_en.min.js HTTP/1.1 Host: cdn.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:54:03 UTC	642	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 15:54:03 GMT Content-Type: application/javascript Content-Length: 431927 Connection: close Last-Modified: Wed, 03 Jul 2024 21:59:15 GMT ETag: "69737-61c5ef0ef92c0" Cache-Control: max-age=86400 Expires: Thu, 04 Jul 2024 22:00:30 GMT Edge-Control: max-age=86400 X-77-NZT: EgwBnJIhDQH3NecAAAwBJRPCNAH3AxgAAA X-77-NZT-Ray: 0d1fa518a18667529b0b8c665ffce00e X-Accel-Expires: @1720476034 X-Accel-Date: 1720394854 X-77-Cache: HIT X-77-Age: 59189 Vary: Accept-Encoding Server: CDN77-Turbo X-Accel-Date-Max: 1720050177 X-Cache: HIT X-Age: 59189 X-77-POP: frankfurtDE Accept-Ranges: bytes
2024-07-08 15:54:03 UTC	15742	IN	Data Raw: 77 69 6e 64 6f 77 2e 63 6d 70 63 63 73 76 65 72 73 69 6f 6e 62 75 69 6c 64 3d 22 32 30 32 34 2d 37 2d 33 2e 32 31 2e 35 37 22 3b 69 66 28 21 28 22 72 70 6c 22 20 69 6e 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 29 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 72 70 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 63 2e 73 70 6c 69 74 28 61 29 2e 6a 6f 69 6e 28 62 29 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 66 61 6c 73 65 7d 29 7d 69 66 28 21 28 22 63 6d 70 5f 75 6e 71 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 75 6e 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 Data Ascii: window.cmpccsversionbuild="2024-7-3.21.57";if(!("rpl" in String.prototype)){Object.defineProperty(String.prototype,"rpl",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("cmp_unq" in window)){window.cmp_unq=function(a){re
2024-07-08 15:54:03 UTC	16384	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 44 61 74 65 28 74 68 69 73 2e 72 65 61 64 49 6e 74 28 33 36 29 2a 31 30 30 29 7d 3b 74 68 69 73 2e 72 65 61 64 4c 61 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 61 64 53 74 72 69 6e 67 28 32 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 3b 74 68 69 73 2e 72 65 61 64 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 65 3d 22 22 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 63 3b 64 2b 2b 29 7b 65 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 74 68 69 73 2e 72 65 61 64 49 6e 74 28 36 29 2b 36 35 29 7d 72 65 74 75 72 6e 20 65 7d 3b 74 68 69 73 2e 72 65 61 64 42 6f 6f 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 61 72 73 65 Data Ascii: ){return new Date(this.readInt(36)*100)};this.readLang=function(){return this.readString(2).toLowerCase()};this.readString=function(c){var e="";for(var d=0;d<c;d++){e+=String.fromCharCode(this.readInt(6)+65)}return e};this.readBool=function(){return parse
2024-07-08 15:54:03 UTC	16384	IN	Data Raw: 72 70 6f 73 65 4f 6e 65 54 72 65 61 74 6d 65 6e 74 3b 63 2e 50 75 62 6c 69 73 68 65 72 43 43 3d 74 68 69 73 2e 50 75 62 6c 69 73 68 65 72 43 43 3b 63 2e 56 65 6e 64 6f 72 73 4c 49 3d 74 68 69 73 2e 56 65 6e 64 6f 72 73 4c 49 3b 63 2e 50 75 62 6c 69 73 68 65 72 52 65 73 74 72 69 63 74 69 6f 6e 73 3d 74 68 69 73 2e 50 75 62 6c 69 73 68 65 72 52 65 73 74 72 69 63 74 69 6f 6e 73 3b 76 61 72 20 64 3d 63 2e 74 6f 53 74 72 69 6e 67 28 29 3b 76 61 72 20 68 3d 74 68 69 73 2e 6e 65 77 46 72 6f 6d 4d 61 6e 69 66 65 73 74 28 32 29 3b 68 2e 69 73 43 75 73 74 6f 6d 46 6f 72 6d 61 74 3d 74 72 75 65 3b 68 2e 72 65 61 64 28 64 29 3b 69 66 28 74 68 69 73 2e 67 70 70 53 65 63 74 69 6f 6e 49 64 73 2e 69 6e 64 65 78 4f 66 28 32 29 3d 3d 2d 31 29 7b 74 68 69 73 2e 67 70 70 53 Data Ascii: rposeOneTreatment;c.PublisherCC=this.PublisherCC;c.VendorsLI=this.VendorsLI;c.PublisherRestrictions=this.PublisherRestrictions;var d=c.toString();var h=this.newFromManifest(2);h.isCustomFormat=true;h.read(d);if(this.gppSectionIds.indexOf(2)==-1){this.gppS
2024-07-08 15:54:03 UTC	16384	IN	Data Raw: 73 75 62 73 74 72 69 6e 67 28 30 2c 63 5b 65 5d 2e 6c 65 6e 67 74 68 2b 31 29 3d 3d 63 5b 65 5d 2b 22 2e 22 29 7b 66 2e 70 75 73 68 28 63 5b 65 5d 5b 6d 5d 28 29 29 7d 65 6c 73 65 7b 69 66 28 63 5b 65 5d 2e 6c 65 6e 67 74 68 3d 3d 35 29 7b 76 61 72 20 6b 3d 63 5b 65 5d 2e 73 75 62 73 74 72 69 6e 67 28 33 2c 35 29 2b 22 2d 22 2b 63 5b 65 5d 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 32 29 3b 69 66 28 67 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 6b 2e 6c 65 6e 67 74 68 2b 31 29 3d 3d 6b 2b 22 2e 22 29 7b 66 2e 70 75 73 68 28 63 5b 65 5d 5b 6d 5d 28 29 29 7d 7d 65 6c 73 65 7b 69 66 28 6a 3d 3d 63 5b 65 5d 2b 22 2f 22 7c 7c 6a 3d 3d 22 2f 22 2b 63 5b 65 5d 29 7b 66 2e 70 75 73 68 28 63 5b 65 5d 5b 6d 5d 28 29 29 7d 65 6c 73 65 7b 69 66 28 6a 3d 3d 63 5b 65 5d 2e 72 Data Ascii: substring(0,c[e].length+1)==c[e]+"."){f.push(c[e][m]())}else{if(c[e].length==5){var k=c[e].substring(3,5)+"-"+c[e].substring(0,2);if(g.substring(0,k.length+1)==k+"."){f.push(c[e][m]())}}else{if(j==c[e]+"/"\|\|j=="/"+c[e]){f.push(c[e][m]())}else{if(j==c[e].r
2024-07-08 15:54:03 UTC	16384	IN	Data Raw: 6f 66 28 64 2e 68 61 73 41 74 74 72 69 62 75 74 65 29 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 72 65 74 75 72 6e 20 64 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 61 29 7d 65 6c 73 65 7b 74 72 79 7b 76 61 72 20 62 3d 22 61 74 74 72 69 62 75 74 65 73 22 20 69 6e 20 64 26 26 61 20 69 6e 20 64 2e 61 74 74 72 69 62 75 74 65 73 7d 63 61 74 63 68 28 63 29 7b 76 61 72 20 62 3d 66 61 6c 73 65 7d 72 65 74 75 72 6e 20 62 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 6d 70 5f 73 6e 61 70 73 68 6f 74 28 29 7b 74 68 69 73 2e 68 61 73 53 65 74 74 69 6e 67 73 53 6e 61 70 73 68 6f 74 3d 66 61 6c 73 65 3b 74 68 69 73 2e 63 6f 6e 73 65 6e 74 73 74 72 69 6e 67 3d 22 22 3b 74 68 69 73 2e 63 6f 6e 73 65 6e 74 64 61 74 61 3d 6e 65 77 20 63 6d 70 5f 63 73 28 29 3b 74 68 69 73 2e Data Ascii: of(d.hasAttribute)==="function"){return d.hasAttribute(a)}else{try{var b="attributes" in d&&a in d.attributes}catch(c){var b=false}return b}}}}function cmp_snapshot(){this.hasSettingsSnapshot=false;this.consentstring="";this.consentdata=new cmp_cs();this.
2024-07-08 15:54:03 UTC	16384	IN	Data Raw: 6d 6e 67 72 2e 67 70 70 4d 73 70 61 43 6f 76 65 72 65 64 54 72 61 6e 73 61 63 74 69 6f 6e 3d 3d 3d 31 29 7b 62 2e 73 65 74 47 70 70 46 69 65 6c 64 28 61 2c 22 4d 73 70 61 4f 70 74 4f 75 74 4f 70 74 69 6f 6e 4d 6f 64 65 22 2c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 67 70 70 4d 73 70 61 4f 70 74 4f 75 74 4f 70 74 69 6f 6e 4d 6f 64 65 29 3b 62 2e 73 65 74 47 70 70 46 69 65 6c 64 28 61 2c 22 4d 73 70 61 53 65 72 76 69 63 65 50 72 6f 76 69 64 65 72 4d 6f 64 65 22 2c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 67 70 70 4d 73 70 61 53 65 72 76 69 63 65 50 72 6f 76 69 64 65 72 4d 6f 64 65 29 7d 65 6c 73 65 7b 62 2e 73 65 74 47 70 70 46 69 65 6c 64 28 61 2c 22 4d 73 70 61 4f 70 74 4f 75 74 4f 70 74 69 6f 6e 4d 6f 64 65 22 2c 30 29 3b 62 2e 73 65 74 47 70 70 Data Ascii: mngr.gppMspaCoveredTransaction===1){b.setGppField(a,"MspaOptOutOptionMode",window.cmpmngr.gppMspaOptOutOptionMode);b.setGppField(a,"MspaServiceProviderMode",window.cmpmngr.gppMspaServiceProviderMode)}else{b.setGppField(a,"MspaOptOutOptionMode",0);b.setGpp
2024-07-08 15:54:03 UTC	16384	IN	Data Raw: 2e 73 70 6c 69 74 28 22 23 22 29 3b 69 66 28 61 2e 6c 65 6e 67 74 68 3e 3d 34 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 6c 6f 67 28 22 49 6d 70 6f 72 74 20 63 6f 6e 73 65 6e 74 3a 20 20 22 2b 61 29 3b 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 6c 6f 61 64 43 53 28 61 5b 30 5d 2c 61 5b 33 5d 2c 61 5b 31 5d 2c 61 5b 32 5d 2c 22 22 29 3b 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 68 61 73 45 78 69 73 74 69 6e 67 43 68 6f 69 63 65 3d 74 72 75 65 3b 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 63 6f 6e 73 65 6e 74 54 79 70 65 3d 31 36 3b 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 73 74 6f 72 65 43 6f 6e 73 65 6e 74 28 61 5b 30 5d 2c 33 30 2c 61 5b 32 5d 2c 61 5b 31 5d 2c 61 5b 33 5d 2c 22 5f 22 2b 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 67 Data Ascii: .split("#");if(a.length>=4){window.cmpmngr.log("Import consent: "+a);window.cmpmngr.loadCS(a[0],a[3],a[1],a[2],"");window.cmpmngr.hasExistingChoice=true;window.cmpmngr.consentType=16;window.cmpmngr.storeConsent(a[0],30,a[2],a[1],a[3],"_"+window.cmpmngr.g
2024-07-08 15:54:03 UTC	16384	IN	Data Raw: 63 6d 70 5f 68 63 28 22 70 69 77 69 6b 22 29 29 7b 74 68 69 73 2e 73 65 6e 64 50 69 77 69 6b 54 72 61 63 6b 69 6e 67 28 29 7d 69 66 28 63 6d 70 5f 68 63 28 22 6d 61 74 6f 6d 6f 22 29 29 7b 74 68 69 73 2e 73 65 6e 64 4d 61 74 6f 6d 6f 54 72 61 63 6b 69 6e 67 28 29 7d 69 66 28 63 6d 70 5f 68 63 28 22 70 69 61 6e 6f 22 29 29 7b 74 68 69 73 2e 73 65 6e 64 50 69 61 6e 6f 54 72 61 63 6b 69 6e 67 28 29 7d 69 66 28 63 6d 70 5f 68 63 28 22 68 75 62 73 70 6f 74 22 29 29 7b 74 68 69 73 2e 73 65 6e 64 48 75 62 73 70 6f 74 43 6f 6e 73 65 6e 74 28 29 7d 69 66 28 63 6d 70 5f 68 63 28 22 67 69 6f 73 67 22 29 29 7b 74 68 69 73 2e 73 65 6e 64 47 69 6f 73 67 54 72 61 63 6b 69 6e 67 28 29 7d 69 66 28 63 6d 70 5f 68 63 28 22 61 77 69 6e 22 29 29 7b 74 68 69 73 2e 73 65 6e 64 Data Ascii: cmp_hc("piwik")){this.sendPiwikTracking()}if(cmp_hc("matomo")){this.sendMatomoTracking()}if(cmp_hc("piano")){this.sendPianoTracking()}if(cmp_hc("hubspot")){this.sendHubspotConsent()}if(cmp_hc("giosg")){this.sendGiosgTracking()}if(cmp_hc("awin")){this.send
2024-07-08 15:54:03 UTC	16384	IN	Data Raw: 2e 63 6d 70 6d 6e 67 72 2e 6c 61 79 65 72 4c 6f 67 69 63 3d 3d 36 29 7b 69 66 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 75 73 70 73 53 74 72 69 6e 67 3d 3d 22 31 2d 2d 2d 22 7c 7c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 75 73 70 73 53 74 72 69 6e 67 3d 3d 22 22 29 7b 61 3d 74 72 75 65 7d 65 6c 73 65 7b 69 66 28 21 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 68 61 73 43 43 50 41 4f 70 74 65 64 4f 75 74 28 29 29 7b 69 66 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 63 6f 6e 73 65 6e 74 73 74 72 69 6e 67 3d 3d 22 22 29 7b 61 3d 74 72 75 65 7d 7d 7d 7d 7d 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 70 75 72 70 6f 73 65 73 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 7b 69 66 28 77 69 6e 64 6f 77 2e 63 6d 70 6d Data Ascii: .cmpmngr.layerLogic==6){if(window.cmpmngr.uspsString=="1---"\|\|window.cmpmngr.uspsString==""){a=true}else{if(!window.cmpmngr.hasCCPAOptedOut()){if(window.cmpmngr.consentstring==""){a=true}}}}}for(var g=0;g<window.cmpmngr.purposes.length;g++){if(window.cmpm
2024-07-08 15:54:03 UTC	16384	IN	Data Raw: 2e 73 65 74 41 74 74 72 69 62 75 74 65 49 66 4e 6f 74 45 78 69 73 74 73 28 4a 2c 22 64 61 74 61 2d 63 6d 70 2d 68 69 64 65 2d 64 69 73 70 6c 61 79 22 2c 4a 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 29 3b 4a 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6d 70 2d 68 69 64 65 2d 68 22 2c 4a 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 29 3b 4a 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6d 70 2d 68 69 64 65 2d 6f 76 65 72 66 6c 6f 77 79 22 2c 4a 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 29 3b 4a 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6d 70 2d 68 69 64 65 2d 70 6f 73 69 74 69 6f 6e 22 2c 4a 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 29 3b 4a 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 46 3b 4a 2e 73 Data Ascii: .setAttributeIfNotExists(J,"data-cmp-hide-display",J.style.display);J.setAttribute("data-cmp-hide-h",J.style.height);J.setAttribute("data-cmp-hide-overflowy",J.style.overflowY);J.setAttribute("data-cmp-hide-position",J.style.position);J.style.height=F;J.s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	61355	87.230.98.78	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:54:04 UTC	3240	OUT	GET /delivery/cmp.php?__cmpcc=1&id=68884&o=1720454043&h=http%3A%2F%2Fifdnzact.com%2FSpam_Removal.cfm%3Fdomain%3Dle100.net%26fp%3DEzVFF1z5BNcjvM%252BM%252FOKCHBPjV4tK%252Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%252FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%252BD6EslT4YXZEgi5MQZoS4%252BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%252FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%252BF%252FqfFDeim2hVuLdV2hx9V%252F15hYqnNxwr7w%252FxJkFs%26yep%3DkYWX2UB9hpPluHNh59n0TG5bw0%252FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%252FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%252FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%252Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%252B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%252FqYu%252FBmO%252BefvXO46i%252BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%252BZbCkucnl%252BKaGVQ4CSuga7KRLSemy%252FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%252F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%252F [TRUNCATED] Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:54:04 UTC	502	IN	HTTP/1.1 200 OK date: Mon, 08 Jul 2024 15:54:04 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=1; Expires=Thu, 07-Aug-2025 15:54:04 GMT; Path=/; SameSite=Lax; Secure last-modified: Mon, 08 Jul 2024 15:54:04 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-07-08 15:54:04 UTC	3617	IN	Data Raw: 45 31 41 0d 0a 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 7b 0d 0a 20 76 61 72 20 63 76 61 6c 20 3d 20 22 22 3b 0d 0a 20 74 72 79 7b 63 76 61 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3b 7d 63 61 74 63 68 28 65 29 7b 63 76 61 6c 20 3d 20 22 22 3b 7d 0d 0a 20 76 61 72 20 6c 20 3d 20 22 22 3b 20 69 66 28 22 63 6d 70 5f 67 65 74 6c 61 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 20 6c 20 3d 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 65 74 6c 61 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 20 7d 0d 0a 20 76 61 72 20 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 20 73 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 Data Ascii: E1A(function (){ var cval = ""; try{cval = document.cookie;}catch(e){cval = "";} var l = ""; if("cmp_getlang" in window){ l = window.cmp_getlang().toLowerCase(); } var s = document.createElement("script"); s.src = "https://a.delivery.consent
2024-07-08 15:54:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	61356	87.230.98.78	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:54:05 UTC	3251	OUT	GET /delivery/cmp.php?__cmpcc=2&__cmpfcc=1&id=68884&o=1720454044&h=http%3A%2F%2Fifdnzact.com%2FSpam_Removal.cfm%3Fdomain%3Dle100.net%26fp%3DEzVFF1z5BNcjvM%252BM%252FOKCHBPjV4tK%252Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%252FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%252BD6EslT4YXZEgi5MQZoS4%252BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%252FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%252BF%252FqfFDeim2hVuLdV2hx9V%252F15hYqnNxwr7w%252FxJkFs%26yep%3DkYWX2UB9hpPluHNh59n0TG5bw0%252FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%252FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%252FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%252Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%252B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%252FqYu%252FBmO%252BefvXO46i%252BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%252BZbCkucnl%252BKaGVQ4CSuga7KRLSemy%252FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%252F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaR [TRUNCATED] Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:54:05 UTC	409	IN	HTTP/1.1 200 OK date: Mon, 08 Jul 2024 15:54:05 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Mon, 08 Jul 2024 15:54:05 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-07-08 15:54:05 UTC	5469	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c
2024-07-08 15:54:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	61357	156.146.33.15	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:54:06 UTC	611	OUT	GET /delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfMjY.js HTTP/1.1 Host: cdn.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:54:06 UTC	619	IN	HTTP/1.1 200 OK Date: Mon, 08 Jul 2024 15:54:06 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * X-XSS-Protection: 0 Expires: Mon, 08 Jul 2024 16:20:28 GMT Cache-Control: public, max-age=1800 Edge-Control: public, max-age=1800 Last-Modified: Mon, 08 Jul 2024 15:50:28 GMT X-77-NZT: EggBnJIhDQFBDAGckiEnAffaAAAA X-77-NZT-Ray: 0d1fa518f97176d59e0b8c666c782d30 X-Accel-Expires: @1720455628 X-Accel-Date: 1720453828 X-77-Cache: HIT X-77-Age: 218 Vary: Accept-Encoding Server: CDN77-Turbo X-Cache: MISS X-77-POP: frankfurtDE
2024-07-08 15:54:06 UTC	15765	IN	Data Raw: 31 61 36 32 32 0d 0a 69 66 28 21 28 22 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 7d 3b 7d 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 76 67 5f 6e 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 6d 70 5f 68 74 6d 6c 28 22 73 76 67 22 2c 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 78 6d 6c 6e 73 3a 73 76 67 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 76 69 65 77 42 6f 78 22 3a 22 30 20 30 20 35 31 32 20 32 35 36 22 7d 2c 20 22 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 78 29 7b 78 Data Ascii: 1a622if(!("cmp_config_data" in window)){window.cmp_config_data={};}window.cmp_svg_no=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","viewBox":"0 0 512 256"}, "", function (x){x
2024-07-08 15:54:07 UTC	16384	IN	Data Raw: 33 30 2e 36 32 37 2c 36 38 2e 32 36 37 20 2d 36 38 2e 32 36 36 39 39 2c 36 38 2e 32 36 37 20 7a 22 2c 22 66 69 6c 6c 22 3a 22 23 37 37 37 22 2c 22 63 6c 61 73 73 22 3a 22 63 6d 70 73 76 67 67 72 61 79 66 69 6c 6c 22 7d 29 7d 29 2e 63 68 69 6c 64 28 22 67 22 2c 20 7b 22 69 64 22 3a 22 73 76 67 5f 31 64 22 7d 2c 20 22 22 2c 20 74 72 75 65 2c 20 66 75 6e 63 74 69 6f 6e 20 28 78 29 7b 78 2e 63 68 69 6c 64 28 22 70 61 74 68 22 2c 20 7b 22 69 64 22 3a 22 70 61 74 68 33 37 35 36 22 2c 22 64 22 3a 22 6d 31 31 30 2e 39 33 33 2c 32 33 38 2e 39 33 33 6c 32 34 37 2e 34 36 37 2c 30 63 34 2e 37 31 38 39 39 2c 30 20 38 2e 35 33 32 39 39 2c 2d 33 2e 38 32 33 20 38 2e 35 33 32 39 39 2c 2d 38 2e 35 33 33 73 2d 33 2e 38 31 34 2c 2d 38 2e 35 33 32 39 39 20 2d 38 2e 35 33 32 Data Ascii: 30.627,68.267 -68.26699,68.267 z","fill":"#777","class":"cmpsvggrayfill"})}).child("g", {"id":"svg_1d"}, "", true, function (x){x.child("path", {"id":"path3756","d":"m110.933,238.933l247.467,0c4.71899,0 8.53299,-3.823 8.53299,-8.533s-3.814,-8.53299 -8.532
2024-07-08 15:54:07 UTC	16384	IN	Data Raw: 72 76 35 35 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 6d 70 5f 68 74 6d 6c 28 22 73 76 67 22 2c 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 78 6d 6c 6e 73 3a 73 76 67 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 68 65 69 67 68 74 22 3a 22 33 32 70 78 22 2c 22 76 69 65 77 42 6f 78 22 3a 22 30 20 30 20 33 32 20 33 32 22 2c 22 77 69 64 74 68 22 3a 22 33 32 70 78 22 2c 22 63 6c 61 73 73 22 3a 22 63 6d 70 69 63 6f 73 76 67 66 69 6c 6c 22 7d 2c 20 22 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 78 29 7b 78 2e 63 68 69 6c 64 28 22 70 61 74 68 22 2c 20 7b 22 69 64 22 3a 22 63 6d 70 73 76 67 61 Data Ascii: rv55=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","height":"32px","viewBox":"0 0 32 32","width":"32px","class":"cmpicosvgfill"}, "", function (x){x.child("path", {"id":"cmpsvga
2024-07-08 15:54:07 UTC	16384	IN	Data Raw: 3a 31 2c 22 6c 22 3a 22 5c 2f 64 65 6c 69 76 65 72 79 5c 2f 69 63 6f 6e 73 5c 2f 69 63 6f 6e 73 5f 76 34 30 2e 70 6e 67 22 2c 22 70 73 22 3a 22 63 31 2c 32 22 2c 22 63 70 22 3a 22 22 2c 22 6c 70 22 3a 22 22 2c 22 66 70 22 3a 22 22 2c 22 73 70 22 3a 22 22 2c 22 66 22 3a 22 22 2c 22 73 66 22 3a 22 22 2c 22 69 33 69 64 22 3a 30 2c 22 67 69 64 22 3a 37 2c 22 66 62 22 3a 30 2c 22 61 76 22 3a 22 22 2c 22 64 76 22 3a 22 22 2c 22 73 76 22 3a 30 2c 22 70 76 22 3a 30 2c 22 6c 65 67 52 4f 57 22 3a 30 7d 2c 7b 22 69 64 22 3a 22 63 34 39 39 30 38 22 2c 22 77 73 69 64 22 3a 36 38 38 38 34 2c 22 6e 22 3a 22 61 70 6c 6c 65 22 2c 22 6e 6f 6e 65 75 22 3a 30 2c 22 6c 22 3a 22 22 2c 22 70 73 22 3a 22 63 31 2c 31 30 22 2c 22 63 70 22 3a 22 22 2c 22 6c 70 22 3a 22 22 2c 22 66 Data Ascii: :1,"l":"\/delivery\/icons\/icons_v40.png","ps":"c1,2","cp":"","lp":"","fp":"","sp":"","f":"","sf":"","i3id":0,"gid":7,"fb":0,"av":"","dv":"","sv":0,"pv":0,"legROW":0},{"id":"c49908","wsid":68884,"n":"aplle","noneu":0,"l":"","ps":"c1,10","cp":"","lp":"","f
2024-07-08 15:54:07 UTC	16384	IN	Data Raw: 73 65 20 6e 6f 6e 2d 70 72 65 63 69 73 65 20 6c 6f 63 61 74 69 6f 6e 20 73 75 67 67 65 73 74 73 20 74 68 61 74 20 74 68 65 79 20 61 72 65 20 69 6e 20 61 6e 20 75 72 62 61 6e 20 7a 6f 6e 65 2e 22 2c 22 69 6c 32 22 3a 22 41 20 6c 61 72 67 65 20 70 72 6f 64 75 63 65 72 20 6f 66 20 77 61 74 65 72 63 6f 6c 6f 75 72 20 70 61 69 6e 74 73 20 77 61 6e 74 73 20 74 6f 20 63 61 72 72 79 20 6f 75 74 20 61 6e 20 6f 6e 6c 69 6e 65 20 61 64 76 65 72 74 69 73 69 6e 67 20 63 61 6d 70 61 69 67 6e 20 66 6f 72 20 69 74 73 20 6c 61 74 65 73 74 20 77 61 74 65 72 63 6f 6c 6f 75 72 20 72 61 6e 67 65 2c 20 64 69 76 65 72 73 69 66 79 69 6e 67 20 69 74 73 20 61 75 64 69 65 6e 63 65 20 74 6f 20 72 65 61 63 68 20 61 73 20 6d 61 6e 79 20 61 6d 61 74 65 75 72 20 61 6e 64 20 70 72 6f 66 Data Ascii: se non-precise location suggests that they are in an urban zone.","il2":"A large producer of watercolour paints wants to carry out an online advertising campaign for its latest watercolour range, diversifying its audience to reach as many amateur and prof
2024-07-08 15:54:07 UTC	16384	IN	Data Raw: 57 22 3a 30 2c 22 6c 65 67 50 4f 50 49 41 22 3a 30 2c 22 6c 65 67 50 44 50 4c 22 3a 30 2c 22 6c 65 67 4c 46 50 44 50 50 50 22 3a 30 2c 22 6c 65 67 50 49 50 4c 22 3a 30 2c 22 6c 65 67 50 44 50 41 22 3a 30 2c 22 6c 65 67 50 50 41 22 3a 30 2c 22 6c 65 67 50 44 50 41 54 22 3a 30 2c 22 6c 65 67 44 53 47 4c 50 44 22 3a 30 2c 22 6c 65 67 47 44 50 52 55 4b 22 3a 30 2c 22 6c 65 67 55 53 56 43 44 50 41 22 3a 30 2c 22 6c 65 67 55 53 43 50 41 22 3a 30 2c 22 6c 65 67 55 53 55 43 50 41 22 3a 30 2c 22 6c 65 67 55 53 43 41 50 44 50 22 3a 30 2c 22 6c 65 67 41 50 50 49 22 3a 30 2c 22 6c 65 67 44 50 44 50 41 22 3a 30 2c 22 6c 65 67 55 53 54 44 50 53 41 22 3a 30 2c 22 6c 65 67 55 53 4f 43 44 50 41 22 3a 30 2c 22 6c 65 67 55 53 4d 54 43 44 50 41 22 3a 30 2c 22 6c 65 67 55 53 Data Ascii: W":0,"legPOPIA":0,"legPDPL":0,"legLFPDPPP":0,"legPIPL":0,"legPDPA":0,"legPPA":0,"legPDPAT":0,"legDSGLPD":0,"legGDPRUK":0,"legUSVCDPA":0,"legUSCPA":0,"legUSUCPA":0,"legUSCAPDP":0,"legAPPI":0,"legDPDPA":0,"legUSTDPSA":0,"legUSOCDPA":0,"legUSMTCDPA":0,"legUS
2024-07-08 15:54:07 UTC	10395	IN	Data Raw: 67 22 3a 22 45 4e 22 2c 22 73 74 72 54 79 70 65 22 3a 22 74 78 74 73 75 62 73 65 72 76 69 63 65 73 22 2c 22 73 74 72 54 65 78 74 22 3a 22 57 68 65 6e 20 65 6e 61 62 6c 69 6e 67 20 74 68 69 73 20 76 65 6e 64 6f 72 2c 20 6f 74 68 65 72 20 76 65 6e 64 6f 72 73 20 77 69 6c 6c 20 61 6c 73 6f 20 62 65 20 65 6e 61 62 6c 65 64 2e 20 54 68 65 73 65 20 61 72 65 3a 22 7d 2c 7b 22 73 74 72 4c 61 6e 67 22 3a 22 45 4e 22 2c 22 73 74 72 54 79 70 65 22 3a 22 63 6f 6d 70 61 6e 79 69 6e 66 6f 5f 64 61 74 61 63 6f 6e 74 72 6f 6c 6c 65 72 22 2c 22 73 74 72 54 65 78 74 22 3a 22 44 61 74 61 20 63 6f 6e 74 72 6f 6c 6c 65 72 22 7d 2c 7b 22 73 74 72 4c 61 6e 67 22 3a 22 45 4e 22 2c 22 73 74 72 54 79 70 65 22 3a 22 63 6f 6d 70 61 6e 79 69 6e 66 6f 5f 63 6f 6e 74 72 6f 6c 6c 65 72 Data Ascii: g":"EN","strType":"txtsubservices","strText":"When enabling this vendor, other vendors will also be enabled. These are:"},{"strLang":"EN","strType":"companyinfo_datacontroller","strText":"Data controller"},{"strLang":"EN","strType":"companyinfo_controller

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	61358	87.230.98.78	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:54:08 UTC	758	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FSpam_Removal.cfm&o=1720454046065&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:54:08 UTC	380	IN	HTTP/1.1 200 OK date: Mon, 08 Jul 2024 15:54:08 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Mon, 08 Jul 2024 15:54:08 GMT content-length: 43 content-type: image/gif connection: close
2024-07-08 15:54:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	61359	87.230.98.78	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:54:09 UTC	527	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FSpam_Removal.cfm&o=1720454046065&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:54:09 UTC	380	IN	HTTP/1.1 200 OK date: Mon, 08 Jul 2024 15:54:09 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Mon, 08 Jul 2024 15:54:09 GMT content-length: 43 content-type: image/gif connection: close
2024-07-08 15:54:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	61334	87.230.98.78	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:54:10 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-07-08 15:54:10 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	61361	87.230.98.78	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:54:12 UTC	3241	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FMalware_Removal.cfm%3Fdomain%3Dle100.net%26fp%3DEzVFF1z5BNcjvM%252BM%252FOKCHBPjV4tK%252Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%252FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%252BD6EslT4YXZEgi5MQZoS4%252BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%252FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%252BF%252FqfFDeim2hVuLdV2hx9V%252F15hYqnNxwr7w%252FxJkFs%26yep%3DkYWX2UB9hpPluHNh59n0TG5bw0%252FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%252FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%252FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%252Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%252B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%252FqYu%252FBmO%252BefvXO46i%252BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%252BZbCkucnl%252BKaGVQ4CSuga7KRLSemy%252FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%252F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%252FCiWxSUGpE [TRUNCATED] Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:54:12 UTC	409	IN	HTTP/1.1 200 OK date: Mon, 08 Jul 2024 15:54:12 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Mon, 08 Jul 2024 15:54:12 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-07-08 15:54:12 UTC	5469	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c
2024-07-08 15:54:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	61367	87.230.98.78	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:54:13 UTC	761	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FMalware_Removal.cfm&o=1720454051591&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:54:16 UTC	380	IN	HTTP/1.1 200 OK date: Mon, 08 Jul 2024 15:54:15 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Mon, 08 Jul 2024 15:54:15 GMT content-length: 43 content-type: image/gif connection: close
2024-07-08 15:54:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	61372	87.230.98.78	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:54:16 UTC	530	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FMalware_Removal.cfm&o=1720454051591&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:54:17 UTC	380	IN	HTTP/1.1 200 OK date: Mon, 08 Jul 2024 15:54:16 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Mon, 08 Jul 2024 15:54:16 GMT content-length: 43 content-type: image/gif connection: close
2024-07-08 15:54:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	61347	87.230.98.78	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:54:18 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-07-08 15:54:18 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	61375	87.230.98.78	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:54:21 UTC	3240	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FPop_Up_Removal.cfm%3Fdomain%3Dle100.net%26fp%3DEzVFF1z5BNcjvM%252BM%252FOKCHBPjV4tK%252Bdsu6AxHsg9Ob9BSqqCa276w5KcdSS0KQokL%252FcCPa3iobBl8J7Nrpyb2fOg41xnQ6EJOSjWnFilNHAciXqlel8rs3EItMOcOqyPD9HKToQGTYPfYJ6gA05DnYgNH4N3CAroCNpVjldP76EjwtehU%252BD6EslT4YXZEgi5MQZoS4%252BxgnokH2hZOQLY35oMgSedFNMZYZba7phdFPGtk%252FsVGaI7oapNDtER5i2beW0xw4d6CRCHrgk3vRSKoOcf%252BF%252FqfFDeim2hVuLdV2hx9V%252F15hYqnNxwr7w%252FxJkFs%26yep%3DkYWX2UB9hpPluHNh59n0TG5bw0%252FftS3FrfS05eSQkvD7577tCqMBolGWSznyQAROl9S7Zl8x%252FyfKCQxYUZAx8kUGQdYvktObIADEmS6znBkH40YSKfNuPBTAOhNeU6KjWcO0BUgveLTr7mOLMtv6CmZdloiVLIMOW7j%252FwFxVvQy9r90dXTDbO3YgCgDthPPatF9%252Fc3rLDDPt6ZA8fHi2bsIjIz0vLSM1GPISLNueA%252B1WlJQChITALKYb7OkYo82ECaRmlhCwbk444xsLpIPwMsJytA8HXk2swbM%252FqYu%252FBmO%252BefvXO46i%252BBvBpIROLdx41fGCMrZCpe6HcePuhkfdkJg%252BZbCkucnl%252BKaGVQ4CSuga7KRLSemy%252FL0mb9sDOAzzUI4qr0qpERW8H2pHnCw2IDR%252F6X0jjDME8ZigcXsZ90ubkoubGy200aWtsaNHmJJHaHG0aHJwzaRis7svu%252FCiWxSUGpEE [TRUNCATED] Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:54:21 UTC	409	IN	HTTP/1.1 200 OK date: Mon, 08 Jul 2024 15:54:21 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Mon, 08 Jul 2024 15:54:21 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-07-08 15:54:21 UTC	5469	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c
2024-07-08 15:54:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	61376	87.230.98.78	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:54:22 UTC	760	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FPop_Up_Removal.cfm&o=1720454060695&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:54:23 UTC	380	IN	HTTP/1.1 200 OK date: Mon, 08 Jul 2024 15:54:23 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Mon, 08 Jul 2024 15:54:23 GMT content-length: 43 content-type: image/gif connection: close
2024-07-08 15:54:23 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	61377	87.230.98.78	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:54:23 UTC	529	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FPop_Up_Removal.cfm&o=1720454060695&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-08 15:54:24 UTC	380	IN	HTTP/1.1 200 OK date: Mon, 08 Jul 2024 15:54:24 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Mon, 08 Jul 2024 15:54:24 GMT content-length: 43 content-type: image/gif connection: close
2024-07-08 15:54:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	61374	87.230.98.78	443	6000	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-08 15:54:36 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-07-08 15:54:36 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Target ID:	0
Start time:	11:53:09
Start date:	08/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	11:53:13
Start date:	08/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2208 --field-trial-handle=2004,i,1048797239495983791,16973223025167226875,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	11:53:16
Start date:	08/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://le100.net"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://le100.net

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Windows Analysis Report
http://le100.net