Edit tour

Windows Analysis Report
https://xai6l1pibnxefgt2.umso.co/

Overview

General Information

Sample URL:	https://xai6l1pibnxefgt2.umso.co/
Analysis ID:	1473672
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Phishing site or detected (based on various text indicators)

Detected non-DNS traffic on DNS port

Found iframes

HTML body contains password input but no form action

HTML page contains hidden javascript code

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1372 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5892 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=2232,i,14901034185054434323,6092688555550892506,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5160 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://xai6l1pibnxefgt2.umso.co/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://xai6l1pibnxefgt2.umso.co/

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social usering

Phishing

AI detected phishing page

Source: https://xai6l1pibnxefgt2.umso.co

LLM: Score: 8 brands: Reasons: The URL 'https://xai6l1pibnxefgt2.umso.co' is suspicious due to the random string subdomain, which is a common technique used in phishing attacks to create a sense of urgency and legitimacy. The content of the page uses social usering techniques such as urging the user to 'access the document immediately now' and providing a prominent link to 'REVIEW FULL DOCUMENT NOW'. These elements are designed to trick the user into clicking the link, which is a common phishing tactic. Additionally, the domain 'umso.co' is a legitimate domain, but the random subdomain 'xai6l1pibnxefgt2' raises suspicion. There is no prominent login form or captcha present on the page. Based on these observations, the site is likely a phishing site. DOM: 0.0.pages.csv

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 0.0

OCR Text: Brittany Byrd has shared Document for your review Please access the document immediately now . Date Received: Monday July 15, 2024 Reference Rechnunglnvoice TMT N. 2024/2136.pdf" . Pages: 2 ACCESS HERE TO REVIEW FULL DOCUMENT NOW Made with g umso

Source: https://app.umso.com/login	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11236809420?random=1721058617250&cv=11&fst=1721058617250&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fapp.umso.com%2Flogin%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20App&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://app.umso.com/login	HTTP Parser: Iframe src: https://js.stripe.com/v3/controller-with-muas-treatment-85d97b321377ff13b0a2d838807a829a.html#apiKey=pk_live_T3es1s6Xdst9UwPqloTQV1IY&stripeJsId=aea7e003-8c08-4108-b16d-86725b868c1f&controllerCount=1&isCheckout=false&stripeJsLoadTime=1721058623392&manualBrowserDeprecationRollout=false&alwaysUseMuasForElementsSession=true&mids[guid]=NA&mids[muid]=NA&mids[sid]=NA&referrer=https%3A%2F%2Fapp.umso.com%2Flogin&controllerId=__privateStripeController5331
Source: https://app.umso.com/login	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11236809420?random=1721058617250&cv=11&fst=1721058617250&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fapp.umso.com%2Flogin%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20App&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://app.umso.com/login	HTTP Parser: Iframe src: https://js.stripe.com/v3/controller-with-muas-treatment-85d97b321377ff13b0a2d838807a829a.html#apiKey=pk_live_T3es1s6Xdst9UwPqloTQV1IY&stripeJsId=aea7e003-8c08-4108-b16d-86725b868c1f&controllerCount=1&isCheckout=false&stripeJsLoadTime=1721058623392&manualBrowserDeprecationRollout=false&alwaysUseMuasForElementsSession=true&mids[guid]=NA&mids[muid]=NA&mids[sid]=NA&referrer=https%3A%2F%2Fapp.umso.com%2Flogin&controllerId=__privateStripeController5331
Source: https://app.umso.com/login	HTTP Parser: Iframe src: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Fapp.umso.com%2Flogin&title=Umso%20App&referrer=&muid=NA&sid=NA&version=6&preview=false
Source: https://app.umso.com/signup	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11236809420?random=1721058617250&cv=11&fst=1721058617250&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fapp.umso.com%2Flogin%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20App&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://app.umso.com/signup	HTTP Parser: Iframe src: https://js.stripe.com/v3/controller-with-muas-treatment-85d97b321377ff13b0a2d838807a829a.html#apiKey=pk_live_T3es1s6Xdst9UwPqloTQV1IY&stripeJsId=aea7e003-8c08-4108-b16d-86725b868c1f&controllerCount=1&isCheckout=false&stripeJsLoadTime=1721058623392&manualBrowserDeprecationRollout=false&alwaysUseMuasForElementsSession=true&mids[guid]=NA&mids[muid]=NA&mids[sid]=NA&referrer=https%3A%2F%2Fapp.umso.com%2Flogin&controllerId=__privateStripeController5331
Source: https://app.umso.com/signup	HTTP Parser: Iframe src: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Fapp.umso.com%2Flogin&title=Umso%20App&referrer=&muid=NA&sid=NA&version=6&preview=false
Source: https://app.umso.com/signup	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11236809420?random=1721058634591&cv=11&fst=1721058634591&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fapp.umso.com%2Fsignup%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20App&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://app.umso.com/signup	HTTP Parser: Iframe src: https://js.stripe.com/v3/controller-with-muas-control-e73784ea0a8720b14f7e37911e266343.html#apiKey=pk_live_T3es1s6Xdst9UwPqloTQV1IY&stripeJsId=7c265963-aa3f-4056-9f97-223a33a911a3&controllerCount=1&isCheckout=false&stripeJsLoadTime=1721058634995&manualBrowserDeprecationRollout=false&alwaysUseMuasForElementsSession=false&mids[guid]=NA&mids[muid]=3498a61b-e190-4868-8df0-5d707b447702ecdd3c&mids[sid]=47e3c031-960c-4631-a9b3-c36bb4824381ca2873&referrer=https%3A%2F%2Fapp.umso.com%2Fsignup%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&controllerId=__privateStripeController2941
Source: https://app.umso.com/signup	HTTP Parser: Iframe src: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Fapp.umso.com%2Fsignup%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&title=Umso%20App&referrer=&muid=3498a61b-e190-4868-8df0-5d707b447702ecdd3c&sid=47e3c031-960c-4631-a9b3-c36bb4824381ca2873&version=6&preview=false
Source: https://app.umso.com/signup	HTTP Parser: Iframe src: https://td.doubleclick.net/td/rul/11236809420?random=1721058634591&cv=11&fst=1721058634591&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fapp.umso.com%2Fsignup%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20App&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Source: https://app.umso.com/signup	HTTP Parser: Iframe src: https://js.stripe.com/v3/controller-with-muas-control-e73784ea0a8720b14f7e37911e266343.html#apiKey=pk_live_T3es1s6Xdst9UwPqloTQV1IY&stripeJsId=7c265963-aa3f-4056-9f97-223a33a911a3&controllerCount=1&isCheckout=false&stripeJsLoadTime=1721058634995&manualBrowserDeprecationRollout=false&alwaysUseMuasForElementsSession=false&mids[guid]=NA&mids[muid]=3498a61b-e190-4868-8df0-5d707b447702ecdd3c&mids[sid]=47e3c031-960c-4631-a9b3-c36bb4824381ca2873&referrer=https%3A%2F%2Fapp.umso.com%2Fsignup%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&controllerId=__privateStripeController2941
Source: https://app.umso.com/signup	HTTP Parser: Iframe src: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Fapp.umso.com%2Fsignup%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&title=Umso%20App&referrer=&muid=3498a61b-e190-4868-8df0-5d707b447702ecdd3c&sid=47e3c031-960c-4631-a9b3-c36bb4824381ca2873&version=6&preview=false

Source: https://app.umso.com/login	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://app.umso.com/signup	HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/7nmk9/0x4AAAAAAAeyiL9ArCePgoa_/auto/fbE/normal/auto/

HTTP Parser: Base64 decoded: {"version":3,"sourceRoot":"/cfsetup_build/src/orchestrator/turnstile/templates","sources":["turnstile.scss"],"names":[],"mappings":"AAyBA;EACI;IACI;;;AAIR;EACI;IACI;;;AAIR;EACI;IAEI;;EAGJ;IACI;;;AAIR;EACI;IACI;;;AAIR;EACI;IACI;;;AAIR;EACI;IACI;;;AAIR;EACI...

Source: https://app.umso.com/login	HTTP Parser: <input type="password" .../> found
Source: https://app.umso.com/signup	HTTP Parser: <input type="password" .../> found

Source: https://simerra.msk.su/PcYdi/	HTTP Parser: No favicon
Source: https://m.stripe.network/inner.html#url=https%3A%2F%2Fapp.umso.com%2Flogin&title=Umso%20App&referrer=&muid=NA&sid=NA&version=6&preview=false	HTTP Parser: No favicon
Source: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Fapp.umso.com%2Flogin&title=Umso%20App&referrer=&muid=NA&sid=NA&version=6&preview=false	HTTP Parser: No favicon
Source: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Fapp.umso.com%2Fsignup%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&title=Umso%20App&referrer=&muid=3498a61b-e190-4868-8df0-5d707b447702ecdd3c&sid=47e3c031-960c-4631-a9b3-c36bb4824381ca2873&version=6&preview=false	HTTP Parser: No favicon

Source: https://app.umso.com/login	HTTP Parser: No <meta name="author".. found
Source: https://app.umso.com/login	HTTP Parser: No <meta name="author".. found
Source: https://app.umso.com/signup	HTTP Parser: No <meta name="author".. found
Source: https://app.umso.com/signup	HTTP Parser: No <meta name="author".. found
Source: https://app.umso.com/signup	HTTP Parser: No <meta name="author".. found

Source: https://app.umso.com/login	HTTP Parser: No <meta name="copyright".. found
Source: https://app.umso.com/login	HTTP Parser: No <meta name="copyright".. found
Source: https://app.umso.com/signup	HTTP Parser: No <meta name="copyright".. found
Source: https://app.umso.com/signup	HTTP Parser: No <meta name="copyright".. found
Source: https://app.umso.com/signup	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49741 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.6:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:65055 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:65147 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:57889 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.6:65044 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:57805 -> 1.1.1.1:53

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49741 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: xai6l1pibnxefgt2.umso.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib_SUQilvCDrDwywovw/fnclxaoc1aijzto1.png?w=200&h=40&dpr=2 HTTP/1.1Host: xai6l1pibnxefgt2.umso.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://xai6l1pibnxefgt2.umso.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib_SUQilvCDrDwywovw/fnclxaoc1aijzto1.png?w=200&h=40&dpr=2 HTTP/1.1Host: xai6l1pibnxefgt2.umso.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/view HTTP/1.1Host: xai6l1pibnxefgt2.umso.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib_xEaDdJFAXtpgtMsP/u36o6qd6r3o9bnmq.png HTTP/1.1Host: xai6l1pibnxefgt2.umso.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://xai6l1pibnxefgt2.umso.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /lib_xEaDdJFAXtpgtMsP/u36o6qd6r3o9bnmq.png HTTP/1.1Host: xai6l1pibnxefgt2.umso.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /PcYdi/ HTTP/1.1Host: simerra.msk.suConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://simerra.msk.su/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/7a55c9ccbaaa/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://simerra.msk.su/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/7a55c9ccbaaa/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/7nmk9/0x4AAAAAAAeyiL9ArCePgoa_/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://simerra.msk.su/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/7nmk9/0x4AAAAAAAeyiL9ArCePgoa_/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8a3ae756188b0f7f&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/7nmk9/0x4AAAAAAAeyiL9ArCePgoa_/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: simerra.msk.suConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://simerra.msk.su/PcYdi/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=lk2gt6gi7ee3sd6afjr02eplmh
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8a3ae756188b0f7f&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/933894468:1721056355:RyplnyimmfYhJciDA6jrSPoRvYRXtp1ZR4mVrzF0eEo/8a3ae756188b0f7f/4b6ddc26d277b97 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8a3ae756188b0f7f/1721058581433/eab042d8a5e407693166612b8b14052de3aab681f5db0884a15320e2f395ae35/RY8MEL7DQXumrz_ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/7nmk9/0x4AAAAAAAeyiL9ArCePgoa_/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 HTTP/1.1Host: www.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib_LUGoPiqXXlDptSWA/csi5g5qmp4uscbth.png HTTP/1.1Host: www.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8a3ae756188b0f7f/1721058581436/3gRK5Ud8sqOFSpR HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/7nmk9/0x4AAAAAAAeyiL9ArCePgoa_/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/css/main.90e78f57.css HTTP/1.1Host: nextgen-widget.vercel.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib_LUGoPiqXXlDptSWA/ogsxa8h0dl6bydus.png HTTP/1.1Host: www.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib_LUGoPiqXXlDptSWA/csi5g5qmp4uscbth.png HTTP/1.1Host: www.umso.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8a3ae756188b0f7f/1721058581436/3gRK5Ud8sqOFSpR HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib_LUGoPiqXXlDptSWA/5segal4xfx8mljy3.png HTTP/1.1Host: www.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib_LUGoPiqXXlDptSWA/jocl5anhrivcjdwx.png HTTP/1.1Host: www.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/main.b963c2e4.js HTTP/1.1Host: nextgen-widget.vercel.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib_LUGoPiqXXlDptSWA/b0hytbjf7cdicnze.svg?h=80&dpr=2 HTTP/1.1Host: www.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib_LUGoPiqXXlDptSWA/csi5g5qmp4uscbth.png?w=200&h=40&dpr=2 HTTP/1.1Host: www.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib_LUGoPiqXXlDptSWA/amufjz1o6hqa4qle.png HTTP/1.1Host: www.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib_LUGoPiqXXlDptSWA/havnu57r2hcv4i5a.png HTTP/1.1Host: www.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib_LUGoPiqXXlDptSWA/ogsxa8h0dl6bydus.png HTTP/1.1Host: www.umso.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
Source: global traffic	HTTP traffic detected: GET /td/rul/11236809420?random=1721058585147&cv=11&fst=1721058585147&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2F%3Futm_source%3Dusite%26utm_campaign%3Dfree%26utm_medium%3Dbtmbadge%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20The%20Fastest%20Website%20Builder&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-CXEH5WRXTW&gacid=470383722.1721058585&gtm=45je4790v9133397838za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=1599414305 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11236809420/?random=1721058585147&cv=11&fst=1721058585147&bg=ffffff&guid=ON&async=1&gtm=45je4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2F%3Futm_source%3Dusite%26utm_campaign%3Dfree%26utm_medium%3Dbtmbadge%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20The%20Fastest%20Website%20Builder&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-VYY8D05ZV0&gacid=470383722.1721058585&gtm=45je4790v9133397838za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=955179475 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/view HTTP/1.1Host: www.umso.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
Source: global traffic	HTTP traffic detected: GET /lib_LUGoPiqXXlDptSWA/b0hytbjf7cdicnze.svg?h=80&dpr=2 HTTP/1.1Host: www.umso.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
Source: global traffic	HTTP traffic detected: GET /lib_LUGoPiqXXlDptSWA/csi5g5qmp4uscbth.png?w=200&h=40&dpr=2 HTTP/1.1Host: www.umso.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
Source: global traffic	HTTP traffic detected: GET /lib_LUGoPiqXXlDptSWA/amufjz1o6hqa4qle.png HTTP/1.1Host: www.umso.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/933894468:1721056355:RyplnyimmfYhJciDA6jrSPoRvYRXtp1ZR4mVrzF0eEo/8a3ae756188b0f7f/4b6ddc26d277b97 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib_LUGoPiqXXlDptSWA/jocl5anhrivcjdwx.png HTTP/1.1Host: www.umso.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11236809420/?random=1721058585147&cv=11&fst=1721055600000&bg=ffffff&guid=ON&async=1&gtm=45je4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2F%3Futm_source%3Dusite%26utm_campaign%3Dfree%26utm_medium%3Dbtmbadge%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20The%20Fastest%20Website%20Builder&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDaQooLlTAzaYJ2BeuPXBUCeKp275wbbm2UzA&random=314603920&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib_LUGoPiqXXlDptSWA/5segal4xfx8mljy3.png HTTP/1.1Host: www.umso.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11236809420/?random=1721058585147&cv=11&fst=1721058585147&bg=ffffff&guid=ON&async=1&gtm=45je4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2F%3Futm_source%3Dusite%26utm_campaign%3Dfree%26utm_medium%3Dbtmbadge%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20The%20Fastest%20Website%20Builder&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /lib_LUGoPiqXXlDptSWA/eljn5jc5doqj8c8f.png HTTP/1.1Host: www.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
Source: global traffic	HTTP traffic detected: GET /lib_LUGoPiqXXlDptSWA/havnu57r2hcv4i5a.png HTTP/1.1Host: www.umso.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
Source: global traffic	HTTP traffic detected: GET /public/structures/groups HTTP/1.1Host: api.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.umso.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
Source: global traffic	HTTP traffic detected: GET /public/structures?ids=st_gmfhijCMMxAcBLrJ:9,st_uGerXxeRYOSTsrnJ:4,st_NwmLNovUgREHorrQ:4,st_CoBBHOGIRGblDvui:3,st_yjWwCAcrrTwyuqKH:5,st_ZhZeMoQDspyfOwZC:5,st_gVwJmnNuAaIUzPZB:5,st_EjpMuJiVfBUfYXvK:4 HTTP/1.1Host: api.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.umso.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
Source: global traffic	HTTP traffic detected: GET /st_DhlQhQgafqkiwvHx/5?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_wqnaCNxfMwAMacVY/4?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_RiCaApghsiWDsXYm/3?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_SgsUvIflyiJLKbkn/5?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_ZhZeMoQDspyfOwZC/5?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_zuqDuEpnkgCElcsn/8?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/main.b963c2e4.js HTTP/1.1Host: nextgen-widget.vercel.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lib_LUGoPiqXXlDptSWA/eljn5jc5doqj8c8f.png HTTP/1.1Host: www.umso.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11236809420/?random=1721058585147&cv=11&fst=1721055600000&bg=ffffff&guid=ON&async=1&gtm=45je4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2F%3Futm_source%3Dusite%26utm_campaign%3Dfree%26utm_medium%3Dbtmbadge%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20The%20Fastest%20Website%20Builder&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDaQooLlTAzaYJ2BeuPXBUCeKp275wbbm2UzA&random=314603920&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_RiCaApghsiWDsXYm/3?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_ZhZeMoQDspyfOwZC/5?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/nextgen/parameters HTTP/1.1Host: api.umso.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
Source: global traffic	HTTP traffic detected: GET /public/structures/groups HTTP/1.1Host: api.umso.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
Source: global traffic	HTTP traffic detected: GET /st_YamYHUIqgrxdLNhe/9?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_xdCTWzCYkQXYraKJ/2?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/structures?ids=st_gmfhijCMMxAcBLrJ:9,st_uGerXxeRYOSTsrnJ:4,st_NwmLNovUgREHorrQ:4,st_CoBBHOGIRGblDvui:3,st_yjWwCAcrrTwyuqKH:5,st_ZhZeMoQDspyfOwZC:5,st_gVwJmnNuAaIUzPZB:5,st_EjpMuJiVfBUfYXvK:4 HTTP/1.1Host: api.umso.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
Source: global traffic	HTTP traffic detected: GET /st_wqnaCNxfMwAMacVY/4?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_cdJoZDlmunztgvLx/3?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_oWLFmgFHQeYRFSAt/2?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_WSDCBUQTPPjxTZvb/2?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_McLyNmihmZpQwQyb/5?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_KuGLRGupwTcTRRKP/7?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_kaYPadHYbGttSsxI/4?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_DpulgycoFXEXRDEk/6?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_SgsUvIflyiJLKbkn/5?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_DhlQhQgafqkiwvHx/5?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_zuqDuEpnkgCElcsn/8?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_McLyNmihmZpQwQyb/5?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_WSDCBUQTPPjxTZvb/2?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_cdJoZDlmunztgvLx/3?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_YamYHUIqgrxdLNhe/9?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_xdCTWzCYkQXYraKJ/2?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_oWLFmgFHQeYRFSAt/2?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_KuGLRGupwTcTRRKP/7?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_kaYPadHYbGttSsxI/4?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /st_DpulgycoFXEXRDEk/6?darkmode=true HTTP/1.1Host: di7r6y9oc27j.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 HTTP/1.1Host: www.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
Source: global traffic	HTTP traffic detected: GET /static/css/main.90e78f57.css HTTP/1.1Host: nextgen-widget.vercel.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.umso.com/?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "f3ec470bd3e2d9be7615479589c21b36"
Source: global traffic	HTTP traffic detected: GET /static/js/main.b963c2e4.js HTTP/1.1Host: nextgen-widget.vercel.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.umso.com/?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c31084dba070a068dd086c002e87ce3e"
Source: global traffic	HTTP traffic detected: GET /static/js/main.b963c2e4.js HTTP/1.1Host: nextgen-widget.vercel.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "c31084dba070a068dd086c002e87ce3e"
Source: global traffic	HTTP traffic detected: GET /pricing?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 HTTP/1.1Host: www.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11236809420/?random=1721058605790&cv=11&fst=1721058605790&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2Fpricing%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20Pricing&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.umso.com/pricing?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUleh47c-J5qwqTFYpiO4OvnlceM0zWFa6Qx_rk5pk0lMl5rR_z9LUwJfy5y
Source: global traffic	HTTP traffic detected: GET /td/rul/11236809420?random=1721058605790&cv=11&fst=1721058605790&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2Fpricing%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20Pricing&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.umso.com/pricing?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUleh47c-J5qwqTFYpiO4OvnlceM0zWFa6Qx_rk5pk0lMl5rR_z9LUwJfy5y
Source: global traffic	HTTP traffic detected: GET /api/view HTTP/1.1Host: www.umso.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058605.40.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058605.40.0.0
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11236809420/?random=1721058605790&cv=11&fst=1721055600000&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2Fpricing%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20Pricing&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLINMBcAkYffxtmSyYyC1I-PRWPs__mXGeysiqwjFu28fppJT0&random=241697532&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/pricing?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11236809420/?random=1721058605790&cv=11&fst=1721058605790&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2Fpricing%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20Pricing&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUleh47c-J5qwqTFYpiO4OvnlceM0zWFa6Qx_rk5pk0lMl5rR_z9LUwJfy5y
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11236809420/?random=1721058605790&cv=11&fst=1721055600000&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2Fpricing%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20Pricing&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLINMBcAkYffxtmSyYyC1I-PRWPs__mXGeysiqwjFu28fppJT0&random=241697532&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 HTTP/1.1Host: www.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058605.40.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058605.40.0.0
Source: global traffic	HTTP traffic detected: GET /lib_idKrFnnqnDIKXMAQ/eanc9lnqfsu41h6a.png?w=500&dpr=2 HTTP/1.1Host: www.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
Source: global traffic	HTTP traffic detected: GET /lib_idKrFnnqnDIKXMAQ/gekox94o9ioxkh7i.png?w=500&dpr=2 HTTP/1.1Host: www.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
Source: global traffic	HTTP traffic detected: GET /lib_idKrFnnqnDIKXMAQ/s1uokjc6kos2mlac.png?w=500&dpr=2 HTTP/1.1Host: www.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
Source: global traffic	HTTP traffic detected: GET /lib_ppHbngvSkiYmyFdO/m7f7yovyl5ocidz5.png?w=500&dpr=2 HTTP/1.1Host: www.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
Source: global traffic	HTTP traffic detected: GET /lib_uKHflxJGsjrjWGxc/dod4uf2jzflk15qm.png?w=500&dpr=2 HTTP/1.1Host: www.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11236809420/?random=1721058609649&cv=11&fst=1721058609649&bg=ffffff&guid=ON&async=1&gtm=45je4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2Fshowcase%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20Showcase&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.umso.com/showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUleh47c-J5qwqTFYpiO4OvnlceM0zWFa6Qx_rk5pk0lMl5rR_z9LUwJfy5y
Source: global traffic	HTTP traffic detected: GET /td/rul/11236809420?random=1721058609649&cv=11&fst=1721058609649&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2Fshowcase%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20Showcase&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.umso.com/showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUleh47c-J5qwqTFYpiO4OvnlceM0zWFa6Qx_rk5pk0lMl5rR_z9LUwJfy5y
Source: global traffic	HTTP traffic detected: GET /lib_idKrFnnqnDIKXMAQ/eanc9lnqfsu41h6a.png?w=500&dpr=2 HTTP/1.1Host: www.umso.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
Source: global traffic	HTTP traffic detected: GET /lib_uKHflxJGsjrjWGxc/q6yat3a98b05the9.png?w=500&dpr=2 HTTP/1.1Host: www.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11236809420/?random=1721058609649&cv=11&fst=1721055600000&bg=ffffff&guid=ON&async=1&gtm=45je4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2Fshowcase%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20Showcase&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLDIfyd_TUstYfEJgBAvMJ3EaKkJUHE1o-x0D-bMB6l3sbk5lW&random=538509789&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.umso.com/showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11236809420/?random=1721058609649&cv=11&fst=1721058609649&bg=ffffff&guid=ON&async=1&gtm=45je4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2Fshowcase%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20Showcase&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUleh47c-J5qwqTFYpiO4OvnlceM0zWFa6Qx_rk5pk0lMl5rR_z9LUwJfy5y
Source: global traffic	HTTP traffic detected: GET /api/view HTTP/1.1Host: www.umso.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
Source: global traffic	HTTP traffic detected: GET /lib_uKHflxJGsjrjWGxc/dod4uf2jzflk15qm.png?w=500&dpr=2 HTTP/1.1Host: www.umso.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
Source: global traffic	HTTP traffic detected: GET /lib_ppHbngvSkiYmyFdO/m7f7yovyl5ocidz5.png?w=500&dpr=2 HTTP/1.1Host: www.umso.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
Source: global traffic	HTTP traffic detected: GET /lib_idKrFnnqnDIKXMAQ/s1uokjc6kos2mlac.png?w=500&dpr=2 HTTP/1.1Host: www.umso.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
Source: global traffic	HTTP traffic detected: GET /lib_idKrFnnqnDIKXMAQ/gekox94o9ioxkh7i.png?w=500&dpr=2 HTTP/1.1Host: www.umso.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
Source: global traffic	HTTP traffic detected: GET /lib_uKHflxJGsjrjWGxc/q6yat3a98b05the9.png?w=500&dpr=2 HTTP/1.1Host: www.umso.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11236809420/?random=1721058609649&cv=11&fst=1721055600000&bg=ffffff&guid=ON&async=1&gtm=45je4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2Fshowcase%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20Showcase&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLDIfyd_TUstYfEJgBAvMJ3EaKkJUHE1o-x0D-bMB6l3sbk5lW&random=538509789&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 HTTP/1.1Host: app.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
Source: global traffic	HTTP traffic detected: GET /static/js/main.07ccc171.js HTTP/1.1Host: app.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://app.umso.com/login?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
Source: global traffic	HTTP traffic detected: GET /7.0/pusher.min.js HTTP/1.1Host: js.pusher.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11236809420/?random=1721058617250&cv=11&fst=1721058617250&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fapp.umso.com%2Flogin%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20App&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUleh47c-J5qwqTFYpiO4OvnlceM0zWFa6Qx_rk5pk0lMl5rR_z9LUwJfy5y
Source: global traffic	HTTP traffic detected: GET /td/rul/11236809420?random=1721058617250&cv=11&fst=1721058617250&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fapp.umso.com%2Flogin%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20App&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUleh47c-J5qwqTFYpiO4OvnlceM0zWFa6Qx_rk5pk0lMl5rR_z9LUwJfy5y
Source: global traffic	HTTP traffic detected: GET /static/css/main.6ce04055.css HTTP/1.1Host: app.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://app.umso.com/login?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11236809420/?random=1721058617250&cv=11&fst=1721058617250&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fapp.umso.com%2Flogin%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20App&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUleh47c-J5qwqTFYpiO4OvnlceM0zWFa6Qx_rk5pk0lMl5rR_z9LUwJfy5y
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11236809420/?random=1721058617250&cv=11&fst=1721055600000&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fapp.umso.com%2Flogin%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20App&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLPwsLmwjZQvzM57B4f2zOli8633yFSSI7_tabL0QgpFXnC_cQ&random=4071374351&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7.0/pusher.min.js HTTP/1.1Host: js.pusher.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /manifest.json HTTP/1.1Host: app.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://app.umso.com/login?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11236809420/?random=1721058617250&cv=11&fst=1721055600000&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fapp.umso.com%2Flogin%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20App&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLPwsLmwjZQvzM57B4f2zOli8633yFSSI7_tabL0QgpFXnC_cQ&random=4071374351&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/media/Inter-Regular.c05ed3415c35caa985d5.woff2 HTTP/1.1Host: app.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.umso.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://app.umso.com/static/css/main.6ce04055.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058617.28.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058617.28.0.0
Source: global traffic	HTTP traffic detected: GET /v3 HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/js/main.07ccc171.js HTTP/1.1Host: app.umso.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058617.28.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058617.28.0.0
Source: global traffic	HTTP traffic detected: GET /me?v=5.1.8 HTTP/1.1Host: api.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://app.umso.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058617.28.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058617.28.0.0
Source: global traffic	HTTP traffic detected: GET /api/1304329/envelope/?sentry_key=c22a068d54964bf08a4e9aeb27ee9fa8&sentry_version=7&sentry_client=sentry.javascript.react%2F7.112.2 HTTP/1.1Host: sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /status.json HTTP/1.1Host: status.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://app.umso.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /me?v=5.1.8 HTTP/1.1Host: api.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://app.umso.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058617.28.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058617.28.0.0
Source: global traffic	HTTP traffic detected: GET /static/media/Inter-Medium.44347a3a64d08cde08fa.woff2 HTTP/1.1Host: app.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.umso.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://app.umso.com/static/css/main.6ce04055.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058617.28.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058617.28.0.0
Source: global traffic	HTTP traffic detected: GET /static/media/Inter-SemiBold.78218ba3cec04d6dc402.woff2 HTTP/1.1Host: app.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://app.umso.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://app.umso.com/static/css/main.6ce04055.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058617.28.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058617.28.0.0
Source: global traffic	HTTP traffic detected: GET /v3 HTTP/1.1Host: js.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/controller-with-muas-treatment-85d97b321377ff13b0a2d838807a829a.html HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/shared-fc50a17743dac6193bf2b617ff68b6e7.js HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.stripe.com/v3/controller-with-muas-treatment-85d97b321377ff13b0a2d838807a829a.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/controller-f772f0358c4c73c59a894ceca0c3958a.js HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.stripe.com/v3/controller-with-muas-treatment-85d97b321377ff13b0a2d838807a829a.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /status.json HTTP/1.1Host: status.umso.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058623.22.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058623.22.0.0
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/shared-fc50a17743dac6193bf2b617ff68b6e7.js HTTP/1.1Host: js.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/controller-f772f0358c4c73c59a894ceca0c3958a.js HTTP/1.1Host: js.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/.deploy_status_henson.json HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonContent-Type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://js.stripe.com/v3/controller-with-muas-treatment-85d97b321377ff13b0a2d838807a829a.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/.deploy_status_henson.json HTTP/1.1Host: js.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js HTTP/1.1Host: js.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /inner.html HTTP/1.1Host: m.stripe.networkConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://js.stripe.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /out-4.5.43.js HTTP/1.1Host: m.stripe.networkConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://m.stripe.network/inner.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /out-4.5.43.js HTTP/1.1Host: m.stripe.networkConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b HTTP/1.1Host: r.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: app.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://app.umso.com/loginAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058623.22.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058623.22.0.0
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/trusted-types-checker-efd8cf45ce422659c098993bfc62531b.js HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b HTTP/1.1Host: r.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/fingerprinted/js/trusted-types-checker-efd8cf45ce422659c098993bfc62531b.js HTTP/1.1Host: js.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=2eb5a769-b736-4527-a408-1e3caa3ecb86f70c34
Source: global traffic	HTTP traffic detected: GET /me?v=5.1.8 HTTP/1.1Host: api.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://app.umso.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058623.22.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058623.22.0.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=2eb5a769-b736-4527-a408-1e3caa3ecb86f70c34
Source: global traffic	HTTP traffic detected: GET /api/1304329/envelope/?sentry_key=c22a068d54964bf08a4e9aeb27ee9fa8&sentry_version=7&sentry_client=sentry.javascript.react%2F7.112.2 HTTP/1.1Host: sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /signup?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 HTTP/1.1Host: app.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058623.22.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058623.22.0.0; __stripe_mid=3498a61b-e190-4868-8df0-5d707b447702ecdd3c; __stripe_sid=47e3c031-960c-4631-a9b3-c36bb4824381ca2873
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: app.umso.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058623.22.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058623.22.0.0; __stripe_mid=3498a61b-e190-4868-8df0-5d707b447702ecdd3c; __stripe_sid=47e3c031-960c-4631-a9b3-c36bb4824381ca2873
Source: global traffic	HTTP traffic detected: GET /api/1304329/envelope/?sentry_key=c22a068d54964bf08a4e9aeb27ee9fa8&sentry_version=7&sentry_client=sentry.javascript.react%2F7.112.2 HTTP/1.1Host: sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=23c3abdf-bb9d-4aab-b1d2-6062001d7473; __Host-stripe.mkt.csrf=0pQHJPaqwjZMrjpBuL-b4OO8hzQhvK2lwsRy9MCtOcqNyYgX8TyT_HH4pNzLrOryCUV1ePvazG8ktpLM-cfdYTw-AcAXe4aAa8ORdssdjhW8nqb6i6cxzq9G-384DSRVqzkKK8ZMJQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /td/rul/11236809420?random=1721058634591&cv=11&fst=1721058634591&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fapp.umso.com%2Fsignup%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20App&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUleh47c-J5qwqTFYpiO4OvnlceM0zWFa6Qx_rk5pk0lMl5rR_z9LUwJfy5y
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11236809420/?random=1721058634591&cv=11&fst=1721058634591&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fapp.umso.com%2Fsignup%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20App&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUleh47c-J5qwqTFYpiO4OvnlceM0zWFa6Qx_rk5pk0lMl5rR_z9LUwJfy5y
Source: global traffic	HTTP traffic detected: GET /v3/controller-with-muas-control-e73784ea0a8720b14f7e37911e266343.html HTTP/1.1Host: js.stripe.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /me?v=5.1.8 HTTP/1.1Host: api.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://app.umso.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058634.11.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058634.11.0.0
Source: global traffic	HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=2eb5a769-b736-4527-a408-1e3caa3ecb86f70c34; cid=23c3abdf-bb9d-4aab-b1d2-6062001d7473
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11236809420/?random=1721058634591&cv=11&fst=1721055600000&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fapp.umso.com%2Fsignup%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20App&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLypPHUQ0-GZhorVYlnSvNdQwQK1eVXhi32tdDOZmCRl3U_zpT&random=4232420103&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /status.json HTTP/1.1Host: status.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://app.umso.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /me?v=5.1.8 HTTP/1.1Host: api.umso.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://app.umso.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058634.11.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058634.11.0.0
Source: global traffic	HTTP traffic detected: GET /api/1304329/envelope/?sentry_key=c22a068d54964bf08a4e9aeb27ee9fa8&sentry_version=7&sentry_client=sentry.javascript.react%2F7.112.2 HTTP/1.1Host: sentry.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=23c3abdf-bb9d-4aab-b1d2-6062001d7473; __Host-stripe.mkt.csrf=0pQHJPaqwjZMrjpBuL-b4OO8hzQhvK2lwsRy9MCtOcqNyYgX8TyT_HH4pNzLrOryCUV1ePvazG8ktpLM-cfdYTw-AcAXe4aAa8ORdssdjhW8nqb6i6cxzq9G-384DSRVqzkKK8ZMJQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/11236809420/?random=1721058634591&cv=11&fst=1721058634591&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fapp.umso.com%2Fsignup%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20App&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUleh47c-J5qwqTFYpiO4OvnlceM0zWFa6Qx_rk5pk0lMl5rR_z9LUwJfy5y
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/11236809420/?random=1721058634591&cv=11&fst=1721055600000&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fapp.umso.com%2Fsignup%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20App&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLypPHUQ0-GZhorVYlnSvNdQwQK1eVXhi32tdDOZmCRl3U_zpT&random=4232420103&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /status.json HTTP/1.1Host: status.umso.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058636.9.0.0; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058636.9.0.0
Source: global traffic	HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=2eb5a769-b736-4527-a408-1e3caa3ecb86f70c34; cid=23c3abdf-bb9d-4aab-b1d2-6062001d7473
Source: global traffic	HTTP traffic detected: GET /b HTTP/1.1Host: r.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=23c3abdf-bb9d-4aab-b1d2-6062001d7473
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=23c3abdf-bb9d-4aab-b1d2-6062001d7473; __Host-stripe.mkt.csrf=0pQHJPaqwjZMrjpBuL-b4OO8hzQhvK2lwsRy9MCtOcqNyYgX8TyT_HH4pNzLrOryCUV1ePvazG8ktpLM-cfdYTw-AcAXe4aAa8ORdssdjhW8nqb6i6cxzq9G-384DSRVqzkKK8ZMJQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /b HTTP/1.1Host: r.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=23c3abdf-bb9d-4aab-b1d2-6062001d7473
Source: global traffic	HTTP traffic detected: GET /b HTTP/1.1Host: r.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=23c3abdf-bb9d-4aab-b1d2-6062001d7473
Source: global traffic	HTTP traffic detected: GET /6 HTTP/1.1Host: m.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=2eb5a769-b736-4527-a408-1e3caa3ecb86f70c34; cid=23c3abdf-bb9d-4aab-b1d2-6062001d7473
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=23c3abdf-bb9d-4aab-b1d2-6062001d7473; __Host-stripe.mkt.csrf=0pQHJPaqwjZMrjpBuL-b4OO8hzQhvK2lwsRy9MCtOcqNyYgX8TyT_HH4pNzLrOryCUV1ePvazG8ktpLM-cfdYTw-AcAXe4aAa8ORdssdjhW8nqb6i6cxzq9G-384DSRVqzkKK8ZMJQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /b HTTP/1.1Host: r.stripe.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cid=23c3abdf-bb9d-4aab-b1d2-6062001d7473

Source: chromecache_244.2.dr	String found in binary or memory: "https://www.facebook.com/StripeHQ", equals www.facebook.com (Facebook)
Source: chromecache_244.2.dr	String found in binary or memory: "https://www.linkedin.com/company/stripe/", equals www.linkedin.com (Linkedin)
Source: chromecache_249.2.dr, chromecache_321.2.dr, chromecache_314.2.dr, chromecache_301.2.dr, chromecache_256.2.dr, chromecache_263.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Tj:function(){e=Db()},pd:function(){d()}}};var jc=ka(["data-gtm-yt-inspected-"]),CC=["www.youtube.com","www.youtube-nocookie.com"],DC,EC=!1; equals www.youtube.com (Youtube)
Source: chromecache_249.2.dr, chromecache_321.2.dr, chromecache_314.2.dr, chromecache_301.2.dr, chromecache_256.2.dr, chromecache_263.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=mA(a,c,e);O(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return O(122),!0;if(d&&f){for(var m=Ob(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},pA=function(){var a=[],b=function(c){return tb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_249.2.dr, chromecache_321.2.dr, chromecache_314.2.dr, chromecache_301.2.dr, chromecache_256.2.dr, chromecache_263.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|k.length))return;var n={Rg:d,Pg:e,Qg:f,Fh:g,Gh:k,xe:m,Bb:b},p=G.YT,q=function(){KC(n)};if(p)return p.ready&&p.ready(q),b;var r=G.onYouTubeIframeAPIReady;G.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(NC(w,"iframe_api")\|\|NC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!EC&&LC(x[B],n.xe))return Bc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_204.2.dr, chromecache_247.2.dr	String found in binary or memory: return b}AC.J="internal.enableAutoEventOnTimer";var jc=ka(["data-gtm-yt-inspected-"]),CC=["www.youtube.com","www.youtube-nocookie.com"],DC,EC=!1; equals www.youtube.com (Youtube)
Source: chromecache_249.2.dr, chromecache_321.2.dr, chromecache_314.2.dr, chromecache_301.2.dr, chromecache_256.2.dr, chromecache_263.2.dr	String found in binary or memory: var PB=function(a,b,c,d,e){var f=Kz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Kz("fsl","nv.ids",[]):Kz("fsl","ids",[]);if(!g.length)return!0;var k=Pz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);O(121);if(m==="https://www.facebook.com/tr/")return O(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!ty(k,uy(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: xai6l1pibnxefgt2.umso.co
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: simerra.msk.su
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.umso.com
Source: global traffic	DNS traffic detected: DNS query: nextgen-widget.vercel.app
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: api.umso.com
Source: global traffic	DNS traffic detected: DNS query: di7r6y9oc27j.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: app.umso.com
Source: global traffic	DNS traffic detected: DNS query: js.pusher.com
Source: global traffic	DNS traffic detected: DNS query: js.stripe.com
Source: global traffic	DNS traffic detected: DNS query: sentry.io
Source: global traffic	DNS traffic detected: DNS query: status.umso.com
Source: global traffic	DNS traffic detected: DNS query: merchant-ui-api.stripe.com
Source: global traffic	DNS traffic detected: DNS query: m.stripe.network
Source: global traffic	DNS traffic detected: DNS query: r.stripe.com
Source: global traffic	DNS traffic detected: DNS query: m.stripe.com
Source: global traffic	DNS traffic detected: DNS query: stripe.com
Source: global traffic	DNS traffic detected: DNS query: api.stripe.com

Source: unknown

HTTP traffic detected: POST /api/view HTTP/1.1Host: xai6l1pibnxefgt2.umso.coConnection: keep-aliveContent-Length: 57sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded; charset=UTF-8Accept: */*Origin: https://xai6l1pibnxefgt2.umso.coSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://xai6l1pibnxefgt2.umso.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html;charset=utf-8Date: Mon, 15 Jul 2024 15:49:26 GMTContent-Length: 1093Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 15 Jul 2024 15:49:40 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closecache-control: private, no-cache, max-age=0pragma: no-cachevary: Accept-EncodingCF-Cache-Status: BYPASSReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=spzax1iHPdcfAS7FVjWZQ9JQD1uEdhao4k4VpugfJpto8p3AsgDBzrKMH0TMZ%2FbQMZ7wHP2yS3o2bqLn7bzuhjAIJW%2Fahk7Zinf%2FLsUFR7R99AoaNQYPxfIWCYD3pFlz%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8a3ae760df6017e9-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 15 Jul 2024 15:49:43 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: uW0x9agti4R8qMhIsioIRwNwfjdIwyXkN38=$LdisXUhW6iUBtPrqServer: cloudflareCF-RAY: 8a3ae7702c050cc0-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 15 Jul 2024 15:49:47 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: xXYYiUX4j4CXm1xW/+7MbmTiBl5uosaAlYA=$n0FhrNAVIZ2z9VB5cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8a3ae78e5a180c94-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: public, max-age=0, must-revalidateContent-Length: 55100Content-Type: text/html;charset=utf-8Referrer-Policy: no-referrer-when-downgradeStrict-Transport-Security: max-age=15552000X-Frame-Options: sameoriginDate: Mon, 15 Jul 2024 15:49:47 GMTConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: public, max-age=0, must-revalidateContent-Length: 55100Content-Type: text/html;charset=utf-8Referrer-Policy: no-referrer-when-downgradeStrict-Transport-Security: max-age=15552000X-Frame-Options: sameoriginDate: Mon, 15 Jul 2024 15:50:07 GMTConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: public, max-age=0, must-revalidateContent-Length: 55100Content-Type: text/html;charset=utf-8Referrer-Policy: no-referrer-when-downgradeStrict-Transport-Security: max-age=15552000X-Frame-Options: sameoriginDate: Mon, 15 Jul 2024 15:50:13 GMTConnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Mon, 15 Jul 2024 15:50:31 GMTContent-Type: application/octet-streamContent-Length: 75Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Mon, 15 Jul 2024 15:50:32 GMTContent-Type: application/octet-streamContent-Length: 75Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Mon, 15 Jul 2024 15:50:39 GMTContent-Type: application/octet-streamContent-Length: 75Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Mon, 15 Jul 2024 15:50:40 GMTContent-Type: application/octet-streamContent-Length: 75Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Mon, 15 Jul 2024 15:50:41 GMTContent-Type: application/octet-streamContent-Length: 75Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginxDate: Mon, 15 Jul 2024 15:50:45 GMTContent-Type: application/octet-streamContent-Length: 75Connection: close

Source: chromecache_263.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_285.2.dr	String found in binary or memory: https://api.stripe.com
Source: chromecache_195.2.dr	String found in binary or memory: https://app.umso.com/login
Source: chromecache_195.2.dr	String found in binary or memory: https://app.umso.com/signup
Source: chromecache_244.2.dr	String found in binary or memory: https://assets.ctfassets.net
Source: chromecache_244.2.dr	String found in binary or memory: https://assets.ctfassets.net/fzn2n1nzq965/01hMKr6nEEGVfOuhsaMIXQ/c424849423b5f036a8892afa09ac38c7/fa
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/1a930247.woff2)
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/AnimatedCodeEditor-86776e0635434fc49715.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/AnimatedIcon-0b7478e1f9234aae8838.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/AtlasDashboardGraphic-042f01c5c5f7a5d7ca1a.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/BackgroundGlobe-64953aedea5f231d07b7.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Bootstrapper-Y5HPMHAZ.js
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/BrandModal-77aed9e8900fc44f1554.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/BrandModalGraphic-e9e1fc8f4c2bf8a9bd44.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CardField-739e285edeecea986ed0.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CaseStudyCard-60f3f5412530e6e993e8.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CheckoutFormGraphic-b2509d821651cbc82709.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditor-6eacb8e42c7465ddd557.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorAsciiLoader-c1a350cb85f7a989f599.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorAutocomplete-dc62d89d9e2121e48baf.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorCursor-517911b19e66c94dafbb.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorLineNumbers-0eded1c84476ec649145.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorStatusBar-24c7c84123b2b6e4f091.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeSyntax-e0768ef33503219c518d.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CodeTerminal-ca23848effb056969042.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CopyTitle-c641e014b3946628bc95.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCardBackground-853f685776c80eaa0089
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCardOverlay-09e527d11b6471566771.cs
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarousel-6ad3f0dce85838a77d8b.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavGroup-41fa77c08914b1b778
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavItem-fd5a8f8fac232f661b3
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavTrack-1380f9c2e275695c5e
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/DevelopersCodeEditor-eadbd8bbcdedd8edbbe3.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/DomGraphic-5a317684eb2b9d1f76d2.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/EnterpriseCarouselAside-b05102a0b81de0c11406.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Field-ea906aa31d4012757deb.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Flag-0530f6f8a0ae1e011860.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Form-401d42df82b6e8482f06.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Frontdoor-4513faa7ba2dd8949ee2.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingAnimation-fa25c03988d3d1f36a35.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingGraphic-c9e3aeda05ab14a454b1.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingGraphicLogo-2cee099c6b840fb58d86.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingGraphicTier-c39e78ce45a9380bf169.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectAnimation-f4ce77b995975fa55335.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectFlowDiagram-bcf0320e44c152e1ca03.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectFlowDiagramOrderNotification-b0f6b26d
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnection-192c60d5ff4ac27dec4f.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorGraphic-ab42746a2bb65d850037.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorGraphicImage-ff4d221174ca6cab4402.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorGraphicOutline-cbb29a27650befdb3913.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIcon-f22f360dadf72ca61a47.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIconGrid-f5ddeb3e7d94044a9646.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIconOutline-2c0929473dcd28db2e99.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIssuingAnimation-ba03e22ccfea12d68c6c.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorIssuingCard-b80b51aa94acdc8a688e.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorPaymentsAnimation-71bdbfda51a40294b593.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorPaymentsGraphic-45fe2caceea82c749c40.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorStandaloneAnimation-5aefb3912ae346b5293e.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorStickyAnimation-4ea4d6a5e9b414987337.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSubanimation-b9163916332f2a67d464.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSuiteAnimation-683958a93f82ca151ea7.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Global-f1eeffae1de3242fcca9.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GlobalizationPicker-cb59e0de1d5c3aeaa184.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Globe-b2159f87180df559d2e8.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GradientLegend-f1cabc70fbf82f3e9c05.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicForm-7d75b8ba72e0304da82c.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormField-33f78921d62dc714d424.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldInput-3d704dfad5ff81d0e80b.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldInputGrid-281fa6a92c2e3caa14c9.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldList-5317148749a9268ec04d.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/GridLayout-0b90e779a89c0243e739.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/HorizontalOverflowContainer-0b85e8f46a0db21a6ef9.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Icon-646136cd9e336d8c18d7.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/InvoicingFeatureGraphic-db95f6cbfa638cca151e.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/List-d4c6ad06c173a7dca2ed.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/LocaleControl-09ce62c550a15bb456e5.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/LowCodeNoCode-de32a3423ce25c839d82.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/MobileStickyNav-5c229e49df6b7e5315d7.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/PaymentLinksFeatureGraphic-6c9382201d4ede7c851a.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Picture-3f0067e6b392244c9bda.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/ProductBadge-aa2497ab8abdcc6a3d34.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/ProductFeatureCard-4476eb8c383446c052aa.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/ProductListing-3e17d7acee941b127dd1.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/RowLayout-9272a8ee72d3dac4a6ef.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/SiteFooterSection-1c0a8e1d30b69be4ef69.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/SiteFooterSectionSupportLinkList-US-bf39e598e6b8dad8c
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/StartUp-889f28d89767c8a9d60f.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Stripe-b3679504f08482f96a0d.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/StripeProductUsed-448c2bc0913c408517f4.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/StripeProductUsedList-4a8c16b5e5f3fa51247d.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/StripeSet-423109ad4bf57a2a011c.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/Track-2f2fce741fc3d8fc8450.css
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/ac6713d5.woff)
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/f965fdf4.woff2
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/f965fdf4.woff2)
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/imt-b20e4c92d8eb5616249a9cf59dc81c40.js
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/mkt-statics-srv/assets/store-936f0d847a16164e7f6b15d74659c4a9.html
Source: chromecache_244.2.dr	String found in binary or memory: https://b.stripecdn.com/stripethirdparty-srv/assets/
Source: chromecache_249.2.dr, chromecache_321.2.dr, chromecache_314.2.dr, chromecache_301.2.dr, chromecache_256.2.dr, chromecache_204.2.dr, chromecache_263.2.dr, chromecache_247.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_244.2.dr	String found in binary or memory: https://dashboard.stripe.com/
Source: chromecache_244.2.dr	String found in binary or memory: https://dashboard.stripe.com/register
Source: chromecache_223.2.dr, chromecache_272.2.dr, chromecache_224.2.dr, chromecache_195.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Inter:wght
Source: chromecache_311.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Rubik:wght
Source: chromecache_253.2.dr, chromecache_215.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa0ZL7SUc.woff2)
Source: chromecache_253.2.dr, chromecache_215.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2)
Source: chromecache_253.2.dr, chromecache_215.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1pL7SUc.woff2)
Source: chromecache_253.2.dr, chromecache_215.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa25L7SUc.woff2)
Source: chromecache_253.2.dr, chromecache_215.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa2JL7SUc.woff2)
Source: chromecache_253.2.dr, chromecache_215.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa2ZL7SUc.woff2)
Source: chromecache_253.2.dr, chromecache_215.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa2pL7SUc.woff2)
Source: chromecache_215.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/rubik/v28/iJWZBXyIfDnIV5PNhY1KTN7Z-Yh-h4-FU0U1Z4Y.woff2)
Source: chromecache_215.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/rubik/v28/iJWZBXyIfDnIV5PNhY1KTN7Z-Yh-h4-FUkU1Z4Y.woff2)
Source: chromecache_215.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/rubik/v28/iJWZBXyIfDnIV5PNhY1KTN7Z-Yh-h4-FV0U1.woff2)
Source: chromecache_215.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/rubik/v28/iJWZBXyIfDnIV5PNhY1KTN7Z-Yh-h4-FVUU1Z4Y.woff2)
Source: chromecache_215.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/rubik/v28/iJWZBXyIfDnIV5PNhY1KTN7Z-Yh-h4-FWUU1Z4Y.woff2)
Source: chromecache_215.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/rubik/v28/iJWZBXyIfDnIV5PNhY1KTN7Z-Yh-h4-FWkU1Z4Y.woff2)
Source: chromecache_244.2.dr	String found in binary or memory: https://github.com/stripe-samples
Source: chromecache_263.2.dr	String found in binary or memory: https://google.com
Source: chromecache_263.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_250.2.dr	String found in binary or memory: https://helpcenter.affirm.ca
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/1ctgMwd2p9euFW9pPSM7jR/451d5e987ca7fa14060526e6b1766a8b/bm
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/1lCtk48IB26AGgXdHsrLrt/ad2816d6a744d5249c19ba66be22b0a6/ch
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/2EOOpI2mMZgHYBlbO44zWV/5a6c5d37402652c80567ec942c733a43/fa
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/3AGidihOJl4nH9D1vDjM84/9540155d584be52fc54c443b6efa4ae6/ho
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/4jq1Wguyus7CA7yc2kxMgn/cf7b01aadf305daef40ac8acab654510/ho
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/4zeFefnpB8yh7U3qSQRktP/d583ee93dd3d8910fa27296748699a0f/bm
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/5C5LvT3YZvRTGYn7uabXGj/7da8063dc77c67b7f66a1479f47409c8/bu
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/5DaqGgXeMbxSIqQj9WSqSF/8142c0c6e15b27a8bb6c8a0f8a5d4dfb/ho
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/5F0uhf7cRg9vhR6NmgWzzI/664e14ddebb91375f89f8dcc75242dc0/ho
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/5epSdhifMhjZWOkOxK9xG8/05715737a672f2069c17903d2acae585/ty
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/5hEVwGQfvUQhsMjfASiuA/db4e12749695dbf5735787879ae56e96/fla
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/5k7VeoAQQDK7032fIF6PEU/25f3670f5f4508103ee77afd92b7e074/ty
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/6c56LuWUxcACbVkv4fqszI/d0a88e48d11a88b97daf896246ac40da/ho
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/6iLtU8qBUtE42tshpmZxY2/ac5b7b7a181524237b942e43620fceef/ch
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/7C4ROeiaqUa0HwwBU9EL9l/f9c57cccfc64de8869be7e7a9556fec9/at
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/7jjWJlm9NHgLI7SV98B0Dg/ea1ae753f3764897fa4333311e41f496/ho
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/7szA8TJHWKDIEuCbu6Yblm/4548db61648d063fb7e7dddfca04ab79/ho
Source: chromecache_244.2.dr	String found in binary or memory: https://images.ctfassets.net/fzn2n1nzq965/wEsTNDVgdEqaPAKkFdqnL/c69e1649432f1b772d86d81e423b7e3e/but
Source: chromecache_217.2.dr, chromecache_285.2.dr	String found in binary or memory: https://js.stripe.com/v3/fingerprinted/js/controller-f772f0358c4c73c59a894ceca0c3958a.js
Source: chromecache_193.2.dr	String found in binary or memory: https://js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js
Source: chromecache_217.2.dr, chromecache_285.2.dr	String found in binary or memory: https://js.stripe.com/v3/fingerprinted/js/shared-fc50a17743dac6193bf2b617ff68b6e7.js
Source: chromecache_206.2.dr, chromecache_292.2.dr	String found in binary or memory: https://m.stripe.network
Source: chromecache_244.2.dr	String found in binary or memory: https://marketplace.stripe.com/
Source: chromecache_244.2.dr	String found in binary or memory: https://marketplace.stripe.com/collections/enterprise
Source: chromecache_217.2.dr	String found in binary or memory: https://merchant-ui-api.stripe.com
Source: chromecache_195.2.dr	String found in binary or memory: https://nextgen-widget.vercel.app/static/js/main.b963c2e4.js
Source: chromecache_263.2.dr, chromecache_247.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_249.2.dr, chromecache_321.2.dr, chromecache_314.2.dr, chromecache_301.2.dr, chromecache_256.2.dr, chromecache_204.2.dr, chromecache_263.2.dr, chromecache_247.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_304.2.dr	String found in binary or memory: https://pqina.nl/pintura/license/
Source: chromecache_244.2.dr	String found in binary or memory: https://press.stripe.com/
Source: chromecache_244.2.dr	String found in binary or memory: https://privacy.stripe.com/
Source: chromecache_315.2.dr, chromecache_331.2.dr	String found in binary or memory: https://pusher.com/
Source: chromecache_244.2.dr	String found in binary or memory: https://q.stripe.com
Source: chromecache_244.2.dr	String found in binary or memory: https://sales-live-chat.stripe.com
Source: chromecache_244.2.dr	String found in binary or memory: https://sales-live-chat.stripe.com/render
Source: chromecache_244.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_311.2.dr	String found in binary or memory: https://simerra.msk.su/PcYdi/
Source: chromecache_249.2.dr, chromecache_321.2.dr, chromecache_314.2.dr, chromecache_301.2.dr, chromecache_256.2.dr, chromecache_263.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_244.2.dr	String found in binary or memory: https://status.stripe.com/
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/#organization
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/ae
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/at
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/au
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/br
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/contact/sales
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/de
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/de-be
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/de-ch
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/de-li
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/de-lu
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/api
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/billing
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/connect
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/development
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/invoicing/hosted-invoice-page
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/libraries
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/no-code
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/no-code/payment-links
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/no-code/tap-to-pay
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/payments
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/payments/checkout
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/stripe-apps
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/terminal
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/upgrades#api-changelog
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/docs/upgrades#api-versions
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-at
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-be
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-bg
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-br
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-ca
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-ch
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-cy
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-cz
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-de
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-dk
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-ee
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-es
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-fi
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-fr
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-gi
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-gr
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-hk
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-hr
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-hu
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-it
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-jp
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-li
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-lt
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-lu
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-lv
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-mt
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-mx
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-my
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-nl
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-no
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-pl
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-pt
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-ro
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-se
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-sg
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-si
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-sk
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/en-th
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/es
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/es-us
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/fr
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/fr-be
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/fr-ca
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/fr-ch
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/fr-lu
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/gb
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/guides
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/ie
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/in
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/issuing
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/it
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/it-ch
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/it-hr
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/it-si
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/jp
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/mx
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/nl
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/nl-be
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/nz
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/pricing
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/privacy
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/pt-pt
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/radar
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/se
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/sigma
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/spc/licenses
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/sv-fi
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/th
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/us
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/use-cases/global-businesses
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/zh-hk
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/zh-my
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/zh-sg
Source: chromecache_244.2.dr	String found in binary or memory: https://stripe.com/zh-us
Source: chromecache_244.2.dr	String found in binary or memory: https://support.stripe.com/?referrerLocale=en-us
Source: chromecache_249.2.dr, chromecache_321.2.dr, chromecache_314.2.dr, chromecache_301.2.dr, chromecache_256.2.dr, chromecache_204.2.dr, chromecache_263.2.dr, chromecache_247.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_244.2.dr	String found in binary or memory: https://twitter.com/stripe
Source: chromecache_263.2.dr, chromecache_247.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_313.2.dr, chromecache_280.2.dr, chromecache_282.2.dr, chromecache_251.2.dr, chromecache_258.2.dr, chromecache_318.2.dr, chromecache_296.2.dr, chromecache_274.2.dr, chromecache_229.2.dr, chromecache_231.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/11236809420/?random
Source: chromecache_263.2.dr, chromecache_247.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_247.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_249.2.dr, chromecache_321.2.dr, chromecache_314.2.dr, chromecache_301.2.dr, chromecache_256.2.dr, chromecache_263.2.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_223.2.dr, chromecache_272.2.dr, chromecache_224.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=AW-11236809420
Source: chromecache_223.2.dr, chromecache_272.2.dr, chromecache_224.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-VYY8D05ZV0
Source: chromecache_223.2.dr, chromecache_272.2.dr, chromecache_224.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=GTM-NTBF2FJP
Source: chromecache_244.2.dr	String found in binary or memory: https://www.linkedin.com/company/stripe/
Source: chromecache_249.2.dr, chromecache_321.2.dr, chromecache_314.2.dr, chromecache_301.2.dr, chromecache_256.2.dr, chromecache_263.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_195.2.dr	String found in binary or memory: https://www.umso.com/
Source: chromecache_223.2.dr	String found in binary or memory: https://www.umso.com/beispiele
Source: chromecache_224.2.dr	String found in binary or memory: https://www.umso.com/custom404-l7p5nn6
Source: chromecache_195.2.dr	String found in binary or memory: https://www.umso.com/de
Source: chromecache_195.2.dr	String found in binary or memory: https://www.umso.com/lib_LUGoPiqXXlDptSWA/69k32iua1jxr2uyj.png?w=1200&h=630&fit=crop
Source: chromecache_272.2.dr	String found in binary or memory: https://www.umso.com/lib_LUGoPiqXXlDptSWA/6g2u3zp01e6vtzny.png?w=1200&h=630&fit=crop
Source: chromecache_223.2.dr, chromecache_272.2.dr, chromecache_224.2.dr, chromecache_195.2.dr	String found in binary or memory: https://www.umso.com/lib_LUGoPiqXXlDptSWA/eljn5jc5doqj8c8f.png
Source: chromecache_223.2.dr	String found in binary or memory: https://www.umso.com/mostra-de-sites
Source: chromecache_272.2.dr	String found in binary or memory: https://www.umso.com/preco
Source: chromecache_272.2.dr	String found in binary or memory: https://www.umso.com/preise
Source: chromecache_272.2.dr	String found in binary or memory: https://www.umso.com/pricing
Source: chromecache_195.2.dr	String found in binary or memory: https://www.umso.com/pt
Source: chromecache_223.2.dr	String found in binary or memory: https://www.umso.com/showcase
Source: chromecache_195.2.dr	String found in binary or memory: https://www.umso.fr
Source: chromecache_272.2.dr	String found in binary or memory: https://www.umso.fr/prix
Source: chromecache_223.2.dr	String found in binary or memory: https://www.umso.fr/vitrine
Source: chromecache_249.2.dr, chromecache_321.2.dr, chromecache_314.2.dr, chromecache_301.2.dr, chromecache_256.2.dr, chromecache_263.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_311.2.dr	String found in binary or memory: https://xai6l1pibnxefgt2.umso.co/
Source: chromecache_311.2.dr	String found in binary or memory: https://xai6l1pibnxefgt2.umso.co/lib_xEaDdJFAXtpgtMsP/u36o6qd6r3o9bnmq.png
Source: chromecache_244.2.dr	String found in binary or memory: https://youtube.com/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 57886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 65140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 57908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 65128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 57875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 65061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 57897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65073
Source: unknown	Network traffic detected: HTTP traffic on port 57896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65076
Source: unknown	Network traffic detected: HTTP traffic on port 57850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65070
Source: unknown	Network traffic detected: HTTP traffic on port 65050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65068
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65084
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65088
Source: unknown	Network traffic detected: HTTP traffic on port 65085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65080
Source: unknown	Network traffic detected: HTTP traffic on port 65138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65081
Source: unknown	Network traffic detected: HTTP traffic on port 57921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65079
Source: unknown	Network traffic detected: HTTP traffic on port 57955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65099
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65098
Source: unknown	Network traffic detected: HTTP traffic on port 57817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65092
Source: unknown	Network traffic detected: HTTP traffic on port 57922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65090
Source: unknown	Network traffic detected: HTTP traffic on port 65116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57924
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57920
Source: unknown	Network traffic detected: HTTP traffic on port 57811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57815
Source: unknown	Network traffic detected: HTTP traffic on port 57960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57814
Source: unknown	Network traffic detected: HTTP traffic on port 57925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57935
Source: unknown	Network traffic detected: HTTP traffic on port 57868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57931
Source: unknown	Network traffic detected: HTTP traffic on port 57892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57948
Source: unknown	Network traffic detected: HTTP traffic on port 57959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57825
Source: unknown	Network traffic detected: HTTP traffic on port 57926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57820
Source: unknown	Network traffic detected: HTTP traffic on port 57903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57942
Source: unknown	Network traffic detected: HTTP traffic on port 65135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57950
Source: unknown	Network traffic detected: HTTP traffic on port 57891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65123 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57835
Source: unknown	Network traffic detected: HTTP traffic on port 57948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57832
Source: unknown	Network traffic detected: HTTP traffic on port 57835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57961
Source: unknown	Network traffic detected: HTTP traffic on port 57810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57960
Source: unknown	Network traffic detected: HTTP traffic on port 65055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57904
Source: unknown	Network traffic detected: HTTP traffic on port 65090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57906
Source: unknown	Network traffic detected: HTTP traffic on port 57949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57901
Source: unknown	Network traffic detected: HTTP traffic on port 57961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57900
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57902
Source: unknown	Network traffic detected: HTTP traffic on port 57916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57919
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57915
Source: unknown	Network traffic detected: HTTP traffic on port 57845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57912
Source: unknown	Network traffic detected: HTTP traffic on port 65045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57913
Source: unknown	Network traffic detected: HTTP traffic on port 65133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57910
Source: unknown	Network traffic detected: HTTP traffic on port 57856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65150
Source: unknown	Network traffic detected: HTTP traffic on port 65092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57890
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65147
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65149
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65045
Source: unknown	Network traffic detected: HTTP traffic on port 65068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57896
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57899
Source: unknown	Network traffic detected: HTTP traffic on port 65131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57898
Source: unknown	Network traffic detected: HTTP traffic on port 65080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65050
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65054
Source: unknown	Network traffic detected: HTTP traffic on port 65046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57888 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65048
Source: unknown	Network traffic detected: HTTP traffic on port 57912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65065
Source: unknown	Network traffic detected: HTTP traffic on port 57818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65057
Source: unknown	Network traffic detected: HTTP traffic on port 57934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57849
Source: unknown	Network traffic detected: HTTP traffic on port 65130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57843
Source: unknown	Network traffic detected: HTTP traffic on port 57901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57850
Source: unknown	Network traffic detected: HTTP traffic on port 57947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65106
Source: unknown	Network traffic detected: HTTP traffic on port 57899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57857
Source: unknown	Network traffic detected: HTTP traffic on port 57830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57859
Source: unknown	Network traffic detected: HTTP traffic on port 57864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65114
Source: unknown	Network traffic detected: HTTP traffic on port 65070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65117
Source: unknown	Network traffic detected: HTTP traffic on port 65107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65131
Source: unknown	Network traffic detected: HTTP traffic on port 57842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 57865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57872
Source: unknown	Network traffic detected: HTTP traffic on port 65071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65125
Source: unknown	Network traffic detected: HTTP traffic on port 65142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65123
Source: unknown	Network traffic detected: HTTP traffic on port 57935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65129
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65127
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65140
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65143
Source: unknown	Network traffic detected: HTTP traffic on port 57820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65142
Source: unknown	Network traffic detected: HTTP traffic on port 57958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57875
Source: unknown	Network traffic detected: HTTP traffic on port 65119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57874
Source: unknown	Network traffic detected: HTTP traffic on port 57887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57876
Source: unknown	Network traffic detected: HTTP traffic on port 57902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 57884

Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.6:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:65055 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:65147 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.110.67:443 -> 192.168.2.6:57889 version: TLS 1.2

Source: classification engine

Classification label: mal60.phis.win@33/237@86/36

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=2232,i,14901034185054434323,6092688555550892506,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://xai6l1pibnxefgt2.umso.co/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=2232,i,14901034185054434323,6092688555550892506,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://xai6l1pibnxefgt2.umso.co/	0%	Avira URL Cloud	safe
https://xai6l1pibnxefgt2.umso.co/	100%	SlashNext	Credential Stealing type: Phishing & Social usering

Source	Detection	Scanner	Label
https://js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js	0%	URL Reputation	safe
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://twitter.com/stripe	0%	URL Reputation	safe
https://m.stripe.network	0%	URL Reputation	safe
https://youtube.com/	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
https://stripe.com/spc/licenses	0%	Avira URL Cloud	safe
https://di7r6y9oc27j.cloudfront.net/st_DpulgycoFXEXRDEk/6?darkmode=true	0%	Avira URL Cloud	safe
https://di7r6y9oc27j.cloudfront.net/st_oWLFmgFHQeYRFSAt/2?darkmode=true	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorAutocomplete-dc62d89d9e2121e48baf.css	0%	Avira URL Cloud	safe
https://www.umso.com/lib_LUGoPiqXXlDptSWA/eljn5jc5doqj8c8f.png	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavItem-fd5a8f8fac232f661b3	0%	Avira URL Cloud	safe
https://app.umso.com/manifest.json	0%	Avira URL Cloud	safe
https://stripe.com/#organization	0%	URL Reputation	safe
https://images.ctfassets.net/fzn2n1nzq965/7szA8TJHWKDIEuCbu6Yblm/4548db61648d063fb7e7dddfca04ab79/ho	0%	Avira URL Cloud	safe
https://stripe.com/	0%	URL Reputation	safe
https://www.umso.com/lib_ppHbngvSkiYmyFdO/m7f7yovyl5ocidz5.png?w=500&dpr=2	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/Frontdoor-4513faa7ba2dd8949ee2.css	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/CheckoutFormGraphic-b2509d821651cbc82709.css	0%	Avira URL Cloud	safe
https://press.stripe.com/	0%	Avira URL Cloud	safe
https://stripe.com/de-ch	0%	Avira URL Cloud	safe
https://images.ctfassets.net/fzn2n1nzq965/2EOOpI2mMZgHYBlbO44zWV/5a6c5d37402652c80567ec942c733a43/fa	0%	Avira URL Cloud	safe
https://stripe.com/en-li	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/StripeSet-423109ad4bf57a2a011c.css	0%	Avira URL Cloud	safe
https://stripe.com/en-lu	0%	Avira URL Cloud	safe
https://stripe.com/en-lv	0%	Avira URL Cloud	safe
https://stripe.com/en-lt	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/AnimatedIcon-0b7478e1f9234aae8838.css	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorStatusBar-24c7c84123b2b6e4f091.css	0%	Avira URL Cloud	safe
https://api.stripe.com	0%	Avira URL Cloud	safe
https://assets.ctfassets.net/fzn2n1nzq965/01hMKr6nEEGVfOuhsaMIXQ/c424849423b5f036a8892afa09ac38c7/fa	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorStickyAnimation-4ea4d6a5e9b414987337.css	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/BackgroundGlobe-64953aedea5f231d07b7.css	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/List-d4c6ad06c173a7dca2ed.css	0%	Avira URL Cloud	safe
https://stripe.com/en-my	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/Field-ea906aa31d4012757deb.css	0%	Avira URL Cloud	safe
https://stripe.com/docs/payments/checkout	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/ProductFeatureCard-4476eb8c383446c052aa.css	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorAsciiLoader-c1a350cb85f7a989f599.css	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/Icon-646136cd9e336d8c18d7.css	0%	Avira URL Cloud	safe
https://stripe.com/ie	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldInput-3d704dfad5ff81d0e80b.css	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/DevelopersCodeEditor-eadbd8bbcdedd8edbbe3.css	0%	Avira URL Cloud	safe
https://stripe.com/en-mx	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavTrack-1380f9c2e275695c5e	0%	Avira URL Cloud	safe
https://stripe.com/en-mt	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldList-5317148749a9268ec04d.css	0%	Avira URL Cloud	safe
https://stripe.com/pricing	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCardBackground-853f685776c80eaa0089	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/EnterpriseCarouselAside-b05102a0b81de0c11406.css	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/Stripe-b3679504f08482f96a0d.css	0%	Avira URL Cloud	safe
https://stripe.com/en-no	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/Global-f1eeffae1de3242fcca9.css	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectAnimation-f4ce77b995975fa55335.css	0%	Avira URL Cloud	safe
https://stripe.com/docs/payments	0%	Avira URL Cloud	safe
https://stripe.com/in	0%	Avira URL Cloud	safe
https://stripe.com/en-nl	0%	Avira URL Cloud	safe
https://images.ctfassets.net/fzn2n1nzq965/5F0uhf7cRg9vhR6NmgWzzI/664e14ddebb91375f89f8dcc75242dc0/ho	0%	Avira URL Cloud	safe
https://stripe.com/it	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/f965fdf4.woff2	0%	Avira URL Cloud	safe
https://www.umso.com/?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2	0%	Avira URL Cloud	safe
https://di7r6y9oc27j.cloudfront.net/st_kaYPadHYbGttSsxI/4?darkmode=true	0%	Avira URL Cloud	safe
https://stripe.com/docs/upgrades#api-versions	0%	Avira URL Cloud	safe
https://www.umso.com/lib_LUGoPiqXXlDptSWA/6g2u3zp01e6vtzny.png?w=1200&h=630&fit=crop	0%	Avira URL Cloud	safe
https://www.umso.com/preco	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorGraphic-ab42746a2bb65d850037.css	0%	Avira URL Cloud	safe
https://stripe.com/guides	0%	Avira URL Cloud	safe
https://merchant-ui-api.stripe.com	0%	Avira URL Cloud	safe
https://images.ctfassets.net	0%	Avira URL Cloud	safe
https://www.umso.fr/vitrine	0%	Avira URL Cloud	safe
https://api.umso.com/public/nextgen/parameters	0%	Avira URL Cloud	safe
https://www.umso.com/lib_idKrFnnqnDIKXMAQ/eanc9lnqfsu41h6a.png?w=500&dpr=2	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/CardField-739e285edeecea986ed0.css	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingGraphicTier-c39e78ce45a9380bf169.css	0%	Avira URL Cloud	safe
https://stripe.com/jp	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/GridLayout-0b90e779a89c0243e739.css	0%	Avira URL Cloud	safe
https://www.umso.com/lib_LUGoPiqXXlDptSWA/amufjz1o6hqa4qle.png	0%	Avira URL Cloud	safe
https://dashboard.stripe.com/	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/GlobalizationPicker-cb59e0de1d5c3aeaa184.css	0%	Avira URL Cloud	safe
https://stripe.com/th	0%	Avira URL Cloud	safe
https://stripe.com/en-hu	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/933894468:1721056355:RyplnyimmfYhJciDA6jrSPoRvYRXtp1ZR4mVrzF0eEo/8a3ae756188b0f7f/4b6ddc26d277b97	0%	Avira URL Cloud	safe
https://www.umso.fr	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/StripeProductUsed-448c2bc0913c408517f4.css	0%	Avira URL Cloud	safe
https://stripe.com/sv-fi	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/HorizontalOverflowContainer-0b85e8f46a0db21a6ef9.css	0%	Avira URL Cloud	safe
https://stripe.com/en-hk	0%	Avira URL Cloud	safe
https://support.stripe.com/?referrerLocale=en-us	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSuiteAnimation-683958a93f82ca151ea7.css	0%	Avira URL Cloud	safe
https://stripe.com/en-hr	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSubanimation-b9163916332f2a67d464.css	0%	Avira URL Cloud	safe
https://di7r6y9oc27j.cloudfront.net/st_YamYHUIqgrxdLNhe/9?darkmode=true	0%	Avira URL Cloud	safe
https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorCursor-517911b19e66c94dafbb.css	0%	Avira URL Cloud	safe
https://images.ctfassets.net/fzn2n1nzq965/6iLtU8qBUtE42tshpmZxY2/ac5b7b7a181524237b942e43620fceef/ch	0%	Avira URL Cloud	safe
https://nextgen-widget.vercel.app/static/js/main.b963c2e4.js	0%	Avira URL Cloud	safe
https://stripe.com/it-hr	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.umso.com	99.83.181.15	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
stats.g.doubleclick.net	64.233.166.155	true	false	unknown
nextgen-widget.vercel.app	76.76.21.164	true	false	unknown
di7r6y9oc27j.cloudfront.net	18.245.206.205	true	false	unknown
stripe.com	198.137.150.81	true	false	unknown
www.google.com	142.250.186.132	true	false	unknown
d3dy5gmtp8yhk7.cloudfront.net	18.245.35.58	true	false	unknown
app.umso.com	13.33.88.122	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
cname.vercel-dns.com	76.76.21.93	true	false	unknown
simerra.msk.su	104.21.65.212	true	false	unknown
sentry.io	35.186.247.156	true	false	unknown
stripecdn.map.fastly.net	151.101.128.176	true	false	unknown
xai6l1pibnxefgt2.umso.co	75.2.96.155	true	true	unknown
r.stripe.com	54.187.159.182	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
api.umso.com	54.185.96.248	true	false	unknown
googleads.g.doubleclick.net	142.250.185.66	true	false	unknown
m.stripe.com	44.238.240.127	true	false	unknown
challenges.cloudflare.com	104.17.3.184	true	false	unknown
analytics.google.com	142.250.186.110	true	false	unknown
td.doubleclick.net	172.217.16.130	true	false	unknown
merchant-ui-api.stripe.com	198.202.176.201	true	false	unknown
api.stripe.com	34.250.29.31	true	false	unknown
m.stripe.network	unknown	unknown	false	unknown
status.umso.com	unknown	unknown	false	unknown
js.pusher.com	unknown	unknown	false	unknown
js.stripe.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://di7r6y9oc27j.cloudfront.net/st_oWLFmgFHQeYRFSAt/2?darkmode=true	false	Avira URL Cloud: safe	unknown
https://www.umso.com/lib_ppHbngvSkiYmyFdO/m7f7yovyl5ocidz5.png?w=500&dpr=2	false	Avira URL Cloud: safe	unknown
https://www.umso.com/lib_LUGoPiqXXlDptSWA/eljn5jc5doqj8c8f.png	false	Avira URL Cloud: safe	unknown
https://js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js	false	URL Reputation: safe	unknown
https://di7r6y9oc27j.cloudfront.net/st_DpulgycoFXEXRDEk/6?darkmode=true	false	Avira URL Cloud: safe	unknown
https://app.umso.com/manifest.json	false	Avira URL Cloud: safe	unknown
https://js.stripe.com/v3/controller-with-muas-treatment-85d97b321377ff13b0a2d838807a829a.html#apiKey=pk_live_T3es1s6Xdst9UwPqloTQV1IY&stripeJsId=aea7e003-8c08-4108-b16d-86725b868c1f&controllerCount=1&isCheckout=false&stripeJsLoadTime=1721058623392&manualBrowserDeprecationRollout=false&alwaysUseMuasForElementsSession=true&mids[guid]=NA&mids[muid]=NA&mids[sid]=NA&referrer=https%3A%2F%2Fapp.umso.com%2Flogin&controllerId=__privateStripeController5331	false		unknown
https://www.umso.com/showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2	false		unknown
https://di7r6y9oc27j.cloudfront.net/st_kaYPadHYbGttSsxI/4?darkmode=true	false	Avira URL Cloud: safe	unknown
https://www.umso.com/?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2	false	Avira URL Cloud: safe	unknown
https://js.stripe.com/v3/controller-with-muas-control-e73784ea0a8720b14f7e37911e266343.html#apiKey=pk_live_T3es1s6Xdst9UwPqloTQV1IY&stripeJsId=7c265963-aa3f-4056-9f97-223a33a911a3&controllerCount=1&isCheckout=false&stripeJsLoadTime=1721058634995&manualBrowserDeprecationRollout=false&alwaysUseMuasForElementsSession=false&mids[guid]=NA&mids[muid]=3498a61b-e190-4868-8df0-5d707b447702ecdd3c&mids[sid]=47e3c031-960c-4631-a9b3-c36bb4824381ca2873&referrer=https%3A%2F%2Fapp.umso.com%2Fsignup%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&controllerId=__privateStripeController2941	false		unknown
https://api.umso.com/public/nextgen/parameters	false	Avira URL Cloud: safe	unknown
https://www.umso.com/lib_idKrFnnqnDIKXMAQ/eanc9lnqfsu41h6a.png?w=500&dpr=2	false	Avira URL Cloud: safe	unknown
https://www.umso.com/lib_LUGoPiqXXlDptSWA/amufjz1o6hqa4qle.png	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/933894468:1721056355:RyplnyimmfYhJciDA6jrSPoRvYRXtp1ZR4mVrzF0eEo/8a3ae756188b0f7f/4b6ddc26d277b97	false	Avira URL Cloud: safe	unknown
https://stripe.com/	false	URL Reputation: safe	unknown
https://di7r6y9oc27j.cloudfront.net/st_YamYHUIqgrxdLNhe/9?darkmode=true	false	Avira URL Cloud: safe	unknown
https://nextgen-widget.vercel.app/static/js/main.b963c2e4.js	false	Avira URL Cloud: safe	unknown
https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html#url=https%3A%2F%2Fapp.umso.com%2Fsignup%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&title=Umso%20App&referrer=&muid=3498a61b-e190-4868-8df0-5d707b447702ecdd3c&sid=47e3c031-960c-4631-a9b3-c36bb4824381ca2873&version=6&preview=false	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://images.ctfassets.net/fzn2n1nzq965/7szA8TJHWKDIEuCbu6Yblm/4548db61648d063fb7e7dddfca04ab79/ho	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect	chromecache_249.2.dr, chromecache_321.2.dr, chromecache_314.2.dr, chromecache_301.2.dr, chromecache_256.2.dr, chromecache_263.2.dr	false	URL Reputation: safe	unknown
https://stripe.com/spc/licenses	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://twitter.com/stripe	chromecache_244.2.dr	false	URL Reputation: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorAutocomplete-dc62d89d9e2121e48baf.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/Frontdoor-4513faa7ba2dd8949ee2.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavItem-fd5a8f8fac232f661b3	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/StripeSet-423109ad4bf57a2a011c.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/CheckoutFormGraphic-b2509d821651cbc82709.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/de-ch	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/en-li	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://press.stripe.com/	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://images.ctfassets.net/fzn2n1nzq965/2EOOpI2mMZgHYBlbO44zWV/5a6c5d37402652c80567ec942c733a43/fa	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/en-lu	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/en-lt	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/en-lv	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/AnimatedIcon-0b7478e1f9234aae8838.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/BackgroundGlobe-64953aedea5f231d07b7.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorStatusBar-24c7c84123b2b6e4f091.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://api.stripe.com	chromecache_285.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorStickyAnimation-4ea4d6a5e9b414987337.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://assets.ctfassets.net/fzn2n1nzq965/01hMKr6nEEGVfOuhsaMIXQ/c424849423b5f036a8892afa09ac38c7/fa	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/List-d4c6ad06c173a7dca2ed.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/docs/payments/checkout	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/en-my	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/Field-ea906aa31d4012757deb.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/ProductFeatureCard-4476eb8c383446c052aa.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/ie	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorAsciiLoader-c1a350cb85f7a989f599.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/Icon-646136cd9e336d8c18d7.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/DevelopersCodeEditor-eadbd8bbcdedd8edbbe3.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldInput-3d704dfad5ff81d0e80b.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://m.stripe.network	chromecache_206.2.dr, chromecache_292.2.dr	false	URL Reputation: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCarouselNavTrack-1380f9c2e275695c5e	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/en-mx	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://youtube.com/	chromecache_244.2.dr	false	URL Reputation: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/GraphicFormFieldList-5317148749a9268ec04d.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/en-mt	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/pricing	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/EnterpriseCarouselAside-b05102a0b81de0c11406.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/CustomersCaseStudyCardBackground-853f685776c80eaa0089	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/Stripe-b3679504f08482f96a0d.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorConnectAnimation-f4ce77b995975fa55335.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/Global-f1eeffae1de3242fcca9.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/en-no	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/docs/payments	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/in	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://schema.org	chromecache_244.2.dr	false	URL Reputation: safe	unknown
https://stripe.com/en-nl	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/f965fdf4.woff2	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://images.ctfassets.net/fzn2n1nzq965/5F0uhf7cRg9vhR6NmgWzzI/664e14ddebb91375f89f8dcc75242dc0/ho	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/it	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/docs/upgrades#api-versions	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://www.umso.com/preco	chromecache_272.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorGraphic-ab42746a2bb65d850037.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://www.umso.com/lib_LUGoPiqXXlDptSWA/6g2u3zp01e6vtzny.png?w=1200&h=630&fit=crop	chromecache_272.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/guides	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://merchant-ui-api.stripe.com	chromecache_217.2.dr	false	Avira URL Cloud: safe	unknown
https://images.ctfassets.net	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://www.umso.fr/vitrine	chromecache_223.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/#organization	chromecache_244.2.dr	false	URL Reputation: safe	unknown
https://stripe.com/jp	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorBillingGraphicTier-c39e78ce45a9380bf169.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/CardField-739e285edeecea986ed0.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/GridLayout-0b90e779a89c0243e739.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://dashboard.stripe.com/	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/GlobalizationPicker-cb59e0de1d5c3aeaa184.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/en-hu	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/th	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/HorizontalOverflowContainer-0b85e8f46a0db21a6ef9.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/StripeProductUsed-448c2bc0913c408517f4.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/sv-fi	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://www.umso.fr	chromecache_195.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/en-hk	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://support.stripe.com/?referrerLocale=en-us	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSuiteAnimation-683958a93f82ca151ea7.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/FrontdoorSubanimation-b9163916332f2a67d464.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/en-hr	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://stripe.com/it-hr	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://images.ctfassets.net/fzn2n1nzq965/6iLtU8qBUtE42tshpmZxY2/ac5b7b7a181524237b942e43620fceef/ch	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown
https://b.stripecdn.com/mkt-statics-srv/assets/CodeEditorCursor-517911b19e66c94dafbb.css	chromecache_244.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
99.83.181.15	www.umso.com	United States	16509	AMAZON-02US	false
52.11.30.157	unknown	United States	16509	AMAZON-02US	false
35.186.247.156	sentry.io	United States	15169	GOOGLEUS	false
44.238.240.127	m.stripe.com	United States	16509	AMAZON-02US	false
142.250.186.110	analytics.google.com	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
13.33.88.122	app.umso.com	United States	16509	AMAZON-02US	false
76.76.21.22	unknown	United States	16509	AMAZON-02US	false
142.250.185.66	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.184.194	unknown	United States	15169	GOOGLEUS	false
151.101.128.176	stripecdn.map.fastly.net	United States	54113	FASTLYUS	false
54.185.96.248	api.umso.com	United States	16509	AMAZON-02US	false
64.233.166.155	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
76.76.21.93	cname.vercel-dns.com	United States	16509	AMAZON-02US	false
34.250.29.31	api.stripe.com	United States	16509	AMAZON-02US	false
151.101.64.176	unknown	United States	54113	FASTLYUS	false
151.101.192.176	unknown	United States	54113	FASTLYUS	false
75.2.96.155	xai6l1pibnxefgt2.umso.co	United States	16509	AMAZON-02US	true
18.245.35.58	d3dy5gmtp8yhk7.cloudfront.net	United States	16509	AMAZON-02US	false
198.202.176.201	merchant-ui-api.stripe.com	United States	22182	AS22182US	false
104.17.3.184	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
18.245.206.205	di7r6y9oc27j.cloudfront.net	United States	16509	AMAZON-02US	false
198.137.150.81	stripe.com	United States	3356	LEVEL3US	false
18.245.206.203	unknown	United States	16509	AMAZON-02US	false
35.80.254.51	unknown	United States	237	MERIT-AS-14US	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
18.239.83.24	unknown	United States	16509	AMAZON-02US	false
216.58.212.132	unknown	United States	15169	GOOGLEUS	false
76.76.21.164	nextgen-widget.vercel.app	United States	16509	AMAZON-02US	false
108.156.64.41	unknown	United States	16509	AMAZON-02US	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
54.187.159.182	r.stripe.com	United States	16509	AMAZON-02US	false
104.21.65.212	simerra.msk.su	United States	13335	CLOUDFLARENETUS	false
172.217.16.130	td.doubleclick.net	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1473672
Start date and time:	2024-07-15 17:48:28 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://xai6l1pibnxefgt2.umso.co/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@33/237@86/36
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://simerra.msk.su/PcYdi/ Browse: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Browse: https://www.umso.com/?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Browse: https://www.umso.com/pricing?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Browse: https://www.umso.com/showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Browse: https://app.umso.com/login?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Browse: https://app.umso.com/signup?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.99, 142.250.184.238, 142.251.173.84, 34.104.35.123, 142.250.186.170, 142.250.185.131, 52.165.165.26, 192.229.221.95, 20.242.39.171, 199.232.214.172, 20.166.126.56, 142.250.185.202, 142.250.186.136, 142.250.181.227, 142.250.186.168, 142.250.181.234, 142.250.186.74, 142.250.186.42, 142.250.185.234, 172.217.18.10, 142.250.185.138, 142.250.186.106, 172.217.18.106, 142.250.184.202, 142.250.185.170, 216.58.206.42, 216.58.212.138, 142.250.186.138, 142.250.185.106, 131.107.255.255, 142.250.185.195, 142.250.185.78, 93.184.221.240, 216.58.212.142
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, dns.msftncsi.com, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, update.googleapis.com, hlb.apr-52dd2-0.edgecastdns.net, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, client.wns.windows.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://xai6l1pibnxefgt2.umso.co/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 46704, version 1.0
Category:	downloaded
Size (bytes):	46704
Entropy (8bit):	7.994860687757006
Encrypted:	true
SSDEEP:	768:f3Ybit5PQRS0FhgC1g10ijolF5rm2GsRnENYMSGAxgvZdH3VayjX2p2iKEmcLf:fIbi7eHBmt0F5rm2GsRENqGAx0Zdlt2r
MD5:	30A274CD01B6EEB0B082C918B0697F1E
SHA1:	393311BDE26B99A4AD935FA55BAD1DCE7994388B
SHA-256:	88DF0B5A7BC397DBC13A26BB8B3742CC62CD1C9B0DDED57DA7832416D6F52F42
SHA-512:	C02C5894DFB5FBF47DB7E9EDA5E0843C02E667B32E6C6844262DD5DED92DD95CC72830A336450781167BD21FBFAD35D8E74943C2817BAAC1E4CA34EAAD317777
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
Preview:	wOF2.......p......................................O......^?HVAR.g.`?STAT.8..4/l.....<..6..f.0..\.6.$..H. ..\..>..[`....\|...........7o.)....C81=......g#l..PA.c.......%...$.K.....\|}}....8H.\Yd.....2c.J....0K.....I..k...F..f......,L.....P...JGwj..KM....n..,..o.....n.ck...1...%.<.....;5...9..2....=b.....("4..:.k...K_...`.5v..2@...,_.3..6..@PR.]...f!X.~..b.....-..9.....?.=:kt.'@_...N...8.i......Fo..S.C.=%.........W.@7d..%......,"h...b@.DE.]l.n..(;......E.ng].`....8..C;m....).u8.....4...%..c.A.hc]....s.{.+....J..Rq...f..I;.B..g.....j.@~.........H.........:]Dc.J.6r..].".c...8j...v. M.PXB.,.v...M..NtOO.......Z`-.i..X.....".y....c.....+..e[..(..q...u..kh.k5W..=OK{.;...7...V...I.FMTWv.Dv.[..^`......JY..:.,.. tgKhC..2-...I..S..'...IL..........p......&:..(...g..B.`......%U....-.m.D.b.m..p..26.0D.....$j.r...w..z.9.)`..n.I..B...s"es...;..vY...6.T...**..2o.....W.Lu:wx.?.7..x......C..E.^SE..F.5WcMi..a..n...X...t.........6.j.j..M.9..a.....f<J.....@.&f..'.\|.....p

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 1406, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	133005
Entropy (8bit):	7.98703584361878
Encrypted:	false
SSDEEP:	3072:51b+s5lU/VO41WHeQRXzOFrMBp3QrzOxpllBDMV4KgzK:5cs5lkM41WHeQtiMBpArz4/Bi4KgO
MD5:	B489A72EDB5B7362A03C98BBB4BE84DE
SHA1:	85D2C855272573859BAC195BF6B44FC2B623BB80
SHA-256:	B58B252A915E713EF6728ECECDEC918EF07BA2188EDC49CBA2F86F812139909A
SHA-512:	F6E456E23B280A7B6AAFD962CC0F8BC63D3CD1D1604D3DF9002B44B387608BBF95F7C0026AFDEB9B426FB1CEE70010C18DDFB46063B6D3DF23B3E15DB80B62EC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......~...........PLTE."0.$2....#1!,:....!/...-:H..............-........!.....+..'..$."/".=...........)...,9G....../<J.........-;I.........&2@.'4................(4B..._gr........................................)7.....................;EQ...........(.#1 +87E...7AN..................emw........#.....kr{3>K...T]h.....pv......Xak......s{....\eo?HU................x......w~.\|.....QYdMVa....X..8E^.'..IS]l....1;HB.4..P.BLW.WOGP\....k,1B..o.eX.....q..../8...dhh..........DNZ.:>.............z.....c.7f.3X...%K../+?....GH........[.qc....+`Z............$Fn..i.............x...i.......;Pw.........v...........z.................,LQ..A.ze.....fv..~[...T.......{.aI\..i..o.gE..E.{x...c...D.....Yk....H.......V..4.7.Q).t....d...........M....#/D.Ud..k..e..8.+.HF..ysL........pHYs............... .IDATx..oL....[..,w3.%5U.0....8P.lA.w;6..l.o5....-....B...CB 7...b...A{2..=. :...s..7?.I..\.M..8.$.\|9/o..4...q\........[...Ykq...`0.....`0.....`0.....`0..

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	4.942373347667344
Encrypted:	false
SSDEEP:	3:qTkIDZxVsJYkup3XyHFeTrAyTKTWKMrBKblbJ4ZNDpVbz2USrGXI9kBbZ6iF4:qTjxVgYkYv3J/14QpcUAVuB965
MD5:	3437AADDCDF6922D623E172C2D6F9278
SHA1:	F69066CF20141AC93418102D3EEE7C0225B8A623
SHA-256:	35DCC382EB69D00369D708708CDC545F3968B68FA5BBE3E728D11FEDD04F93BB
SHA-512:	2DAE5C5C30C6A0E763D8128F2CE1D467EAD432E582AB4EBB68E23991DB08F57490ABC0EED805FD33FAB5503C1737D9D47D4CC1090AE15D7391593FBB295D66E7
Malicious:	false
Reputation:	low
URL:	https://js.stripe.com/v3/m-outer-3437aaddcdf6922d623e172c2d6f9278.html
Preview:	<!doctype html><html><head><meta charset="utf-8"/><script defer="defer" src="https://js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js"></script></head><body></body></html>

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	30304
Entropy (8bit):	7.990789364173392
Encrypted:	true
SSDEEP:	384:mPaqXUtG02z6DHuOUMPFsN0v7a+t+pUWo8vFEqUQHKaGyi4hHA88COkNJ89X2ovV:ck8qOrUaQFt+pUjnFQHKB/D99XJJhJ3
MD5:	1F3E3507EE22270FAE015B93E050126E
SHA1:	3EC650231636B6FDAE51C4DF3EB483FF1502DF5F
SHA-256:	651C1E291919AA29400B673EA450F417E947D67FE1E16D4F735F5F073FA98FB1
SHA-512:	B26D498E3BB151FF62AFAD02D19A318C238CBB05D52EB6BB386725A8C15456FCC2862A1B5FBBF796210EA0277756A1472B11619DD39100B6547007F4DA3FFDC3
Malicious:	false
Reputation:	low
Preview:	RIFFXv..WEBPVP8X..............ALPHQ.....'$H..xkD..)..6r$...7..{E..d9....ja....N..=j.V...cp. ...0.).......'.."V1.s..1.O..k.ny..H.. ?O0...Fn..${fyC[...P..r.333....2....1)s.a..,....y.d{........m'l.....4......R..c[.=..<..Y..Q.D2..v.y.b.)8.Q~...$."..m.H.,....k;..On$...K.......(.J....A(........z.........Hl$)...j......K.P..........g......g......g......g......g......g.......d.q.J[...}...P.1.qY+....&...mR..i..h.;".\|s.......!q....[.I#..'.........xdN.=46...I"}T..g.....Q..3vS1%."M.'..i..uez.ok..._.D.S..._"r..`.I.&....(.Fa`(8.j.b.ivDV..L.4i.U.C......^...#yb5'..BM.C.V.u$....4.^.C.......x..).m.;@..Q.h..b.]..T.5.{i...V.[. .R)..s:Rd......1..^...."........$$h.RC..J../D.C......M....c($2.n.gR....V.T..i...H.C....]..W..L...R).%......'.si....^.C.. ..8...;.p..1Zj.'....@..#v..9m...Y....[...RcN9.i./..P.<....U...Pb........r5..e....`V%.$..^[....:..B.T...#.1.U.O{...'N..&.v.>..P.iqq...27$.0....N.?.V.1[......[....k.........c../ .QPBb.z..n..~#H.Pn....2+...*.<....2.$...v.

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (12985)
Category:	downloaded
Size (bytes):	118961
Entropy (8bit):	5.5204234123505636
Encrypted:	false
SSDEEP:	3072:LExtBfrLXcJEPmdb67m3qjl6RbW6wAY6164qykfo:oxtBfrLYJlmyGo
MD5:	4DA5E07D274795762C5BE1A5A18D5B0E
SHA1:	FB0823C631FBA83AC14D29960A1C1B1E20E8E3E9
SHA-256:	B14763911B188AEE6F5E3A672B1445D57214930E26A83B779DE3B5FAD4C5119A
SHA-512:	114625CE93D03D520FDC5148249A0C8375A5E97D01A15117BF1F2A0576675D47C2D32DBE05BF4BE5C1B5329C2BAE82F7681D1BE3C0869ADF49DAF7330D78BB78
Malicious:	false
Reputation:	low
URL:	https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2
Preview:	<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><link rel="icon" href="https://www.umso.com/lib_LUGoPiqXXlDptSWA/eljn5jc5doqj8c8f.png"><title>Umso - The Fastest Website Builder</title><meta name="twitter:title" content="Umso - The Fastest Website Builder"><meta name="description" content="The fastest way to build a website. Design, edit and publish a beautiful website with absolutely no code."><meta name="twitter:description" content="The fastest way to build a website. Design, edit and publish a beautiful website with absolutely no code."><meta name="twitter:card" content="summary_large_image"><meta property="og:image" content="https://www.umso.com/lib_LUGoPiqXXlDptSWA/69k32iua1jxr2uyj.png?w=1200&h=630&fit=crop"><meta property="og:image:width" content="1200"><meta property="og:image:height" content="630"><meta name="twitter:image"

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	16062
Entropy (8bit):	7.973725237833661
Encrypted:	false
SSDEEP:	384:FIzmt6oPXnh0Gzb4tPTsRXZ3HpsBPG8N3fOo0bSm/xf673a:286oPXKPTsRNWG8N3WxSm/xO3a
MD5:	C6A94726385FA6E50A0A1071C8DC860F
SHA1:	7FEA6FFA6F725E1781CD758125230344AFCCF18E
SHA-256:	D9DE1ECF468F5348B0754CBD21221280A054B2D257335D7BB95723CE1A0046A2
SHA-512:	708B0FDFA6FA4164BA527CA0F1886AD3B489A14C413689DDB3FAADF63B67F503BF5ECFE46F0D49BAECEC72CD9346D098629897F8321152DB4DA3599E40EE6766
Malicious:	false
Reputation:	low
URL:	https://di7r6y9oc27j.cloudfront.net/st_KuGLRGupwTcTRRKP/7?darkmode=true
Preview:	RIFF.>..WEBPVP8X..............ALPH.&....'$H..xkD..9..qlk..s..#b..`...d.<./.2..4..Fe......P%.....I.z..f.K.=..%....:.}wK... ...\"p.e.......'....^VD.!.m.H.t..N.n]xmN5.c[."....bnff{f.......1.%K.L..e...?.H...7D...$.q..E. ........?ER...TU.....+X.'.......{..r$F\q...W.+8Da..]vZ..t...zf.....".....m.H..h.!@ ....3..9.m....}..c.F...~......`. .......Yk...D._..H.$eY.V.r.'..{...C......_......_......_......_......_.....S@........x..X.o^H.Q6%.-N.....Yc..s..!.z.\|S#.2.."Q)...C8....&.......X..9....<.h.x..=..us..obZ..^.x...(....7......DX..j.t.(Mm....To.9..........h*rV.....r.....Z.......9.x.)K.G..S.^.."...j@5.!...c%..."..T.X...x{JKQ))..n.......p8..+M&.....J+V...(!\|j......~.O...{.............R....Sc.\|:./.&tj$6_5..f..5.T).~m.3S...C..W.bf.'n.(.4..up...3..u<#.kfj..c.m$.".F...fn..)F.0<.......0S..c......d.9.....V..I..v.......A.H..f.LOh..c33.......3ezBx...]b6..U.~l.O...,..\|...W.N..=..o.T:d.&.a...2.....X...<ZQ.R..F......q.5...O.!...S.Gi....S..T...s;>O...94..9I..

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	14258
Entropy (8bit):	7.975407464386627
Encrypted:	false
SSDEEP:	384:FZmIlftped4EGp2ewMvuiKJfQe9PnAeiY/0pQkv:FUCtoCEow++JfQe9/z3/u
MD5:	22D79BDB605CC67F288FE48965C83EC4
SHA1:	4095339A43A9A436E868A5ED424E56B463B44C7C
SHA-256:	E7D109A14BDDDFE50FEB5D43B4EB4906FD565F40ACF00B364FBCA4185742CD74
SHA-512:	218D996E0151586EC8279D4314C392C0E890009BDF55B286B4CF4F621502FC2898A7D594831476D37BFE80F90CA46C65F7AA1159496D3171B7E551C372C24EE9
Malicious:	false
Reputation:	low
URL:	https://di7r6y9oc27j.cloudfront.net/st_cdJoZDlmunztgvLx/3?darkmode=true
Preview:	RIFF.7..WEBPVP8X..............ALPH.!.....m#9RI.g.=~w."b.....(..=.u..x...q...q.....).((.n..(E..z.M:..V..........2.M......<.,......sE.m...w_.....=.....N.:.H....P./g..X..m.Ibvf...US.}.m...su........13s..r>...fN~ ....cf.....+.Jw..........Fr$)r.....&K[;/...+v.m.o.5....Y..X.z.......-vq.Pw=...]q....w..b{...........N?.+"dA.[...T.c....I...?........?............?............?.........I8.V...yq#`e.G.[.r.y......ap.l\:.\...9P.6w..8eXf...G.'...m..T].......738.R.......7{..._^6.\h.......?..Y......f...t.pT...O.'......g.-..-._........8^........Q...S....X...>.X.$.n.....BK......S../.......m1,.8.;.'...^q3o.a......M.....[.0jM..k.s.a'..q.w!.y.\|..C{...........V..#.ShI..o]wt....@b..;~..%.....3.e..y4'..CV^....;....#.?......g...q.?..N...V..B.z.zZ '..Ux...E...H5.....v..GY.H....T.........6...6.q<U..G".*..?c..E~.R..B...r...R@&.).....;.KZ$-%.&.... QQ..!..E.Fv......#..9..!.h..6.........F:..JSJ+..:Y..).v.G!.^..?...p.....o...F..&.#g.Q....7A.o..U.m.4%+i..N..!..D..

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 1406, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	133285
Entropy (8bit):	7.986657455113509
Encrypted:	false
SSDEEP:	3072:ILrD+aMdrXexO+kDtvk2JwI++lsxY5Az6cpUBBPRiRLPWg1Ak:ILbMFXexKD9CKl6sS6imPRi/Ak
MD5:	EF5842A61713EDBE648A23CD0A60A107
SHA1:	1FF1B3B464F783240B350595A388458C9C4A6BD1
SHA-256:	A548C193CB34B3C7430AB3EA9A780BC0ACBA2703F5F06FA894D84110392C2856
SHA-512:	9038EFEDE4F6C5AA05D77FD0B94128471D3DEEC2FA34BBD3BB64F9CF2DBF3EADE5F839441F1DBBDE6D74589B1D7B84C1CB8B7F533D3905B230E9D6103A48E271
Malicious:	false
Reputation:	low
URL:	https://www.umso.com/lib_uKHflxJGsjrjWGxc/q6yat3a98b05the9.png?w=500&dpr=2
Preview:	.PNG........IHDR.......~...........PLTE........................sg...............................rf.............oc......................th.........................v....xm.............k^...................ma........www......!!!..................}}~...ppq......'''+,,@@@......kkkIIIA{.666............111h[.;;;.........fff......X.DDDaaa......YYY^]]m..MMM...VVVsg..........J..xZ.............\.....S..QQQ......Q.z..R..h.........V.od....S.......\.....X.}q..aT.W.....z..,i.h.xj...sK~....kh...............................YR.......TSS.w......i.....9w......w..q.....~.......rka.Z..g.lq......i...k.....aEz.E.@.....L@vh^...................q..!/k.............].89q......z},6?o.......{\|L.......[#>w.....>@......z............5'Q.L......Y.u`.......c....>S{..a......w.JY.....^SW..Lb.._?.....pHYs............... .IDATx..KL...6..W......`H....I...07[o0....1.$4....!.$B..= ......'.M.P....?.Y....;h)..."uK.z.......G....ec...!x?..]..z.Z{..2......K7............D....p.spd.8.9

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 1406, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	302992
Entropy (8bit):	7.99257325591263
Encrypted:	true
SSDEEP:	6144:LVs95eLbDE63ZunCaNdVCcxESlOeO+uZ5tOQR4IoByafynkEJ7rgfZ:y958o6JTavIcxEnr+uBqxBy6yxJfgx
MD5:	954FD62408DE5360B72EEFE7B9515306
SHA1:	7D4F8E3C575D1A1382BB03CF9AAF4945B5BB4092
SHA-256:	2003D9DAA4852C4C4804DED5CE3E25C6C03A88B45AE89AAF3E009B81E4CDB311
SHA-512:	8329FA80445BE21EA476DBA2310A1FD8AB0BECC0B4FD5CA9C516E3A77CEB977A89F042793F711D1F64BD7831380B10BF2D7E7AA929810E1ADD451E2F8CB81466
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......~...........PLTE............$...c7.................."........ .....&!....!............................)$ ...................&# ,'"....................{...............sc^.................oh.sl............o_Z.wo......{ke......wg`....2K...1+%.l\U............iXQ................0//......zt....e9YIA...dTLRC;......}u...."=..................+D......)((.W'..655.z............................._OG.....70[ZZ..........................a``...<;;NMMBAA..~.}~TSS.........GGG..........y{mo.ugg.]/..........yxy.s...kjkgef.su.....y...H;3...uttpop.........y..m.jB3Icx.<Tl.....}[~...}a)G`9Uk..'...Zq...o.}.\|[.mO.........~U=....mO5!............mJ3.rO...jD......dJY:(t..2..\?R..........E=.vZ.........l..,.V.....8....&.3.}Q..a......#+.'6.O=~..EOWK......pHYs............... .IDATx...OZk..{'..=..c43j.........).T_.d7.z..e....I.$p...d....>....6..bhI...YO.h$.=..&........u.c.~.Ys...t...1.c0P...y_7!.Cx<...Z[y....V>.....o..S...25.l..(<

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	83032
Entropy (8bit):	4.916117379228222
Encrypted:	false
SSDEEP:	768:KBuwAyQksqMXL/Vc0j8BkSyz/psVHRedLjXaxwn8SsS0dgpC0KPXv7fcJfm5EFDO:1L+Oi
MD5:	4022946B73ED9A3FE100AD9A7E53FC60
SHA1:	D8192E4A2AFEFD84784504C387C43C18852D4DAF
SHA-256:	13EC7B328E702040A5A39A73C7EF012717CDEC4B2FDD87F5425BA425B7486550
SHA-512:	44E4C1EDACB4901A3983FFF415CA52D22EB05D378BFBE67CEC5F5C9B5BCDD6DBFB3D6DB62C6E03C449939800015685E9C933A98BD20F5DA2E5DE7C1AC9B887B8
Malicious:	false
Reputation:	low
Preview:	[{"id":"stg_qTUyZgtQCtUHEsyC","name":"Testimonial","status":"official","defaultData":{"omitted":true},"ownedBy":"org_DsjdSJrThAwDoujv","createdAt":"2023-05-15T14:58:25Z","meta":{"showInGenerator":true,"category":"testimonials","subCategory":"","description":"A single quote from a person related to the company or a customer that praises the product or the experience."},"structures":[{"id":"st_JHNTMlDzxRwNMpTl","name":"Simple Box","version":3,"maxVersion":3,"status":"official","structType":"section","data":{"omitted":true},"settings":{"items":[],"design":{"options":{"misc":{"maxWidth":true,"isEnabled":true},"text":{"body":true,"color":true,"fontSize":true,"isEnabled":true},"cards":{"isEnabled":true},"spacing":{"top":true,"bottom":true,"isEnabled":true},"background":{"clear":true,"color":true,"media":true,"video":true,"gradient":true,"isEnabled":true}}}},"ownedBy":"org_DsjdSJrThAwDoujv","createdAt":"2023-06-01T19:51:38Z","groupName":"Testimonial","groupId":"stg_qTUyZgtQCtUHEsyC","tags":["

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	38
Entropy (8bit):	3.975176777217263
Encrypted:	false
SSDEEP:	3:YM1Hvg+7ovSdA4:YMiMC4
MD5:	F47775DBFE949C9DFDAED4A5B529EB85
SHA1:	685A2B8207F64DBA71DDF98CD5AEFB87A689A7F5
SHA-256:	353DC2552B6CEADF26D9CE4A7CAF1117E107DF1D787B183B33730D1842B5BA2B
SHA-512:	A52E2363B37E904094D3438BCEF06F1664E49FAACD4F3F1DFE76C3407600B5A69A0686FD2511B85A6CA9354700567EF073CA3DFC04950307D92B8BD28BAF7D85
Malicious:	false
Reputation:	low
Preview:	{"indicator":"up","uptime":"100.000%"}

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	809690
Entropy (8bit):	5.583059712572674
Encrypted:	false
SSDEEP:	12288:GUn+c8y4LrlRlj8LQ2rYx9vfBmBZmHryF:GU+Dxh8FSvf8m2F
MD5:	35BFEDFD04A709F8AAB7836CC092123C
SHA1:	BD593A6026894AA1AE332FB1D329728280C97739
SHA-256:	C595CBDC3CC22CE94FB4359B2B397401A37258F322615C67131AECF86CEE3D2F
SHA-512:	D969693F23B4958FA69F7CF0796482FC7974CB6B5C5559C78EB387CA7B9041C347FCB4245D52C1DA7E72AE204AA98BBF6DCB2127F337181EF87F5CAB882A225E
Malicious:	false
Reputation:	low
URL:	https://js.stripe.com/v3/fingerprinted/js/controller-f772f0358c4c73c59a894ceca0c3958a.js
Preview:	!function(){function e(t){var n=i[t];if(void 0!==n)return n.exports;var r=i[t]={id:t,loaded:!1,exports:{}};return a[t](r,r.exports,e),r.loaded=!0,r.exports}var t,n,r,a={94184:function(e,t){var n;!function(){"use strict";function r(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var i=typeof n;if("string"===i\|\|"number"===i)e.push(n);else if(Array.isArray(n)&&n.length){var o=r.apply(null,n);o&&e.push(o)}else if("object"===i)for(var s in n)a.call(n,s)&&n[s]&&e.push(s)}}return e.join(" ")}var a={}.hasOwnProperty;e.exports?(r.default=r,e.exports=r):void 0===(n=function(){return r}.apply(t,[]))\|\|(e.exports=n)}()},62322:function(e,t,n){e.exports=n.p+"fingerprinted/data/countryRanges-62b058b777fd76bceab2937ae8a5ba27.json"},8464:function(e,t,n){e.exports=n.p+"fingerprinted/data/countries_ar-7995ee218dfd37546f754bd73b67e2cc.json"},90342:function(e,t,n){e.exports=n.p+"fingerprinted/data/countries_bg-c9f7496faecf6cafdeb3cf831b179cc8.json"},32726:function(e,t,n){e.exports=n.p+"f

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-VYY8D05ZV0&gacid=470383722.1721058585&gtm=45je4790v9133397838za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=955179475
Preview:	<html></html>

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2202)
Category:	downloaded
Size (bytes):	207617
Entropy (8bit):	5.538702166201016
Encrypted:	false
SSDEEP:	3072:BDavJYqOXGl4ppho40GWDWgcIzUk6XJ95IL7pg5IiBpO:FqOWWpHoGWzS5ILFg5IiBs
MD5:	8970F3EC25EBE4E96AD072B1DAC5C705
SHA1:	ACC50FA2FD5602983EBA653B0CD6656DF683AE33
SHA-256:	356570F34EF0325C2488CE054D5CCB10F20D77A2755D4D0974668ACCC823E24D
SHA-512:	D93D8A52171F2614A3B42B9EF3F178E09950F8CB32E1087952D9C81986B3564CB35B48B84FB906055D6A7C4E5379F1664024883F7BCAC0EBD6521B120795AA3E
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-NTBF2FJP
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"}],. "tags":[{"function":"__googtag","metadata":["map"],"once_per_event":true,"vtp_tagId":"G-VYY8D05ZV0","vtp_configSettingsTable":["list",["map","parameter","send_page_view","parameterValue","true"]],"tag_id":3},{"function":"__googtag","metadata":["map"],"once_per_event":true,"vtp_tagId":

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (526), with no line terminators
Category:	dropped
Size (bytes):	526
Entropy (8bit):	4.844995662196588
Encrypted:	false
SSDEEP:	12:c4GJ0k2lvgyT6d1uOMXUZsCxYADLsdfPw3CgrR5jddeU7nu:c5D2BtT67uOMXUZjxYOLsOCgrN80u
MD5:	D96C709017743C0759CF3853D1806BA5
SHA1:	72E21587610C49C8305A55E71F73FA88ED618205
SHA-256:	BA2338AA6670580269C762F51C4291DAEF913201AA8F4D4FD166C1A878262652
SHA-512:	974E260ED8BD1D99628FC3248F07179F6EA228E37A6B9D3EF906DBA57571F2DF54D73F93D1F3460902D28A90BD4793BCA35477B2EF8FBF424B9112147F04BCCF
Malicious:	false
Reputation:	low
Preview:	!function(){"use strict";var e="https://m.stripe.network",n=window.location.hash,t=/preview=true/.test(n)?"inner-preview.html":"inner.html",o=document.createElement("iframe");o.src="".concat(e,"/").concat(t).concat(n);var i=function(n){if(n.origin===e){var t=window.opener\|\|window.parent\|\|window;if(!t)return;t.postMessage(n.data,"")}else o.contentWindow.postMessage(n.data,"")};window.addEventListener?window.addEventListener("message",i,!1):window.attachEvent("onMessage",i),document.body&&document.body.appendChild(o)}();

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 374 x 80, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5986
Entropy (8bit):	7.443770421889048
Encrypted:	false
SSDEEP:	96:KH6ed7STU3YP136mowebWFlsYd3vaE8m93Z6TntWcYha6nl2n/9KgIdnV28+X700:Ned7STUK8EebWHviA14QcAXnl2nlY5jU
MD5:	7EA406842609D85B79AEA2BB6365D29D
SHA1:	6067B6712122D950F4FB3494ED077E5C3D4E8C92
SHA-256:	3AC81B99E66E6A0730ACE289AB4938FC40CD2B9AC4D72C85F24312291195796B
SHA-512:	4A84566150B3E9928CB559CB2DCE7E64B994880388FECB1FC6CA53D9FD826FC75FCFA0AB9D11794BB06C97BE9C3DB1A37F0B11CFEBDF14D5309E85576D8A6F46
Malicious:	false
Reputation:	low
URL:	https://xai6l1pibnxefgt2.umso.co/lib_SUQilvCDrDwywovw/fnclxaoc1aijzto1.png?w=200&h=40&dpr=2
Preview:	.PNG........IHDR...v...P.....:.......PLTELiq.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................~lg.....tRNS...R.........#....a.k..9-4 ..............(.XG.i.5.*..+..).Lc/j[p.<S.}..?`.".....x.>....%..s......\:..Z.I..'V.....!...]..;...~Q3...H.d.r..m....=JK..b,....Ny$....{..U.w

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	16062
Entropy (8bit):	7.973725237833661
Encrypted:	false
SSDEEP:	384:FIzmt6oPXnh0Gzb4tPTsRXZ3HpsBPG8N3fOo0bSm/xf673a:286oPXKPTsRNWG8N3WxSm/xO3a
MD5:	C6A94726385FA6E50A0A1071C8DC860F
SHA1:	7FEA6FFA6F725E1781CD758125230344AFCCF18E
SHA-256:	D9DE1ECF468F5348B0754CBD21221280A054B2D257335D7BB95723CE1A0046A2
SHA-512:	708B0FDFA6FA4164BA527CA0F1886AD3B489A14C413689DDB3FAADF63B67F503BF5ECFE46F0D49BAECEC72CD9346D098629897F8321152DB4DA3599E40EE6766
Malicious:	false
Reputation:	low
Preview:	RIFF.>..WEBPVP8X..............ALPH.&....'$H..xkD..9..qlk..s..#b..`...d.<./.2..4..Fe......P%.....I.z..f.K.=..%....:.}wK... ...\"p.e.......'....^VD.!.m.H.t..N.n]xmN5.c[."....bnff{f.......1.%K.L..e...?.H...7D...$.q..E. ........?ER...TU.....+X.'.......{..r$F\q...W.+8Da..]vZ..t...zf.....".....m.H..h.!@ ....3..9.m....}..c.F...~......`. .......Yk...D._..H.$eY.V.r.'..{...C......_......_......_......_......_.....S@........x..X.o^H.Q6%.-N.....Yc..s..!.z.\|S#.2.."Q)...C8....&.......X..9....<.h.x..=..us..obZ..^.x...(....7......DX..j.t.(Mm....To.9..........h*rV.....r.....Z.......9.x.)K.G..S.^.."...j@5.!...c%..."..T.X...x{JKQ))..n.......p8..+M&.....J+V...(!\|j......~.O...{.............R....Sc.\|:./.&tj$6_5..f..5.T).~m.3S...C..W.bf.'n.(.4..up...3..u<#.kfj..c.m$.".F...fn..)F.0<.......0S..c......d.9.....V..I..v.......A.H..f.LOh..c33.......3ezBx...]b6..U.~l.O...,..\|...W.N..=..o.T:d.&.a...2.....X...<ZQ.R..F......q.5...O.!...S.Gi....S..T...s;>O...94..9I..

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	176
Entropy (8bit):	5.0830039192559076
Encrypted:	false
SSDEEP:	3:jTqN/AS3OYNR2XU4sDOYNR2XU4HcRNqUBQEfDebYs1DdLM1BG/YfQRcJT6R7Yme:O33jaEDjaPcrqUmZZdLM1k/IH+R2
MD5:	96F5B26D366F47393B3FF36FE7471474
SHA1:	6CAA14FF7E3692BEB752734C28CBEA160C113B7A
SHA-256:	07B6B3D899DD69C0E9EB463E23E10E30E82588EDDF95D15D45BB505C6703A813
SHA-512:	970801461D6E12D7C14752B7844F1C0347650897A8C9C1540BD0CE49CABCFBF760A9B6B891DA828537F6AD49099608F205E5D47149CB71043DC9915E215E8574
Malicious:	false
Reputation:	low
Preview:	"use strict";(window.webpackChunkStripeJSouter=window.webpackChunkStripeJSouter\|\|[]).push([[913],{9554:function(e,n,r){r.r(n),r.d(n,{loaded:function(){return t}});var t=!0}}]);

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4737
Entropy (8bit):	7.926976315356877
Encrypted:	false
SSDEEP:	96:kScaOG9CgfXFcivZxOADbZ71kb73MqoF1oUIwEjopH/Tb3xRcmSOG4rDM:kSTOyCgfXFHuMhSbTMqoF2Pa/hCn4rDM
MD5:	0E288BDED0E143368679D0024601D928
SHA1:	F31E03D0735927296E678786CFBDE254A89F4D9A
SHA-256:	34908F8235EFE3A201F6DC9A01B9AAC8304D1BABD7DDE5D108A05E23B4F9EBCD
SHA-512:	9FA80EC176AAA905B42AD8FFA383A82A8DA38737C00612ECFA62F1A642A75DCBB00DDD3EBA1DE3FBA643A8377541A0E5F7AD931C274199CA4A618301CB762E58
Malicious:	false
Reputation:	low
URL:	https://www.umso.com/lib_LUGoPiqXXlDptSWA/amufjz1o6hqa4qle.png
Preview:	.PNG........IHDR...d...d.....G<ef...<PLTE...................................................Liq......m2.,....tRNS.....................5.h....pHYs.................IDATh.UZ..$)..`..qd..... {wk.tweF..C.....6....pG5\...."..=1.1....cu...#..........;....+.k4..%/.......Z!............Z...k.V.R.N.k$P..U...!:....@..zO...8yL...B:\|x...b.m.........Ho.....Z.V..y.i\|Z.HL...".Q.....o.O......E.)....G4m..v.]...po.........4n.........5.\B.r`...<...n...d2...)@....[...=.{;...Aq..v....{U..gc.....~...!w..K...J.d1n..:...?x`z...e........m.X..mo.D......\|...\|'...<Gb<.<.....\v.\...8Z...T....C..S.]1\|o....cy.S.b..X....{'....T.E.'..^~..G...v.s.}UWR..E._.a..U.DZ.G..\|../.D..^.....f......[..^..(.i0..c.~.......P.2...k..\..K...;b.G2..S....p.&...+.Fke.a.[aP...h.H.NK.'..!.3...S.......Au..2..fqq..T...2...g2.?.]...0...\C.c....l....5..d...5..3+.7....;.W.U.....q.g....X..S..s.......8.j.....%.F........B....3E..L...P.Z.~/.....O.a.H...........TH..^.{.n..m.(...Sr.KpBk4.P>.O....:..

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4055
Entropy (8bit):	7.9286682902368035
Encrypted:	false
SSDEEP:	96:to5SApM24V6W5ellxcnC4UNiOiIgbGFu+:to5SA2/52cnpktiIg9+
MD5:	0ACDFD7F6A54B186C413BD2ABE4031D8
SHA1:	471B3F1DF6A3908542446B9626C52CFE091A9B84
SHA-256:	0849848772D103946166B1CF6BDC23B2E8CB58424D07C8DFF2F9581E8DA9F8DB
SHA-512:	150D7011D1F4915E30DB8ACD24274B0A9E7A817952E3015C428CABCBAB6104D8C080699C9482F4296C02F706B2E8A4C284B4EBB819D8603041B058DD925C2961
Malicious:	false
Reputation:	low
URL:	https://www.umso.com/lib_LUGoPiqXXlDptSWA/eljn5jc5doqj8c8f.png
Preview:	.PNG........IHDR.....................PLTELiq..... ...............................................##.0..........%..........F>R.....&........."7IAU................ ....................-$:.&;..!) 6..)..=5I.............OG[......VNb'.5..->6K!./........%.3.........3@..(80EB:O..........$.2D<PH@T........QI]1(>7/D:2G5-B...............'.4..,E=Q...XPd..RJ^6.C4,A ..;3H......NFZKCW....................UMaSK_......LDX......ZRe...c\n.............ZSf2?MEY.............TL`^Vi...0(=..+<4IA9M.......................!@8L.......................YQd......91F.........................\Th.........,#9......`Yl.............@8M......._Wj....B:N0'=,$9.........]Uhe^q...`XkbZm.............................ibt.........z.rk}~w...........TL_lewpi{vo.............\|u.ngyyr.............sk~...}.{.......tRNS..... ..pp.{..I....pHYs................eIDATx..[iP.W...~..!....*....a....#..UP@.".(.EPAQT..R...A...[.QP.:(.3....Zq.>m.7.....i1.or.0@.s.s......0.d..#7...5Nn....5V.........{....

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	33844
Entropy (8bit):	7.979117531422643
Encrypted:	false
SSDEEP:	768:qF9kCrDxvXpZwmocUfSNZEKH7SDu9Aeo8PrDQp6fwR40wtwNH2w:qfvburoWDu91TPXoRRrWw
MD5:	3D1E3E54C1CEB1ACC30F37FEC6C3863D
SHA1:	2105659C2E2A726CF767AE20E552CFDEDFE44888
SHA-256:	E2A964E68409F6D8BE0119B17144D37964EE95C89AFFD02243B0ADDE82A7A4B5
SHA-512:	CD809502BBB104CE56795CE18EFAFD97219FE4D30AD4EDCBFDFDCBECD99688D7D749C33E4B303E41D02D611A0D657B5BB1B11B43EC12E4CD73F43F021DB0BA42
Malicious:	false
Reputation:	low
Preview:	RIFF,...WEBPVP8X..............ALPH.%.....m.9....>]..... [.68..{...-0`.%%........ .i.km{"..EU...w`.}..3_.333;d.......^2....tN.T#.e...UDH`.F.$9.z..'.`..........(".........<..\W<.@..e........@ei.@]..Sy....h...k..I....6.:g.L.-....Y...m.d.Q.v.x.%.....J........'.I...'.O..?...Y......QJZK..O..R.Y...6..uR.C.#.&o..G....D...q.@M.v....I.\>."......M{.t.&P.uG...Upy..(.......#...xpRc.2..#.....kQ>."..w.P.QD.8Ev.D..I..K 0.(.#./..Z..i..P.1~......2...#...u`.!{).I. .K!..s.6..iMx.4....\|..cM..c..)... .bT7E%.....U.M.#-...h3\|$.Beq1.."..D.X......0.3p.Rd.B.9..{..KB..&1$j.l.\!.T...KmtI.._.'.. ~Em.U.jW..#.V..0C.4.#l..u+kk79.e.Q..E(+!.d.pR..s&....p2......N.%..d(..Zk.....G.\|....w...........@YcN9ki..l.i......U...h.b.A.v.0.f.jv....i..`V..$.....7x...&....-A@.gm.VEf.i...i#..w.b..ZH....h....fT.HS..d..ma.l.+..tm1..2...\^...3..C.[@DC..D.F&D..Ac?Ha.n...".V>.3.Lp8..... .\.8...iN.R._L.!...h...X.ha...2.*,..;.....e..~.......R3XjD+g.....'s....B..Q.<.c..1...\|b.I...e\z..H#..%..`.+.

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 1406, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	302992
Entropy (8bit):	7.99257325591263
Encrypted:	true
SSDEEP:	6144:LVs95eLbDE63ZunCaNdVCcxESlOeO+uZ5tOQR4IoByafynkEJ7rgfZ:y958o6JTavIcxEnr+uBqxBy6yxJfgx
MD5:	954FD62408DE5360B72EEFE7B9515306
SHA1:	7D4F8E3C575D1A1382BB03CF9AAF4945B5BB4092
SHA-256:	2003D9DAA4852C4C4804DED5CE3E25C6C03A88B45AE89AAF3E009B81E4CDB311
SHA-512:	8329FA80445BE21EA476DBA2310A1FD8AB0BECC0B4FD5CA9C516E3A77CEB977A89F042793F711D1F64BD7831380B10BF2D7E7AA929810E1ADD451E2F8CB81466
Malicious:	false
Reputation:	low
URL:	https://www.umso.com/lib_idKrFnnqnDIKXMAQ/gekox94o9ioxkh7i.png?w=500&dpr=2
Preview:	.PNG........IHDR.......~...........PLTE............$...c7.................."........ .....&!....!............................)$ ...................&# ,'"....................{...............sc^.................oh.sl............o_Z.wo......{ke......wg`....2K...1+%.l\U............iXQ................0//......zt....e9YIA...dTLRC;......}u...."=..................+D......)((.W'..655.z............................._OG.....70[ZZ..........................a``...<;;NMMBAA..~.}~TSS.........GGG..........y{mo.ugg.]/..........yxy.s...kjkgef.su.....y...H;3...uttpop.........y..m.jB3Icx.<Tl.....}[~...}a)G`9Uk..'...Zq...o.}.\|[.mO.........~U=....mO5!............mJ3.rO...jD......dJY:(t..2..\?R..........E=.vZ.........l..,.V.....8....&.3.}Q..a......#+.'6.O=~..EOWK......pHYs............... .IDATx...OZk..{'..=..c43j.........).T_.d7.z..e....I.$p...d....>....6..bhI...YO.h$.=..&........u.c.~.Ys...t...1.c0P...y_7!.Cx<...Z[y....V>.....o..S...25.l..(<

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	867
Entropy (8bit):	7.470212420059912
Encrypted:	false
SSDEEP:	24:uEXvx3nNxbQ/O/6QSoaM8a7N+mdUYPfAJx7xxh+:/nE2/6Q6Md+mdUYHAJNxb+
MD5:	72CFA13C3705A70B1E127D7E7C3F2372
SHA1:	CA287060B2809D35EE3F0C4F8C0D0E16F28C65D3
SHA-256:	5F4C2F414A5B6AB8A6983EC09393F08E4AEA94A989C5E58037D7B37B87884A04
SHA-512:	9EB79D08D5DCB6961632597BFD6B24F4248D7EBA04358E44AADFD60FB8147368C3C9F27310AF60A4EFDDEA3CDB495A174539BABA1CDDD943F18C24F7E02EEBE9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................PLTELiq.................................................................................................................................................................~r.....tRNS..p.p.. ..o.p......V.......pHYs................CIDATx..YS.0...pb.sw..8v..I.o..?.2.U.X..Q<.;..).g...J%..:{..ZS..!..Fh]...~.~. ........./....Pd....9....".P.?.@........vd...l.@.H-....H.......j..H....(Y..W.X.G...X.Z`t.............4....Ui...".Dq.D..@-p.9U..&z.W.Ad.gE...Z._.....W....U....`........R.......F..l....#......5....#.-_<..o.}P..\........../....#.G.SY?IK[.R..W...P..8.....'fd.....FP......F..........d....u....m...j..)........[...B...t#...;..;.....2[.5t........83m\...!.7..o....U'F...o.. .6o....Y:z4...}3.o".K)@3..E...@X..P..E...@X...e. ...v"..PG. $Y......G..+.p.xx\|(..................G..}..... :.,;...5r9\|..I....IEND.B`.

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (634)
Category:	downloaded
Size (bytes):	9864
Entropy (8bit):	5.526789728355218
Encrypted:	false
SSDEEP:	192:xlvBlxlWlJ3ylhlmrlrlvUlElblJ3Xl0lmmlMlvzljl8lJ3olTlmZle7Cla4C/Go:bvrbI5ELupvqaZ5VKPSvBxC5ehUnlb6
MD5:	48E7D74EA9DAC223FC523EF8BE5018FC
SHA1:	9AF6D043D6996553281D7F755BFEA9510917F896
SHA-256:	17E85F5D946361583570A97058BCDBA463D99E197E748A4CF94BAC3BF4F2F7C9
SHA-512:	C5A2653F863B1B7480995B8DA7B5B55DDE27DF731D15F63A49EF474E84089984F3BF0E8CF538C484CFBE4DBD32C2C1E1AD5882A142AB41A1247380D8F8BD6D8A
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Rubik:wght@800&family=Inter:wght@400;500;600&display=block
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 400;. font-display: block;. src: url(https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa2JL7SUc.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 400;. font-display: block;. src: url(https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa0ZL7SUc.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 400;. font-display: block;. src: url(https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa2ZL7SUc.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 400;. font-display:

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	13584
Entropy (8bit):	7.972406297865626
Encrypted:	false
SSDEEP:	192:V2cAyvRQHui5T1SbDlzwv78Gx6RvV2ymvp81LdCAP6uu0GJsdnJddkRMLC:fAy5CTwbDJvmv4c0GJUJrkRQ
MD5:	D0216285C9C31981C59E76773D66E24D
SHA1:	03456057BD86F8C1F9CE0A2C10093509070DF619
SHA-256:	4DD1C976F3F6BD2B1F6E86097FBBE22C9E2C954942B51FEAF7780567A46FEB82
SHA-512:	28F18AD5E9021D8CE36D2D77EC60BF0D20DB8F7B1634AD3EB686B90A5995AE62DD795C1545F9B251EAA9BBEF16D4CEA4639AED24EC063AE694340F3F0AE1AD15
Malicious:	false
Reputation:	low
Preview:	RIFF.5..WEBPVP8X...........U..ALPH.!.....m.9....;.t.^.1...=.3.n.w..Q7..............fG.,..&.@.."....ljgO.......p.P<..Hn.mWDdV...m.k,2..,233...F#......L"33........{..;"...y....Y.mUm....{........J..&.$...YU..}........'`ff.5^...........D............#.....;{9..r.mSd.........].`+pww.a.d...%..ww......B...I.$).....u.9.....1......?....g.3......?....g.3......?.....$..z ..fD......ns..n..H1......@...w6..l.j1...f0m<......w...._{....q.6_.Mj.b.o..L...;Og~..f6.7J.\|>k......C...'5....t.sxn..M.yRP..........J.&.(.,.E....NO........T....\O.....pT.._.........F.h...hJ.>[...G.....:.F;.z(.te...b..cz9..........P.f....FE.....k...~.s....7..@<m...#.km.S...d.!....".....m...Z...vAk..j9........p.u..3..Uc..........[..u........Qs.Cn.C..Mc.q........H...N..R...mJ..f..x......g.3......?....g.3....... o.4.[:.........i......,i/.I...hME%...lu.X.......x.]I.u.R5M.'..<....6-.w...{.(\.\.-..\|.d~..\|.T.x".@.J.24..TH/.hmE.P....d.E\|.....s=.M......z.F...C._.Z..I3......6m...A..

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (663), with no line terminators
Category:	downloaded
Size (bytes):	663
Entropy (8bit):	5.6646864006523465
Encrypted:	false
SSDEEP:	12:qTjx8N/4PAvWj1ZzyzZ5gF49fR/yJWapvn5YlMVWvnxcdLVP5:0jWN/cKw1ZzGgF456jpf5TVWfxcdLVR
MD5:	85D97B321377FF13B0A2D838807A829A
SHA1:	6A3EA8B0E9F1EA6E9EB222D0A53567F5FBABE628
SHA-256:	0D2A8EEE87491CA0D2D6730855A86399DC5425408945CB11D6F2CBDF672A62CB
SHA-512:	B0A1FA18D964FE4C5F19AE6D1F5E4EC21C5039CD70832D129C954DF7692215C8EEFC62867FF29A00FC539D1E2C93D805FF8C984D36E9C23B73BE38C6A193DC5F
Malicious:	false
Reputation:	low
URL:	https://js.stripe.com/v3/controller-with-muas-treatment-85d97b321377ff13b0a2d838807a829a.html
Preview:	<!doctype html><html><head><link rel="preconnect" href="https://merchant-ui-api.stripe.com" crossorigin/><meta charset="utf-8"/><meta http-equiv="origin-trial" content="AtD0WrnMwAPI4nWWCvreE+vpgPVz45SO/1fG1IZRNpBsdWZOZN6SKr0ynC11KuzrvT903WrEU+N9Ik/RpiCRTAEAAABbeyJvcmlnaW4iOiJodHRwczovL3N0cmlwZS5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ=="/><script defer="defer" src="https://js.stripe.com/v3/fingerprinted/js/shared-fc50a17743dac6193bf2b617ff68b6e7.js"></script><script defer="defer" src="https://js.stripe.com/v3/fingerprinted/js/controller-f772f0358c4c73c59a894ceca0c3958a.js"></script></head><body></body></html>

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43882)
Category:	dropped
Size (bytes):	43883
Entropy (8bit):	5.373794703137306
Encrypted:	false
SSDEEP:	768:YY/C9CHJt11lpRMvIXFFCqkdKdbkxRno9nWm8cNG9tU5E9+f2R8ozaslK7NIUw6J:Yit11dMvIXiFx58G9U1
MD5:	E83034EACFE1964F7926EC2CCCB839F9
SHA1:	7EA752C44AF30F970363D2070ABFC1E60AA115D4
SHA-256:	DE7D1E230009B19B7BBEF1D1B1A7BEA78E8AE39F428EB1BDE0E84F0A2119FC8A
SHA-512:	AAE740BF3271251B0B98918DEB8CC0D50F5B887FCAE56B93CD77DCEF15736712A120E8AEBE91A18AEA7435F536F6AC31D0FB96194F5BE81428841835B701E160
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function St(e,n,r,o,c,s,y){try{var _=e[s](y),m=_.value}catch(l){r(l);return}_.done?n(m):Promise.resolve(m).then(o,c)}function It(e){return function(){var n=this,r=arguments;return new Promise(function(o,c){var s=e.apply(n,r);function y(m){St(s,o,c,y,_,"next",m)}function _(m){St(s,o,c,y,_,"throw",m)}y(void 0)})}}function D(e,n){return n!=null&&typeof Symbol!="undefined"&&n[Symbol.hasInstance]?!!n[Symbol.hasInstance](e):D(e,n)}function Ae(e,n,r){return n in e?Object.defineProperty(e,n,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[n]=r,e}function Ye(e){for(var n=1;n<arguments.length;n++){var r=arguments[n]!=null?arguments[n]:{},o=Object.keys(r);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(r).filter(function(c){return Object.getOwnPropertyDescriptor(r,c).enumerable}))),o.forEach(function(c){Ae(e,c,r[c])})}return e}function gr(e,n){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 962 x 191, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	23243
Entropy (8bit):	7.948989551488073
Encrypted:	false
SSDEEP:	384:ElTBjRkJH/gvcr3CZIbCCKWL0Ev+aJAxfuYTCWei3I8UMIWGDP5umdhdT2MHMb+c:ElWokOy+CYMvJAxfvHL3IrLZ2MsbB
MD5:	F8DC67C086BE4169F6E453D73E0B0014
SHA1:	422269A68A43B0E1903EC9102B0C1513828C1369
SHA-256:	714FAB2CAC3D3546999AE70DE988B09D0E57A20AFB5CCFCE56C691B955ED4CB1
SHA-512:	E218AA702184E806C9F55143B0B055493F9B68AD0BD85922FAF77FBD60CEE334C7116A65CACC9981DC127DD5EC23AA1E0DA72E14215691D9FE690C5D3F68E0CF
Malicious:	false
Reputation:	low
URL:	https://www.umso.com/lib_LUGoPiqXXlDptSWA/csi5g5qmp4uscbth.png
Preview:	.PNG........IHDR..............a......PLTELiq..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................iq.....tRNS...`......@........... ..... ..C...O..#.......!NE........$H.....K..R...)....A..;.+..2...>9..B.3....Z?5.6'.V.&.7.(.0...1.T.*F..[.8J...-.....=...W.0,.`.........U.....X...

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	40024
Entropy (8bit):	7.978008279611235
Encrypted:	false
SSDEEP:	768:0fS48m/UIJhNwg85ny7XUkofOpM4ize4el0bW3:0N82Uf5ny7kko2W4/4eeC3
MD5:	5F3EFC3D1CAB74545A34C4D789501252
SHA1:	78EE9E621DC64A6E7007D99A928043B61828A1D8
SHA-256:	C322978087995BDF63863C1765EFD4E383C24EA452B013642458822662B17EB6
SHA-512:	1219BF91DC5512BD2899C10DE9DD54ECF96E9DB00ACE6D19D558886E0307B028816926C54EB5CB6D975A734DA75809DC727A759FD7154440DE3AA723FD01770B
Malicious:	false
Reputation:	low
Preview:	RIFFP...WEBPVP8X..............ALPH.k.........@...t.."b.....h#23I.V......z.....+G.;k....T.0x.HF.D..p..3R.....?_.$%..$.~....4RKQUl....j..IF<.9P...$.#"k..m...f.n{...m.o.6OfcY.5.9Od.?..KDH.d.m....R.W(.P.=.h.:.V......6M..}.$m>..m.m.m...1..}..\|..WDP.m.m....o/...W....I.i[.m..9l.m.m.m....k.>#...6....S....s.....7..J#v%.JRL.=.=Z.....m.m.m.wpm.w....9.dq~...?.A..m+.......&v.xD..Dnm...g..R.F.j._..... E..).&.S..y.....E.!.m$G.r......7ft...H."if.pw.....p.........JdW.Kg.....iO.....!;.~U.=:...$k...m.v.m#wm..z...z.1.rr8...........WD..m+Ht)K......O.5S...m[.h.....1.T."DQ.K.....F..z...........KaY.c?Ox..?#..l.q#.).F...K.r.v/..........R>_....1...P(.sO.p....Re.}...-.(..6./.nq.(...%...{.\|..;..}....9...3'.b!....Y.\|....b....z.KkW.1%.e.j.f.......<....A...Y...s\|.R... .....P.......O.dJ0Lt....6..1.?:..v......Z.~..........OC4.Wl..eN0MtD.f...t.\|........y.v..stD.c1..p.#..+QX[v:.;..X.....}..QX.u:"...x..y.T.#.HO.#n.^e....O.t!...z..G].t:..E{L......o.D.#.Y.%B.,.O...

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	13584
Entropy (8bit):	7.972406297865626
Encrypted:	false
SSDEEP:	192:V2cAyvRQHui5T1SbDlzwv78Gx6RvV2ymvp81LdCAP6uu0GJsdnJddkRMLC:fAy5CTwbDJvmv4c0GJUJrkRQ
MD5:	D0216285C9C31981C59E76773D66E24D
SHA1:	03456057BD86F8C1F9CE0A2C10093509070DF619
SHA-256:	4DD1C976F3F6BD2B1F6E86097FBBE22C9E2C954942B51FEAF7780567A46FEB82
SHA-512:	28F18AD5E9021D8CE36D2D77EC60BF0D20DB8F7B1634AD3EB686B90A5995AE62DD795C1545F9B251EAA9BBEF16D4CEA4639AED24EC063AE694340F3F0AE1AD15
Malicious:	false
Reputation:	low
URL:	https://di7r6y9oc27j.cloudfront.net/st_WSDCBUQTPPjxTZvb/2?darkmode=true
Preview:	RIFF.5..WEBPVP8X...........U..ALPH.!.....m.9....;.t.^.1...=.3.n.w..Q7..............fG.,..&.@.."....ljgO.......p.P<..Hn.mWDdV...m.k,2..,233...F#......L"33........{..;"...y....Y.mUm....{........J..&.$...YU..}........'`ff.5^...........D............#.....;{9..r.mSd.........].`+pww.a.d...%..ww......B...I.$).....u.9.....1......?....g.3......?....g.3......?.....$..z ..fD......ns..n..H1......@...w6..l.j1...f0m<......w...._{....q.6_.Mj.b.o..L...;Og~..f6.7J.\|>k......C...'5....t.sxn..M.yRP..........J.&.(.,.E....NO........T....\O.....pT.._.........F.h...hJ.>[...G.....:.F;.z(.te...b..cz9..........P.f....FE.....k...~.s....7..@<m...#.km.S...d.!....".....m...Z...vAk..j9........p.u..3..Uc..........[..u........Qs.Cn.C..Mc.q........H...N..R...mJ..f..x......g.3......?....g.3....... o.4.[:.........i......,i/.I...hME%...lu.X.......x.]I.u.R5M.'..<....6-.w...{.(\.\.-..\|.d~..\|.T.x".@.J.24..TH/.hmE.P....d.E\|.....s=.M......z.F...C._.Z..I3......6m...A..

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 1406, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	133285
Entropy (8bit):	7.986657455113509
Encrypted:	false
SSDEEP:	3072:ILrD+aMdrXexO+kDtvk2JwI++lsxY5Az6cpUBBPRiRLPWg1Ak:ILbMFXexKD9CKl6sS6imPRi/Ak
MD5:	EF5842A61713EDBE648A23CD0A60A107
SHA1:	1FF1B3B464F783240B350595A388458C9C4A6BD1
SHA-256:	A548C193CB34B3C7430AB3EA9A780BC0ACBA2703F5F06FA894D84110392C2856
SHA-512:	9038EFEDE4F6C5AA05D77FD0B94128471D3DEEC2FA34BBD3BB64F9CF2DBF3EADE5F839441F1DBBDE6D74589B1D7B84C1CB8B7F533D3905B230E9D6103A48E271
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......~...........PLTE........................sg...............................rf.............oc......................th.........................v....xm.............k^...................ma........www......!!!..................}}~...ppq......'''+,,@@@......kkkIIIA{.666............111h[.;;;.........fff......X.DDDaaa......YYY^]]m..MMM...VVVsg..........J..xZ.............\.....S..QQQ......Q.z..R..h.........V.od....S.......\.....X.}q..aT.W.....z..,i.h.xj...sK~....kh...............................YR.......TSS.w......i.....9w......w..q.....~.......rka.Z..g.lq......i...k.....aEz.E.@.....L@vh^...................q..!/k.............].89q......z},6?o.......{\|L.......[#>w.....>@......z............5'Q.L......Y.u`.......c....>S{..a......w.JY.....^SW..Lb.._?.....pHYs............... .IDATx..KL...6..W......`H....I...07[o0....1.$4....!.$B..= ......'.M.P....?.Y....;h)..."uK.z.......G....ec...!x?..]..z.Z{..2......K7............D....p.spd.8.9

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (21464)
Category:	downloaded
Size (bytes):	70931
Entropy (8bit):	5.488455899786315
Encrypted:	false
SSDEEP:	1536:FEeXotGWXx53rATbm9S6g0d+t+tkeXJvgJLRtfXfTfuBmXaCFo:FExtBfrLzg0d+t+tkeXh6RtfXfTfsO9o
MD5:	8A09B15E60289073C8C27F8C8933BC4F
SHA1:	9A9925BC424442B3ED2EA5E10061F65B67F442EE
SHA-256:	F02EEEE891EED73E3D1E20AF1AF1A77E3908904B069713421D3A7507378F5959
SHA-512:	C45A519D05608715BCF69D8821A352512BE2DAAFDCE29FDC69ACBE57E635D724ACBD3F315DE6A600F1B64999D37D8937E7207A1219815D08C60B2FBE9F821489
Malicious:	false
Reputation:	low
URL:	https://www.umso.com/showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2
Preview:	<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><link rel="icon" href="https://www.umso.com/lib_LUGoPiqXXlDptSWA/eljn5jc5doqj8c8f.png"><title>Umso - Showcase</title><meta name="twitter:title" content="Umso - Showcase"><meta name="description" content="Don't take our word for it. Have a look at the amazing.websites people have built with Umso."><meta name="twitter:description" content="Don't take our word for it. Have a look at the amazing.websites people have built with Umso."><meta name="twitter:card" content="summary_large_image"><meta property="og:image" content="https://www.umso.com/lib_LUGoPiqXXlDptSWA/69k32iua1jxr2uyj.png?w=1200&h=630&fit=crop"><meta property="og:image:width" content="1200"><meta property="og:image:height" content="630"><meta name="twitter:image" content="https://www.umso.com/lib_LUGoPiqXXlDptSWA/69k

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (15381)
Category:	dropped
Size (bytes):	55100
Entropy (8bit):	5.489474595157026
Encrypted:	false
SSDEEP:	768:4w6MAx0xsYXFYXo0GFsWXFH53FJFupBWMmFX0lgJLRV/KX4AHbD3q58H1toMHokA:yEeXotGWXx53rATbm90lgJLRkzXaCFo
MD5:	5254B2C5897A679535902AC58AD7AA1F
SHA1:	383747175DF817AA3C26A116649213FEC12401C4
SHA-256:	1DF7837C3FEF65D7DCCD0B7572145D9AD2F56ACD227614DC3EE1D5688B22AFDE
SHA-512:	2AE7270CC48D6681C56E1235323D18B0D83D02F0B4F9E55DC57F6AB091B3AD8B0EE7BB30154582F2C35FF6CA6CD7DD97818852A8B2E9181353BD9C1291AA6951
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><link rel="icon" href="https://www.umso.com/lib_LUGoPiqXXlDptSWA/eljn5jc5doqj8c8f.png"><title></title><meta name="twitter:title"><meta name="description"><meta name="twitter:description"><link rel="canonical" href="https://www.umso.com/custom404-l7p5nn6"><style data-version="2">body {. font: normal normal 400 1em 'Inter', -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica, Arial, sans-serif;. color: rgb(161, 161, 161);. margin: 0;. padding: 0;. --wr-max: 1140px;. position: relative;. --card-bg: rgb(9, 11, 14);. word-wrap: anywhere;. --color-bg: rgb(9, 11, 14);. background: rgb(9, 11, 14);. word-break: break-word;. --font-text: normal normal 400 1em 'Inter', -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica, Arial, sans-serif;. line-height: 1.5;. --font-title: normal norm

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/11236809420?random=1721058617250&cv=11&fst=1721058617250&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fapp.umso.com%2Flogin%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20App&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel
Category:	dropped
Size (bytes):	107652
Entropy (8bit):	4.248176864722178
Encrypted:	false
SSDEEP:	768:1bTg1PyzfjzaND+zHSMasQGm5Vn2jOqleEby6mdtliDjJLay:1bc1PyTjzaND+zHHE3wjOqleEe6alq
MD5:	03FE49F7B5F1EBEC7E2A157E957F0E47
SHA1:	7363D1EEDA17623A6320BF45CFB2F76854F5E13A
SHA-256:	B2D3AA8847F1838235F934A86AD4C468FD57ABBF70AD807EB2BCC35278EA3351
SHA-512:	EB2C66358E9ED2C80E2635C2F7D08682CE2A0F5A16D19832FD37F22CE3F1855FC487F9C08FE1DFE65F4CD697CB26313A1078F060BB2A1470954623FE16EC60AA
Malicious:	false
Reputation:	low
Preview:	............ .....f......... .(...\|...@@.... .(B...'..00.... ..%...i.. .... .....t......... .h........PNG........IHDR.............\r.f....IDATx..k.&Uy...3{....vE`.".e........".M,5U.nbi.F.h.J..JU..).Q..1.bi..$....@.a...,..........<.s....=.3...........{.<..<.yN..2..a.8... .d.6.@...&#..,!..l..2.w.@7.n.........-..j..E...Y...v...2\|...8.O..?Y...`^....+..B..Q.,.....Z.....M.B,........y]..T..$.....k?..(-?!d.......>Yw.......@5./.....B&."..b....!.S....Yv..Co?!s...._...O.........9.........}.g....T..$MV...h.o..2=./......I..,....E...2M...\.P...4.yQ\......CV."......,....I.@HH.N.B.&[....'$Q...I.v..$.;.B....!......a.@H.. $a....0...I.v..$.;.B....!......a.@H.. $a....0...I.v..$.;.B....!......a.@H.. $a....0...I.v..$.;.B....!......a.@H.. $a....0...I.v..$.;.B....!......a.@H.. $a....0...I.v..$.;.B....!...............e..7..M..._{............:3k..E..E.gY.}.n........5........\|}...$@.@H.d...._..........0..;.+{,..ZV.R.[.r..P......-.[.n.....7...M.....B....L..._......a.6..-.w

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	15986
Entropy (8bit):	7.962201604819978
Encrypted:	false
SSDEEP:	384:YU+zMdKhpqHioQtuoYBue6hOdzBnF4W0F530DmF0p:c6NHKsBumnFH0P0U
MD5:	55A8336EE70B50773EE4E9035D5A0F04
SHA1:	9EBC568FC6F7920AA329B104BEDC074E236A9AE2
SHA-256:	C1D5C52514C80C73D46BBDF495C0660F21F28E356A8798985E8FD092C89ADA94
SHA-512:	1DA62783344E938BD3B9C177EE94F1055F57579FAD443426733A654F15DF88B805CF83723F33A16F179733AB2102A067DDDDCFB89CD7BB831C2811BE7C3C1500
Malicious:	false
Reputation:	low
URL:	https://di7r6y9oc27j.cloudfront.net/st_McLyNmihmZpQwQyb/5?darkmode=true
Preview:	RIFFj>..WEBPVP8X..............ALPH7'.....m.H.?.m..........gAe.U.8h...."{B<.r.e..OG9....E...m."....U..h.}..q.X....{..u$F\q....y.dYg...z.....Y.......h..j..kn..#..#r.....!O.efUcf.m...{.m.8..[..^.......]..Q1........$GJ..x.....Ma>r..m#..H..9..i\|..*..+..GI..N.<#....j&"`A......../....$I..I.e..f.f.f..Ov....9.E.#IR.D.!B..f.^@..............................................8.8..}....L..%A-..D..d.l..36.p..h.1k:Fr..P.K.z..U^..&.6N...uI$.o.W.+.z..<..l7.."..'.:.-cU..r.:.7.....:.n"^FG...u/....{....Ee.<..L....Vg...pm#..!.\%g....[:.{.0.f..%.....2.._I.~..g....c...r...y.....(...\>....r.H<..G.....>.kI..)...S...#......q.3....qI.YN......\g.}}\.@.e>..L.r.)..m...O....y0\|2.[.<...]>. 3{2N....&p..J?.k..2_[<Bk.8._X?........./...O.I....V.`.}.'...O.(..8...........P%..7..............f.....sqH.e...96.....i)R.."....{./.V..i.....!sg(............M.uvO.\...o...-..(.k.yP.1.F...RyR...-..$......C...H..................(y.R.7d..y...............h....[1.2....Y?f...A...b'.{x

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	33844
Entropy (8bit):	7.979117531422643
Encrypted:	false
SSDEEP:	768:qF9kCrDxvXpZwmocUfSNZEKH7SDu9Aeo8PrDQp6fwR40wtwNH2w:qfvburoWDu91TPXoRRrWw
MD5:	3D1E3E54C1CEB1ACC30F37FEC6C3863D
SHA1:	2105659C2E2A726CF767AE20E552CFDEDFE44888
SHA-256:	E2A964E68409F6D8BE0119B17144D37964EE95C89AFFD02243B0ADDE82A7A4B5
SHA-512:	CD809502BBB104CE56795CE18EFAFD97219FE4D30AD4EDCBFDFDCBECD99688D7D749C33E4B303E41D02D611A0D657B5BB1B11B43EC12E4CD73F43F021DB0BA42
Malicious:	false
Reputation:	low
URL:	https://di7r6y9oc27j.cloudfront.net/st_DhlQhQgafqkiwvHx/5?darkmode=true
Preview:	RIFF,...WEBPVP8X..............ALPH.%.....m.9....>]..... [.68..{...-0`.%%........ .i.km{"..EU...w`.}..3_.333;d.......^2....tN.T#.e...UDH`.F.$9.z..'.`..........(".........<..\W<.@..e........@ei.@]..Sy....h...k..I....6.:g.L.-....Y...m.d.Q.v.x.%.....J........'.I...'.O..?...Y......QJZK..O..R.Y...6..uR.C.#.&o..G....D...q.@M.v....I.\>."......M{.t.&P.uG...Upy..(.......#...xpRc.2..#.....kQ>."..w.P.QD.8Ev.D..I..K 0.(.#./..Z..i..P.1~......2...#...u`.!{).I. .K!..s.6..iMx.4....\|..cM..c..)... .bT7E%.....U.M.#-...h3\|$.Beq1.."..D.X......0.3p.Rd.B.9..{..KB..&1$j.l.\!.T...KmtI.._.'.. ~Em.U.jW..#.V..0C.4.#l..u+kk79.e.Q..E(+!.d.pR..s&....p2......N.%..d(..Zk.....G.\|....w...........@YcN9ki..l.i......U...h.b.A.v.0.f.jv....i..`V..$.....7x...&....-A@.gm.VEf.i...i#..w.b..ZH....h....fT.HS..d..ma.l.+..tm1..2...\^...3..C.[@DC..D.F&D..Ac?Ha.n...".V>.3.Lp8..... .\.8...iN.R._L.!...h...X.ha...2.*,..;.....e..~.......R3XjD+g.....'s....B..Q.<.c..1...\|b.I...e\z..H#..%..`.+.

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2699), with no line terminators
Category:	downloaded
Size (bytes):	2699
Entropy (8bit):	5.845605664574712
Encrypted:	false
SSDEEP:	48:Ego2eJJn6IzUtJQSc8aQqSG4v/q7SWWdCEqjWkt08BCVd/lwKqBGW4yKKeu6:aJd6SUtJfNrVlCWWWdtqjZlC7yKBr
MD5:	C1E1BF75AB07A1B3F7507347B43A1ACA
SHA1:	3F39AD9D35948704039B8D24A373DE90F3FABE75
SHA-256:	FB41EE5FD8B0C12008E6E1C8A4D688948AD6357A4AE7092341D4FAD715C08D64
SHA-512:	E6A374AA342CC167F4F62845908BB1032419C4AA448C720A76D8A4E8211275C83517506AAA6428C998B53B9B59281020D7330A6529F747CEE5E8D68BF97CCC92
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/11236809420/?random=1721058609649&cv=11&fst=1721058609649&bg=ffffff&guid=ON&async=1&gtm=45je4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2Fshowcase%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20Showcase&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (930), with no line terminators
Category:	downloaded
Size (bytes):	930
Entropy (8bit):	5.12292712843304
Encrypted:	false
SSDEEP:	24:0jHQfOuH41YiLY3WL3QquM32EhEcx+Ps2P2pCgrsLHOII:0EJpNqycBxWACgrsDOt
MD5:	06BFCD88AF438673A8BF9B845A11AA6E
SHA1:	D024A745032CBE115526ABE648D9FA0F0A10A681
SHA-256:	947AC0903521F5ECEEFC90637C066306A8CA67466CCC188BB0107FB7CFB532D1
SHA-512:	6A37EA27F3AD16DE6BCB4C386D9F09962902AE2F2FDF76B6723CFF8155CD0B9D4504D1EA6ED3C4D5C9D49BE9C636EB9386BB13C9A787A71F02640A8EC939D180
Malicious:	false
Reputation:	low
URL:	https://m.stripe.network/inner.html
Preview:	<!doctype html><html><head><meta charset="utf-8"><title>StripeM-Inner</title></head><body><script>!function(){var e=document.createElement("script");e.defer=!0,e.src="out-4.5.43.js",e.onload=function(){var e;window.StripeM&&(e=window.location.hash,/ping=false/.test(e)\|\|(e=(e=e.match(/version=(4\|6)/))?e[1]:"4",window.StripeM.p({t:!0,v:e})),e=function(e){if(window.opener\|\|window.parent\|\|window)try{var i=((t=JSON.parse(e.data)).message\|\|t).action,t=t.message?t.message.payload:t;switch(i){case"ping":window.StripeM.p({t:!0,o:{muid:t.muid,sid:t.sid,referrer:t.referrer,url:t.url,title:t.title,v2:t.v2},v:t.version\|\|"4"});break;case"track":if(!t.source\|\|!t.data)return;window.StripeM.b({muid:t.muid,sid:t.sid,url:t.url,source:t.source,data:t.data},t.version\|\|"4")}}catch(e){}},window.addEventListener?window.addEventListener("message",e,!1):window.attachEvent("onMessage",e))},document.body.appendChild(e)}()</script></body></html>

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2698), with no line terminators
Category:	downloaded
Size (bytes):	2698
Entropy (8bit):	5.831466345379306
Encrypted:	false
SSDEEP:	48:Ego2eJJn6IzUtJQSc8aQqSG4v/q7SWWdCEqjWkt08GCVt/l7KkBGVb4yKq6:aJd6SUtJfNrVlCWWWdtqjZiCfFK3q
MD5:	EDC1107970D6BD0F4F18EC10F27E05A7
SHA1:	D8FB9932F8A12FC2828B7FAC70E550093244C900
SHA-256:	4E8EBA62DE17D08724AE7CA7CFBD897441C4E82D68E86EB5B4D8D950D697FFB8
SHA-512:	81B7967469F4A28B85CF64E7416495F4659E053F43445E45066D3C4232399850B419935F8EB73E6270E579D04BC53A617683740A5FBA52B34C8B70DA6A64E576
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/11236809420/?random=1721058585147&cv=11&fst=1721058585147&bg=ffffff&guid=ON&async=1&gtm=45je4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2F%3Futm_source%3Dusite%26utm_campaign%3Dfree%26utm_medium%3Dbtmbadge%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20The%20Fastest%20Website%20Builder&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	33990
Entropy (8bit):	7.989206281254074
Encrypted:	false
SSDEEP:	768:U5TeIA7C40N6YnWWHMS424l9ACSygRV/xBxvNmctOIRWTPj/XT/aR3T+3a:U5TeIwC40N6uHN4fOVNFOoEeTsa
MD5:	C53A8476165A7AE3132D7836827482A0
SHA1:	B95CB24DF3D8FBBBD318562F3059D66D0760AAA8
SHA-256:	F634BC3B181A100AE9D8A110F029D51694B78FBA4DA7F901B33FA69E4E77C5C9
SHA-512:	9F85081977DF5E84425581635B217EB59BB94E2268FF1543326A416D4539A825CE568E9A15A4AA4739D1D6E3963B9BE2879E218B277C9AA43941C288999F37AE
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X..............ALPH.......m.H...:.]uWF...1.(.y..kx>y5B..CN.(...MI.$)..)..Wf.#......j.M,..LkD.a.I..=..._.mS..;3.)v..v....efff<..8Pfffff.&en.(..C..kI3.uI.F..P...A...m..FJ....#2..Q....l....9.3/...Lf.L...... W....s.dJ.M._..N. ".m$Ir.{..tO4S...J..................&...?...+.m?m....\|.zn.i.V.{M...{.u.v.._........................................................................X\|.A/m...............J......oi..I5......W....Qo.H/.w.?.[..FRk._i....{ .PY.....E....C...v."Ao!.EV........!.S.n.....1_T^#..FP...dx...t....or.P.........Q_TZ.82.....N..H..z..q..9.c.J4>m.7;......h/..V..S {.3..W.`D...6Q.........My....hh5.r..NCP....oi...N.[. .R.'.9.)rA.Z$J.DD/.i..yK.S.K.l...>&..Z..h......k..x.....P.....P.u.Icu......nH..../..\.Oc.....d2......PNZ.*,d..".r:..M..A....f....8....}.;....@.C.^1p..0..y.!C.n...1...4p.{D4..m.P.....Y....C...2.n.......e..Y.i..b+..;x..K(K....)b.....M..>.[..f....8.B#....,y.....&HW.\z.:a6.......Q........O#.....g.ND.@...'0%t.G......6.

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	32548
Entropy (8bit):	7.984910626232688
Encrypted:	false
SSDEEP:	768:svWoDu8sgD0oF/UZTZm3hcRfpB5tv116Lqhk:szsgD0oFcuyl1162
MD5:	8244A3E53C6E98204B5837529EDDE6B9
SHA1:	F7B9B489F31FA0B36C5CD66701EC962E488F33C8
SHA-256:	1308E0B870D3DDB0B6FFE313C468466D31D970F5A3BFA92B10ADB8E4A8FA7A00
SHA-512:	27562CBE3C3AA4C94D439C0985E3E66683A938654CFA26D4868A819D50C13F5ED13A53266BE3D76A5DA79DD9CCAC2DD7CA04B16D845CD84B2C2E1D9BBEB9EEEA
Malicious:	false
Reputation:	low
URL:	https://di7r6y9oc27j.cloudfront.net/st_wqnaCNxfMwAMacVY/4?darkmode=true
Preview:	RIFF....WEBPVP8X..............ALPH.".....m.8....z.F.......I.8.Pf.-....4...HZ.c.'.=o6.R.h.Hr"...........t.2u.f......\...e....#2Jz........v.6...p....2t$.V$I.}.H.....Gg....L2..h.133cd.7...Et..nQD@b.F.$.u...Ec....a.hj..wUu...M\ .,nH......f..@.u}.qw.......d......u....~f...... ..J..\.'..e.$..0............C......?G.s.?G'.J...n...X...1.B...;G..s.....a.8XK..`MC...+.L..?..[...B}..+..?#...[Z....DE..__.D(9...K..MS.u.D.u.4..K......36.:S..........T..P.U\|......4.t{...R5U..,3c...UT..x19d..9Z. .z...,..Ep....Q......aaC.Oc.Y...$.....u.g...c.[.x..c...8.-....I..Px#........1.N..o.-x..Y.M...........X-76....&.H.~.]...X.p......`.3B..@.m..i-.......P..aVZ...L..'....V.X ."^.i/.(...s...yU..w..j.{X!:...N.84`..9........A...G....ZfF......?.......C......?.......C......?.......C......?^Q~\|.v.'...Kh.....=.F(.OF..iCM.-...3-.. d.Se.HQ. .A..<G.M.B=.....<...L.V.6.=.:.&P.}[#.....y....?O#.p...(](.$pQ!=g......Au......=x..6.y.:L..A..E...M.Z....K.:...Y.t...&]w.u.o..Y..g........N.\V.....T.un

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 46704, version 1.0
Category:	downloaded
Size (bytes):	46704
Entropy (8bit):	7.994860687757006
Encrypted:	true
SSDEEP:	768:f3Ybit5PQRS0FhgC1g10ijolF5rm2GsRnENYMSGAxgvZdH3VayjX2p2iKEmcLf:fIbi7eHBmt0F5rm2GsRENqGAx0Zdlt2r
MD5:	30A274CD01B6EEB0B082C918B0697F1E
SHA1:	393311BDE26B99A4AD935FA55BAD1DCE7994388B
SHA-256:	88DF0B5A7BC397DBC13A26BB8B3742CC62CD1C9B0DDED57DA7832416D6F52F42
SHA-512:	C02C5894DFB5FBF47DB7E9EDA5E0843C02E667B32E6C6844262DD5DED92DD95CC72830A336450781167BD21FBFAD35D8E74943C2817BAAC1E4CA34EAAD317777
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2
Preview:	wOF2.......p......................................O......^?HVAR.g.`?STAT.8..4/l.....<..6..f.0..\.6.$..H. ..\..>..[`....\|...........7o.)....C81=......g#l..PA.c.......%...$.K.....\|}}....8H.\Yd.....2c.J....0K.....I..k...F..f......,L.....P...JGwj..KM....n..,..o.....n.ck...1...%.<.....;5...9..2....=b.....("4..:.k...K_...`.5v..2@...,_.3..6..@PR.]...f!X.~..b.....-..9.....?.=:kt.'@_...N...8.i......Fo..S.C.=%.........W.@7d..%......,"h...b@.DE.]l.n..(;......E.ng].`....8..C;m....).u8.....4...%..c.A.hc]....s.{.+....J..Rq...f..I;.B..g.....j.@~.........H.........:]Dc.J.6r..].".c...8j...v. M.PXB.,.v...M..NtOO.......Z`-.i..X.....".y....c.....+..e[..(..q...u..kh.k5W..=OK{.;...7...V...I.FMTWv.Dv.[..^`......JY..:.,.. tgKhC..2-...I..S..'...IL..........p......&:..(...g..B.`......%U....-.m.D.b.m..p..26.0D.....$j.r...w..z.9.)`..n.I..B...s"es...;..vY...6.T...**..2o.....W.Lu:wx.?.7..x......C..E.^SE..F.5WcMi..a..n...X...t.........6.j.j..M.9..a.....f<J.....@.&f..'.\|.....p

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	1093
Entropy (8bit):	4.8403366297540185
Encrypted:	false
SSDEEP:	24:T5CWXIZMsCbJS6NSShBBN8rruWgtl+IqME1C9V+tgu:Tv4ZMhbJBBxlPW1z6u
MD5:	53298461A3E23C6276460332A3334943
SHA1:	32E6CA63C4DB148ECC8F3DCE87581DFBA400D4F7
SHA-256:	36429CD9936A055B22A531C16F08F4F58604B13F4F96C317791B6AD2CD228FB4
SHA-512:	9FDE247371CFACFA2B29D6731A10AC541AF60C8A2C8866C8FD85C1E88C3BFAC107FD9D5039BF52C018D6D2D8D482B62831879F79D8FD445A6E9972D7ACED3AD3
Malicious:	false
Reputation:	low
Preview:	<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <meta http-equiv="X-UA-Compatible" content="ie=edge">. <title>Error 404</title>.. <style type="text/css">. body {. font-family: -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica, Arial, sans-serif;. font-size: 14px;. line-height: 1.5;. font-weight: 400;. font-style: normal;. color: #24292e;. -moz-osx-font-smoothing: grayscale;. -webkit-text-size-adjust: 100%;. text-rendering: optimizeLegibility;. background: #f8f8f8;. text-align: center;. }.. h1 {. margin-top: 130px;. margin-bottom: 0;. font-size: 20px;. color: #a8a8a8;. text-transform: uppercase;. font-weight: 400;. }.. h2 {. font-size: 40px;. margin: 0;. margin-top: 60px;. }.. p {. color: #3c3c3c;. margin: 0;. font-size: 16px;. }. </style>.</head>..<body>. <h1>Error

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	40024
Entropy (8bit):	7.978008279611235
Encrypted:	false
SSDEEP:	768:0fS48m/UIJhNwg85ny7XUkofOpM4ize4el0bW3:0N82Uf5ny7kko2W4/4eeC3
MD5:	5F3EFC3D1CAB74545A34C4D789501252
SHA1:	78EE9E621DC64A6E7007D99A928043B61828A1D8
SHA-256:	C322978087995BDF63863C1765EFD4E383C24EA452B013642458822662B17EB6
SHA-512:	1219BF91DC5512BD2899C10DE9DD54ECF96E9DB00ACE6D19D558886E0307B028816926C54EB5CB6D975A734DA75809DC727A759FD7154440DE3AA723FD01770B
Malicious:	false
Reputation:	low
URL:	https://di7r6y9oc27j.cloudfront.net/st_zuqDuEpnkgCElcsn/8?darkmode=true
Preview:	RIFFP...WEBPVP8X..............ALPH.k.........@...t.."b.....h#23I.V......z.....+G.;k....T.0x.HF.D..p..3R.....?_.$%..$.~....4RKQUl....j..IF<.9P...$.#"k..m...f.n{...m.o.6OfcY.5.9Od.?..KDH.d.m....R.W(.P.=.h.:.V......6M..}.$m>..m.m.m...1..}..\|..WDP.m.m....o/...W....I.i[.m..9l.m.m.m....k.>#...6....S....s.....7..J#v%.JRL.=.=Z.....m.m.m.wpm.w....9.dq~...?.A..m+.......&v.xD..Dnm...g..R.F.j._..... E..).&.S..y.....E.!.m$G.r......7ft...H."if.pw.....p.........JdW.Kg.....iO.....!;.~U.=:...$k...m.v.m#wm..z...z.1.rr8...........WD..m+Ht)K......O.5S...m[.h.....1.T."DQ.K.....F..z...........KaY.c?Ox..?#..l.q#.).F...K.r.v/..........R>_....1...P(.sO.p....Re.}...-.(..6./.nq.(...%...{.\|..;..}....9...3'.b!....Y.\|....b....z.KkW.1%.e.j.f.......<....A...Y...s\|.R... .....P.......O.dJ0Lt....6..1.?:..v......Z.~..........OC4.Wl..eN0MtD.f...t.\|........y.v..stD.c1..p.#..+QX[v:.;..X.....}..QX.u:"...x..y.T.#.HO.#n.^e....O.t!...z..G].t:..E{L......o.D.#.Y.%B.,.O...

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65465)
Category:	downloaded
Size (bytes):	1779444
Entropy (8bit):	6.140258874233175
Encrypted:	false
SSDEEP:	24576:1otH4Mat8fUCQ2UGRSZ4itOnSyqLFMJhhQ5tGRvdMWiBLBXV6/sfUOpGzIHOCkcx:1cnKYZtXuRE+kq7oHw
MD5:	C31084DBA070A068DD086C002E87CE3E
SHA1:	8181FC0C968D567FD48FEB962A51F6A7B5CB847B
SHA-256:	E26F8E9C3373CE5C41FBB6240417E97B333A0160CF771BB25685F42E9DB1A791
SHA-512:	4633725D7E1733AA4FCCB071E36C4AEEAD4B0F812BF2F4A61C89BB5D8C0C431E4FA7D943A2740B0B49B802704585DB75A59C2CA6403FF817A9DA24B919FC7416
Malicious:	false
Reputation:	low
URL:	https://nextgen-widget.vercel.app/static/js/main.b963c2e4.js
Preview:	/! For license information please see main.b963c2e4.js.LICENSE.txt /.(()=>{var e={4125:(e,t,n)=>{"use strict";function r(){return!("undefined"!==typeof __SENTRY_BROWSER_BUNDLE__&&__SENTRY_BROWSER_BUNDLE__)&&"[object process]"===Object.prototype.toString.call("undefined"!==typeof process?process:0)}function i(e,t){return e.require(t)}n.d(t,{l$:()=>i,KV:()=>r}),e=n.hmd(e)},1048:(e,t,n)=>{"use strict";n.d(t,{ph:()=>c,yW:()=>u});var r=n(4125),i=n(76);e=n.hmd(e);const a=(0,i.Rf)(),o={nowSeconds:()=>Date.now()/1e3};const s=(0,r.KV)()?function(){try{return(0,r.l$)(e,"perf_hooks").performance}catch(t){return}}():function(){const{performance:e}=a;if(!e\|\|!e.now)return;return{now:()=>e.now(),timeOrigin:Date.now()-e.now()}}(),l=void 0===s?o:{nowSeconds:()=>(s.timeOrigin+s.now())/1e3},u=o.nowSeconds.bind(o),c=l.nowSeconds.bind(l);let A;(()=>{const{performance:e}=a;if(!e\|\|!e.now)return void(A="none");const t=36e5,n=e.now(),r=Date.now(),i=e.timeOrigin?Math.abs(e.timeOrigin+n-r):t,o=i<t,s=e.timing&&

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 950 x 1078, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	59938
Entropy (8bit):	7.9622709358507
Encrypted:	false
SSDEEP:	1536:HUWjLxWkpJ+sawraFlFskUadU1z3Q4AiyG:HUWjLxH/+FeaFV+1c4AiyG
MD5:	F539FDA2091FE4E9B1F199E63E3FB073
SHA1:	EDD7E2AAD4899E02003A9E6D99880D40D4518956
SHA-256:	F35D4AF54B5B870907068BA26D81F2AB77F7B854B2C7EEEE3F785595168FC20A
SHA-512:	CC18B53E394A3F8EC020541E78FB189875C19B6020AC2C7A443546B68E3489732EE99619B645C1714654945ECE0775398B2785CB6547B6827110E613BA30B154
Malicious:	false
Reputation:	low
URL:	https://www.umso.com/lib_LUGoPiqXXlDptSWA/ogsxa8h0dl6bydus.png
Preview:	.PNG........IHDR.......6.....03......PLTELiq...447118..................77://788888833:118((2338...888114...33:118*/......778778...((3ypf...8999;@007......889.........uL....zP.~R.{Q.{Q.768.........................-5{Q............118...............qE(......-3((2......008...pH........''0...}~.,,5...qrv.....645=efj%&.!%)!!(.."..%))3YY_##,.........LLS887...L]n...@AIzP.......DEM.........:.,cdi...(,0L8....% ....^^ewx~8:A........%..<>D.................23;...##...PRY....................s.u.)-....P/wg]..%-$y.~...B614)#kkp......5...]7.................VS^...g.t{C&...%..~...........h~h]ue...H,.L=2...JA>......\9&XG:Sk_..09-.....x.yqlF/YNL............:1`...p^TcVRD4w.vW...NME..\|......?L<L^O.gJdUC..h.y`........k.....s..]iR......\|..ip...v]BztP1-Jh_^bfrkD.p$......._.[A......Vdp..+?.........u.n..BX.p......ItRNS..A....... .`.b....I......`...0?%..P~@;.X\4..p..._.......r................pHYs............... .IDATx..ml[.....v..i.}o.x`w.8..].M2...I....M*.i1")R6%.L,:aH).....UI..... .?

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 1406, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	133005
Entropy (8bit):	7.98703584361878
Encrypted:	false
SSDEEP:	3072:51b+s5lU/VO41WHeQRXzOFrMBp3QrzOxpllBDMV4KgzK:5cs5lkM41WHeQtiMBpArz4/Bi4KgO
MD5:	B489A72EDB5B7362A03C98BBB4BE84DE
SHA1:	85D2C855272573859BAC195BF6B44FC2B623BB80
SHA-256:	B58B252A915E713EF6728ECECDEC918EF07BA2188EDC49CBA2F86F812139909A
SHA-512:	F6E456E23B280A7B6AAFD962CC0F8BC63D3CD1D1604D3DF9002B44B387608BBF95F7C0026AFDEB9B426FB1CEE70010C18DDFB46063B6D3DF23B3E15DB80B62EC
Malicious:	false
Reputation:	low
URL:	https://www.umso.com/lib_idKrFnnqnDIKXMAQ/eanc9lnqfsu41h6a.png?w=500&dpr=2
Preview:	.PNG........IHDR.......~...........PLTE."0.$2....#1!,:....!/...-:H..............-........!.....+..'..$."/".=...........)...,9G....../<J.........-;I.........&2@.'4................(4B..._gr........................................)7.....................;EQ...........(.#1 +87E...7AN..................emw........#.....kr{3>K...T]h.....pv......Xak......s{....\eo?HU................x......w~.\|.....QYdMVa....X..8E^.'..IS]l....1;HB.4..P.BLW.WOGP\....k,1B..o.eX.....q..../8...dhh..........DNZ.:>.............z.....c.7f.3X...%K../+?....GH........[.qc....+`Z............$Fn..i.............x...i.......;Pw.........v...........z.................,LQ..A.ze.....fv..~[...T.......{.aI\..i..o.gE..E.{x...c...D.....Yk....H.......V..4.7.Q).t....d...........M....#/D.Ud..k..e..8.+.HF..ysL........pHYs............... .IDATx..oL....[..,w3.%5U.0....8P.lA.w;6..l.o5....-....B...CB 7...b...A{2..=. :...s..7?.I..\.M..8.$.\|9/o..4...q\........[...Ykq...`0.....`0.....`0.....`0..

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	21116
Entropy (8bit):	7.9822968581914955
Encrypted:	false
SSDEEP:	384:4VZ6kOEuHe1z2glx6z1MjnzONSjJT1hVURZNIcnm/j0o2UZ8hqfF1XK:4VZVuIDbjnzON81ARZNIgm/jf20XBK
MD5:	9BD77B9C0339515F1EBE4AEA3BCDDD60
SHA1:	23D1E85736FB7EB720C3470A0A4004AC5D0AAAC2
SHA-256:	62D72C51AD3798D8D6A97B28EB4A9001A635E37B2709B8EF1D178919440B5EC5
SHA-512:	D9930C79BF2EBB8E6147FEDD3790682A237B580CCC53F13B999C44CFC4FDC90A9E52BBE5178E031A4BA2156F00BB920DEC18CF218D2B1993B9C680B5123A47C5
Malicious:	false
Reputation:	low
Preview:	RIFFtR..WEBPVP8X..............ALPH.8.....m.9i..I..."b.xPH.... ....Zo.v.;..lb.6g.$..a.....{.;..jX..U=....<]S.....c....F.k....=.m..^.f..u...N...Uc.S.}g.?" 1n.Hc.7c....t........_g.6M.mj....m.6._k.......x......N:..vg&y,D.-.TI..J...Iy.a...'...S......9'.,..U..S.....z_}......nPw...RABB vV........"B.m.u.\%.:.^X.,.X.L.....n....$u.8..L.f..mP=l....m.m.f.Y.8...N.z..H.$.m2$...........".....7...........4..-,.A........f..}.o.!..8l.I.j..H....[......g.3......?....g.3......?.qI..g..$.d.........OR.....E..Q.aY..E4a8..q"...ER..F...z....Z..%P..d.0N.5S? ....k~b.C..$$y.ZR.W.....a..5?.7..^_.....W.+....p...OM.cc....M..j......p.}.}......&........Q.!.\....P..X..,..4HX!FX9.Pr....[=5.3x6.W.Fi.r...b({1B...F...O..+...'e.E..aK.K..2....S3@.....b.L.Gq.$..z).P.+....>.p\T.j...M.(.T.,Q.d.`.b.T.P........,.t6.f...3./...J.\,.a...vq..Ct....f:c..h..N..h6...$..:..:.v.......R.Z.T....C..@a....\.fY.........C......W....x..o~./y.N9.,..J.\..i(....../......5.....K.....oz..L

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 962 x 191, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	23243
Entropy (8bit):	7.948989551488073
Encrypted:	false
SSDEEP:	384:ElTBjRkJH/gvcr3CZIbCCKWL0Ev+aJAxfuYTCWei3I8UMIWGDP5umdhdT2MHMb+c:ElWokOy+CYMvJAxfvHL3IrLZ2MsbB
MD5:	F8DC67C086BE4169F6E453D73E0B0014
SHA1:	422269A68A43B0E1903EC9102B0C1513828C1369
SHA-256:	714FAB2CAC3D3546999AE70DE988B09D0E57A20AFB5CCFCE56C691B955ED4CB1
SHA-512:	E218AA702184E806C9F55143B0B055493F9B68AD0BD85922FAF77FBD60CEE334C7116A65CACC9981DC127DD5EC23AA1E0DA72E14215691D9FE690C5D3F68E0CF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............a......PLTELiq..............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................iq.....tRNS...`......@........... ..... ..C...O..#.......!NE........$H.....K..R...)....A..;.+..2...>9..B.3....Z?5.6'.V.&.7.(.0...1.T.*F..[.8J...-.....=...W.0,.`.........U.....X...

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22344)
Category:	downloaded
Size (bytes):	22345
Entropy (8bit):	4.856963685437267
Encrypted:	false
SSDEEP:	384:sDuy3p4gQkW731Id1utIMcV5M2kuyDKX5Vyr0868tDTot30/FKDoVKb8o4fovBFj:y7d94iMcDzXur00ZotENKEOl4fopFj
MD5:	F33FC4485741152871EA6078681D45E1
SHA1:	E0EEB648F35F23131820C2C9C00CFC79DE6AF2FA
SHA-256:	BD913FFB6E09D2416BE4D6DECA95B79B8746E442C8E7BD709794853212EEF41A
SHA-512:	791B36F992850C352FD2251B1DEB6F23949758EEE42A1413B4F922DCB43E3C038E495633C5F9EB4A19094DC4F7132401F5452F8825B05618B7AD75001A548DA3
Malicious:	false
Reputation:	low
URL:	"https://api.umso.com/public/structures?ids=st_gmfhijCMMxAcBLrJ:9,st_uGerXxeRYOSTsrnJ:4,st_NwmLNovUgREHorrQ:4,st_CoBBHOGIRGblDvui:3,st_yjWwCAcrrTwyuqKH:5,st_ZhZeMoQDspyfOwZC:5,st_gVwJmnNuAaIUzPZB:5,st_EjpMuJiVfBUfYXvK:4"
Preview:	[{"id":"st_yjWwCAcrrTwyuqKH","name":"Classic 3 Column","version":5,"maxVersion":5,"status":"official","structType":"section","data":{"content":{"key":"s1","type":"section","props":{"style":{"display":"flex","padding":[30,0,60,0],"borderTop":"1px solid var(--color-border-normal)"},"element":"footer","children":[{"key":"b0","type":"box","props":{"style":{"gap":40,"display":"flex","justifyContent":"space-between","@media (max-width: 500px)":{"display":"flex","align-items":"flex-start","flexDirection":"column","justifyContent":"flex-start"}},"children":[{"key":"b1","type":"box","props":{"style":{},"children":[{"key":"copynotice","type":"textElement","props":{"style":{"fontSize":"1em"}}},{"key":"logo","type":"resizableMedia","props":{"name":"Footer Logo","style":{"marginTop":10},"container":{"width":200,"height":40}}},{"key":"socials","type":"dynamicList","props":{"style":{"gap":10,"display":"flex","marginTop":"1em"},"element":"div","itemAtom":{"key":"btn1","type":"iconLink","props":{"style

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (8099)
Category:	dropped
Size (bytes):	2222185
Entropy (8bit):	5.124262061405735
Encrypted:	false
SSDEEP:	6144:+kZ7mmtZZU6bvHaESk6yJ8FoyJ4uhZfxyJ8dIyJS0lR/CCskVA8lEgY2PwUgQf4c:Z7mMSk6yJ+oyJfyJKIyJHV
MD5:	023E3424AD8ED6F76778F769FADE3C39
SHA1:	47B3E91D0BA3E71B2D2E94CB12E42FDD6B4F779B
SHA-256:	9692CB93D50CE97453DFA668F8A93A7A35A878C69469ABCD1D2699F2A68BC955
SHA-512:	72FAF60374AF1CB48C8FA70E7A6A5FAB1A345A7AA335FFC6BAD65F813F57014A53219781EDD804B90A6F9A67D6F84C41D6EA16F2F5604C4F3F83424D48B63D97
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html. class="MktRoot". lang="en-US". data-js-controller="Page". data-page-id="Home". data-page-title="Stripe \| Financial Infrastructure to Grow Your Revenue". data-loading.>. <head>. <script>window.__capturedErrors = [];.window.onerror = function (message, url, line, column, error) { __capturedErrors.push(error); };.window.onunhandledrejection = function(evt) { __capturedErrors.push(evt.reason); }.</script>.<meta. name="sentry-config". data-js-dsn="https://7cd38b0eb2b348b39a6002cc768f91c7@errors.stripe.com/376". data-js-release="050d4a013ec6ef10e857e0070d3250427bc465e7". data-js-environment="production". data-js-project="mkt".>.. <meta name="experiment-treatments" content="acquisition_top_cta_change.control.ursula.7771f42c-765a-45d9-bd6e-2a0d1324bf49.a,wpp_homepage_title_copy.control.ursula.7e3cd708-b4c8-425b-962c-2f0781458fb7.a,acquisition_sticky_nav.treatment_full_nav.ursula.23560a9f-bb8f-4ebd-9f31-3af044ab7cdd.m,acquisition_home_email_input.control

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	14258
Entropy (8bit):	7.975407464386627
Encrypted:	false
SSDEEP:	384:FZmIlftped4EGp2ewMvuiKJfQe9PnAeiY/0pQkv:FUCtoCEow++JfQe9/z3/u
MD5:	22D79BDB605CC67F288FE48965C83EC4
SHA1:	4095339A43A9A436E868A5ED424E56B463B44C7C
SHA-256:	E7D109A14BDDDFE50FEB5D43B4EB4906FD565F40ACF00B364FBCA4185742CD74
SHA-512:	218D996E0151586EC8279D4314C392C0E890009BDF55B286B4CF4F621502FC2898A7D594831476D37BFE80F90CA46C65F7AA1159496D3171B7E551C372C24EE9
Malicious:	false
Reputation:	low
Preview:	RIFF.7..WEBPVP8X..............ALPH.!.....m#9RI.g.=~w."b.....(..=.u..x...q...q.....).((.n..(E..z.M:..V..........2.M......<.,......sE.m...w_.....=.....N.:.H....P./g..X..m.Ibvf...US.}.m...su........13s..r>...fN~ ....cf.....+.Jw..........Fr$)r.....&K[;/...+v.m.o.5....Y..X.z.......-vq.Pw=...]q....w..b{...........N?.+"dA.[...T.c....I...?........?............?............?.........I8.V...yq#`e.G.[.r.y......ap.l\:.\...9P.6w..8eXf...G.'...m..T].......738.R.......7{..._^6.\h.......?..Y......f...t.pT...O.'......g.-..-._........8^........Q...S....X...>.X.$.n.....BK......S../.......m1,.8.;.'...^q3o.a......M.....[.0jM..k.s.a'..q.w!.y.\|..C{...........V..#.ShI..o]wt....@b..;~..%.....3.e..y4'..CV^....;....#.?......g...q.?..N...V..B.z.zZ '..Ux...E...H5.....v..GY.H....T.........6...6.q<U..G".*..?c..E~.R..B...r...R@&.).....;.KZ$-%.&.... QQ..!..E.Fv......#..9..!.h..6.........F:..JSJ+..:Y..).v.G!.^..?...p.....o...F..&.#g.Q....7A.o..U.m.4%+i..N..!..D..

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 1406, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	109357
Entropy (8bit):	7.985234429022389
Encrypted:	false
SSDEEP:	3072:zB22RB4i5ragLjxwxQwOEPg/HvtVxNHewqVLjKPA:l22RBvragWJrPqtsB
MD5:	18B7FBCCC8CABA5D48F63C8AACB5C919
SHA1:	CC414159794D99C10AC02892728D9192E0F03BC6
SHA-256:	C00A04574CFF6B5066080633289B62EE095F902DAFB9F26C3426640800430D09
SHA-512:	CDF12CC9B709A7895458CAA982FCD346614C50E80F286A771CA15529707AB0D1E035C31A48D0D82CF8D7EF0E2E2F15ACB4E6DBF9CED9F0F659045E96890E8D10
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......~...........PLTE...........................................p<...............................x.........t...23].........56_................M................................../0[.......6[.............0V...U..,W....i$._...E)...&&T......dv......sl~..fJ.........s.....A.....j....................x`...y......)Q... ...mK....y7.....}........##Q+..............#L..........pY.......q.0.u(..V9.......k.y.~a....zw; .oS.tU>Bcj/.v2..;..hK....^A....8..yA...V$.T.N ..~.M=._8.a+.G'.p@^`..U..p...aYn.1OrGIn..'........A..S.j4....i@.D.X).=Yz....a.....H...ZH..U2..3km.0...l.RTw.H..cP.b..'Dh..:....S.........Ld..f..>.p"..yz.uC2..........OF...........h....{......vc.:..D..._:+..=;>.x.v..u...#....L......m..K.TL?'...bc_b.zl.{J...{...x.<6..\.......u...`n...d.....pHYs............... .IDATx..M.#...'QYI...^.w.....LB_.e]..$...........Z.....X.6Z./..w..&J$.jh...m.p.n..............4p......s".d}t.-..U..g.+32".......'.A.n.[x..o....^..5b.[[/.J.

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2202)
Category:	dropped
Size (bytes):	207617
Entropy (8bit):	5.538697483640081
Encrypted:	false
SSDEEP:	3072:BDavJYqOXGl4bpho40GWDWgcIzUk6XJ95IL7pg5IiBpO:FqOWWbHoGWzS5ILFg5IiBs
MD5:	22C330F4EBDFC526BD34869F4D7334F4
SHA1:	61ECD05B5EC8ACDFA99F0674078C04FCDD9F815D
SHA-256:	DE627F998A8E720E4DEC8098ECD72AAD25A25EE354CF12E5BB3063941F830D21
SHA-512:	95B4C761B87A67DABEEA0E51DE002CCDEF3A7CBB4ABD9A383286C4C3E7EBC63D44AEF46E8FEE01F6CE5EBBD652850B632270B5340E30AA6D1FDF3030DB73AD1F
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"}],. "tags":[{"function":"__googtag","metadata":["map"],"once_per_event":true,"vtp_tagId":"G-VYY8D05ZV0","vtp_configSettingsTable":["list",["map","parameter","send_page_view","parameterValue","true"]],"tag_id":3},{"function":"__googtag","metadata":["map"],"once_per_event":true,"vtp_tagId":

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	176
Entropy (8bit):	5.0830039192559076
Encrypted:	false
SSDEEP:	3:jTqN/AS3OYNR2XU4sDOYNR2XU4HcRNqUBQEfDebYs1DdLM1BG/YfQRcJT6R7Yme:O33jaEDjaPcrqUmZZdLM1k/IH+R2
MD5:	96F5B26D366F47393B3FF36FE7471474
SHA1:	6CAA14FF7E3692BEB752734C28CBEA160C113B7A
SHA-256:	07B6B3D899DD69C0E9EB463E23E10E30E82588EDDF95D15D45BB505C6703A813
SHA-512:	970801461D6E12D7C14752B7844F1C0347650897A8C9C1540BD0CE49CABCFBF760A9B6B891DA828537F6AD49099608F205E5D47149CB71043DC9915E215E8574
Malicious:	false
Reputation:	low
URL:	https://js.stripe.com/v3/fingerprinted/js/trusted-types-checker-efd8cf45ce422659c098993bfc62531b.js
Preview:	"use strict";(window.webpackChunkStripeJSouter=window.webpackChunkStripeJSouter\|\|[]).push([[913],{9554:function(e,n,r){r.r(n),r.d(n,{loaded:function(){return t}});var t=!0}}]);

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7843)
Category:	dropped
Size (bytes):	374159
Entropy (8bit):	5.591252713878552
Encrypted:	false
SSDEEP:	6144:J4ZgqOW9aSsfg7WzTiwP/LFg5W/zAvFoAtbs:CZO6aST7o13d
MD5:	26F7AD03247A9F596D90E32DDFADEF15
SHA1:	1530DC14F51807439B675F9692F540F258C80EAF
SHA-256:	1ED9B436CFBC829243A3435DCCB5A8F71E7214C1D1294911B1FCCA28F1F96BC1
SHA-512:	3BD5F383C78547A36AB44059085AEC56D081F28C9F14604661D729F5CD1A9427FD5DB029B1E9E771D1971B8E7C42DC726D63E917FEA37FBDD9844755633D1390
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"4",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ads_datatos","priority":26,"vtp_instanceDestinationId":"AW-11236809420","tag_id":12},{"function":"__ogt_1p_data_v2","priority":16,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vt

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	downloaded
Size (bytes):	591673
Entropy (8bit):	5.528038607017617
Encrypted:	false
SSDEEP:	12288:wcnCELqNtlzNCmHjrmAh4Bs8ZSVSymMqFr/7UjRGgghl6Hv:XnCEOHGmHjrq6Hv
MD5:	E9671FCF25075AA655A2B0FB269CBD95
SHA1:	F1625AC7C5E3E577C377AC6065A995BF4F6AE72C
SHA-256:	BBF363B2C74DC721773A148EFF1E84D64BE1F2131D28E6AD9CA6DAEE606C4EA3
SHA-512:	16D045E97F7739BD2ADAD52B3B9F92C392BCEE661239280724B0B302D281B78E39B90C542B2885E8CFED622CFBF51A1699179A44F82290CDFC93AD7FC6596781
Malicious:	false
Reputation:	low
URL:	https://js.stripe.com/v3/fingerprinted/js/shared-fc50a17743dac6193bf2b617ff68b6e7.js
Preview:	(window.webpackChunkStripeJSinner=window.webpackChunkStripeJSinner\|\|[]).push([[3712],{10723:function(e,t,n){"use strict";function a(e){c.length\|\|(i(),!0),c[c.length]=e}function o(){for(;p<c.length;){var e=p;if(p+=1,c[e].call(),p>1024){for(var t=0,n=c.length-p;t<n;t++)c[t]=c[t+p];c.length-=p,p=0}}c.length=0,p=0,!1}function r(e){return function(){function t(){clearTimeout(n),clearInterval(a),e()}var n=setTimeout(t,0),a=setInterval(t,50)}}e.exports=a;var i,u,l,s,c=[],p=0,d=void 0!==n.g?n.g:self,y=d.MutationObserver\|\|d.WebKitMutationObserver;"function"==typeof y?(u=1,l=new y(o),s=document.createTextNode(""),l.observe(s,{characterData:!0}),i=function(){u=-u,s.data=u}):i=r(o),a.requestFlush=i,a.makeRequestCallFromTimer=r},64198:function(e,t,n){var a=n(12897);e.exports=a},14771:function(e,t,n){n(80290);var a=n(5379);e.exports=a("Array","fill")},9554:function(e,t,n){var a=n(64198);e.exports=a},24883:function(e,t,n){var a=n(57475),o=n(69826),r=TypeError;e.exports=function(e){if(a(e))return e;th

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2688), with no line terminators
Category:	dropped
Size (bytes):	2688
Entropy (8bit):	5.838517427095021
Encrypted:	false
SSDEEP:	48:Ego2eJJn6IzUtJQSc8aQqSG4v/q7SWWdCEqjWkt08HCVeenlJKqBGm4yKw6:aJd6SUtJfNrVlCWWWdtqjZbCnfKd
MD5:	859AE3FC262A7F50961A6457A37DECE1
SHA1:	BA82E754C0EAB7AF7F65F9B2501F82463D4BAE2C
SHA-256:	DF88CC1AC8B5728BBCE09FE2998FBD960E31EC9D81FF44647FE2545B2C0B53D1
SHA-512:	4D86090E055FBE11D118D55C28D70D9ADE96999BE587FA77F2A5F5976B293B8609E7B24390AB0D7498493A6386A6126142C80B4299E4B477CEF3960F6F3D5844
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	809690
Entropy (8bit):	5.583059712572674
Encrypted:	false
SSDEEP:	12288:GUn+c8y4LrlRlj8LQ2rYx9vfBmBZmHryF:GU+Dxh8FSvf8m2F
MD5:	35BFEDFD04A709F8AAB7836CC092123C
SHA1:	BD593A6026894AA1AE332FB1D329728280C97739
SHA-256:	C595CBDC3CC22CE94FB4359B2B397401A37258F322615C67131AECF86CEE3D2F
SHA-512:	D969693F23B4958FA69F7CF0796482FC7974CB6B5C5559C78EB387CA7B9041C347FCB4245D52C1DA7E72AE204AA98BBF6DCB2127F337181EF87F5CAB882A225E
Malicious:	false
Reputation:	low
Preview:	!function(){function e(t){var n=i[t];if(void 0!==n)return n.exports;var r=i[t]={id:t,loaded:!1,exports:{}};return a[t](r,r.exports,e),r.loaded=!0,r.exports}var t,n,r,a={94184:function(e,t){var n;!function(){"use strict";function r(){for(var e=[],t=0;t<arguments.length;t++){var n=arguments[t];if(n){var i=typeof n;if("string"===i\|\|"number"===i)e.push(n);else if(Array.isArray(n)&&n.length){var o=r.apply(null,n);o&&e.push(o)}else if("object"===i)for(var s in n)a.call(n,s)&&n[s]&&e.push(s)}}return e.join(" ")}var a={}.hasOwnProperty;e.exports?(r.default=r,e.exports=r):void 0===(n=function(){return r}.apply(t,[]))\|\|(e.exports=n)}()},62322:function(e,t,n){e.exports=n.p+"fingerprinted/data/countryRanges-62b058b777fd76bceab2937ae8a5ba27.json"},8464:function(e,t,n){e.exports=n.p+"fingerprinted/data/countries_ar-7995ee218dfd37546f754bd73b67e2cc.json"},90342:function(e,t,n){e.exports=n.p+"fingerprinted/data/countries_bg-c9f7496faecf6cafdeb3cf831b179cc8.json"},32726:function(e,t,n){e.exports=n.p+"f

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	9684
Entropy (8bit):	5.465822892105941
Encrypted:	false
SSDEEP:	192:xlvBlxlWlJ3ylhlmrlrlvUlElblJ3Xl0lmmlMlvzljl8lJ3olTlmZlalv1lllKly:bvrbI5ELupvqaZ5VKPSvBxC5ehUcvfPn
MD5:	4290D7BCE46A95985B31819F43B892AC
SHA1:	EEF3B4E8C34126C71D3E77A370650BF7106D4B8F
SHA-256:	1EBDA384E4D0071661DEA9579B2D8B2F016A504B73A8D63A29632387FBF983B5
SHA-512:	28187505F394CA6C59D793CF189A589CAF0BDB6CCE7CE479506497A583A386C76D8D142C0775D1A71CD843FF8F57F106180D99DD59FF7CD9283F4A92C35FB9B8
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Inter:wght@800&family=Inter:wght@400;500;600&display=block
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 400;. font-display: block;. src: url(https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa2JL7SUc.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 400;. font-display: block;. src: url(https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa0ZL7SUc.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 400;. font-display: block;. src: url(https://fonts.gstatic.com/s/inter/v13/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa2ZL7SUc.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 400;. font-display:

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	dropped
Size (bytes):	637305
Entropy (8bit):	5.361436795517997
Encrypted:	false
SSDEEP:	12288:v1q3V1fv6epC4bRLELcLpLjYFgVZKdFjPfBX1D+rjKBh86XC9qdcibE3IHwajNKt:NEmhVHy0nSN
MD5:	8D70D579BA2B8DF39256290C4AC00BE8
SHA1:	D528851C0C77F810702541B16DECD75AF6D83665
SHA-256:	3166EECDCBF2E0E9C156C45526150BC3B181462CF76777FCFF39C0829EDA4959
SHA-512:	A5AC83FF1A25DE68B2C692EC2481C83B751ACC566CB4DB17AC9482184BACBD3F2823E957B9D6F71BCA8BEE194BABD5CA4A7F1CCC3E292F2F42A8DFB398E51671
Malicious:	false
Reputation:	low
Preview:	!function(){function e(t){var n=o[t];if(void 0!==n)return n.exports;var i=o[t]={id:t,loaded:!1,exports:{}};return r[t](i,i.exports,e),i.loaded=!0,i.exports}var t,n,r={723:function(e,t,n){"use strict";function r(e){l.length\|\|(a(),!0),l[l.length]=e}function o(){for(;d<l.length;){var e=d;if(d+=1,l[e].call(),d>1024){for(var t=0,n=l.length-d;t<n;t++)l[t]=l[t+d];l.length-=d,d=0}}l.length=0,d=0,!1}function i(e){return function(){function t(){clearTimeout(n),clearInterval(r),e()}var n=setTimeout(t,0),r=setInterval(t,50)}}e.exports=r;var a,c,s,u,l=[],d=0,p=void 0!==n.g?n.g:self,m=p.MutationObserver\|\|p.WebKitMutationObserver;"function"==typeof m?(c=1,s=new m(o),u=document.createTextNode(""),s.observe(u,{characterData:!0}),a=function(){c=-c,u.data=c}):a=i(o),r.requestFlush=a,r.makeRequestCallFromTimer=i},5937:function(e,t,n){e.exports=n.p+"fingerprinted/img/abnamro-4445e65420800f96f68cfc67a273f66b.svg"},1520:function(e,t,n){e.exports=n.p+"fingerprinted/img/asn-3d9b1bbff2f8f12105510992dbb37ae8.svg

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	75
Entropy (8bit):	4.094537025438351
Encrypted:	false
SSDEEP:	3:/coSUyJzRTbMExAqE4xLXDEY:/d1wzRT4mlRLX9
MD5:	A43C7AC772122FE4D977D94876437F2A
SHA1:	CA7B2EF2734369BB815A7CFA49FFFA5C55BE8635
SHA-256:	029918E68AAC864A6F19969163941C2F437015C3ABC4A448CF35D7F2A0452955
SHA-512:	EF51F0915131A17F7AD354CEDA7C112F05E60438520F4304E3D72E58D9C97F9D4712AB125C7AD71381E3CF7AA5DD2F30D0DE4939D97AC2EF692A2A1DE215651F
Malicious:	false
Reputation:	low
Preview:	{error: {message: "The request returned an error. We have been notified."}}

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7843)
Category:	downloaded
Size (bytes):	374166
Entropy (8bit):	5.591308334563741
Encrypted:	false
SSDEEP:	6144:J4ZgqOW9aSAfgDWzTiwP/LFg5W/z8vFoAtbr:CZO6aSnDo1rw
MD5:	CC07419C5890D8FDF6845009ECF63FCD
SHA1:	93710A41026B02C4761E272323B6FADAC8A2CB96
SHA-256:	8050C4C4C18DC2C670287B1884097539E6B02741DE93ABDCC967056212A1DDDA
SHA-512:	8CB4D0DF1E33B19FE2C42B5323FDF158191A67999ACDE5FBB0E33687B7EF7660FDBFF2B85BEF625D3DE02F95FB595DBCEE6D79B23A86B895A93D42A5140B266A
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-CXEH5WRXTW
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"4",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ads_datatos","priority":26,"vtp_instanceDestinationId":"AW-11236809420","tag_id":12},{"function":"__ogt_1p_data_v2","priority":16,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vt

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 950 x 1038, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	47233
Entropy (8bit):	7.9646178396547525
Encrypted:	false
SSDEEP:	768:SM3FLzYoAcWtf8Sk3Y8DfNOBv9je4YdAe1j6ZQPyfl+2DvpFmPsHZ4riQvW:LFLzYoAht0R3/DfER9wd6oydnDjRH4ip
MD5:	7D8040C66F3BBD0B76F5DBEDE1259489
SHA1:	C037E701DC232B45C394AAFE9C40D44B1A5062A8
SHA-256:	6B36B8820052779CA313D90A70936D261BA6A1831916783846522BDE554CBFC6
SHA-512:	5A1DF2B61FBA2111AFFD6E5E5B94669C26E437C459BFC2F8BFABB444706DEDA935D93E62E2609823DDF5302BD2F5071A5E022178E944B3CF36A0CD02EEF8EF92
Malicious:	false
Reputation:	low
URL:	https://www.umso.com/lib_LUGoPiqXXlDptSWA/jocl5anhrivcjdwx.png
Preview:	.PNG........IHDR...............T<....PLTE24B,.6 """$$&$$$.0:Liq"""02>02@""",2&& ###((.###&(02<(.(0"""###!!!$$$((,+,4&&(,.4%%%###0 ((( 2$$(..822@ $$$,.8$&&&&& (,&(,.08b......0<.........b.....a..c..b........3NdH..c..c..c....=(I^.8I_..Ek.S......7H...4I^c..2FY-Rk;]x?d.8Pg5SkDp.c..1I^@h.?_zS........$ATM..0CT#@Rb..'G]^..-@OV..Bk.&7C7WqZ..<Ri9Sk6Mc......>a~Ft.7DW...b..b..W..p.....(Lc...Q........a..c..c...1>.2?.-; S.../=J..,DU,PhX..?r.c..X..U..J..O..V..M...-:/<H.1@./;.1=W..5Zpb.../=.0>O..b..W..`..3SgH..Q..^..U..R..,LdM...0=K..c...,9..;...]..J..9`sY..Z..^..[..9b}.........b..=DI.....#'+W`f.........dnu:o..........q\|...$........"~.........-:..'6e.JRXN..L..06:H..8j..7H!;MW`g*Nf'H^....3C-SmW..4b.G..J..B...Wr@\|.<s.2^z0Zv>v."?R%EYE..T..)Kb$BVD..R..+PiS..P..?y.Q...(4.0?.!+~..05:]..~.....>......tRNS...p.......x...`.P....hH.@....0X. 8....0@8..((....@. .`..@....@.. @`@..@.``.P.`.....0....p0@@.`.@.............p....@...P.... .H...@ `.......p0.......h.L....@.P.o..ox.(..

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2689), with no line terminators
Category:	downloaded
Size (bytes):	2689
Entropy (8bit):	5.842162263076039
Encrypted:	false
SSDEEP:	48:Ego2eJJn6IzUtJQSc8aQqSG4v/q7SWWdCEqjWkt08HCVeenlJKqBGm4yKa6:aJd6SUtJfNrVlCWWWdtqjZbCnfKT
MD5:	5102B67461C682BF07F77FD027F6F8EB
SHA1:	1DCE9969C0556FA6414BF217023DB56FC9800DA8
SHA-256:	86827BCE39255CBF3FA45C5D217E27A29E14369F7705762B6FD682DFDC60D591
SHA-512:	7E1823197DB973D4133F2801B6315E45B134E6B1AACFC4300FF804255D66C14348E87AC2BC81EB4B67C2E973754A51FFAFF08CE0278CDCD065DBEB0CE71A84BA
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/11236809420/?random=1721058634591&cv=11&fst=1721058634591&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fapp.umso.com%2Fsignup%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20App&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 950 x 1078, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	59938
Entropy (8bit):	7.9622709358507
Encrypted:	false
SSDEEP:	1536:HUWjLxWkpJ+sawraFlFskUadU1z3Q4AiyG:HUWjLxH/+FeaFV+1c4AiyG
MD5:	F539FDA2091FE4E9B1F199E63E3FB073
SHA1:	EDD7E2AAD4899E02003A9E6D99880D40D4518956
SHA-256:	F35D4AF54B5B870907068BA26D81F2AB77F7B854B2C7EEEE3F785595168FC20A
SHA-512:	CC18B53E394A3F8EC020541E78FB189875C19B6020AC2C7A443546B68E3489732EE99619B645C1714654945ECE0775398B2785CB6547B6827110E613BA30B154
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......6.....03......PLTELiq...447118..................77://788888833:118((2338...888114...33:118*/......778778...((3ypf...8999;@007......889.........uL....zP.~R.{Q.{Q.768.........................-5{Q............118...............qE(......-3((2......008...pH........''0...}~.,,5...qrv.....645=efj%&.!%)!!(.."..%))3YY_##,.........LLS887...L]n...@AIzP.......DEM.........:.,cdi...(,0L8....% ....^^ewx~8:A........%..<>D.................23;...##...PRY....................s.u.)-....P/wg]..%-$y.~...B614)#kkp......5...]7.................VS^...g.t{C&...%..~...........h~h]ue...H,.L=2...JA>......\9&XG:Sk_..09-.....x.yqlF/YNL............:1`...p^TcVRD4w.vW...NME..\|......?L<L^O.gJdUC..h.y`........k.....s..]iR......\|..ip...v]BztP1-Jh_^bfrkD.p$......._.[A......Vdp..+?.........u.n..BX.p......ItRNS..A....... .`.b....I......`...0?%..P~@;.X\4..p..._.......r................pHYs............... .IDATx..ml[.....v..i.}o.x`w.8..].M2...I....M*.i1")R6%.L,:aH).....UI..... .?

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 1406, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	134447
Entropy (8bit):	7.98909684984641
Encrypted:	false
SSDEEP:	3072:Cqnc51tMsgkGKiJotmqMGRn/cyHbEM56b8zTvmk:Csu1p7QakYbbYYzr5
MD5:	F9671E1F6A8C6009516DF937F7020A1E
SHA1:	953F8C16707C23F407E0EACD11BD3EF66970970E
SHA-256:	354C556CA53AA2B14A99E78464815302337A5409EC9879D4A9595C9A0D2D66DA
SHA-512:	B249C18BC22498CAA2955B471333E695A7ADBE033EA604D197066DBA4A28F4F57FBFFC9030EC9A5A29B6AD5410C3E037455F277DE17CB5A885A0D354512AB524
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......~...........PLTE............... !!..............................7DD...4AB...&34........&.....#......78..........G....:;...........2=>...../.....!.C................=<GG..-............%&%.........qvu....(..............!./.........`hh......MWWhno.Lu\|\|GQRBLL....5.:.......S\\.........k}~n....nK........\|..q.........G#Xbb.........fww5"..........v...................".......XT8#...E.^rt8.....z..$...&(Wlm..5......\.........g1.00/...w:.........................U#...P...x.U+...bG2sW@....gNde..q..d.gN.fA.W4.....An..G.....n>.}L.Z:.t.Z.e{G.v_....Y^^\.tM....R..n..14...v........g_/..E...Oc......^...nI..%...~.j...,>_p..@B./.yC.L.~.........z.YW.V..r.pjc.k....qm".......&l......n.....J.....@h8.@..R...L.J..@...c.f$j...PJ....2.}....A....[tg.f......pHYs............... .IDATx...o#Yv7x...q.$.x..b.U...#Q.Q-!...#..G=H.4P... .....$...5..5U..@&..d..A.z..A..v~U.......n....,f....s#.R.Y.T./S....q#..{.=..s.\.p.....\.p.....\.p...

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65465)
Category:	dropped
Size (bytes):	1779444
Entropy (8bit):	6.140258874233175
Encrypted:	false
SSDEEP:	24576:1otH4Mat8fUCQ2UGRSZ4itOnSyqLFMJhhQ5tGRvdMWiBLBXV6/sfUOpGzIHOCkcx:1cnKYZtXuRE+kq7oHw
MD5:	C31084DBA070A068DD086C002E87CE3E
SHA1:	8181FC0C968D567FD48FEB962A51F6A7B5CB847B
SHA-256:	E26F8E9C3373CE5C41FBB6240417E97B333A0160CF771BB25685F42E9DB1A791
SHA-512:	4633725D7E1733AA4FCCB071E36C4AEEAD4B0F812BF2F4A61C89BB5D8C0C431E4FA7D943A2740B0B49B802704585DB75A59C2CA6403FF817A9DA24B919FC7416
Malicious:	false
Reputation:	low
Preview:	/! For license information please see main.b963c2e4.js.LICENSE.txt /.(()=>{var e={4125:(e,t,n)=>{"use strict";function r(){return!("undefined"!==typeof __SENTRY_BROWSER_BUNDLE__&&__SENTRY_BROWSER_BUNDLE__)&&"[object process]"===Object.prototype.toString.call("undefined"!==typeof process?process:0)}function i(e,t){return e.require(t)}n.d(t,{l$:()=>i,KV:()=>r}),e=n.hmd(e)},1048:(e,t,n)=>{"use strict";n.d(t,{ph:()=>c,yW:()=>u});var r=n(4125),i=n(76);e=n.hmd(e);const a=(0,i.Rf)(),o={nowSeconds:()=>Date.now()/1e3};const s=(0,r.KV)()?function(){try{return(0,r.l$)(e,"perf_hooks").performance}catch(t){return}}():function(){const{performance:e}=a;if(!e\|\|!e.now)return;return{now:()=>e.now(),timeOrigin:Date.now()-e.now()}}(),l=void 0===s?o:{nowSeconds:()=>(s.timeOrigin+s.now())/1e3},u=o.nowSeconds.bind(o),c=l.nowSeconds.bind(l);let A;(()=>{const{performance:e}=a;if(!e\|\|!e.now)return void(A="none");const t=36e5,n=e.now(),r=Date.now(),i=e.timeOrigin?Math.abs(e.timeOrigin+n-r):t,o=i<t,s=e.timing&&

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	12686
Entropy (8bit):	7.9682606525675075
Encrypted:	false
SSDEEP:	384:YOcmrWL8/zxP0YuyfupbRiCu/4G3FtK5:5cwbxsQGpgCEtK
MD5:	C200054D1D3B09405EC4521F228D09E9
SHA1:	26CB789D63AB3F638090F644C609DF6DFD6FC800
SHA-256:	4B3A445E35D9DF346AED9251E89555971D87541B8D958AB18B4EAD4CBB0376E1
SHA-512:	75D45153EA01B048ED41FA5ED8465B0CF1A055FE582A15461135A105D556D081E8677E381327E001F76F01D35CF50CDC35096015BFCDA2251073959F4D17C148
Malicious:	false
Reputation:	low
URL:	https://di7r6y9oc27j.cloudfront.net/st_oWLFmgFHQeYRFSAt/2?darkmode=true
Preview:	RIFF.1..WEBPVP8X..............ALPH.!.....m#)I.e.3."b.x.....5G ..%j&.[......"1.k...&5.j....m.!.."3....sV...m........Z..m..e.8(....uU.q.....I..........H?...).Z....g.....a..{.............. .@...H..'..Yce........\|,."B.m[A.].&.i.....D.'e..............................................................PFJ$..t...?&...._UfuR...*.&o.6G.f.D........?.....O.._...ao..}..}.R.-bcQ5J.....R.p..:?yt.8..{......w.j[./..[.J"..@.n...M.'.."#........)d..F.7.p.q...Y.....:0..=..IU...m.%m..T.'.}....Di.........)..= ...\|}.....N.......Es.....AH.,N.s:R.0Q.....>..c<..-E."4.....lB.RT.dHTj.p.B.(.#......'...( ...{.gR.u..Z.T.......EDK;.VV.<.m..(....D@..qR.U.L:&..ap.0....[.ulH~.2......N.k.#P...W;...FAv...........4p7{.4....P......5.....;&..Y\.N.....fYjH...h....v.4....{C..F.}e..Df.io... .s...k........D.wc.A..d..7.1.u......DC.%...W.g........B."..0.a..5} .A....F.5..+.Lp8...o. .B.8...?.M.R._M.)...h....Xj.c...&2.,.a.b..bx>..8`..:....Cj.K...lX.=...\|g..@",........(.......M".'.

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7843)
Category:	dropped
Size (bytes):	374170
Entropy (8bit):	5.591331852128632
Encrypted:	false
SSDEEP:	6144:J4ZgqOW9aS4fgBWzTiwP/LFg5W/zOvFoAtbs:CZO6aSvBo15d
MD5:	1092F81D08CB18E936741D3166D6521F
SHA1:	3018F2A10DC9E3E80306540DC389B8A1DCE78942
SHA-256:	3AED7878503C69F6A5D5D591ABBE8FA576ABC5768D0F3EE9C7318A8CBDCC01B8
SHA-512:	CECC3887F2A1B4FA47EC6FD4F7DA47554CFE70D57420504E0F97D5E81E0D1CC983923375ACF8F05BCE34995597AF5AE89750AEA1D2A4DD901C572329F9699BEA
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"4",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ads_datatos","priority":26,"vtp_instanceDestinationId":"AW-11236809420","tag_id":12},{"function":"__ogt_1p_data_v2","priority":16,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vt

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 1406, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	198350
Entropy (8bit):	7.978494963818845
Encrypted:	false
SSDEEP:	3072:EYSyONJs5dIoSSu3DbDMzsFgn8ARzf5qHMKffScT7Pf4TmXe:XSbrs5dQTbDMzo+zRqHMKfauL0
MD5:	AD4BDAFE48397C3B12D0C2D33356328E
SHA1:	F75936AF7DCA4E1B8E1A25FDD250E72BE6B33297
SHA-256:	F23E2968651E0E0CE9A1FC505B396114B64B3554E1970C4A890F94665D0366E9
SHA-512:	9328F30BDC695EC55C2DFD1D77966FC33441A582CF11A5D6E64673F1657C5362342AC02B9BCD201D72A598E1405A45964E2F703219B337903A69D97D450146B3
Malicious:	false
Reputation:	low
URL:	https://www.umso.com/lib_idKrFnnqnDIKXMAQ/s1uokjc6kos2mlac.png?w=500&dpr=2
Preview:	.PNG........IHDR.......~...........PLTE.................................? .......P>,...H#.....R3...G:)8...lO......5...rU.iPM.T..&..rb`.....o...YE/...W9cK2[2.RJG`9"uEm@'.\>.aFIEA.vd.gI{K/g;"SRR(..D).A>:..cJ@6..vaSQVX\RE<pZSgZXxO5S%.zlk\|dZ.`AmI0..i92@81kQ8.yW.mJT6![NJ.zU..L.qjL0...{.fC^,.lXM...g3..nXc?)046.eM\7 .pa.i\.qG.?...]gRE...g5s;..I......z.....]I=]`d..\..U...dfi.....Y....ke.i...v_Ujko..S._3...}l..?....#(.ww..T.d...0!........I.....I.U..H...&+0...%%....wI..<{Y<....PuYGprvIMR..[.......Hwy\|7<A.S.O.:.r7.....Q..r.X}...g$...AEI.i.~}....V%.....<....f.x0....Z66...D....Q.t\..{........h.c.....y.......l.....hD,.\|K.].........(.............p.....g..au..b.....E..........x.6...=v.......R........p.T.....l......Nw...p............j..I.R...r...}.......+.[.3!.JP.h`..{{.ER.....pHYs............... .IDATx..}P....T.-..F.."..$.[...N.;.K..m.f.)......)6...\y.uz.../[l).....*}...-..r.]`.s`x...9..u.j.-...s...k..[k=.z.$...x.....CLb>....o...f6.SD3...<.s..V3.:u

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 94468, version 1.0
Category:	downloaded
Size (bytes):	94468
Entropy (8bit):	7.997655849661212
Encrypted:	true
SSDEEP:	1536:iwVoMetX1sfTflAkE2GYtb5ZEDmXx91gz8X/pSwtj75fXMGOxXfwuXX0hYC:iU9o1sT2kE2dtViQ91IgkwpyGOtfV0hh
MD5:	C37BE6E8BF10C06E2C46B8150C6141DE
SHA1:	D4390E0C143D91C541E263D849DBD39343E24BDD
SHA-256:	8DAB6F963E1F64B6A6CAAAE353442B986E95CF9362B3B704A390E2E0B45A0566
SHA-512:	4478DB6B2D00680D7EEAD1932A832BF392AD79222131B2BF4701269D0F8940AB7CF4D980B3EE02838BF39879D2BAC24E8EA7678D270A1FEF7E256D67EBEC1B49
Malicious:	false
Reputation:	low
URL:	https://app.umso.com/static/media/Inter-SemiBold.78218ba3cec04d6dc402.woff2
Preview:	wOF2......q...........p...........................~...p..N.`...p...,..4..4..6.$..d. ..R...G[6....3.{.g;7:i..vU..."t...~I.BE.....A.g=...;).2..eC3....@o.z.m.1..0.p............=...Vo.'o~I!.........{...I...1.B..W..A.Q$.eh.E"...(&A..R#Qb.+f..8...._,#..z...l....]?Lv..^..jJ.`&.b.9..#.....a....;b..o.\.K...+..h...LuE.....E.....g...../.p.m@/..S@%B8t..:..g.y......t......^r...A.X=2-./;-.<g3.kqSv..t..:...o..\|..b............-.F....bz1{q.fj.J..L.j......1.......V..T.V.nJ..w..z.D.>..e[._....\|o.&.2.b\.9........^....XQ...t\......_...@L....}JoE...m.K.o.C.<.-.h.b.yJb&..".....U.\|^.=eO.F.../.3....<U.L.,..}p[.S...%..b=.,...t.0..ze7TU.G....`.8$A.{@..........&....bl..C../c.NL..zQ..r...g..`J....b..j..i...C.&..SI.T...7........]...:.4N...)w....?A.S...m.._.G.mM.;\.$...Z._............._.W..).`.ad.2....F~W.J..Yz.......r...g.......)..k.....U!....5......T.TMt....[......."~...}.G.x("..q.PL..D.5.w.%!.. ....)...t.;......#"`..t.".bCE..:..l....0...EZJ.$"...c....f...`D......

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	33990
Entropy (8bit):	7.989206281254074
Encrypted:	false
SSDEEP:	768:U5TeIA7C40N6YnWWHMS424l9ACSygRV/xBxvNmctOIRWTPj/XT/aR3T+3a:U5TeIwC40N6uHN4fOVNFOoEeTsa
MD5:	C53A8476165A7AE3132D7836827482A0
SHA1:	B95CB24DF3D8FBBBD318562F3059D66D0760AAA8
SHA-256:	F634BC3B181A100AE9D8A110F029D51694B78FBA4DA7F901B33FA69E4E77C5C9
SHA-512:	9F85081977DF5E84425581635B217EB59BB94E2268FF1543326A416D4539A825CE568E9A15A4AA4739D1D6E3963B9BE2879E218B277C9AA43941C288999F37AE
Malicious:	false
Reputation:	low
URL:	https://di7r6y9oc27j.cloudfront.net/st_RiCaApghsiWDsXYm/3?darkmode=true
Preview:	RIFF....WEBPVP8X..............ALPH.......m.H...:.]uWF...1.(.y..kx>y5B..CN.(...MI.$)..)..Wf.#......j.M,..LkD.a.I..=..._.mS..;3.)v..v....efff<..8Pfffff.&en.(..C..kI3.uI.F..P...A...m..FJ....#2..Q....l....9.3/...Lf.L...... W....s.dJ.M._..N. ".m$Ir.{..tO4S...J..................&...?...+.m?m....\|.zn.i.V.{M...{.u.v.._........................................................................X\|.A/m...............J......oi..I5......W....Qo.H/.w.?.[..FRk._i....{ .PY.....E....C...v."Ao!.EV........!.S.n.....1_T^#..FP...dx...t....or.P.........Q_TZ.82.....N..H..z..q..9.c.J4>m.7;......h/..V..S {.3..W.`D...6Q.........My....hh5.r..NCP....oi...N.[. .R.'.9.)rA.Z$J.DD/.i..yK.S.K.l...>&..Z..h......k..x.....P.....P.u.Icu......nH..../..\.Oc.....d2......PNZ.*,d..".r:..M..A....f....8....}.;....@.C.^1p..0..y.!C.n...1...4p.{D4..m.P.....Y....C...2.n.......e..Y.i..b+..;x..K(K....)b.....M..>.[..f....8.B#....,y.....&HW.\z.:a6.......Q........O#.....g.ND.@...'0%t.G......6.

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	14676
Entropy (8bit):	7.969062957985182
Encrypted:	false
SSDEEP:	384:wzbIHarMopYcBIESlAmCQBud1lHbUCOTZoLrXrrrrr+ps/V:wzbnQ1qIEiAmCQsB3QFSV
MD5:	3902F9CCB2B8E19AA291F819DC229917
SHA1:	252D4F819992249697B98B8951B792609D1A33CB
SHA-256:	6C4BE839F4E29D79B7AAC6BBAFC768532581CA5E0460F626E27E41B4E6EC6673
SHA-512:	6786BAA7882EC99BDE82002A3530CA88DFAC4FEB5F398447FC70D0CB0C1FB03B893DF4EA9A838844BCBED5E65CE018D1C5EC277807E33A4EC40873D519024363
Malicious:	false
Reputation:	low
Preview:	RIFFL9..WEBPVP8X..............ALPH.#....G&m.....\|EQ..#.v..{E..0....;8..p{mz. ..3{.-d..J.>a8.e...../._............o.....H..+..{N\N..$d.&.....w....0..+...Z~...Uuu..9...:..,.V....v:...ILB...q........cD.m.F.o...\|............................................Bt}).>....Q.}.=#..T...Q....y.C..jm........Y.]$..YH!u}.i...r.m....^.vqa.i....E..l.T.%....E ....tJ.>.C.U.0:...2...z..2.K.!-..z.....O..I...Y%d...2P.T.....I...g%..75.e.E ...%..~......*...X9F.)QvP.A..'...j..]._..bQ.[...i.y.;.C..&.l"Z.A]K...N.4.m.-...c..x8:...D.<.ZT.XTUV..u.>...a7....,..j.....oR.&......J....D..%ppI..b8..?..-W...a.......+......w..(..;.o6y.4.....G6y....zoc.Vn....Jd.....!....?xVOHQ...@...C......K...?..%....?Y .........(..ui2U...."t...+KA..\|..r.h.YO..d.QC5.......I.....z.V...m..t."P.}{3..Upy..(..`.....[..S...\|z..4$.....kQ..B..w.P...9.QghW:i.8)...(..\|/$.J...<..F.......;..!.P>...C...`.....$....]....KC$.h$.[..!.o..x.f.I.aa........B.....V#S.Is.f Z./...JY...t.H. ..(T..\|~.F...[..Bh".Cw..qI...$.D.

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	474
Entropy (8bit):	4.4131084981146955
Encrypted:	false
SSDEEP:	12:YGPNDoO8Qdj1y1iCNbzhEtDvzQHPVfWcRTRe4+TvdTbY8Y:Y4DoNQ7U5h6DvaVWcREBG8Y
MD5:	75EDBE1B0AC62568AF4E5ACE61A4955C
SHA1:	4A82276D7878A02A7ED0368DB749717D0FEA1993
SHA-256:	8DFFC68F405EE12E81DD234DC6AD044F0858E6329C6A80333D11D581718FF0D2
SHA-512:	849420CA5A111245BD8346C90AA25FF2C23578DDD9C34056DA901A46F60B9D32744AF72A1B609F7DA14FE0A703E4D2482BA06E5ED11EB96D6A015F4FD4638790
Malicious:	false
Reputation:	low
URL:	https://js.stripe.com/v3/.deploy_status_henson.json
Preview:	{"canaryPercentage":0,"deployedRevisions":["db3292dc43001bdee052424ac020044e94d46973","0707bd54470adc09763a77c8608041a298521fd2","6c8b4b915414841f9a1d5c79fe992e8dd043aa88","8c05094bbfaed202bc4644c5244b2a5a9e32547d","2a626ea2053d91e59aaa9c190d886de455b6f063","9d060724c2c3761b0a7af51b3f38859ce9ef8752","267a33ee3326e9349e3b9ce6f8909174adaa60bf","84597b056ad675f4a27962f7e1600d46f5081b91","267a33ee3326e9349e3b9ce6f8909174adaa60bf","228e9e4285093a908cc9c295df1c9903bffa3d92"]}

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	867
Entropy (8bit):	7.470212420059912
Encrypted:	false
SSDEEP:	24:uEXvx3nNxbQ/O/6QSoaM8a7N+mdUYPfAJx7xxh+:/nE2/6Q6Md+mdUYHAJNxb+
MD5:	72CFA13C3705A70B1E127D7E7C3F2372
SHA1:	CA287060B2809D35EE3F0C4F8C0D0E16F28C65D3
SHA-256:	5F4C2F414A5B6AB8A6983EC09393F08E4AEA94A989C5E58037D7B37B87884A04
SHA-512:	9EB79D08D5DCB6961632597BFD6B24F4248D7EBA04358E44AADFD60FB8147368C3C9F27310AF60A4EFDDEA3CDB495A174539BABA1CDDD943F18C24F7E02EEBE9
Malicious:	false
Reputation:	low
URL:	https://xai6l1pibnxefgt2.umso.co/lib_xEaDdJFAXtpgtMsP/u36o6qd6r3o9bnmq.png
Preview:	.PNG........IHDR.....................PLTELiq.................................................................................................................................................................~r.....tRNS..p.p.. ..o.p......V.......pHYs................CIDATx..YS.0...pb.sw..8v..I.o..?.2.U.X..Q<.;..).g...J%..:{..ZS..!..Fh]...~.~. ........./....Pd....9....".P.?.@........vd...l.@.H-....H.......j..H....(Y..W.X.G...X.Z`t.............4....Ui...".Dq.D..@-p.9U..&z.W.Ad.gE...Z._.....W....U....`........R.......F..l....#......5....#.-_<..o.}P..\........../....#.G.SY?IK[.R..W...P..8.....'fd.....FP......F..........d....u....m...j..)........[...B...t#...;..;.....2[.5t........83m\...!.7..o....U'F...o.. .6o....Y:z4...}3.o".K)@3..E...@X..P..E...@X...e. ...v"..PG. $Y......G..+.p.xx\|(..................G..}..... :.,;...5r9\|..I....IEND.B`.

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/11236809420?random=1721058634591&cv=11&fst=1721058634591&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fapp.umso.com%2Fsignup%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20App&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2897
Entropy (8bit):	3.943735580509134
Encrypted:	false
SSDEEP:	48:2lPXkoxduvPlXZJZF0Br/xnELGYfhGX81g6/vC3XNLWzYg0mi8i27GWMYEM+xUBM:YPXRMHlpJZF0BrJp98v/6NKzYg0H8i24
MD5:	D6830806D5F0173C377E35F0FDA015C5
SHA1:	BEC242BFF7995576CAE35250BC9E14C5ED3D1681
SHA-256:	62C0A8041B3BB5945E32B5BD8067A8DA50306611ACF5B1587D0F7BCD2FD5AC63
SHA-512:	4ECFEBB9B43A08C6475B54B1E5BAADD4F469544B4090C37C58A941A350F62C124F5CDE4D18BF7CF8A6686DAE51B82FA2012A0AF49F8ABF61E60152649A70292E
Malicious:	false
Reputation:	low
URL:	https://www.umso.com/lib_LUGoPiqXXlDptSWA/b0hytbjf7cdicnze.svg?h=80&dpr=2
Preview:	<svg viewBox="0 0 140 34" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M36.8 12H51v2.6h-5.6v14.6h-3V14.6h-5.6V12zm13.6 4.7H53v2.4l.5-1a4.6 4.6 0 0 1 2-1.5 3.5 3.5 0 0 1 1.2-.2h1.1v2.7a9 9 0 0 0-.6 0 5.2 5.2 0 0 0-.6-.1c-.5 0-1 0-1.4.3a3 3 0 0 0-1 .8 4.1 4.1 0 0 0-.8 1.3c-.2.5-.3 1.1-.3 1.8v6h-2.8V16.7zm20.2 12.5H68v-1.8c-.4.7-1 1.2-1.6 1.5-.7.4-1.4.6-2 .6-1.8 0-3-.4-3.7-1.2-.7-.8-1.1-2-1.1-3.7v-7.9h2.8v7.7c0 1 .2 1.8.6 2.3.4.4 1 .6 1.8.6.6 0 1 0 1.5-.2l1-.7.5-1.1.1-1.3v-7.3h2.8v12.5zm4.8-4c0 .8.4 1.3.9 1.7.5.3 1.2.5 2 .5l.8-.1 1-.2.7-.5c.2-.3.3-.5.3-.9a1.2 1.2 0 0 0-.4-.9l-1-.5a9.6 9.6 0 0 0-1.3-.3l-1.5-.4a14.4 14.4 0 0 1-1.5-.4 4.6 4.6 0 0 1-1.3-.6 2.9 2.9 0 0 1-.9-1c-.2-.5-.3-1-.3-1.7 0-.6.1-1.2.5-1.7a3.8 3.8 0 0 1 1.2-1 6 6 0 0 1 1.8-.7l1.8-.1c.6 0 1.2 0 1.8.2a4.9 4.9 0 0 1 1.7.7 4 4 0 0 1 1.8 3h-3c-.1-.7-.4-1.2-.9-1.4-.5-.2-1-.4-1.6-.4l-.7.1a4 4 0 0 0-.8.2 1.7 1.7 0 0 0-.6.4 1 1 0 0 0-.3.6c0 .4.2.6.4.8.2.3.5.4 1 .6l1.2.3 1.6.3 1.5.5c.5.1.9.3 1.3.6s.7.6.9 1c.2.5.4 1 .4 1.

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (34724)
Category:	downloaded
Size (bytes):	87511
Entropy (8bit):	5.559925833994534
Encrypted:	false
SSDEEP:	1536:xEeXotGWXx53rATbm9e3o0+TYK5sgJLRWXaCZo:xExtBfrLuUYKi6Rexo
MD5:	5A88DD14E5B7BBFAAAE37DE4378EE112
SHA1:	6B327C0EB1FFB678D1EF752620D9CDBDA301BEA7
SHA-256:	0345A5B28BB0B2EEE06A6422DCEB002FE0009062E973A434ABB7A9AAF1B87819
SHA-512:	0DDFC27098A428A58CBA689C8EC69C5BEADEF4EF9600789A3C32B2282760FD3BAA68E7B927F432610AAC14126D5CBA6789E13E39FCDFB0C3F60790F6E6AC6365
Malicious:	false
Reputation:	low
URL:	https://www.umso.com/pricing?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2
Preview:	<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><link rel="icon" href="https://www.umso.com/lib_LUGoPiqXXlDptSWA/eljn5jc5doqj8c8f.png"><title>Umso - Pricing</title><meta name="twitter:title" content="Umso - Pricing"><meta name="description" content="Build your website for free and upgrade starting at $7."><meta name="twitter:description" content="Build your website for free and upgrade starting at $7."><meta name="twitter:card" content="summary_large_image"><meta property="og:image" content="https://www.umso.com/lib_LUGoPiqXXlDptSWA/6g2u3zp01e6vtzny.png?w=1200&h=630&fit=crop"><meta property="og:image:width" content="1200"><meta property="og:image:height" content="630"><meta name="twitter:image" content="https://www.umso.com/lib_LUGoPiqXXlDptSWA/6g2u3zp01e6vtzny.png?w=1200&h=630&fit=crop"><link rel="canonical" href="https://w

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	11784
Entropy (8bit):	7.95079460890271
Encrypted:	false
SSDEEP:	192:E0D0vFwJf0AItP3B5hY634UkzX9PCsF5v6aTh2tDbjZ+CevnwDHLULd/HC7Mj5S6:SvFqyhY68tKUv9st+6rULtC7Ik
MD5:	B0042CC8AB3732497791C5D639AB089B
SHA1:	BD70C60C45C20BAA7A1A5EBC677075AB42F61490
SHA-256:	D44C60F08A8E4CB9EE1914DF140166AADFBAAD7BE38503687C05082D7A0FA79F
SHA-512:	27E3F8AC1409A76FE987C5843B2ECEF1A46270DEE11B416296EF0073629E809CB0395D21DAA8861D64E64220CCF12C5D0880D6A9F75BAB162960036F60E68E9E
Malicious:	false
Reputation:	low
URL:	https://di7r6y9oc27j.cloudfront.net/st_xdCTWzCYkQXYraKJ/2?darkmode=true
Preview:	RIFF....WEBPVP8X..............ALPHG......m#9.T.g=..{....@w.....QQ......VXm?Q.ewH.j.,q.RH.2..8/.F...u....v.'s./.......<...<)Hk.>C..VU.h7.m......8k...9.m....zg..+...{.s..j....Fr$).]...ej.....$Y...._..70.K.>^..J8..HHX.S=.h?~E.#.m$I..#.}1Z}.m......3#.....m.L.r.eff..._.N.....m.......k.+.<.!=3._.."B.l.q.<.L.,..@\ ..'..../.G......G......G......G......G......G..........].<...JI..?<..Sj.dU.fk.uY..6u.:.....>G...E...."...+8..TpR..P..h.7...V.o_..O{.\#.....g......W...e9...pR.......#......p.\K..R!...L9......{........,.Y~$.42F........}...K.]v...G.`.W..BMgA.)..m%P....h2..*J....n.-:..hS......VS(.{..x.j....{,.....$..T..xNG...c)".4E%..p.3p.R.(.%r2...4!..R........H....!i0.D./.).F....+9....lP.7.MCx"-.-\...n.g..../B...J&.'-Ze...".q...T..C<.ll......h.u.2\|.<.....8.s..0..a..c6...R........+.fxv<C%$.G..,..b...l....p.[..n....0..C.\lE..w.;r5eI!j.V.......U..}.4.l".}.>.[....8..]...?.^...5g..#fK...M........p................51!t.M.A..p..^b.,.\|8.].8.\|.9.....v../......"...PKg.!Vz

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2700), with no line terminators
Category:	dropped
Size (bytes):	2700
Entropy (8bit):	5.841280863481452
Encrypted:	false
SSDEEP:	48:Ego2eJJn6IzUtJQSc8aQqSG4v/q7SWWdCEqjWkt08BCVd/lwKqBGW4yKowH6:aJd6SUtJfNrVlCWWWdtqjZlC7yKcT
MD5:	2E728431C43C8EF16E8AB3EC5256C1D8
SHA1:	C856B537A96793E8290427D35F6712A7B4BCCC13
SHA-256:	4AD4C5121E20F054248241AF5F267148ED75DE9DF249F9DBE00E82F227D66023
SHA-512:	A15E7625B05956C82628504D425A73CE11444366F7774FFCC0BCF6B0C8FC4B5CE29CCFECCAF08DD432FB66B3DD23271AFBEB2D7A1005B29BF6244E6A3856EC4D
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	32548
Entropy (8bit):	7.984910626232688
Encrypted:	false
SSDEEP:	768:svWoDu8sgD0oF/UZTZm3hcRfpB5tv116Lqhk:szsgD0oFcuyl1162
MD5:	8244A3E53C6E98204B5837529EDDE6B9
SHA1:	F7B9B489F31FA0B36C5CD66701EC962E488F33C8
SHA-256:	1308E0B870D3DDB0B6FFE313C468466D31D970F5A3BFA92B10ADB8E4A8FA7A00
SHA-512:	27562CBE3C3AA4C94D439C0985E3E66683A938654CFA26D4868A819D50C13F5ED13A53266BE3D76A5DA79DD9CCAC2DD7CA04B16D845CD84B2C2E1D9BBEB9EEEA
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X..............ALPH.".....m.8....z.F.......I.8.Pf.-....4...HZ.c.'.=o6.R.h.Hr"...........t.2u.f......\...e....#2Jz........v.6...p....2t$.V$I.}.H.....Gg....L2..h.133cd.7...Et..nQD@b.F.$.u...Ec....a.hj..wUu...M\ .,nH......f..@.u}.qw.......d......u....~f...... ..J..\.'..e.$..0............C......?G.s.?G'.J...n...X...1.B...;G..s.....a.8XK..`MC...+.L..?..[...B}..+..?#...[Z....DE..__.D(9...K..MS.u.D.u.4..K......36.:S..........T..P.U\|......4.t{...R5U..,3c...UT..x19d..9Z. .z...,..Ep....Q......aaC.Oc.Y...$.....u.g...c.[.x..c...8.-....I..Px#........1.N..o.-x..Y.M...........X-76....&.H.~.]...X.p......`.3B..@.m..i-.......P..aVZ...L..'....V.X ."^.i/.(...s...yU..w..j.{X!:...N.84`..9........A...G....ZfF......?.......C......?.......C......?.......C......?^Q~\|.v.'...Kh.....=.F(.OF..iCM.-...3-.. d.Se.HQ. .A..<G.M.B=.....<...L.V.6.=.:.&P.}[#.....y....?O#.p...(](.$pQ!=g......Au......=x..6.y.:L..A..E...M.Z....K.:...Y.t...&]w.u.o..Y..g........N.\V.....T.un

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Category:	downloaded
Size (bytes):	88751
Entropy (8bit):	5.414296471740167
Encrypted:	false
SSDEEP:	1536:2sHx8vawlWe2XzbStiSc6q1jboAmKum7EqIZ7d+/:2sHx8vzWe2jOtiSg1jboAmKum7EqCp+/
MD5:	69CB7809B5011312E716F29B3D19DCE6
SHA1:	833DABFB546D57065AEBA7190B5EE5A2428DFA47
SHA-256:	E039E607C78306C7E029A7FD0ECDB14F86456F16E1A5CE65AA26B4FDF1D38A3C
SHA-512:	4259C8F940CFE4B7EC384E5ABD855713DA7792A955A7B737B75E45E6559A90292ADE59D7CCAB381EA4C2D0FA5109B4ABD9BFA0887C05C9FB1A27469D5E198A69
Malicious:	false
Reputation:	low
URL:	https://m.stripe.network/out-4.5.43.js
Preview:	var StripeM=function(e){var t={};function n(r){if(t[r])return t[r].exports;var _=t[r]={i:r,l:!1,exports:{}};return e[r].call(_.exports,_,_.exports,n),_.l=!0,_.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var _ in e)n.d(r,_,function(t){return e[t]}.bind(null,_));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=30)}([function(e,t,n){"use strict";(function(e){n.d(t,"a",(function(){retur

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1123 x 412, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	78783
Entropy (8bit):	7.95324952898143
Encrypted:	false
SSDEEP:	1536:/MGAHaVqVJqO6OeRHoE1TBbrlTcfLQtmo6XLuJFrcNOyO8ZdHG8jsfi:/kHa3OeHTB1ALQt5EuJF5yO8Wo
MD5:	BC14544E15C96DC01B83B393750EAFB2
SHA1:	456E8E4CB9EEFBB0847A4B1D8B6F55E91AFAE6C6
SHA-256:	93C66E824ACE239C878453F875A403EAD2D82D0515E4199D20E22DF40FB54100
SHA-512:	0DCCFE2600AB8E4C0CB75476B8B88E0B5C6B022487E0FCFD98D7EE72B18C2AF1DE0DB3C563ADE8731215EC6DE3FADAA13D5252FEA71B5AC6384C6E1BC96090DF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...c.........J..]....PLTELiq."........R..5.....?.....C....x8.s8.x6.{6....p8..#.o8..........k:.j9.."........(....l9..0..+.......\|1.i9.i:../.............k9..-.....!.x3..+.....-.j9.r5..........m7../..............%..........................!.i9...........%.i9..'......................j9..'..........j9....j9.i9....i9......../...../.g9....i9..0.h9.......k8.h9....h9..'.h9.h9.. .i9.. ..,......../..............%..!....i9..'.g9.....#.y3..+.v4.....,.g:.......k8..!........,..........#....~1.{2....u4........)..0.....-....s5....j9........(...........&..)../.z2.x3..'.....+.\|1..............)../..".....................}2.w4.....,.."........).....#..(....r6.. ..$.....0.u5........'..&.s5....{2..!.. ..%..-..$........%.. .{2.."..&../..'.v4..'.w4..#...."..(....'..$.....(..,..#........-.."..%..... ..!..~.....tRNS.......................)..!..#.....0...%.*6.&".&S8=..Z-..aF?:1GD.Mwn.27c..g+U[...W.1..H.N.N,C...>6.7AlO.JH.b.\.?~.?...Z.S..j..b..Qu.....k............[....f.............ps

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	38
Entropy (8bit):	3.975176777217263
Encrypted:	false
SSDEEP:	3:YM1Hvg+7ovSdA4:YMiMC4
MD5:	F47775DBFE949C9DFDAED4A5B529EB85
SHA1:	685A2B8207F64DBA71DDF98CD5AEFB87A689A7F5
SHA-256:	353DC2552B6CEADF26D9CE4A7CAF1117E107DF1D787B183B33730D1842B5BA2B
SHA-512:	A52E2363B37E904094D3438BCEF06F1664E49FAACD4F3F1DFE76C3407600B5A69A0686FD2511B85A6CA9354700567EF073CA3DFC04950307D92B8BD28BAF7D85
Malicious:	false
Reputation:	low
URL:	https://status.umso.com/status.json
Preview:	{"indicator":"up","uptime":"100.000%"}

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1100 x 1276, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	137194
Entropy (8bit):	7.972225858327075
Encrypted:	false
SSDEEP:	1536:jy2AnSfAZ1vtmCQ+5PL8j/vR+qHEMxXOK+EAY9NmnZeFXSmG4I+CsCpFOG2pLClF:jieALFmCF5IDrNXOWO4FP8+CaiG1+Ym
MD5:	8BF58A12E053230D1AE2B6C6DD772B93
SHA1:	E0CA95CF3DDE64B98CCB970C9B3E56697061169E
SHA-256:	AD4BD0B6107ACCA0132759AA06C936C0A5FCBAEDB7D1675B1C18DE31951E23D2
SHA-512:	CCAED22D2BB3E2510026C42752622DE87C83CA9A04729E36ECCA9273958C48CC00D2C69439F275FA709FB476F6EF137C6EB45992BD1CAC2B5E5E850316A235F9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...L.................PLTELiq.....................555....................................-./......@AC......!"$<=?"#%678556f.g.c.c....%',$%(*/......&',...$&....h.. %h..!"';<A()-"$(...039.."@AC...#%..9.........+-0667...Yt..03...HKO,##><<...)..PQUEEH:..K..##&K(%Y..#%)< .WCC/..;+...[1-y$....h ..........j3/58>..9...UX\...#.....adh[_chC@ein...O97...,"z71...{......'.kotaQPptz.0Qvz..?6.80zGB...VQ.OH.6)$...HA...sRO.0$.pk...C43.I>.@6.QH.^Xh]\..........\|xsr.pn..F8.dW.^U...uhg...y\Z.ea.6(.....b[.~y......pj.....rk....da......zx.YN....\|{.kb....z........TG.../))...si......~v..................zH.x...8@_.\.......F...S;Nix.Z..Qu..u...Nt..I...AV..',~^..}..p7d.2..3wh\|.. ..3..3...K.3MM.B?y..n1...$+<....B..:0C.c..}.:9RL.......T..E..7N.,d...$(1Z$.Y..t..Gm...Q.....Q......t....$tRNS...$........ ..2)-7?G~.Q._.....e..g.......pHYs............... .IDATx...#..;.0s.....o..;..9QSq..QR.._g...b ....)....P. .P.N#....!#...d.?e....F..F[..cl."2.)...^S..X.w...R./.+

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2697), with no line terminators
Category:	downloaded
Size (bytes):	2697
Entropy (8bit):	5.845336744241413
Encrypted:	false
SSDEEP:	48:Ego2eJJn6IzUtJQSc8aQqSG4v/q7SWWdCEqjWkt08vCVu1nl7KqBGX4yKntY6:aJd6SUtJfNrVlCWWWdtqjZ7C01K6D
MD5:	E7A5A7888F6241CDFA5C3AF564B2017A
SHA1:	DCFB363BD53FE9138168F1F17A4C744651A39372
SHA-256:	4C4982AC6D7118F2798736583724690DB1E0E6488F5157F861830926B6F0BB4E
SHA-512:	640895109F315A30A2551F1F88DA1882801D8CAAFB909BBA01A16128EF5D35FF9D0379224E384317C6765CC2B2EA08462012DB099F5442BE9FF7FDFA7914C0AB
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/11236809420/?random=1721058605790&cv=11&fst=1721058605790&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2Fpricing%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20Pricing&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22344)
Category:	dropped
Size (bytes):	22345
Entropy (8bit):	4.856963685437267
Encrypted:	false
SSDEEP:	384:sDuy3p4gQkW731Id1utIMcV5M2kuyDKX5Vyr0868tDTot30/FKDoVKb8o4fovBFj:y7d94iMcDzXur00ZotENKEOl4fopFj
MD5:	F33FC4485741152871EA6078681D45E1
SHA1:	E0EEB648F35F23131820C2C9C00CFC79DE6AF2FA
SHA-256:	BD913FFB6E09D2416BE4D6DECA95B79B8746E442C8E7BD709794853212EEF41A
SHA-512:	791B36F992850C352FD2251B1DEB6F23949758EEE42A1413B4F922DCB43E3C038E495633C5F9EB4A19094DC4F7132401F5452F8825B05618B7AD75001A548DA3
Malicious:	false
Reputation:	low
Preview:	[{"id":"st_yjWwCAcrrTwyuqKH","name":"Classic 3 Column","version":5,"maxVersion":5,"status":"official","structType":"section","data":{"content":{"key":"s1","type":"section","props":{"style":{"display":"flex","padding":[30,0,60,0],"borderTop":"1px solid var(--color-border-normal)"},"element":"footer","children":[{"key":"b0","type":"box","props":{"style":{"gap":40,"display":"flex","justifyContent":"space-between","@media (max-width: 500px)":{"display":"flex","align-items":"flex-start","flexDirection":"column","justifyContent":"flex-start"}},"children":[{"key":"b1","type":"box","props":{"style":{},"children":[{"key":"copynotice","type":"textElement","props":{"style":{"fontSize":"1em"}}},{"key":"logo","type":"resizableMedia","props":{"name":"Footer Logo","style":{"marginTop":10},"container":{"width":200,"height":40}}},{"key":"socials","type":"dynamicList","props":{"style":{"gap":10,"display":"flex","marginTop":"1em"},"element":"div","itemAtom":{"key":"btn1","type":"iconLink","props":{"style

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2717), with no line terminators
Category:	dropped
Size (bytes):	2717
Entropy (8bit):	5.848007932189668
Encrypted:	false
SSDEEP:	48:Ego2eJJn6IzUtJQSc8aQqSG4v/q7SWWdCEqjWkt08GCVt/l7KkBGVb4yKlC1y6:aJd6SUtJfNrVlCWWWdtqjZiCfFK3N1H
MD5:	0FDB340AF27F9E31F062BC4CDD4015B5
SHA1:	D2C2543657149524B8DF6395C84ED39A05B706C4
SHA-256:	B0BB6D53C968DFABD03AE726B777C834BFED1960ED9BB610050BE23EE15D63AC
SHA-512:	4185F09A939D695DB36F9E4A90D9F2387ADACB14025CFC1EB5113398D883967A6149F59DCD87E7657A43D85C3A9A748E36F505A58EF3E56B6FE2E3C52B55779D
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	14676
Entropy (8bit):	7.969062957985182
Encrypted:	false
SSDEEP:	384:wzbIHarMopYcBIESlAmCQBud1lHbUCOTZoLrXrrrrr+ps/V:wzbnQ1qIEiAmCQsB3QFSV
MD5:	3902F9CCB2B8E19AA291F819DC229917
SHA1:	252D4F819992249697B98B8951B792609D1A33CB
SHA-256:	6C4BE839F4E29D79B7AAC6BBAFC768532581CA5E0460F626E27E41B4E6EC6673
SHA-512:	6786BAA7882EC99BDE82002A3530CA88DFAC4FEB5F398447FC70D0CB0C1FB03B893DF4EA9A838844BCBED5E65CE018D1C5EC277807E33A4EC40873D519024363
Malicious:	false
Reputation:	low
URL:	https://di7r6y9oc27j.cloudfront.net/st_DpulgycoFXEXRDEk/6?darkmode=true
Preview:	RIFFL9..WEBPVP8X..............ALPH.#....G&m.....\|EQ..#.v..{E..0....;8..p{mz. ..3{.-d..J.>a8.e...../._............o.....H..+..{N\N..$d.&.....w....0..+...Z~...Uuu..9...:..,.V....v:...ILB...q........cD.m.F.o...\|............................................Bt}).>....Q.}.=#..T...Q....y.C..jm........Y.]$..YH!u}.i...r.m....^.vqa.i....E..l.T.%....E ....tJ.>.C.U.0:...2...z..2.K.!-..z.....O..I...Y%d...2P.T.....I...g%..75.e.E ...%..~......*...X9F.)QvP.A..'...j..]._..bQ.[...i.y.;.C..&.l"Z.A]K...N.4.m.-...c..x8:...D.<.ZT.XTUV..u.>...a7....,..j.....oR.&......J....D..%ppI..b8..?..-W...a.......+......w..(..;.o6y.4.....G6y....zoc.Vn....Jd.....!....?xVOHQ...@...C......K...?..%....?Y .........(..ui2U...."t...+KA..\|..r.h.YO..d.QC5.......I.....z.V...m..t."P.}{3..Upy..(..`.....[..S...\|z..4$.....kQ..B..w.P...9.QghW:i.8)...(..\|/$.J...<..F.......;..!.P>...C...`.....$....]....KC$.h$.[..!.o..x.f.I.aa........B.....V#S.Is.f Z./...JY...t.H. ..(T..\|~.F...[..Bh".Cw..qI...$.D.

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Category:	downloaded
Size (bytes):	637305
Entropy (8bit):	5.361436795517997
Encrypted:	false
SSDEEP:	12288:v1q3V1fv6epC4bRLELcLpLjYFgVZKdFjPfBX1D+rjKBh86XC9qdcibE3IHwajNKt:NEmhVHy0nSN
MD5:	8D70D579BA2B8DF39256290C4AC00BE8
SHA1:	D528851C0C77F810702541B16DECD75AF6D83665
SHA-256:	3166EECDCBF2E0E9C156C45526150BC3B181462CF76777FCFF39C0829EDA4959
SHA-512:	A5AC83FF1A25DE68B2C692EC2481C83B751ACC566CB4DB17AC9482184BACBD3F2823E957B9D6F71BCA8BEE194BABD5CA4A7F1CCC3E292F2F42A8DFB398E51671
Malicious:	false
Reputation:	low
URL:	https://js.stripe.com/v3
Preview:	!function(){function e(t){var n=o[t];if(void 0!==n)return n.exports;var i=o[t]={id:t,loaded:!1,exports:{}};return r[t](i,i.exports,e),i.loaded=!0,i.exports}var t,n,r={723:function(e,t,n){"use strict";function r(e){l.length\|\|(a(),!0),l[l.length]=e}function o(){for(;d<l.length;){var e=d;if(d+=1,l[e].call(),d>1024){for(var t=0,n=l.length-d;t<n;t++)l[t]=l[t+d];l.length-=d,d=0}}l.length=0,d=0,!1}function i(e){return function(){function t(){clearTimeout(n),clearInterval(r),e()}var n=setTimeout(t,0),r=setInterval(t,50)}}e.exports=r;var a,c,s,u,l=[],d=0,p=void 0!==n.g?n.g:self,m=p.MutationObserver\|\|p.WebKitMutationObserver;"function"==typeof m?(c=1,s=new m(o),u=document.createTextNode(""),s.observe(u,{characterData:!0}),a=function(){c=-c,u.data=c}):a=i(o),r.requestFlush=a,r.makeRequestCallFromTimer=i},5937:function(e,t,n){e.exports=n.p+"fingerprinted/img/abnamro-4445e65420800f96f68cfc67a273f66b.svg"},1520:function(e,t,n){e.exports=n.p+"fingerprinted/img/asn-3d9b1bbff2f8f12105510992dbb37ae8.svg

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (651), with no line terminators
Category:	downloaded
Size (bytes):	651
Entropy (8bit):	5.6697686713361914
Encrypted:	false
SSDEEP:	12:qTjx8N/EPAvWj1ZzyzZ5gF49fR/yJWapvn5YlMVWvnxcdLVP5:0jWN/EPKw1ZzGgF456jpf5TVWfxcdLVR
MD5:	E73784EA0A8720B14F7E37911E266343
SHA1:	D37535BA427EBA636A3A23B27B6AA1E6070CF4BA
SHA-256:	AB6855173975A0F29E1C9C480C65B74C1DB3D3DFB30461E6807D3E25BA559076
SHA-512:	6D75BFEDA7E49B4831C82EFC7C2E49050CDE72A7EC041CF330A0C25D15034C69C91539F53AD7A49A458C1EDEBBD86388D41C051B4E1600A6C8B01C25A462D328
Malicious:	false
Reputation:	low
URL:	https://js.stripe.com/v3/controller-with-muas-control-e73784ea0a8720b14f7e37911e266343.html
Preview:	<!doctype html><html><head><link rel="preconnect" href="https://api.stripe.com" crossorigin/><meta charset="utf-8"/><meta http-equiv="origin-trial" content="AtD0WrnMwAPI4nWWCvreE+vpgPVz45SO/1fG1IZRNpBsdWZOZN6SKr0ynC11KuzrvT903WrEU+N9Ik/RpiCRTAEAAABbeyJvcmlnaW4iOiJodHRwczovL3N0cmlwZS5jb206NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzU3ViZG9tYWluIjp0cnVlfQ=="/><script defer="defer" src="https://js.stripe.com/v3/fingerprinted/js/shared-fc50a17743dac6193bf2b617ff68b6e7.js"></script><script defer="defer" src="https://js.stripe.com/v3/fingerprinted/js/controller-f772f0358c4c73c59a894ceca0c3958a.js"></script></head><body></body></html>

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 19060, version 1.0
Category:	downloaded
Size (bytes):	19060
Entropy (8bit):	7.986859768967028
Encrypted:	false
SSDEEP:	384:Jbk3jXJiLDvJAr8IwLJWc0ArjTZkJknAOW+jpLiN42HYnoU:EZGBkrAJLPTq1yjgNjHYnh
MD5:	E93BF0C418EC9CBEA03AF63FC6AB5C9A
SHA1:	DDF9DCCA2CF7E340C56ABB71680EF2F7BBE865C2
SHA-256:	01CA96CCFB1700616514517D4DF442F07EDC87C0359FF86D3250094E53E5C716
SHA-512:	2D458141736A30ADC8865F8B903D3F6555135B6543F7E18E6CC62DF8B4BBDB510024934F96525B39920A1FF2D67DA260DB785BCE75F866A75E85A9899DBDBA62
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/rubik/v28/iJWZBXyIfDnIV5PNhY1KTN7Z-Yh-h4-FV0U1.woff2
Preview:	wOF2......Jt.......8..J...........................>..:..b.`?STATD..v.....@..-..N..6.$.... ..$..U...:.........$..T.nev;...QQ.G.....$..2..S....p.0...Z...UZ.YS....L..m.2.....VD..Z....`...d.e.%.,X....=..]...?u.#.a.G..U..O.>...(....D...?..k.WS...v......R1s......{.A..".0(....2,\.dc.ox~n...........7...Zh'`..y6V_+z.u.F^...Yg...AU.`...0.B.....aC.....).g".\|.>rFa.J6...Z;T....W.o..~~.....2.N..0.Z..d...i\...}.K.............R2E03............$./.gH7a.....n...q..L;.m.J..$..........C.P..P.{.z.n............Yb.......,....j.iGA.~..6. .L..<.(.. QV^.!g.-..elZ........8x.......4....#;..`.[\...is4`.^8.0j.......9...=..o...w6...p.....?..]...2..Xa.U\...../.....Z_....P..A...!.a....d.....K@S.N....:v.;.D.0u.:..._N}9..(../-FmQ./-....2.abmd&N....^..........4..x.....l9.~..u...y...U4........:.Vce...f.#o.;...4.G.K........h.9.C.O..e...#..Z..........K<0......./k...#N.F..!..J...B...<......C..\|....w.ep.O..!....X.V.....nDD..". Ad.gL.K..[.."U.!..........+`..[.S..........b..i..G....0.^

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27961), with no line terminators
Category:	downloaded
Size (bytes):	27961
Entropy (8bit):	5.286428100745721
Encrypted:	false
SSDEEP:	384:FNqUOVZgwW82FA+Eaa4OMVb3ozzkpTh8oDVJPegPMZ+Wo9sYhqF:KZmA+EaaMVb3QwpV8oDLg+Wo9s6qF
MD5:	F3EC470BD3E2D9BE7615479589C21B36
SHA1:	B0BEBCC01144CDA2E30364A992C7D09CAC4C346D
SHA-256:	57E7211D6CF5AA6022EFEC2D332F1337424926F485AEAECB976E67267E4CDE41
SHA-512:	3AA3D2017A043669CE3D539988BE10829096BD4A4FF6CC78ABF29D5CBF2E6ABF9851E4D899C6CC68FC74239AC4DE17D69E739E9243D7D231BCA1FAFE1C19B890
Malicious:	false
Reputation:	low
URL:	https://nextgen-widget.vercel.app/static/css/main.90e78f57.css
Preview:	body{--brand:#3350ff;--color:#24292e;--color-lighter:#5f5f5f;--color-lightest:#8c8c8c;--color-danger:#e03131;--color-warn:#db8f00;--color-green:#28a026;--bg:#fff;--bg-01:#fafafa;--bg-02:#f5f5f5;--bg-03:#e6e6e6;--bg-header:#fafafa;--background-darker:#f1f1f1;--input-bg:#f4f4f4;--input-bg-hover:#f0f0f0;--input-border:#ddd;--input-border-focus:#686868;--border:#eaeaea;--border-light:#eee;--header-bg:#fafafa;--secondary-bg:#f4f4f4;--active-bg:#dfe5f6;--active-border:#63a1ff;--active-color:#193fa2;--widget-color:#000;--widget-color-lighter:#222;--widget-color-lightest:#959595;--widget-bg-01:#f8f9fa;--widget-bg-02:#e9ecef;--widget-border:#eee;--widget-buttonColor:#7b0fff;--widget-buttonHover:#ced4da;--widget-active-bg:#ced4da}body.darkmode{--widget-color:#fafbfc;--widget-color-lighter:#a1a7ab;--widget-color-lightest:#777091;--bg:#080e16;--widget-bg-01:#2c253d;--widget-bg-02:#372e4d;--widget-border:#534e64;--widget-buttonColor:#7b0fff;--widget-buttonHover:#5b09c0;--widget-active-bg:#524080}bo

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65535), with no line terminators
Category:	dropped
Size (bytes):	591673
Entropy (8bit):	5.528038607017617
Encrypted:	false
SSDEEP:	12288:wcnCELqNtlzNCmHjrmAh4Bs8ZSVSymMqFr/7UjRGgghl6Hv:XnCEOHGmHjrq6Hv
MD5:	E9671FCF25075AA655A2B0FB269CBD95
SHA1:	F1625AC7C5E3E577C377AC6065A995BF4F6AE72C
SHA-256:	BBF363B2C74DC721773A148EFF1E84D64BE1F2131D28E6AD9CA6DAEE606C4EA3
SHA-512:	16D045E97F7739BD2ADAD52B3B9F92C392BCEE661239280724B0B302D281B78E39B90C542B2885E8CFED622CFBF51A1699179A44F82290CDFC93AD7FC6596781
Malicious:	false
Reputation:	low
Preview:	(window.webpackChunkStripeJSinner=window.webpackChunkStripeJSinner\|\|[]).push([[3712],{10723:function(e,t,n){"use strict";function a(e){c.length\|\|(i(),!0),c[c.length]=e}function o(){for(;p<c.length;){var e=p;if(p+=1,c[e].call(),p>1024){for(var t=0,n=c.length-p;t<n;t++)c[t]=c[t+p];c.length-=p,p=0}}c.length=0,p=0,!1}function r(e){return function(){function t(){clearTimeout(n),clearInterval(a),e()}var n=setTimeout(t,0),a=setInterval(t,50)}}e.exports=a;var i,u,l,s,c=[],p=0,d=void 0!==n.g?n.g:self,y=d.MutationObserver\|\|d.WebKitMutationObserver;"function"==typeof y?(u=1,l=new y(o),s=document.createTextNode(""),l.observe(s,{characterData:!0}),i=function(){u=-u,s.data=u}):i=r(o),a.requestFlush=i,a.makeRequestCallFromTimer=r},64198:function(e,t,n){var a=n(12897);e.exports=a},14771:function(e,t,n){n(80290);var a=n(5379);e.exports=a("Array","fill")},9554:function(e,t,n){var a=n(64198);e.exports=a},24883:function(e,t,n){var a=n(57475),o=n(69826),r=TypeError;e.exports=function(e){if(a(e))return e;th

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	13702
Entropy (8bit):	7.946532885327951
Encrypted:	false
SSDEEP:	192:5pXbDX+DvdMgVASSEaoJwifrjCa0S+8aWqB5iiLvQUcLLV8ewWdVt/rfqUI7L:HALShoJw0rVtPqyiLvQFWeHKp
MD5:	4FBD7A67B5BA874E00CD70F85FAAC575
SHA1:	492975A3AB2367CF20A9647D6E12F8762AE04E1A
SHA-256:	250927C01E7C78D0B72522883234DF9B0000AA4ED77FFDA088522D3F8E85A340
SHA-512:	749971ABD44CA6245ADE4C109AC45E8043D41FB339AF2D3A4D3BBC01E0B8DAD0BF839A5FE284DAE0FC0E13F01C2AA8A5886C526BD9DD6E0CE2B6A6BB26408442
Malicious:	false
Reputation:	low
Preview:	RIFF~5..WEBPVP8X..............ALPH.......m#9....^{3..^.1.....LyfU......x..G6...h.pg7jQ8..t..Q..ZA..Q..R..c...\|.4...5..m.".QUu.....Rf..!b...>63S...3fG.l..qg....f.K5]m.....6.#I..c..{.j.+w...6Er.m;#"...-.Y.Xd{. 0..$033{<b.-...G...Eff......eA..[MU...Z.WDF..o("(A..7..j./.,3.8. J./I.m.Vt^"I..Bp....C...t.J.......!.m#I.b...1..zV...................................................O....#....M...5...Zu.p@.,Z.F.=...~.J..}..i..V,..{./6..+..\...y.wl.Mgy..9r..V..4l...d6.e....5)h.f.6...kMP...y..T...W.m..<(r.tkV."...6,..l...2rVE2.!3P.b.<_......LxU...4..Y`d..F..%HU....c`.&V.o.....vx.=.r.!.X..^oc..R..(........]v.{d......~.c.y)...y.,..E..w{rS...x..ID..8.aT...6.3."e.S.4)8..K..@.g..S.>.).P.].J.-3c..wpv.....>.(.nE....u.....N.......a....;..wv:.u....G.\|5.u.^........d....o.b.u..=}#...;................6@.......A.R.....H51...l..5.5....r.T]....<....,R..#".s.ljj.KM4...:s..W...E..&.a_..K:s."QU...1.o..!pb....1....TLO@l....6,*W....ka..D.B.....Y."z.bcP.G...e.if..h^s....z.d).o..v

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	11784
Entropy (8bit):	7.95079460890271
Encrypted:	false
SSDEEP:	192:E0D0vFwJf0AItP3B5hY634UkzX9PCsF5v6aTh2tDbjZ+CevnwDHLULd/HC7Mj5S6:SvFqyhY68tKUv9st+6rULtC7Ik
MD5:	B0042CC8AB3732497791C5D639AB089B
SHA1:	BD70C60C45C20BAA7A1A5EBC677075AB42F61490
SHA-256:	D44C60F08A8E4CB9EE1914DF140166AADFBAAD7BE38503687C05082D7A0FA79F
SHA-512:	27E3F8AC1409A76FE987C5843B2ECEF1A46270DEE11B416296EF0073629E809CB0395D21DAA8861D64E64220CCF12C5D0880D6A9F75BAB162960036F60E68E9E
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X..............ALPHG......m#9.T.g=..{....@w.....QQ......VXm?Q.ewH.j.,q.RH.2..8/.F...u....v.'s./.......<...<)Hk.>C..VU.h7.m......8k...9.m....zg..+...{.s..j....Fr$).]...ej.....$Y...._..70.K.>^..J8..HHX.S=.h?~E.#.m$I..#.}1Z}.m......3#.....m.L.r.eff..._.N.....m.......k.+.<.!=3._.."B.l.q.<.L.,..@\ ..'..../.G......G......G......G......G......G..........].<...JI..?<..Sj.dU.fk.uY..6u.:.....>G...E...."...+8..TpR..P..h.7...V.o_..O{.\#.....g......W...e9...pR.......#......p.\K..R!...L9......{........,.Y~$.42F........}...K.]v...G.`.W..BMgA.)..m%P....h2..*J....n.-:..hS......VS(.{..x.j....{,.....$..T..xNG...c)".4E%..p.3p.R.(.%r2...4!..R........H....!i0.D./.).F....+9....lP.7.MCx"-.-\...n.g..../B...J&.'-Ze...".q...T..C<.ll......h.u.2\|.<.....8.s..0..a..c6...R........+.fxv<C%$.G..,..b...l....p.[..n....0..C.\lE..w.;r5eI!j.V.......U..}.4.l".}.>.[....8..]...?.^...5g..#fK...M........p................51!t.M.A..p..^b.,.\|8.].8.\|.9.....v../......"...PKg.!Vz

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	1249
Entropy (8bit):	5.242453121762845
Encrypted:	false
SSDEEP:	24:hYYIzD6yJRA3ZsjNQCRtgoLY95Mu56+eDHHLFCOXAkRcfRrzd0Ll72rKQk:rq6Kj2CZLY5Mc6NDLYzkYKLlOM
MD5:	F58515DFE987F7E027C8A71BBC884621
SHA1:	BEC6AEBF5940EA88FBBFF5748D539453D49FA284
SHA-256:	679E7E62B81267C93D0778083AE0FD0EFE24172FF0AC581835B54165B3D9ED43
SHA-512:	F085346A38318F7935D76909DB0367862924CC9B0D96256F7FF4E8999C041E610BBCDE8CA56C92673BDE0991C85E9C9D9B6726ABD91D0C3177462C80D4A99140
Malicious:	false
Reputation:	low
URL:	https://simerra.msk.su/favicon.ico
Preview:	<!DOCTYPE html>.<html style="height:100%">.<head>.<meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">.<title> 404 Not Found..</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</style></head>.<body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;">.<div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;">. <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">404</h1>.<h2 style="margin-top:20px;font-size: 30px;">Not Found..</h2>.<p>The resource requested could not be found on this server!</p>.</div></div><div style="color:#f0f0f0; font-size:12px;margin:auto;padding:0px 30px 0px 30px;position:relative;clear:both;height:100px;margin-top:-101px;background-color:#474747;border-top: 1px solid rgba(0,0,0,0.15);box-shadow: 0 1px

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (526), with no line terminators
Category:	downloaded
Size (bytes):	526
Entropy (8bit):	4.844995662196588
Encrypted:	false
SSDEEP:	12:c4GJ0k2lvgyT6d1uOMXUZsCxYADLsdfPw3CgrR5jddeU7nu:c5D2BtT67uOMXUZjxYOLsOCgrN80u
MD5:	D96C709017743C0759CF3853D1806BA5
SHA1:	72E21587610C49C8305A55E71F73FA88ED618205
SHA-256:	BA2338AA6670580269C762F51C4291DAEF913201AA8F4D4FD166C1A878262652
SHA-512:	974E260ED8BD1D99628FC3248F07179F6EA228E37A6B9D3EF906DBA57571F2DF54D73F93D1F3460902D28A90BD4793BCA35477B2EF8FBF424B9112147F04BCCF
Malicious:	false
Reputation:	low
URL:	https://js.stripe.com/v3/fingerprinted/js/m-outer-15a2b40a058ddff1cffdb63779fe3de1.js
Preview:	!function(){"use strict";var e="https://m.stripe.network",n=window.location.hash,t=/preview=true/.test(n)?"inner-preview.html":"inner.html",o=document.createElement("iframe");o.src="".concat(e,"/").concat(t).concat(n);var i=function(n){if(n.origin===e){var t=window.opener\|\|window.parent\|\|window;if(!t)return;t.postMessage(n.data,"")}else o.contentWindow.postMessage(n.data,"")};window.addEventListener?window.addEventListener("message",i,!1):window.attachEvent("onMessage",i),document.body&&document.body.appendChild(o)}();

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	29616
Entropy (8bit):	7.990661208440681
Encrypted:	true
SSDEEP:	768:NEtOYZX7kMSucNfU1YHF8pQe/4xbPv3qbdw9AeMNmtR:NTeXlfWf0uw4hCbdw9hxtR
MD5:	683061792C3A1642A0EA769BE8304C0D
SHA1:	64C9660EBF991A3F927AFB88D725616B80CF372C
SHA-256:	CE1B81E2EF75B04FBB1AF262AB0C9986ADBA818C5C871C32BB9CE9CB267743A3
SHA-512:	8B3C352A86996545B3C3C87659B7012C90F8DFF035FB20A475E00CC29CA5D9E04B96516164CBE152012F95DD9D9E365DEC06B39BED0B64D96997020FB77B2251
Malicious:	false
Reputation:	low
URL:	https://di7r6y9oc27j.cloudfront.net/st_SgsUvIflyiJLKbkn/5?darkmode=true
Preview:	RIFF.s..WEBPVP8X..............ALPHO%.....$)Re...R..<#b.2.l......A.rC.4.!.V3.R.8c.O.P....x.I..O..M...6..E.K..#......$.g.....m.m..[mmpZ.m.m.m...m.K}..>{E....~@).KD8R#..dA....f....S$...gUu....m\ '..q.....I.,..]..B.]...1N.. .}Y....z]W...kf.#.E.-.V...V.3.6..#..;_tlkS$9.DT....3......03.)...m....3K...........Y.d.m. .O.... ....]V....4...c?`......^....Q..'2....S..!F....@..f......-..>....)..F.<..$}>.a...].'...@.]f.......3K.$V...-I..p.....H.;.O..&....../.g..1.E.$..k..P.... f.;.Q.n........~C.d......X..}56....L.kp...]'~.O....&.0.kf.......,.S...}5.n.\|.Nf..k../......~....Y..~..}.w./`..}5v.h8\.......j...i...._..2k..X.o.9...F..;.4.-.q.5\.._.........8.......3K..V..Wc[.t...8.;.../w..`1.3..b..}..V.)3Y./`.Q...8..+.q.w....,~.O3)_.\|U....}.;,...TO.jlF...g8T....:..xR../0..P1..q..(_..=..f5T..j.....`....\.{.:..X..P.~..q.5.R..d.gv...V.5IU...G......(7Z..P..^.8..0n.._.VG..I..O.........<D@v....6...0.0........q......f.i28..^v.....}.:80...y..E.......Dk.gt...J;U....%W.[.0..

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	26
Entropy (8bit):	3.7192945256669794
Encrypted:	false
SSDEEP:	3:YAfCks4v:YAfh
MD5:	06DF412EC8BF6B9C0D0CC383E102B811
SHA1:	8CE76198DF7039D24C723A1F3124739B131ED244
SHA-256:	31F1A58A31D35BD468694DFF16A62AC77E7A6DF8D7B9E1431ECCB7736049C1D6
SHA-512:	0148808587B498404202E94F4BF8EC0960D8FCBA33A69A06168CD82D3AE2303251AB74071FE258272D15996FB901631B8551D0323C3A5460C35C744EB50083D0
Malicious:	false
Reputation:	low
URL:	https://api.umso.com/me?v=5.1.8
Preview:	{"error":"not logged in"}.

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	84
Entropy (8bit):	4.764707460454462
Encrypted:	false
SSDEEP:	3:fujZoStkORnThU0/SkXRoGdRqiYn:fujZoStHRnThtPXRVRS
MD5:	B17C75A639F7F9F2F285DD93B8890F6D
SHA1:	8D5B2B8CF61D272B53FC45E71155757B89F977D3
SHA-256:	C5038ED34A0D7D6CE738C20C48CA8D4204BA31B76450E73090E1BD862604E009
SHA-512:	7C55145EEC8B059FB2A4DCBD374ADBBCD4CD2483E7DAA88FADF86444E02FED053BB07915A904E6DE288B6A0A87CB7571837F4468E17068088EDD8120D2BB431D
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSJQl6IWG_1tN5pxIFDZFhlU4SBQ1QC6-wEgUNNYZUHBIFDf3zgxE=?alt=proto
Preview:	CjwKBw2RYZVOGgAKBw1QC6+wGgAKHw01hlQcGgQITBgCKhIIClIOCgRAIS4jEAEY/////w8KBw3984MRGgA=

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2698), with no line terminators
Category:	dropped
Size (bytes):	2698
Entropy (8bit):	5.850108550982164
Encrypted:	false
SSDEEP:	48:Ego2eJJn6IzUtJQSc8aQqSG4v/q7SWWdCEqjWkt08vCVu1nl7KqBGX4yK4MaH6:aJd6SUtJfNrVlCWWWdtqjZ7C01Kk
MD5:	7698597C07DC87B5BE2B8B22A3DF7B2D
SHA1:	E754E4EE3387DB1146533356AAEF9325D1A0E1A9
SHA-256:	3EA0C1EFF736381F8FAEEB3617283BEE36BEDDBE4D6C0A040968713AEA5B95E6
SHA-512:	48885A58BD0661C8830F37A0DDBDBBDC52A86C191A9A87D69A7C13CC5D8E834BA5E49337E9F32483AE7D7A0DA043BFF2A166B18F6EE5869AD13B4F529A2101C4
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2897
Entropy (8bit):	3.943735580509134
Encrypted:	false
SSDEEP:	48:2lPXkoxduvPlXZJZF0Br/xnELGYfhGX81g6/vC3XNLWzYg0mi8i27GWMYEM+xUBM:YPXRMHlpJZF0BrJp98v/6NKzYg0H8i24
MD5:	D6830806D5F0173C377E35F0FDA015C5
SHA1:	BEC242BFF7995576CAE35250BC9E14C5ED3D1681
SHA-256:	62C0A8041B3BB5945E32B5BD8067A8DA50306611ACF5B1587D0F7BCD2FD5AC63
SHA-512:	4ECFEBB9B43A08C6475B54B1E5BAADD4F469544B4090C37C58A941A350F62C124F5CDE4D18BF7CF8A6686DAE51B82FA2012A0AF49F8ABF61E60152649A70292E
Malicious:	false
Reputation:	low
Preview:	<svg viewBox="0 0 140 34" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M36.8 12H51v2.6h-5.6v14.6h-3V14.6h-5.6V12zm13.6 4.7H53v2.4l.5-1a4.6 4.6 0 0 1 2-1.5 3.5 3.5 0 0 1 1.2-.2h1.1v2.7a9 9 0 0 0-.6 0 5.2 5.2 0 0 0-.6-.1c-.5 0-1 0-1.4.3a3 3 0 0 0-1 .8 4.1 4.1 0 0 0-.8 1.3c-.2.5-.3 1.1-.3 1.8v6h-2.8V16.7zm20.2 12.5H68v-1.8c-.4.7-1 1.2-1.6 1.5-.7.4-1.4.6-2 .6-1.8 0-3-.4-3.7-1.2-.7-.8-1.1-2-1.1-3.7v-7.9h2.8v7.7c0 1 .2 1.8.6 2.3.4.4 1 .6 1.8.6.6 0 1 0 1.5-.2l1-.7.5-1.1.1-1.3v-7.3h2.8v12.5zm4.8-4c0 .8.4 1.3.9 1.7.5.3 1.2.5 2 .5l.8-.1 1-.2.7-.5c.2-.3.3-.5.3-.9a1.2 1.2 0 0 0-.4-.9l-1-.5a9.6 9.6 0 0 0-1.3-.3l-1.5-.4a14.4 14.4 0 0 1-1.5-.4 4.6 4.6 0 0 1-1.3-.6 2.9 2.9 0 0 1-.9-1c-.2-.5-.3-1-.3-1.7 0-.6.1-1.2.5-1.7a3.8 3.8 0 0 1 1.2-1 6 6 0 0 1 1.8-.7l1.8-.1c.6 0 1.2 0 1.8.2a4.9 4.9 0 0 1 1.7.7 4 4 0 0 1 1.8 3h-3c-.1-.7-.4-1.2-.9-1.4-.5-.2-1-.4-1.6-.4l-.7.1a4 4 0 0 0-.8.2 1.7 1.7 0 0 0-.6.4 1 1 0 0 0-.3.6c0 .4.2.6.4.8.2.3.5.4 1 .6l1.2.3 1.6.3 1.5.5c.5.1.9.3 1.3.6s.7.6.9 1c.2.5.4 1 .4 1.

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 71 x 98, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPl29yst/xl/k4E08up:6v/lhPoIst7Tp
MD5:	595E3C69FE0429DC750DD6611A5D3654
SHA1:	0A036655885B6A1CA11A5D462D6AA2F7C3B190FE
SHA-256:	945DDD40F59B23E8FD4A131AA3C198F7B79D6BBD8854E68917F5EF6A09AEB11C
SHA-512:	82CA162EB5496112F0A4DEE400A619D441528435C7D90BA089DE7EAA7194665A813AD101D1590A43D30B009D093F29F5416DE1B374A0C0E9352B2293C3E74EAC
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8a3ae756188b0f7f/1721058581436/3gRK5Ud8sqOFSpR
Preview:	.PNG........IHDR...G...b.......Y.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 950 x 1038, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	47233
Entropy (8bit):	7.9646178396547525
Encrypted:	false
SSDEEP:	768:SM3FLzYoAcWtf8Sk3Y8DfNOBv9je4YdAe1j6ZQPyfl+2DvpFmPsHZ4riQvW:LFLzYoAht0R3/DfER9wd6oydnDjRH4ip
MD5:	7D8040C66F3BBD0B76F5DBEDE1259489
SHA1:	C037E701DC232B45C394AAFE9C40D44B1A5062A8
SHA-256:	6B36B8820052779CA313D90A70936D261BA6A1831916783846522BDE554CBFC6
SHA-512:	5A1DF2B61FBA2111AFFD6E5E5B94669C26E437C459BFC2F8BFABB444706DEDA935D93E62E2609823DDF5302BD2F5071A5E022178E944B3CF36A0CD02EEF8EF92
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............T<....PLTE24B,.6 """$$&$$$.0:Liq"""02>02@""",2&& ###((.###&(02<(.(0"""###!!!$$$((,+,4&&(,.4%%%###0 ((( 2$$(..822@ $$$,.8$&&&&& (,&(,.08b......0<.........b.....a..c..b........3NdH..c..c..c....=(I^.8I_..Ek.S......7H...4I^c..2FY-Rk;]x?d.8Pg5SkDp.c..1I^@h.?_zS........$ATM..0CT#@Rb..'G]^..-@OV..Bk.&7C7WqZ..<Ri9Sk6Mc......>a~Ft.7DW...b..b..W..p.....(Lc...Q........a..c..c...1>.2?.-; S.../=J..,DU,PhX..?r.c..X..U..J..O..V..M...-:/<H.1@./;.1=W..5Zpb.../=.0>O..b..W..`..3SgH..Q..^..U..R..,LdM...0=K..c...,9..;...]..J..9`sY..Z..^..[..9b}.........b..=DI.....#'+W`f.........dnu:o..........q\|...$........"~.........-:..'6e.JRXN..L..06:H..8j..7H!;MW`g*Nf'H^....3C-SmW..4b.G..J..B...Wr@\|.<s.2^z0Zv>v."?R%EYE..T..)Kb$BVD..R..+PiS..P..?y.Q...(4.0?.!+~..05:]..~.....>......tRNS...p.......x...`.P....hH.@....0X. 8....0@8..((....@. .`..@....@.. @`@..@.``.P.`.....0....p0@@.`.@.............p....@...P.... .H...@ `.......p0.......h.L....@.P.o..ox.(..

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65465)
Category:	downloaded
Size (bytes):	2372644
Entropy (8bit):	5.525177839096687
Encrypted:	false
SSDEEP:	49152:yVGLTnici8wJyJeJW3XOkzB94CHfvBg/fAJtcDigI59ZeVBm6dLlj60zzFItfTM:vw4v5fvq3A5fZeVBDlL
MD5:	CC79A886CB6E405CA993797D29BD55A0
SHA1:	FD87ACDB204A352C14FFF3C3CC9E5521C8F792F9
SHA-256:	BD74E7D60AAA1DA21030BB2B1F99622B23DB9654C5BD6DEE9BE636D687E7C4DA
SHA-512:	5E07D68602FE5FD11788440864F582647F57E92CA04CD372FC38123AEF45539B427818B1A4BD8812371814C0E48745A2E6AF3CBE6720F0CBD5757788B575F684
Malicious:	false
Reputation:	low
URL:	https://app.umso.com/static/js/main.07ccc171.js
Preview:	/! For license information please see main.07ccc171.js.LICENSE.txt /.(()=>{var e={29282:(e,t,n)=>{"use strict";n.d(t,{m:()=>o,v:()=>i});var r=n(47313);const i=r.createContext({}),o=()=>r.useContext(i)},35337:(e,t,n)=>{"use strict";n.d(t,{A:()=>l,Z:()=>u});n(48093);var r=n(31881),i=n.n(r),o=n(26514),s=n(33256),a=n(13777);const l=()=>{const e=s.Z.GetActiveOrgId();if(e)return new Headers({"x-landen-org":e})};function c(e){const t=new Headers;for(const n in e)null!==e[n]&&void 0!==e[n]&&t.set(n,e[n]);return t}class u{static Get(e){let t,{path:n,success:r,error:i}=e;fetch(o.Z.API_ROOT+n,{credentials:"include",headers:l()}).then((function(e){return a.Z.Check(e.headers.get("x-umso-appver")),t=e.status,e.json()})).then((function(e){r(e,t)})).catch((function(e){console.error(e),i&&i(null,t)}))}static GetBlob(e){let t,{path:n,success:r,error:i}=e;fetch(o.Z.API_ROOT+n,{credentials:"include",headers:l()}).then((function(e){return a.Z.Check(e.headers.get("x-umso-appver")),t=e.status,e.blob()})).t

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7843)
Category:	dropped
Size (bytes):	374159
Entropy (8bit):	5.591258576165013
Encrypted:	false
SSDEEP:	6144:J4ZgqOW9aSAfgDWzTiwP/LFg5W/z8vFoAtbs:CZO6aSnDo1rd
MD5:	08CA0E709BF46947D3C7A793B9083188
SHA1:	D7D2B26D4BBFCD67AC847EAD82B1EC0892637A7C
SHA-256:	CC6427EA22C188F2E3BD43797A729AB6717BAD5F7C10D8D2C755DE375A97DD98
SHA-512:	E502F902FD90498E17307F18240BEE914471342171377836A908B7752EC26C8A4B510F9C33C969FFE152D933C6AB7C4A484D67BCDFEDAC8D4263A494723E1F58
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"4",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ads_datatos","priority":26,"vtp_instanceDestinationId":"AW-11236809420","tag_id":12},{"function":"__ogt_1p_data_v2","priority":16,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vt

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 1406, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	134447
Entropy (8bit):	7.98909684984641
Encrypted:	false
SSDEEP:	3072:Cqnc51tMsgkGKiJotmqMGRn/cyHbEM56b8zTvmk:Csu1p7QakYbbYYzr5
MD5:	F9671E1F6A8C6009516DF937F7020A1E
SHA1:	953F8C16707C23F407E0EACD11BD3EF66970970E
SHA-256:	354C556CA53AA2B14A99E78464815302337A5409EC9879D4A9595C9A0D2D66DA
SHA-512:	B249C18BC22498CAA2955B471333E695A7ADBE033EA604D197066DBA4A28F4F57FBFFC9030EC9A5A29B6AD5410C3E037455F277DE17CB5A885A0D354512AB524
Malicious:	false
Reputation:	low
URL:	https://www.umso.com/lib_ppHbngvSkiYmyFdO/m7f7yovyl5ocidz5.png?w=500&dpr=2
Preview:	.PNG........IHDR.......~...........PLTE............... !!..............................7DD...4AB...&34........&.....#......78..........G....:;...........2=>...../.....!.C................=<GG..-............%&%.........qvu....(..............!./.........`hh......MWWhno.Lu\|\|GQRBLL....5.:.......S\\.........k}~n....nK........\|..q.........G#Xbb.........fww5"..........v...................".......XT8#...E.^rt8.....z..$...&(Wlm..5......\.........g1.00/...w:.........................U#...P...x.U+...bG2sW@....gNde..q..d.gN.fA.W4.....An..G.....n>.}L.Z:.t.Z.e{G.v_....Y^^\.tM....R..n..14...v........g_/..E...Oc......^...nI..%...~.j...,>_p..@B./.yC.L.~.........z.YW.V..r.pjc.k....qm".......&l......n.....J.....@h8.@..R...L.J..@...c.f$j...PJ....2.}....A....[tg.f......pHYs............... .IDATx...o#Yv7x...q.$.x..b.U...#Q.Q-!...#..G=H.4P... .....$...5..5U..@&..d..A.z..A..v~U.......n....,f....s#.R.Y.T./S....q#..{.=..s.\.p.....\.p.....\.p...

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 94456, version 1.0
Category:	downloaded
Size (bytes):	94456
Entropy (8bit):	7.997438114936267
Encrypted:	true
SSDEEP:	1536:bLuXdI/aLLNRW5nK1AgLU0q0leHCGJ9kAWrqwCobFG7hrMGqEY4VAEpDd7Urv1Ho:vuXXSK1AgthHGJ9kAWrqwTby1bFY4VAi
MD5:	7B6DF8BD8CB08FCBAE484F0565F109F0
SHA1:	EFBFAB1216FA70B9DFCC057CCA3CBF12E389A3FC
SHA-256:	BEC1AB297921DA79AAF53EBF368EA24956EFA37811E34E45C810DEA90FAEF024
SHA-512:	92AE06D0FB40F8C6503E9F8AA0F75C17EFEF4E30409829F2EEC9169DE80034C194007BEBA9452113E55B2360FBD3329274C9EF55CF190447F09543BA9A69BF64
Malicious:	false
Reputation:	low
URL:	https://app.umso.com/static/media/Inter-Medium.44347a3a64d08cde08fa.woff2
Preview:	wOF2......p...........p...........................~...p..N.`...p...L..l..4..6.$..d. ..6...G[R...Lj.m..ZE.\3#...>..:.._[e..sd..1.$...m...O.5nS.....v(..YX>.J+............../?....l.7..M6..@.DEP....=....$H...Ju.Jo.f..d.-rg..<.^6!g,...M3.U.....q9...-=z"..c2...JXz/'6..%..+...e6.u..f...H...A..(...=.1..../...[....^...E.@1y.dG...`Fo&..o.~}{....m..I....wq....nF.x...>R}...T.R.T.. ..58...__=...f...E4.#{J3S.../.=...R.z..r.=.e.z.@..f.m....z(....7b....].w....;...A..OrT..:....B..z.hQ=...-:<j...m...q)...p'.o.!....@...k}..a....O.2l....F.=\|(.~......F.c..T.....U.DE.DeC-.X..T..B$.$.1.+>l....l......2....0.#8.&.........[.6..K..."..,b..>...Fg..j..Zv=fx.O:u.7..{%~.9_.\|?..+.R.[.._8k,...{.lG.Ki..h......}^.#.T..&..w8`Z`}..g.:..G.+...........T....0.zP.W....UD..Da.]..-F.oq?.....M,R.[...k.....?T.J..9?.....~P..p9.n..#...2..%...Z]Y............D.'K...(j.).3.F.F...@..`..1....a(..aW.k..g.b......I..L.........2..'x....D....8..^}..)+...s..\|..9!..j.....:. H#-...3,6..P\..K>.._..3.

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	246193
Entropy (8bit):	5.260804504690794
Encrypted:	false
SSDEEP:	1536:KHrSb3WIyrnEsg7TBodP7UwRzDfa5SDGFa5m5wa4PEkA8vxn9gjbHB6LQjoqdGSM:CcWIZK0Fs8vB6LQjoqTtCd5PlaIN
MD5:	6420DCD8B61CA16582E77EDC08094B3C
SHA1:	803A98302C222670522B43DAD65A873A7728EF50
SHA-256:	E5CD177679849364C2F5A9A970A929674B957B96CF7856B6FA826D15E22F06DD
SHA-512:	1024C2724DAA842291729333CDD254A9511A975BDB0E27CAA5B39BB86042A44B4FA395CD26E8029188D06BC3A8CB273F9AF432E661FD95C73166DDFADE4698A1
Malicious:	false
Reputation:	low
URL:	https://app.umso.com/static/css/main.6ce04055.css
Preview:	body{--brand:#3350ff;--color:#24292e;--color-lighter:#4d4d4d;--color-lightest:#767676;--color-danger:#e03131;--color-warn:#db8f00;--color-green:#28a026;--bg:#fff;--bg-01:#fafafa;--bg-02:#f5f5f5;--bg-03:#e6e6e6;--bg-04:#e8e8e8;--bg-header:#fafafa;--background-darker:#f1f1f1;--input-bg:#f4f4f4;--input-bg-hover:#f0f0f0;--input-border:#ddd;--input-border-focus:#686868;--border:#eaeaea;--border-light:#eee;--border-dark:#d1d1d1;--header-bg:#fafafa;--secondary-bg:#f4f4f4;--active-bg:#dfe5f6;--active-border:#63a1ff;--active-color:#193fa2}body,body.darkmode{background:var(--bg);color:var(--color)}body.darkmode{--color:#c9d1d9;--color-lighter:#a1a7ab;--color-green:#20c142;--color-danger:#f03e3e;--bg:#090b0e;--bg-header:#000;--bg-01:#141518;--bg-02:#25272d;--bg-03:#3c3c41;--bg-04:#3c3c41;--input-bg:#2a2a2f;--input-bg-hover:#363636;--input-border:#373b42;--input-border-focus:#7c7c7c;--border:#404143;--border-light:#272b32;--border-dark:#505050;--header-bg:#131820;--secondary-bg:#131820;--active-bg

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	474
Entropy (8bit):	4.4131084981146955
Encrypted:	false
SSDEEP:	12:YGPNDoO8Qdj1y1iCNbzhEtDvzQHPVfWcRTRe4+TvdTbY8Y:Y4DoNQ7U5h6DvaVWcREBG8Y
MD5:	75EDBE1B0AC62568AF4E5ACE61A4955C
SHA1:	4A82276D7878A02A7ED0368DB749717D0FEA1993
SHA-256:	8DFFC68F405EE12E81DD234DC6AD044F0858E6329C6A80333D11D581718FF0D2
SHA-512:	849420CA5A111245BD8346C90AA25FF2C23578DDD9C34056DA901A46F60B9D32744AF72A1B609F7DA14FE0A703E4D2482BA06E5ED11EB96D6A015F4FD4638790
Malicious:	false
Reputation:	low
Preview:	{"canaryPercentage":0,"deployedRevisions":["db3292dc43001bdee052424ac020044e94d46973","0707bd54470adc09763a77c8608041a298521fd2","6c8b4b915414841f9a1d5c79fe992e8dd043aa88","8c05094bbfaed202bc4644c5244b2a5a9e32547d","2a626ea2053d91e59aaa9c190d886de455b6f063","9d060724c2c3761b0a7af51b3f38859ce9ef8752","267a33ee3326e9349e3b9ce6f8909174adaa60bf","84597b056ad675f4a27962f7e1600d46f5081b91","267a33ee3326e9349e3b9ce6f8909174adaa60bf","228e9e4285093a908cc9c295df1c9903bffa3d92"]}

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 398 x 79, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	9764
Entropy (8bit):	7.851413307962347
Encrypted:	false
SSDEEP:	192:PGTnx/3ySC6b6DOdYSS8IPIxP1XjaVqy9/GYcDmV3tMh4kpBHB5ob7K:STeSdYSSdPIxPhan9+8V3tMhtB/
MD5:	C6ED8021D35A49F1F42BCE098853673B
SHA1:	9CC295D7BF9CD646B7A31EE7A8DCFA1AA083BC71
SHA-256:	CF5F2C2CF3484E63BAC3E988EFDB58A77E28EE84F9CB186EAB0B1FA0CAD4C279
SHA-512:	59D43964F90707723EBBDEC571D8B30905E94F20717AB0B6F667621DAB6E24114B44CEDAA2B70AEEA16500137B9904B8C5ED812FBA6088654904756554905F32
Malicious:	false
Reputation:	low
URL:	https://www.umso.com/lib_LUGoPiqXXlDptSWA/csi5g5qmp4uscbth.png?w=200&h=40&dpr=2
Preview:	.PNG........IHDR.......O.............PLTELiq....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................tRNS.....................H............,.&..$).1.CU....9.............F.......W.../....>?..#0!...cx.{..B........8.......A6.........+..(.<.G-..N J=....3..L.QK...47T.R."..

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/11236809420?random=1721058605790&cv=11&fst=1721058605790&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2Fpricing%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20Pricing&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 398 x 79, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	9764
Entropy (8bit):	7.851413307962347
Encrypted:	false
SSDEEP:	192:PGTnx/3ySC6b6DOdYSS8IPIxP1XjaVqy9/GYcDmV3tMh4kpBHB5ob7K:STeSdYSSdPIxPhan9+8V3tMhtB/
MD5:	C6ED8021D35A49F1F42BCE098853673B
SHA1:	9CC295D7BF9CD646B7A31EE7A8DCFA1AA083BC71
SHA-256:	CF5F2C2CF3484E63BAC3E988EFDB58A77E28EE84F9CB186EAB0B1FA0CAD4C279
SHA-512:	59D43964F90707723EBBDEC571D8B30905E94F20717AB0B6F667621DAB6E24114B44CEDAA2B70AEEA16500137B9904B8C5ED812FBA6088654904756554905F32
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......O.............PLTELiq....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................tRNS.....................H............,.&..$).1.CU....9.............F.......W.../....>?..#0!...cx.{..B........8.......A6.........+..(.<.G-..N J=....3..L.QK...47T.R."..

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/ga/rul?tid=G-CXEH5WRXTW&gacid=470383722.1721058585&gtm=45je4790v9133397838za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=1599414305
Preview:	<html></html>

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Category:	dropped
Size (bytes):	88751
Entropy (8bit):	5.414296471740167
Encrypted:	false
SSDEEP:	1536:2sHx8vawlWe2XzbStiSc6q1jboAmKum7EqIZ7d+/:2sHx8vzWe2jOtiSg1jboAmKum7EqCp+/
MD5:	69CB7809B5011312E716F29B3D19DCE6
SHA1:	833DABFB546D57065AEBA7190B5EE5A2428DFA47
SHA-256:	E039E607C78306C7E029A7FD0ECDB14F86456F16E1A5CE65AA26B4FDF1D38A3C
SHA-512:	4259C8F940CFE4B7EC384E5ABD855713DA7792A955A7B737B75E45E6559A90292ADE59D7CCAB381EA4C2D0FA5109B4ABD9BFA0887C05C9FB1A27469D5E198A69
Malicious:	false
Reputation:	low
Preview:	var StripeM=function(e){var t={};function n(r){if(t[r])return t[r].exports;var _=t[r]={i:r,l:!1,exports:{}};return e[r].call(_.exports,_,_.exports,n),_.l=!0,_.exports}return n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var _ in e)n.d(r,_,function(t){return e[t]}.bind(null,_));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=30)}([function(e,t,n){"use strict";(function(e){n.d(t,"a",(function(){retur

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (12922)
Category:	downloaded
Size (bytes):	34424
Entropy (8bit):	5.409425787564261
Encrypted:	false
SSDEEP:	768:+w6MAx0xsYXFlXo0GFsWsMLFXgUTGQob0sX0H1imK0u7:UEPXotGWxL9gUTGQobeo
MD5:	6C20A04D2D27F358DE2B88CDAD8A2724
SHA1:	78DAE5EE3CA941EDFFAB770CFFD43FCAD3DF9CF2
SHA-256:	CB2D61419F1FA13928FADD314AE9E4E5A815076BFE9E8C9D914513998124B95C
SHA-512:	BCC54B5BFC9DF69228C26201F71AA97D70E2B06CAA88E3D31BC51BDEAC6D37325458FAA3A3AE7D7AC7E60F6381657E21122E99AAB9790D29F801305D630EBF55
Malicious:	false
Reputation:	low
URL:	https://xai6l1pibnxefgt2.umso.co/
Preview:	<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><link rel="icon" href="https://xai6l1pibnxefgt2.umso.co/lib_xEaDdJFAXtpgtMsP/u36o6qd6r3o9bnmq.png"><title></title><meta name="twitter:title"><meta name="description"><meta name="twitter:description"><link rel="canonical" href="https://xai6l1pibnxefgt2.umso.co/"><link rel="alternate" hreflang="en" href="https://xai6l1pibnxefgt2.umso.co/"><style data-version="2">body {. font: normal normal 400 1em 'Inter', -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica, Arial, sans-serif;. color: #343a40;. margin: 0;. padding: 0;. --wr-max: 1140px;. position: relative;. --card-bg: rgb(21, 26, 56);. word-wrap: anywhere;. --color-bg: #fff;. background: #fff;. word-break: break-word;. --font-text: normal normal 400 1em 'Inter', -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica, Arial, sans-

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/11236809420?random=1721058585147&cv=11&fst=1721058585147&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2F%3Futm_source%3Dusite%26utm_campaign%3Dfree%26utm_medium%3Dbtmbadge%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20The%20Fastest%20Website%20Builder&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2688), with no line terminators
Category:	downloaded
Size (bytes):	2688
Entropy (8bit):	5.838635648415504
Encrypted:	false
SSDEEP:	48:Ego2eJJn6IzUtJQSc8aQqSG4v/q7SWWdCEqjWkt08SCVURnlAKqBGm4yKb6:aJd6SUtJfNrVlCWWWdtqjZ2CyliKS
MD5:	1ECBAEE64474BD6B6C64B8E7C2E7438C
SHA1:	82D307A81D390D7FB81FC7EE3CB4654FACE33822
SHA-256:	D31F4AEFADAD2CCE274DAC6BDB5ACD1A45E1BC03E6017EF89E509D8DF465AFB7
SHA-512:	8D6D8748629FE7019209230105EF1DEEF38CB775DD4121E42B2065E9ABEA69B29ADF7F29A1879DF61102BC5A1502D58AE9CA042BD28F5645C5909A466F5B73F9
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/11236809420/?random=1721058617250&cv=11&fst=1721058617250&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fapp.umso.com%2Flogin%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20App&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7843)
Category:	downloaded
Size (bytes):	374170
Entropy (8bit):	5.591299709972646
Encrypted:	false
SSDEEP:	6144:J4ZgqOW9aSPfgBWzTiwP/LFg5W/zOvFoAtbs:CZO6aSABo15d
MD5:	AC35AA4FC0F74597AE45491607174EF8
SHA1:	7C1EBABF93AA49DF4BC363A736247B12B2AF774A
SHA-256:	D5D60A8F46F51D405744E0A0A36FF02F37381859D6ACBE6FDBB1288A37D18C71
SHA-512:	22A3224A0676B044DBB119065A333BE44BC955191A6835707367B22DCB8548F293039F591FB207CDF5C7851C3E1573FD310783F739CB78EF42D6928A7D6D944D
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-11236809420
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"4",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ads_datatos","priority":26,"vtp_instanceDestinationId":"AW-11236809420","tag_id":12},{"function":"__ogt_1p_data_v2","priority":16,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vt

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65405)
Category:	downloaded
Size (bytes):	65980
Entropy (8bit):	5.142852834696656
Encrypted:	false
SSDEEP:	768:YWcs216t1KRv89yz+YDN+hHW8hIEyZc+NwBuxt64CTMFPWfAfMxv3fUyaKdUTf7Y:xcsg6CaLy2+cUybdIfVwApDVstxOOf3
MD5:	50AD48267F5C084CCEB88264D13EFFE0
SHA1:	D43F50BC93A2CD9BF768146ED90C10DE4E849201
SHA-256:	5075D6FF784F2D5DE13CAC7BFC1BEFC486DB62E37D98B28FF249C8FC46CD7B96
SHA-512:	4BC21EEFAEC69BDF7CF92D09562B4510897B2D6AD3EEB64FEDDC1A0BD7DBF680D43BB6386B1485A03CEABBD81E22C2D3E4B2BFB8054CD820A3F326E59F1CD631
Malicious:	false
Reputation:	low
URL:	https://js.pusher.com/7.0/pusher.min.js
Preview:	/!. Pusher JavaScript Library v7.0.6. * https://pusher.com/. . Copyright 2020, Pusher. * Released under the MIT licence.. */.!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.Pusher=e():t.Pusher=e()}(window,(function(){return function(t){var e={};function n(o){if(e[o])return e[o].exports;var r=e[o]={i:o,l:!1,exports:{}};return t[o].call(r.exports,r,r.exports,n),r.l=!0,r.exports}return n.m=t,n.c=e,n.d=function(t,e,o){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:o})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var o=Object.create(null);if(n.r(o),Object.defineProperty(o,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)f

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	30304
Entropy (8bit):	7.990789364173392
Encrypted:	true
SSDEEP:	384:mPaqXUtG02z6DHuOUMPFsN0v7a+t+pUWo8vFEqUQHKaGyi4hHA88COkNJ89X2ovV:ck8qOrUaQFt+pUjnFQHKB/D99XJJhJ3
MD5:	1F3E3507EE22270FAE015B93E050126E
SHA1:	3EC650231636B6FDAE51C4DF3EB483FF1502DF5F
SHA-256:	651C1E291919AA29400B673EA450F417E947D67FE1E16D4F735F5F073FA98FB1
SHA-512:	B26D498E3BB151FF62AFAD02D19A318C238CBB05D52EB6BB386725A8C15456FCC2862A1B5FBBF796210EA0277756A1472B11619DD39100B6547007F4DA3FFDC3
Malicious:	false
Reputation:	low
URL:	https://di7r6y9oc27j.cloudfront.net/st_ZhZeMoQDspyfOwZC/5?darkmode=true
Preview:	RIFFXv..WEBPVP8X..............ALPHQ.....'$H..xkD..)..6r$...7..{E..d9....ja....N..=j.V...cp. ...0.).......'.."V1.s..1.O..k.ny..H.. ?O0...Fn..${fyC[...P..r.333....2....1)s.a..,....y.d{........m'l.....4......R..c[.=..<..Y..Q.D2..v.y.b.)8.Q~...$."..m.H.,....k;..On$...K.......(.J....A(........z.........Hl$)...j......K.P..........g......g......g......g......g......g.......d.q.J[...}...P.1.qY+....&...mR..i..h.;".\|s.......!q....[.I#..'.........xdN.=46...I"}T..g.....Q..3vS1%."M.'..i..uez.ok..._.D.S..._"r..`.I.&....(.Fa`(8.j.b.ivDV..L.4i.U.C......^...#yb5'..BM.C.V.u$....4.^.C.......x..).m.;@..Q.h..b.]..T.5.{i...V.[. .R)..s:Rd......1..^...."........$$h.RC..J../D.C......M....c($2.n.gR....V.T..i...H.C....]..W..L...R).%......'.si....^.C.. ..8...;.p..1Zj.'....@..#v..9m...Y....[...RcN9.i./..P.<....U...Pb........r5..e....`V%.$..^[....:..B.T...#.1.U.O{...'N..&.v.>..P.iqq...27$.0....N.?.V.1[......[....k.........c../ .QPBb.z..n..~#H.Pn....2+...*.<....2.$...v.

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HgP:s
MD5:	A98D5E6C55AA16F87B3E028A50C0A828
SHA1:	5BA027991AE72C7DA1C72615E7CC9072E27A20DC
SHA-256:	A4F903057B02A171BABA6B0E9953343CF31D3CF90F3F18D4F14273A6838A3C9D
SHA-512:	D98D55FDEF508EDA3258B48B9315AF820817F079917AD1AB97123CF43095DC468010017939C02CB439F575F6E1FAFD9C24C0C282F687114B39411FC68D290592
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAn5WqpF-6RMjBIFDU2mzQs=?alt=proto
Preview:	CgkKBw1Nps0LGgA=

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2688), with no line terminators
Category:	dropped
Size (bytes):	2688
Entropy (8bit):	5.840643411695437
Encrypted:	false
SSDEEP:	48:Ego2eJJn6IzUtJQSc8aQqSG4v/q7SWWdCEqjWkt08SCVURnlAKqBGm4yKx6:aJd6SUtJfNrVlCWWWdtqjZ2CyliKU
MD5:	BDE233F39B3D53AE3D61D7A992F2154B
SHA1:	4830BD3D4188EED4102C483CD99875B4EACBE08E
SHA-256:	E858F213B367FBB708939DC028FE444B1BBDC8FCECCFC0EEB886739039724983
SHA-512:	5B2A6A9A72CB7B51EFADCA2EF16CCDE4C079F96A20056140808851B43FA8697FF533E09FBC94B79DEB2BA8450362815B0EC68A809438E58BAD49684DE2654BCF
Malicious:	false
Reputation:	low
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var r=k&&k[610401301];g=r!=null?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);if(c==38\|\|c==63)if(c=d.charCodeAt(b+3),!c\|\|c==61\|\|c==38\|\|c==35)b

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 1406, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	198350
Entropy (8bit):	7.978494963818845
Encrypted:	false
SSDEEP:	3072:EYSyONJs5dIoSSu3DbDMzsFgn8ARzf5qHMKffScT7Pf4TmXe:XSbrs5dQTbDMzo+zRqHMKfauL0
MD5:	AD4BDAFE48397C3B12D0C2D33356328E
SHA1:	F75936AF7DCA4E1B8E1A25FDD250E72BE6B33297
SHA-256:	F23E2968651E0E0CE9A1FC505B396114B64B3554E1970C4A890F94665D0366E9
SHA-512:	9328F30BDC695EC55C2DFD1D77966FC33441A582CF11A5D6E64673F1657C5362342AC02B9BCD201D72A598E1405A45964E2F703219B337903A69D97D450146B3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......~...........PLTE.................................? .......P>,...H#.....R3...G:)8...lO......5...rU.iPM.T..&..rb`.....o...YE/...W9cK2[2.RJG`9"uEm@'.\>.aFIEA.vd.gI{K/g;"SRR(..D).A>:..cJ@6..vaSQVX\RE<pZSgZXxO5S%.zlk\|dZ.`AmI0..i92@81kQ8.yW.mJT6![NJ.zU..L.qjL0...{.fC^,.lXM...g3..nXc?)046.eM\7 .pa.i\.qG.?...]gRE...g5s;..I......z.....]I=]`d..\..U...dfi.....Y....ke.i...v_Ujko..S._3...}l..?....#(.ww..T.d...0!........I.....I.U..H...&+0...%%....wI..<{Y<....PuYGprvIMR..[.......Hwy\|7<A.S.O.:.r7.....Q..r.X}...g$...AEI.i.~}....V%.....<....f.x0....Z66...D....Q.t\..{........h.c.....y.......l.....hD,.\|K.].........(.............p.....g..au..b.....E..........x.6...=v.......R........p.T.....l......Nw...p............j..I.R...r...}.......+.[.3!.JP.h`..{{.ER.....pHYs............... .IDATx..}P....T.-..F.."..$.[...N.;.K..m.f.)......)6...\y.uz.../[l).....*}...-..r.]`.s`x...9..u.j.-...s...k..[k=.z.$...x.....CLb>....o...f6.SD3...<.s..V3.:u

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1000 x 1406, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	109357
Entropy (8bit):	7.985234429022389
Encrypted:	false
SSDEEP:	3072:zB22RB4i5ragLjxwxQwOEPg/HvtVxNHewqVLjKPA:l22RBvragWJrPqtsB
MD5:	18B7FBCCC8CABA5D48F63C8AACB5C919
SHA1:	CC414159794D99C10AC02892728D9192E0F03BC6
SHA-256:	C00A04574CFF6B5066080633289B62EE095F902DAFB9F26C3426640800430D09
SHA-512:	CDF12CC9B709A7895458CAA982FCD346614C50E80F286A771CA15529707AB0D1E035C31A48D0D82CF8D7EF0E2E2F15ACB4E6DBF9CED9F0F659045E96890E8D10
Malicious:	false
Reputation:	low
URL:	https://www.umso.com/lib_uKHflxJGsjrjWGxc/dod4uf2jzflk15qm.png?w=500&dpr=2
Preview:	.PNG........IHDR.......~...........PLTE...........................................p<...............................x.........t...23].........56_................M................................../0[.......6[.............0V...U..,W....i$._...E)...&&T......dv......sl~..fJ.........s.....A.....j....................x`...y......)Q... ...mK....y7.....}........##Q+..............#L..........pY.......q.0.u(..V9.......k.y.~a....zw; .oS.tU>Bcj/.v2..;..hK....^A....8..yA...V$.T.N ..~.M=._8.a+.G'.p@^`..U..p...aYn.1OrGIn..'........A..S.j4....i@.D.X).=Yz....a.....H...ZH..U2..3km.0...l.RTw.H..cP.b..'Dh..:....S.........Ld..f..>.p"..yz.uC2..........OF...........h....{......vc.:..D..._:+..=;>.x.v..u...#....L......m..K.TL?'...bc_b.zl.{J...{...x.<6..\.......u...`n...d.....pHYs............... .IDATx..M.#...'QYI...^.w.....LB_.e]..$...........Z.....X.6Z./..w..&J$.jh...m.p.n..............4p......s".d}t.-..U..g.+32".......'.A.n.[x..o....^..5b.[[/.J.

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7843)
Category:	downloaded
Size (bytes):	374159
Entropy (8bit):	5.5913168700139835
Encrypted:	false
SSDEEP:	6144:J4ZgqOW9aSNfg7WzTiwP/LFg5W/zAvFoAtbs:CZO6aS+7o13d
MD5:	3EA76F418E7037C118E318215679DFA0
SHA1:	CBAF5A48B03DC3C97CAFA6ADEAA59D43FE8BCC51
SHA-256:	590DF017106D10C653FF8F6C7ED7D16121F5AA0CB38E35B4265EE13423345996
SHA-512:	6E7E28D09DEA0FB9AE537D31016B906330E079419DA6DBEF5FEC2C996BD4AA8021A4F55D514B4C8821D7800B7A1E82D42CA5D9046A5A92DAB8FFDDD7CBBB39E9
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-VYY8D05ZV0
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"4",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ads_datatos","priority":26,"vtp_instanceDestinationId":"AW-11236809420","tag_id":12},{"function":"__ogt_1p_data_v2","priority":16,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vt

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	21116
Entropy (8bit):	7.9822968581914955
Encrypted:	false
SSDEEP:	384:4VZ6kOEuHe1z2glx6z1MjnzONSjJT1hVURZNIcnm/j0o2UZ8hqfF1XK:4VZVuIDbjnzON81ARZNIgm/jf20XBK
MD5:	9BD77B9C0339515F1EBE4AEA3BCDDD60
SHA1:	23D1E85736FB7EB720C3470A0A4004AC5D0AAAC2
SHA-256:	62D72C51AD3798D8D6A97B28EB4A9001A635E37B2709B8EF1D178919440B5EC5
SHA-512:	D9930C79BF2EBB8E6147FEDD3790682A237B580CCC53F13B999C44CFC4FDC90A9E52BBE5178E031A4BA2156F00BB920DEC18CF218D2B1993B9C680B5123A47C5
Malicious:	false
Reputation:	low
URL:	https://di7r6y9oc27j.cloudfront.net/st_YamYHUIqgrxdLNhe/9?darkmode=true
Preview:	RIFFtR..WEBPVP8X..............ALPH.8.....m.9i..I..."b.xPH.... ....Zo.v.;..lb.6g.$..a.....{.;..jX..U=....<]S.....c....F.k....=.m..^.f..u...N...Uc.S.}g.?" 1n.Hc.7c....t........_g.6M.mj....m.6._k.......x......N:..vg&y,D.-.TI..J...Iy.a...'...S......9'.,..U..S.....z_}......nPw...RABB vV........"B.m.u.\%.:.^X.,.X.L.....n....$u.8..L.f..mP=l....m.m.f.Y.8...N.z..H.$.m2$...........".....7...........4..-,.A........f..}.o.!..8l.I.j..H....[......g.3......?....g.3......?.qI..g..$.d.........OR.....E..Q.aY..E4a8..q"...ER..F...z....Z..%P..d.0N.5S? ....k~b.C..$$y.ZR.W.....a..5?.7..^_.....W.+....p...OM.cc....M..j......p.}.}......&........Q.!.\....P..X..,..4HX!FX9.Pr....[=5.3x6.W.Fi.r...b({1B...F...O..+...'e.E..aK.K..2....S3@.....b.L.Gq.$..z).P.+....>.p\T.j...M.(.T.,Q.d.`.b.T.P........,.t6.f...3./...J.\,.a...vq..Ct....f:c..h..N..h6...$..:..:.v.......R.Z.T....C..@a....\.fY.........C......W....x..o~./y.N9.,..J.\..i(....../......5.....K.....oz..L

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	12686
Entropy (8bit):	7.9682606525675075
Encrypted:	false
SSDEEP:	384:YOcmrWL8/zxP0YuyfupbRiCu/4G3FtK5:5cwbxsQGpgCEtK
MD5:	C200054D1D3B09405EC4521F228D09E9
SHA1:	26CB789D63AB3F638090F644C609DF6DFD6FC800
SHA-256:	4B3A445E35D9DF346AED9251E89555971D87541B8D958AB18B4EAD4CBB0376E1
SHA-512:	75D45153EA01B048ED41FA5ED8465B0CF1A055FE582A15461135A105D556D081E8677E381327E001F76F01D35CF50CDC35096015BFCDA2251073959F4D17C148
Malicious:	false
Reputation:	low
Preview:	RIFF.1..WEBPVP8X..............ALPH.!.....m#)I.e.3."b.x.....5G ..%j&.[......"1.k...&5.j....m.!.."3....sV...m........Z..m..e.8(....uU.q.....I..........H?...).Z....g.....a..{.............. .@...H..'..Yce........\|,."B.m[A.].&.i.....D.'e..............................................................PFJ$..t...?&...._UfuR...*.&o.6G.f.D........?.....O.._...ao..}..}.R.-bcQ5J.....R.p..:?yt.8..{......w.j[./..[.J"..@.n...M.'.."#........)d..F.7.p.q...Y.....:0..=..IU...m.%m..T.'.}....Di.........)..= ...\|}.....N.......Es.....AH.,N.s:R.0Q.....>..c<..-E."4.....lB.RT.dHTj.p.B.(.#......'...( ...{.gR.u..Z.T.......EDK;.VV.<.m..(....D@..qR.U.L:&..ap.0....[.ulH~.2......N.k.#P...W;...FAv...........4p7{.4....P......5.....;&..Y\.N.....fYjH...h....v.4....{C..F.}e..Df.io... .s...k........D.wc.A..d..7.1.u......DC.%...W.g........B."..0.a..5} .A....F.5..+.Lp8...o. .B.8...?.M.R._M.)...h....Xj.c...&2.,.a.b..bx>..8`..:....Cj.K...lX.=...\|g..@",........(.......M".'.

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43882)
Category:	downloaded
Size (bytes):	43883
Entropy (8bit):	5.373794703137306
Encrypted:	false
SSDEEP:	768:YY/C9CHJt11lpRMvIXFFCqkdKdbkxRno9nWm8cNG9tU5E9+f2R8ozaslK7NIUw6J:Yit11dMvIXiFx58G9U1
MD5:	E83034EACFE1964F7926EC2CCCB839F9
SHA1:	7EA752C44AF30F970363D2070ABFC1E60AA115D4
SHA-256:	DE7D1E230009B19B7BBEF1D1B1A7BEA78E8AE39F428EB1BDE0E84F0A2119FC8A
SHA-512:	AAE740BF3271251B0B98918DEB8CC0D50F5B887FCAE56B93CD77DCEF15736712A120E8AEBE91A18AEA7435F536F6AC31D0FB96194F5BE81428841835B701E160
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/g/7a55c9ccbaaa/api.js
Preview:	"use strict";(function(){function St(e,n,r,o,c,s,y){try{var _=e[s](y),m=_.value}catch(l){r(l);return}_.done?n(m):Promise.resolve(m).then(o,c)}function It(e){return function(){var n=this,r=arguments;return new Promise(function(o,c){var s=e.apply(n,r);function y(m){St(s,o,c,y,_,"next",m)}function _(m){St(s,o,c,y,_,"throw",m)}y(void 0)})}}function D(e,n){return n!=null&&typeof Symbol!="undefined"&&n[Symbol.hasInstance]?!!n[Symbol.hasInstance](e):D(e,n)}function Ae(e,n,r){return n in e?Object.defineProperty(e,n,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[n]=r,e}function Ye(e){for(var n=1;n<arguments.length;n++){var r=arguments[n]!=null?arguments[n]:{},o=Object.keys(r);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(r).filter(function(c){return Object.getOwnPropertyDescriptor(r,c).enumerable}))),o.forEach(function(c){Ae(e,c,r[c])})}return e}function gr(e,n){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1123 x 412, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	78783
Entropy (8bit):	7.95324952898143
Encrypted:	false
SSDEEP:	1536:/MGAHaVqVJqO6OeRHoE1TBbrlTcfLQtmo6XLuJFrcNOyO8ZdHG8jsfi:/kHa3OeHTB1ALQt5EuJF5yO8Wo
MD5:	BC14544E15C96DC01B83B393750EAFB2
SHA1:	456E8E4CB9EEFBB0847A4B1D8B6F55E91AFAE6C6
SHA-256:	93C66E824ACE239C878453F875A403EAD2D82D0515E4199D20E22DF40FB54100
SHA-512:	0DCCFE2600AB8E4C0CB75476B8B88E0B5C6B022487E0FCFD98D7EE72B18C2AF1DE0DB3C563ADE8731215EC6DE3FADAA13D5252FEA71B5AC6384C6E1BC96090DF
Malicious:	false
Reputation:	low
URL:	https://www.umso.com/lib_LUGoPiqXXlDptSWA/havnu57r2hcv4i5a.png
Preview:	.PNG........IHDR...c.........J..]....PLTELiq."........R..5.....?.....C....x8.s8.x6.{6....p8..#.o8..........k:.j9.."........(....l9..0..+.......\|1.i9.i:../.............k9..-.....!.x3..+.....-.j9.r5..........m7../..............%..........................!.i9...........%.i9..'......................j9..'..........j9....j9.i9....i9......../...../.g9....i9..0.h9.......k8.h9....h9..'.h9.h9.. .i9.. ..,......../..............%..!....i9..'.g9.....#.y3..+.v4.....,.g:.......k8..!........,..........#....~1.{2....u4........)..0.....-....s5....j9........(...........&..)../.z2.x3..'.....+.\|1..............)../..".....................}2.w4.....,.."........).....#..(....r6.. ..$.....0.u5........'..&.s5....{2..!.. ..%..-..$........%.. .{2.."..&../..'.v4..'.w4..#...."..(....'..$.....(..,..#........-.."..%..... ..!..~.....tRNS.......................)..!..#.....0...%.*6.&".&S8=..Z-..aF?:1GD.Mwn.27c..g+U[...W.1..H.N.N,C...>6.7AlO.JH.b.\.?~.?...Z.S..j..b..Qu.....k............[....f.............ps

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/11236809420?random=1721058609649&cv=11&fst=1721058609649&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2Fshowcase%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20Showcase&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 128 x 128, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4055
Entropy (8bit):	7.9286682902368035
Encrypted:	false
SSDEEP:	96:to5SApM24V6W5ellxcnC4UNiOiIgbGFu+:to5SA2/52cnpktiIg9+
MD5:	0ACDFD7F6A54B186C413BD2ABE4031D8
SHA1:	471B3F1DF6A3908542446B9626C52CFE091A9B84
SHA-256:	0849848772D103946166B1CF6BDC23B2E8CB58424D07C8DFF2F9581E8DA9F8DB
SHA-512:	150D7011D1F4915E30DB8ACD24274B0A9E7A817952E3015C428CABCBAB6104D8C080699C9482F4296C02F706B2E8A4C284B4EBB819D8603041B058DD925C2961
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................PLTELiq..... ...............................................##.0..........%..........F>R.....&........."7IAU................ ....................-$:.&;..!) 6..)..=5I.............OG[......VNb'.5..->6K!./........%.3.........3@..(80EB:O..........$.2D<PH@T........QI]1(>7/D:2G5-B...............'.4..,E=Q...XPd..RJ^6.C4,A ..;3H......NFZKCW....................UMaSK_......LDX......ZRe...c\n.............ZSf2?MEY.............TL`^Vi...0(=..+<4IA9M.......................!@8L.......................YQd......91F.........................\Th.........,#9......`Yl.............@8M......._Wj....B:N0'=,$9.........]Uhe^q...`XkbZm.............................ibt.........z.rk}~w...........TL_lewpi{vo.............\|u.ngyyr.............sk~...}.{.......tRNS..... ..pp.{..I....pHYs................eIDATx..[iP.W...~..!....*....a....#..UP@.".(.EPAQT..R...A...[.QP.:(.3....Zq.>m.7.....i1.or.0@.s.s......0.d..#7...5Nn....5V.........{....

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 71 x 98, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPl29yst/xl/k4E08up:6v/lhPoIst7Tp
MD5:	595E3C69FE0429DC750DD6611A5D3654
SHA1:	0A036655885B6A1CA11A5D462D6AA2F7C3B190FE
SHA-256:	945DDD40F59B23E8FD4A131AA3C198F7B79D6BBD8854E68917F5EF6A09AEB11C
SHA-512:	82CA162EB5496112F0A4DEE400A619D441528435C7D90BA089DE7EAA7194665A813AD101D1590A43D30B009D093F29F5416DE1B374A0C0E9352B2293C3E74EAC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...G...b.......Y.....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	29616
Entropy (8bit):	7.990661208440681
Encrypted:	true
SSDEEP:	768:NEtOYZX7kMSucNfU1YHF8pQe/4xbPv3qbdw9AeMNmtR:NTeXlfWf0uw4hCbdw9hxtR
MD5:	683061792C3A1642A0EA769BE8304C0D
SHA1:	64C9660EBF991A3F927AFB88D725616B80CF372C
SHA-256:	CE1B81E2EF75B04FBB1AF262AB0C9986ADBA818C5C871C32BB9CE9CB267743A3
SHA-512:	8B3C352A86996545B3C3C87659B7012C90F8DFF035FB20A475E00CC29CA5D9E04B96516164CBE152012F95DD9D9E365DEC06B39BED0B64D96997020FB77B2251
Malicious:	false
Reputation:	low
Preview:	RIFF.s..WEBPVP8X..............ALPHO%.....$)Re...R..<#b.2.l......A.rC.4.!.V3.R.8c.O.P....x.I..O..M...6..E.K..#......$.g.....m.m..[mmpZ.m.m.m...m.K}..>{E....~@).KD8R#..dA....f....S$...gUu....m\ '..q.....I.,..]..B.]...1N.. .}Y....z]W...kf.#.E.-.V...V.3.6..#..;_tlkS$9.DT....3......03.)...m....3K...........Y.d.m. .O.... ....]V....4...c?`......^....Q..'2....S..!F....@..f......-..>....)..F.<..$}>.a...].'...@.]f.......3K.$V...-I..p.....H.;.O..&....../.g..1.E.$..k..P.... f.;.Q.n........~C.d......X..}56....L.kp...]'~.O....&.0.kf.......,.S...}5.n.\|.Nf..k../......~....Y..~..}.w./`..}5v.h8\.......j...i...._..2k..X.o.9...F..;.4.-.q.5\.._.........8.......3K..V..Wc[.t...8.;.../w..`1.3..b..}..V.)3Y./`.Q...8..+.q.w....,~.O3)_.\|U....}.;,...TO.jlF...g8T....:..xR../0..P1..q..(_..=..f5T..j.....`....\.{.:..X..P.~..q.5.R..d.gv...V.5IU...G......(7Z..P..^.8..0n.._.VG..I..O.........<D@v....6...0.0........q......f.i28..^v.....}.:80...y..E.......Dk.gt...J;U....%W.[.0..

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	83032
Entropy (8bit):	4.916117379228222
Encrypted:	false
SSDEEP:	768:KBuwAyQksqMXL/Vc0j8BkSyz/psVHRedLjXaxwn8SsS0dgpC0KPXv7fcJfm5EFDO:1L+Oi
MD5:	4022946B73ED9A3FE100AD9A7E53FC60
SHA1:	D8192E4A2AFEFD84784504C387C43C18852D4DAF
SHA-256:	13EC7B328E702040A5A39A73C7EF012717CDEC4B2FDD87F5425BA425B7486550
SHA-512:	44E4C1EDACB4901A3983FFF415CA52D22EB05D378BFBE67CEC5F5C9B5BCDD6DBFB3D6DB62C6E03C449939800015685E9C933A98BD20F5DA2E5DE7C1AC9B887B8
Malicious:	false
Reputation:	low
URL:	https://api.umso.com/public/structures/groups
Preview:	[{"id":"stg_qTUyZgtQCtUHEsyC","name":"Testimonial","status":"official","defaultData":{"omitted":true},"ownedBy":"org_DsjdSJrThAwDoujv","createdAt":"2023-05-15T14:58:25Z","meta":{"showInGenerator":true,"category":"testimonials","subCategory":"","description":"A single quote from a person related to the company or a customer that praises the product or the experience."},"structures":[{"id":"st_JHNTMlDzxRwNMpTl","name":"Simple Box","version":3,"maxVersion":3,"status":"official","structType":"section","data":{"omitted":true},"settings":{"items":[],"design":{"options":{"misc":{"maxWidth":true,"isEnabled":true},"text":{"body":true,"color":true,"fontSize":true,"isEnabled":true},"cards":{"isEnabled":true},"spacing":{"top":true,"bottom":true,"isEnabled":true},"background":{"clear":true,"color":true,"media":true,"video":true,"gradient":true,"isEnabled":true}}}},"ownedBy":"org_DsjdSJrThAwDoujv","createdAt":"2023-06-01T19:51:38Z","groupName":"Testimonial","groupId":"stg_qTUyZgtQCtUHEsyC","tags":["

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65405)
Category:	dropped
Size (bytes):	65980
Entropy (8bit):	5.142852834696656
Encrypted:	false
SSDEEP:	768:YWcs216t1KRv89yz+YDN+hHW8hIEyZc+NwBuxt64CTMFPWfAfMxv3fUyaKdUTf7Y:xcsg6CaLy2+cUybdIfVwApDVstxOOf3
MD5:	50AD48267F5C084CCEB88264D13EFFE0
SHA1:	D43F50BC93A2CD9BF768146ED90C10DE4E849201
SHA-256:	5075D6FF784F2D5DE13CAC7BFC1BEFC486DB62E37D98B28FF249C8FC46CD7B96
SHA-512:	4BC21EEFAEC69BDF7CF92D09562B4510897B2D6AD3EEB64FEDDC1A0BD7DBF680D43BB6386B1485A03CEABBD81E22C2D3E4B2BFB8054CD820A3F326E59F1CD631
Malicious:	false
Reputation:	low
Preview:	/!. Pusher JavaScript Library v7.0.6. * https://pusher.com/. . Copyright 2020, Pusher. * Released under the MIT licence.. */.!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define([],e):"object"==typeof exports?exports.Pusher=e():t.Pusher=e()}(window,(function(){return function(t){var e={};function n(o){if(e[o])return e[o].exports;var r=e[o]={i:o,l:!1,exports:{}};return t[o].call(r.exports,r,r.exports,n),r.l=!0,r.exports}return n.m=t,n.c=e,n.d=function(t,e,o){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:o})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var o=Object.create(null);if(n.r(o),Object.defineProperty(o,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)f

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, 256x256 with PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, -128x-128, 32 bits/pixel
Category:	downloaded
Size (bytes):	107652
Entropy (8bit):	4.248176864722178
Encrypted:	false
SSDEEP:	768:1bTg1PyzfjzaND+zHSMasQGm5Vn2jOqleEby6mdtliDjJLay:1bc1PyTjzaND+zHHE3wjOqleEe6alq
MD5:	03FE49F7B5F1EBEC7E2A157E957F0E47
SHA1:	7363D1EEDA17623A6320BF45CFB2F76854F5E13A
SHA-256:	B2D3AA8847F1838235F934A86AD4C468FD57ABBF70AD807EB2BCC35278EA3351
SHA-512:	EB2C66358E9ED2C80E2635C2F7D08682CE2A0F5A16D19832FD37F22CE3F1855FC487F9C08FE1DFE65F4CD697CB26313A1078F060BB2A1470954623FE16EC60AA
Malicious:	false
Reputation:	low
URL:	https://app.umso.com/favicon.ico
Preview:	............ .....f......... .(...\|...@@.... .(B...'..00.... ..%...i.. .... .....t......... .h........PNG........IHDR.............\r.f....IDATx..k.&Uy...3{....vE`.".e........".M,5U.nbi.F.h.J..JU..).Q..1.bi..$....@.a...,..........<.s....=.3...........{.<..<.yN..2..a.8... .d.6.@...&#..,!..l..2.w.@7.n.........-..j..E...Y...v...2\|...8.O..?Y...`^....+..B..Q.,.....Z.....M.B,........y]..T..$.....k?..(-?!d.......>Yw.......@5./.....B&."..b....!.S....Yv..Co?!s...._...O.........9.........}.g....T..$MV...h.o..2=./......I..,....E...2M...\.P...4.yQ\......CV."......,....I.@HH.N.B.&[....'$Q...I.v..$.;.B....!......a.@H.. $a....0...I.v..$.;.B....!......a.@H.. $a....0...I.v..$.;.B....!......a.@H.. $a....0...I.v..$.;.B....!......a.@H.. $a....0...I.v..$.;.B....!......a.@H.. $a....0...I.v..$.;.B....!...............e..7..M..._{............:3k..E..E.gY.}.n........5........\|}...$@.@H.d...._..........0..;.+{,..ZV.R.[.r..P......-.[.n.....7...M.....B....L..._......a.6..-.w

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	15986
Entropy (8bit):	7.962201604819978
Encrypted:	false
SSDEEP:	384:YU+zMdKhpqHioQtuoYBue6hOdzBnF4W0F530DmF0p:c6NHKsBumnFH0P0U
MD5:	55A8336EE70B50773EE4E9035D5A0F04
SHA1:	9EBC568FC6F7920AA329B104BEDC074E236A9AE2
SHA-256:	C1D5C52514C80C73D46BBDF495C0660F21F28E356A8798985E8FD092C89ADA94
SHA-512:	1DA62783344E938BD3B9C177EE94F1055F57579FAD443426733A654F15DF88B805CF83723F33A16F179733AB2102A067DDDDCFB89CD7BB831C2811BE7C3C1500
Malicious:	false
Reputation:	low
Preview:	RIFFj>..WEBPVP8X..............ALPH7'.....m.H.?.m..........gAe.U.8h...."{B<.r.e..OG9....E...m."....U..h.}..q.X....{..u$F\q....y.dYg...z.....Y.......h..j..kn..#..#r.....!O.efUcf.m...{.m.8..[..^.......]..Q1........$GJ..x.....Ma>r..m#..H..9..i\|..*..+..GI..N.<#....j&"`A......../....$I..I.e..f.f.f..Ov....9.E.#IR.D.!B..f.^@..............................................8.8..}....L..%A-..D..d.l..36.p..h.1k:Fr..P.K.z..U^..&.6N...uI$.o.W.+.z..<..l7.."..'.:.-cU..r.:.7.....:.n"^FG...u/....{....Ee.<..L....Vg...pm#..!.\%g....[:.{.0.f..%.....2.._I.~..g....c...r...y.....(...\>....r.H<..G.....>.kI..)...S...#......q.3....qI.YN......\g.}}\.@.e>..L.r.)..m...O....y0\|2.[.<...]>. 3{2N....&p..J?.k..2_[<Bk.8._X?........./...O.I....V.`.}.'...O.(..8...........P%..7..............f.....sqH.e...96.....i)R.."....{./.V..i.....!sg(............M.uvO.\...o...-..(.k.yP.1.F...RyR...-..$......C...H..................(y.R.7d..y...............h....[1.2....Y?f...A...b'.{x

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	60
Entropy (8bit):	4.588664196778504
Encrypted:	false
SSDEEP:	3:VTORnDUz09iRArY:QRnDUAWAM
MD5:	BC8DA55BD6A765B79AD346F1A18167B6
SHA1:	851BA7AFEABC7C3EE78589112F43BE716441FA1C
SHA-256:	E564A4B29BFDAA9FFD9A3D113C1DF7D5DD4333CDE6774354D88B9D1D230CAF1C
SHA-512:	91536641C7FE5274A66A88BACE6326EAAD85471084F71C157F30EF8F39CB487E5A8AC4FC7D0C7C70BB60FCFAAA9AD229D5110C0CC9B778C8C46150CEE15EF893
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwkkNfIQ77bD0RIFDVALr7ASBQ01hlQc?alt=proto
Preview:	CikKBw1QC6+wGgAKHg01hlQcGgQITBgCKhEIClINCgNAIS4QARj/////Dw==

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 100 x 100, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4737
Entropy (8bit):	7.926976315356877
Encrypted:	false
SSDEEP:	96:kScaOG9CgfXFcivZxOADbZ71kb73MqoF1oUIwEjopH/Tb3xRcmSOG4rDM:kSTOyCgfXFHuMhSbTMqoF2Pa/hCn4rDM
MD5:	0E288BDED0E143368679D0024601D928
SHA1:	F31E03D0735927296E678786CFBDE254A89F4D9A
SHA-256:	34908F8235EFE3A201F6DC9A01B9AAC8304D1BABD7DDE5D108A05E23B4F9EBCD
SHA-512:	9FA80EC176AAA905B42AD8FFA383A82A8DA38737C00612ECFA62F1A642A75DCBB00DDD3EBA1DE3FBA643A8377541A0E5F7AD931C274199CA4A618301CB762E58
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...d...d.....G<ef...<PLTE...................................................Liq......m2.,....tRNS.....................5.h....pHYs.................IDATh.UZ..$)..`..qd..... {wk.tweF..C.....6....pG5\...."..=1.1....cu...#..........;....+.k4..%/.......Z!............Z...k.V.R.N.k$P..U...!:....@..zO...8yL...B:\|x...b.m.........Ho.....Z.V..y.i\|Z.HL...".Q.....o.O......E.)....G4m..v.]...po.........4n.........5.\B.r`...<...n...d2...)@....[...=.{;...Aq..v....{U..gc.....~...!w..K...J.d1n..:...?x`z...e........m.X..mo.D......\|...\|'...<Gb<.<.....\v.\...8Z...T....C..S.]1\|o....cy.S.b..X....{'....T.E.'..^~..G...v.s.}UWR..E._.a..U.DZ.G..\|../.D..^.....f......[..^..(.i0..c.~.......P.2...k..\..K...;b.G2..S....p.&...+.Fke.a.[aP...h.H.NK.'..!.3...S.......Au..2..fqq..T...2...g2.?.]...0...\C.c....l....5..d...5..3+.7....;.W.U.....q.g....X..S..s.......8.j.....%.F........B....3E..L...P.Z.~/.....O.a.H...........TH..^.{.n..m.(...Sr.KpBk4.P>.O....:..

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 87944, version 1.0
Category:	downloaded
Size (bytes):	87944
Entropy (8bit):	7.9967601836021265
Encrypted:	true
SSDEEP:	1536:A8X+mGSJxIX69e8Dcth/H/ZzadzF0QuFXhS+mvxu53XMswaAxifHmxUvv:1X+mGocaAth/H/Zz20QuLGZ0M3iO2vv
MD5:	52D3D95B961325097AED382DB3D85EE7
SHA1:	DF666CAA40C1885189A7597B52C988A56069F26A
SHA-256:	34926001C184EA9E95B3E59565F1EA0BD4003E6497DBAE956C8A52C48342C4AB
SHA-512:	AF1D3D13568F6C8910BF38CBAD1384DFEE2F37303297E87440F2342BDB4E261A7595D796D3F0187C5C27C783C184676AE2AF0D7C8D7F2D7C0FC959C87C27A6B2
Malicious:	false
Reputation:	low
URL:	https://app.umso.com/static/media/Inter-Regular.c05ed3415c35caa985d5.woff2
Preview:	wOF2......W........4..W+..........................~...B..N.`...p......{..4..6.$..d. ......G[}....Sd...m7j[dJk.....T.J."....._#.h.`.b8\i.......3..y"...,.d7.P^m../..............?....A.}.x@....4j>VM..[.Z....H...,......E.Ae.YUk3..T.).......Y...M3S.E...dW....(kZ?`1N..Q..VA...h....E..gb..q..v..on[..$.i..y.=Jb...%V./....2p`P..g5.C...0L>.Yg.?.&..0P.DNq2..&..&<..Q....;1.a.ZC...I#....M1......>..S........2...\|.Z.{uAl^.....~.....M......I4.v.6.`..W.h..n..M.0S....Z)....?M.vR.m..43.}".zD#.......R..). ..#.jN...z;...tvZ..N.R....w............x}..0...k3u.y-/n.84z.tH...`.X..UrF..iy.......[[7.V...{.Z...O9....+.....j..$y.-.]3...W<[3...%u.....<iYHt..^..?P.....t...../x..(.....V?......G.>..O.......J,Q.u.,...{!blc.EjZ.x.C/rL.N.c....r..s.......\tw.z...J.dY.eY"O_.......Sg..3.K=...O.I.o...+.<...D......./..F..!.YO..^x.0.(..1...%rH...>....1}..%.W.#......e..DtQb.\.....ey..a\.W'.Nf...,D.....C4.....c.1...a4....b4.a$bT!id..1...w`...q.R"r.s.9....96.b..I....*w...\a...r.!....

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	13702
Entropy (8bit):	7.946532885327951
Encrypted:	false
SSDEEP:	192:5pXbDX+DvdMgVASSEaoJwifrjCa0S+8aWqB5iiLvQUcLLV8ewWdVt/rfqUI7L:HALShoJw0rVtPqyiLvQFWeHKp
MD5:	4FBD7A67B5BA874E00CD70F85FAAC575
SHA1:	492975A3AB2367CF20A9647D6E12F8762AE04E1A
SHA-256:	250927C01E7C78D0B72522883234DF9B0000AA4ED77FFDA088522D3F8E85A340
SHA-512:	749971ABD44CA6245ADE4C109AC45E8043D41FB339AF2D3A4D3BBC01E0B8DAD0BF839A5FE284DAE0FC0E13F01C2AA8A5886C526BD9DD6E0CE2B6A6BB26408442
Malicious:	false
Reputation:	low
URL:	https://di7r6y9oc27j.cloudfront.net/st_kaYPadHYbGttSsxI/4?darkmode=true
Preview:	RIFF~5..WEBPVP8X..............ALPH.......m#9....^{3..^.1.....LyfU......x..G6...h.pg7jQ8..t..Q..ZA..Q..R..c...\|.4...5..m.".QUu.....Rf..!b...>63S...3fG.l..qg....f.K5]m.....6.#I..c..{.j.+w...6Er.m;#"...-.Y.Xd{. 0..$033{<b.-...G...Eff......eA..[MU...Z.WDF..o("(A..7..j./.,3.8. J./I.m.Vt^"I..Bp....C...t.J.......!.m#I.b...1..zV...................................................O....#....M...5...Zu.p@.,Z.F.=...~.J..}..i..V,..{./6..+..\...y.wl.Mgy..9r..V..4l...d6.e....5)h.f.6...kMP...y..T...W.m..<(r.tkV."...6,..l...2rVE2.!3P.b.<_......LxU...4..Y`d..F..%HU....c`.&V.o.....vx.=.r.!.X..^oc..R..(........]v.{d......~.c.y)...y.,..E..w{rS...x..ID..8.aT...6.3."e.S.4)8..K..@.g..S.>.).P.].J.-3c..wpv.....>.(.nE....u.....N.......a....;..wv:.u....G.\|5.u.^........d....o.b.u..=}#...;................6@.......A.R.....H51...l..5.5....r.T]....<....,R..#".s.ljj.KM4...:s..W...E..&.a_..K:s."QU...1.o..!pb....1....TLO@l....6,*W....ka..D.B.....Y."z.bcP.G...e.if..h^s....z.d).o..v

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1100 x 1276, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	137194
Entropy (8bit):	7.972225858327075
Encrypted:	false
SSDEEP:	1536:jy2AnSfAZ1vtmCQ+5PL8j/vR+qHEMxXOK+EAY9NmnZeFXSmG4I+CsCpFOG2pLClF:jieALFmCF5IDrNXOWO4FP8+CaiG1+Ym
MD5:	8BF58A12E053230D1AE2B6C6DD772B93
SHA1:	E0CA95CF3DDE64B98CCB970C9B3E56697061169E
SHA-256:	AD4BD0B6107ACCA0132759AA06C936C0A5FCBAEDB7D1675B1C18DE31951E23D2
SHA-512:	CCAED22D2BB3E2510026C42752622DE87C83CA9A04729E36ECCA9273958C48CC00D2C69439F275FA709FB476F6EF137C6EB45992BD1CAC2B5E5E850316A235F9
Malicious:	false
Reputation:	low
URL:	https://www.umso.com/lib_LUGoPiqXXlDptSWA/5segal4xfx8mljy3.png
Preview:	.PNG........IHDR...L.................PLTELiq.....................555....................................-./......@AC......!"$<=?"#%678556f.g.c.c....%',$%(*/......&',...$&....h.. %h..!"';<A()-"$(...039.."@AC...#%..9.........+-0667...Yt..03...HKO,##><<...)..PQUEEH:..K..##&K(%Y..#%)< .WCC/..;+...[1-y$....h ..........j3/58>..9...UX\...#.....adh[_chC@ein...O97...,"z71...{......'.kotaQPptz.0Qvz..?6.80zGB...VQ.OH.6)$...HA...sRO.0$.pk...C43.I>.@6.QH.^Xh]\..........\|xsr.pn..F8.dW.^U...uhg...y\Z.ea.6(.....b[.~y......pj.....rk....da......zx.YN....\|{.kb....z........TG.../))...si......~v..................zH.x...8@_.\.......F...S;Nix.Z..Qu..u...Nt..I...AV..',~^..}..p7d.2..3wh\|.. ..3..3...K.3MM.B?y..n1...$+<....B..:0C.c..}.:9RL.......T..E..7N.,d...$(1Z$.Y..t..Gm...Q.....Q......t....$tRNS...$........ ..2)-7?G~.Q._.....e..g.......pHYs............... .IDATx...#..;.0s.....o..;..9QSq..QR.._g...b ....)....P. .P.N#....!#...d.?e....F..F[..cl."2.)...^S..X.w...R./.+

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 374 x 80, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5986
Entropy (8bit):	7.443770421889048
Encrypted:	false
SSDEEP:	96:KH6ed7STU3YP136mowebWFlsYd3vaE8m93Z6TntWcYha6nl2n/9KgIdnV28+X700:Ned7STUK8EebWHviA14QcAXnl2nlY5jU
MD5:	7EA406842609D85B79AEA2BB6365D29D
SHA1:	6067B6712122D950F4FB3494ED077E5C3D4E8C92
SHA-256:	3AC81B99E66E6A0730ACE289AB4938FC40CD2B9AC4D72C85F24312291195796B
SHA-512:	4A84566150B3E9928CB559CB2DCE7E64B994880388FECB1FC6CA53D9FD826FC75FCFA0AB9D11794BB06C97BE9C3DB1A37F0B11CFEBDF14D5309E85576D8A6F46
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...v...P.....:.......PLTELiq.............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................~lg.....tRNS...R.........#....a.k..9-4 ..............(.XG.i.5.*..+..).Lc/j[p.<S.}..?`.".....x.>....%..s......\:..Z.I..'V.....!...]..;...~Q3...H.d.r..m....=JK..b,....Ny$....{..U.w

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jul 15, 2024 17:49:14.898639917 CEST	49674	443	192.168.2.6	173.222.162.64
Jul 15, 2024 17:49:14.898639917 CEST	49673	443	192.168.2.6	173.222.162.64
Jul 15, 2024 17:49:15.226767063 CEST	49672	443	192.168.2.6	173.222.162.64
Jul 15, 2024 17:49:22.722276926 CEST	49715	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:22.722332954 CEST	443	49715	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:22.722388983 CEST	49715	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:22.722834110 CEST	49716	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:22.722893953 CEST	443	49716	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:22.722958088 CEST	49716	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:22.723531961 CEST	49716	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:22.723546028 CEST	443	49716	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:22.723727942 CEST	49715	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:22.723743916 CEST	443	49715	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.218226910 CEST	443	49716	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.218502045 CEST	49716	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.218528032 CEST	443	49716	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.219942093 CEST	443	49716	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.220017910 CEST	49716	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.220963001 CEST	49716	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.221029043 CEST	443	49716	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.221254110 CEST	49716	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.221260071 CEST	443	49716	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.225142002 CEST	443	49715	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.225438118 CEST	49715	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.225471973 CEST	443	49715	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.226923943 CEST	443	49715	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.226989985 CEST	49715	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.227299929 CEST	49715	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.227366924 CEST	443	49715	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.230967045 CEST	49717	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:23.231007099 CEST	443	49717	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:23.231079102 CEST	49717	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:23.231671095 CEST	49717	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:23.231697083 CEST	443	49717	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:23.274282932 CEST	49716	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.274305105 CEST	49715	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.274332047 CEST	443	49715	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.321512938 CEST	49715	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.537794113 CEST	443	49716	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.537853956 CEST	443	49716	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.537913084 CEST	49716	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.537952900 CEST	443	49716	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.537971020 CEST	443	49716	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.537993908 CEST	49716	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.538000107 CEST	443	49716	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.538021088 CEST	49716	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.538045883 CEST	49716	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.538347006 CEST	443	49716	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.538357019 CEST	443	49716	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.538398027 CEST	49716	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.548278093 CEST	443	49716	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.548508883 CEST	49716	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.549000978 CEST	443	49716	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.549010992 CEST	443	49716	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.549072981 CEST	49716	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.549088955 CEST	443	49716	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.550157070 CEST	443	49716	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.550234079 CEST	49716	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.550240993 CEST	443	49716	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.550254107 CEST	443	49716	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.550303936 CEST	49716	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.558952093 CEST	49716	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.558974981 CEST	443	49716	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.581892014 CEST	49715	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.628514051 CEST	443	49715	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.703875065 CEST	443	49715	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.703948021 CEST	443	49715	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.704027891 CEST	443	49715	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.704029083 CEST	49715	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.704071999 CEST	443	49715	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.704091072 CEST	49715	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.704108953 CEST	443	49715	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.704111099 CEST	49715	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.704149008 CEST	49715	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.780365944 CEST	49715	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.780419111 CEST	443	49715	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.820971012 CEST	49722	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.821026087 CEST	443	49722	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:23.821096897 CEST	49722	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.823190928 CEST	49722	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:23.823229074 CEST	443	49722	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:24.048563957 CEST	443	49717	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:24.048633099 CEST	49717	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:24.061629057 CEST	49717	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:24.061677933 CEST	443	49717	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:24.062195063 CEST	443	49717	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:24.066189051 CEST	49717	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:24.066453934 CEST	49717	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:24.066468954 CEST	443	49717	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:24.066710949 CEST	49717	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:24.108505964 CEST	443	49717	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:24.243200064 CEST	443	49717	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:24.243407965 CEST	443	49717	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:24.243484974 CEST	49717	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:24.244813919 CEST	49717	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:24.244832993 CEST	443	49717	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:24.323542118 CEST	443	49722	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:24.323823929 CEST	49722	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:24.323834896 CEST	443	49722	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:24.327523947 CEST	443	49722	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:24.327604055 CEST	49722	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:24.328644037 CEST	49722	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:24.328818083 CEST	443	49722	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:24.328975916 CEST	49722	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:24.328984022 CEST	443	49722	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:24.368498087 CEST	49722	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:24.495634079 CEST	443	49722	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:24.495759010 CEST	443	49722	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:24.495822906 CEST	49722	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:24.495862961 CEST	443	49722	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:24.495913982 CEST	49722	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:24.495954990 CEST	443	49722	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:24.496011019 CEST	49722	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:24.496028900 CEST	443	49722	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:24.496129036 CEST	443	49722	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:24.496186018 CEST	49722	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:24.497581005 CEST	49722	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:24.497601986 CEST	443	49722	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:24.505842924 CEST	49674	443	192.168.2.6	173.222.162.64
Jul 15, 2024 17:49:24.505842924 CEST	49673	443	192.168.2.6	173.222.162.64
Jul 15, 2024 17:49:24.625061035 CEST	49723	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:24.625124931 CEST	443	49723	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:24.625185013 CEST	49723	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:24.625700951 CEST	49723	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:24.625714064 CEST	443	49723	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:24.834896088 CEST	49672	443	192.168.2.6	173.222.162.64
Jul 15, 2024 17:49:25.129421949 CEST	443	49723	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:25.143237114 CEST	49723	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:25.143271923 CEST	443	49723	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:25.144737005 CEST	443	49723	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:25.145293951 CEST	49723	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:25.145488024 CEST	443	49723	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:25.146701097 CEST	49723	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:25.192507982 CEST	443	49723	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:25.336602926 CEST	443	49723	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:25.336704969 CEST	443	49723	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:25.337483883 CEST	49723	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:25.400165081 CEST	49726	443	192.168.2.6	142.250.186.132
Jul 15, 2024 17:49:25.400226116 CEST	443	49726	142.250.186.132	192.168.2.6
Jul 15, 2024 17:49:25.400243998 CEST	49723	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:25.400271893 CEST	443	49723	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:25.400342941 CEST	49726	443	192.168.2.6	142.250.186.132
Jul 15, 2024 17:49:25.405236959 CEST	49726	443	192.168.2.6	142.250.186.132
Jul 15, 2024 17:49:25.405255079 CEST	443	49726	142.250.186.132	192.168.2.6
Jul 15, 2024 17:49:25.569753885 CEST	49727	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:25.569788933 CEST	443	49727	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:25.569860935 CEST	49727	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:25.570199013 CEST	49727	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:25.570215940 CEST	443	49727	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:25.852158070 CEST	49728	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:25.852207899 CEST	443	49728	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:25.852297068 CEST	49728	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:25.852727890 CEST	49728	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:25.852741003 CEST	443	49728	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:25.953418016 CEST	49729	443	192.168.2.6	2.19.244.127
Jul 15, 2024 17:49:25.953443050 CEST	443	49729	2.19.244.127	192.168.2.6
Jul 15, 2024 17:49:25.953830004 CEST	49729	443	192.168.2.6	2.19.244.127
Jul 15, 2024 17:49:25.956382990 CEST	49729	443	192.168.2.6	2.19.244.127
Jul 15, 2024 17:49:25.956394911 CEST	443	49729	2.19.244.127	192.168.2.6
Jul 15, 2024 17:49:26.051486015 CEST	443	49727	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:26.052108049 CEST	49727	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:26.052135944 CEST	443	49727	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:26.052473068 CEST	443	49727	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:26.053345919 CEST	49727	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:26.053400040 CEST	443	49727	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:26.053522110 CEST	49727	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:26.091882944 CEST	443	49726	142.250.186.132	192.168.2.6
Jul 15, 2024 17:49:26.092137098 CEST	49726	443	192.168.2.6	142.250.186.132
Jul 15, 2024 17:49:26.092180014 CEST	443	49726	142.250.186.132	192.168.2.6
Jul 15, 2024 17:49:26.093657970 CEST	443	49726	142.250.186.132	192.168.2.6
Jul 15, 2024 17:49:26.093739986 CEST	49726	443	192.168.2.6	142.250.186.132
Jul 15, 2024 17:49:26.100498915 CEST	443	49727	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:26.176908016 CEST	49726	443	192.168.2.6	142.250.186.132
Jul 15, 2024 17:49:26.177287102 CEST	443	49726	142.250.186.132	192.168.2.6
Jul 15, 2024 17:49:26.189768076 CEST	443	49727	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:26.189870119 CEST	443	49727	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:26.189919949 CEST	49727	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:26.190845013 CEST	49727	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:26.190861940 CEST	443	49727	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:26.224618912 CEST	49726	443	192.168.2.6	142.250.186.132
Jul 15, 2024 17:49:26.224662066 CEST	443	49726	142.250.186.132	192.168.2.6
Jul 15, 2024 17:49:26.271768093 CEST	49726	443	192.168.2.6	142.250.186.132
Jul 15, 2024 17:49:26.339071989 CEST	443	49728	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:26.340054989 CEST	49728	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:26.340080023 CEST	443	49728	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:26.340673923 CEST	443	49728	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:26.341675997 CEST	49728	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:26.341762066 CEST	443	49728	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:26.342183113 CEST	49728	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:26.388489008 CEST	443	49728	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:26.502593994 CEST	443	49728	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:26.502804041 CEST	443	49728	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:26.502866983 CEST	49728	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:26.503863096 CEST	49728	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:26.503884077 CEST	443	49728	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:26.567272902 CEST	443	49705	173.222.162.64	192.168.2.6
Jul 15, 2024 17:49:26.567362070 CEST	49705	443	192.168.2.6	173.222.162.64
Jul 15, 2024 17:49:26.613812923 CEST	443	49729	2.19.244.127	192.168.2.6
Jul 15, 2024 17:49:26.613889933 CEST	49729	443	192.168.2.6	2.19.244.127
Jul 15, 2024 17:49:26.625859022 CEST	49729	443	192.168.2.6	2.19.244.127
Jul 15, 2024 17:49:26.625880003 CEST	443	49729	2.19.244.127	192.168.2.6
Jul 15, 2024 17:49:26.626216888 CEST	443	49729	2.19.244.127	192.168.2.6
Jul 15, 2024 17:49:26.677890062 CEST	49729	443	192.168.2.6	2.19.244.127
Jul 15, 2024 17:49:26.687346935 CEST	49729	443	192.168.2.6	2.19.244.127
Jul 15, 2024 17:49:26.732502937 CEST	443	49729	2.19.244.127	192.168.2.6
Jul 15, 2024 17:49:26.877078056 CEST	443	49729	2.19.244.127	192.168.2.6
Jul 15, 2024 17:49:26.877140999 CEST	443	49729	2.19.244.127	192.168.2.6
Jul 15, 2024 17:49:26.877188921 CEST	49729	443	192.168.2.6	2.19.244.127
Jul 15, 2024 17:49:26.877317905 CEST	49729	443	192.168.2.6	2.19.244.127
Jul 15, 2024 17:49:26.877336979 CEST	443	49729	2.19.244.127	192.168.2.6
Jul 15, 2024 17:49:26.877348900 CEST	49729	443	192.168.2.6	2.19.244.127
Jul 15, 2024 17:49:26.877353907 CEST	443	49729	2.19.244.127	192.168.2.6
Jul 15, 2024 17:49:27.767014980 CEST	49730	443	192.168.2.6	2.19.244.127
Jul 15, 2024 17:49:27.767074108 CEST	443	49730	2.19.244.127	192.168.2.6
Jul 15, 2024 17:49:27.767167091 CEST	49730	443	192.168.2.6	2.19.244.127
Jul 15, 2024 17:49:27.767971039 CEST	49730	443	192.168.2.6	2.19.244.127
Jul 15, 2024 17:49:27.767991066 CEST	443	49730	2.19.244.127	192.168.2.6
Jul 15, 2024 17:49:28.451200962 CEST	49731	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:28.451273918 CEST	443	49731	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:28.451343060 CEST	49731	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:28.451725960 CEST	49731	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:28.451745987 CEST	443	49731	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:28.460195065 CEST	443	49730	2.19.244.127	192.168.2.6
Jul 15, 2024 17:49:28.460278988 CEST	49730	443	192.168.2.6	2.19.244.127
Jul 15, 2024 17:49:28.462603092 CEST	49730	443	192.168.2.6	2.19.244.127
Jul 15, 2024 17:49:28.462613106 CEST	443	49730	2.19.244.127	192.168.2.6
Jul 15, 2024 17:49:28.462855101 CEST	443	49730	2.19.244.127	192.168.2.6
Jul 15, 2024 17:49:28.464132071 CEST	49730	443	192.168.2.6	2.19.244.127
Jul 15, 2024 17:49:28.508496046 CEST	443	49730	2.19.244.127	192.168.2.6
Jul 15, 2024 17:49:28.767262936 CEST	443	49730	2.19.244.127	192.168.2.6
Jul 15, 2024 17:49:28.767334938 CEST	443	49730	2.19.244.127	192.168.2.6
Jul 15, 2024 17:49:28.767384052 CEST	49730	443	192.168.2.6	2.19.244.127
Jul 15, 2024 17:49:28.768137932 CEST	49730	443	192.168.2.6	2.19.244.127
Jul 15, 2024 17:49:28.768162966 CEST	443	49730	2.19.244.127	192.168.2.6
Jul 15, 2024 17:49:28.768182039 CEST	49730	443	192.168.2.6	2.19.244.127
Jul 15, 2024 17:49:28.768189907 CEST	443	49730	2.19.244.127	192.168.2.6
Jul 15, 2024 17:49:28.945985079 CEST	443	49731	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:28.946706057 CEST	49731	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:28.946732998 CEST	443	49731	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:28.947086096 CEST	443	49731	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:28.948285103 CEST	49731	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:28.948340893 CEST	443	49731	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:28.948647022 CEST	49731	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:28.992499113 CEST	443	49731	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:29.111849070 CEST	443	49731	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:29.111943007 CEST	443	49731	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:29.112032890 CEST	49731	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:29.118452072 CEST	49731	443	192.168.2.6	75.2.96.155
Jul 15, 2024 17:49:29.118478060 CEST	443	49731	75.2.96.155	192.168.2.6
Jul 15, 2024 17:49:31.139314890 CEST	49732	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:31.139374018 CEST	443	49732	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:31.139652014 CEST	49732	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:31.140085936 CEST	49732	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:31.140110016 CEST	443	49732	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:32.094777107 CEST	443	49732	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:32.094858885 CEST	49732	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:32.097433090 CEST	49732	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:32.097446918 CEST	443	49732	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:32.097687960 CEST	443	49732	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:32.099833965 CEST	49732	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:32.099901915 CEST	49732	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:32.099909067 CEST	443	49732	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:32.100017071 CEST	49732	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:32.140538931 CEST	443	49732	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:32.278053045 CEST	443	49732	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:32.278265953 CEST	443	49732	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:32.278810024 CEST	49732	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:32.279773951 CEST	49732	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:32.279804945 CEST	443	49732	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:32.279818058 CEST	49732	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:35.667869091 CEST	49735	443	192.168.2.6	104.21.65.212
Jul 15, 2024 17:49:35.667891026 CEST	443	49735	104.21.65.212	192.168.2.6
Jul 15, 2024 17:49:35.668009996 CEST	49735	443	192.168.2.6	104.21.65.212
Jul 15, 2024 17:49:35.668239117 CEST	49736	443	192.168.2.6	104.21.65.212
Jul 15, 2024 17:49:35.668246031 CEST	443	49736	104.21.65.212	192.168.2.6
Jul 15, 2024 17:49:35.668339968 CEST	49736	443	192.168.2.6	104.21.65.212
Jul 15, 2024 17:49:35.668451071 CEST	49735	443	192.168.2.6	104.21.65.212
Jul 15, 2024 17:49:35.668466091 CEST	443	49735	104.21.65.212	192.168.2.6
Jul 15, 2024 17:49:35.668710947 CEST	49736	443	192.168.2.6	104.21.65.212
Jul 15, 2024 17:49:35.668724060 CEST	443	49736	104.21.65.212	192.168.2.6
Jul 15, 2024 17:49:35.965666056 CEST	443	49726	142.250.186.132	192.168.2.6
Jul 15, 2024 17:49:35.965734959 CEST	443	49726	142.250.186.132	192.168.2.6
Jul 15, 2024 17:49:35.965791941 CEST	49726	443	192.168.2.6	142.250.186.132
Jul 15, 2024 17:49:36.134382963 CEST	443	49736	104.21.65.212	192.168.2.6
Jul 15, 2024 17:49:36.135027885 CEST	49736	443	192.168.2.6	104.21.65.212
Jul 15, 2024 17:49:36.135056019 CEST	443	49736	104.21.65.212	192.168.2.6
Jul 15, 2024 17:49:36.136074066 CEST	443	49736	104.21.65.212	192.168.2.6
Jul 15, 2024 17:49:36.136142015 CEST	49736	443	192.168.2.6	104.21.65.212
Jul 15, 2024 17:49:36.137504101 CEST	49736	443	192.168.2.6	104.21.65.212
Jul 15, 2024 17:49:36.137579918 CEST	443	49736	104.21.65.212	192.168.2.6
Jul 15, 2024 17:49:36.137866974 CEST	49736	443	192.168.2.6	104.21.65.212
Jul 15, 2024 17:49:36.137886047 CEST	443	49736	104.21.65.212	192.168.2.6
Jul 15, 2024 17:49:36.178503990 CEST	49736	443	192.168.2.6	104.21.65.212
Jul 15, 2024 17:49:36.179912090 CEST	443	49735	104.21.65.212	192.168.2.6
Jul 15, 2024 17:49:36.185528994 CEST	49735	443	192.168.2.6	104.21.65.212
Jul 15, 2024 17:49:36.185542107 CEST	443	49735	104.21.65.212	192.168.2.6
Jul 15, 2024 17:49:36.186635971 CEST	443	49735	104.21.65.212	192.168.2.6
Jul 15, 2024 17:49:36.186700106 CEST	49735	443	192.168.2.6	104.21.65.212
Jul 15, 2024 17:49:36.187201023 CEST	49735	443	192.168.2.6	104.21.65.212
Jul 15, 2024 17:49:36.187267065 CEST	443	49735	104.21.65.212	192.168.2.6
Jul 15, 2024 17:49:36.240428925 CEST	49735	443	192.168.2.6	104.21.65.212
Jul 15, 2024 17:49:36.240442038 CEST	443	49735	104.21.65.212	192.168.2.6
Jul 15, 2024 17:49:36.289972067 CEST	49735	443	192.168.2.6	104.21.65.212
Jul 15, 2024 17:49:36.473315001 CEST	443	49736	104.21.65.212	192.168.2.6
Jul 15, 2024 17:49:36.473354101 CEST	443	49736	104.21.65.212	192.168.2.6
Jul 15, 2024 17:49:36.473403931 CEST	49736	443	192.168.2.6	104.21.65.212
Jul 15, 2024 17:49:36.473438978 CEST	443	49736	104.21.65.212	192.168.2.6
Jul 15, 2024 17:49:36.473459959 CEST	443	49736	104.21.65.212	192.168.2.6
Jul 15, 2024 17:49:36.473506927 CEST	49736	443	192.168.2.6	104.21.65.212
Jul 15, 2024 17:49:36.475846052 CEST	49736	443	192.168.2.6	104.21.65.212
Jul 15, 2024 17:49:36.475869894 CEST	443	49736	104.21.65.212	192.168.2.6
Jul 15, 2024 17:49:36.509758949 CEST	49726	443	192.168.2.6	142.250.186.132
Jul 15, 2024 17:49:36.509852886 CEST	443	49726	142.250.186.132	192.168.2.6
Jul 15, 2024 17:49:36.523780107 CEST	49738	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:36.523811102 CEST	443	49738	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:36.523889065 CEST	49738	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:36.524090052 CEST	49738	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:36.524106026 CEST	443	49738	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.003367901 CEST	443	49738	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.003885031 CEST	49738	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:37.003909111 CEST	443	49738	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.004954100 CEST	443	49738	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.005038023 CEST	49738	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:37.013643026 CEST	49738	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:37.013710976 CEST	443	49738	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.014054060 CEST	49738	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:37.014061928 CEST	443	49738	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.054388046 CEST	49738	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:37.142025948 CEST	443	49738	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.142126083 CEST	443	49738	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.142255068 CEST	49738	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:37.153584957 CEST	49738	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:37.153606892 CEST	443	49738	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.161778927 CEST	49740	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:37.161804914 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.161875010 CEST	49740	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:37.162549973 CEST	49740	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:37.162568092 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.587954044 CEST	49705	443	192.168.2.6	173.222.162.64
Jul 15, 2024 17:49:37.588025093 CEST	49705	443	192.168.2.6	173.222.162.64
Jul 15, 2024 17:49:37.588565111 CEST	49741	443	192.168.2.6	173.222.162.64
Jul 15, 2024 17:49:37.588610888 CEST	443	49741	173.222.162.64	192.168.2.6
Jul 15, 2024 17:49:37.588684082 CEST	49741	443	192.168.2.6	173.222.162.64
Jul 15, 2024 17:49:37.588912964 CEST	49741	443	192.168.2.6	173.222.162.64
Jul 15, 2024 17:49:37.588927984 CEST	443	49741	173.222.162.64	192.168.2.6
Jul 15, 2024 17:49:37.603334904 CEST	443	49705	173.222.162.64	192.168.2.6
Jul 15, 2024 17:49:37.603406906 CEST	443	49705	173.222.162.64	192.168.2.6
Jul 15, 2024 17:49:37.627151012 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.627409935 CEST	49740	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:37.627439022 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.627727032 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.628086090 CEST	49740	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:37.628144979 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.628216028 CEST	49740	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:37.672508001 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.775207996 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.775259018 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.775302887 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.775336981 CEST	49740	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:37.775358915 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.775396109 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.775399923 CEST	49740	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:37.775410891 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.775453091 CEST	49740	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:37.775460958 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.775500059 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.775559902 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.775598049 CEST	49740	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:37.775599957 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.775614023 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.775640011 CEST	49740	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:37.820979118 CEST	49740	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:37.820998907 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:37.868963003 CEST	49740	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.164947033 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.165002108 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.165024996 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.165055990 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.165061951 CEST	49740	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.165086031 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.165117025 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.165127039 CEST	49740	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.165158033 CEST	49740	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.165163994 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.165204048 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.165225983 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.165255070 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.165270090 CEST	49740	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.165277004 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.165288925 CEST	49740	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.165309906 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.165349960 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.165385008 CEST	49740	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.165390968 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.165431023 CEST	49740	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.165512085 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.165559053 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.165587902 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.165617943 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.165626049 CEST	49740	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.165632010 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.165652037 CEST	49740	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.165669918 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.165704966 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.165744066 CEST	49740	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.165750027 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.165783882 CEST	49740	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.165802002 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.165843010 CEST	49740	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.195316076 CEST	443	49741	173.222.162.64	192.168.2.6
Jul 15, 2024 17:49:38.195780993 CEST	49741	443	192.168.2.6	173.222.162.64
Jul 15, 2024 17:49:38.207329035 CEST	49740	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.207361937 CEST	443	49740	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.321095943 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.321146011 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.321197987 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.321918964 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.321940899 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.334291935 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.334328890 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.334594011 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.335201025 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.335215092 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.594119072 CEST	65044	53	192.168.2.6	1.1.1.1
Jul 15, 2024 17:49:38.598944902 CEST	53	65044	1.1.1.1	192.168.2.6
Jul 15, 2024 17:49:38.599055052 CEST	65044	53	192.168.2.6	1.1.1.1
Jul 15, 2024 17:49:38.599091053 CEST	65044	53	192.168.2.6	1.1.1.1
Jul 15, 2024 17:49:38.604192972 CEST	53	65044	1.1.1.1	192.168.2.6
Jul 15, 2024 17:49:38.785528898 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.785974979 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.786005020 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.787002087 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.787053108 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.788242102 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.788300991 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.788595915 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.788608074 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.798434019 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.799063921 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.799091101 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.800123930 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.800179005 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.815505028 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.815629005 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.839040995 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.850997925 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.851028919 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.898600101 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.920331001 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.920367956 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.920392990 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.920419931 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.920422077 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.920442104 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.920463085 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.920842886 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.920872927 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.920888901 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.920896053 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.920952082 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.920958996 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.926201105 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.926245928 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.926317930 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.926331043 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.929627895 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.968544960 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.968750000 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.968837023 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.968839884 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.968914032 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.968978882 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.968996048 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.969078064 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.969134092 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.969146967 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.969540119 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.969645023 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.969656944 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.973329067 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:38.973385096 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:38.973397970 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.014224052 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.014297962 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.014332056 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.014347076 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.014365911 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.014379978 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.014413118 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.014424086 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.014431953 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.014456987 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.014467955 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.014498949 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.014511108 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.014544964 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.014571905 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.014579058 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.014585972 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.014616013 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.015080929 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.015141964 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.015191078 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.015201092 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.015229940 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.015268087 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.015274048 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.016554117 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.016611099 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.016618013 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.016701937 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.016736984 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.016784906 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.016791105 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.016824007 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.016833067 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.016973972 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.023099899 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.023149014 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.051069021 CEST	49743	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.051095009 CEST	443	49743	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.052717924 CEST	65045	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.052758932 CEST	443	65045	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.053015947 CEST	65045	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.053256035 CEST	65045	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.053271055 CEST	443	65045	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.064795017 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.080807924 CEST	53	65044	1.1.1.1	192.168.2.6
Jul 15, 2024 17:49:39.082022905 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.082087040 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.082109928 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.082128048 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.082139015 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.082182884 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.082189083 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.083187103 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.083208084 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.083250046 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.083264112 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.083300114 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.083312988 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.083323956 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.083374977 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.083385944 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.085436106 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.085464954 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.085489035 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.085488081 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.085501909 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.085534096 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.085536957 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.085558891 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.085578918 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.085591078 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.085637093 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.085639000 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.085654974 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.085695982 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.085705996 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.085719109 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.085764885 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.085776091 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.086453915 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.086503029 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.086513996 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.087774038 CEST	65044	53	192.168.2.6	1.1.1.1
Jul 15, 2024 17:49:39.097857952 CEST	53	65044	1.1.1.1	192.168.2.6
Jul 15, 2024 17:49:39.097912073 CEST	65044	53	192.168.2.6	1.1.1.1
Jul 15, 2024 17:49:39.132638931 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.185641050 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.185873032 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.185940027 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.185970068 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.186660051 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.186697006 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.186702013 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.186920881 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.186959982 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.186964989 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.187000990 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.187258005 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.187299013 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.187302113 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.187333107 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.187443972 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.187486887 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.188908100 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.188960075 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.188963890 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.188986063 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.189018965 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.189090014 CEST	49742	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.189104080 CEST	443	49742	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.548070908 CEST	443	65045	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.548362970 CEST	65045	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.548379898 CEST	443	65045	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.548712015 CEST	443	65045	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.549076080 CEST	65045	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.549129009 CEST	443	65045	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.549295902 CEST	65045	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.578202963 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.578242064 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.578322887 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.578581095 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.578597069 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.592518091 CEST	443	65045	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.683240891 CEST	443	65045	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.683319092 CEST	443	65045	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.683387995 CEST	65045	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.684870005 CEST	65045	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.684921026 CEST	443	65045	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.692390919 CEST	65047	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.692424059 CEST	443	65047	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:39.692492962 CEST	65047	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.692882061 CEST	65047	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:39.692897081 CEST	443	65047	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.040893078 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.041399956 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.041414976 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.041834116 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.042632103 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.042716026 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.043293953 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.088500977 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.147051096 CEST	443	65047	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.147638083 CEST	65047	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.147660971 CEST	443	65047	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.147984982 CEST	443	65047	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.148977041 CEST	65047	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.149043083 CEST	443	65047	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.149424076 CEST	65047	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.166131020 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.166172028 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.166199923 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.166224003 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.166232109 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.166245937 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.166273117 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.166273117 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.166301966 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.166311026 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.166317940 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.166445971 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.166605949 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.166726112 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.166763067 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.166774988 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.196492910 CEST	443	65047	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.210814953 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.210829973 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.253873110 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.253905058 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.253932953 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.253954887 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.254055023 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.254055977 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.254128933 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.254211903 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.254555941 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.254688978 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.254712105 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.254761934 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.254784107 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.254839897 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.254941940 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.255009890 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.255059004 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.255072117 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.255127907 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.255250931 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.255266905 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.256014109 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.256042004 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.256062984 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.256067038 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.256082058 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.256145000 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.256726980 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.256777048 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.256788015 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.256800890 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.256865025 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.258908987 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.299988985 CEST	443	65047	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.300070047 CEST	443	65047	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.300122976 CEST	65047	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.301269054 CEST	65047	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.301294088 CEST	443	65047	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.304815054 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.304838896 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.342386007 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.342426062 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.342449903 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.342468023 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.342480898 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.342513084 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.342514992 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.342525005 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.342559099 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.342565060 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.342637062 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.342880011 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.342888117 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.342922926 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.342957020 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.342978954 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.342987061 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.342993975 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.343012094 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.343091011 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.343126059 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.343137026 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.343173027 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.343334913 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.343384027 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.343530893 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.343586922 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.343656063 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.343696117 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.343873024 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.343910933 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.344470024 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.344511032 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.344692945 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.344718933 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.344733000 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.344738960 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.344759941 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.344891071 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.344937086 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.344944000 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.345144987 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.345381975 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.345422983 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.430113077 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.430160999 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.430180073 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.430207968 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.430224895 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.430243015 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.430243015 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.430275917 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.430804968 CEST	65046	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.430821896 CEST	443	65046	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.437460899 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.437500954 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.437647104 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.438368082 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.438380003 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.564713001 CEST	49735	443	192.168.2.6	104.21.65.212
Jul 15, 2024 17:49:40.612504005 CEST	443	49735	104.21.65.212	192.168.2.6
Jul 15, 2024 17:49:40.875159979 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.875219107 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.875277996 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.889069080 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.889106989 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.899926901 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.900418043 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.900445938 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.901546955 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.902034044 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.902172089 CEST	443	49735	104.21.65.212	192.168.2.6
Jul 15, 2024 17:49:40.902214050 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:40.902220011 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.902273893 CEST	443	49735	104.21.65.212	192.168.2.6
Jul 15, 2024 17:49:40.902338028 CEST	49735	443	192.168.2.6	104.21.65.212
Jul 15, 2024 17:49:40.903812885 CEST	49735	443	192.168.2.6	104.21.65.212
Jul 15, 2024 17:49:40.903840065 CEST	443	49735	104.21.65.212	192.168.2.6
Jul 15, 2024 17:49:40.915630102 CEST	65050	443	192.168.2.6	35.190.80.1
Jul 15, 2024 17:49:40.915672064 CEST	443	65050	35.190.80.1	192.168.2.6
Jul 15, 2024 17:49:40.915730953 CEST	65050	443	192.168.2.6	35.190.80.1
Jul 15, 2024 17:49:40.916064978 CEST	65050	443	192.168.2.6	35.190.80.1
Jul 15, 2024 17:49:40.916081905 CEST	443	65050	35.190.80.1	192.168.2.6
Jul 15, 2024 17:49:40.943128109 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:40.943149090 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.024063110 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.024163961 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.024226904 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.024236917 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.024256945 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.024302006 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.024307966 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.024370909 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.024409056 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.024415016 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.024523020 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.024578094 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.024621964 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.024631023 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.024667978 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.024673939 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.076057911 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.076082945 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.111315012 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.111350060 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.111377001 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.111380100 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.111409903 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.111438036 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.111550093 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.111588955 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.111597061 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.111632109 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.111670017 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.111676931 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.111737013 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.111881971 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.111888885 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.112618923 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.112648964 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.112665892 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.112674952 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.112714052 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.112716913 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.112730980 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.112771988 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.112778902 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.113562107 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.113619089 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.113626003 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.113691092 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.113713980 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.113749981 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.113755941 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.113845110 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.114461899 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.158373117 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.158587933 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.158612967 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.198453903 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.198491096 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.198508024 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.198517084 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.198528051 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.198556900 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.198574066 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.198613882 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.198623896 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.198800087 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.198843956 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.198851109 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.198890924 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.198986053 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.198992968 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.199034929 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.199040890 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.199079990 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.199122906 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.199171066 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.199915886 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.199943066 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.199976921 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.199984074 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.199995041 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.200818062 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.200871944 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.200879097 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.200920105 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.200965881 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.201014042 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.201525927 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.201577902 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.201675892 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.201730967 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.201828957 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.201879978 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.202488899 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.202542067 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.202656984 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.202703953 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.245676041 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.245745897 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.245763063 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.245794058 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.245809078 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.245839119 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.246134043 CEST	65048	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.246145964 CEST	443	65048	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.363806963 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.364581108 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.364613056 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.364933014 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.365432024 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.365490913 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.366125107 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.366430044 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.366452932 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.380733967 CEST	443	65050	35.190.80.1	192.168.2.6
Jul 15, 2024 17:49:41.381417990 CEST	65050	443	192.168.2.6	35.190.80.1
Jul 15, 2024 17:49:41.381444931 CEST	443	65050	35.190.80.1	192.168.2.6
Jul 15, 2024 17:49:41.382455111 CEST	443	65050	35.190.80.1	192.168.2.6
Jul 15, 2024 17:49:41.382518053 CEST	65050	443	192.168.2.6	35.190.80.1
Jul 15, 2024 17:49:41.385124922 CEST	65050	443	192.168.2.6	35.190.80.1
Jul 15, 2024 17:49:41.385206938 CEST	443	65050	35.190.80.1	192.168.2.6
Jul 15, 2024 17:49:41.385576963 CEST	65050	443	192.168.2.6	35.190.80.1
Jul 15, 2024 17:49:41.385595083 CEST	443	65050	35.190.80.1	192.168.2.6
Jul 15, 2024 17:49:41.430850029 CEST	65050	443	192.168.2.6	35.190.80.1
Jul 15, 2024 17:49:41.512130022 CEST	443	65050	35.190.80.1	192.168.2.6
Jul 15, 2024 17:49:41.512217045 CEST	443	65050	35.190.80.1	192.168.2.6
Jul 15, 2024 17:49:41.512288094 CEST	65050	443	192.168.2.6	35.190.80.1
Jul 15, 2024 17:49:41.513551950 CEST	65050	443	192.168.2.6	35.190.80.1
Jul 15, 2024 17:49:41.513576031 CEST	443	65050	35.190.80.1	192.168.2.6
Jul 15, 2024 17:49:41.514322996 CEST	65051	443	192.168.2.6	35.190.80.1
Jul 15, 2024 17:49:41.514347076 CEST	443	65051	35.190.80.1	192.168.2.6
Jul 15, 2024 17:49:41.514703989 CEST	65051	443	192.168.2.6	35.190.80.1
Jul 15, 2024 17:49:41.514947891 CEST	65051	443	192.168.2.6	35.190.80.1
Jul 15, 2024 17:49:41.514959097 CEST	443	65051	35.190.80.1	192.168.2.6
Jul 15, 2024 17:49:41.532496929 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.532569885 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.532598019 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.532625914 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.532630920 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.532655001 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.532810926 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.532830954 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.532871008 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.533049107 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.533165932 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.533200026 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.533210039 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.537520885 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.537544966 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.537590981 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.537620068 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.537724018 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.623449087 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.623492002 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.623537064 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.623543978 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.623573065 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.623604059 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.623613119 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.623621941 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.623656034 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.623842955 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.623897076 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.623919010 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.623933077 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.623943090 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.623986959 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.623991966 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.624003887 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.624036074 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.624042988 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.624584913 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.624634027 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.624644995 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.624670029 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.624706030 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.624715090 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.624789000 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.624810934 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.624824047 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.624833107 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.624912024 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.624919891 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.625559092 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.625579119 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.625598907 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.625607967 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.625675917 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.713896036 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.713948011 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.713980913 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.714000940 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.714004040 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.714031935 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.714054108 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.714433908 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.714592934 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.714623928 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.714636087 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.714652061 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.714698076 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.714704037 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.715056896 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.715142965 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.715171099 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.715178967 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.715202093 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.715812922 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.715996027 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.716025114 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.716037035 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.716052055 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.716186047 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.716223001 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.716232061 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.716279984 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.716778994 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.716823101 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.718636990 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.718683958 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.718875885 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.718919039 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.718944073 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.718982935 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.719053030 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.719089985 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.719135046 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.719180107 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.808643103 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.808710098 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.808736086 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.808779001 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.809035063 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.809077978 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.809081078 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.809092045 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.809114933 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.809125900 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.809140921 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.809160948 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.809617996 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.809653044 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.809654951 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.809664011 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.809689045 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.809704065 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.809710979 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.809729099 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:41.809762001 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.885616064 CEST	65049	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:41.885648966 CEST	443	65049	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:42.008218050 CEST	443	65051	35.190.80.1	192.168.2.6
Jul 15, 2024 17:49:42.062562943 CEST	65051	443	192.168.2.6	35.190.80.1
Jul 15, 2024 17:49:42.307209015 CEST	65051	443	192.168.2.6	35.190.80.1
Jul 15, 2024 17:49:42.307288885 CEST	443	65051	35.190.80.1	192.168.2.6
Jul 15, 2024 17:49:42.308742046 CEST	443	65051	35.190.80.1	192.168.2.6
Jul 15, 2024 17:49:42.309137106 CEST	65051	443	192.168.2.6	35.190.80.1
Jul 15, 2024 17:49:42.309344053 CEST	443	65051	35.190.80.1	192.168.2.6
Jul 15, 2024 17:49:42.309555054 CEST	65051	443	192.168.2.6	35.190.80.1
Jul 15, 2024 17:49:42.356503010 CEST	443	65051	35.190.80.1	192.168.2.6
Jul 15, 2024 17:49:42.521640062 CEST	65053	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:42.521697998 CEST	443	65053	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:42.521787882 CEST	65053	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:42.522057056 CEST	65053	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:42.522068024 CEST	443	65053	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:42.646004915 CEST	443	65051	35.190.80.1	192.168.2.6
Jul 15, 2024 17:49:42.646090031 CEST	443	65051	35.190.80.1	192.168.2.6
Jul 15, 2024 17:49:42.646151066 CEST	65051	443	192.168.2.6	35.190.80.1
Jul 15, 2024 17:49:42.874102116 CEST	65051	443	192.168.2.6	35.190.80.1
Jul 15, 2024 17:49:42.874145031 CEST	443	65051	35.190.80.1	192.168.2.6
Jul 15, 2024 17:49:42.979526997 CEST	443	65053	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:42.980890036 CEST	65053	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:42.980909109 CEST	443	65053	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:42.982008934 CEST	443	65053	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:42.982542992 CEST	65053	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:42.982654095 CEST	443	65053	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:42.982800961 CEST	65053	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:43.028505087 CEST	443	65053	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:43.134443998 CEST	443	65053	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:43.134629965 CEST	443	65053	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:43.134751081 CEST	65053	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:43.168540955 CEST	65053	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:43.168581009 CEST	443	65053	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:43.306674004 CEST	65054	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:43.306724072 CEST	443	65054	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:43.306785107 CEST	65054	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:43.307018042 CEST	65054	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:43.307034969 CEST	443	65054	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:43.549573898 CEST	65055	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:43.549623966 CEST	443	65055	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:43.549680948 CEST	65055	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:43.550324917 CEST	65055	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:43.550339937 CEST	443	65055	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:43.621692896 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:43.621750116 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:43.621814013 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:43.622220039 CEST	65057	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:43.622256041 CEST	443	65057	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:43.622308969 CEST	65057	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:43.622342110 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:43.622360945 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:43.622618914 CEST	65057	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:43.622632027 CEST	443	65057	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:43.794358015 CEST	443	65054	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:43.794658899 CEST	65054	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:43.794694901 CEST	443	65054	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:43.795054913 CEST	443	65054	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:43.795380116 CEST	65054	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:43.795455933 CEST	443	65054	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:43.795559883 CEST	65054	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:43.840507984 CEST	443	65054	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:43.943106890 CEST	443	65054	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:43.943188906 CEST	443	65054	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:43.943236113 CEST	65054	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:43.943254948 CEST	443	65054	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:43.943269014 CEST	443	65054	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:43.943324089 CEST	65054	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:43.945391893 CEST	65054	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:43.945408106 CEST	443	65054	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:44.111053944 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.111409903 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.111447096 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.112463951 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.112555027 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.113709927 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.113709927 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.113728046 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.113795996 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.116034031 CEST	443	65057	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.116290092 CEST	65057	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.116308928 CEST	443	65057	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.120920897 CEST	443	65057	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.121176004 CEST	65057	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.121351004 CEST	65057	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.121551991 CEST	443	65057	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.165225983 CEST	65057	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.165227890 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.165246964 CEST	443	65057	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.165260077 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.210999012 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.211000919 CEST	65057	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.261847973 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.261893988 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.261940002 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.261950016 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.261972904 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.261990070 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.262018919 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.277771950 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.277806997 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.277935982 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.277936935 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.277947903 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.280802965 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.348568916 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.348593950 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.348668098 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.348861933 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.349864006 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.349884987 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.349966049 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.349966049 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.349978924 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.350178003 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.350975990 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.351171017 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.351178885 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.368580103 CEST	443	65055	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:44.368958950 CEST	65055	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:44.377613068 CEST	65055	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:44.377640009 CEST	443	65055	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:44.377942085 CEST	443	65055	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:44.379843950 CEST	65055	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:44.380007029 CEST	65055	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:44.380007029 CEST	65055	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:44.380012989 CEST	443	65055	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:44.405684948 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.424514055 CEST	443	65055	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:44.435992956 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.436014891 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.436053991 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.436073065 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.436088085 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.436134100 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.436134100 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.436230898 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.436249018 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.436286926 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.436302900 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.436302900 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.436314106 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.436342955 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.437128067 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.437206984 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.437247992 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.437258959 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.437288046 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.437329054 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.438880920 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.438944101 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.438982964 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.438988924 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.439016104 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.447902918 CEST	65057	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.448597908 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.448645115 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.448685884 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.448693991 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.448723078 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.448968887 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.460313082 CEST	65060	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:44.460359097 CEST	443	65060	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:44.460654974 CEST	65060	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:44.461616039 CEST	65060	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:44.461637974 CEST	443	65060	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:44.471120119 CEST	65061	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:44.471152067 CEST	443	65061	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:44.471400976 CEST	65061	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:44.471400976 CEST	65061	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:44.471431971 CEST	443	65061	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:44.492503881 CEST	443	65057	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.522367001 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.522464037 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.522524118 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.522556067 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.522587061 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.522630930 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.522775888 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.523627996 CEST	65056	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.523652077 CEST	443	65056	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.563749075 CEST	443	65055	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:44.564240932 CEST	65055	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:44.564240932 CEST	65055	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:44.564260006 CEST	443	65055	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:44.564451933 CEST	443	65055	40.113.110.67	192.168.2.6
Jul 15, 2024 17:49:44.564529896 CEST	65055	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:44.564529896 CEST	65055	443	192.168.2.6	40.113.110.67
Jul 15, 2024 17:49:44.565895081 CEST	443	65057	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.565960884 CEST	443	65057	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.566073895 CEST	65057	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.566083908 CEST	443	65057	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.566103935 CEST	443	65057	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.566132069 CEST	443	65057	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.566164017 CEST	65057	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.566164017 CEST	65057	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.577894926 CEST	443	65057	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.577977896 CEST	65057	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.577977896 CEST	443	65057	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.578027964 CEST	443	65057	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.578181028 CEST	65057	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.653485060 CEST	443	65057	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.653521061 CEST	443	65057	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.653611898 CEST	65057	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.653611898 CEST	65057	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.653650999 CEST	443	65057	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.653825045 CEST	443	65057	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.653928041 CEST	65057	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.654270887 CEST	65057	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.654294014 CEST	443	65057	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.654349089 CEST	65057	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.654428005 CEST	65057	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.658576012 CEST	65062	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.658688068 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.659065962 CEST	65062	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.659065962 CEST	65062	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.659153938 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.699028969 CEST	65063	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.699083090 CEST	443	65063	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.699393034 CEST	65063	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.699393034 CEST	65063	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:44.699429035 CEST	443	65063	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:44.933612108 CEST	443	65061	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:44.933976889 CEST	65061	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:44.933998108 CEST	443	65061	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:44.935087919 CEST	443	65061	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:44.935569048 CEST	65061	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:44.935569048 CEST	65061	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:44.935592890 CEST	443	65061	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:44.935736895 CEST	443	65061	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:44.959350109 CEST	443	65060	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:44.960400105 CEST	65060	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:44.960439920 CEST	443	65060	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:44.962081909 CEST	443	65060	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:44.962325096 CEST	65060	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:44.963572979 CEST	65060	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:44.963711023 CEST	443	65060	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:44.963733912 CEST	65060	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:44.977839947 CEST	65061	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:45.008510113 CEST	443	65060	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:45.008658886 CEST	65060	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:45.008687019 CEST	443	65060	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:45.056158066 CEST	65060	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:45.076004982 CEST	443	65061	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:45.076077938 CEST	443	65061	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:45.077373981 CEST	65061	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:45.077776909 CEST	65061	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:45.077794075 CEST	443	65061	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:45.080080032 CEST	65064	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:45.080127001 CEST	443	65064	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:45.080420971 CEST	65064	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:45.080420971 CEST	65064	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:45.080461025 CEST	443	65064	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:45.102273941 CEST	443	65060	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:45.102317095 CEST	443	65060	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:45.102360964 CEST	65060	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:45.102391005 CEST	443	65060	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:45.102586031 CEST	443	65060	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:45.102596045 CEST	443	65060	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:45.102631092 CEST	65060	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:45.102642059 CEST	443	65060	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:45.103141069 CEST	443	65060	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:45.103152037 CEST	443	65060	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:45.103195906 CEST	65060	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:45.103205919 CEST	443	65060	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:45.103240967 CEST	65060	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:45.163654089 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.163928032 CEST	65062	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.163958073 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.164314985 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.164630890 CEST	65062	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.164701939 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.164773941 CEST	65062	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.191039085 CEST	443	65060	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:45.191055059 CEST	443	65060	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:45.191095114 CEST	443	65060	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:45.191116095 CEST	65060	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:45.191613913 CEST	443	65060	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:45.191639900 CEST	443	65060	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:45.191668987 CEST	65060	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:45.191683054 CEST	443	65060	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:45.191720963 CEST	443	65060	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:45.191723108 CEST	65060	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:45.191775084 CEST	65060	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:45.191986084 CEST	65060	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:45.192003965 CEST	443	65060	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:45.194963932 CEST	65065	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.194998980 CEST	443	65065	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.195076942 CEST	65065	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.195332050 CEST	65065	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.195343018 CEST	443	65065	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.212141037 CEST	443	65063	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.212450027 CEST	65063	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.212475061 CEST	443	65063	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.212496042 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.213905096 CEST	443	65063	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.213972092 CEST	65063	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.214561939 CEST	65063	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.214636087 CEST	443	65063	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.214937925 CEST	65063	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.214955091 CEST	443	65063	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.259399891 CEST	65063	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.309392929 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.309463978 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.309537888 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.309665918 CEST	65062	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.309667110 CEST	65062	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.309712887 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.322356939 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.322433949 CEST	65062	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.322457075 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.322511911 CEST	65062	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.378498077 CEST	443	65063	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.378602982 CEST	443	65063	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.378686905 CEST	443	65063	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.378690004 CEST	65063	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.378704071 CEST	443	65063	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.378839970 CEST	65063	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.394316912 CEST	443	65063	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.394478083 CEST	65063	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.394491911 CEST	443	65063	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.394541025 CEST	65063	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.401022911 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.401104927 CEST	65062	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.403126001 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.403204918 CEST	65062	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.403223038 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.403253078 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.403263092 CEST	65062	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.403284073 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.403322935 CEST	65062	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.413043976 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.413084984 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.413117886 CEST	65062	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.413132906 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.413168907 CEST	65062	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.469599009 CEST	443	65063	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.469613075 CEST	443	65063	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.469662905 CEST	65063	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.469795942 CEST	443	65063	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.469877005 CEST	65063	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.469883919 CEST	443	65063	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.469949961 CEST	65063	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.492057085 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.492120028 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.492141008 CEST	65062	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.492161989 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.492178917 CEST	65062	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.492263079 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.492311954 CEST	65062	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.492320061 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.492428064 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.492470026 CEST	65062	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.512496948 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.512533903 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.512629032 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.512940884 CEST	65068	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.512978077 CEST	443	65068	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.513039112 CEST	65068	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.513223886 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.513242006 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.513616085 CEST	65068	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.513628006 CEST	443	65068	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.514796972 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:45.514838934 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:45.514889956 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:45.515489101 CEST	65071	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.515506029 CEST	443	65071	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.515552998 CEST	65071	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.515913963 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:45.515928030 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:45.516149044 CEST	65071	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.516163111 CEST	443	65071	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.518479109 CEST	65073	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.518500090 CEST	443	65073	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.518548965 CEST	65073	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.518704891 CEST	65073	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.518712044 CEST	443	65073	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.519170046 CEST	65062	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.519185066 CEST	443	65062	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.520425081 CEST	65063	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.520456076 CEST	443	65063	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.523921967 CEST	65074	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.523942947 CEST	443	65074	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.523991108 CEST	65074	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.524287939 CEST	65074	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.524301052 CEST	443	65074	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.543080091 CEST	443	65064	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:45.543288946 CEST	65064	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:45.543304920 CEST	443	65064	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:45.543736935 CEST	443	65064	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:45.544070959 CEST	65064	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:45.544138908 CEST	443	65064	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:45.544281006 CEST	65064	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:45.584496975 CEST	443	65064	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:45.682729006 CEST	443	65064	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:45.682823896 CEST	443	65064	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:45.682873011 CEST	65064	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:45.692553997 CEST	65064	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:45.692579031 CEST	443	65064	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:45.705363035 CEST	443	65065	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.705588102 CEST	65065	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.705610991 CEST	443	65065	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.706401110 CEST	443	65065	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.706758976 CEST	65065	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.706898928 CEST	65065	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.706907034 CEST	443	65065	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.706922054 CEST	443	65065	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.757431030 CEST	65065	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.773052931 CEST	65075	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:45.773089886 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:45.773143053 CEST	65075	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:45.773469925 CEST	65075	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:45.773483038 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:45.936647892 CEST	443	65065	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.936743975 CEST	443	65065	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.936816931 CEST	65065	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.943487883 CEST	65076	443	192.168.2.6	64.233.166.155
Jul 15, 2024 17:49:45.943536997 CEST	443	65076	64.233.166.155	192.168.2.6
Jul 15, 2024 17:49:45.943589926 CEST	65076	443	192.168.2.6	64.233.166.155
Jul 15, 2024 17:49:45.945175886 CEST	65077	443	192.168.2.6	142.250.186.110
Jul 15, 2024 17:49:45.945235014 CEST	443	65077	142.250.186.110	192.168.2.6
Jul 15, 2024 17:49:45.945307016 CEST	65077	443	192.168.2.6	142.250.186.110
Jul 15, 2024 17:49:45.945530891 CEST	65076	443	192.168.2.6	64.233.166.155
Jul 15, 2024 17:49:45.945557117 CEST	443	65076	64.233.166.155	192.168.2.6
Jul 15, 2024 17:49:45.945686102 CEST	65065	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.945709944 CEST	443	65065	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.945987940 CEST	65078	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.946043015 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.946098089 CEST	65078	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.946763992 CEST	65077	443	192.168.2.6	142.250.186.110
Jul 15, 2024 17:49:45.946790934 CEST	443	65077	142.250.186.110	192.168.2.6
Jul 15, 2024 17:49:45.946988106 CEST	65078	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:45.947012901 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:45.953449011 CEST	65079	443	192.168.2.6	142.250.186.110
Jul 15, 2024 17:49:45.953473091 CEST	443	65079	142.250.186.110	192.168.2.6
Jul 15, 2024 17:49:45.953526974 CEST	65079	443	192.168.2.6	142.250.186.110
Jul 15, 2024 17:49:45.954978943 CEST	65080	443	192.168.2.6	64.233.166.155
Jul 15, 2024 17:49:45.955009937 CEST	443	65080	64.233.166.155	192.168.2.6
Jul 15, 2024 17:49:45.955064058 CEST	65080	443	192.168.2.6	64.233.166.155
Jul 15, 2024 17:49:45.961014986 CEST	65080	443	192.168.2.6	64.233.166.155
Jul 15, 2024 17:49:45.961030006 CEST	443	65080	64.233.166.155	192.168.2.6
Jul 15, 2024 17:49:45.961287022 CEST	65079	443	192.168.2.6	142.250.186.110
Jul 15, 2024 17:49:45.961299896 CEST	443	65079	142.250.186.110	192.168.2.6
Jul 15, 2024 17:49:45.984932899 CEST	65081	443	192.168.2.6	142.250.185.66
Jul 15, 2024 17:49:45.984962940 CEST	443	65081	142.250.185.66	192.168.2.6
Jul 15, 2024 17:49:45.985016108 CEST	65081	443	192.168.2.6	142.250.185.66
Jul 15, 2024 17:49:45.985338926 CEST	65082	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:45.985398054 CEST	443	65082	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:45.985446930 CEST	65082	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:45.985497952 CEST	65083	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:45.985543013 CEST	443	65083	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:45.985589981 CEST	65083	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:45.985819101 CEST	65084	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:45.985826969 CEST	443	65084	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:45.985865116 CEST	65084	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:45.986078978 CEST	65081	443	192.168.2.6	142.250.185.66
Jul 15, 2024 17:49:45.986092091 CEST	443	65081	142.250.185.66	192.168.2.6
Jul 15, 2024 17:49:45.986231089 CEST	65082	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:45.986244917 CEST	443	65082	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:45.986363888 CEST	65083	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:45.986382961 CEST	443	65083	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:45.986689091 CEST	65084	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:45.986697912 CEST	443	65084	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:46.001240015 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.001732111 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.001749992 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.002106905 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.002825975 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.002892017 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.003035069 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.004554987 CEST	443	65071	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.004786968 CEST	65071	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.004810095 CEST	443	65071	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.006306887 CEST	443	65071	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.006359100 CEST	65071	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.006823063 CEST	65071	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.006948948 CEST	443	65071	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.007169008 CEST	65071	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.007178068 CEST	443	65071	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.008598089 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.009879112 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.009898901 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.010603905 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.012559891 CEST	443	65068	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.017707109 CEST	443	65074	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.019535065 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.019673109 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.020003080 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.020181894 CEST	65074	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.020211935 CEST	443	65074	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.020519018 CEST	65068	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.020531893 CEST	443	65068	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.021681070 CEST	443	65074	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.021745920 CEST	65074	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.022120953 CEST	443	65068	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.022177935 CEST	65068	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.022218943 CEST	65074	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.022367001 CEST	443	65074	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.023046017 CEST	65074	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.023055077 CEST	443	65074	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.023866892 CEST	443	65073	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.024533033 CEST	65068	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.024682045 CEST	65073	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.024689913 CEST	443	65073	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.024723053 CEST	443	65068	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.024756908 CEST	65068	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.025736094 CEST	443	65073	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.025789976 CEST	65073	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.026125908 CEST	65073	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.026185036 CEST	443	65073	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.026253939 CEST	65073	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.026259899 CEST	443	65073	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.044517994 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.054111004 CEST	65071	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.060503006 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.070017099 CEST	65068	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.070028067 CEST	65073	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.070029020 CEST	443	65068	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.070070982 CEST	65074	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.086302042 CEST	65085	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.086328030 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.086375952 CEST	65085	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.087687969 CEST	65085	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.087698936 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.117250919 CEST	65068	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.148566961 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.148616076 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.148682117 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.148696899 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.148732901 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.148778915 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.148786068 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.148832083 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.163275957 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.163363934 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.165879965 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.166017056 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.166074038 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.166105986 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.166495085 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.166554928 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.166563988 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.167103052 CEST	443	65071	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.167179108 CEST	443	65071	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.167227983 CEST	65071	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.167237997 CEST	443	65071	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.167280912 CEST	65071	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.167891026 CEST	443	65071	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.167956114 CEST	65071	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.171058893 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.171125889 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.171133041 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.171312094 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.180104971 CEST	443	65071	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.180123091 CEST	443	65071	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.180176973 CEST	65071	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.180458069 CEST	443	65068	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.180617094 CEST	443	65068	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.180635929 CEST	443	65074	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.180684090 CEST	65068	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.180690050 CEST	443	65068	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.180694103 CEST	443	65074	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.180742025 CEST	65068	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.180747032 CEST	443	65068	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.180775881 CEST	443	65074	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.180777073 CEST	65074	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.180866003 CEST	65074	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.180993080 CEST	443	65068	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.181015015 CEST	443	65068	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.181051970 CEST	65068	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.181057930 CEST	443	65068	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.181077003 CEST	65068	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.181272984 CEST	443	65068	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.181332111 CEST	65068	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.185345888 CEST	443	65073	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.185394049 CEST	443	65073	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.185437918 CEST	65073	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.185451984 CEST	443	65073	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.185491085 CEST	65073	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.185497046 CEST	443	65073	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.185517073 CEST	443	65073	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.185628891 CEST	65073	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.202634096 CEST	65074	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.202656031 CEST	443	65074	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.236994982 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.237060070 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.237380981 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.237387896 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.237435102 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.237448931 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.237481117 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.238250971 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.238301992 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.249927998 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.249962091 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.249982119 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.249988079 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.250044107 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.258913040 CEST	65068	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.258927107 CEST	443	65071	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.258936882 CEST	443	65068	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.258999109 CEST	65071	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.259413958 CEST	443	65071	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.259424925 CEST	443	65071	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.259468079 CEST	65071	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.259474993 CEST	443	65071	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.259497881 CEST	443	65071	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.259535074 CEST	65071	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.259542942 CEST	443	65071	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.259582996 CEST	65071	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.259759903 CEST	443	65071	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.259792089 CEST	443	65071	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.259819984 CEST	65071	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.259825945 CEST	443	65071	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.259861946 CEST	65071	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.259999037 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.260060072 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.260399103 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.260409117 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.260451078 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.260457039 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.260469913 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.260503054 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.260515928 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.260984898 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.261015892 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.261054993 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.261064053 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.261631966 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.262115002 CEST	65073	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.262131929 CEST	443	65073	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.266556978 CEST	443	65071	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.266575098 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.266614914 CEST	65071	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.266639948 CEST	443	65071	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.266658068 CEST	443	65071	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.266690969 CEST	65071	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.266702890 CEST	65071	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.268671989 CEST	65075	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:46.268683910 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.269159079 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.269988060 CEST	65075	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:46.270071983 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.270643950 CEST	65075	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:46.270716906 CEST	65075	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:46.270745993 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.270944118 CEST	65075	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:46.270950079 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.271008968 CEST	65075	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:46.271100044 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.323770046 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.323831081 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.323878050 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.323911905 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.323926926 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.324100971 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.324126959 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.324162960 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.324168921 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.324193001 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.326159000 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.326184988 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.326212883 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.326217890 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.326267004 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.336393118 CEST	65071	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.336425066 CEST	443	65071	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.337078094 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.337117910 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.337147951 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.337155104 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.337165117 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.337229967 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.348365068 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.348423004 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.348453045 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.348500967 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.348525047 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.354633093 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.354667902 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.354713917 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.354731083 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.354760885 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.354927063 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.354962111 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.354991913 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.354998112 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.355025053 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.355038881 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.355788946 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.355818033 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.355856895 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.355865002 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.355896950 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.356316090 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.356338978 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.356368065 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.356374025 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.356395006 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.396754980 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.396776915 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.412348032 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.412373066 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.412430048 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.412445068 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.412494898 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.413317919 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.413333893 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.413388014 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.413394928 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.413428068 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.414175987 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.414222956 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.414232016 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.414252043 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.414304972 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.435348988 CEST	65067	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.435375929 CEST	443	65067	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.445451021 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.446517944 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.446532965 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.446557999 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.446583986 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.446588993 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.446608067 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.446639061 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.446656942 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.447314978 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.447338104 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.447376966 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.447381973 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.447437048 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.448051929 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.448071003 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.448105097 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.448110104 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.448137999 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.448153973 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.449008942 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.449029922 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.449078083 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.449083090 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.449115038 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.449130058 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.461570024 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.462167025 CEST	65078	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.462208033 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.462555885 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.462975979 CEST	65078	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.463043928 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.463298082 CEST	65078	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.463597059 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.463641882 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.463690996 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.463721991 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.463742971 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.463826895 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.465768099 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.465797901 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.465845108 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.465852976 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.465882063 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.465895891 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.504522085 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.531752110 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.531811953 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.531846046 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.531872034 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.531900883 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.531918049 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.532306910 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.532361984 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.532371044 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.534285069 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.534343958 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.534379959 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.534384966 CEST	65075	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:46.534406900 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.534445047 CEST	65075	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:46.534449100 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.534463882 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.534498930 CEST	65075	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:46.534504890 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.534573078 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.534729004 CEST	65075	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:46.534734964 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.535139084 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.535161018 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.535196066 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.535197020 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.535211086 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.535238028 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.535271883 CEST	65075	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:46.535279036 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.536151886 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.536174059 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.536216021 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.536221981 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.536250114 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.537935972 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.537956953 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.538021088 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.538029909 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.538074017 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.538801908 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.538824081 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.538856983 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.538865089 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.538892031 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.540596962 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.540621996 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.540653944 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.540662050 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.540693045 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.541553974 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.541574001 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.541620970 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.541627884 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.541659117 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.548626900 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.572277069 CEST	443	65076	64.233.166.155	192.168.2.6
Jul 15, 2024 17:49:46.585032940 CEST	65075	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:46.585041046 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.587779045 CEST	443	65077	142.250.186.110	192.168.2.6
Jul 15, 2024 17:49:46.593935013 CEST	65076	443	192.168.2.6	64.233.166.155
Jul 15, 2024 17:49:46.593956947 CEST	443	65076	64.233.166.155	192.168.2.6
Jul 15, 2024 17:49:46.596201897 CEST	443	65076	64.233.166.155	192.168.2.6
Jul 15, 2024 17:49:46.596256971 CEST	65076	443	192.168.2.6	64.233.166.155
Jul 15, 2024 17:49:46.597178936 CEST	443	65080	64.233.166.155	192.168.2.6
Jul 15, 2024 17:49:46.597198963 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.610229015 CEST	443	65079	142.250.186.110	192.168.2.6
Jul 15, 2024 17:49:46.620846033 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.620899916 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.620965958 CEST	65078	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.621005058 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.621186018 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.621227026 CEST	65078	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.621238947 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.621263027 CEST	65078	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.621290922 CEST	65078	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.622286081 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.622323036 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.622374058 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.622410059 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.622427940 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.622517109 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.623348951 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.623373032 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.623425961 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.623436928 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.623462915 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.623482943 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.623488903 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.623547077 CEST	65075	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:46.623574018 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.623645067 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.623702049 CEST	65075	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:46.623709917 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.624946117 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.624979019 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.625001907 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.625019073 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.625041962 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.625051022 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.625060081 CEST	65075	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:46.625067949 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.625118017 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.625118017 CEST	65075	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:46.625155926 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.625197887 CEST	65075	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:46.626718998 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.626740932 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.626815081 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.626827955 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.626863956 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.626882076 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.627486944 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.627506971 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.627545118 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.627551079 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.627582073 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.627597094 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.627897978 CEST	443	65084	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:46.628541946 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.628573895 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.628618956 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.628628016 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.628650904 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.628667116 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.631335974 CEST	443	65082	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:46.632595062 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.632632017 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.632689953 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.632700920 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.632715940 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.632735014 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.632741928 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.632761955 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.632771015 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.632791996 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.632806063 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.633088112 CEST	65077	443	192.168.2.6	142.250.186.110
Jul 15, 2024 17:49:46.633292913 CEST	443	65081	142.250.185.66	192.168.2.6
Jul 15, 2024 17:49:46.634193897 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.634284019 CEST	443	65083	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:46.634283066 CEST	65078	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.636507034 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.636996031 CEST	65079	443	192.168.2.6	142.250.186.110
Jul 15, 2024 17:49:46.637012959 CEST	443	65079	142.250.186.110	192.168.2.6
Jul 15, 2024 17:49:46.637280941 CEST	65085	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.637295008 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.637397051 CEST	65080	443	192.168.2.6	64.233.166.155
Jul 15, 2024 17:49:46.637413979 CEST	443	65080	64.233.166.155	192.168.2.6
Jul 15, 2024 17:49:46.637509108 CEST	443	65079	142.250.186.110	192.168.2.6
Jul 15, 2024 17:49:46.637559891 CEST	65079	443	192.168.2.6	142.250.186.110
Jul 15, 2024 17:49:46.637912035 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.638134003 CEST	65077	443	192.168.2.6	142.250.186.110
Jul 15, 2024 17:49:46.638139963 CEST	443	65077	142.250.186.110	192.168.2.6
Jul 15, 2024 17:49:46.638247013 CEST	443	65079	142.250.186.110	192.168.2.6
Jul 15, 2024 17:49:46.638293982 CEST	65079	443	192.168.2.6	142.250.186.110
Jul 15, 2024 17:49:46.638555050 CEST	443	65080	64.233.166.155	192.168.2.6
Jul 15, 2024 17:49:46.638654947 CEST	65075	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:46.638658047 CEST	65080	443	192.168.2.6	64.233.166.155
Jul 15, 2024 17:49:46.638672113 CEST	443	65075	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:46.639293909 CEST	443	65077	142.250.186.110	192.168.2.6
Jul 15, 2024 17:49:46.639360905 CEST	65077	443	192.168.2.6	142.250.186.110
Jul 15, 2024 17:49:46.640105963 CEST	65085	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.640217066 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.640640974 CEST	65083	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:46.640674114 CEST	443	65083	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:46.640736103 CEST	65081	443	192.168.2.6	142.250.185.66
Jul 15, 2024 17:49:46.640743017 CEST	443	65081	142.250.185.66	192.168.2.6
Jul 15, 2024 17:49:46.640883923 CEST	65082	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:46.640911102 CEST	443	65082	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:46.640979052 CEST	65084	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:46.640985966 CEST	443	65084	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:46.641077995 CEST	65085	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.641340017 CEST	443	65077	142.250.186.110	192.168.2.6
Jul 15, 2024 17:49:46.641396046 CEST	65077	443	192.168.2.6	142.250.186.110
Jul 15, 2024 17:49:46.642168045 CEST	443	65083	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:46.642236948 CEST	65083	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:46.642265081 CEST	443	65081	142.250.185.66	192.168.2.6
Jul 15, 2024 17:49:46.642317057 CEST	65081	443	192.168.2.6	142.250.185.66
Jul 15, 2024 17:49:46.642456055 CEST	443	65084	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:46.642505884 CEST	65084	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:46.642744064 CEST	443	65082	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:46.642792940 CEST	65082	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:46.651051044 CEST	65076	443	192.168.2.6	64.233.166.155
Jul 15, 2024 17:49:46.651206970 CEST	65080	443	192.168.2.6	64.233.166.155
Jul 15, 2024 17:49:46.651329994 CEST	443	65080	64.233.166.155	192.168.2.6
Jul 15, 2024 17:49:46.651344061 CEST	443	65076	64.233.166.155	192.168.2.6
Jul 15, 2024 17:49:46.652220964 CEST	65079	443	192.168.2.6	142.250.186.110
Jul 15, 2024 17:49:46.652442932 CEST	65077	443	192.168.2.6	142.250.186.110
Jul 15, 2024 17:49:46.652578115 CEST	443	65077	142.250.186.110	192.168.2.6
Jul 15, 2024 17:49:46.653023958 CEST	65083	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:46.653110981 CEST	65082	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:46.653141975 CEST	443	65083	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:46.653217077 CEST	65081	443	192.168.2.6	142.250.185.66
Jul 15, 2024 17:49:46.653223038 CEST	443	65082	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:46.653318882 CEST	443	65081	142.250.185.66	192.168.2.6
Jul 15, 2024 17:49:46.653676033 CEST	65084	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:46.653703928 CEST	443	65079	142.250.186.110	192.168.2.6
Jul 15, 2024 17:49:46.653784990 CEST	443	65084	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:46.653944969 CEST	65076	443	192.168.2.6	64.233.166.155
Jul 15, 2024 17:49:46.653973103 CEST	443	65076	64.233.166.155	192.168.2.6
Jul 15, 2024 17:49:46.654284000 CEST	65080	443	192.168.2.6	64.233.166.155
Jul 15, 2024 17:49:46.654294968 CEST	443	65080	64.233.166.155	192.168.2.6
Jul 15, 2024 17:49:46.654429913 CEST	65079	443	192.168.2.6	142.250.186.110
Jul 15, 2024 17:49:46.654442072 CEST	443	65079	142.250.186.110	192.168.2.6
Jul 15, 2024 17:49:46.654476881 CEST	65077	443	192.168.2.6	142.250.186.110
Jul 15, 2024 17:49:46.654483080 CEST	443	65077	142.250.186.110	192.168.2.6
Jul 15, 2024 17:49:46.654727936 CEST	65083	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:46.654746056 CEST	443	65083	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:46.654851913 CEST	65082	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:46.654863119 CEST	443	65082	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:46.654953003 CEST	65081	443	192.168.2.6	142.250.185.66
Jul 15, 2024 17:49:46.654962063 CEST	443	65081	142.250.185.66	192.168.2.6
Jul 15, 2024 17:49:46.655055046 CEST	65084	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:46.655066013 CEST	443	65084	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:46.684494019 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.698329926 CEST	65076	443	192.168.2.6	64.233.166.155
Jul 15, 2024 17:49:46.698329926 CEST	65080	443	192.168.2.6	64.233.166.155
Jul 15, 2024 17:49:46.698347092 CEST	65081	443	192.168.2.6	142.250.185.66
Jul 15, 2024 17:49:46.698349953 CEST	65084	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:46.698349953 CEST	65082	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:46.698359013 CEST	65083	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:46.698483944 CEST	65077	443	192.168.2.6	142.250.186.110
Jul 15, 2024 17:49:46.698493004 CEST	65079	443	192.168.2.6	142.250.186.110
Jul 15, 2024 17:49:46.715389013 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.715460062 CEST	65078	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.716948986 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.716979027 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.717027903 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.717060089 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.717082977 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.717083931 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.717133045 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.717142105 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.717164040 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.717183113 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.717185974 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.717197895 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.717216015 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.717253923 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.718146086 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.718173027 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.718225956 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.718235970 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.718256950 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.718275070 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.719059944 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.719070911 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.719089031 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.719104052 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.719115973 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.719120979 CEST	65078	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.719137907 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.719203949 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.719204903 CEST	65078	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.719216108 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.719254017 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.719958067 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.719989061 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.720020056 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.720031023 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.720113993 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.721524000 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.721534967 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.721611023 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.721622944 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.721714020 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.722933054 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.722960949 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.723027945 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.723038912 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.723077059 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.723262072 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.723294973 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.723315001 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.723323107 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.723361969 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.732430935 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.732479095 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.732501984 CEST	65078	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.732517958 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.732563019 CEST	65078	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.764249086 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.765110970 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.765177965 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.765260935 CEST	65085	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.765268087 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.765299082 CEST	65085	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.765304089 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.765398979 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.765445948 CEST	65085	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.765450954 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.779093981 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.779155016 CEST	65085	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.779166937 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.779306889 CEST	65085	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.803491116 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.803541899 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.803591013 CEST	65078	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.803627968 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.803647995 CEST	65078	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.804636002 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.804671049 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.804725885 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.804747105 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.804775000 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.804788113 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.805058002 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.805110931 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.805119038 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.805659056 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.805680990 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.805717945 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.805727959 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.805757999 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.806344032 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.806381941 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.806407928 CEST	65078	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.806418896 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.806441069 CEST	65078	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.806973934 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.807002068 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.807029963 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.807041883 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.807064056 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.807832003 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.807852983 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.807893038 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.807907104 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.807929993 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.808682919 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.808703899 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.808753014 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.808757067 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.808768034 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.808785915 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.808799028 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.808818102 CEST	65078	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.808826923 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.808847904 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.808865070 CEST	65078	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.808959007 CEST	65078	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.812053919 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.812086105 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.812124968 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.812138081 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.812154055 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.812663078 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.812684059 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.812712908 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.812719107 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.812748909 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.813370943 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.813390017 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.813486099 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.813493967 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.823577881 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.824434996 CEST	65078	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.824471951 CEST	443	65078	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.830750942 CEST	443	65076	64.233.166.155	192.168.2.6
Jul 15, 2024 17:49:46.830871105 CEST	443	65076	64.233.166.155	192.168.2.6
Jul 15, 2024 17:49:46.830919027 CEST	65076	443	192.168.2.6	64.233.166.155
Jul 15, 2024 17:49:46.831295013 CEST	65076	443	192.168.2.6	64.233.166.155
Jul 15, 2024 17:49:46.831317902 CEST	443	65076	64.233.166.155	192.168.2.6
Jul 15, 2024 17:49:46.856198072 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.856270075 CEST	65085	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.856966019 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.856997013 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.857028961 CEST	65085	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.857610941 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.857666969 CEST	65085	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.857681036 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.857722998 CEST	65085	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.859714985 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.859772921 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.859797955 CEST	65085	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.859813929 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.859848976 CEST	65085	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.860704899 CEST	443	65080	64.233.166.155	192.168.2.6
Jul 15, 2024 17:49:46.860784054 CEST	443	65080	64.233.166.155	192.168.2.6
Jul 15, 2024 17:49:46.860832930 CEST	65080	443	192.168.2.6	64.233.166.155
Jul 15, 2024 17:49:46.861357927 CEST	65080	443	192.168.2.6	64.233.166.155
Jul 15, 2024 17:49:46.861385107 CEST	443	65080	64.233.166.155	192.168.2.6
Jul 15, 2024 17:49:46.873280048 CEST	443	65077	142.250.186.110	192.168.2.6
Jul 15, 2024 17:49:46.873311043 CEST	443	65083	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:46.873513937 CEST	443	65077	142.250.186.110	192.168.2.6
Jul 15, 2024 17:49:46.873615980 CEST	443	65083	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:46.873632908 CEST	65077	443	192.168.2.6	142.250.186.110
Jul 15, 2024 17:49:46.873689890 CEST	65083	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:46.874377012 CEST	65077	443	192.168.2.6	142.250.186.110
Jul 15, 2024 17:49:46.874388933 CEST	443	65077	142.250.186.110	192.168.2.6
Jul 15, 2024 17:49:46.887691021 CEST	443	65079	142.250.186.110	192.168.2.6
Jul 15, 2024 17:49:46.887876987 CEST	443	65079	142.250.186.110	192.168.2.6
Jul 15, 2024 17:49:46.887927055 CEST	65079	443	192.168.2.6	142.250.186.110
Jul 15, 2024 17:49:46.888176918 CEST	65079	443	192.168.2.6	142.250.186.110
Jul 15, 2024 17:49:46.888195992 CEST	443	65079	142.250.186.110	192.168.2.6
Jul 15, 2024 17:49:46.895927906 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.895962954 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.896038055 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.896074057 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.896095991 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.896166086 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.896375895 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.896398067 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.896440983 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.896452904 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.896476030 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.896511078 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.897227049 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.897283077 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.897325039 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.897339106 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.897360086 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.897378922 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.898242950 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.898268938 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.898310900 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.898324013 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.898350954 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.898365974 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.898986101 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.899009943 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.899051905 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.899060965 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.899086952 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.899104118 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.902992010 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.903021097 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.903063059 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.903091908 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.903116941 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.903131962 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.903693914 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.903714895 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.903744936 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.903758049 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.903784037 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.903801918 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.904195070 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.904215097 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.904246092 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.904256105 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.904279947 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.904301882 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.908562899 CEST	443	65084	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:46.908698082 CEST	443	65084	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:46.908809900 CEST	65084	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:46.909308910 CEST	443	65082	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:46.909456015 CEST	443	65082	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:46.909495115 CEST	65082	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:46.930736065 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.947021961 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.947120905 CEST	65085	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.947149038 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.947199106 CEST	65085	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.947500944 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.947556973 CEST	65085	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.947566986 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.947603941 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:46.947613001 CEST	65085	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.947648048 CEST	65085	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:46.956209898 CEST	443	65081	142.250.185.66	192.168.2.6
Jul 15, 2024 17:49:46.956269026 CEST	443	65081	142.250.185.66	192.168.2.6
Jul 15, 2024 17:49:46.956428051 CEST	65081	443	192.168.2.6	142.250.185.66
Jul 15, 2024 17:49:46.956450939 CEST	443	65081	142.250.185.66	192.168.2.6
Jul 15, 2024 17:49:46.956538916 CEST	443	65081	142.250.185.66	192.168.2.6
Jul 15, 2024 17:49:46.956578970 CEST	65081	443	192.168.2.6	142.250.185.66
Jul 15, 2024 17:49:46.987124920 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.987164021 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.987230062 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.987251043 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.987281084 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.987297058 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.987523079 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.987543106 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.987572908 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.987579107 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.987603903 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.987622976 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.988758087 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.988781929 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.988811016 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.988816023 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.988853931 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.989052057 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.989094019 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.989100933 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.989111900 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.989146948 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.989968061 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.989991903 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.990020990 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.990026951 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.990062952 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.993905067 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.993932962 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.994066000 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.994074106 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.994108915 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.994390011 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.994409084 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.994445086 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.994452000 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.994479895 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.994499922 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.995016098 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.995035887 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.995065928 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.995071888 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:46.995099068 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:46.995115995 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.046384096 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.047894001 CEST	65083	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:47.047930956 CEST	443	65083	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:47.050381899 CEST	65084	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:47.050407887 CEST	443	65084	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:47.051239967 CEST	65082	443	192.168.2.6	172.217.16.130
Jul 15, 2024 17:49:47.051246881 CEST	443	65082	172.217.16.130	192.168.2.6
Jul 15, 2024 17:49:47.080334902 CEST	65085	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.080391884 CEST	443	65085	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.081588984 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.081634045 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.081674099 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.081697941 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.081727028 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.081743956 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.082484961 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.082519054 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.082549095 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.082555056 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.082595110 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.083374023 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.083408117 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.083431005 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.083436966 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.083465099 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.083478928 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.083482981 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.083503008 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.083528042 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.083548069 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.083554029 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.083566904 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.083591938 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.083616972 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.084665060 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.084701061 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.084747076 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.084753036 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.084794044 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.085460901 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.085500002 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.085517883 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.085524082 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.085546017 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.085561991 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.086394072 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.086431980 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.086483002 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.086491108 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.086522102 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.086543083 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.086986065 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.087032080 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.087059021 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.087064981 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.087116003 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.101136923 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.104439974 CEST	65081	443	192.168.2.6	142.250.185.66
Jul 15, 2024 17:49:47.104470015 CEST	443	65081	142.250.185.66	192.168.2.6
Jul 15, 2024 17:49:47.128973007 CEST	65086	443	192.168.2.6	142.250.185.132
Jul 15, 2024 17:49:47.129013062 CEST	443	65086	142.250.185.132	192.168.2.6
Jul 15, 2024 17:49:47.129369974 CEST	65086	443	192.168.2.6	142.250.185.132
Jul 15, 2024 17:49:47.129801989 CEST	65086	443	192.168.2.6	142.250.185.132
Jul 15, 2024 17:49:47.129815102 CEST	443	65086	142.250.185.132	192.168.2.6
Jul 15, 2024 17:49:47.192133904 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.192166090 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.192233086 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.192254066 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.192307949 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.192307949 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.192960978 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.192984104 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.193017006 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.193025112 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.193062067 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.193435907 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.193458080 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.193499088 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.193505049 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.193526030 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.193541050 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.194288969 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.194309950 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.194339037 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.194344997 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.194381952 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.194399118 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.195167065 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.195188999 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.195214987 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.195220947 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.195250034 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.195266008 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.196441889 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.196471930 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.196526051 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.196532011 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.196837902 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.196923018 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.196949959 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.196974993 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.196980953 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.197009087 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.197026968 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.197820902 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.197849989 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.197885036 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.197890043 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.197928905 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.260823965 CEST	65087	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.260875940 CEST	443	65087	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.261651993 CEST	65087	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.262388945 CEST	65087	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.262403011 CEST	443	65087	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.263207912 CEST	65088	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.263247013 CEST	443	65088	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.263389111 CEST	65088	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.264779091 CEST	65088	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.264791965 CEST	443	65088	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.266222954 CEST	65090	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.266232014 CEST	443	65090	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.266496897 CEST	65090	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.266730070 CEST	65090	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.266743898 CEST	443	65090	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.268944979 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.268954039 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.269484997 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.270898104 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.270905972 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.273298979 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.273308992 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.273365974 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.273648024 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.273658037 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.282604933 CEST	65093	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.282614946 CEST	443	65093	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.282702923 CEST	65093	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.282955885 CEST	65093	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.282965899 CEST	443	65093	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.283620119 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.283689022 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.283710003 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.283740044 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.283761024 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.283817053 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.284003019 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.284029961 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.284065962 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.284071922 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.284095049 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.284116030 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.284322023 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.284344912 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.284380913 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.284385920 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.284415960 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.284431934 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.285552025 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.285577059 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.285618067 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.285623074 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.285661936 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.285749912 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.285772085 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.285804987 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.285809994 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.285834074 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.285847902 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.287563086 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.287594080 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.287650108 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.287655115 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.287700891 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.288372040 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.288402081 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.288443089 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.288448095 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.288475990 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.288496971 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.288736105 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.288758993 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.288784981 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.288790941 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.288820028 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.288835049 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.293023109 CEST	65094	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:47.293070078 CEST	443	65094	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:47.293241024 CEST	65094	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:47.293427944 CEST	65094	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:47.293443918 CEST	443	65094	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:47.323328018 CEST	65097	443	192.168.2.6	142.250.184.194
Jul 15, 2024 17:49:47.323360920 CEST	443	65097	142.250.184.194	192.168.2.6
Jul 15, 2024 17:49:47.323705912 CEST	65097	443	192.168.2.6	142.250.184.194
Jul 15, 2024 17:49:47.324074030 CEST	65097	443	192.168.2.6	142.250.184.194
Jul 15, 2024 17:49:47.324086905 CEST	443	65097	142.250.184.194	192.168.2.6
Jul 15, 2024 17:49:47.374532938 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.374579906 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.374717951 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.374717951 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.374746084 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.374957085 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.374988079 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.374996901 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.375015974 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.375034094 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.375055075 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.375082970 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.375437975 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.375475883 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.375507116 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.375521898 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.375566959 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.375577927 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.376205921 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.376245022 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.376300097 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.376307011 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.376343012 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.376363993 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.377001047 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.377032995 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.377080917 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.377088070 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.377123117 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.377145052 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.378709078 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.378740072 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.378784895 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.378793001 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.378823042 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.378840923 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.379292011 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.379312992 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.379348040 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.379363060 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.379375935 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.379405975 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.379784107 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.379811049 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.379849911 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.379858971 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.379884958 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.379897118 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.465965033 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.466026068 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.466054916 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.466089964 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.466113091 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.466178894 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.466360092 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.466407061 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.466430902 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.466439962 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.466459036 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.466476917 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.467401981 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.467447996 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.467479944 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.467489958 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.467534065 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.467745066 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.467786074 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.467806101 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.467814922 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.467839003 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.467854977 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.468202114 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.468240976 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.468272924 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.468281031 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.468307018 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.468317032 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.470151901 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.470201969 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.470257044 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.470266104 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.470299006 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.470307112 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.470757008 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.470798016 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.470829964 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.470838070 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.470865011 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.470873117 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.471463919 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.471503973 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.471548080 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.471556902 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.471580029 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.471595049 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.556828976 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.556859016 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.556961060 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.557002068 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.557349920 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.557375908 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.557406902 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.557415962 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.557434082 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.557461977 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.558021069 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.558047056 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.558090925 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.558099031 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.558116913 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.558136940 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.558367968 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.558387995 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.558418036 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.558424950 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.558449984 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.558468103 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.559401035 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.559421062 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.559473038 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.559479952 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.561333895 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.561361074 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.561403990 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.561414003 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.561434031 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.561466932 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.562216997 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.562237978 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.562283993 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.562290907 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.562310934 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.562328100 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.562679052 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.562697887 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.562727928 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.562736034 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.562761068 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.562777042 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.599812031 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.599942923 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.600070953 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.600548029 CEST	65070	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:47.600573063 CEST	443	65070	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:47.756553888 CEST	443	65087	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.759285927 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.762501001 CEST	443	65094	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:47.769289017 CEST	443	65086	142.250.185.132	192.168.2.6
Jul 15, 2024 17:49:47.769813061 CEST	443	65088	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.773879051 CEST	443	65090	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.781987906 CEST	443	65093	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.783541918 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.799573898 CEST	65087	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.815555096 CEST	65086	443	192.168.2.6	142.250.185.132
Jul 15, 2024 17:49:47.815557003 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.815918922 CEST	65088	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.815934896 CEST	65094	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:47.828658104 CEST	65087	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.828675985 CEST	443	65087	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.828759909 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.828773022 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.828859091 CEST	65094	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:47.828876019 CEST	443	65094	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:47.828948021 CEST	65086	443	192.168.2.6	142.250.185.132
Jul 15, 2024 17:49:47.828958988 CEST	443	65086	142.250.185.132	192.168.2.6
Jul 15, 2024 17:49:47.829051971 CEST	65088	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.829056978 CEST	443	65088	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.829147100 CEST	65090	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.829155922 CEST	443	65090	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.829233885 CEST	65093	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.829240084 CEST	443	65093	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.829258919 CEST	443	65087	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.829480886 CEST	443	65094	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:47.830105066 CEST	443	65086	142.250.185.132	192.168.2.6
Jul 15, 2024 17:49:47.830157042 CEST	65086	443	192.168.2.6	142.250.185.132
Jul 15, 2024 17:49:47.830254078 CEST	443	65090	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.830267906 CEST	443	65090	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.830301046 CEST	65090	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.830451012 CEST	443	65088	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.830828905 CEST	443	65093	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.830878019 CEST	65093	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.831216097 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.831244946 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.831271887 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.831646919 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.832887888 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.832904100 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.833317995 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.833419085 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.834110975 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.834166050 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.834446907 CEST	65093	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.834577084 CEST	443	65093	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.835397959 CEST	65088	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.835587978 CEST	443	65088	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.839117050 CEST	65090	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.839330912 CEST	443	65090	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.839478016 CEST	65086	443	192.168.2.6	142.250.185.132
Jul 15, 2024 17:49:47.839601040 CEST	443	65086	142.250.185.132	192.168.2.6
Jul 15, 2024 17:49:47.839775085 CEST	65094	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:47.839931965 CEST	443	65094	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:47.844691992 CEST	65087	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.844829082 CEST	443	65087	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.845211983 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.845307112 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.845479012 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.845511913 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.845561981 CEST	65093	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.845572948 CEST	443	65093	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.846030951 CEST	65088	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.846160889 CEST	65090	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.846184015 CEST	443	65090	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.846234083 CEST	65086	443	192.168.2.6	142.250.185.132
Jul 15, 2024 17:49:47.846275091 CEST	65094	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:47.846297979 CEST	443	65086	142.250.185.132	192.168.2.6
Jul 15, 2024 17:49:47.846318960 CEST	65087	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.846400023 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.846414089 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.892502069 CEST	443	65088	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.892513037 CEST	443	65094	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:47.892518997 CEST	443	65087	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.895570040 CEST	65086	443	192.168.2.6	142.250.185.132
Jul 15, 2024 17:49:47.895571947 CEST	65090	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.895700932 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.895700932 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.895701885 CEST	65093	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.949897051 CEST	443	65094	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:47.949984074 CEST	443	65094	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:47.950088024 CEST	65094	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:47.950779915 CEST	65094	443	192.168.2.6	104.17.3.184
Jul 15, 2024 17:49:47.950798035 CEST	443	65094	104.17.3.184	192.168.2.6
Jul 15, 2024 17:49:47.961699009 CEST	443	65097	142.250.184.194	192.168.2.6
Jul 15, 2024 17:49:47.963913918 CEST	65097	443	192.168.2.6	142.250.184.194
Jul 15, 2024 17:49:47.963953018 CEST	443	65097	142.250.184.194	192.168.2.6
Jul 15, 2024 17:49:47.965030909 CEST	443	65097	142.250.184.194	192.168.2.6
Jul 15, 2024 17:49:47.965090990 CEST	65097	443	192.168.2.6	142.250.184.194
Jul 15, 2024 17:49:47.965564966 CEST	65097	443	192.168.2.6	142.250.184.194
Jul 15, 2024 17:49:47.965621948 CEST	443	65097	142.250.184.194	192.168.2.6
Jul 15, 2024 17:49:47.965722084 CEST	65097	443	192.168.2.6	142.250.184.194
Jul 15, 2024 17:49:47.965734959 CEST	443	65097	142.250.184.194	192.168.2.6
Jul 15, 2024 17:49:47.979290962 CEST	443	65093	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.979357958 CEST	443	65093	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.979399920 CEST	65093	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.979418993 CEST	443	65093	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.979439974 CEST	443	65093	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.979454041 CEST	65093	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.979485989 CEST	65093	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.980210066 CEST	443	65088	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.980268955 CEST	443	65088	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.980319023 CEST	65088	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.980326891 CEST	443	65088	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.980420113 CEST	65088	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.980432034 CEST	443	65088	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.980442047 CEST	443	65088	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.980468035 CEST	443	65090	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.980478048 CEST	65088	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.980513096 CEST	443	65090	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.980557919 CEST	65090	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.980572939 CEST	443	65090	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.980609894 CEST	65090	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.980679035 CEST	443	65090	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.980766058 CEST	443	65090	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.980818987 CEST	443	65088	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.980829954 CEST	443	65087	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.980839014 CEST	65090	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.980890036 CEST	443	65087	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.980905056 CEST	443	65088	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.980937004 CEST	65087	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.980954885 CEST	65088	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.980958939 CEST	443	65087	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.980998039 CEST	65087	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.981245995 CEST	443	65087	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.981254101 CEST	443	65087	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.981301069 CEST	65087	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.981606007 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.981748104 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.981797934 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.981807947 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.981849909 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.981856108 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.981898069 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.981920004 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.981946945 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.981956005 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.982008934 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.982049942 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.982095957 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.982137918 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.982146978 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.982187033 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.982193947 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.982285976 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.982295036 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.982330084 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.982337952 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.982358932 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.982677937 CEST	443	65087	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.982692957 CEST	443	65087	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.982738018 CEST	65087	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.982747078 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.982774973 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.982794046 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.982795000 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.982801914 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.982817888 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.982846022 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.982846022 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.982853889 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:47.982867956 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:47.982883930 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.007153988 CEST	65097	443	192.168.2.6	142.250.184.194
Jul 15, 2024 17:49:48.044280052 CEST	443	65086	142.250.185.132	192.168.2.6
Jul 15, 2024 17:49:48.045252085 CEST	443	65086	142.250.185.132	192.168.2.6
Jul 15, 2024 17:49:48.045325994 CEST	65086	443	192.168.2.6	142.250.185.132
Jul 15, 2024 17:49:48.046570063 CEST	65086	443	192.168.2.6	142.250.185.132
Jul 15, 2024 17:49:48.046614885 CEST	443	65086	142.250.185.132	192.168.2.6
Jul 15, 2024 17:49:48.076320887 CEST	443	65087	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.076431990 CEST	65087	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.076523066 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.076555014 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.076596022 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.076631069 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.076637030 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.076653957 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.076709032 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.077580929 CEST	443	65087	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.077605963 CEST	443	65087	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.077661037 CEST	65087	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.077711105 CEST	443	65087	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.077765942 CEST	65087	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.077785015 CEST	443	65087	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.077809095 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.077830076 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.077857018 CEST	65087	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.077867985 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.078159094 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.078185081 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.078237057 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.078259945 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.078290939 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.078315973 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.078370094 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.078385115 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.078764915 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.078773022 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.078804970 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.078836918 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.078856945 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.078933954 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.079097033 CEST	443	65087	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.079159021 CEST	443	65087	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.079169989 CEST	65087	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.079196930 CEST	443	65087	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.079296112 CEST	65087	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.079644918 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.079679012 CEST	443	65087	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.079684973 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.079714060 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.079729080 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.079749107 CEST	65087	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.079762936 CEST	443	65087	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.079783916 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.079829931 CEST	65087	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.079855919 CEST	443	65087	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.079905987 CEST	65087	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.164133072 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.164221048 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.164254904 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.164340973 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.164395094 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.164407969 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.164427042 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.164455891 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.164478064 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.164514065 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.164630890 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.164693117 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.167488098 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.167534113 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.167570114 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.167608023 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.167635918 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.168559074 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.168620110 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.168644905 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.168661118 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.168694973 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.170202971 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.170254946 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.170275927 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.170293093 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.170325041 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.207407951 CEST	443	65097	142.250.184.194	192.168.2.6
Jul 15, 2024 17:49:48.207546949 CEST	443	65097	142.250.184.194	192.168.2.6
Jul 15, 2024 17:49:48.207604885 CEST	65097	443	192.168.2.6	142.250.184.194
Jul 15, 2024 17:49:48.207645893 CEST	443	65097	142.250.184.194	192.168.2.6
Jul 15, 2024 17:49:48.207926989 CEST	443	65097	142.250.184.194	192.168.2.6
Jul 15, 2024 17:49:48.207989931 CEST	65097	443	192.168.2.6	142.250.184.194
Jul 15, 2024 17:49:48.210999012 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.260971069 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.261003017 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.261028051 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.261051893 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.261066914 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.261094093 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.261125088 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.261631966 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.261658907 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.261713028 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.261730909 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.261759043 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.261780024 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.262171984 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.262212992 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.262242079 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.262260914 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.262289047 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.262307882 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.262778997 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.262844086 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.262872934 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.262922049 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.262958050 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.263010025 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.974359989 CEST	65098	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:48.974419117 CEST	443	65098	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:48.974476099 CEST	65098	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.005553007 CEST	65099	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:49.005647898 CEST	443	65099	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:49.005729914 CEST	65099	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:49.005800009 CEST	65100	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:49.005847931 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:49.005911112 CEST	65100	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:49.006350040 CEST	65098	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.006365061 CEST	443	65098	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.015628099 CEST	65099	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:49.015664101 CEST	443	65099	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:49.016052008 CEST	65100	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:49.016081095 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:49.079588890 CEST	65093	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.079619884 CEST	443	65093	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.080360889 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.080394983 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.080465078 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.082403898 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.082433939 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.094109058 CEST	65097	443	192.168.2.6	142.250.184.194
Jul 15, 2024 17:49:49.094151974 CEST	443	65097	142.250.184.194	192.168.2.6
Jul 15, 2024 17:49:49.096103907 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.097275019 CEST	65090	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.097297907 CEST	443	65090	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.097872972 CEST	65088	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.097893000 CEST	443	65088	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.107815981 CEST	65091	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.107826948 CEST	443	65091	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.108716965 CEST	65087	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.108788967 CEST	443	65087	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.114789963 CEST	65092	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.114806890 CEST	443	65092	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.495487928 CEST	443	65098	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.495825052 CEST	65098	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.495858908 CEST	443	65098	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.496337891 CEST	443	65098	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.496699095 CEST	65098	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.496787071 CEST	443	65098	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.496872902 CEST	65098	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.544509888 CEST	443	65098	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.568846941 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.570635080 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.570703983 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.571082115 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.573100090 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.573189020 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.573338985 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.616512060 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.664777040 CEST	443	65098	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.665998936 CEST	443	65098	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.666064978 CEST	65098	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.666117907 CEST	443	65098	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.666246891 CEST	65098	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.666296959 CEST	443	65098	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.666423082 CEST	443	65098	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.666491032 CEST	65098	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.669096947 CEST	65098	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.669132948 CEST	443	65098	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.729353905 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.729465008 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.729536057 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.729573011 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.729598999 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.729607105 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.729633093 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.729660988 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.729782104 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.742361069 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.742384911 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.742414951 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.742458105 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.742505074 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.815577030 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.815592051 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.815610886 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.815645933 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.816447973 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.816454887 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.816473961 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.816507101 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.816530943 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.816549063 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.817044973 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.817086935 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.817100048 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.819122076 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.819154024 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.819163084 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.819194078 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.819214106 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.819233894 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.895431042 CEST	443	65099	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:49.896289110 CEST	65099	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:49.896342039 CEST	443	65099	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:49.897469997 CEST	443	65099	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:49.897556067 CEST	65099	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:49.899209023 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.901055098 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:49.901741028 CEST	65100	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:49.901772022 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:49.902029991 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.902055979 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.902074099 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.902096033 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.902118921 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.902146101 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.902169943 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.902199030 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.902868032 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.902908087 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.902929068 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.902935028 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.902961016 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.902967930 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.902986050 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.903697968 CEST	65099	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:49.903810024 CEST	443	65099	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:49.904143095 CEST	65099	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:49.904164076 CEST	443	65099	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:49.904453039 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.904522896 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.904531002 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.904547930 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.904591084 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.904720068 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:49.904773951 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:49.905350924 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:49.905406952 CEST	65100	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:49.905800104 CEST	65100	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:49.905972958 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:49.906440020 CEST	65100	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:49.906449080 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.095264912 CEST	65099	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.095406055 CEST	65100	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.224318027 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.224354982 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.224364996 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.224383116 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.224392891 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.224396944 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.224436998 CEST	65100	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.224473953 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.224504948 CEST	65100	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.224520922 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.224555969 CEST	65100	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.241621017 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.241636992 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.241681099 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.241691113 CEST	65100	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.241708994 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.241719007 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.241734982 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.241758108 CEST	65100	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.241761923 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.241779089 CEST	65100	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.267035961 CEST	65102	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:50.267076969 CEST	443	65102	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:50.293492079 CEST	65100	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.315332890 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.315351963 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.315373898 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.315385103 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.315416098 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.315426111 CEST	65100	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.315443993 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.315475941 CEST	65100	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.315515041 CEST	65100	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.331621885 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.331636906 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.331684113 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.331720114 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.331721067 CEST	65100	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.331738949 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.331779957 CEST	65100	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.334268093 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.334280968 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.334312916 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.334342003 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.334347963 CEST	65100	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.334359884 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.334388971 CEST	65100	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.334479094 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.334528923 CEST	65100	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.517371893 CEST	443	65099	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.517452002 CEST	443	65099	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.517474890 CEST	443	65099	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.517496109 CEST	443	65099	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.517515898 CEST	65099	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.517538071 CEST	443	65099	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.517561913 CEST	65099	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.517563105 CEST	443	65099	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.517596006 CEST	65099	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.517596960 CEST	443	65099	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.517618895 CEST	65099	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.517642021 CEST	443	65099	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.517659903 CEST	65099	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.530723095 CEST	443	65099	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.530745029 CEST	443	65099	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.530777931 CEST	443	65099	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.530803919 CEST	443	65099	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.530810118 CEST	65099	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.530818939 CEST	443	65099	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.530829906 CEST	443	65099	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.530853033 CEST	443	65099	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.530865908 CEST	65099	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.530884981 CEST	65099	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.531270027 CEST	443	65099	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.531326056 CEST	65099	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.531342983 CEST	443	65099	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.531450033 CEST	443	65099	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.531496048 CEST	65099	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.537544012 CEST	65099	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.537583113 CEST	443	65099	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.613312006 CEST	65106	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.613363028 CEST	443	65106	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.613449097 CEST	65106	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.613754034 CEST	65106	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.613768101 CEST	443	65106	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.614336967 CEST	65100	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:50.614382982 CEST	443	65100	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:50.822336912 CEST	65107	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:50.822355032 CEST	443	65107	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:50.822643042 CEST	65107	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:50.822649002 CEST	65108	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:50.822693110 CEST	443	65108	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:50.822747946 CEST	65108	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:50.822779894 CEST	65109	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:50.822786093 CEST	443	65109	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:50.822824001 CEST	65109	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:50.823282957 CEST	65110	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:50.823288918 CEST	443	65110	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:50.823333979 CEST	65110	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:50.823654890 CEST	65111	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:50.823667049 CEST	443	65111	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:50.823709965 CEST	65111	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:50.823908091 CEST	65112	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:50.823916912 CEST	443	65112	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:50.823960066 CEST	65112	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:50.824330091 CEST	65109	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:50.824341059 CEST	443	65109	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:50.824573994 CEST	65108	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:50.824589014 CEST	443	65108	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:50.824728012 CEST	65107	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:50.824738026 CEST	443	65107	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:50.825036049 CEST	65112	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:50.825054884 CEST	443	65112	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:50.825274944 CEST	65111	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:50.825284958 CEST	443	65111	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:50.825558901 CEST	65110	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:50.825573921 CEST	443	65110	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.213902950 CEST	443	65106	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:51.223148108 CEST	65106	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:51.223184109 CEST	443	65106	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:51.224374056 CEST	443	65106	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:51.229665995 CEST	65106	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:51.229866982 CEST	443	65106	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:51.230199099 CEST	65106	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:51.272543907 CEST	443	65106	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:51.616890907 CEST	443	65112	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.618809938 CEST	65112	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.618845940 CEST	443	65112	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.619929075 CEST	443	65108	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.620095015 CEST	443	65109	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.620129108 CEST	65108	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.620137930 CEST	443	65108	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.620273113 CEST	65109	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.620302916 CEST	443	65109	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.620472908 CEST	443	65107	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.620843887 CEST	65107	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.620856047 CEST	443	65107	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.621682882 CEST	443	65108	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.621684074 CEST	443	65111	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.621735096 CEST	443	65110	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.621747971 CEST	65108	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.621949911 CEST	443	65109	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.622000933 CEST	65109	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.622230053 CEST	65111	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.622237921 CEST	443	65111	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.622317076 CEST	65110	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.622327089 CEST	443	65110	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.623325109 CEST	443	65107	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.623383999 CEST	65107	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.623692036 CEST	443	65111	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.623750925 CEST	65111	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.623754025 CEST	443	65112	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.623825073 CEST	65112	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.623892069 CEST	443	65110	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.623945951 CEST	65110	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.645456076 CEST	443	65106	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:51.645519972 CEST	443	65106	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:51.645564079 CEST	443	65106	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:51.645593882 CEST	65106	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:51.645617008 CEST	443	65106	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:51.645632029 CEST	65106	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:51.645669937 CEST	65106	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:51.645670891 CEST	443	65106	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:51.645699978 CEST	443	65106	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:51.645725965 CEST	65106	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:51.645984888 CEST	443	65106	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:51.649435997 CEST	65106	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:51.649435997 CEST	65106	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:51.683814049 CEST	65108	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.683918953 CEST	65109	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.683971882 CEST	65111	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.684041023 CEST	65110	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.684108973 CEST	65107	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.684123039 CEST	443	65108	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.684161901 CEST	65112	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.684226990 CEST	443	65110	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.684273005 CEST	443	65111	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.684289932 CEST	443	65112	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.684290886 CEST	443	65109	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.684607983 CEST	443	65107	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.685257912 CEST	65108	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.685271025 CEST	443	65108	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.685514927 CEST	65109	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.685556889 CEST	443	65109	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.685709000 CEST	65111	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.685722113 CEST	443	65111	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.685811996 CEST	65110	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.685842037 CEST	443	65110	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.685870886 CEST	65107	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.685898066 CEST	443	65107	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.685911894 CEST	65112	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.685925007 CEST	443	65112	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.698187113 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:51.698219061 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:51.698287010 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:51.698664904 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:51.698678017 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:51.701747894 CEST	65114	443	192.168.2.6	216.58.212.132
Jul 15, 2024 17:49:51.701836109 CEST	443	65114	216.58.212.132	192.168.2.6
Jul 15, 2024 17:49:51.701935053 CEST	65114	443	192.168.2.6	216.58.212.132
Jul 15, 2024 17:49:51.705518007 CEST	65114	443	192.168.2.6	216.58.212.132
Jul 15, 2024 17:49:51.705559015 CEST	443	65114	216.58.212.132	192.168.2.6
Jul 15, 2024 17:49:51.742047071 CEST	65112	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.742099047 CEST	65111	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.742099047 CEST	65109	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.795077085 CEST	65108	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.795094013 CEST	65107	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.795094013 CEST	65110	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.800029993 CEST	65115	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:51.800062895 CEST	443	65115	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:51.800139904 CEST	65115	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:51.800657034 CEST	65115	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:51.800669909 CEST	443	65115	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:51.834001064 CEST	65116	443	192.168.2.6	35.80.254.51
Jul 15, 2024 17:49:51.834032059 CEST	443	65116	35.80.254.51	192.168.2.6
Jul 15, 2024 17:49:51.834089041 CEST	65116	443	192.168.2.6	35.80.254.51
Jul 15, 2024 17:49:51.853600979 CEST	443	65112	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.860443115 CEST	443	65108	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.860492945 CEST	443	65108	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.860502958 CEST	443	65108	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.860544920 CEST	443	65108	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.860558033 CEST	65108	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.860582113 CEST	443	65108	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.860631943 CEST	443	65108	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.860655069 CEST	443	65108	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.860668898 CEST	65108	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.860668898 CEST	65108	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.860683918 CEST	65108	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.860692024 CEST	65108	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.862268925 CEST	443	65110	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.863223076 CEST	443	65109	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.863256931 CEST	443	65109	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.863266945 CEST	443	65109	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.863276958 CEST	443	65109	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.863292933 CEST	443	65109	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.863300085 CEST	65109	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.863301992 CEST	443	65109	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.863317966 CEST	443	65109	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.863327980 CEST	65109	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.863349915 CEST	65109	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.863369942 CEST	65109	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.863917112 CEST	443	65107	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.863977909 CEST	443	65107	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.864002943 CEST	443	65107	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.864022017 CEST	443	65107	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.864029884 CEST	65107	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.864052057 CEST	443	65107	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.864054918 CEST	65107	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.864073992 CEST	65107	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.864098072 CEST	443	65107	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.864118099 CEST	443	65107	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.864135981 CEST	443	65107	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.864144087 CEST	65107	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.864157915 CEST	443	65107	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.864167929 CEST	65107	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.864187002 CEST	65107	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.864835024 CEST	443	65112	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.864859104 CEST	443	65112	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.864877939 CEST	443	65112	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.864891052 CEST	65112	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.864900112 CEST	443	65112	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.864913940 CEST	65112	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.864919901 CEST	443	65112	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.864938974 CEST	443	65112	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.864967108 CEST	65112	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.864973068 CEST	443	65112	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.864998102 CEST	65112	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.867984056 CEST	443	65111	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.868055105 CEST	443	65111	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.868074894 CEST	443	65111	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.868093967 CEST	443	65111	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.868112087 CEST	65111	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.868120909 CEST	443	65111	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.868139029 CEST	443	65111	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.868149996 CEST	65111	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.868160009 CEST	443	65111	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.868192911 CEST	65111	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.868200064 CEST	443	65111	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.868218899 CEST	65111	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.873003960 CEST	443	65110	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.873028040 CEST	443	65110	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.873065948 CEST	65110	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.873073101 CEST	443	65110	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.873106003 CEST	443	65110	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.873121023 CEST	65110	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.873121023 CEST	65110	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.873126984 CEST	443	65110	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.873147964 CEST	443	65110	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.873167038 CEST	443	65110	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.873178959 CEST	65110	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.873203993 CEST	65110	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.873209953 CEST	443	65110	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.873224020 CEST	65110	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.886169910 CEST	65117	443	192.168.2.6	35.80.254.51
Jul 15, 2024 17:49:51.886229038 CEST	443	65117	35.80.254.51	192.168.2.6
Jul 15, 2024 17:49:51.886285067 CEST	65117	443	192.168.2.6	35.80.254.51
Jul 15, 2024 17:49:51.932307005 CEST	65117	443	192.168.2.6	35.80.254.51
Jul 15, 2024 17:49:51.932349920 CEST	443	65117	35.80.254.51	192.168.2.6
Jul 15, 2024 17:49:51.933311939 CEST	65116	443	192.168.2.6	35.80.254.51
Jul 15, 2024 17:49:51.933337927 CEST	443	65116	35.80.254.51	192.168.2.6
Jul 15, 2024 17:49:51.939863920 CEST	443	65108	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.939884901 CEST	443	65108	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.939934969 CEST	443	65108	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.939960003 CEST	65108	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.939970970 CEST	443	65108	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.940028906 CEST	65108	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.940051079 CEST	443	65108	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.940107107 CEST	65108	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.942765951 CEST	443	65109	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.942806959 CEST	443	65109	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.942867994 CEST	65109	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.942883968 CEST	443	65109	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.942919970 CEST	443	65109	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.942920923 CEST	65109	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.942941904 CEST	65109	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.942970991 CEST	65109	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.943617105 CEST	443	65112	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.943670988 CEST	443	65112	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.943691015 CEST	65112	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.943698883 CEST	443	65112	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.943734884 CEST	65112	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.945136070 CEST	443	65107	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.945249081 CEST	65107	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.945261002 CEST	443	65107	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.945270061 CEST	443	65107	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.945302010 CEST	443	65107	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.945312977 CEST	443	65107	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.945316076 CEST	65107	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.945350885 CEST	65107	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.945353985 CEST	443	65107	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.945398092 CEST	65107	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.945970058 CEST	443	65112	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.946039915 CEST	65112	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.946047068 CEST	443	65112	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.946099997 CEST	65112	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.946146965 CEST	443	65112	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.946213961 CEST	65112	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.949153900 CEST	443	65111	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.949196100 CEST	443	65111	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.949224949 CEST	65111	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.949233055 CEST	443	65111	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.949271917 CEST	65111	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.949636936 CEST	443	65111	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.949681997 CEST	65111	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.949692965 CEST	443	65111	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.949719906 CEST	443	65111	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.949771881 CEST	65111	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.953998089 CEST	443	65110	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.954051971 CEST	443	65110	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.954075098 CEST	65110	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.954077959 CEST	443	65110	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.954118013 CEST	443	65110	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.954122066 CEST	65110	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.954144001 CEST	65110	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.954250097 CEST	443	65110	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.954308033 CEST	65110	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.967210054 CEST	65111	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.967231035 CEST	443	65111	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.970172882 CEST	65107	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.970185041 CEST	443	65107	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.971950054 CEST	65109	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.971955061 CEST	443	65109	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.974370956 CEST	65110	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.974375963 CEST	443	65110	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.979929924 CEST	65108	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.979943037 CEST	443	65108	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.982218981 CEST	65112	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.982227087 CEST	443	65112	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.987728119 CEST	65118	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.987762928 CEST	443	65118	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.987821102 CEST	65118	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.988020897 CEST	65118	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.988039017 CEST	443	65118	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.990161896 CEST	65119	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.990185022 CEST	443	65119	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.990246058 CEST	65119	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.993326902 CEST	65119	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.993340015 CEST	443	65119	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.998047113 CEST	65120	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.998081923 CEST	443	65120	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:51.998166084 CEST	65120	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.998384953 CEST	65120	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:51.998394966 CEST	443	65120	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:52.001297951 CEST	65121	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:52.001384974 CEST	443	65121	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:52.001642942 CEST	65121	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:52.001878023 CEST	65121	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:52.001913071 CEST	443	65121	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:52.004271030 CEST	65122	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:52.004293919 CEST	443	65122	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:52.004360914 CEST	65122	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:52.004551888 CEST	65122	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:52.004574060 CEST	443	65122	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:52.009998083 CEST	65123	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:52.010023117 CEST	443	65123	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:52.010073900 CEST	65123	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:52.010632992 CEST	65123	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:52.010646105 CEST	443	65123	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:52.017431021 CEST	65124	443	192.168.2.6	35.80.254.51
Jul 15, 2024 17:49:52.017460108 CEST	443	65124	35.80.254.51	192.168.2.6
Jul 15, 2024 17:49:52.017513037 CEST	65124	443	192.168.2.6	35.80.254.51
Jul 15, 2024 17:49:52.017779112 CEST	65124	443	192.168.2.6	35.80.254.51
Jul 15, 2024 17:49:52.017791033 CEST	443	65124	35.80.254.51	192.168.2.6
Jul 15, 2024 17:49:52.046696901 CEST	65106	443	192.168.2.6	54.185.96.248
Jul 15, 2024 17:49:52.046725035 CEST	443	65106	54.185.96.248	192.168.2.6
Jul 15, 2024 17:49:52.179142952 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.240061045 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.240083933 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.240221024 CEST	65125	443	192.168.2.6	18.245.206.203
Jul 15, 2024 17:49:52.240298033 CEST	443	65125	18.245.206.203	192.168.2.6
Jul 15, 2024 17:49:52.240365028 CEST	65125	443	192.168.2.6	18.245.206.203
Jul 15, 2024 17:49:52.240504980 CEST	65126	443	192.168.2.6	18.245.206.203
Jul 15, 2024 17:49:52.240515947 CEST	443	65126	18.245.206.203	192.168.2.6
Jul 15, 2024 17:49:52.240571022 CEST	65126	443	192.168.2.6	18.245.206.203
Jul 15, 2024 17:49:52.240875006 CEST	65127	443	192.168.2.6	18.245.206.203
Jul 15, 2024 17:49:52.240921974 CEST	443	65127	18.245.206.203	192.168.2.6
Jul 15, 2024 17:49:52.240972996 CEST	65127	443	192.168.2.6	18.245.206.203
Jul 15, 2024 17:49:52.241460085 CEST	65125	443	192.168.2.6	18.245.206.203
Jul 15, 2024 17:49:52.241477013 CEST	443	65125	18.245.206.203	192.168.2.6
Jul 15, 2024 17:49:52.241910934 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.241916895 CEST	65126	443	192.168.2.6	18.245.206.203
Jul 15, 2024 17:49:52.241931915 CEST	443	65126	18.245.206.203	192.168.2.6
Jul 15, 2024 17:49:52.241935015 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.241986990 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.242748022 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.242845058 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.243184090 CEST	65127	443	192.168.2.6	18.245.206.203
Jul 15, 2024 17:49:52.243199110 CEST	443	65127	18.245.206.203	192.168.2.6
Jul 15, 2024 17:49:52.243221998 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.243238926 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.290131092 CEST	443	65115	99.83.181.15	192.168.2.6
Jul 15, 2024 17:49:52.354139090 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.356538057 CEST	443	65114	216.58.212.132	192.168.2.6
Jul 15, 2024 17:49:52.396032095 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.396097898 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.396147966 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.396179914 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.396189928 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.396229029 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.396243095 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.396253109 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.397027969 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.397037983 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.397098064 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.397105932 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.397205114 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.485682964 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.485702038 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.485748053 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.485764027 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.486685991 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.486700058 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.486742973 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.486783028 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.486783028 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.486818075 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.487713099 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.487744093 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.487799883 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.487813950 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.489196062 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.489207983 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.489231110 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.489264011 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.489276886 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.489294052 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.489855051 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.491883993 CEST	65115	443	192.168.2.6	99.83.181.15
Jul 15, 2024 17:49:52.491888046 CEST	65114	443	192.168.2.6	216.58.212.132
Jul 15, 2024 17:49:52.575946093 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.575970888 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.575994968 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.576086044 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.576129913 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.576158047 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.578527927 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.578574896 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.578635931 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.578664064 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.578680038 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.578906059 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.578936100 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.579005957 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.579006910 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.579020977 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.580820084 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.664630890 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.664710999 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.664747000 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.664851904 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.664851904 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.664882898 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.666395903 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.666424990 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.666501045 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.666501045 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.666512012 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.668426037 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.668446064 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.668497086 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.668519020 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.668533087 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.668545008 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.668708086 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.670017004 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.670056105 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.671107054 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.671113014 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.673789978 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.682946920 CEST	443	65118	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:52.691922903 CEST	443	65122	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:52.693830967 CEST	443	65120	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:52.694267988 CEST	443	65121	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:52.708760023 CEST	443	65123	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:52.715913057 CEST	443	65119	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:52.753532887 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.753566980 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.753891945 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.753943920 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.754024982 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.755228043 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.755259991 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.755331993 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.755331993 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.755345106 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.756828070 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.756865025 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.756959915 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.756959915 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.756968975 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.757767916 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.758434057 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.758464098 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.758510113 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.758518934 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.758536100 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.760307074 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.760344028 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.760401964 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.760401964 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.760411978 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.760508060 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.761190891 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.761218071 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.761274099 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.761274099 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.761281967 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.761631966 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.762897015 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.762932062 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.762998104 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.762998104 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.763006926 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.763130903 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.789108038 CEST	443	65117	35.80.254.51	192.168.2.6
Jul 15, 2024 17:49:52.820894003 CEST	443	65116	35.80.254.51	192.168.2.6
Jul 15, 2024 17:49:52.843630075 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.843673944 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.843821049 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.843842983 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.844014883 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.844584942 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.844620943 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.844661951 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.844675064 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.844715118 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.844715118 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.845396996 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.845478058 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.846347094 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.846374989 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.846445084 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.846446037 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.846463919 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.848135948 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.848174095 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.848212004 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.848227978 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.848268032 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.848268032 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.849771976 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.849807978 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.849864006 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.849864006 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.849884033 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.850698948 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.850734949 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.850775003 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.850781918 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.850820065 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.850820065 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.852443933 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.852489948 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.852559090 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.852559090 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.852567911 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.853708982 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.859117031 CEST	65121	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:52.859141111 CEST	65119	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:52.859148026 CEST	65117	443	192.168.2.6	35.80.254.51
Jul 15, 2024 17:49:52.859404087 CEST	65123	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:52.881055117 CEST	443	65124	35.80.254.51	192.168.2.6
Jul 15, 2024 17:49:52.888585091 CEST	443	65118	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:52.889317036 CEST	65118	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:52.896542072 CEST	443	65122	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:52.897679090 CEST	65122	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:52.900542021 CEST	443	65120	18.245.206.205	192.168.2.6
Jul 15, 2024 17:49:52.900619984 CEST	65120	443	192.168.2.6	18.245.206.205
Jul 15, 2024 17:49:52.901679993 CEST	65116	443	192.168.2.6	35.80.254.51
Jul 15, 2024 17:49:52.922792912 CEST	443	65125	18.245.206.203	192.168.2.6
Jul 15, 2024 17:49:52.928419113 CEST	443	65127	18.245.206.203	192.168.2.6
Jul 15, 2024 17:49:52.929960966 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.930002928 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.930067062 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.930092096 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.930119038 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.930136919 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.931255102 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.931292057 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.931323051 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.931335926 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.931360006 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.931380987 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.932742119 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.932769060 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.932812929 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.932820082 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.932861090 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.933758974 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.933785915 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.933820009 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.933825970 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.933851957 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.933868885 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.935538054 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.935570002 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.935600042 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.935607910 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.935632944 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.935652018 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.936474085 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.936510086 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.936542988 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.936548948 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.936572075 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.936573029 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.937200069 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.937228918 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.937261105 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.937267065 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.937292099 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.937298059 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.938148022 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.938174963 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.938205004 CEST	65113	443	192.168.2.6	76.76.21.164
Jul 15, 2024 17:49:52.938210964 CEST	443	65113	76.76.21.164	192.168.2.6
Jul 15, 2024 17:49:52.938234091 CEST	65113	443	192.168.2.6	76.76.21.164

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 15, 2024 17:49:22.697547913 CEST	192.168.2.6	1.1.1.1	0x5cab	Standard query (0)	xai6l1pibnxefgt2.umso.co	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:22.697695971 CEST	192.168.2.6	1.1.1.1	0xa007	Standard query (0)	xai6l1pibnxefgt2.umso.co	65	IN (0x0001)	false
Jul 15, 2024 17:49:23.795728922 CEST	192.168.2.6	1.1.1.1	0x12e5	Standard query (0)	xai6l1pibnxefgt2.umso.co	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:23.796129942 CEST	192.168.2.6	1.1.1.1	0x6d8a	Standard query (0)	xai6l1pibnxefgt2.umso.co	65	IN (0x0001)	false
Jul 15, 2024 17:49:25.323705912 CEST	192.168.2.6	1.1.1.1	0xe242	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:25.351154089 CEST	192.168.2.6	1.1.1.1	0x114	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 15, 2024 17:49:35.575737000 CEST	192.168.2.6	1.1.1.1	0x7595	Standard query (0)	simerra.msk.su	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:35.576052904 CEST	192.168.2.6	1.1.1.1	0xb4c6	Standard query (0)	simerra.msk.su	65	IN (0x0001)	false
Jul 15, 2024 17:49:36.510076046 CEST	192.168.2.6	1.1.1.1	0x4a39	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:36.510299921 CEST	192.168.2.6	1.1.1.1	0xd760	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jul 15, 2024 17:49:38.309037924 CEST	192.168.2.6	1.1.1.1	0x4837	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:38.309835911 CEST	192.168.2.6	1.1.1.1	0x34d2	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jul 15, 2024 17:49:38.324949026 CEST	192.168.2.6	1.1.1.1	0xec60	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:38.325567007 CEST	192.168.2.6	1.1.1.1	0xe1f4	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Jul 15, 2024 17:49:40.905766964 CEST	192.168.2.6	1.1.1.1	0x47c0	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:40.905970097 CEST	192.168.2.6	1.1.1.1	0x2b60	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jul 15, 2024 17:49:43.591123104 CEST	192.168.2.6	1.1.1.1	0x1ef8	Standard query (0)	www.umso.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:43.591253042 CEST	192.168.2.6	1.1.1.1	0x9fcb	Standard query (0)	www.umso.com	65	IN (0x0001)	false
Jul 15, 2024 17:49:44.447449923 CEST	192.168.2.6	1.1.1.1	0x8a0b	Standard query (0)	nextgen-widget.vercel.app	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:44.447638988 CEST	192.168.2.6	1.1.1.1	0x2313	Standard query (0)	nextgen-widget.vercel.app	65	IN (0x0001)	false
Jul 15, 2024 17:49:44.658561945 CEST	192.168.2.6	1.1.1.1	0x5904	Standard query (0)	www.umso.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:44.658729076 CEST	192.168.2.6	1.1.1.1	0xc9ab	Standard query (0)	www.umso.com	65	IN (0x0001)	false
Jul 15, 2024 17:49:45.925452948 CEST	192.168.2.6	1.1.1.1	0xb5e2	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:45.925659895 CEST	192.168.2.6	1.1.1.1	0x9fab	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Jul 15, 2024 17:49:45.929218054 CEST	192.168.2.6	1.1.1.1	0xe46b	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:45.929394960 CEST	192.168.2.6	1.1.1.1	0xf2a5	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Jul 15, 2024 17:49:45.976274014 CEST	192.168.2.6	1.1.1.1	0x8de5	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:45.976567030 CEST	192.168.2.6	1.1.1.1	0x6e1e	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 15, 2024 17:49:45.977377892 CEST	192.168.2.6	1.1.1.1	0x399d	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:45.977597952 CEST	192.168.2.6	1.1.1.1	0x3ee	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Jul 15, 2024 17:49:47.119407892 CEST	192.168.2.6	1.1.1.1	0x8501	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:47.119654894 CEST	192.168.2.6	1.1.1.1	0x3485	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 15, 2024 17:49:47.311769962 CEST	192.168.2.6	1.1.1.1	0x475e	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:47.312230110 CEST	192.168.2.6	1.1.1.1	0x4f1f	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 15, 2024 17:49:48.864161968 CEST	192.168.2.6	1.1.1.1	0xe9ba	Standard query (0)	api.umso.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:48.864696026 CEST	192.168.2.6	1.1.1.1	0x7bda	Standard query (0)	api.umso.com	65	IN (0x0001)	false
Jul 15, 2024 17:49:50.793371916 CEST	192.168.2.6	1.1.1.1	0x8e44	Standard query (0)	di7r6y9oc27j.cloudfront.net	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:50.793720961 CEST	192.168.2.6	1.1.1.1	0xccc4	Standard query (0)	di7r6y9oc27j.cloudfront.net	65	IN (0x0001)	false
Jul 15, 2024 17:49:51.676747084 CEST	192.168.2.6	1.1.1.1	0x27d7	Standard query (0)	nextgen-widget.vercel.app	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:51.677841902 CEST	192.168.2.6	1.1.1.1	0x9675	Standard query (0)	nextgen-widget.vercel.app	65	IN (0x0001)	false
Jul 15, 2024 17:49:51.693618059 CEST	192.168.2.6	1.1.1.1	0xa227	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:51.693933964 CEST	192.168.2.6	1.1.1.1	0x4bf4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 15, 2024 17:49:51.804141998 CEST	192.168.2.6	1.1.1.1	0x4b2f	Standard query (0)	api.umso.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:51.804687977 CEST	192.168.2.6	1.1.1.1	0xf21b	Standard query (0)	api.umso.com	65	IN (0x0001)	false
Jul 15, 2024 17:49:52.081459045 CEST	192.168.2.6	1.1.1.1	0x95e6	Standard query (0)	di7r6y9oc27j.cloudfront.net	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:52.081948042 CEST	192.168.2.6	1.1.1.1	0x1668	Standard query (0)	di7r6y9oc27j.cloudfront.net	65	IN (0x0001)	false
Jul 15, 2024 17:50:15.672492027 CEST	192.168.2.6	1.1.1.1	0x79c5	Standard query (0)	app.umso.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:15.672761917 CEST	192.168.2.6	1.1.1.1	0x7983	Standard query (0)	app.umso.com	65	IN (0x0001)	false
Jul 15, 2024 17:50:17.931108952 CEST	192.168.2.6	1.1.1.1	0x49c7	Standard query (0)	js.pusher.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:17.931298971 CEST	192.168.2.6	1.1.1.1	0x1110	Standard query (0)	js.pusher.com	65	IN (0x0001)	false
Jul 15, 2024 17:50:19.059397936 CEST	192.168.2.6	1.1.1.1	0xb831	Standard query (0)	js.pusher.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:19.059582949 CEST	192.168.2.6	1.1.1.1	0xa42d	Standard query (0)	js.pusher.com	65	IN (0x0001)	false
Jul 15, 2024 17:50:22.331212044 CEST	192.168.2.6	1.1.1.1	0x1555	Standard query (0)	app.umso.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:22.331482887 CEST	192.168.2.6	1.1.1.1	0x6d65	Standard query (0)	app.umso.com	65	IN (0x0001)	false
Jul 15, 2024 17:50:22.518497944 CEST	192.168.2.6	1.1.1.1	0xc498	Standard query (0)	js.stripe.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:22.518978119 CEST	192.168.2.6	1.1.1.1	0xd147	Standard query (0)	js.stripe.com	65	IN (0x0001)	false
Jul 15, 2024 17:50:22.525515079 CEST	192.168.2.6	1.1.1.1	0x617d	Standard query (0)	sentry.io	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:22.525669098 CEST	192.168.2.6	1.1.1.1	0xef6d	Standard query (0)	sentry.io	65	IN (0x0001)	false
Jul 15, 2024 17:50:23.214284897 CEST	192.168.2.6	1.1.1.1	0xa886	Standard query (0)	sentry.io	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:23.214493990 CEST	192.168.2.6	1.1.1.1	0x928b	Standard query (0)	sentry.io	65	IN (0x0001)	false
Jul 15, 2024 17:50:23.472745895 CEST	192.168.2.6	1.1.1.1	0x3e86	Standard query (0)	status.umso.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:23.472907066 CEST	192.168.2.6	1.1.1.1	0x99d4	Standard query (0)	status.umso.com	65	IN (0x0001)	false
Jul 15, 2024 17:50:24.127945900 CEST	192.168.2.6	1.1.1.1	0xa69e	Standard query (0)	js.stripe.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:24.128211021 CEST	192.168.2.6	1.1.1.1	0xe1c9	Standard query (0)	js.stripe.com	65	IN (0x0001)	false
Jul 15, 2024 17:50:24.179157972 CEST	192.168.2.6	1.1.1.1	0x7a74	Standard query (0)	js.stripe.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:24.179351091 CEST	192.168.2.6	1.1.1.1	0x142a	Standard query (0)	js.stripe.com	65	IN (0x0001)	false
Jul 15, 2024 17:50:24.861304998 CEST	192.168.2.6	1.1.1.1	0xd62e	Standard query (0)	merchant-ui-api.stripe.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:24.861663103 CEST	192.168.2.6	1.1.1.1	0xe611	Standard query (0)	merchant-ui-api.stripe.com	65	IN (0x0001)	false
Jul 15, 2024 17:50:26.334547997 CEST	192.168.2.6	1.1.1.1	0xa9db	Standard query (0)	status.umso.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:26.334858894 CEST	192.168.2.6	1.1.1.1	0xc3a1	Standard query (0)	status.umso.com	65	IN (0x0001)	false
Jul 15, 2024 17:50:28.759609938 CEST	192.168.2.6	1.1.1.1	0xc9d7	Standard query (0)	m.stripe.network	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:28.759835005 CEST	192.168.2.6	1.1.1.1	0x1a96	Standard query (0)	m.stripe.network	65	IN (0x0001)	false
Jul 15, 2024 17:50:29.741005898 CEST	192.168.2.6	1.1.1.1	0x2815	Standard query (0)	r.stripe.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:29.743009090 CEST	192.168.2.6	1.1.1.1	0xd809	Standard query (0)	r.stripe.com	65	IN (0x0001)	false
Jul 15, 2024 17:50:30.814224958 CEST	192.168.2.6	1.1.1.1	0x4c68	Standard query (0)	r.stripe.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:30.814500093 CEST	192.168.2.6	1.1.1.1	0xeebb	Standard query (0)	r.stripe.com	65	IN (0x0001)	false
Jul 15, 2024 17:50:30.951212883 CEST	192.168.2.6	1.1.1.1	0x7a25	Standard query (0)	m.stripe.network	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:30.951368093 CEST	192.168.2.6	1.1.1.1	0xf771	Standard query (0)	m.stripe.network	65	IN (0x0001)	false
Jul 15, 2024 17:50:31.599877119 CEST	192.168.2.6	1.1.1.1	0x447e	Standard query (0)	m.stripe.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:31.600049019 CEST	192.168.2.6	1.1.1.1	0xe50f	Standard query (0)	m.stripe.com	65	IN (0x0001)	false
Jul 15, 2024 17:50:32.682552099 CEST	192.168.2.6	1.1.1.1	0xc849	Standard query (0)	m.stripe.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:32.682718039 CEST	192.168.2.6	1.1.1.1	0x5263	Standard query (0)	m.stripe.com	65	IN (0x0001)	false
Jul 15, 2024 17:50:33.641580105 CEST	192.168.2.6	1.1.1.1	0x6bce	Standard query (0)	stripe.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:33.641952991 CEST	192.168.2.6	1.1.1.1	0xf120	Standard query (0)	stripe.com	65	IN (0x0001)	false
Jul 15, 2024 17:50:36.838028908 CEST	192.168.2.6	1.1.1.1	0x5f3c	Standard query (0)	api.stripe.com	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:36.838270903 CEST	192.168.2.6	1.1.1.1	0x4ccf	Standard query (0)	api.stripe.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 15, 2024 17:49:22.721084118 CEST	1.1.1.1	192.168.2.6	0x5cab	No error (0)	xai6l1pibnxefgt2.umso.co		75.2.96.155	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:23.819577932 CEST	1.1.1.1	192.168.2.6	0x12e5	No error (0)	xai6l1pibnxefgt2.umso.co		75.2.96.155	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:25.339413881 CEST	1.1.1.1	192.168.2.6	0xe242	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:25.359807014 CEST	1.1.1.1	192.168.2.6	0x114	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 15, 2024 17:49:35.633693933 CEST	1.1.1.1	192.168.2.6	0x1b66	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 17:49:35.633693933 CEST	1.1.1.1	192.168.2.6	0x1b66	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:35.662590027 CEST	1.1.1.1	192.168.2.6	0x7595	No error (0)	simerra.msk.su		104.21.65.212	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:35.662590027 CEST	1.1.1.1	192.168.2.6	0x7595	No error (0)	simerra.msk.su		172.67.167.19	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:35.667257071 CEST	1.1.1.1	192.168.2.6	0xb4c6	No error (0)	simerra.msk.su			65	IN (0x0001)	false
Jul 15, 2024 17:49:36.517447948 CEST	1.1.1.1	192.168.2.6	0xd760	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jul 15, 2024 17:49:36.518027067 CEST	1.1.1.1	192.168.2.6	0x4a39	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:36.518027067 CEST	1.1.1.1	192.168.2.6	0x4a39	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:37.151407957 CEST	1.1.1.1	192.168.2.6	0x7eca	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:37.151407957 CEST	1.1.1.1	192.168.2.6	0x7eca	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:38.316804886 CEST	1.1.1.1	192.168.2.6	0x34d2	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jul 15, 2024 17:49:38.316900969 CEST	1.1.1.1	192.168.2.6	0x4837	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:38.316900969 CEST	1.1.1.1	192.168.2.6	0x4837	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:38.331929922 CEST	1.1.1.1	192.168.2.6	0xec60	No error (0)	challenges.cloudflare.com		104.17.3.184	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:38.331929922 CEST	1.1.1.1	192.168.2.6	0xec60	No error (0)	challenges.cloudflare.com		104.17.2.184	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:38.333409071 CEST	1.1.1.1	192.168.2.6	0xe1f4	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jul 15, 2024 17:49:40.915004015 CEST	1.1.1.1	192.168.2.6	0x47c0	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:43.621124983 CEST	1.1.1.1	192.168.2.6	0x1ef8	No error (0)	www.umso.com		99.83.181.15	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:44.457529068 CEST	1.1.1.1	192.168.2.6	0x8a0b	No error (0)	nextgen-widget.vercel.app		76.76.21.164	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:44.457529068 CEST	1.1.1.1	192.168.2.6	0x8a0b	No error (0)	nextgen-widget.vercel.app		76.76.21.93	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:44.690934896 CEST	1.1.1.1	192.168.2.6	0x5904	No error (0)	www.umso.com		99.83.181.15	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:45.932930946 CEST	1.1.1.1	192.168.2.6	0xb5e2	No error (0)	analytics.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:45.935090065 CEST	1.1.1.1	192.168.2.6	0x9fab	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 17:49:45.937827110 CEST	1.1.1.1	192.168.2.6	0xe46b	No error (0)	stats.g.doubleclick.net		64.233.166.155	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:45.937827110 CEST	1.1.1.1	192.168.2.6	0xe46b	No error (0)	stats.g.doubleclick.net		64.233.166.157	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:45.937827110 CEST	1.1.1.1	192.168.2.6	0xe46b	No error (0)	stats.g.doubleclick.net		64.233.166.154	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:45.937827110 CEST	1.1.1.1	192.168.2.6	0xe46b	No error (0)	stats.g.doubleclick.net		64.233.166.156	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:45.983259916 CEST	1.1.1.1	192.168.2.6	0x8de5	No error (0)	googleads.g.doubleclick.net		142.250.185.66	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:45.984461069 CEST	1.1.1.1	192.168.2.6	0x6e1e	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jul 15, 2024 17:49:45.984688044 CEST	1.1.1.1	192.168.2.6	0x399d	No error (0)	td.doubleclick.net		172.217.16.130	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:47.127146959 CEST	1.1.1.1	192.168.2.6	0x3485	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 15, 2024 17:49:47.127791882 CEST	1.1.1.1	192.168.2.6	0x8501	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:47.319969893 CEST	1.1.1.1	192.168.2.6	0x475e	No error (0)	googleads.g.doubleclick.net		142.250.184.194	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:47.322299004 CEST	1.1.1.1	192.168.2.6	0x4f1f	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jul 15, 2024 17:49:48.889323950 CEST	1.1.1.1	192.168.2.6	0xe9ba	No error (0)	api.umso.com		54.185.96.248	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:48.889323950 CEST	1.1.1.1	192.168.2.6	0xe9ba	No error (0)	api.umso.com		35.80.254.51	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:50.821568966 CEST	1.1.1.1	192.168.2.6	0x8e44	No error (0)	di7r6y9oc27j.cloudfront.net		18.245.206.205	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:50.821568966 CEST	1.1.1.1	192.168.2.6	0x8e44	No error (0)	di7r6y9oc27j.cloudfront.net		18.245.206.197	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:50.821568966 CEST	1.1.1.1	192.168.2.6	0x8e44	No error (0)	di7r6y9oc27j.cloudfront.net		18.245.206.133	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:50.821568966 CEST	1.1.1.1	192.168.2.6	0x8e44	No error (0)	di7r6y9oc27j.cloudfront.net		18.245.206.203	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:51.696739912 CEST	1.1.1.1	192.168.2.6	0x27d7	No error (0)	nextgen-widget.vercel.app		76.76.21.164	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:51.696739912 CEST	1.1.1.1	192.168.2.6	0x27d7	No error (0)	nextgen-widget.vercel.app		76.76.21.9	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:51.700649023 CEST	1.1.1.1	192.168.2.6	0xa227	No error (0)	www.google.com		216.58.212.132	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:51.700783014 CEST	1.1.1.1	192.168.2.6	0x4bf4	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 15, 2024 17:49:51.833416939 CEST	1.1.1.1	192.168.2.6	0x4b2f	No error (0)	api.umso.com		35.80.254.51	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:51.833416939 CEST	1.1.1.1	192.168.2.6	0x4b2f	No error (0)	api.umso.com		54.185.96.248	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:52.094798088 CEST	1.1.1.1	192.168.2.6	0x95e6	No error (0)	di7r6y9oc27j.cloudfront.net		18.245.206.203	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:52.094798088 CEST	1.1.1.1	192.168.2.6	0x95e6	No error (0)	di7r6y9oc27j.cloudfront.net		18.245.206.205	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:52.094798088 CEST	1.1.1.1	192.168.2.6	0x95e6	No error (0)	di7r6y9oc27j.cloudfront.net		18.245.206.133	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:49:52.094798088 CEST	1.1.1.1	192.168.2.6	0x95e6	No error (0)	di7r6y9oc27j.cloudfront.net		18.245.206.197	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:15.702776909 CEST	1.1.1.1	192.168.2.6	0x79c5	No error (0)	app.umso.com		13.33.88.122	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:15.702776909 CEST	1.1.1.1	192.168.2.6	0x79c5	No error (0)	app.umso.com		13.33.88.27	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:15.702776909 CEST	1.1.1.1	192.168.2.6	0x79c5	No error (0)	app.umso.com		13.33.88.116	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:15.702776909 CEST	1.1.1.1	192.168.2.6	0x79c5	No error (0)	app.umso.com		13.33.88.48	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:17.940877914 CEST	1.1.1.1	192.168.2.6	0x1110	No error (0)	js.pusher.com	d3dy5gmtp8yhk7.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 17:50:17.942106009 CEST	1.1.1.1	192.168.2.6	0x49c7	No error (0)	js.pusher.com	d3dy5gmtp8yhk7.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 17:50:17.942106009 CEST	1.1.1.1	192.168.2.6	0x49c7	No error (0)	d3dy5gmtp8yhk7.cloudfront.net		18.245.35.58	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:19.069545031 CEST	1.1.1.1	192.168.2.6	0xb831	No error (0)	js.pusher.com	d3dy5gmtp8yhk7.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 17:50:19.069545031 CEST	1.1.1.1	192.168.2.6	0xb831	No error (0)	d3dy5gmtp8yhk7.cloudfront.net		108.156.64.41	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:19.085221052 CEST	1.1.1.1	192.168.2.6	0xa42d	No error (0)	js.pusher.com	d3dy5gmtp8yhk7.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 17:50:22.350167990 CEST	1.1.1.1	192.168.2.6	0x1555	No error (0)	app.umso.com		18.239.83.24	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:22.350167990 CEST	1.1.1.1	192.168.2.6	0x1555	No error (0)	app.umso.com		18.239.83.36	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:22.350167990 CEST	1.1.1.1	192.168.2.6	0x1555	No error (0)	app.umso.com		18.239.83.115	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:22.350167990 CEST	1.1.1.1	192.168.2.6	0x1555	No error (0)	app.umso.com		18.239.83.6	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:22.525990009 CEST	1.1.1.1	192.168.2.6	0xc498	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 17:50:22.525990009 CEST	1.1.1.1	192.168.2.6	0xc498	No error (0)	stripecdn.map.fastly.net		151.101.128.176	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:22.525990009 CEST	1.1.1.1	192.168.2.6	0xc498	No error (0)	stripecdn.map.fastly.net		151.101.64.176	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:22.525990009 CEST	1.1.1.1	192.168.2.6	0xc498	No error (0)	stripecdn.map.fastly.net		151.101.0.176	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:22.525990009 CEST	1.1.1.1	192.168.2.6	0xc498	No error (0)	stripecdn.map.fastly.net		151.101.192.176	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:22.526122093 CEST	1.1.1.1	192.168.2.6	0xd147	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 17:50:22.549736977 CEST	1.1.1.1	192.168.2.6	0x617d	No error (0)	sentry.io		35.186.247.156	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:23.222827911 CEST	1.1.1.1	192.168.2.6	0xa886	No error (0)	sentry.io		35.186.247.156	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:23.506450891 CEST	1.1.1.1	192.168.2.6	0x99d4	No error (0)	status.umso.com	cname.hyperping.io		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 17:50:23.506450891 CEST	1.1.1.1	192.168.2.6	0x99d4	No error (0)	cname.hyperping.io	cname.vercel-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 17:50:23.515075922 CEST	1.1.1.1	192.168.2.6	0x3e86	No error (0)	status.umso.com	cname.hyperping.io		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 17:50:23.515075922 CEST	1.1.1.1	192.168.2.6	0x3e86	No error (0)	cname.hyperping.io	cname.vercel-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 17:50:23.515075922 CEST	1.1.1.1	192.168.2.6	0x3e86	No error (0)	cname.vercel-dns.com		76.76.21.93	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:23.515075922 CEST	1.1.1.1	192.168.2.6	0x3e86	No error (0)	cname.vercel-dns.com		76.76.21.123	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:24.135577917 CEST	1.1.1.1	192.168.2.6	0xa69e	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 17:50:24.135577917 CEST	1.1.1.1	192.168.2.6	0xa69e	No error (0)	stripecdn.map.fastly.net		151.101.192.176	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:24.135577917 CEST	1.1.1.1	192.168.2.6	0xa69e	No error (0)	stripecdn.map.fastly.net		151.101.128.176	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:24.135577917 CEST	1.1.1.1	192.168.2.6	0xa69e	No error (0)	stripecdn.map.fastly.net		151.101.0.176	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:24.135577917 CEST	1.1.1.1	192.168.2.6	0xa69e	No error (0)	stripecdn.map.fastly.net		151.101.64.176	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:24.136727095 CEST	1.1.1.1	192.168.2.6	0xe1c9	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 17:50:24.196576118 CEST	1.1.1.1	192.168.2.6	0x7a74	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 17:50:24.196576118 CEST	1.1.1.1	192.168.2.6	0x7a74	No error (0)	stripecdn.map.fastly.net		151.101.128.176	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:24.196576118 CEST	1.1.1.1	192.168.2.6	0x7a74	No error (0)	stripecdn.map.fastly.net		151.101.0.176	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:24.196576118 CEST	1.1.1.1	192.168.2.6	0x7a74	No error (0)	stripecdn.map.fastly.net		151.101.192.176	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:24.196576118 CEST	1.1.1.1	192.168.2.6	0x7a74	No error (0)	stripecdn.map.fastly.net		151.101.64.176	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:24.197940111 CEST	1.1.1.1	192.168.2.6	0x142a	No error (0)	js.stripe.com	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 17:50:24.873485088 CEST	1.1.1.1	192.168.2.6	0xd62e	No error (0)	merchant-ui-api.stripe.com		198.202.176.201	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:26.363010883 CEST	1.1.1.1	192.168.2.6	0xc3a1	No error (0)	status.umso.com	cname.hyperping.io		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 17:50:26.363010883 CEST	1.1.1.1	192.168.2.6	0xc3a1	No error (0)	cname.hyperping.io	cname.vercel-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 17:50:26.384747028 CEST	1.1.1.1	192.168.2.6	0xa9db	No error (0)	status.umso.com	cname.hyperping.io		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 17:50:26.384747028 CEST	1.1.1.1	192.168.2.6	0xa9db	No error (0)	cname.hyperping.io	cname.vercel-dns.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 17:50:26.384747028 CEST	1.1.1.1	192.168.2.6	0xa9db	No error (0)	cname.vercel-dns.com		76.76.21.22	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:26.384747028 CEST	1.1.1.1	192.168.2.6	0xa9db	No error (0)	cname.vercel-dns.com		76.76.21.164	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:28.767627001 CEST	1.1.1.1	192.168.2.6	0xc9d7	No error (0)	m.stripe.network	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 17:50:28.767627001 CEST	1.1.1.1	192.168.2.6	0xc9d7	No error (0)	stripecdn.map.fastly.net		151.101.64.176	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:28.767627001 CEST	1.1.1.1	192.168.2.6	0xc9d7	No error (0)	stripecdn.map.fastly.net		151.101.192.176	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:28.767627001 CEST	1.1.1.1	192.168.2.6	0xc9d7	No error (0)	stripecdn.map.fastly.net		151.101.128.176	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:28.767627001 CEST	1.1.1.1	192.168.2.6	0xc9d7	No error (0)	stripecdn.map.fastly.net		151.101.0.176	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:28.767647982 CEST	1.1.1.1	192.168.2.6	0x1a96	No error (0)	m.stripe.network	d1tcqh4bio8cty.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 17:50:29.751522064 CEST	1.1.1.1	192.168.2.6	0x2815	No error (0)	r.stripe.com		54.187.159.182	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:29.751522064 CEST	1.1.1.1	192.168.2.6	0x2815	No error (0)	r.stripe.com		54.187.119.242	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:29.751522064 CEST	1.1.1.1	192.168.2.6	0x2815	No error (0)	r.stripe.com		54.186.23.98	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:30.832922935 CEST	1.1.1.1	192.168.2.6	0x4c68	No error (0)	r.stripe.com		54.187.159.182	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:30.832922935 CEST	1.1.1.1	192.168.2.6	0x4c68	No error (0)	r.stripe.com		54.186.23.98	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:30.832922935 CEST	1.1.1.1	192.168.2.6	0x4c68	No error (0)	r.stripe.com		54.187.119.242	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:30.958359957 CEST	1.1.1.1	192.168.2.6	0x7a25	No error (0)	m.stripe.network	stripecdn.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 17:50:30.958359957 CEST	1.1.1.1	192.168.2.6	0x7a25	No error (0)	stripecdn.map.fastly.net		151.101.128.176	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:30.958359957 CEST	1.1.1.1	192.168.2.6	0x7a25	No error (0)	stripecdn.map.fastly.net		151.101.0.176	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:30.958359957 CEST	1.1.1.1	192.168.2.6	0x7a25	No error (0)	stripecdn.map.fastly.net		151.101.64.176	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:30.958359957 CEST	1.1.1.1	192.168.2.6	0x7a25	No error (0)	stripecdn.map.fastly.net		151.101.192.176	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:30.959300995 CEST	1.1.1.1	192.168.2.6	0xf771	No error (0)	m.stripe.network	d1tcqh4bio8cty.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 15, 2024 17:50:31.617825985 CEST	1.1.1.1	192.168.2.6	0x447e	No error (0)	m.stripe.com		44.238.240.127	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:31.617825985 CEST	1.1.1.1	192.168.2.6	0x447e	No error (0)	m.stripe.com		34.209.252.182	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:31.617825985 CEST	1.1.1.1	192.168.2.6	0x447e	No error (0)	m.stripe.com		34.208.183.237	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:31.617825985 CEST	1.1.1.1	192.168.2.6	0x447e	No error (0)	m.stripe.com		44.238.132.100	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:31.617825985 CEST	1.1.1.1	192.168.2.6	0x447e	No error (0)	m.stripe.com		52.24.61.137	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:31.617825985 CEST	1.1.1.1	192.168.2.6	0x447e	No error (0)	m.stripe.com		52.11.30.157	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:31.617825985 CEST	1.1.1.1	192.168.2.6	0x447e	No error (0)	m.stripe.com		50.112.128.108	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:31.617825985 CEST	1.1.1.1	192.168.2.6	0x447e	No error (0)	m.stripe.com		44.238.18.96	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:32.689249992 CEST	1.1.1.1	192.168.2.6	0xc849	No error (0)	m.stripe.com		52.11.30.157	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:32.689249992 CEST	1.1.1.1	192.168.2.6	0xc849	No error (0)	m.stripe.com		54.218.174.219	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:32.689249992 CEST	1.1.1.1	192.168.2.6	0xc849	No error (0)	m.stripe.com		44.238.18.96	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:32.689249992 CEST	1.1.1.1	192.168.2.6	0xc849	No error (0)	m.stripe.com		44.238.132.100	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:32.689249992 CEST	1.1.1.1	192.168.2.6	0xc849	No error (0)	m.stripe.com		44.238.240.127	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:32.689249992 CEST	1.1.1.1	192.168.2.6	0xc849	No error (0)	m.stripe.com		34.209.252.182	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:32.689249992 CEST	1.1.1.1	192.168.2.6	0xc849	No error (0)	m.stripe.com		52.24.61.137	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:32.689249992 CEST	1.1.1.1	192.168.2.6	0xc849	No error (0)	m.stripe.com		34.208.183.237	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:33.649302006 CEST	1.1.1.1	192.168.2.6	0x6bce	No error (0)	stripe.com		198.137.150.81	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:36.847264051 CEST	1.1.1.1	192.168.2.6	0x5f3c	No error (0)	api.stripe.com		34.250.29.31	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:36.847264051 CEST	1.1.1.1	192.168.2.6	0x5f3c	No error (0)	api.stripe.com		34.241.59.225	A (IP address)	IN (0x0001)	false
Jul 15, 2024 17:50:36.847264051 CEST	1.1.1.1	192.168.2.6	0x5f3c	No error (0)	api.stripe.com		34.250.89.120	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49716	75.2.96.155	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:23 UTC	667	OUT	GET / HTTP/1.1 Host: xai6l1pibnxefgt2.umso.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:23 UTC	307	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=0, must-revalidate Content-Length: 34424 Content-Type: text/html;charset=utf-8 Referrer-Policy: no-referrer-when-downgrade Strict-Transport-Security: max-age=15552000 X-Frame-Options: sameorigin Date: Mon, 15 Jul 2024 15:49:23 GMT Connection: close
2024-07-15 15:49:23 UTC	879	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 78 61 69 36 6c 31 70 69 62 6e 78 65 66 67 74 32 2e 75 6d 73 6f 2e 63 6f 2f 6c 69 62 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><link rel="icon" href="https://xai6l1pibnxefgt2.umso.co/lib
2024-07-15 15:49:23 UTC	2372	IN	Data Raw: 2d 77 6f 72 64 3b 0a 20 20 2d 2d 66 6f 6e 74 2d 74 65 78 74 3a 20 6e 6f 72 6d 61 6c 20 6e 6f 72 6d 61 6c 20 34 30 30 20 31 65 6d 20 27 49 6e 74 65 72 27 2c 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 53 65 67 6f 65 20 55 49 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 0a 20 20 2d 2d 66 6f 6e 74 2d 74 69 74 6c 65 3a 20 6e 6f 72 6d 61 6c 20 6e 6f 72 6d 61 6c 20 38 30 30 20 31 65 6d 20 27 52 75 62 69 6b 27 2c 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 53 65 67 6f 65 20 55 49 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 Data Ascii: -word; --font-text: normal normal 400 1em 'Inter', -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica, Arial, sans-serif; line-height: 1.5; --font-title: normal normal 800 1em 'Rubik', -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica, Aria
2024-07-15 15:49:23 UTC	538	IN	Data Raw: 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2d 37 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 35 30 25 20 35 30 25 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 2e 33 73 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 20 62 61 63 6b 67 72 6f 75 6e 64 20 63 6f 6c 6f 72 3b 0a 7d 0a 2e 6d 61 64 65 57 69 74 68 55 6d 73 6f 20 73 76 67 20 7b 0a 20 20 Data Ascii: font-weight: 500; white-space: nowrap; margin-right: -70px !important; border-radius: 6px; text-decoration: none !important; transform-origin: 50% 50%; animation-duration: 1.3s; transition-property: background color;}.madeWithUmso svg {
2024-07-15 15:49:23 UTC	4744	IN	Data Raw: 62 61 64 67 65 2d 2d 72 69 67 68 74 20 7b 0a 20 20 6c 65 66 74 3a 20 31 30 30 25 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 31 36 35 70 78 3b 0a 7d 0a 2e 6d 61 64 65 57 69 74 68 55 6d 73 6f 2e 62 61 64 67 65 2d 2d 63 65 6e 74 65 72 20 7b 0a 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 37 30 70 78 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 35 30 70 78 29 20 7b 0a 20 20 20 2e 6d 61 64 65 57 69 74 68 55 6d 73 6f 2e 66 6f 6f 74 65 72 42 61 64 67 65 20 7b 0a 20 20 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 37 30 70 78 3b 0a 20 20 7d 0a 7d 0a 2e 6d 61 64 65 57 69 74 68 55 6d 73 6f 3a 68 6f 76 65 72 20 73 76 67 20 7b 0a 20 20 66 69 Data Ascii: badge--right { left: 100%; margin-left: -165px;}.madeWithUmso.badge--center { left: 50%; margin-left: -70px;}@media (max-width: 750px) { .madeWithUmso.footerBadge { left: 50%; margin-left: -70px; }}.madeWithUmso:hover svg { fi
2024-07-15 15:49:23 UTC	5930	IN	Data Raw: 20 70 61 64 64 69 6e 67 6c 65 66 74 3a 20 33 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 7d 0a 2e 75 6d 2d 6e 61 76 2d 77 72 61 70 70 65 72 2e 75 6d 2d 6c 69 6e 6b 73 2d 63 65 6e 74 65 72 65 64 20 2e 75 6d 2d 6e 61 76 2d 6c 69 6e 6b 73 20 7b 0a 20 20 66 6c 65 78 3a 20 31 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 7d 0a 2e 75 6d 2d 6e 61 76 2d 77 72 61 70 70 65 72 2e 75 6d 2d 6c 69 6e 6b 73 2d 63 65 6e 74 65 72 65 64 20 2e 75 6d 2d 6e 61 76 2d 63 68 69 6c 64 72 65 6e 20 7b 0a 20 20 66 6c 65 78 3a 20 31 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 32 30 70 78 3b 0a 7d 0a 2e 75 6d 2d 6e 61 76 2d 77 72 61 70 70 65 72 2e 75 6d 2d 63 68 69 6c 64 72 65 6e 2d 63 65 6e 74 65 72 65 64 20 2e 75 6d 2d 6e 61 76 Data Ascii: paddingleft: 30; margin-right: auto;}.um-nav-wrapper.um-links-centered .um-nav-links { flex: 1; margin: 0 auto;}.um-nav-wrapper.um-links-centered .um-nav-children { flex: 1; margin-right: 20px;}.um-nav-wrapper.um-children-centered .um-nav
2024-07-15 15:49:23 UTC	7116	IN	Data Raw: 77 69 64 74 68 3a 20 35 30 30 70 78 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 72 67 62 61 28 31 34 2c 20 31 38 2c 20 32 32 2c 20 30 2e 33 35 29 20 30 70 78 20 31 30 70 78 20 33 38 70 78 20 2d 31 30 70 78 2c 20 72 67 62 61 28 31 34 2c 20 31 38 2c 20 32 32 2c 20 30 2e 32 29 20 30 70 78 20 31 30 70 78 20 32 30 70 78 20 2d 31 35 70 78 3b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 3a 20 33 30 30 70 78 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 2d 79 3a 20 69 6e 69 74 69 61 6c 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 70 78 3b 0a 7d 0a 2e 75 6d Data Ascii: width: 500px; transform: translate(-50%, -50%); background: white; box-shadow: rgba(14, 18, 22, 0.35) 0px 10px 38px -10px, rgba(14, 18, 22, 0.2) 0px 10px 20px -15px; min-height: 300px; overflow-y: initial !important; border-radius: 10px;}.um
2024-07-15 15:49:23 UTC	8302	IN	Data Raw: 3b 66 61 6d 69 6c 79 3d 49 6e 74 65 72 3a 77 67 68 74 40 34 30 30 3b 35 30 30 3b 36 30 30 26 61 6d 70 3b 64 69 73 70 6c 61 79 3d 62 6c 6f 63 6b 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 65 63 74 69 6f 6e 20 63 6c 61 73 73 3d 22 5f 35 38 63 65 38 33 64 38 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 35 38 35 39 65 36 31 65 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 31 35 37 64 63 33 64 33 22 3e 3c 6e 61 76 20 69 64 3d 22 6b 33 76 6f 38 61 64 77 62 6b 22 20 63 6c 61 73 73 3d 22 5f 65 34 35 62 35 35 30 34 20 75 6d 2d 6e 61 76 2d 77 72 61 70 70 65 72 20 75 6d 2d 63 6c 61 73 73 69 63 20 75 6d 2d 68 69 64 64 65 6e 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 6d 2d 6e 61 76 2d 63 68 69 6c 64 72 65 6e Data Ascii: ;family=Inter:wght@400;500;600&display=block" rel="stylesheet"></head><body><section class="_58ce83d8"><div class="_5859e61e"><div class="_157dc3d3"><nav id="k3vo8adwbk" class="_e45b5504 um-nav-wrapper um-classic um-hidden"><div class="um-nav-children
2024-07-15 15:49:23 UTC	4543	IN	Data Raw: 2e 6c 65 6e 67 74 68 2c 61 3d 2d 31 2c 69 3d 22 22 2c 63 3d 6f 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 3b 2b 2b 61 3c 72 3b 29 7b 69 66 28 30 3d 3d 3d 28 74 3d 6f 2e 63 68 61 72 43 6f 64 65 41 74 28 61 29 29 29 74 68 72 6f 77 20 6e 65 77 20 49 6e 76 61 6c 69 64 43 68 61 72 61 63 74 65 72 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 63 68 61 72 61 63 74 65 72 3a 20 74 68 65 20 69 6e 70 75 74 20 63 6f 6e 74 61 69 6e 73 20 55 2b 30 30 30 30 2e 22 29 3b 69 2b 3d 31 3c 3d 74 26 26 74 3c 3d 33 31 7c 7c 31 32 37 3d 3d 74 7c 7c 30 3d 3d 3d 61 26 26 34 38 3c 3d 74 26 26 74 3c 3d 35 37 7c 7c 31 3d 3d 3d 61 26 26 34 38 3c 3d 74 26 26 74 3c 3d 35 37 26 26 34 35 3d 3d 3d 63 3f 22 5c 5c 22 2b 74 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2b 22 20 22 3a 31 32 38 3c 3d 74 Data Ascii: .length,a=-1,i="",c=o.charCodeAt(0);++a<r;){if(0===(t=o.charCodeAt(a)))throw new InvalidCharacterError("Invalid character: the input contains U+0000.");i+=1<=t&&t<=31\|\|127==t\|\|0===a&&48<=t&&t<=57\|\|1===a&&48<=t&&t<=57&&45===c?"\\"+t.toString(16)+" ":128<=t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49715	75.2.96.155	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:23 UTC	651	OUT	GET /lib_SUQilvCDrDwywovw/fnclxaoc1aijzto1.png?w=200&h=40&dpr=2 HTTP/1.1 Host: xai6l1pibnxefgt2.umso.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xai6l1pibnxefgt2.umso.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:23 UTC	250	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 5986 Content-Type: image/png Last-Modified: Fri, 03 May 2024 09:17:27 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:49:23 GMT Connection: close
2024-07-15 15:49:23 UTC	936	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 76 00 00 00 50 08 03 00 00 00 3a 02 ae c8 00 00 03 00 50 4c 54 45 4c 69 71 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRvP:PLTELiq
2024-07-15 15:49:23 UTC	2372	IN	Data Raw: dd c0 af 95 94 21 b6 0b c6 b7 5d 9f 9e 3b bc 86 9b 7e 51 33 89 1c 8e 48 a0 64 09 72 a1 0d 6d c9 92 e3 ea d0 3d 4a 4b 8b b4 62 2c db bb 2e d6 84 d1 4e 79 24 0a be cc ce 7b d3 e5 b1 55 c7 85 77 80 a8 40 82 57 ee 31 9d 59 43 6c ab c4 b2 83 1a 42 a7 ad e2 07 7a 74 16 c5 30 bd 41 36 81 de a6 bf 1b 32 66 d8 b5 99 44 7c 6e 26 5e a5 65 54 1f b3 37 50 5f 67 45 71 68 b9 11 46 8d 8c 75 4d 87 6f d7 c1 76 c2 4f cb 38 88 ac 97 b8 12 4b a5 e2 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 12 fd 49 44 41 54 78 9c e5 9d 05 94 1c 37 d2 80 ab db dd 2d f5 ee 18 62 c7 f6 d9 eb 5d ef 7a d1 b8 66 66 66 e6 98 62 66 8a e3 38 b6 13 43 c8 9c 38 a6 24 97 0b 33 e3 85 99 39 17 c6 e3 fb ff 63 fc 99 ea 7f a5 ee d9 9d 6e 49 3d 3d 3e 67 6e fc ac 97 b7 c9 cb b4 aa a5 Data Ascii: !];~Q3Hdrm=JKb,.Ny${Uw@W1YClBzt0A62fD\|n&^eT7P_gEqhFuMovO8KpHYsIDATx7-b]zfffbf8C8$39cnI==>gn
2024-07-15 15:49:23 UTC	538	IN	Data Raw: 46 b1 6c 11 81 14 f3 3f 49 c6 1f 47 b2 1b 21 77 2b 86 3d ee 88 31 1b e2 70 89 3c a2 33 64 4d b3 a8 ed 2e be a5 57 10 03 a6 dd 10 a6 e8 e0 eb ed a3 70 7c 2c f9 16 65 ec 1c 96 a9 56 62 be 57 b3 e3 28 11 1f 9a 86 5f 13 59 db 69 ab 28 46 08 a0 0d ed 64 67 31 23 8f 5b 36 8d 4c 54 54 05 40 a3 30 76 0b 6f 0d 4d 4c 82 af 98 14 03 3b 40 fe 7d 6a ee 1e 78 6b 52 7f 3b 12 bc 01 f3 aa 64 33 25 af 87 75 b9 77 c9 13 63 17 af cc 2a f6 eb 33 c5 7e 4f c4 f4 9a c3 8e 38 d8 39 0c 56 3b da 92 e0 f1 ee c3 fd 22 c0 db 50 ad 32 cf 37 c7 9b f8 73 38 db df 25 08 e4 2e ca de ee d2 c9 60 6f 12 89 bd 71 2c 6d 07 f8 9d ce c1 49 9b 84 14 e8 5b fe f0 1c 2d f8 04 74 92 67 fe 2e 6e 8e 77 90 c2 86 2e 2a df 91 99 db 46 a6 49 7e 46 c3 95 12 bb 0d 4b 3a 6a 1d fa e4 15 a7 bd ae 1e 9b eb 6a bc Data Ascii: Fl?IG!w+=1p<3dM.Wp\|,eVbW(_Yi(Fdg1#[6LTT@0voML;@}jxkR;d3%uwc3~O89V;"P27s8%.`oq,mI[-tg.nw.FI~FK:jj
2024-07-15 15:49:23 UTC	2140	IN	Data Raw: 59 50 1c 74 ad 21 e2 e2 67 a9 c5 e4 b0 57 b5 61 f3 b3 b8 a7 bf ed 29 a7 66 b9 74 e9 69 8b 1d c4 01 c0 81 7b 17 88 38 4a 35 79 da 7a 1a 9a 5a 9d 04 fc 4d f2 aa a0 89 0f c7 75 0e b4 eb 2c 61 d7 69 7b b7 a8 9e ba fb 34 c6 0e 02 7c c1 4f 1f 4a c6 29 aa 03 15 2f 4e 61 ca e1 5a d9 15 66 e9 c3 f6 c2 85 bc 48 36 51 0e ce 54 60 b7 b0 75 d4 51 b5 b9 e1 21 c2 c1 8e a7 0f 76 f0 2e 01 d8 b9 bf 95 0e 3c ed d7 cd a9 95 62 c0 b7 3d 14 47 f5 4b fb c6 52 77 1b 7a ca 23 aa 8b cf 2b b1 ff 4b 94 24 69 ad 7c 5a 69 3b 25 b1 a1 34 6f e4 eb ea c8 5c 72 14 04 4e 8d d9 ab 65 7f bb 8b 2f c5 31 ee 06 2c 6a 25 67 36 71 2a 94 49 7b 69 0e 76 dc a3 2f 7c fe 64 f9 f9 e2 7a a7 15 76 f0 54 7e da 73 e5 6a 57 8d 85 45 29 9a 6c 40 37 59 61 1d 9c 49 f1 a6 e9 12 45 f1 49 5e 63 86 f8 38 14 3c 29 Data Ascii: YPt!gWa)fti{8J5yzZMu,ai{4\|OJ)/NaZfH6QT`uQ!v.<b=GKRwz#+K$i\|Zi;%4o\rNe/1,j%g6q*I{iv/\|dzvT~sjWE)l@7YaIEI^c8<)

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.6	49717	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:24 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 7a 35 37 45 31 50 55 43 61 6b 4f 2f 4b 59 5a 30 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 31 64 32 36 65 30 65 37 38 63 37 30 34 63 32 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: z57E1PUCakO/KYZ0.1Context: 91d26e0e78c704c2
2024-07-15 15:49:24 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-15 15:49:24 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 7a 35 37 45 31 50 55 43 61 6b 4f 2f 4b 59 5a 30 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 31 64 32 36 65 30 65 37 38 63 37 30 34 63 32 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 5a 30 4a 6c 55 68 35 69 59 44 63 44 74 58 66 52 2b 42 73 31 6b 47 69 43 4e 41 6d 33 73 6a 45 31 4d 31 63 77 38 53 6a 2b 71 75 75 45 30 74 6f 79 48 32 77 75 56 5a 72 67 78 7a 30 6f 53 67 32 76 56 74 38 62 70 38 4c 30 49 33 32 4a 35 59 76 43 7a 76 7a 2b 68 41 4a 65 39 5a 78 6a 52 6b 41 62 48 66 54 33 76 59 74 38 4b 78 53 5a 52 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: z57E1PUCakO/KYZ0.2Context: 91d26e0e78c704c2<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAZ0JlUh5iYDcDtXfR+Bs1kGiCNAm3sjE1M1cw8Sj+quuE0toyH2wuVZrgxz0oSg2vVt8bp8L0I32J5YvCzvz+hAJe9ZxjRkAbHfT3vYt8KxSZR
2024-07-15 15:49:24 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 7a 35 37 45 31 50 55 43 61 6b 4f 2f 4b 59 5a 30 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 39 31 64 32 36 65 30 65 37 38 63 37 30 34 63 32 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: z57E1PUCakO/KYZ0.3Context: 91d26e0e78c704c2<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-07-15 15:49:24 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-15 15:49:24 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 4b 79 57 52 45 57 76 58 68 30 69 4c 67 69 48 76 64 6e 56 79 76 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: KyWREWvXh0iLgiHvdnVyvw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49722	75.2.96.155	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:24 UTC	406	OUT	GET /lib_SUQilvCDrDwywovw/fnclxaoc1aijzto1.png?w=200&h=40&dpr=2 HTTP/1.1 Host: xai6l1pibnxefgt2.umso.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:24 UTC	250	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 5986 Content-Type: image/png Last-Modified: Fri, 03 May 2024 09:17:27 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:49:24 GMT Connection: close
2024-07-15 15:49:24 UTC	936	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 76 00 00 00 50 08 03 00 00 00 3a 02 ae c8 00 00 03 00 50 4c 54 45 4c 69 71 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRvP:PLTELiq
2024-07-15 15:49:24 UTC	2372	IN	Data Raw: dd c0 af 95 94 21 b6 0b c6 b7 5d 9f 9e 3b bc 86 9b 7e 51 33 89 1c 8e 48 a0 64 09 72 a1 0d 6d c9 92 e3 ea d0 3d 4a 4b 8b b4 62 2c db bb 2e d6 84 d1 4e 79 24 0a be cc ce 7b d3 e5 b1 55 c7 85 77 80 a8 40 82 57 ee 31 9d 59 43 6c ab c4 b2 83 1a 42 a7 ad e2 07 7a 74 16 c5 30 bd 41 36 81 de a6 bf 1b 32 66 d8 b5 99 44 7c 6e 26 5e a5 65 54 1f b3 37 50 5f 67 45 71 68 b9 11 46 8d 8c 75 4d 87 6f d7 c1 76 c2 4f cb 38 88 ac 97 b8 12 4b a5 e2 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 12 fd 49 44 41 54 78 9c e5 9d 05 94 1c 37 d2 80 ab db dd 2d f5 ee 18 62 c7 f6 d9 eb 5d ef 7a d1 b8 66 66 66 e6 98 62 66 8a e3 38 b6 13 43 c8 9c 38 a6 24 97 0b 33 e3 85 99 39 17 c6 e3 fb ff 63 fc 99 ea 7f a5 ee d9 9d 6e 49 3d 3d 3e 67 6e fc ac 97 b7 c9 cb b4 aa a5 Data Ascii: !];~Q3Hdrm=JKb,.Ny${Uw@W1YClBzt0A62fD\|n&^eT7P_gEqhFuMovO8KpHYsIDATx7-b]zfffbf8C8$39cnI==>gn
2024-07-15 15:49:24 UTC	538	IN	Data Raw: 46 b1 6c 11 81 14 f3 3f 49 c6 1f 47 b2 1b 21 77 2b 86 3d ee 88 31 1b e2 70 89 3c a2 33 64 4d b3 a8 ed 2e be a5 57 10 03 a6 dd 10 a6 e8 e0 eb ed a3 70 7c 2c f9 16 65 ec 1c 96 a9 56 62 be 57 b3 e3 28 11 1f 9a 86 5f 13 59 db 69 ab 28 46 08 a0 0d ed 64 67 31 23 8f 5b 36 8d 4c 54 54 05 40 a3 30 76 0b 6f 0d 4d 4c 82 af 98 14 03 3b 40 fe 7d 6a ee 1e 78 6b 52 7f 3b 12 bc 01 f3 aa 64 33 25 af 87 75 b9 77 c9 13 63 17 af cc 2a f6 eb 33 c5 7e 4f c4 f4 9a c3 8e 38 d8 39 0c 56 3b da 92 e0 f1 ee c3 fd 22 c0 db 50 ad 32 cf 37 c7 9b f8 73 38 db df 25 08 e4 2e ca de ee d2 c9 60 6f 12 89 bd 71 2c 6d 07 f8 9d ce c1 49 9b 84 14 e8 5b fe f0 1c 2d f8 04 74 92 67 fe 2e 6e 8e 77 90 c2 86 2e 2a df 91 99 db 46 a6 49 7e 46 c3 95 12 bb 0d 4b 3a 6a 1d fa e4 15 a7 bd ae 1e 9b eb 6a bc Data Ascii: Fl?IG!w+=1p<3dM.Wp\|,eVbW(_Yi(Fdg1#[6LTT@0voML;@}jxkR;d3%uwc3~O89V;"P27s8%.`oq,mI[-tg.nw.FI~FK:jj
2024-07-15 15:49:24 UTC	2140	IN	Data Raw: 59 50 1c 74 ad 21 e2 e2 67 a9 c5 e4 b0 57 b5 61 f3 b3 b8 a7 bf ed 29 a7 66 b9 74 e9 69 8b 1d c4 01 c0 81 7b 17 88 38 4a 35 79 da 7a 1a 9a 5a 9d 04 fc 4d f2 aa a0 89 0f c7 75 0e b4 eb 2c 61 d7 69 7b b7 a8 9e ba fb 34 c6 0e 02 7c c1 4f 1f 4a c6 29 aa 03 15 2f 4e 61 ca e1 5a d9 15 66 e9 c3 f6 c2 85 bc 48 36 51 0e ce 54 60 b7 b0 75 d4 51 b5 b9 e1 21 c2 c1 8e a7 0f 76 f0 2e 01 d8 b9 bf 95 0e 3c ed d7 cd a9 95 62 c0 b7 3d 14 47 f5 4b fb c6 52 77 1b 7a ca 23 aa 8b cf 2b b1 ff 4b 94 24 69 ad 7c 5a 69 3b 25 b1 a1 34 6f e4 eb ea c8 5c 72 14 04 4e 8d d9 ab 65 7f bb 8b 2f c5 31 ee 06 2c 6a 25 67 36 71 2a 94 49 7b 69 0e 76 dc a3 2f 7c fe 64 f9 f9 e2 7a a7 15 76 f0 54 7e da 73 e5 6a 57 8d 85 45 29 9a 6c 40 37 59 61 1d 9c 49 f1 a6 e9 12 45 f1 49 5e 63 86 f8 38 14 3c 29 Data Ascii: YPt!gWa)fti{8J5yzZMu,ai{4\|OJ)/NaZfH6QT`uQ!v.<b=GKRwz#+K$i\|Zi;%4o\rNe/1,j%g6q*I{iv/\|dzvT~sjWE)l@7YaIEI^c8<)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49723	75.2.96.155	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:25 UTC	664	OUT	POST /api/view HTTP/1.1 Host: xai6l1pibnxefgt2.umso.co Connection: keep-alive Content-Length: 57 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://xai6l1pibnxefgt2.umso.co Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://xai6l1pibnxefgt2.umso.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:25 UTC	57	OUT	Data Raw: 7b 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 70 61 74 68 22 3a 22 2f 22 2c 22 69 73 50 72 69 6f 72 42 6c 6f 63 6b 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 7d Data Ascii: {"referrer":"","path":"/","isPriorBlockingEnabled":false}
2024-07-15 15:49:25 UTC	244	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://xai6l1pibnxefgt2.umso.co Content-Length: 16 Content-Type: application/json;charset=utf-8 Date: Mon, 15 Jul 2024 15:49:25 GMT Connection: close
2024-07-15 15:49:25 UTC	16	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d Data Ascii: {"success":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49727	75.2.96.155	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:26 UTC	356	OUT	GET /api/view HTTP/1.1 Host: xai6l1pibnxefgt2.umso.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:26 UTC	143	IN	HTTP/1.1 404 Not Found Content-Type: text/html;charset=utf-8 Date: Mon, 15 Jul 2024 15:49:26 GMT Content-Length: 1093 Connection: close
2024-07-15 15:49:26 UTC	1043	IN	Data Raw: 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 34 3c 2f 74 69 74 6c 65 3e 0a 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 66 Data Ascii: <html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta http-equiv="X-UA-Compatible" content="ie=edge"> <title>Error 404</title> <style type="text/css"> body { font-f
2024-07-15 15:49:26 UTC	50	IN	Data Raw: 72 79 2c 20 74 68 61 74 20 70 61 67 65 20 64 6f 65 73 6e 27 74 20 65 78 69 73 74 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 0a 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: ry, that page doesn't exist.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49728	75.2.96.155	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:26 UTC	634	OUT	GET /lib_xEaDdJFAXtpgtMsP/u36o6qd6r3o9bnmq.png HTTP/1.1 Host: xai6l1pibnxefgt2.umso.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://xai6l1pibnxefgt2.umso.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:26 UTC	249	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 867 Content-Type: image/png Last-Modified: Fri, 03 May 2024 09:17:40 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:49:26 GMT Connection: close
2024-07-15 15:49:26 UTC	867	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 80 08 03 00 00 00 f4 e0 91 f9 00 00 00 a5 50 4c 54 45 4c 69 71 ae b5 bd ad b4 bd af b7 bf ad b6 bd af af bf ad b5 bd af b7 bf ae b6 be ad b5 bd af b8 bf ad b6 be ab b3 bb ab b4 bb ad b5 bd ab b5 bd ad b7 bf ad b6 bd ad b5 bd ac b4 bc ad b3 bb ff ff ff ad b5 bd d6 da de e0 e3 e6 f5 f6 f7 b2 b9 c1 b7 be c5 eb ed ef c1 c7 cd f5 f5 f7 f0 f1 f3 db df e2 ef f1 f3 fa fb fb bc c3 c9 b2 ba c1 ea ec ef fa fa fb cb d1 d5 e1 e3 e6 c6 cc d1 d1 d5 d9 cb d1 d6 e5 e7 ea bd c3 c9 e6 e8 eb e1 e4 e6 c7 cc d1 d1 d6 d9 c6 cc d2 d1 d5 da e6 e8 ea e5 e8 ea cc d1 d6 e3 7e 72 04 00 00 00 15 74 52 4e 53 00 ef 70 7f 70 10 9f 20 bf ef 6f df 80 70 80 80 7f df df a0 80 56 93 ad 06 00 00 00 09 70 48 59 73 00 00 0b 13 Data Ascii: PNGIHDRPLTELiq~rtRNSpp opVpHYs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49729	2.19.244.127	443

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:26 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-15 15:49:26 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=87629 Date: Mon, 15 Jul 2024 15:49:26 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49730	2.19.244.127	443

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:28 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-15 15:49:28 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=87585 Date: Mon, 15 Jul 2024 15:49:28 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-15 15:49:28 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49731	75.2.96.155	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:28 UTC	389	OUT	GET /lib_xEaDdJFAXtpgtMsP/u36o6qd6r3o9bnmq.png HTTP/1.1 Host: xai6l1pibnxefgt2.umso.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:29 UTC	249	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 867 Content-Type: image/png Last-Modified: Fri, 03 May 2024 09:17:40 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:49:29 GMT Connection: close
2024-07-15 15:49:29 UTC	867	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 80 08 03 00 00 00 f4 e0 91 f9 00 00 00 a5 50 4c 54 45 4c 69 71 ae b5 bd ad b4 bd af b7 bf ad b6 bd af af bf ad b5 bd af b7 bf ae b6 be ad b5 bd af b8 bf ad b6 be ab b3 bb ab b4 bb ad b5 bd ab b5 bd ad b7 bf ad b6 bd ad b5 bd ac b4 bc ad b3 bb ff ff ff ad b5 bd d6 da de e0 e3 e6 f5 f6 f7 b2 b9 c1 b7 be c5 eb ed ef c1 c7 cd f5 f5 f7 f0 f1 f3 db df e2 ef f1 f3 fa fb fb bc c3 c9 b2 ba c1 ea ec ef fa fa fb cb d1 d5 e1 e3 e6 c6 cc d1 d1 d5 d9 cb d1 d6 e5 e7 ea bd c3 c9 e6 e8 eb e1 e4 e6 c7 cc d1 d1 d6 d9 c6 cc d2 d1 d5 da e6 e8 ea e5 e8 ea cc d1 d6 e3 7e 72 04 00 00 00 15 74 52 4e 53 00 ef 70 7f 70 10 9f 20 bf ef 6f df 80 70 80 80 7f df df a0 80 56 93 ad 06 00 00 00 09 70 48 59 73 00 00 0b 13 Data Ascii: PNGIHDRPLTELiq~rtRNSpp opVpHYs

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.6	49732	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:32 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 56 6a 32 43 36 35 76 68 72 55 61 7a 39 72 37 61 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 30 65 34 30 63 62 65 62 39 30 30 38 37 30 33 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: Vj2C65vhrUaz9r7a.1Context: 20e40cbeb9008703
2024-07-15 15:49:32 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-15 15:49:32 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 56 6a 32 43 36 35 76 68 72 55 61 7a 39 72 37 61 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 30 65 34 30 63 62 65 62 39 30 30 38 37 30 33 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 5a 30 4a 6c 55 68 35 69 59 44 63 44 74 58 66 52 2b 42 73 31 6b 47 69 43 4e 41 6d 33 73 6a 45 31 4d 31 63 77 38 53 6a 2b 71 75 75 45 30 74 6f 79 48 32 77 75 56 5a 72 67 78 7a 30 6f 53 67 32 76 56 74 38 62 70 38 4c 30 49 33 32 4a 35 59 76 43 7a 76 7a 2b 68 41 4a 65 39 5a 78 6a 52 6b 41 62 48 66 54 33 76 59 74 38 4b 78 53 5a 52 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: Vj2C65vhrUaz9r7a.2Context: 20e40cbeb9008703<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAZ0JlUh5iYDcDtXfR+Bs1kGiCNAm3sjE1M1cw8Sj+quuE0toyH2wuVZrgxz0oSg2vVt8bp8L0I32J5YvCzvz+hAJe9ZxjRkAbHfT3vYt8KxSZR
2024-07-15 15:49:32 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 56 6a 32 43 36 35 76 68 72 55 61 7a 39 72 37 61 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 32 30 65 34 30 63 62 65 62 39 30 30 38 37 30 33 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: Vj2C65vhrUaz9r7a.3Context: 20e40cbeb9008703<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-07-15 15:49:32 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-15 15:49:32 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 32 39 37 70 59 4a 6b 74 4c 6b 4f 37 56 7a 75 44 69 2b 6c 72 79 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 297pYJktLkO7VzuDi+lryw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49736	104.21.65.212	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:36 UTC	643	OUT	GET /PcYdi/ HTTP/1.1 Host: simerra.msk.su Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:36 UTC	795	IN	HTTP/1.1 200 OK Date: Mon, 15 Jul 2024 15:49:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * set-cookie: PHPSESSID=lk2gt6gi7ee3sd6afjr02eplmh; path=/ expires: Thu, 19 Nov 1981 08:52:00 GMT cache-control: no-store, no-cache, must-revalidate pragma: no-cache vary: Accept-Encoding CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5sF%2FNPaULwIjMMGwwWO5xmKkWdoNC9pvxNY6B8OBQ3mhDha4Ic14HNY95Wex88VD83usNAzXlLAoKHWOuD4NxkE8Tce5ReElRGyzi9QcMDTg6DANURcNCRUS4cetYNMZxQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a3ae7454f3f18bc-EWR alt-svc: h3=":443"; ma=86400
2024-07-15 15:49:36 UTC	574	IN	Data Raw: 37 66 65 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 74 69 74 6c 65 3e 62 72 61 6b 65 3c 2f 74 69 74 6c 65 3e 0a 09 3c 21 2d 2d 20 3c 70 3e 41 20 63 61 72 20 69 73 20 6e 6f 74 20 6a 75 73 74 20 61 20 63 61 72 2c 20 69 74 20 69 73 20 61 20 73 79 6d 62 6f 6c 20 6f 66 20 66 72 65 65 64 6f 6d 20 61 6e 64 20 61 64 76 65 6e 74 75 72 65 2e 3c 2f 70 3e 20 2d 2d 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 Data Ascii: 7fe<html lang="en"><head><title>brake</title>... <p>A car is not just a car, it is a symbol of freedom and adventure.</p> --><meta charset="UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"><meta name="robots" content="noi
2024-07-15 15:49:36 UTC	1369	IN	Data Raw: 69 6e 2d 74 6f 70 3a 35 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 63 65 6e 74 65 72 65 64 2d 63 6f 6e 74 65 6e 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6d 61 78 2d 77 69 64 74 68 3a 35 30 30 70 78 7d 2e 66 73 2d 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 6d 74 2d 32 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 72 65 6d 7d 2e 6d 74 2d 35 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 72 65 6d 7d 2e 74 65 78 74 2d 6d 75 74 65 64 7b 63 6f 6c 6f 72 3a 23 36 63 37 35 37 64 7d 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 09 3c 21 2d 2d 20 41 20 6d 75 73 63 6c 65 20 69 73 20 6c 69 6b 65 Data Ascii: in-top:50px;display:flex;justify-content:center}.centered-content{text-align:center;max-width:500px}.fs-5{font-size:1.25rem;display:block}.mt-2{margin-top:.5rem}.mt-5{margin-top:3rem}.text-muted{color:#6c757d}</style></head><body>... A muscle is like
2024-07-15 15:49:36 UTC	110	IN	Data Raw: 2d 20 54 68 65 20 63 61 72 73 20 77 65 20 64 72 69 76 65 20 73 61 79 20 61 20 6c 6f 74 20 61 62 6f 75 74 20 75 73 2e 20 2d 2d 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 21 2d 2d 20 3c 73 70 61 6e 3e 42 65 6e 65 66 69 74 73 20 6f 66 20 44 6f 69 6e 67 20 42 75 73 69 6e 65 73 73 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: - The cars we drive say a lot about us. --></body>... <span>Benefits of Doing Business</span> --></html>
2024-07-15 15:49:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49738	104.17.3.184	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:37 UTC	542	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://simerra.msk.su/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:37 UTC	336	IN	HTTP/1.1 302 Found Date: Mon, 15 Jul 2024 15:49:37 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/7a55c9ccbaaa/api.js Server: cloudflare CF-RAY: 8a3ae74acd831861-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49740	104.17.3.184	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:37 UTC	557	OUT	GET /turnstile/v0/g/7a55c9ccbaaa/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://simerra.msk.su/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:37 UTC	408	IN	HTTP/1.1 200 OK Date: Mon, 15 Jul 2024 15:49:37 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 43883 Connection: close accept-ranges: bytes last-modified: Wed, 10 Jul 2024 18:24:02 GMT cache-control: max-age=31536000 access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8a3ae74ebac15e6a-EWR alt-svc: h3=":443"; ma=86400
2024-07-15 15:49:37 UTC	961	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 53 74 28 65 2c 6e 2c 72 2c 6f 2c 63 2c 73 2c 79 29 7b 74 72 79 7b 76 61 72 20 5f 3d 65 5b 73 5d 28 79 29 2c 6d 3d 5f 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 6c 29 7b 72 28 6c 29 3b 72 65 74 75 72 6e 7d 5f 2e 64 6f 6e 65 3f 6e 28 6d 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6d 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 49 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 73 3d 65 2e 61 70 70 6c 79 28 6e 2c 72 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function St(e,n,r,o,c,s,y){try{var _=e[s](y),m=_.value}catch(l){r(l);return}_.done?n(m):Promise.resolve(m).then(o,c)}function It(e){return function(){var n=this,r=arguments;return new Promise(function(o,c){var s=e.apply(n,r);funct
2024-07-15 15:49:37 UTC	1369	IN	Data Raw: 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 6e 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 72 2e 70 75 73 68 2e 61 70 70 6c 79 28 72 2c 6f 29 7d 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 41 74 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 3d 6e 21 3d 6e 75 6c 6c 3f 6e 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 Data Ascii: tySymbols){var o=Object.getOwnPropertySymbols(e);n&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),r.push.apply(r,o)}return r}function At(e,n){return n=n!=null?n:{},Object.getOwnPropertyDescriptors?Object.definePropertie
2024-07-15 15:49:37 UTC	1369	IN	Data Raw: 28 65 2c 6e 29 7c 7c 6b 74 28 65 2c 6e 29 7c 7c 43 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 6e 29 7b 76 61 72 20 72 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 73 5b 30 5d 26 31 29 74 68 72 6f 77 20 73 5b 31 5d 3b 72 65 74 75 72 6e 20 73 5b 31 5d 7d 2c 74 72 79 73 3a 5b 5d 2c 6f 70 73 3a 5b 5d 7d 2c 6f 2c 63 2c 73 2c 79 3b 72 65 74 75 72 6e 20 79 3d 7b 6e Data Ascii: (e,n)\|\|kt(e,n)\|\|Ct()}function N(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Re(e,n){var r={label:0,sent:function(){if(s[0]&1)throw s[1];return s[1]},trys:[],ops:[]},o,c,s,y;return y={n
2024-07-15 15:49:37 UTC	1369	IN	Data Raw: 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 4c 74 3d 33 30 30 30 32 30 3b 76 61 72 20 4f 65 3d 33 30 30 30 33 30 3b 76 61 72 20 7a 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c 65 2e 4e 4f 4e 5f 49 4e 54 45 52 41 43 54 49 56 45 3d 22 6e 6f 6e 2d 69 6e 74 65 72 61 63 74 69 76 65 22 2c 65 2e 49 4e 56 49 53 49 42 4c 45 Data Ascii: enges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Lt=300020;var Oe=300030;var z;(function(e){e.MANAGED="managed",e.NON_INTERACTIVE="non-interactive",e.INVISIBLE
2024-07-15 15:49:37 UTC	1369	IN	Data Raw: 7a 30 2d 39 5f 2d 5d 7b 30 2c 33 32 7d 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 74 79 70 65 6f 66 20 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 68 72 2e 74 65 73 74 28 65 29 7d 76 61 72 20 5f 72 3d 2f 5e 5b 61 2d 7a 30 2d 39 5f 5c 2d 3d 5d 7b 30 2c 32 35 35 7d 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 72 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 74 79 70 65 6f 66 20 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 5f 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 29 7b 72 65 74 75 72 6e 20 43 28 5b 22 6e 6f 72 6d 61 6c 22 2c 22 63 6f 6d 70 61 63 74 22 2c 22 69 6e 76 69 73 69 62 6c 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 61 74 28 Data Ascii: z0-9_-]{0,32}$/i;function tt(e){return e===void 0?!0:typeof e=="string"&&hr.test(e)}var _r=/^[a-z0-9_\-=]{0,255}$/i;function rt(e){return e===void 0?!0:typeof e=="string"&&_r.test(e)}function nt(e){return C(["normal","compact","invisible"],e)}function at(
2024-07-15 15:49:37 UTC	1369	IN	Data Raw: 29 2c 6d 3d 73 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 73 2c 22 2f 22 29 3a 22 22 2c 6c 3d 79 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 79 29 3a 22 22 2c 53 3d 72 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 22 3a 22 66 62 45 22 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 5f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 6d 2c 22 74 75 72 6e 73 74 69 6c 65 2f 69 66 2f 6f 76 32 2f 61 76 30 2f 72 63 76 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 53 2c 22 2f 22 29 2e 63 6f Data Ascii: ),m=s?"h/".concat(s,"/"):"",l=y?"?".concat(y):"",S=r["feedback-enabled"]===!1?"fbD":"fbE";return"".concat(_,"/cdn-cgi/challenge-platform/").concat(m,"turnstile/if/ov2/av0/rcv").concat(o,"/").concat(e,"/").concat(n,"/").concat(r.theme,"/").concat(S,"/").co
2024-07-15 15:49:37 UTC	1369	IN	Data Raw: 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 72 29 7d 2c 63 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 74 28 65 29 7b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 4d 65 28 65 29 7b 76 61 72 20 6e 3d 74 79 70 65 6f 66 20 4d 61 70 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 4d 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 4b 74 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f Data Ascii: oto__\|\|Object.getPrototypeOf(r)},ce(e)}function Kt(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function Me(e){var n=typeof Map=="function"?new Map:void 0;return Me=function(o){if(o===null\|\|!Kt(o))return o;if(typeof o!="function")thro
2024-07-15 15:49:37 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 6e 2e 73 72 63 29 29 72 65 74 75 72 6e 20 6e 3b 66 6f 72 28 76 61 72 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 2c 6f 3d 30 2c 63 3b 63 3d 72 5b 6f 5d 3b 6f 2b 2b 29 69 66 28 44 28 63 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 63 2e 73 72 63 29 29 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 65 72 28 29 7b 76 61 72 20 65 3d 70 74 28 29 3b 65 7c 7c 70 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 33 37 37 37 29 Data Ascii: lement)&&e.test(n.src))return n;for(var r=document.querySelectorAll("script"),o=0,c;c=r[o];o++)if(D(c,HTMLScriptElement)&&e.test(c.src))return c}function er(){var e=pt();e\|\|p("Could not find Turnstile script tag, some features may not be available",43777)
2024-07-15 15:49:37 UTC	1369	IN	Data Raw: 74 22 29 3f 6d 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 35 32 30 70 78 22 3a 43 28 53 2c 28 55 3d 28 6f 3d 6e 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6f 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 6f 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 55 21 3d 3d 76 6f 69 64 20 30 3f 55 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 3f 6d 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 34 38 30 70 78 22 3a 6d 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 34 36 30 70 78 22 2c 6d 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 6d 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 32 30 22 2c 6d 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 57 69 64 Data Ascii: t")?m.style.height="520px":C(S,(U=(o=n.displayLanguage)===null\|\|o===void 0?void 0:o.toLowerCase())!==null&&U!==void 0?U:"nonexistent")?m.style.height="480px":m.style.height="460px",m.style.position="absolute",m.style.zIndex="21474836420",m.style.borderWid
2024-07-15 15:49:37 UTC	1369	IN	Data Raw: 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 78 22 2c 22 31 32 22 29 2c 49 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 69 6c 6c 22 2c 22 23 61 61 61 61 61 61 22 29 2c 49 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 2d 77 69 64 74 68 22 2c 22 30 22 29 2c 77 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 49 29 3b 76 61 72 20 76 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 22 6c 69 6e 65 22 29 3b 76 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 2d 77 69 64 74 68 22 2c 22 33 22 29 2c 76 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 22 2c 22 23 66 66 66 22 29 2c 76 2e 73 65 74 41 74 74 72 69 Data Ascii: .setAttribute("cx","12"),I.setAttribute("fill","#aaaaaa"),I.setAttribute("stroke-width","0"),w.appendChild(I);var v=document.createElementNS("http://www.w3.org/2000/svg","line");v.setAttribute("stroke-width","3"),v.setAttribute("stroke","#fff"),v.setAttri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49743	104.17.3.184	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:38 UTC	383	OUT	GET /turnstile/v0/g/7a55c9ccbaaa/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:38 UTC	408	IN	HTTP/1.1 200 OK Date: Mon, 15 Jul 2024 15:49:38 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 43883 Connection: close accept-ranges: bytes last-modified: Wed, 10 Jul 2024 18:24:02 GMT cache-control: max-age=31536000 access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8a3ae755eb0e42e1-EWR alt-svc: h3=":443"; ma=86400
2024-07-15 15:49:38 UTC	961	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 53 74 28 65 2c 6e 2c 72 2c 6f 2c 63 2c 73 2c 79 29 7b 74 72 79 7b 76 61 72 20 5f 3d 65 5b 73 5d 28 79 29 2c 6d 3d 5f 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 6c 29 7b 72 28 6c 29 3b 72 65 74 75 72 6e 7d 5f 2e 64 6f 6e 65 3f 6e 28 6d 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6d 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 49 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 73 3d 65 2e 61 70 70 6c 79 28 6e 2c 72 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function St(e,n,r,o,c,s,y){try{var _=e[s](y),m=_.value}catch(l){r(l);return}_.done?n(m):Promise.resolve(m).then(o,c)}function It(e){return function(){var n=this,r=arguments;return new Promise(function(o,c){var s=e.apply(n,r);funct
2024-07-15 15:49:38 UTC	1369	IN	Data Raw: 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 6e 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 72 2e 70 75 73 68 2e 61 70 70 6c 79 28 72 2c 6f 29 7d 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 41 74 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 3d 6e 21 3d 6e 75 6c 6c 3f 6e 3a 7b 7d 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 Data Ascii: tySymbols){var o=Object.getOwnPropertySymbols(e);n&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),r.push.apply(r,o)}return r}function At(e,n){return n=n!=null?n:{},Object.getOwnPropertyDescriptors?Object.definePropertie
2024-07-15 15:49:38 UTC	1369	IN	Data Raw: 28 65 2c 6e 29 7c 7c 6b 74 28 65 2c 6e 29 7c 7c 43 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 6e 29 7b 76 61 72 20 72 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 73 5b 30 5d 26 31 29 74 68 72 6f 77 20 73 5b 31 5d 3b 72 65 74 75 72 6e 20 73 5b 31 5d 7d 2c 74 72 79 73 3a 5b 5d 2c 6f 70 73 3a 5b 5d 7d 2c 6f 2c 63 2c 73 2c 79 3b 72 65 74 75 72 6e 20 79 3d 7b 6e Data Ascii: (e,n)\|\|kt(e,n)\|\|Ct()}function N(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Re(e,n){var r={label:0,sent:function(){if(s[0]&1)throw s[1];return s[1]},trys:[],ops:[]},o,c,s,y;return y={n
2024-07-15 15:49:38 UTC	1369	IN	Data Raw: 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 4c 74 3d 33 30 30 30 32 30 3b 76 61 72 20 4f 65 3d 33 30 30 30 33 30 3b 76 61 72 20 7a 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4d 41 4e 41 47 45 44 3d 22 6d 61 6e 61 67 65 64 22 2c 65 2e 4e 4f 4e 5f 49 4e 54 45 52 41 43 54 49 56 45 3d 22 6e 6f 6e 2d 69 6e 74 65 72 61 63 74 69 76 65 22 2c 65 2e 49 4e 56 49 53 49 42 4c 45 Data Ascii: enges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Lt=300020;var Oe=300030;var z;(function(e){e.MANAGED="managed",e.NON_INTERACTIVE="non-interactive",e.INVISIBLE
2024-07-15 15:49:38 UTC	1369	IN	Data Raw: 7a 30 2d 39 5f 2d 5d 7b 30 2c 33 32 7d 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 74 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 74 79 70 65 6f 66 20 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 68 72 2e 74 65 73 74 28 65 29 7d 76 61 72 20 5f 72 3d 2f 5e 5b 61 2d 7a 30 2d 39 5f 5c 2d 3d 5d 7b 30 2c 32 35 35 7d 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 72 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 74 79 70 65 6f 66 20 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 5f 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 29 7b 72 65 74 75 72 6e 20 43 28 5b 22 6e 6f 72 6d 61 6c 22 2c 22 63 6f 6d 70 61 63 74 22 2c 22 69 6e 76 69 73 69 62 6c 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 61 74 28 Data Ascii: z0-9_-]{0,32}$/i;function tt(e){return e===void 0?!0:typeof e=="string"&&hr.test(e)}var _r=/^[a-z0-9_\-=]{0,255}$/i;function rt(e){return e===void 0?!0:typeof e=="string"&&_r.test(e)}function nt(e){return C(["normal","compact","invisible"],e)}function at(
2024-07-15 15:49:38 UTC	1369	IN	Data Raw: 29 2c 6d 3d 73 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 73 2c 22 2f 22 29 3a 22 22 2c 6c 3d 79 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 79 29 3a 22 22 2c 53 3d 72 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 22 3a 22 66 62 45 22 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 5f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 6d 2c 22 74 75 72 6e 73 74 69 6c 65 2f 69 66 2f 6f 76 32 2f 61 76 30 2f 72 63 76 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 53 2c 22 2f 22 29 2e 63 6f Data Ascii: ),m=s?"h/".concat(s,"/"):"",l=y?"?".concat(y):"",S=r["feedback-enabled"]===!1?"fbD":"fbE";return"".concat(_,"/cdn-cgi/challenge-platform/").concat(m,"turnstile/if/ov2/av0/rcv").concat(o,"/").concat(e,"/").concat(n,"/").concat(r.theme,"/").concat(S,"/").co
2024-07-15 15:49:38 UTC	1369	IN	Data Raw: 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 72 29 7d 2c 63 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 74 28 65 29 7b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 4d 65 28 65 29 7b 76 61 72 20 6e 3d 74 79 70 65 6f 66 20 4d 61 70 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 4d 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 4b 74 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f Data Ascii: oto__\|\|Object.getPrototypeOf(r)},ce(e)}function Kt(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function Me(e){var n=typeof Map=="function"?new Map:void 0;return Me=function(o){if(o===null\|\|!Kt(o))return o;if(typeof o!="function")thro
2024-07-15 15:49:38 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 6e 2e 73 72 63 29 29 72 65 74 75 72 6e 20 6e 3b 66 6f 72 28 76 61 72 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 2c 6f 3d 30 2c 63 3b 63 3d 72 5b 6f 5d 3b 6f 2b 2b 29 69 66 28 44 28 63 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 63 2e 73 72 63 29 29 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 65 72 28 29 7b 76 61 72 20 65 3d 70 74 28 29 3b 65 7c 7c 70 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 33 37 37 37 29 Data Ascii: lement)&&e.test(n.src))return n;for(var r=document.querySelectorAll("script"),o=0,c;c=r[o];o++)if(D(c,HTMLScriptElement)&&e.test(c.src))return c}function er(){var e=pt();e\|\|p("Could not find Turnstile script tag, some features may not be available",43777)
2024-07-15 15:49:38 UTC	1369	IN	Data Raw: 74 22 29 3f 6d 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 35 32 30 70 78 22 3a 43 28 53 2c 28 55 3d 28 6f 3d 6e 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6f 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 6f 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 55 21 3d 3d 76 6f 69 64 20 30 3f 55 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 3f 6d 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 34 38 30 70 78 22 3a 6d 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 34 36 30 70 78 22 2c 6d 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 6d 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 32 30 22 2c 6d 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 57 69 64 Data Ascii: t")?m.style.height="520px":C(S,(U=(o=n.displayLanguage)===null\|\|o===void 0?void 0:o.toLowerCase())!==null&&U!==void 0?U:"nonexistent")?m.style.height="480px":m.style.height="460px",m.style.position="absolute",m.style.zIndex="21474836420",m.style.borderWid
2024-07-15 15:49:38 UTC	1369	IN	Data Raw: 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 78 22 2c 22 31 32 22 29 2c 49 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 69 6c 6c 22 2c 22 23 61 61 61 61 61 61 22 29 2c 49 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 2d 77 69 64 74 68 22 2c 22 30 22 29 2c 77 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 49 29 3b 76 61 72 20 76 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 22 6c 69 6e 65 22 29 3b 76 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 2d 77 69 64 74 68 22 2c 22 33 22 29 2c 76 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 22 2c 22 23 66 66 66 22 29 2c 76 2e 73 65 74 41 74 74 72 69 Data Ascii: .setAttribute("cx","12"),I.setAttribute("fill","#aaaaaa"),I.setAttribute("stroke-width","0"),w.appendChild(I);var v=document.createElementNS("http://www.w3.org/2000/svg","line");v.setAttribute("stroke-width","3"),v.setAttribute("stroke","#fff"),v.setAttri

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49742	104.17.3.184	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:38 UTC	797	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/7nmk9/0x4AAAAAAAeyiL9ArCePgoa_/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://simerra.msk.su/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:38 UTC	1362	IN	HTTP/1.1 200 OK Date: Mon, 15 Jul 2024 15:49:38 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 69597 Connection: close referrer-policy: same-origin document-policy: js-profiling critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 cross-origin-embedder-policy: require-corp accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self'
2024-07-15 15:49:38 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 61 33 61 65 37 35 36 31 38 38 62 30 66 37 66 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8a3ae756188b0f7f-EWRalt-svc: h3=":443"; ma=86400
2024-07-15 15:49:38 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-07-15 15:49:38 UTC	1369	IN	Data Raw: 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 73 79 73 74 Data Ascii: ; width: 100%; height: 100%; overflow: hidden;}body, .main-wrapper { margin: 0; background-color: #fff; padding: 0; width: 100%; height: 100%; overflow: hidden; line-height: 17px; color: #1d1f20; font-family: -apple-system, syst
2024-07-15 15:49:38 UTC	1369	IN	Data Raw: 31 30 3b 0a 7d 0a 0a 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 38 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 30 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 2c 20 30 2e 35 33 29 20 62 6f 74 68 3b 0a 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 36 70 78 3b 0a 20 20 73 74 72 6f 6b Data Ascii: 10;}#success-icon { display: flex; margin-right: 8px; border-radius: 50%; box-shadow: inset 0 0 0 #038127; width: 30px; height: 30px; animation: scale-up-center 0.6s cubic-bezier(0.55, 0.085, 0.68, 0.53) both; stroke-width: 6px; strok
2024-07-15 15:49:38 UTC	1369	IN	Data Raw: 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 62 2d 6c 62 20 2e 63 62 2d 69 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 62 2d 6c 62 20 69 6e 70 75 Data Ascii: eme-dark #challenge-error-text a:hover,.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus { color: #949494;}.theme-dark .cb-lb .cb-i { border: 2px solid #dadada; background-color: #222;}.theme-dark .cb-lb inpu
2024-07-15 15:49:38 UTC	1369	IN	Data Raw: 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 Data Ascii: helper-loop-link { color: #bbb;}.theme-dark #fr-helper-link:visited, .theme-dark #fr-helper-link:link,.theme-dark #fr-helper-loop-link:visited,.theme-dark #fr-helper-loop-link:link { color: #bbb;}.theme-dark #fr-helper-link:active, .theme-dark #
2024-07-15 15:49:38 UTC	1369	IN	Data Raw: 74 65 78 74 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 76 69 73 69 74 65 64 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 61 63 74 69 76 65 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 68 6f 76 65 72 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 0a Data Ascii: text a { color: #1d1f20;}#challenge-overlay a:visited, #challenge-overlay a:link,#challenge-error-text a:visited,#challenge-error-text a:link { color: #1d1f20;}#challenge-overlay a:active, #challenge-overlay a:hover, #challenge-overlay a:focus,
2024-07-15 15:49:38 UTC	1369	IN	Data Raw: 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 20 7e 20 2e 63 62 2d 69 20 7b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 20 7e 20 2e 63 62 2d 69 3a 3a 61 66 74 65 72 20 7b 0a 20 20 74 6f 70 3a 20 33 70 78 3b 0a 20 20 6c 65 66 74 3a 20 38 70 78 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 62 6f 72 64 65 72 3a 20 73 6f 6c 69 64 20 23 63 34 34 Data Ascii: }.cb-lb input:checked ~ .cb-i { transform: rotate(0deg) scale(1); opacity: 1; border-radius: 5px; background-color: white;}.cb-lb input:checked ~ .cb-i::after { top: 3px; left: 8px; transform: rotate(45deg) scale(1); border: solid #c44
2024-07-15 15:49:38 UTC	1369	IN	Data Raw: 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 35 70 78 20 31 36 70 78 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 65 72 6d 73 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 71 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 70 78 3b 0a 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 7d 0a 2e 73 69 7a 65 2d Data Ascii: ign-items: center; margin: 5px 16px 0; padding-right: 0; text-align: right;}.size-compact #terms { text-align: right;}.size-compact #qr { text-align: center;}.size-compact #challenge-error-title { margin-top: 3px; width: auto;}.size-
2024-07-15 15:49:38 UTC	1369	IN	Data Raw: 23 74 65 72 6d 73 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 38 36 70 78 3b 0a 7d 0a 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 66 61 69 6c 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 38 36 70 78 3b 0a 7d 0a 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 73 70 69 6e 6e 65 72 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 38 36 70 78 3b 0a 7d 0a 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 69 63 6f 6e 2c 0a 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 Data Ascii: #terms { text-align: center;}.rtl.size-compact #success-icon { left: 86px;}.rtl.size-compact #fail-icon { left: 86px;}.rtl.size-compact #spinner-icon { left: 86px;}.rtl.size-compact #timeout-icon,.rtl.size-compact #expired-icon { left:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	65045	104.17.3.184	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:39 UTC	795	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/7nmk9/0x4AAAAAAAeyiL9ArCePgoa_/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:39 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 15 Jul 2024 15:49:39 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8a3ae75aaa6cc326-EWR alt-svc: h3=":443"; ma=86400
2024-07-15 15:49:39 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	65046	104.17.3.184	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:40 UTC	730	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8a3ae756188b0f7f&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/7nmk9/0x4AAAAAAAeyiL9ArCePgoa_/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:40 UTC	331	IN	HTTP/1.1 200 OK Date: Mon, 15 Jul 2024 15:49:40 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 113729 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8a3ae75db96b1a13-EWR alt-svc: h3=":443"; ma=86400
2024-07-15 15:49:40 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 57 4b 4d 56 62 30 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.WKMVb0={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"http
2024-07-15 15:49:40 UTC	1369	IN	Data Raw: 61 67 65 2e 22 2c 22 6f 75 74 64 61 74 65 64 5f 62 72 6f 77 73 65 72 22 3a 22 25 33 43 62 25 33 45 59 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 25 32 30 6f 66 25 32 30 64 61 74 65 25 32 31 25 33 43 25 32 46 62 25 33 45 25 33 43 62 72 25 32 46 25 33 45 55 70 64 61 74 65 25 32 30 79 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 74 6f 25 32 30 76 69 65 77 25 32 30 74 68 69 73 25 32 30 77 65 62 73 69 74 65 25 32 30 63 6f 72 72 65 63 74 6c 79 2e 25 32 30 25 33 43 61 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 33 44 25 32 32 6e 6f 6f 70 65 6e 65 72 25 32 30 6e 6f 72 65 66 65 72 72 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 Data Ascii: age.","outdated_browser":"%3Cb%3EYour%20browser%20is%20out%20of%20date%21%3C%2Fb%3E%3Cbr%2F%3EUpdate%20your%20browser%20to%20view%20this%20website%20correctly.%20%3Ca%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20href%3D%22https%3A%2F%2Fde
2024-07-15 15:49:40 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 2c 27 49 56 79 41 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 79 43 62 4d 65 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 74 64 4b 72 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 63 51 4d 75 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 4a 7a 52 49 49 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 43 6a 78 53 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 69 55 43 6a 74 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b Data Ascii: unction(h,i){return h+i},'IVyAj':function(h,i){return h==i},'yCbMe':function(h,i){return h>i},'tdKra':function(h,i){return h(i)},'cQMuU':function(h,i){return h>i},'JzRII':function(h,i){return h<<i},'CjxSw':function(h,i){return h(i)},'iUCjt':function(h,i){
2024-07-15 15:49:40 UTC	1369	IN	Data Raw: 29 5d 29 4f 5b 67 4c 28 31 31 31 38 29 5d 28 64 5b 67 4c 28 38 35 30 29 5d 2c 67 4c 28 35 34 32 29 29 3b 65 6c 73 65 20 69 66 28 4b 3d 69 5b 67 4c 28 35 35 36 29 5d 28 4a 29 2c 4f 62 6a 65 63 74 5b 67 4c 28 31 32 39 32 29 5d 5b 67 4c 28 31 33 31 32 29 5d 5b 67 4c 28 36 37 34 29 5d 28 78 2c 4b 29 7c 7c 28 78 5b 4b 5d 3d 45 2b 2b 2c 42 5b 4b 5d 3d 21 30 29 2c 4c 3d 64 5b 67 4c 28 31 31 39 34 29 5d 28 43 2c 4b 29 2c 4f 62 6a 65 63 74 5b 67 4c 28 31 32 39 32 29 5d 5b 67 4c 28 31 33 31 32 29 5d 5b 67 4c 28 36 37 34 29 5d 28 78 2c 4c 29 29 43 3d 4c 3b 65 6c 73 65 20 66 6f 72 28 4d 3d 67 4c 28 36 36 36 29 5b 67 4c 28 34 38 33 29 5d 28 27 7c 27 29 2c 4e 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 4d 5b 4e 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 64 5b 67 4c Data Ascii: )])O[gL(1118)](d[gL(850)],gL(542));else if(K=i[gL(556)](J),Object[gL(1292)][gL(1312)][gL(674)](x,K)\|\|(x[K]=E++,B[K]=!0),L=d[gL(1194)](C,K),Object[gL(1292)][gL(1312)][gL(674)](x,L))C=L;else for(M=gL(666)[gL(483)]('\|'),N=0;!![];){switch(M[N++]){case'0':d[gL
2024-07-15 15:49:40 UTC	1369	IN	Data Raw: 38 29 5d 28 73 2c 46 29 3b 48 3d 64 5b 67 4c 28 36 39 35 29 5d 28 48 2c 31 29 7c 4f 2c 49 3d 3d 64 5b 67 4c 28 31 33 30 33 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 67 4c 28 36 37 38 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4f 3d 43 5b 67 4c 28 39 39 34 29 5d 28 30 29 2c 73 3d 30 3b 64 5b 67 4c 28 39 31 31 29 5d 28 31 36 2c 73 29 3b 48 3d 64 5b 67 4c 28 33 37 30 29 5d 28 64 5b 67 4c 28 39 34 31 29 5d 28 48 2c 31 29 2c 64 5b 67 4c 28 38 33 32 29 5d 28 4f 2c 31 29 29 2c 49 3d 3d 64 5b 67 4c 28 31 33 30 33 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 67 4c 28 36 37 38 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 44 2d 2d 2c 30 3d 3d 44 26 26 28 44 3d 4d 61 74 Data Ascii: 8)](s,F);H=d[gL(695)](H,1)\|O,I==d[gL(1303)](j,1)?(I=0,G[gL(678)](o(H)),H=0):I++,O=0,s++);for(O=C[gL(994)](0),s=0;d[gL(911)](16,s);H=d[gL(370)](d[gL(941)](H,1),d[gL(832)](O,1)),I==d[gL(1303)](j,1)?(I=0,G[gL(678)](o(H)),H=0):I++,O>>=1,s++);}D--,0==D&&(D=Mat
2024-07-15 15:49:40 UTC	1369	IN	Data Raw: 3d 31 2c 48 3d 3d 30 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 46 2a 28 30 3c 4c 3f 31 3a 30 29 2c 46 3c 3c 3d 31 29 3b 4d 3d 64 5b 67 4f 28 31 30 37 34 29 5d 28 65 2c 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 27 27 7d 66 6f 72 28 45 3d 73 5b 33 5d 3d 4d 2c 44 5b 67 4f 28 36 37 38 29 5d 28 4d 29 3b 3b 29 7b 69 66 28 64 5b 67 4f 28 37 30 39 29 5d 28 49 2c 69 29 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 4f 28 36 36 33 29 5d 28 32 2c 43 29 2c 46 3d 31 3b 64 5b 67 4f 28 35 35 38 29 5d 28 46 2c 4b 29 3b 4c 3d 64 5b 67 4f 28 31 30 32 39 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 64 5b 67 4f 28 36 37 37 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 28 Data Ascii: =1,H==0&&(H=j,G=o(I++)),J\|=F*(0<L?1:0),F<<=1);M=d[gO(1074)](e,J);break;case 2:return''}for(E=s[3]=M,D[gO(678)](M);;){if(d[gO(709)](I,i))return'';for(J=0,K=Math[gO(663)](2,C),F=1;d[gO(558)](F,K);L=d[gO(1029)](G,H),H>>=1,0==H&&(H=j,G=d[gO(677)](o,I++)),J\|=(
2024-07-15 15:49:40 UTC	1369	IN	Data Raw: 57 77 27 3a 68 59 28 39 34 37 29 2c 27 43 78 41 6b 75 27 3a 68 59 28 31 34 30 30 29 2c 27 71 73 54 69 49 27 3a 68 59 28 39 32 39 29 2c 27 49 69 65 73 41 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 28 68 29 7d 2c 27 4b 5a 4b 6e 59 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 21 3d 3d 68 7d 2c 27 58 76 54 48 6c 27 3a 68 59 28 31 30 34 32 29 2c 27 51 41 62 51 6b 27 3a 68 59 28 38 30 30 29 7d 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 5b 68 59 28 35 35 33 29 5d 28 66 75 2c 63 29 7d 63 61 74 63 68 28 67 29 7b 69 66 28 65 5b 68 59 28 31 37 34 36 29 5d 28 65 5b 68 59 28 31 34 37 36 29 5d 2c 65 5b 68 59 28 31 36 37 38 29 5d 29 29 72 65 74 75 72 6e 20 66 73 28 66 74 28 63 29 29 3b 65 6c 73 65 20 74 72 79 7b 69 Data Ascii: Ww':hY(947),'CxAku':hY(1400),'qsTiI':hY(929),'IiesA':function(g,h){return g(h)},'KZKnY':function(g,h){return g!==h},'XvTHl':hY(1042),'QAbQk':hY(800)});try{return e[hY(553)](fu,c)}catch(g){if(e[hY(1746)](e[hY(1476)],e[hY(1678)]))return fs(ft(c));else try{i
2024-07-15 15:49:40 UTC	1369	IN	Data Raw: 28 67 2c 68 2c 69 2c 6a 2c 69 34 2c 6f 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 69 66 28 69 34 3d 67 48 2c 6f 3d 7b 27 54 72 45 50 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3d 3d 3d 48 7d 2c 27 6e 41 69 68 79 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 48 3d 3d 3d 47 7d 2c 27 51 59 49 70 79 27 3a 69 34 28 31 37 35 39 29 2c 27 50 67 58 53 68 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 27 55 51 55 45 78 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 27 50 69 59 70 50 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 27 6f 46 51 74 50 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 29 7b 72 Data Ascii: (g,h,i,j,i4,o,x,B,C,D,E,F){if(i4=gH,o={'TrEPK':function(G,H){return G===H},'nAihy':function(G,H){return H===G},'QYIpy':i4(1759),'PgXSh':function(G,H){return G+H},'UQUEx':function(G,H){return G+H},'PiYpP':function(G,H){return G+H},'oFQtP':function(G,H,I){r
2024-07-15 15:49:40 UTC	1369	IN	Data Raw: 29 5d 26 26 4b 5b 69 36 28 31 30 34 37 29 5d 2b 2b 2c 49 5b 69 36 28 38 36 38 29 5d 28 4c 5b 69 36 28 39 36 38 29 5d 2c 49 5b 69 36 28 31 38 31 37 29 5d 29 26 26 4b 5b 69 36 28 34 35 36 29 5d 2b 2b 2c 4d 2b 2b 2c 4b 5b 69 36 28 34 32 39 29 5d 3d 4e 29 3a 28 4f 62 6a 65 63 74 5b 69 36 28 31 32 39 32 29 5d 5b 69 36 28 31 33 31 32 29 5d 5b 69 36 28 36 37 34 29 5d 28 6a 2c 48 29 7c 7c 28 6a 5b 48 5d 3d 5b 5d 29 2c 6a 5b 48 5d 5b 69 36 28 36 37 38 29 5d 28 47 29 29 7d 7d 2c 66 42 3d 67 48 28 35 34 33 29 5b 67 48 28 34 38 33 29 5d 28 27 3b 27 29 2c 66 43 3d 66 42 5b 67 48 28 31 32 33 39 29 5d 5b 67 48 28 38 36 30 29 5d 28 66 42 29 2c 65 4d 5b 67 48 28 31 37 34 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 2c 69 38 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 76 2c 78 2c Data Ascii: )]&&K[i6(1047)]++,I[i6(868)](L[i6(968)],I[i6(1817)])&&K[i6(456)]++,M++,K[i6(429)]=N):(Object[i6(1292)][i6(1312)][i6(674)](j,H)\|\|(j[H]=[]),j[H][i6(678)](G))}},fB=gH(543)[gH(483)](';'),fC=fB[gH(1239)][gH(860)](fB),eM[gH(1747)]=function(h,i,i8,j,k,l,m,n,v,x,
2024-07-15 15:49:40 UTC	1369	IN	Data Raw: 39 29 2c 27 77 69 64 67 65 74 49 64 27 3a 65 4d 5b 69 61 28 31 33 32 38 29 5d 5b 69 61 28 37 37 32 29 5d 2c 27 65 76 65 6e 74 27 3a 69 61 28 35 30 32 29 2c 27 63 66 43 68 6c 4f 75 74 27 3a 65 4d 5b 69 61 28 31 33 32 38 29 5d 5b 69 61 28 31 33 33 32 29 5d 2c 27 63 66 43 68 6c 4f 75 74 53 27 3a 65 4d 5b 69 61 28 31 33 32 38 29 5d 5b 69 61 28 31 33 39 32 29 5d 2c 27 63 6f 64 65 27 3a 69 61 28 36 38 36 29 2c 27 72 63 56 27 3a 65 4d 5b 69 61 28 31 33 32 38 29 5d 5b 69 61 28 36 38 32 29 5d 7d 2c 27 2a 27 29 29 7d 2c 67 29 7d 2c 65 4d 5b 67 48 28 37 35 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 69 62 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 2c 43 2c 44 29 7b 6a 3d 28 69 62 3d 67 48 2c 69 3d 7b 7d 2c 69 5b 69 62 28 31 38 33 31 29 Data Ascii: 9),'widgetId':eM[ia(1328)][ia(772)],'event':ia(502),'cfChlOut':eM[ia(1328)][ia(1332)],'cfChlOutS':eM[ia(1328)][ia(1392)],'code':ia(686),'rcV':eM[ia(1328)][ia(682)]},'*'))},g)},eM[gH(759)]=function(f,g,h,ib,i,j,k,l,m,n,o,s,x,B,C,D){j=(ib=gH,i={},i[ib(1831)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	65047	104.17.3.184	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:40 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:40 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 15 Jul 2024 15:49:40 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8a3ae75e791e186d-EWR alt-svc: h3=":443"; ma=86400
2024-07-15 15:49:40 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49735	104.21.65.212	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:40 UTC	636	OUT	GET /favicon.ico HTTP/1.1 Host: simerra.msk.su Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://simerra.msk.su/PcYdi/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=lk2gt6gi7ee3sd6afjr02eplmh
2024-07-15 15:49:40 UTC	655	IN	HTTP/1.1 404 Not Found Date: Mon, 15 Jul 2024 15:49:40 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close cache-control: private, no-cache, max-age=0 pragma: no-cache vary: Accept-Encoding CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=spzax1iHPdcfAS7FVjWZQ9JQD1uEdhao4k4VpugfJpto8p3AsgDBzrKMH0TMZ%2FbQMZ7wHP2yS3o2bqLn7bzuhjAIJW%2Fahk7Zinf%2FLsUFR7R99AoaNQYPxfIWCYD3pFlz%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8a3ae760df6017e9-EWR alt-svc: h3=":443"; ma=86400
2024-07-15 15:49:40 UTC	714	IN	Data Raw: 34 65 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f Data Ascii: 4e1<!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><title> 404 Not Found</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</
2024-07-15 15:49:40 UTC	542	IN	Data Raw: 72 65 73 6f 75 72 63 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 30 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 37 34 37 34 37 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 Data Ascii: resource requested could not be found on this server!</p></div></div><div style="color:#f0f0f0; font-size:12px;margin:auto;padding:0px 30px 0px 30px;position:relative;clear:both;height:100px;margin-top:-101px;background-color:#474747;border-top: 1px soli
2024-07-15 15:49:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	65048	104.17.3.184	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:40 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8a3ae756188b0f7f&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:41 UTC	331	IN	HTTP/1.1 200 OK Date: Mon, 15 Jul 2024 15:49:40 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 113319 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8a3ae7631b1f238e-EWR alt-svc: h3=":443"; ma=86400
2024-07-15 15:49:41 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 57 4b 4d 56 62 30 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.WKMVb0={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.terms":"https%3A%2
2024-07-15 15:49:41 UTC	1369	IN	Data Raw: 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 25 32 32 25 33 45 4d 6f 72 65 25 32 30 49 6e 66 6f 72 6d 61 74 69 6f 6e 2e 25 33 43 25 32 46 61 25 33 45 22 2c 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 25 32 30 69 73 25 32 30 74 61 6b 69 6e 67 25 32 30 6c 6f 6e 67 65 72 25 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 65 64 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 Data Ascii: -challenges%2F%23browser-support%22%3EMore%20Information.%3C%2Fa%3E","check_delays":"Verification%20is%20taking%20longer%20than%20expected.%20Check%20your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%2
2024-07-15 15:49:41 UTC	1369	IN	Data Raw: 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 5e 68 7d 2c 27 72 4d 43 78 61 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 5e 68 7d 2c 27 61 72 65 49 66 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 26 68 7d 2c 27 45 79 4b 54 43 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 5e 68 7d 2c 27 4e 65 50 5a 71 27 3a 67 56 28 36 33 32 29 2c 27 76 6a 69 66 53 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 28 68 29 7d 7d 29 3b 74 72 79 7b 69 66 28 65 5b 67 56 28 31 37 31 36 29 5d 21 3d 3d 67 56 28 36 39 32 29 29 72 65 74 75 72 6e 20 65 51 28 63 29 3b 65 6c 73 65 7b 69 3d 28 68 3d 30 2c 30 29 3b 64 6f 7b 6a 3d 65 5b 67 56 28 35 34 33 29 5d 28 6f 2e 68 5b 65 5b 67 56 28 31 Data Ascii: g,h){return g^h},'rMCxa':function(g,h){return g^h},'areIf':function(g,h){return g&h},'EyKTC':function(g,h){return g^h},'NePZq':gV(632),'vjifS':function(g,h){return g(h)}});try{if(e[gV(1716)]!==gV(692))return eQ(c);else{i=(h=0,0);do{j=e[gV(543)](o.h[e[gV(1
2024-07-15 15:49:41 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 72 66 43 51 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 57 79 47 74 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 6a 63 67 49 47 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 67 4e 47 45 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 70 45 62 44 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 6a 50 4c 4e 50 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 65 5a 48 51 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e Data Ascii: tion(h,i){return h<i},'rfCQv':function(h,i){return h>i},'WyGtO':function(h,i){return h\|i},'jcgIG':function(h,i){return h<<i},'gNGEl':function(h,i){return h&i},'pEbDk':function(h,i){return h-i},'jPLNP':function(h,i){return h<i},'eZHQb':function(h,i){return
2024-07-15 15:49:41 UTC	1369	IN	Data Raw: 68 30 28 36 38 36 29 5b 68 30 28 31 33 35 32 29 5d 28 6b 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 68 31 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 29 7b 69 66 28 68 31 3d 67 59 2c 64 5b 68 31 28 38 34 37 29 5d 28 6e 75 6c 6c 2c 69 29 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 78 3d 7b 7d 2c 42 3d 7b 7d 2c 43 3d 27 27 2c 44 3d 32 2c 45 3d 33 2c 46 3d 32 2c 47 3d 5b 5d 2c 48 3d 30 2c 49 3d 30 2c 4a 3d 30 3b 64 5b 68 31 28 31 31 33 37 29 5d 28 4a 2c 69 5b 68 31 28 31 36 33 39 29 5d 29 3b 4a 2b 3d 31 29 69 66 28 4b 3d 69 5b 68 31 28 31 33 35 32 29 5d 28 4a 29 2c 4f 62 6a 65 63 74 5b 68 31 28 31 31 36 32 29 5d 5b 68 31 28 34 37 33 29 5d 5b 68 31 28 38 37 37 29 5d 28 78 2c 4b 29 7c 7c 28 78 Data Ascii: h0(686)[h0(1352)](k)})},'g':function(i,j,o,h1,s,x,B,C,D,E,F,G,H,I,J,K,L,M){if(h1=gY,d[h1(847)](null,i))return'';for(x={},B={},C='',D=2,E=3,F=2,G=[],H=0,I=0,J=0;d[h1(1137)](J,i[h1(1639)]);J+=1)if(K=i[h1(1352)](J),Object[h1(1162)][h1(473)][h1(877)](x,K)\|\|(x
2024-07-15 15:49:41 UTC	1369	IN	Data Raw: 73 2b 2b 29 3b 7d 65 6c 73 65 20 72 65 74 75 72 6e 20 76 6f 69 64 28 64 5b 68 31 28 32 39 39 29 5d 28 46 29 2c 47 28 64 5b 68 31 28 31 32 32 35 29 5d 2c 68 31 28 31 31 35 33 29 29 29 7d 65 6c 73 65 7b 66 6f 72 28 4d 3d 31 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 68 31 28 31 31 31 35 29 5d 28 64 5b 68 31 28 39 30 36 29 5d 28 48 2c 31 29 2c 4d 29 2c 64 5b 68 31 28 38 34 37 29 5d 28 49 2c 64 5b 68 31 28 39 31 33 29 5d 28 6a 2c 31 29 29 3f 28 49 3d 30 2c 47 5b 68 31 28 37 31 34 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 68 31 28 37 33 38 29 5d 28 30 29 2c 73 3d 30 3b 31 36 3e 73 3b 48 3d 64 5b 68 31 28 37 35 35 29 5d 28 48 3c 3c 31 2c 64 5b 68 31 28 31 36 32 31 29 5d 28 4d 2c 31 29 29 2c 49 3d 3d 64 Data Ascii: s++);}else return void(d[h1(299)](F),G(d[h1(1225)],h1(1153)))}else{for(M=1,s=0;s<F;H=d[h1(1115)](d[h1(906)](H,1),M),d[h1(847)](I,d[h1(913)](j,1))?(I=0,G[h1(714)](o(H)),H=0):I++,M=0,s++);for(M=C[h1(738)](0),s=0;16>s;H=d[h1(755)](H<<1,d[h1(1621)](M,1)),I==d
2024-07-15 15:49:41 UTC	1369	IN	Data Raw: 3d 30 2c 4b 3d 4d 61 74 68 5b 68 34 28 31 30 38 32 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 64 5b 68 34 28 31 30 30 36 29 5d 28 46 2c 4b 29 3b 4c 3d 48 26 47 2c 48 3e 3e 3d 31 2c 48 3d 3d 30 26 26 28 48 3d 6a 2c 47 3d 64 5b 68 34 28 36 35 39 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 28 64 5b 68 34 28 34 33 33 29 5d 28 30 2c 4c 29 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 4d 3d 65 28 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 34 28 31 30 38 32 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4c 3d 48 26 47 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 68 34 28 31 33 34 31 29 5d 28 30 3c 4c 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 4d 3d 65 28 4a Data Ascii: =0,K=Math[h4(1082)](2,8),F=1;d[h4(1006)](F,K);L=H&G,H>>=1,H==0&&(H=j,G=d[h4(659)](o,I++)),J\|=(d[h4(433)](0,L)?1:0)*F,F<<=1);M=e(J);break;case 1:for(J=0,K=Math[h4(1082)](2,16),F=1;F!=K;L=H&G,H>>=1,0==H&&(H=j,G=o(I++)),J\|=d[h4(1341)](0<L?1:0,F),F<<=1);M=e(J
2024-07-15 15:49:41 UTC	1369	IN	Data Raw: 65 4d 5b 68 76 28 31 65 33 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 77 29 7b 68 77 3d 68 76 2c 65 4d 5b 68 77 28 37 33 35 29 5d 26 26 28 65 4d 5b 68 77 28 31 35 31 38 29 5d 5b 68 77 28 34 37 38 29 5d 28 29 2c 65 4d 5b 68 77 28 31 35 31 38 29 5d 5b 68 77 28 33 32 37 29 5d 28 29 2c 65 4d 5b 68 77 28 34 34 31 29 5d 3d 21 21 5b 5d 2c 65 4d 5b 65 5b 68 77 28 31 31 36 36 29 5d 5d 5b 68 77 28 36 30 36 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 68 77 28 37 34 30 29 2c 27 77 69 64 67 65 74 49 64 27 3a 65 4d 5b 68 77 28 31 36 35 37 29 5d 5b 68 77 28 31 33 31 37 29 5d 2c 27 65 76 65 6e 74 27 3a 68 77 28 31 30 34 30 29 2c 27 63 66 43 68 6c 4f 75 74 27 3a 65 4d 5b 68 77 28 31 36 35 37 29 5d 5b 68 77 28 31 32 30 30 29 5d 2c 27 63 66 43 68 6c 4f 75 74 53 27 3a 65 4d 5b 68 77 Data Ascii: eM[hv(1e3)](function(hw){hw=hv,eM[hw(735)]&&(eM[hw(1518)][hw(478)](),eM[hw(1518)][hw(327)](),eM[hw(441)]=!![],eM[e[hw(1166)]][hw(606)]({'source':hw(740),'widgetId':eM[hw(1657)][hw(1317)],'event':hw(1040),'cfChlOut':eM[hw(1657)][hw(1200)],'cfChlOutS':eM[hw
2024-07-15 15:49:41 UTC	1369	IN	Data Raw: 5d 3f 6a 5b 68 78 28 35 32 36 29 5d 28 27 68 2f 27 2c 65 4d 5b 68 78 28 31 36 35 37 29 5d 5b 68 78 28 31 36 34 30 29 5d 29 2b 27 2f 27 3a 27 27 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 32 27 3a 44 3d 6e 65 77 20 65 4d 5b 28 68 78 28 31 34 35 35 29 29 5d 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 7d 63 61 74 63 68 28 45 29 7b 7d 7d 2c 65 4d 5b 67 48 28 33 38 39 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 2c 67 2c 68 2c 68 79 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 28 68 79 3d 67 48 2c 69 3d 7b 7d 2c 69 5b 68 79 28 31 35 32 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 3c 6f 7d 2c 69 5b 68 79 28 36 30 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 7c 6f 7d 2c 69 5b 68 79 28 Data Ascii: ]?j[hx(526)]('h/',eM[hx(1657)][hx(1640)])+'/':'';continue;case'12':D=new eM[(hx(1455))]();continue}break}}catch(E){}},eM[gH(389)]=function(d,e,f,g,h,hy,i,j,k,l,m){(hy=gH,i={},i[hy(1525)]=function(n,o){return n<o},i[hy(604)]=function(n,o){return n\|o},i[hy(
2024-07-15 15:49:41 UTC	1369	IN	Data Raw: 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 28 67 29 7d 2c 27 65 48 5a 6d 43 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 67 5e 66 7d 2c 27 79 66 48 50 51 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 5e 67 7d 2c 27 46 6f 6c 51 78 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 67 5e 66 7d 2c 27 61 6b 55 66 44 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 67 5e 66 7d 2c 27 4a 42 54 78 68 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3d 3d 3d 67 7d 2c 27 57 73 6f 6a 6d 27 3a 69 77 28 31 32 34 33 29 2c 27 50 6e 50 57 58 27 3a 69 77 28 37 34 30 29 2c 27 74 6a 65 6a 69 27 3a 69 77 28 31 30 32 35 29 7d 2c 65 3d 63 5b 69 77 28 31 30 39 39 29 5d Data Ascii: (f,g){return f(g)},'eHZmC':function(f,g){return g^f},'yfHPQ':function(f,g){return f^g},'FolQx':function(f,g){return g^f},'akUfD':function(f,g){return g^f},'JBTxh':function(f,g){return f===g},'Wsojm':iw(1243),'PnPWX':iw(740),'tjeji':iw(1025)},e=c[iw(1099)]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	65049	104.17.3.184	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:41 UTC	925	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/933894468:1721056355:RyplnyimmfYhJciDA6jrSPoRvYRXtp1ZR4mVrzF0eEo/8a3ae756188b0f7f/4b6ddc26d277b97 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 2979 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 4b6ddc26d277b97 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/7nmk9/0x4AAAAAAAeyiL9ArCePgoa_/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:41 UTC	2979	OUT	Data Raw: 76 5f 38 61 33 61 65 37 35 36 31 38 38 62 30 66 37 66 3d 52 37 68 58 33 58 36 58 68 58 57 58 31 71 46 4f 71 46 6e 58 71 69 4b 4a 57 41 71 48 46 57 46 66 77 69 78 36 35 46 54 24 46 71 35 4b 24 59 56 48 46 6d 35 4b 4a 30 35 59 49 25 32 62 58 78 33 6f 39 2b 46 78 24 46 44 58 57 36 6f 32 6d 58 48 4a 67 46 35 35 72 37 46 30 5a 6d 2d 68 46 4b 59 35 71 38 54 46 50 4a 59 6e 46 57 4d 33 6d 78 46 58 46 62 46 76 6b 66 61 68 2b 46 4e 58 59 41 6f 78 62 67 73 6c 32 52 43 42 35 59 61 6a 73 58 48 78 4b 6f 59 2b 49 46 2b 69 38 4a 4a 78 69 46 59 69 66 78 52 2b 35 46 52 4a 46 31 47 77 68 52 42 4e 61 6a 64 61 62 52 30 47 58 47 6a 4c 36 6c 2b 35 46 66 47 64 64 62 44 68 46 32 64 2b 69 6a 36 68 46 61 53 35 46 51 58 59 54 5a 46 71 36 46 57 4a 5a 46 59 64 35 2d 53 6d 69 44 2b 62 Data Ascii: v_8a3ae756188b0f7f=R7hX3X6XhXWX1qFOqFnXqiKJWAqHFWFfwix65FT$Fq5K$YVHFm5KJ05YI%2bXx3o9+Fx$FDXW6o2mXHJgF55r7F0Zm-hFKY5q8TFPJYnFWM3mxFXFbFvkfah+FNXYAoxbgsl2RCB5YajsXHxKoY+IF+i8JJxiFYifxR+5FRJF1GwhRBNajdabR0GXGjL6l+5FfGddbDhF2d+ij6hFaS5FQXYTZFq6FWJZFYd5-SmiD+b
2024-07-15 15:49:41 UTC	747	IN	HTTP/1.1 200 OK Date: Mon, 15 Jul 2024 15:49:41 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 136240 Connection: close cf-chl-gen: GfyjXqSL8fVkzZ/6nJj3+qCJI2gYPPhUK9JeXC23VomHNLW0halBQjJer4/RLdTVpAwyNaDoEDzOQ7coVzvYMNl75GBXr9e3pHdXV8ytTmd9CQsXsoTTiHiU2OHN0vRdPv+E61HuDvjL8wL9RbNgMfTwoXH13le5in8JJz6fy+JmMAVxhY4Uc7FFJzJDchpmXitvB7jjmUNy9RCO20vGkM0PYsHMdwGPdpaXxAwJ+bAy8DYhA5fi/ut21uQB86cTRIIEIPi7J8ozYaRZsu9cMeUvXwn+mxWcNs/s377NBaj9U2FpyaxC6Ogzuc4UQnniyCz4IDzXQjzS6KRk0MPsrmx2M07x4EE68L+L0U3V3KruX/0PioDg1vrs4t6BdGYy9mxxMBXbSDC6/nSSp0I5NkfxTMsdtm/PZok0zYPsIDBsF5GyLxesirU0SskZxXrU12LFMZqHrZxtWjPOqmQjMyVwtYN9pnMvVN02cx3AJk+HUv8g$McBn6fvfGSLbGwZV Server: cloudflare CF-RAY: 8a3ae765db460f83-EWR alt-svc: h3=":443"; ma=86400
2024-07-15 15:49:41 UTC	622	IN	Data Raw: 6c 6e 47 47 76 4b 65 63 6d 5a 69 66 6f 4d 4b 30 74 48 36 6e 68 73 71 4b 6f 37 76 48 76 36 71 75 6d 38 32 78 6a 37 65 7a 77 36 2b 33 70 35 54 51 71 37 65 2f 72 73 32 61 33 38 43 2b 6e 72 47 38 33 72 54 49 74 65 33 4f 32 75 37 4b 72 4c 7a 71 79 2b 2f 51 31 73 4c 31 32 73 76 65 7a 64 48 57 34 38 2b 38 39 2b 50 41 30 65 54 58 34 39 76 61 2b 67 4c 6c 33 4f 72 64 41 66 58 6a 42 52 72 6d 43 75 62 55 39 76 73 52 32 50 72 38 37 79 50 6c 41 67 62 78 48 50 63 5a 4b 76 6f 62 2f 50 30 48 44 69 67 43 43 78 49 46 44 52 66 77 4a 68 72 33 45 68 30 53 46 42 2f 37 45 6a 67 58 4a 77 51 32 47 69 30 57 4e 30 52 46 50 44 35 43 49 7a 41 66 57 42 45 75 45 78 68 46 50 68 56 41 55 31 78 4f 51 30 49 75 54 7a 73 67 56 45 70 48 58 45 34 39 57 47 4e 47 5a 45 4e 67 4e 54 41 70 54 32 74 Data Ascii: lnGGvKecmZifoMK0tH6nhsqKo7vHv6qum82xj7ezw6+3p5TQq7e/rs2a38C+nrG83rTIte3O2u7KrLzqy+/Q1sL12svezdHW48+89+PA0eTX49va+gLl3OrdAfXjBRrmCubU9vsR2Pr87yPlAgbxHPcZKvob/P0HDigCCxIFDRfwJhr3Eh0SFB/7EjgXJwQ2Gi0WN0RFPD5CIzAfWBEuExhFPhVAU1xOQ0IuTzsgVEpHXE49WGNGZENgNTApT2t
2024-07-15 15:49:41 UTC	1369	IN	Data Raw: 68 73 54 6c 46 4a 58 6d 47 42 56 49 4a 68 59 6e 6d 5a 6d 33 31 7a 65 48 70 74 59 70 4e 34 67 56 36 44 68 4b 6c 71 6e 58 6d 61 67 32 74 6d 6b 4b 39 7a 62 71 42 79 6e 34 4f 6f 70 33 53 49 69 62 75 76 63 6f 47 4e 6a 35 4b 64 72 70 57 54 73 71 57 4b 6c 73 44 43 70 70 6d 6d 69 6f 58 42 72 71 6d 6f 71 4d 66 59 74 73 2f 62 74 63 75 78 73 62 71 38 6c 72 36 69 72 39 50 54 32 38 7a 70 77 2b 4f 68 76 2b 4b 79 38 62 7a 47 78 2b 48 50 77 62 66 73 32 4d 32 34 74 66 76 42 2b 4d 36 38 32 2f 6a 79 31 77 4c 4b 42 50 66 73 42 74 7a 43 2f 4f 55 47 46 67 44 57 39 50 6b 4e 39 74 51 46 2f 42 73 4e 48 67 4c 61 2f 67 34 52 4a 52 6e 6d 43 50 77 64 36 67 7a 38 49 65 34 51 2f 43 58 79 45 2b 67 70 39 68 67 6a 4c 66 6f 63 48 54 48 2b 49 42 30 31 41 79 51 64 4f 51 63 6d 50 7a 30 4c 4b Data Ascii: hsTlFJXmGBVIJhYnmZm31zeHptYpN4gV6DhKlqnXmag2tmkK9zbqByn4Oop3SIibuvcoGNj5KdrpWTsqWKlsDCppmmioXBrqmoqMfYts/btcuxsbq8lr6ir9PT28zpw+Ohv+Ky8bzGx+HPwbfs2M24tfvB+M682/jy1wLKBPfsBtzC/OUGFgDW9PkN9tQF/BsNHgLa/g4RJRnmCPwd6gz8Ie4Q/CXyE+gp9hgjLfocHTH+IB01AyQdOQcmPz0LK
2024-07-15 15:49:41 UTC	1369	IN	Data Raw: 64 61 49 71 47 68 4a 43 51 57 57 31 36 65 6e 78 54 58 34 35 65 65 6c 35 76 5a 57 52 6f 71 57 78 6a 6c 71 56 39 6b 6e 42 6c 66 5a 32 43 70 49 6d 61 68 49 52 79 74 48 75 7a 69 4b 6d 59 72 35 43 54 78 4c 53 43 75 36 4b 4a 78 72 6d 48 70 4b 43 71 6b 63 66 46 68 39 54 45 6b 5a 43 74 71 64 4b 56 76 72 76 61 32 37 7a 6b 6d 36 50 57 70 75 65 38 70 36 4c 6d 72 4e 6a 5a 70 74 37 74 33 72 4c 49 34 37 44 47 77 38 65 31 32 39 79 32 33 4e 72 65 34 72 37 73 31 41 62 46 2b 64 66 59 39 4e 51 45 37 74 2f 49 43 41 4c 72 37 65 48 32 46 2f 41 50 36 39 6b 58 38 39 66 7a 37 51 2f 39 38 42 44 63 41 79 55 42 47 77 67 48 49 78 30 4f 36 54 41 52 43 41 6b 56 42 41 41 4e 47 53 34 55 4c 52 67 77 4b 69 38 69 44 69 34 64 4e 66 30 55 48 53 51 2b 4a 42 73 6f 51 69 51 6e 4d 68 34 2b 4b 54 Data Ascii: daIqGhJCQWW16enxTX45eel5vZWRoqWxjlqV9knBlfZ2CpImahIRytHuziKmYr5CTxLSCu6KJxrmHpKCqkcfFh9TEkZCtqdKVvrva27zkm6PWpue8p6LmrNjZpt7t3rLI47DGw8e129y23Nre4r7s1AbF+dfY9NQE7t/ICALr7eH2F/AP69kX89fz7Q/98BDcAyUBGwgHIx0O6TARCAkVBAANGS4ULRgwKi8iDi4dNf0UHSQ+JBsoQiQnMh4+KT
2024-07-15 15:49:41 UTC	1369	IN	Data Raw: 68 46 74 63 67 48 39 59 6e 34 75 51 68 58 56 32 6d 61 61 43 59 70 65 70 6e 6d 69 62 6a 4c 47 6c 6b 4b 69 48 70 5a 6d 74 6c 49 79 78 64 4b 35 38 69 70 53 52 76 35 4b 59 67 62 6d 56 6d 5a 79 6a 6d 62 61 76 78 61 58 4e 78 6f 72 4f 76 74 43 6f 70 35 6a 4b 6d 4b 61 77 75 64 75 75 74 4a 33 55 73 62 57 34 76 37 58 53 79 2b 48 42 36 64 36 74 71 63 61 73 35 62 37 4f 72 4d 66 30 35 2b 72 38 75 75 7a 75 73 64 48 77 33 4d 33 32 7a 75 54 41 38 4e 54 7a 78 41 73 4a 7a 50 6a 49 35 68 54 2b 33 75 37 4d 35 78 55 49 43 39 54 61 44 51 2f 52 38 66 72 38 37 52 66 75 42 65 41 52 39 42 51 71 4c 41 50 39 43 65 6f 74 2f 69 48 75 4d 67 59 5a 39 42 41 4f 46 77 63 58 38 44 51 68 2f 53 77 57 45 78 38 58 4e 42 67 7a 52 77 77 4c 48 77 34 74 45 55 77 78 49 6a 55 30 4d 45 67 79 45 52 63 Data Ascii: hFtcgH9Yn4uQhXV2maaCYpepnmibjLGlkKiHpZmtlIyxdK58ipSRv5KYgbmVmZyjmbavxaXNxorOvtCop5jKmKawuduutJ3UsbW4v7XSy+HB6d6tqcas5b7OrMf05+r8uuzusdHw3M32zuTA8NTzxAsJzPjI5hT+3u7M5xUIC9TaDQ/R8fr87RfuBeAR9BQqLAP9Ceot/iHuMgYZ9BAOFwcX8DQh/SwWEx8XNBgzRwwLHw4tEUwxIjU0MEgyERc
2024-07-15 15:49:41 UTC	1369	IN	Data Raw: 70 2b 57 65 70 31 32 67 59 4a 35 59 34 46 38 72 6d 32 59 70 36 61 46 6b 58 46 74 67 33 46 7a 64 34 64 79 6c 37 53 64 6b 71 46 39 65 35 32 54 6b 73 50 44 79 4b 72 42 76 62 36 6c 75 4b 53 66 69 61 65 66 6f 36 6a 44 6a 73 2b 36 7a 4e 58 4d 73 35 33 61 74 35 76 51 73 64 4c 42 74 4e 66 44 31 63 65 2f 75 65 33 69 7a 75 50 44 77 72 4f 6e 31 4c 44 4d 38 4d 61 79 36 2b 62 6f 31 63 43 33 36 2f 6e 4f 74 39 48 2b 38 74 72 63 41 67 34 48 34 63 6b 43 32 38 33 70 34 65 4c 31 2b 41 67 49 44 78 6a 70 37 42 73 66 33 67 4c 63 41 51 62 79 2f 69 6b 52 47 51 72 6d 4b 50 37 67 37 79 51 50 43 43 2f 77 41 41 34 7a 47 66 59 53 4e 78 63 6d 46 6a 73 62 44 54 34 68 4e 45 59 65 51 79 49 45 41 52 34 2f 42 77 59 69 51 53 74 4b 53 55 30 65 4e 54 4d 51 44 42 68 48 46 7a 4d 58 4b 42 34 64 Data Ascii: p+Wep12gYJ5Y4F8rm2Yp6aFkXFtg3Fzd4dyl7SdkqF9e52TksPDyKrBvb6luKSfiaefo6jDjs+6zNXMs53at5vQsdLBtNfD1ce/ue3izuPDwrOn1LDM8May6+bo1cC36/nOt9H+8trcAg4H4ckC283p4eL1+AgIDxjp7Bsf3gLcAQby/ikRGQrmKP7g7yQPCC/wAA4zGfYSNxcmFjsbDT4hNEYeQyIEAR4/BwYiQStKSU0eNTMQDBhHFzMXKB4d
2024-07-15 15:49:41 UTC	1369	IN	Data Raw: 65 55 65 33 36 49 6c 70 70 69 72 58 39 77 6b 35 57 58 75 48 53 78 72 48 71 75 6d 4b 71 71 6d 5a 58 44 73 4a 4f 36 77 59 58 43 74 59 4f 67 6d 62 71 70 75 70 6d 68 30 63 44 4a 30 71 43 6c 71 4a 6e 43 75 62 71 70 73 38 69 32 34 73 4c 61 77 4d 44 55 32 64 37 65 75 61 4f 6b 35 38 57 6f 77 73 4c 64 73 4f 76 57 33 75 6e 54 73 2f 4c 4b 35 4f 65 77 74 39 58 67 41 64 4c 4f 33 2f 6a 41 78 4f 48 45 2b 76 67 42 78 39 72 62 33 2b 51 41 79 67 6a 2b 47 52 66 4c 38 76 77 4d 44 41 77 52 43 2f 48 31 39 65 37 77 39 67 66 68 39 76 33 6d 4b 66 34 42 36 4f 4c 36 41 7a 55 56 42 53 34 45 4d 52 45 4d 47 43 6f 4d 39 7a 34 4a 4f 69 45 75 4a 43 35 47 51 54 70 48 53 51 73 63 4c 41 78 4a 51 6b 34 53 45 79 51 31 46 30 45 74 54 6c 6b 31 4b 43 73 52 54 42 4d 79 51 31 59 64 58 47 45 68 52 Data Ascii: eUe36IlppirX9wk5WXuHSxrHqumKqqmZXDsJO6wYXCtYOgmbqpupmh0cDJ0qClqJnCubqps8i24sLawMDU2d7euaOk58WowsLdsOvW3unTs/LK5Oewt9XgAdLO3/jAxOHE+vgBx9rb3+QAygj+GRfL8vwMDAwRC/H19e7w9gfh9v3mKf4B6OL6AzUVBS4EMREMGCoM9z4JOiEuJC5GQTpHSQscLAxJQk4SEyQ1F0EtTlk1KCsRTBMyQ1YdXGEhR
2024-07-15 15:49:41 UTC	1369	IN	Data Raw: 34 5a 34 31 38 74 61 69 71 67 62 6d 4f 6d 35 71 54 74 71 79 72 76 6e 69 39 77 5a 65 76 78 35 75 44 75 49 5a 39 6c 62 32 6c 72 63 43 65 73 70 43 31 73 71 2b 6d 77 73 7a 52 71 71 36 31 6c 4a 65 31 77 4f 43 79 72 72 2f 59 6f 2b 6e 71 70 4e 72 59 34 4b 65 37 75 37 2f 45 33 36 72 72 31 73 69 77 37 2b 69 31 32 75 2f 61 75 4e 6e 50 77 66 58 36 2b 74 48 42 77 41 4c 30 31 75 6a 68 34 4f 50 71 35 4f 54 30 38 75 4c 70 31 42 58 71 37 4e 58 4f 35 75 37 61 44 65 72 79 33 42 48 75 39 69 6b 4a 2b 43 4c 33 4a 51 55 41 44 42 34 41 36 7a 4c 38 4c 68 51 53 42 68 6f 57 42 7a 59 78 50 53 6f 67 4b 76 34 39 4e 6b 49 47 42 78 67 70 2f 45 55 2b 53 78 77 2f 49 56 45 4d 4c 45 41 31 54 6b 4e 49 49 6c 6f 78 55 6c 73 64 48 6c 73 34 48 46 45 79 55 30 49 31 57 45 52 57 53 45 41 36 62 6d Data Ascii: 4Z418taiqgbmOm5qTtqyrvni9wZevx5uDuIZ9lb2lrcCespC1sq+mwszRqq61lJe1wOCyrr/Yo+nqpNrY4Ke7u7/E36rr1siw7+i12u/auNnPwfX6+tHBwAL01ujh4OPq5OT08uLp1BXq7NXO5u7aDery3BHu9ikJ+CL3JQUADB4A6zL8LhQSBhoWBzYxPSogKv49NkIGBxgp/EU+Sxw/IVEMLEA1TkNIIloxUlsdHls4HFEyU0I1WERWSEA6bm
2024-07-15 15:49:41 UTC	1369	IN	Data Raw: 72 36 53 34 6d 72 47 6e 74 61 79 6f 6b 59 70 35 74 35 44 45 73 37 43 63 76 35 61 66 76 37 72 48 75 6f 61 72 78 64 4c 47 76 37 2b 74 30 74 62 51 73 4e 66 61 6c 36 36 71 30 64 53 65 6f 5a 76 66 78 4c 44 6e 77 2b 6a 66 32 74 36 6d 71 4d 2f 4c 7a 38 69 75 37 4e 53 71 7a 4e 54 6f 2b 64 37 50 32 75 6e 74 7a 76 54 43 34 39 44 34 78 75 61 38 2f 4d 72 72 39 67 48 4f 37 2f 41 46 30 76 50 77 43 64 62 33 38 41 33 61 2b 52 4d 52 33 76 30 52 34 51 49 47 45 52 6e 6d 42 68 62 68 4c 53 55 45 4b 2f 6f 70 2f 76 41 6b 48 79 51 77 39 79 6b 6c 4c 76 6f 71 44 42 33 79 46 69 41 41 46 7a 67 54 51 78 78 41 53 6a 78 42 42 45 38 65 49 69 63 37 4d 53 6c 48 4b 31 63 76 4a 52 4d 71 4d 79 6f 37 56 6d 42 62 51 6a 42 6c 4c 31 31 56 51 6d 4e 55 4f 69 6c 48 5a 55 4e 67 59 47 68 53 5a 57 64 Data Ascii: r6S4mrGntayokYp5t5DEs7Ccv5afv7rHuoarxdLGv7+t0tbQsNfal66q0dSeoZvfxLDnw+jf2t6mqM/Lz8iu7NSqzNTo+d7P2untzvTC49D4xua8/Mrr9gHO7/AF0vPwCdb38A3a+RMR3v0R4QIGERnmBhbhLSUEK/op/vAkHyQw9yklLvoqDB3yFiAAFzgTQxxASjxBBE8eIic7MSlHK1cvJRMqMyo7VmBbQjBlL11VQmNUOilHZUNgYGhSZWd
2024-07-15 15:49:41 UTC	1369	IN	Data Raw: 48 71 75 6e 62 4e 36 73 35 36 42 76 62 61 69 70 70 2b 2b 6f 59 69 2b 76 38 61 78 6a 38 44 4c 76 61 7a 47 7a 74 43 4d 75 37 6d 71 73 37 7a 50 6e 64 61 32 76 70 36 30 75 73 6d 33 75 38 4c 48 34 62 76 4e 79 38 2f 44 78 75 6a 70 77 38 6a 55 73 74 61 31 37 4d 2f 51 37 76 48 34 74 50 62 36 77 74 54 33 2f 63 58 35 35 2b 6a 46 37 4e 34 46 38 51 37 6f 42 63 37 76 43 50 50 51 31 67 76 35 45 4e 59 51 2b 74 30 61 45 2f 34 44 2b 78 76 39 35 42 73 63 49 77 37 72 48 53 67 61 43 53 4d 72 4c 65 67 59 46 67 63 51 47 53 7a 35 4d 6a 49 68 4e 41 4d 61 4a 53 4d 6f 48 53 6b 38 52 7a 51 74 4b 6b 49 72 4d 69 30 2f 4a 45 74 4f 4a 53 35 4f 46 7a 6c 4e 55 30 59 78 54 56 55 76 50 44 39 43 52 6c 4a 52 57 30 67 30 58 47 4e 4c 59 6b 70 4d 55 45 52 51 55 53 39 4a 59 47 39 77 4f 46 78 77 Data Ascii: HqunbN6s56Bvbaipp++oYi+v8axj8DLvazGztCMu7mqs7zPnda2vp60usm3u8LH4bvNy8/Dxujpw8jUsta17M/Q7vH4tPb6wtT3/cX55+jF7N4F8Q7oBc7vCPPQ1gv5ENYQ+t0aE/4D+xv95BscIw7rHSgaCSMrLegYFgcQGSz5MjIhNAMaJSMoHSk8RzQtKkIrMi0/JEtOJS5OFzlNU0YxTVUvPD9CRlJRW0g0XGNLYkpMUERQUS9JYG9wOFxw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	65050	35.190.80.1	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:41 UTC	539	OUT	OPTIONS /report/v4?s=spzax1iHPdcfAS7FVjWZQ9JQD1uEdhao4k4VpugfJpto8p3AsgDBzrKMH0TMZ%2FbQMZ7wHP2yS3o2bqLn7bzuhjAIJW%2Fahk7Zinf%2FLsUFR7R99AoaNQYPxfIWCYD3pFlz%2FQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://simerra.msk.su Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:41 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Mon, 15 Jul 2024 15:49:40 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	65051	35.190.80.1	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:42 UTC	482	OUT	POST /report/v4?s=spzax1iHPdcfAS7FVjWZQ9JQD1uEdhao4k4VpugfJpto8p3AsgDBzrKMH0TMZ%2FbQMZ7wHP2yS3o2bqLn7bzuhjAIJW%2Fahk7Zinf%2FLsUFR7R99AoaNQYPxfIWCYD3pFlz%2FQ%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 424 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:42 UTC	424	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 32 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 33 33 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 73 69 6d 65 72 72 61 2e 6d 73 6b 2e 73 75 2f 50 63 59 64 69 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 36 35 2e 32 31 32 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 Data Ascii: [{"age":2,"body":{"elapsed_time":338,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://simerra.msk.su/PcYdi/","sampling_fraction":1.0,"server_ip":"104.21.65.212","status_code":404,"type":"http.error"},"type":"network-error","u
2024-07-15 15:49:42 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Mon, 15 Jul 2024 15:49:42 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	65053	104.17.3.184	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:42 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/933894468:1721056355:RyplnyimmfYhJciDA6jrSPoRvYRXtp1ZR4mVrzF0eEo/8a3ae756188b0f7f/4b6ddc26d277b97 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:43 UTC	379	IN	HTTP/1.1 404 Not Found Date: Mon, 15 Jul 2024 15:49:43 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: uW0x9agti4R8qMhIsioIRwNwfjdIwyXkN38=$LdisXUhW6iUBtPrq Server: cloudflare CF-RAY: 8a3ae7702c050cc0-EWR alt-svc: h3=":443"; ma=86400
2024-07-15 15:49:43 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	65054	104.17.3.184	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:43 UTC	814	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/8a3ae756188b0f7f/1721058581433/eab042d8a5e407693166612b8b14052de3aab681f5db0884a15320e2f395ae35/RY8MEL7DQXumrz_ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/7nmk9/0x4AAAAAAAeyiL9ArCePgoa_/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:43 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Mon, 15 Jul 2024 15:49:43 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-07-15 15:49:43 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 36 72 42 43 32 4b 58 6b 42 32 6b 78 5a 6d 45 72 69 78 51 46 4c 65 4f 71 74 6f 48 31 32 77 69 45 6f 56 4d 67 34 76 4f 56 72 6a 55 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20g6rBC2KXkB2kxZmErixQFLeOqtoH12wiEoVMg4vOVrjUAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-07-15 15:49:43 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	65056	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:44 UTC	716	OUT	GET /?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 HTTP/1.1 Host: www.umso.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:44 UTC	308	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=0, must-revalidate Content-Length: 118961 Content-Type: text/html;charset=utf-8 Referrer-Policy: no-referrer-when-downgrade Strict-Transport-Security: max-age=15552000 X-Frame-Options: sameorigin Date: Mon, 15 Jul 2024 15:49:44 GMT Connection: close
2024-07-15 15:49:44 UTC	878	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 6d 73 6f 2e 63 6f 6d 2f 6c 69 62 5f 4c 55 47 6f 50 69 71 58 58 6c 44 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><link rel="icon" href="https://www.umso.com/lib_LUGoPiqXXlD
2024-07-15 15:49:44 UTC	2372	IN	Data Raw: 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 3a 77 69 64 74 68 22 20 63 6f 6e 74 65 6e 74 3d 22 31 32 30 30 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 3a 68 65 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 36 33 30 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 6d 73 6f 2e 63 6f 6d 2f 6c 69 62 5f 4c 55 47 6f 50 69 71 58 58 6c 44 70 74 53 57 41 2f 36 39 6b 33 32 69 75 61 31 6a 78 72 32 75 79 6a 2e 70 6e 67 3f 77 3d 31 32 30 30 26 61 6d 70 3b 68 3d 36 33 30 26 61 6d 70 3b 66 69 74 3d 63 72 6f 70 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 Data Ascii: ><meta property="og:image:width" content="1200"><meta property="og:image:height" content="630"><meta name="twitter:image" content="https://www.umso.com/lib_LUGoPiqXXlDptSWA/69k32iua1jxr2uyj.png?w=1200&h=630&fit=crop"><link rel="canonical" href="ht
2024-07-15 15:49:44 UTC	538	IN	Data Raw: 74 6f 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 20 33 30 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 77 72 2d 6d 61 78 29 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 7d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 30 30 70 78 29 20 7b 0a 20 20 2e 77 72 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 35 70 78 3b 0a 20 20 7d 0a 7d 0a 2e 75 6d 2d 62 61 63 6b 64 72 6f 70 20 7b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 2d 31 3b Data Ascii: to; padding: 0 30px; position: relative; max-width: var(--wr-max); box-sizing: border-box;}@media only screen and (max-width: 700px) { .wr { padding: 0 15px; }}.um-backdrop { top: 0; left: 0; right: 0; bottom: 0; z-index: -1;
2024-07-15 15:49:44 UTC	4744	IN	Data Raw: 6f 72 74 61 6e 74 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 20 39 70 78 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 30 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 6b 65 79 66 72 61 6d 65 73 2d 62 61 64 67 65 46 61 64 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 33 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 33 29 2c 20 30 20 36 70 78 20 31 33 70 78 20 72 67 62 Data Ascii: ortant; height: 30px; display: flex !important; padding: 0 9px; z-index: 100; position: fixed !important; animation: keyframes-badgeFade; font-size: 13px; background: #fff !important; box-shadow: 0 1px 3px rgba(0,0,0,0.3), 0 6px 13px rgb
2024-07-15 15:49:44 UTC	5930	IN	Data Raw: 34 65 6d 3b 0a 7d 0a 2e 62 74 6e 2e 62 74 6e 2d 2d 69 63 6f 6e 20 73 76 67 2c 20 2e 62 74 6e 2e 62 74 6e 2d 2d 69 63 6f 6e 20 69 6d 67 20 7b 0a 20 20 77 69 64 74 68 3a 20 69 6e 69 74 69 61 6c 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 2e 32 65 6d 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 2d 30 2e 31 65 6d 3b 0a 7d 0a 2e 62 74 6e 3a 68 6f 76 65 72 2c 20 2e 62 74 6e 3a 68 6f 76 65 72 20 73 70 61 6e 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 62 74 6e 2e 70 72 69 6d 61 72 79 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 20 72 67 62 28 39 34 2c 20 33 34 2c 20 31 39 Data Ascii: 4em;}.btn.btn--icon svg, .btn.btn--icon img { width: initial; height: 1.2em; margin: -0.1em;}.btn:hover, .btn:hover span { text-decoration: none;}.btn.primary { color: rgb(255, 255, 255); background: linear-gradient(90deg, rgb(94, 34, 19
2024-07-15 15:49:44 UTC	7116	IN	Data Raw: 20 7b 0a 20 20 74 6f 70 3a 20 63 61 6c 63 28 35 30 25 20 2d 20 32 70 78 29 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 31 33 35 64 65 67 29 3b 0a 7d 0a 2e 75 6d 2d 6e 61 76 2d 64 72 61 77 65 72 20 2e 75 6d 2d 64 72 61 77 65 72 2d 6c 69 6e 6b 73 20 3e 20 6c 69 20 3e 20 62 75 74 74 6f 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 74 6f 70 3a 20 63 61 6c 63 28 35 30 25 20 2d 20 36 70 78 29 3b 0a 20 20 72 69 67 68 74 3a 20 32 30 70 78 3b 0a 20 20 77 69 64 74 68 3a 20 37 70 78 3b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 74 65 78 74 2d 73 65 63 6f 6e 64 61 72 79 29 3b 0a 20 20 68 65 69 67 68 74 3a 20 37 70 78 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0a 20 20 6f 70 61 63 69 74 79 3a Data Ascii: { top: calc(50% - 2px); transform: rotate(135deg);}.um-nav-drawer .um-drawer-links > li > button:before { top: calc(50% - 6px); right: 20px; width: 7px; border: 2px solid var(--color-text-secondary); height: 7px; content: ""; opacity:
2024-07-15 15:49:44 UTC	8302	IN	Data Raw: 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 7d 0a 7d 0a 3c 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 20 64 61 74 61 2d 76 65 72 73 69 6f 6e 3d 22 32 22 20 64 61 74 61 2d 63 6f 6e 74 65 6e 74 3d 22 73 65 63 74 69 6f 6e 73 22 3e 2e 5f 35 38 63 65 38 33 64 38 20 7b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 31 36 33 2c 20 31 36 33 2c 20 31 36 33 29 3b 0a 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 68 65 69 67 68 74 3a 20 37 30 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 3b 0a 20 20 2d 2d 77 72 2d 6d 61 78 3a 20 31 31 38 32 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 61 6c 69 67 Data Ascii: ex-direction: column; }}</style><style data-version="2" data-content="sections">._58ce83d8 { top: 0; left: 0; color: rgb(163, 163, 163); right: 0; height: 70px; display: flex; z-index: 99; --wr-max: 1182px; position: absolute; alig
2024-07-15 15:49:44 UTC	9488	IN	Data Raw: 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 2e 36 65 6d 3b 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 35 65 6d 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 61 63 63 65 6e 74 2d 70 72 69 6d 61 72 79 3a 20 72 67 62 28 33 31 2c 20 32 31 39 2c 20 31 39 31 29 3b 0a 7d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 35 30 30 70 78 29 20 7b 0a 20 20 2e 5f 38 63 32 33 39 35 33 61 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 35 30 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 37 Data Ascii: font-size: 15px; padding-top: 1.6em; padding-bottom: 5em; --color-accent-primary: rgb(31, 219, 191);}@media only screen and (max-width: 500px) { ._8c23953a { display: none; }}@media only screen and (min-width: 500px) and (max-width: 77
2024-07-15 15:49:44 UTC	10674	IN	Data Raw: 20 2d 2d 66 6f 6e 74 53 69 7a 65 2d 74 69 74 6c 65 3a 20 34 30 70 78 3b 0a 20 20 2d 2d 63 61 72 64 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 3a 20 72 67 62 28 36 34 2c 20 32 34 2c 20 31 32 38 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 74 65 78 74 2d 70 72 69 6d 61 72 79 3a 20 72 67 62 28 31 31 34 2c 20 39 34 2c 20 32 35 35 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 74 65 78 74 2d 73 65 63 6f 6e 64 61 72 79 3a 20 72 67 62 28 31 31 34 2c 20 39 34 2c 20 32 35 35 29 3b 0a 20 20 2d 2d 66 6f 6e 74 53 69 7a 65 2d 74 69 74 6c 65 2d 73 65 63 74 69 6f 6e 3a 20 34 30 70 78 3b 0a 7d 0a 2e 5f 32 30 32 35 32 37 63 64 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 61 72 64 2d 74 65 78 74 43 6f 6c 6f 72 53 65 63 6f 6e 64 61 72 79 29 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 Data Ascii: --fontSize-title: 40px; --card-borderColor: rgb(64, 24, 128); --color-text-primary: rgb(114, 94, 255); --color-text-secondary: rgb(114, 94, 255); --fontSize-title-section: 40px;}._202527cd { color: var(--card-textColorSecondary); display: f
2024-07-15 15:49:44 UTC	11860	IN	Data Raw: 74 70 73 3a 2f 2f 61 70 70 2e 75 6d 73 6f 2e 63 6f 6d 2f 73 69 67 6e 75 70 22 20 69 64 3d 22 64 5f 68 30 34 72 71 7a 36 30 68 66 74 22 20 63 6c 61 73 73 3d 22 5f 38 39 35 31 37 35 36 33 20 62 74 6e 22 3e 3c 73 70 61 6e 3e 53 69 67 6e 20 55 70 3c 2f 73 70 61 6e 3e 3c 73 76 67 20 77 69 64 74 68 3d 22 31 65 6d 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 20 31 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 63 6c 61 73 73 3d 22 75 6d 2d 61 72 72 6f 77 22 3e 3c 70 61 74 68 20 64 3d 22 4d 39 2e 36 20 37 48 31 61 31 20 31 20 30 20 31 20 31 20 30 2d 32 68 38 2e 36 4c 37 20 32 2e 34 41 31 20 31 20 30 20 30 20 31 20 38 2e 34 20 31 6c 34 2e 33 20 34 2e 32 63 2e 32 2e 33 2e 33 2e 35 2e 33 2e 38 Data Ascii: tps://app.umso.com/signup" id="d_h04rqz60hft" class="_89517563 btn"><span>Sign Up</span><svg width="1em" viewBox="0 0 15 12" xmlns="http://www.w3.org/2000/svg" class="um-arrow"><path d="M9.6 7H1a1 1 0 1 1 0-2h8.6L7 2.4A1 1 0 0 1 8.4 1l4.3 4.2c.2.3.3.5.3.8

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.6	65055	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:44 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 72 6a 69 77 53 65 30 59 55 55 65 66 55 50 78 77 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 32 35 61 66 32 30 65 34 31 39 64 64 38 63 65 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: rjiwSe0YUUefUPxw.1Context: 325af20e419dd8ce
2024-07-15 15:49:44 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-15 15:49:44 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 72 6a 69 77 53 65 30 59 55 55 65 66 55 50 78 77 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 32 35 61 66 32 30 65 34 31 39 64 64 38 63 65 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 5a 30 4a 6c 55 68 35 69 59 44 63 44 74 58 66 52 2b 42 73 31 6b 47 69 43 4e 41 6d 33 73 6a 45 31 4d 31 63 77 38 53 6a 2b 71 75 75 45 30 74 6f 79 48 32 77 75 56 5a 72 67 78 7a 30 6f 53 67 32 76 56 74 38 62 70 38 4c 30 49 33 32 4a 35 59 76 43 7a 76 7a 2b 68 41 4a 65 39 5a 78 6a 52 6b 41 62 48 66 54 33 76 59 74 38 4b 78 53 5a 52 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: rjiwSe0YUUefUPxw.2Context: 325af20e419dd8ce<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAZ0JlUh5iYDcDtXfR+Bs1kGiCNAm3sjE1M1cw8Sj+quuE0toyH2wuVZrgxz0oSg2vVt8bp8L0I32J5YvCzvz+hAJe9ZxjRkAbHfT3vYt8KxSZR
2024-07-15 15:49:44 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 72 6a 69 77 53 65 30 59 55 55 65 66 55 50 78 77 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 32 35 61 66 32 30 65 34 31 39 64 64 38 63 65 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: rjiwSe0YUUefUPxw.3Context: 325af20e419dd8ce<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-07-15 15:49:44 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-15 15:49:44 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 52 35 70 52 32 2f 43 49 69 30 2b 45 45 34 56 66 72 6c 55 77 45 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: R5pR2/CIi0+EE4VfrlUwEA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	65057	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:44 UTC	691	OUT	GET /lib_LUGoPiqXXlDptSWA/csi5g5qmp4uscbth.png HTTP/1.1 Host: www.umso.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:44 UTC	251	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 23243 Content-Type: image/png Last-Modified: Fri, 03 May 2024 09:59:15 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:49:44 GMT Connection: close
2024-07-15 15:49:44 UTC	935	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 c2 00 00 00 bf 08 03 00 00 00 02 61 95 1d 00 00 03 00 50 4c 54 45 4c 69 71 f8 f3 ff f9 f3 ff f8 f3 ff f8 f3 ff f8 f2 ff f8 f4 ff f8 f3 ff f8 f3 ff f9 f4 ff f7 f3 ff f8 f4 ff f9 f3 ff f8 f4 ff f8 f3 ff f8 f4 ff f8 f4 ff f8 f3 ff f8 f3 ff f9 f3 ff f8 f3 ff f8 f3 ff f8 f3 ff f9 f4 ff f7 f7 ff f9 f3 ff f9 f3 ff ff fd ff f8 f3 ff f9 f4 ff f9 f4 ff f7 ef ff f6 f3 ff f7 f3 ff f8 f4 ff f8 f4 ff ff fc ff f8 f3 ff f9 f3 ff f9 f3 ff f9 f3 ff f8 f4 ff f8 f1 ff f9 f3 ff f9 f4 ff f9 f3 ff f8 f4 ff f9 f4 ff f8 f3 ff f9 f3 ff fa f4 ff f8 f2 ff f8 f3 ff f9 f5 ff f8 f4 ff f9 f3 ff f9 f3 ff f8 f4 ff f4 f3 ff f9 f3 ff f8 f3 ff ff f0 ff f9 f4 ff f1 ef ff f8 f5 ff f8 f3 ff f8 f3 ff f7 f1 ff f6 f4 ff f8 f3 ff f8 f2 ff f8 Data Ascii: PNGIHDRaPLTELiq
2024-07-15 15:49:44 UTC	2372	IN	Data Raw: 56 ed 26 b2 37 de 28 d2 30 c9 d8 d9 31 f9 54 cc b2 2a 46 ed b4 05 5b 13 38 4a cf ca b5 c8 2d bf c1 9a fd c6 3d 04 1d 9d 57 a9 30 2c bd 60 b4 b6 0b 0a b3 fb 0d b7 19 55 ca 0f 08 a3 be 58 10 0a 9b 50 e7 13 a3 a7 20 9e 3b 1f f5 dd 9d c0 47 18 bb 4d 34 f3 e4 49 f5 4a 5d 1f a1 de 5d f0 7f 53 51 f7 11 1b 70 f4 c3 06 0c d2 fa 90 22 35 a8 bc 97 16 f5 70 e2 0c d9 2d 3a 04 62 8f e7 5b d6 ba 63 8a 78 67 94 6a 53 87 fd 83 e9 bf 73 21 88 f1 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 9c ed 7d 0d 7c ce 75 f7 ff c5 c5 76 6d c4 1e 3c 0c 31 22 ad 07 6d 99 12 9a 92 b2 24 4b d3 83 d6 7d 4f fd a4 71 2b a5 d2 62 88 57 77 a3 b0 e5 61 21 4b 48 d4 e8 d5 b4 e2 25 21 d5 2b 42 51 bf 9a d1 bd 48 44 0f 1e ca 43 77 ff fa 5d fe af f7 39 e7 Data Ascii: V&7(01T*F[8J-=W0,`UXP ;GM4IJ]]SQp"5p-:b[cxgjSs!pHYs IDATx}\|uvm<1"m$K}Oq+bWwa!KH%!+BQHDCw]9
2024-07-15 15:49:44 UTC	538	IN	Data Raw: d3 77 26 a7 ef dc b9 f3 aa ab 76 5f b5 7b e8 6e 06 f1 07 07 75 2a 7e c6 55 40 ed d2 c9 ba 4e 91 f4 ef e4 ba a1 2e a7 8d 43 0f a6 5e 98 22 2e 40 0f 9a 15 56 d4 90 a0 d9 91 aa 9e 07 a3 fd 05 f9 bc 87 f2 2f c7 6b ab 3a ad 66 00 1f 3e 7c f8 f0 de 4e fe 7d be be a3 47 ef 1c 8d 34 9c 9e cc 15 f5 ee dd bb 05 c5 37 1a a2 2d 43 7a 89 5c 2c 79 d5 6c 74 a9 5b 5b 06 30 a7 62 b3 9a 52 9a 5f be b8 66 2a ac 2d 85 b4 15 b5 af fb bd 9e f3 2f f7 bf 02 60 46 ef aa 4e ab a5 7c 5e bd 74 e9 e1 c3 7b f7 ee dd 7b df 6b fe 7d ca 7b 9e 78 ee b9 e7 9e 1b 3d 7a 67 3a 61 38 99 32 31 f1 d3 1f 6c 85 dc 43 54 5b 34 64 fa 27 93 5b 7a c4 64 ca a8 40 a7 21 8a d6 cc 34 95 ce c6 9d 52 b3 bb a5 fc 87 a5 90 b6 a2 36 a5 5f 2d be c2 f0 68 ea 2f 53 f7 ec 99 ba a7 cd 1e 06 6f a7 d5 9d 80 dd d7 40 Data Ascii: w&v_{nu~U@N.C^".@V/k:f>\|N}G47-Cz\,ylt[[0bR_f-/`FN\|^t{{k}{x=zg:a821lCT[4d'[zd@!4R6_-h/So@
2024-07-15 15:49:44 UTC	4744	IN	Data Raw: f2 f6 21 01 7b 14 ad b0 a2 fa a4 57 c6 f2 c2 2f bf 18 ec 33 e0 bb 0a a3 23 26 af 5e 5b 4d f8 5d be fc be fb 08 bf 2b 01 e0 c2 95 49 5f fb d5 0c af bc ee ef eb 00 62 a0 18 20 7e 6e f4 e8 64 4a c6 57 5d 75 15 89 b6 a0 d9 da aa 97 20 00 e3 ff 28 e9 25 6b 2f cd 7c 96 36 ea 50 b9 98 66 4a f0 a3 a5 75 27 e5 35 af bc 3f c2 9c a1 dd 02 f7 58 5a 61 45 75 34 bf ac dd 90 f2 79 2a 08 e8 3d 14 6d 48 7a d5 89 11 8c 1a 7a e9 ea e5 cb 97 1f 26 00 df 75 1f a5 df 95 2b 93 be fe 3a 29 a9 fd 52 7f be 88 9f af 03 86 ff be f8 62 a0 f8 89 27 d0 14 83 98 4e 4f de 99 be 13 b9 18 9a 2d 11 50 f3 90 09 de 00 ff 61 86 5a 30 5c c6 7a b6 8c 80 ab 8c b0 c3 74 24 91 fe d3 f2 90 b6 e2 3c 07 f0 60 9e 1f 49 f3 ab 95 57 24 be c2 f4 17 f8 45 f9 7c f8 f0 de e5 7b 29 fd 32 7e 93 92 00 e0 f6 ed Data Ascii: !{W/3#&^[M]+I_b ~ndJW]u (%k/\|6PfJu'5?XZaEu4y*=mHzz&u+:)Rb'NO-PaZ0\zt$<`IW$E\|{)2~
2024-07-15 15:49:44 UTC	5930	IN	Data Raw: f9 04 e1 e4 d2 70 53 7b 96 ef 9d a7 ac eb 47 72 98 0f 55 c4 da 3d ae 4c d3 2b 7e 00 12 dc bc 6b 85 26 a4 b1 09 1a 58 1e 95 d1 5e c0 30 b9 b4 a8 4c 43 1b 6b 4f 4c 0e 44 e3 f0 1a f5 bf 49 74 f4 88 6d 27 01 60 31 be 02 79 45 d2 0d bd 39 c8 ec f3 37 df e8 bd 5f 14 cf 44 3f c7 5e 5d ce f0 c8 48 bf 00 b0 c0 f7 76 8d df 9f 5e 6c 79 93 cd e3 e8 5a 30 05 d1 6e 64 dc c8 b8 b8 19 71 94 8a c7 f5 52 15 35 ba e2 13 e8 8a 31 63 22 14 8b f4 12 14 75 43 86 b1 f2 ae 45 41 7d a5 72 cb d3 a3 62 51 6d 8d 86 f2 12 67 99 e0 0d 30 f4 20 35 c5 64 97 f7 8e 2d b8 71 fe 40 b8 1c 87 e8 d8 ca bf fa 8a 22 39 21 a9 12 18 f9 4a 68 45 57 fe 8e 95 25 d8 d8 04 2f b8 ac 5d 7e 7b 6a 7b f1 da 57 61 29 fd 8b 72 de 60 f8 72 fd ac 36 f7 cb 88 9f a9 7c fe 06 f4 15 f5 bd 94 7c c1 3d 43 7a a5 d3 2f Data Ascii: pS{GrU=L+~k&X^0LCkOLDItm'`1yE97_D?^]Hv^lyZ0ndqR51c"uCEA}rbQmg0 5d-q@"9!JhEW%/]~{j{Wa)r`r6\|\|=Cz/
2024-07-15 15:49:44 UTC	7116	IN	Data Raw: e9 d3 35 7d 65 54 cf d7 5c 72 c9 35 45 1c 5f 0d f8 78 b5 ed 50 c7 8e 6d 09 c4 fb 17 22 11 ab 54 6c 9a 32 75 6b d5 6a 59 ab 41 63 07 2d ce 96 82 da d0 4f ff 66 a0 18 5d b1 b8 5e 92 d5 16 0b 3e 90 8c d5 6d 35 34 c5 7c 5c ad dd 48 78 d7 32 b3 75 b3 97 57 e9 02 11 56 16 0e 32 84 6d 3e f5 c4 e1 55 bc 2f ec ce e0 d6 a3 1c ff c8 1f 32 3d a2 04 ec 0a 5f ac 0e 9a f3 af 59 f9 fc a0 2c fe 9e 2b 9e d4 d5 73 9f e9 d3 a9 7a fe 98 93 2f 23 f8 12 d4 cf 00 6f 51 d1 57 5f 0d 18 30 60 c0 45 2f af 59 d3 b1 63 c7 8e 6b db ae 5d db b6 ed c2 85 ad 17 72 53 dc 85 a9 2d 03 c4 d0 4f 2f 1b 44 f5 34 40 6c 58 03 34 6b f6 bd 2c 33 45 cc 8a 98 15 45 20 86 de c3 64 0d 40 76 79 c4 6c 65 cd 84 f4 92 a6 4c 88 19 33 e2 7a 55 7d 19 6d 41 b8 0a 20 6c b3 c5 da bd 1d 31 85 78 bf 03 15 13 4c 89 Data Ascii: 5}eT\r5E_xPm"Tl2ukjYAc-Of]^>m54\|\Hx2uWV2m>U/2=_Y,+sz/#oQW_0`E/Yck]rS-O/D4@lX4k,3EE d@vyleL3zU}mA l1xL
2024-07-15 15:49:44 UTC	1608	IN	Data Raw: 94 30 54 02 1f 9d 4a f2 ac dc 0c f4 c2 43 84 92 6e 87 24 dc 6e 64 5c 1c 2d 3a cc c0 a2 c3 98 da f5 e4 ce 0f 2f 4e 88 8f 97 4c 14 1d 5f 5a 6c cf af 5d df 60 70 23 3f dc 9e 50 aa 1e be f8 f8 84 e2 a2 98 2a 81 51 52 7e b8 bd 38 21 01 f6 6e 09 09 c5 f6 f0 aa f9 ac 1e c7 88 bf 58 21 dd 71 ed da 1e 6d 17 42 5f b9 5f f9 45 4a 2f 6c 92 57 0e 1a 3b 68 d0 b2 c5 8b 49 5e 99 b3 44 86 4a 48 c2 c8 c2 4d 9b 7d 84 24 4c dd f0 ac 59 34 16 de c4 56 d2 25 6a e7 1f 39 98 36 95 48 61 89 5d c3 ac 2c 9e 0a 0f 21 81 25 66 4a ac ec 88 1b 36 63 d8 b0 a8 c0 79 78 5a 61 45 ed 8d fb 4b f9 c4 af da 53 a2 4a 9a ee 74 9b 6e 92 c9 a9 ee 41 83 96 2d cb 16 71 16 57 d1 0c 61 76 92 56 fa 4a be e7 80 23 c3 60 a4 e9 40 a9 da 35 84 42 9a 97 0d 3b 64 e4 66 00 c5 48 c3 53 a6 a8 5e d8 90 76 cc 98 Data Ascii: 0TJCn$nd\-:/NL_Zl]`p#?P*QR~8!nX!qmB__EJ/lW;hI^DJHM}$LY4V%j96Ha],!%fJ6cyxZaEKSJtnA-qWavVJ#`@5B;dfHS^v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	65061	104.17.3.184	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:44 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8a3ae756188b0f7f/1721058581436/3gRK5Ud8sqOFSpR HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/7nmk9/0x4AAAAAAAeyiL9ArCePgoa_/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:45 UTC	200	IN	HTTP/1.1 200 OK Date: Mon, 15 Jul 2024 15:49:45 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8a3ae77c5ee35e68-EWR alt-svc: h3=":443"; ma=86400
2024-07-15 15:49:45 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 47 00 00 00 62 08 02 00 00 00 8d b3 59 cd 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRGbYIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	65060	76.76.21.164	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:44 UTC	644	OUT	GET /static/css/main.90e78f57.css HTTP/1.1 Host: nextgen-widget.vercel.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:45 UTC	514	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 2071897 Cache-Control: s-maxage=31536000, immutable Content-Disposition: inline; filename="main.90e78f57.css" Content-Length: 27961 Content-Type: text/css; charset=utf-8 Date: Mon, 15 Jul 2024 15:49:45 GMT Etag: "f3ec470bd3e2d9be7615479589c21b36" Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Cache: HIT X-Vercel-Id: iad1::sjdgn-1721058585037-0de2fe0d6062 Connection: close
2024-07-15 15:49:45 UTC	2372	IN	Data Raw: 62 6f 64 79 7b 2d 2d 62 72 61 6e 64 3a 23 33 33 35 30 66 66 3b 2d 2d 63 6f 6c 6f 72 3a 23 32 34 32 39 32 65 3b 2d 2d 63 6f 6c 6f 72 2d 6c 69 67 68 74 65 72 3a 23 35 66 35 66 35 66 3b 2d 2d 63 6f 6c 6f 72 2d 6c 69 67 68 74 65 73 74 3a 23 38 63 38 63 38 63 3b 2d 2d 63 6f 6c 6f 72 2d 64 61 6e 67 65 72 3a 23 65 30 33 31 33 31 3b 2d 2d 63 6f 6c 6f 72 2d 77 61 72 6e 3a 23 64 62 38 66 30 30 3b 2d 2d 63 6f 6c 6f 72 2d 67 72 65 65 6e 3a 23 32 38 61 30 32 36 3b 2d 2d 62 67 3a 23 66 66 66 3b 2d 2d 62 67 2d 30 31 3a 23 66 61 66 61 66 61 3b 2d 2d 62 67 2d 30 32 3a 23 66 35 66 35 66 35 3b 2d 2d 62 67 2d 30 33 3a 23 65 36 65 36 65 36 3b 2d 2d 62 67 2d 68 65 61 64 65 72 3a 23 66 61 66 61 66 61 3b 2d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 61 72 6b 65 72 3a 23 66 31 66 31 Data Ascii: body{--brand:#3350ff;--color:#24292e;--color-lighter:#5f5f5f;--color-lightest:#8c8c8c;--color-danger:#e03131;--color-warn:#db8f00;--color-green:#28a026;--bg:#fff;--bg-01:#fafafa;--bg-02:#f5f5f5;--bg-03:#e6e6e6;--bg-header:#fafafa;--background-darker:#f1f1
2024-07-15 15:49:45 UTC	1039	IN	Data Raw: 74 6f 6e 2d 2d 6c 61 72 67 65 5f 5f 33 4a 61 41 6a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 68 65 69 67 68 74 3a 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 31 35 70 78 7d 2e 62 75 74 74 6f 6e 5f 62 75 74 74 6f 6e 2d 2d 73 6d 61 6c 6c 5f 5f 44 50 4e 65 76 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 68 65 69 67 68 74 3a 32 38 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 36 70 78 7d 2e 62 75 74 74 6f 6e 5f 62 75 74 74 6f 6e 2d 2d 69 73 53 74 61 66 66 5f 5f 5c 2b 31 51 5c 2b 53 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 62 38 61 33 65 3b 63 6f 6c 6f 72 3a 23 65 62 66 62 65 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 Data Ascii: ton--large__3JaAj{font-size:16px;height:40px;padding:0 15px}.button_button--small__DPNev{font-size:13px;height:28px;line-height:28px;padding:0 6px}.button_button--isStaff__\+1Q\+S{background-color:#2b8a3e;color:#ebfbee;font-size:12px;height:24px;line-heig
2024-07-15 15:49:45 UTC	4744	IN	Data Raw: 33 34 7d 2e 62 75 74 74 6f 6e 5f 64 61 72 6b 6d 6f 64 65 5f 5f 4f 56 41 6b 75 20 2e 62 75 74 74 6f 6e 5f 62 75 74 74 6f 6e 2d 2d 64 61 6e 67 65 72 5f 5f 36 65 49 43 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 36 64 30 30 30 30 33 36 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 31 70 78 20 23 39 65 32 62 33 35 32 64 3b 63 6f 6c 6f 72 3a 23 66 66 34 30 35 31 7d 2e 62 75 74 74 6f 6e 5f 62 75 74 74 6f 6e 2d 2d 64 61 6e 67 65 72 5f 5f 36 65 49 43 64 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 64 64 65 30 3b 63 6f 6c 6f 72 3a 23 64 34 32 34 33 34 7d 2e 62 75 74 74 6f 6e 5f 64 61 72 6b 6d 6f 64 65 5f 5f 4f 56 41 6b 75 20 2e 62 75 74 74 6f 6e 5f 62 75 74 74 6f 6e 2d 2d 64 61 6e 67 65 72 5f 5f 36 65 49 43 64 3a 68 6f 76 Data Ascii: 34}.button_darkmode__OVAku .button_button--danger__6eICd{background:#6d000036;box-shadow:inset 0 0 0 1px #9e2b352d;color:#ff4051}.button_button--danger__6eICd:hover{background:#ffdde0;color:#d42434}.button_darkmode__OVAku .button_button--danger__6eICd:hov
2024-07-15 15:49:45 UTC	5930	IN	Data Raw: 73 65 63 74 69 6f 6e 5f 61 64 64 50 6c 75 73 5f 5f 44 4f 4b 41 71 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 37 33 32 36 65 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 33 70 78 20 23 30 39 30 62 30 66 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 6f 70 61 63 69 74 79 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 38 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 77 69 64 74 68 3a 32 30 70 78 7d 2e 73 65 63 74 69 6f 6e 5f 61 64 64 50 6c 75 73 5f 5f 44 4f 4b 41 71 3a 61 66 74 65 72 2c 2e 73 65 63 74 69 6f 6e 5f 61 64 64 50 Data Ascii: section_addPlus__DOKAq{background-color:#7326ef;border-radius:50%;box-shadow:0 0 0 3px #090b0f;cursor:pointer;height:20px;opacity:0;position:relative;transform:scale(.8);transition:all .2s ease-in-out;width:20px}.section_addPlus__DOKAq:after,.section_addP
2024-07-15 15:49:45 UTC	7116	IN	Data Raw: 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 32 7d 2e 70 72 65 76 69 65 77 5f 6c 6f 61 64 65 72 5f 5f 38 57 72 74 52 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 62 67 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 30 70 78 20 33 30 70 78 20 23 30 30 30 30 30 30 31 32 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 34 30 70 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6c 65 66 74 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 32 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 37 30 70 78 3b 77 69 64 74 68 3a 34 30 70 78 3b 7a 2d 69 6e 64 65 Data Ascii: on:relative;z-index:2}.preview_loader__8WrtR{align-items:center;background:var(--bg);border-radius:5px;box-shadow:0 10px 30px #00000012;display:flex;height:40px;justify-content:center;left:50%;margin-left:-20px;position:absolute;top:70px;width:40px;z-inde
2024-07-15 15:49:45 UTC	6760	IN	Data Raw: 72 6f 74 61 74 65 29 2c 23 34 62 32 66 61 34 2c 23 63 31 38 66 66 66 2c 23 33 33 61 39 66 66 2c 23 63 31 38 66 66 66 2c 23 34 62 32 66 61 34 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 63 6f 6e 69 63 2d 67 72 61 64 69 65 6e 74 28 66 72 6f 6d 20 76 61 72 28 2d 2d 72 6f 74 61 74 65 29 2c 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6f 6e 65 29 2c 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 74 77 6f 29 2c 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 74 68 72 65 65 29 2c 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 74 77 6f 29 2c 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 6f 6e 65 29 29 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 32 2e 38 70 78 29 3b 69 6e 73 65 74 3a 2d 36 70 78 20 76 61 72 28 2d 2d 61 66 74 65 72 57 69 64 74 68 29 3b 6d 61 72 67 69 6e 3a Data Ascii: rotate),#4b2fa4,#c18fff,#33a9ff,#c18fff,#4b2fa4);background-image:conic-gradient(from var(--rotate),var(--color-one),var(--color-two),var(--color-three),var(--color-two),var(--color-one));content:"";filter:blur(12.8px);inset:-6px var(--afterWidth);margin:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	65062	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:45 UTC	691	OUT	GET /lib_LUGoPiqXXlDptSWA/ogsxa8h0dl6bydus.png HTTP/1.1 Host: www.umso.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:45 UTC	251	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 59938 Content-Type: image/png Last-Modified: Fri, 03 May 2024 09:59:16 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:49:45 GMT Connection: close
2024-07-15 15:49:45 UTC	935	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 b6 00 00 04 36 08 03 00 00 00 30 33 d1 fc 00 00 03 00 50 4c 54 45 4c 69 71 0d 0d 0d 34 34 37 31 31 38 03 02 05 00 00 00 00 00 00 02 02 04 02 02 03 00 00 01 37 37 3a 2f 2f 37 38 38 38 38 38 38 33 33 3a 31 31 38 28 28 32 33 33 38 89 89 8b 38 38 38 31 31 34 86 82 96 33 33 3a 31 31 38 2a 2a 2f 8a 8a 8c 89 8a 8d 37 37 38 37 37 38 fc fd fd 28 28 33 79 70 66 fa fd ff 38 39 39 39 3b 40 30 30 37 bc b1 e0 16 17 19 38 38 39 ff ff ff 90 9c 97 f3 f6 f7 75 4c ee e7 e9 ee 7a 50 f3 7e 52 f5 7b 51 f4 7b 51 f3 37 36 38 ff ff ff fe ff ff ff ff ff 89 8a 8c 8b 8b 8d ff ff ff ff ff ff f2 f5 f8 2e 2d 35 7b 51 f3 bb c2 cd ff ff ff ac 9f 97 89 8a 8c 31 31 38 ff ff ff ff ff ff 89 8a 8c fc fd ff da df e5 71 45 28 da e1 e3 c0 Data Ascii: PNGIHDR603PLTELiq44711877://788888833:118((233888811433:118**/778778((3ypf8999;@007889uLzP~R{Q{Q768.-5{Q118qE(
2024-07-15 15:49:45 UTC	2372	IN	Data Raw: 95 b0 cb b8 9e c8 76 9d b4 69 c6 7d 6f e3 78 60 77 84 38 fe 88 5d db 4d 32 0d 82 be 49 f3 02 f7 ee 4d 2a b2 69 31 22 29 52 36 25 91 4c 2c 3a 61 48 29 1c 89 12 e9 11 55 49 e4 08 cc c0 81 20 b9 3f ae a4 5e 19 50 2b 0b 10 21 e8 07 65 43 12 3c 7d a1 fc 70 93 8e d3 cc 0f c5 2e 0c f4 47 12 27 6f a6 41 81 66 fa 31 d3 8b b5 cf 39 e4 39 87 87 e4 21 c5 4f 71 3d 6d 2c 8a e7 90 a2 29 3e 5e fb ac bd d6 de 1a 0d b2 55 79 75 5b 6e e7 3f f0 f0 d7 7f 40 90 92 a2 b7 e9 7c be 16 a3 bd c1 eb b0 53 05 4e 9c da 57 ac 8f 07 b2 25 b4 fd 1e 3a 5b 72 f4 7a 83 c9 e7 eb 34 da 3d c1 b1 b0 92 b6 94 d2 93 87 8a f6 09 41 2a 90 bd 07 72 39 fb e1 d2 7f 68 11 bd de 64 f0 f9 16 98 b6 69 ac a5 94 a2 b7 48 1a be 81 0e 95 01 bd 5e e7 f3 f9 86 8c 76 8f df 9f 5e db 13 f5 f8 b1 45 14 f9 7a 39 3e Data Ascii: vi}ox`w8]M2IMi1")R6%L,:aH)UI ?^P+!eC<}p.G'oAf199!Oq=m,)>^Uyu[n?@\|SNW%:[rz4=Ar9hdiH^v^Ez9>
2024-07-15 15:49:45 UTC	538	IN	Data Raw: 9c 9a 46 46 6d 6b 0a d4 56 dd 62 ab 01 b3 39 fd 62 ab af 7d f5 c9 c7 3f fd e7 95 4d 0e a2 93 89 64 a6 2d 64 a4 16 c5 15 c9 a2 d2 46 c5 8b 5b ec 00 aa 1d 76 ef 52 7f ee 37 6b 39 91 1c 89 a4 df 47 fe 67 42 39 d4 d2 3b 6f e5 bd db 88 07 7a e4 85 4b db d6 8c 89 64 e5 ab 5b d4 16 41 6d a5 da 9a 23 91 31 75 ab 59 7c f5 f1 cf 7e 7c 39 8f 3d e7 a1 47 5e 9c 48 d6 5b 5b 2d 0e 28 6d 54 ec 91 57 18 26 a3 b6 08 6a 9b 80 25 92 cd 91 50 7a e3 be 90 b7 fc 5c b8 f0 c9 c7 ff f2 4f 67 ed b9 6e 49 d0 9a d4 d6 62 b1 b6 ba d3 f7 c8 2b 0c 93 51 5b 04 b5 15 59 ab 27 81 48 24 7d 22 d9 f8 b3 8f bf ba a0 48 ff d2 3b 6f ac a8 d4 76 0e 56 6d 94 96 36 42 8f 7c 30 4d 8f 7c 6a 36 19 b5 45 50 5b 69 22 39 12 69 cc e4 9c d1 f1 cf 3f fd f8 13 65 79 d9 a8 d9 af b2 47 5e 92 48 6e cc d4 23 9f Data Ascii: FFmkVb9b}?Md-dF[vR7k9GgB9;ozKd[Am#1uY\|~\|9=G^H[[-(mTW&j%Pz\OgnIb+Q[Y'H$}"H;ovVm6B\|0M\|j6EP[i"9i?eyG^Hn#
2024-07-15 15:49:45 UTC	4744	IN	Data Raw: c9 a8 2d 82 da 8a 13 c9 11 93 29 4b 8f 7c 70 e5 bd b7 5e 97 b8 fb fa 5b ef ad 04 1b 8c f9 f4 c8 f3 a5 8d c3 e9 4a 1b 95 87 c9 a8 2d 82 da 8a d7 48 d6 99 4c 43 d9 cd 33 7a 83 67 df 7b 43 e2 ae e2 a8 39 e3 62 ab a2 1e f9 f9 ec db ff 88 87 c9 a8 2d 82 da 8a 13 c9 3a 93 49 75 a1 a2 d1 eb 3f 7b 59 1a 78 61 d4 6c cf b1 47 de da 1a 52 ee 91 4f 5b 2c 85 da 22 a8 ad 28 91 6c 36 99 ae 31 23 79 54 c8 6b 97 8f 9a b3 d4 38 76 4a 13 c9 42 69 63 f6 7d e4 93 c3 64 d4 16 d9 a4 b6 86 80 2b 5f 42 06 52 69 a5 8d 11 93 69 3a 29 ad 7a 77 8d 9e e0 d9 cb fc a8 39 4b 4f 50 b7 fa 1e f9 74 de a2 b6 b5 43 71 96 80 fb e4 ad 0f f2 e7 f2 92 8d 54 98 b6 06 d3 75 b0 d6 2e 90 93 bb 76 ef ca d9 cb 6f 64 19 24 3b a5 3d f2 a0 ed 08 24 92 1d e9 77 ed 92 5f de a2 b6 b5 43 51 e6 6d 97 3e 78 7b Data Ascii: -)K\|p^[J-HLC3zg{C9b-:Iu?{YxalGRO[,"(l61#yTk8vJBic}d+_BRii:)zw9KOPtCqTu.vod$;=$w_CQm>x{
2024-07-15 15:49:45 UTC	5930	IN	Data Raw: d2 44 32 97 91 12 bf 08 b1 ba 12 79 15 22 af 25 83 b6 db 65 da c6 98 b5 03 b1 d8 d4 e4 72 d2 d6 fb 9f f1 dc ff 08 b4 9d 9a ea 8d 0d 70 24 9c 05 5e 29 c7 6f a4 66 b0 6d db 89 da 6e b6 47 de 98 b9 b4 31 39 ed 23 c3 af aa b4 51 d6 23 2f d3 36 29 ae 1a 77 5b cf 67 d4 f6 41 89 b6 e0 e1 c0 40 6c 66 2a be bc f6 d1 fd fb f7 df ff ec fe fd fb f7 3f fb ec ee dd bb 77 3f fb ec 33 2e da 4e 4d c5 06 7a 06 7a c0 da 01 b1 b6 67 f2 7d 57 11 b5 da 66 1f 25 63 b4 cd bf 47 5e 3c ed a3 72 98 6c cf d0 23 2f 1e 23 8b 5f 4a 66 79 13 f6 7e 23 43 46 6a a7 4c db 01 18 21 f3 d6 7e 06 ba b2 3f ee 7d 78 eb d6 ad 0f ef 32 6f 45 c1 16 be a0 b6 25 02 b5 cd 1b a1 47 be 8f 69 2b f4 ab a7 84 5a e5 01 72 e6 61 b2 31 c3 62 ab 8a da 26 5f 50 b6 c8 9b 93 b6 2c d6 76 2d af 7d c4 74 bd 77 ef 2e Data Ascii: D2y"%erp$^)ofmnG19#Q#/6)w[gA@lf*?w?3.NMzzg}Wf%cG^<rl#/#_Jfy~#CFjL!~?}x2oE%Gi+Zra1b&_P,v-}tw.
2024-07-15 15:49:45 UTC	7116	IN	Data Raw: 5b 7d 47 de a9 97 08 bc bf 79 e7 b2 37 4f 6d 5d 09 6b db 7a db 5e 65 6b 45 71 1b d9 ae ae 5f 11 b4 dd 60 da f6 c4 7a 59 b6 2a b6 1e 9f 59 5d 5d 5f 1b 45 6d 8b 0b 4e 00 e5 9b 48 4e 09 64 bc bc c9 c8 eb 95 5d f2 ce cf fb b3 5f f2 a6 eb 91 37 eb 74 2e c8 54 a5 19 fb 6a 1b de fb e7 9f 7d 9c 56 de 9f bd f6 9e 3d 67 6d 41 da b6 af be fa e2 8b 2f fa 5e ed eb 82 f5 66 60 66 76 00 ac e5 b5 bd 73 7b 03 56 a4 81 fb 59 52 0a 76 db 8b 2f af fd ea 57 38 48 2e 2e a8 6d be 3d f2 6c 6c 9b 8a 82 bb e2 c0 db 91 3d f0 72 89 64 59 8f bc de ac d3 65 5f 6c d5 38 f6 fa bf a4 73 f7 ab 8f 7f 33 7c d9 9b cb bc 6d b4 ad af fb 8b 2f 3e f9 e4 93 4f be 78 b5 6f 12 16 b9 80 c0 0a c3 60 d8 52 5e d0 76 66 35 0e 07 06 b9 9c 14 8c 91 e3 bf 6a 9b be 81 29 a9 62 82 da e6 d9 6c db 9c b8 2e 55 Data Ascii: [}Gy7Om]kz^ekEq_`zY*Y]]_EmNHNd]_7t.Tj}V=gmA/^f`fvs{VYRv/W8H..m=ll=rdYe_l8s3\|m/>Oxo`R^vf5j)bl.U
2024-07-15 15:49:45 UTC	8302	IN	Data Raw: ba 41 ca bd f0 84 3f 4c f3 88 27 d3 3e e2 e9 cc f7 b1 85 c6 90 02 53 b7 fd a1 92 5b 4b 88 ed 61 bc c4 cd 83 ef a7 ac e9 f5 23 85 a5 be f6 68 34 8f 35 66 e6 fb 1a cd d3 0a 77 3f 9d f2 23 f2 79 84 ec be 6f 6d 5d 67 eb 4a 84 c2 0f 7e c2 56 06 6d c9 0f 1e 48 7d 31 65 7b 13 aa 86 3d df 11 f3 a3 7a 8d 66 cf 8f be 23 e7 69 58 7a e4 3b 99 81 d5 c0 52 1f f9 ad fa f4 8f dc a3 d1 ec f8 56 ca bd 3f dc 2e 7f 51 fc cb 12 7d bb 45 a3 ad f8 13 b5 a3 48 a4 fb d4 d6 d5 d5 fd cf 72 58 4b 6c 4f a4 bc 90 a2 bf 09 e2 77 a1 e4 bf 65 64 4b 51 f7 c0 ee bd ff a3 84 ec 7d f8 bb a2 cf 6c 5d dd 8e af 95 45 5b f2 b8 d8 9d ba 07 fe b6 b4 6f c2 23 db 50 dc da 66 73 4b c0 d5 fd ed d7 4b 3d 48 35 ec dd 25 7c 66 eb ca a8 ed 8e a4 b7 75 7f ff 77 25 7f 13 be 9d 78 13 90 5a 64 53 13 40 75 07 Data Ascii: A?L'>S[Ka#h45fw?#yom]gJ~VmH}1e{=zf#iXz;RV?.Q}EHrXKlOwedKQ}l]E[o#PfsKK=H5%\|fuw%xZdS@u
2024-07-15 15:49:45 UTC	2831	IN	Data Raw: 61 6a 52 83 11 65 44 30 08 82 20 08 82 20 08 82 ac 0f 2e 01 97 b5 ec 48 db 6d ab ed 38 0c 66 53 e0 00 50 16 b2 e3 8e 6c 46 5e 0c 66 0b a0 b6 d9 06 5f 93 9d 9e 4b f0 83 e6 26 27 98 7d 9b 0f 26 49 1f cd 56 bf 44 d4 36 ab 10 ed fb f1 b3 6f 3e 95 5c 5e 38 76 60 8d c3 33 05 c1 bc 79 f4 e5 b5 66 49 1d 78 fd 85 24 07 f3 d4 d1 97 b9 cb 22 6d 16 d4 36 9b 10 1d 78 2a e9 0b 26 51 94 ea 8d d7 57 cb 2b a2 dc 37 53 10 0c 25 7f 73 b5 5f 11 d1 be 43 6f a4 22 98 a7 7e ba 25 6f 71 09 b8 2c 42 94 7b 38 f9 47 26 39 3a 57 f1 56 94 fb f3 d4 04 43 1d 5e e9 ad 48 f4 cc 76 5e b2 76 13 1c 5c ab 2a 82 20 04 91 e8 68 aa 96 26 7e e3 78 a2 b7 29 0c 46 f5 ec ca 60 0e b4 a5 2a 98 37 71 ea 14 b2 0e 22 d1 01 49 8a 8e 4d 8a 4a 34 45 24 ca 4d 5d 30 92 dc 15 ab 5b 3c 9b ba 60 5e 42 6f 91 35 Data Ascii: ajReD0 .Hm8fSPlF^f_K&'}&IVD6o>\^8v`3yfIx$"m6x&QW+7S%s_Co"~%oq,B{8G&9:WVC^Hv^v\ h&~x)F`*7q"IMJ4E$M]0[<`^Bo5
2024-07-15 15:49:45 UTC	10674	IN	Data Raw: 7a 29 97 8d 26 21 98 7d 79 fb f7 ef dd bb 0b 82 d9 20 38 6e 9b 25 b0 07 27 a8 b2 77 ef de a7 81 dc 9d 86 bc 0a bc 1c 4c 25 14 1c 9b b1 60 f6 a7 26 98 55 a3 61 83 d9 9b dc 60 56 fc a0 6d 10 d4 36 5b 10 a8 c2 ba b2 e3 90 97 8a 5b 2b 4a 6d 30 9c 27 2b 45 21 c1 c4 bd dd 9b da 60 36 06 6a 9b 35 08 55 49 1a ec a1 99 78 6c a6 28 98 d5 45 e1 bc 4d d1 47 b3 95 fe 28 d4 36 6b 10 2d 1f 9d 49 3b 3c f7 c3 91 b9 8a b5 29 09 86 8d 86 0d 66 45 34 24 98 54 7c 34 2b 82 d9 08 b8 04 5c f6 10 57 85 1c 9e 2c 3b 77 4c 12 e0 b5 56 f3 24 1e cc be 24 06 f3 c3 d1 f0 3f 9a d4 05 93 c9 6c 7c f0 f6 d7 fc 95 66 9e cb 11 2e 67 91 30 0e 7b 82 b7 eb 5f e5 ac b5 d4 05 d9 f5 e4 ba 03 bb cf e5 ec 42 44 3c 57 08 fb 77 0e ee 15 e0 d5 56 3f 34 53 10 0c 89 46 b4 66 34 24 d6 dd 10 4c e6 92 b7 61 Data Ascii: z)&!}y 8n%'wL%`&Ua`Vm6[[+Jm0'+E!`6j5UIxl(EMG(6k-I;<)fE4$T\|4+\W,;wLV$$?l\|f.g0{_BD<WwV?4SFf4$La
2024-07-15 15:49:45 UTC	11860	IN	Data Raw: 85 21 20 c6 61 b5 5a 6d b3 b3 f0 f7 b5 96 9e f1 21 36 d9 d6 d5 f5 f7 c7 cd ed eb 9b bc 25 85 51 22 ab d3 c9 98 19 67 c8 7d e1 72 05 a4 db c1 f1 f9 7b d7 af 5f bf f7 e8 fa c3 ee 99 f9 71 c3 85 da e6 76 43 61 81 d5 1b b6 ac a6 ed 72 1d b9 0c 3a a1 4a cb ce 9d 39 73 ea d4 99 73 b1 64 5b 52 72 4e 5d 53 2b 05 6d 89 b7 2c 6c b2 bd d5 bb 95 e3 3e cd 27 49 c1 40 6d 56 6b bb 6f bb b4 95 8a c5 e2 0f 36 96 44 8b ce 8b 47 d6 2e 55 5d 7a bb 1a b8 b4 6a e9 a9 1b 8f 1f df a6 76 84 6f 65 56 ab cd 1b f6 02 b3 b3 b3 b3 03 9f 7e f5 d5 57 cd 2e b3 99 69 e9 1a 61 eb c8 c2 f9 c8 75 75 63 93 bd a3 83 83 77 bf bc 7b 77 d4 4a ae 1e b4 74 b3 86 d4 92 59 6d af cf df bb 33 33 21 bd 27 ad fd f4 93 59 63 41 c7 9f e7 bd 1a 5e d3 36 d1 de d2 d2 12 e8 89 2a 2d 2d 3b 07 de 9e 3b 77 0e b6 Data Ascii: ! aZm!6%Q"g}r{_qvCar:J9ssd[RrN]S+m,l>'I@mVko6DG.U]zjvoeV~W.iauucw{wJtYm33!'YcA^6*--;;w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	65063	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:45 UTC	377	OUT	GET /lib_LUGoPiqXXlDptSWA/csi5g5qmp4uscbth.png HTTP/1.1 Host: www.umso.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:45 UTC	251	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 23243 Content-Type: image/png Last-Modified: Fri, 03 May 2024 09:59:15 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:49:45 GMT Connection: close
2024-07-15 15:49:45 UTC	935	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 c2 00 00 00 bf 08 03 00 00 00 02 61 95 1d 00 00 03 00 50 4c 54 45 4c 69 71 f8 f3 ff f9 f3 ff f8 f3 ff f8 f3 ff f8 f2 ff f8 f4 ff f8 f3 ff f8 f3 ff f9 f4 ff f7 f3 ff f8 f4 ff f9 f3 ff f8 f4 ff f8 f3 ff f8 f4 ff f8 f4 ff f8 f3 ff f8 f3 ff f9 f3 ff f8 f3 ff f8 f3 ff f8 f3 ff f9 f4 ff f7 f7 ff f9 f3 ff f9 f3 ff ff fd ff f8 f3 ff f9 f4 ff f9 f4 ff f7 ef ff f6 f3 ff f7 f3 ff f8 f4 ff f8 f4 ff ff fc ff f8 f3 ff f9 f3 ff f9 f3 ff f9 f3 ff f8 f4 ff f8 f1 ff f9 f3 ff f9 f4 ff f9 f3 ff f8 f4 ff f9 f4 ff f8 f3 ff f9 f3 ff fa f4 ff f8 f2 ff f8 f3 ff f9 f5 ff f8 f4 ff f9 f3 ff f9 f3 ff f8 f4 ff f4 f3 ff f9 f3 ff f8 f3 ff ff f0 ff f9 f4 ff f1 ef ff f8 f5 ff f8 f3 ff f8 f3 ff f7 f1 ff f6 f4 ff f8 f3 ff f8 f2 ff f8 Data Ascii: PNGIHDRaPLTELiq
2024-07-15 15:49:45 UTC	2372	IN	Data Raw: 56 ed 26 b2 37 de 28 d2 30 c9 d8 d9 31 f9 54 cc b2 2a 46 ed b4 05 5b 13 38 4a cf ca b5 c8 2d bf c1 9a fd c6 3d 04 1d 9d 57 a9 30 2c bd 60 b4 b6 0b 0a b3 fb 0d b7 19 55 ca 0f 08 a3 be 58 10 0a 9b 50 e7 13 a3 a7 20 9e 3b 1f f5 dd 9d c0 47 18 bb 4d 34 f3 e4 49 f5 4a 5d 1f a1 de 5d f0 7f 53 51 f7 11 1b 70 f4 c3 06 0c d2 fa 90 22 35 a8 bc 97 16 f5 70 e2 0c d9 2d 3a 04 62 8f e7 5b d6 ba 63 8a 78 67 94 6a 53 87 fd 83 e9 bf 73 21 88 f1 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 9c ed 7d 0d 7c ce 75 f7 ff c5 c5 76 6d c4 1e 3c 0c 31 22 ad 07 6d 99 12 9a 92 b2 24 4b d3 83 d6 7d 4f fd a4 71 2b a5 d2 62 88 57 77 a3 b0 e5 61 21 4b 48 d4 e8 d5 b4 e2 25 21 d5 2b 42 51 bf 9a d1 bd 48 44 0f 1e ca 43 77 ff fa 5d fe af f7 39 e7 Data Ascii: V&7(01T*F[8J-=W0,`UXP ;GM4IJ]]SQp"5p-:b[cxgjSs!pHYs IDATx}\|uvm<1"m$K}Oq+bWwa!KH%!+BQHDCw]9
2024-07-15 15:49:45 UTC	538	IN	Data Raw: d3 77 26 a7 ef dc b9 f3 aa ab 76 5f b5 7b e8 6e 06 f1 07 07 75 2a 7e c6 55 40 ed d2 c9 ba 4e 91 f4 ef e4 ba a1 2e a7 8d 43 0f a6 5e 98 22 2e 40 0f 9a 15 56 d4 90 a0 d9 91 aa 9e 07 a3 fd 05 f9 bc 87 f2 2f c7 6b ab 3a ad 66 00 1f 3e 7c f8 f0 de 4e fe 7d be be a3 47 ef 1c 8d 34 9c 9e cc 15 f5 ee dd bb 05 c5 37 1a a2 2d 43 7a 89 5c 2c 79 d5 6c 74 a9 5b 5b 06 30 a7 62 b3 9a 52 9a 5f be b8 66 2a ac 2d 85 b4 15 b5 af fb bd 9e f3 2f f7 bf 02 60 46 ef aa 4e ab a5 7c 5e bd 74 e9 e1 c3 7b f7 ee dd 7b df 6b fe 7d ca 7b 9e 78 ee b9 e7 9e 1b 3d 7a 67 3a 61 38 99 32 31 f1 d3 1f 6c 85 dc 43 54 5b 34 64 fa 27 93 5b 7a c4 64 ca a8 40 a7 21 8a d6 cc 34 95 ce c6 9d 52 b3 bb a5 fc 87 a5 90 b6 a2 36 a5 5f 2d be c2 f0 68 ea 2f 53 f7 ec 99 ba a7 cd 1e 06 6f a7 d5 9d 80 dd d7 40 Data Ascii: w&v_{nu~U@N.C^".@V/k:f>\|N}G47-Cz\,ylt[[0bR_f-/`FN\|^t{{k}{x=zg:a821lCT[4d'[zd@!4R6_-h/So@
2024-07-15 15:49:45 UTC	4744	IN	Data Raw: f2 f6 21 01 7b 14 ad b0 a2 fa a4 57 c6 f2 c2 2f bf 18 ec 33 e0 bb 0a a3 23 26 af 5e 5b 4d f8 5d be fc be fb 08 bf 2b 01 e0 c2 95 49 5f fb d5 0c af bc ee ef eb 00 62 a0 18 20 7e 6e f4 e8 64 4a c6 57 5d 75 15 89 b6 a0 d9 da aa 97 20 00 e3 ff 28 e9 25 6b 2f cd 7c 96 36 ea 50 b9 98 66 4a f0 a3 a5 75 27 e5 35 af bc 3f c2 9c a1 dd 02 f7 58 5a 61 45 75 34 bf ac dd 90 f2 79 2a 08 e8 3d 14 6d 48 7a d5 89 11 8c 1a 7a e9 ea e5 cb 97 1f 26 00 df 75 1f a5 df 95 2b 93 be fe 3a 29 a9 fd 52 7f be 88 9f af 03 86 ff be f8 62 a0 f8 89 27 d0 14 83 98 4e 4f de 99 be 13 b9 18 9a 2d 11 50 f3 90 09 de 00 ff 61 86 5a 30 5c c6 7a b6 8c 80 ab 8c b0 c3 74 24 91 fe d3 f2 90 b6 e2 3c 07 f0 60 9e 1f 49 f3 ab 95 57 24 be c2 f4 17 f8 45 f9 7c f8 f0 de e5 7b 29 fd 32 7e 93 92 00 e0 f6 ed Data Ascii: !{W/3#&^[M]+I_b ~ndJW]u (%k/\|6PfJu'5?XZaEu4y*=mHzz&u+:)Rb'NO-PaZ0\zt$<`IW$E\|{)2~
2024-07-15 15:49:45 UTC	5930	IN	Data Raw: f9 04 e1 e4 d2 70 53 7b 96 ef 9d a7 ac eb 47 72 98 0f 55 c4 da 3d ae 4c d3 2b 7e 00 12 dc bc 6b 85 26 a4 b1 09 1a 58 1e 95 d1 5e c0 30 b9 b4 a8 4c 43 1b 6b 4f 4c 0e 44 e3 f0 1a f5 bf 49 74 f4 88 6d 27 01 60 31 be 02 79 45 d2 0d bd 39 c8 ec f3 37 df e8 bd 5f 14 cf 44 3f c7 5e 5d ce f0 c8 48 bf 00 b0 c0 f7 76 8d df 9f 5e 6c 79 93 cd e3 e8 5a 30 05 d1 6e 64 dc c8 b8 b8 19 71 94 8a c7 f5 52 15 35 ba e2 13 e8 8a 31 63 22 14 8b f4 12 14 75 43 86 b1 f2 ae 45 41 7d a5 72 cb d3 a3 62 51 6d 8d 86 f2 12 67 99 e0 0d 30 f4 20 35 c5 64 97 f7 8e 2d b8 71 fe 40 b8 1c 87 e8 d8 ca bf fa 8a 22 39 21 a9 12 18 f9 4a 68 45 57 fe 8e 95 25 d8 d8 04 2f b8 ac 5d 7e 7b 6a 7b f1 da 57 61 29 fd 8b 72 de 60 f8 72 fd ac 36 f7 cb 88 9f a9 7c fe 06 f4 15 f5 bd 94 7c c1 3d 43 7a a5 d3 2f Data Ascii: pS{GrU=L+~k&X^0LCkOLDItm'`1yE97_D?^]Hv^lyZ0ndqR51c"uCEA}rbQmg0 5d-q@"9!JhEW%/]~{j{Wa)r`r6\|\|=Cz/
2024-07-15 15:49:45 UTC	7116	IN	Data Raw: e9 d3 35 7d 65 54 cf d7 5c 72 c9 35 45 1c 5f 0d f8 78 b5 ed 50 c7 8e 6d 09 c4 fb 17 22 11 ab 54 6c 9a 32 75 6b d5 6a 59 ab 41 63 07 2d ce 96 82 da d0 4f ff 66 a0 18 5d b1 b8 5e 92 d5 16 0b 3e 90 8c d5 6d 35 34 c5 7c 5c ad dd 48 78 d7 32 b3 75 b3 97 57 e9 02 11 56 16 0e 32 84 6d 3e f5 c4 e1 55 bc 2f ec ce e0 d6 a3 1c ff c8 1f 32 3d a2 04 ec 0a 5f ac 0e 9a f3 af 59 f9 fc a0 2c fe 9e 2b 9e d4 d5 73 9f e9 d3 a9 7a fe 98 93 2f 23 f8 12 d4 cf 00 6f 51 d1 57 5f 0d 18 30 60 c0 45 2f af 59 d3 b1 63 c7 8e 6b db ae 5d db b6 ed c2 85 ad 17 72 53 dc 85 a9 2d 03 c4 d0 4f 2f 1b 44 f5 34 40 6c 58 03 34 6b f6 bd 2c 33 45 cc 8a 98 15 45 20 86 de c3 64 0d 40 76 79 c4 6c 65 cd 84 f4 92 a6 4c 88 19 33 e2 7a 55 7d 19 6d 41 b8 0a 20 6c b3 c5 da bd 1d 31 85 78 bf 03 15 13 4c 89 Data Ascii: 5}eT\r5E_xPm"Tl2ukjYAc-Of]^>m54\|\Hx2uWV2m>U/2=_Y,+sz/#oQW_0`E/Yck]rS-O/D4@lX4k,3EE d@vyleL3zU}mA l1xL
2024-07-15 15:49:45 UTC	1608	IN	Data Raw: 94 30 54 02 1f 9d 4a f2 ac dc 0c f4 c2 43 84 92 6e 87 24 dc 6e 64 5c 1c 2d 3a cc c0 a2 c3 98 da f5 e4 ce 0f 2f 4e 88 8f 97 4c 14 1d 5f 5a 6c cf af 5d df 60 70 23 3f dc 9e 50 aa 1e be f8 f8 84 e2 a2 98 2a 81 51 52 7e b8 bd 38 21 01 f6 6e 09 09 c5 f6 f0 aa f9 ac 1e c7 88 bf 58 21 dd 71 ed da 1e 6d 17 42 5f b9 5f f9 45 4a 2f 6c 92 57 0e 1a 3b 68 d0 b2 c5 8b 49 5e 99 b3 44 86 4a 48 c2 c8 c2 4d 9b 7d 84 24 4c dd f0 ac 59 34 16 de c4 56 d2 25 6a e7 1f 39 98 36 95 48 61 89 5d c3 ac 2c 9e 0a 0f 21 81 25 66 4a ac ec 88 1b 36 63 d8 b0 a8 c0 79 78 5a 61 45 ed 8d fb 4b f9 c4 af da 53 a2 4a 9a ee 74 9b 6e 92 c9 a9 ee 41 83 96 2d cb 16 71 16 57 d1 0c 61 76 92 56 fa 4a be e7 80 23 c3 60 a4 e9 40 a9 da 35 84 42 9a 97 0d 3b 64 e4 66 00 c5 48 c3 53 a6 a8 5e d8 90 76 cc 98 Data Ascii: 0TJCn$nd\-:/NL_Zl]`p#?P*QR~8!nX!qmB__EJ/lW;hI^DJHM}$LY4V%j96Ha],!%fJ6cyxZaEKSJtnA-qWavVJ#`@5B;dfHS^v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	65064	104.17.3.184	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:45 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/8a3ae756188b0f7f/1721058581436/3gRK5Ud8sqOFSpR HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:45 UTC	200	IN	HTTP/1.1 200 OK Date: Mon, 15 Jul 2024 15:49:45 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8a3ae7802b2b42c7-EWR alt-svc: h3=":443"; ma=86400
2024-07-15 15:49:45 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 47 00 00 00 62 08 02 00 00 00 8d b3 59 cd 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRGbYIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	65065	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:45 UTC	710	OUT	POST /api/view HTTP/1.1 Host: www.umso.com Connection: keep-alive Content-Length: 154 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.umso.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:45 UTC	154	OUT	Data Raw: 7b 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 70 61 74 68 22 3a 22 2f 22 2c 22 69 73 50 72 69 6f 72 42 6c 6f 63 6b 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 75 74 6d 5f 73 6f 75 72 63 65 22 3a 22 75 73 69 74 65 22 2c 22 75 74 6d 5f 6d 65 64 69 75 6d 22 3a 22 62 74 6d 62 61 64 67 65 22 2c 22 75 74 6d 5f 63 61 6d 70 61 69 67 6e 22 3a 22 66 72 65 65 22 2c 22 75 74 6d 5f 74 65 72 6d 22 3a 22 78 61 69 36 6c 31 70 69 62 6e 78 65 66 67 74 32 22 7d Data Ascii: {"referrer":"","path":"/","isPriorBlockingEnabled":false,"utm_source":"usite","utm_medium":"btmbadge","utm_campaign":"free","utm_term":"xai6l1pibnxefgt2"}
2024-07-15 15:49:45 UTC	372	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.umso.com Content-Length: 16 Content-Type: application/json;charset=utf-8 Date: Mon, 15 Jul 2024 15:49:45 GMT Set-Cookie: usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; Path=/; Domain=www.umso.com; Expires=Tue, 15 Jul 2025 15:49:45 GMT; HttpOnly; Secure Connection: close
2024-07-15 15:49:45 UTC	16	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d Data Ascii: {"success":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	65067	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:45 UTC	691	OUT	GET /lib_LUGoPiqXXlDptSWA/5segal4xfx8mljy3.png HTTP/1.1 Host: www.umso.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:46 UTC	252	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 137194 Content-Type: image/png Last-Modified: Fri, 03 May 2024 09:59:16 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:49:46 GMT Connection: close
2024-07-15 15:49:46 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 4c 00 00 04 fc 08 03 00 00 00 ae 15 e5 fd 00 00 03 00 50 4c 54 45 4c 69 71 0f 0f 0f 09 09 09 05 05 05 18 18 18 0f 0f 0f 0b 0b 0b c4 c4 c4 35 35 35 1c 1c 1c 07 07 07 07 07 07 05 05 05 05 05 05 07 07 07 03 03 03 04 04 04 04 04 04 05 05 05 07 08 0a 04 04 04 2d 2e 2f 09 0b 0e 0c 0d 0e 40 41 43 08 0a 0d 09 0b 0e 21 22 24 3c 3d 3f 22 23 25 36 37 38 35 35 36 66 d5 bd 67 d5 be 63 ce b7 63 cd b6 09 0b 0e 25 27 2c 24 25 28 2a 2a 2f 0a 0c 0f 14 18 1f 26 27 2c 00 00 00 24 26 2a 08 09 0b d8 68 c6 1f 20 25 68 d8 c0 21 22 27 3b 3c 41 28 29 2d 22 24 28 0d 0f 12 30 33 39 1c 1e 22 40 41 43 0f 11 15 23 25 2a 0a 14 39 ca d1 d8 18 1a 1d 07 04 04 2b 2d 30 36 36 37 15 16 1a 59 74 9b 2e 30 33 10 07 07 48 4b 4f 2c 23 23 3e Data Ascii: PNGIHDRLPLTELiq555-./@AC!"$<=?"#%678556fgcc%',$%(*/&',$&h %h!"';<A()-"$(039"@AC#%*9+-0667Yt.03HKO,##>
2024-07-15 15:49:46 UTC	2372	IN	Data Raw: 07 ca 14 29 a1 0e 89 90 50 92 20 81 50 c9 4e 23 bd f9 03 8e 21 23 ad fc 0b 64 c9 3f 65 8d d7 cd d0 46 bb dd 46 5b 0d 0d 63 6c eb b2 22 32 1e 29 a9 aa ba 5e 53 aa ee 58 b3 77 97 9e f9 52 c6 2f d6 2b d6 fa e6 9b db ca ff 85 8c 18 d1 e5 a7 5b df 4b 46 be 72 31 30 31 92 17 03 13 23 b7 14 03 13 23 06 26 46 ee 45 0c 4c 8c 18 98 18 d9 63 98 e0 5a d7 bd a9 38 95 db ca 8d 77 65 44 48 b7 8d 37 7f 3b 63 e6 18 d9 23 98 e0 76 e5 ec f9 e1 4d e5 b4 78 5b b9 f1 ae 8c 08 29 1d 15 dc 0d 9c 18 98 18 d9 1f 98 60 e7 a8 74 8b e1 6a 60 f2 38 f2 bc 62 19 98 18 d9 4f 98 58 95 db dd d4 06 26 8f 25 67 6d fd f7 33 9a 89 91 7d 81 09 76 6e a3 96 18 98 3c a6 fc a7 6e e9 18 98 18 d9 17 98 b4 8f 6e 79 47 1b cd e4 f1 c4 31 30 31 b2 7f 30 b9 b5 62 62 60 f2 88 72 a6 b9 4d 8c 66 62 64 4f 60 Data Ascii: )P PN#!#d?eFF[cl"2)^SXwR/+[KFr101##&FELcZ8weDH7;c#vMx[)`tj`8bOX&%gm3}vn<nnyG1010bb`rMfbdO`
2024-07-15 15:49:46 UTC	538	IN	Data Raw: c3 b0 e4 eb 14 e7 f4 57 fd a7 37 9a 89 91 bb c1 a4 7d fa ab 5e ba cf c8 d7 24 85 ea cf da 33 03 13 23 77 83 49 a5 fa b3 51 4c be 56 b1 72 aa 89 81 89 91 bb c1 a4 61 14 93 af 58 7e d6 bd 26 06 26 46 ee 06 93 5f 4f b7 b3 97 8c 7c 2d e2 ea 76 8e 81 89 91 bb c1 a4 da d8 aa b8 65 e4 ab 11 ab 55 57 4f 0c 4c 8c dc 0d 26 ad c6 a3 dd c9 46 1e 5d b0 fe f3 1b 98 18 b9 a5 18 98 18 c9 cf 25 06 26 46 6e 29 06 26 46 0c 4c 8c dc 8b 18 98 18 31 30 31 72 2f 62 60 62 c4 c0 c4 c8 bd 88 81 89 11 03 13 23 f7 22 06 26 46 0c 4c 8c dc 8b 18 98 18 31 30 31 72 2f 62 60 62 c4 c0 c4 c8 bd c8 97 03 13 dc 38 53 4f da bd 07 5b 04 6d d5 0b e8 81 a5 f2 57 97 83 30 79 26 46 1e 10 26 ce 74 c9 56 eb b4 17 e9 9c 65 da 37 06 be 9e 71 df 98 8c ae b9 41 0f a3 f9 f5 77 b1 7b 2f 65 22 eb fe 02 a1 Data Ascii: W7}^$3#wIQLVraX~&&F_O\|-veUWOL&F]%&Fn)&FL101r/b`b#"&FL101r/b`b8SO[mW0y&F&tVe7qAw{/e"
2024-07-15 15:49:46 UTC	4744	IN	Data Raw: 7c 1c be 50 c1 d8 81 ff d7 4f c4 b7 ac 4a e3 84 69 22 96 53 41 d6 41 19 59 e2 ac 0b d9 e9 c2 0b b8 72 24 d4 15 ec 34 8e c5 97 6b c7 0d 27 cf 85 ee 73 75 91 dc fa 11 bb 0c f2 70 2a d9 7b 70 c2 b8 e2 58 f8 b8 00 5b 6d d7 b3 97 0b 18 bb 0d f6 92 84 09 3e 6e 54 f2 8a 92 5b ca 7e 22 f8 06 3f bf 6b c5 68 26 46 1e 12 26 d6 20 ad 23 d4 ed 90 66 e0 d7 10 ea ad 22 84 ac ea 9a 10 e2 83 7b b0 b7 9c a1 fa 20 61 37 79 75 b9 70 90 55 1d 10 42 26 ca 75 c8 61 72 d4 49 3d 84 2c 6f 4d 48 3c 85 92 d5 5e da f7 52 42 96 9e 8b 50 7f 65 db 24 96 ce 97 5a 19 36 91 b4 60 a3 d3 e5 29 bc 34 5c 7a 08 4d d7 cd 4e 9c 88 23 c4 0d f8 54 54 65 14 28 c1 e3 69 0b 60 72 9c 44 c8 19 c4 76 18 27 15 e4 c5 7d 84 5a f1 68 b8 8e 49 52 84 0d 3a a3 94 90 75 6b bc 54 0a 56 61 1e 13 92 f6 2b 08 b5 d6 Data Ascii: \|POJi"SAAYr$4k'sup*{pX[m>nT[~"?kh&F& #f"{ a7yupUB&uarI=,oMH<^RBPe$Z6`)4\zMN#TTe(i`rDv'}ZhIR:ukTVa+
2024-07-15 15:49:46 UTC	5930	IN	Data Raw: 86 da ba 96 c2 dc bb f6 4b b3 6b 3f c2 64 37 4c 3e 7e 84 7f c8 9b a7 17 1a 1e 8d 76 15 2c 3a f8 cc ab b1 21 95 59 4a 06 5a 45 93 db 39 60 55 84 f3 27 19 3d 94 f7 5f 3e 45 5b 2a cc 99 be f2 0f 35 37 ee 18 d0 ba 3a 9e 85 37 b4 a1 97 b3 fa e5 eb 72 ce de 30 27 f2 4a 7f 3e b3 35 a7 1c c8 23 aa 9d 5f bc 56 fe 0f 1d 1e 99 7e a2 2c 1a a9 9a bc 10 e6 4f 9e 3f 12 3a af c1 ce 51 c7 ad eb 06 8f 7c fe 5c 33 11 33 80 fa 47 62 45 79 c2 84 63 2c 17 ab 13 be da c7 86 49 35 a6 67 08 45 e4 6c b3 71 f9 55 e2 a9 66 77 db 52 1f cb ce 52 bb 61 42 c2 b7 bf fc 42 02 80 c9 9b 8f 0f 0e 13 28 b9 74 85 58 b3 cd 82 da 57 88 e8 bb 91 97 a2 aa 6c 7f 13 f1 82 74 d8 c4 77 8e e6 c8 99 8f a5 d3 6b c1 1a 99 f0 a4 8c 1e dd 26 cf 56 0d cb d4 2a 35 c8 84 97 50 53 e5 37 7d 87 fa 80 d4 67 f7 fc Data Ascii: Kk?d7L>~v,:!YJZE9`U'=_>E[57:7r0'J>5#_V~,O?:Q\|\33GbEyc,I5gElqUfwRRaBB(tXWltwk&V5PS7}g
2024-07-15 15:49:46 UTC	7116	IN	Data Raw: 7e 64 8f ff 07 d3 44 fe 17 7b fc af df 7c f3 ec 9b ef d9 c3 ff c5 6e d4 ff e3 df ff df 42 a1 e0 b0 fb d9 2d 80 b8 ec 3e 77 d8 e3 1a 1b 16 15 f6 98 0d 00 8b 3d 64 b5 6a a1 4e 2e 7b 0c 63 83 7f b5 8b d5 57 2d 0e 19 90 0a 1b 2a d9 57 d9 b0 6a cb 3d 61 b1 27 f6 7a 45 7e 15 e1 42 a1 72 19 4c 38 1c fe c9 f5 13 c5 0f 1d 26 cc 67 02 f5 06 e8 6f 6f b6 61 a2 d9 29 5b 83 5a 3a 6c d4 a7 54 28 57 00 22 e7 45 d1 e8 21 b6 26 63 c6 9a a3 65 c3 ca d1 77 c9 3f 9f f9 4c d8 bf 99 7e a2 9c ae f9 a5 7e 7c f4 ab 45 3a d2 45 f6 30 3e 13 23 5f 8b f0 4a 6b c2 3c 97 3e 13 7d d9 46 6e a9 9f 9c f4 b2 68 ce c6 34 ab 69 e9 39 6b 5f 25 62 68 ba b9 9c 73 f9 81 48 05 3e a7 e4 6f 79 28 75 7d 3f 6f df c8 8f f2 07 57 c2 e4 02 aa 8d bf 7d fb cb eb 2b 34 93 17 2f 7f b1 ed 2d 98 68 aa 86 3c c5 Data Ascii: ~dD{\|nB->w=djN.{cW-*Wj=a'zE~BrL8&gooa)[Z:lT(W"E!&cew?L~~\|E:E0>#_Jk<>}Fnh4i9k_%bhsH>oy(u}?oW}+4/-h<
2024-07-15 15:49:46 UTC	8302	IN	Data Raw: 59 38 86 3b 7a 9c 75 d1 04 98 84 cb 68 d8 9f c5 69 d1 e2 30 69 cf a1 57 60 8b 2e 1c e4 ce a8 3f ea cf 28 34 e3 33 66 ce ad 45 74 f4 e3 7e 93 ac 3a bd a0 89 9e b1 c6 41 a2 47 72 18 4c 2e d1 4b 0a c5 de 15 95 b3 8d dc 5e 70 f7 a8 78 da bd 54 33 d9 0a e8 64 99 26 aa ac 09 03 0a 5f 33 21 55 12 b9 d4 ef 01 60 82 a7 74 54 c3 b8 9e 50 07 f5 96 a4 8e 51 ad 15 c7 35 84 93 60 e6 22 dc 88 a8 f2 99 9c a4 a1 d7 46 08 8f 42 bf 8b 91 33 0a e7 ae 0e 93 06 f1 2b 18 59 cd 70 e1 b8 b3 d0 c3 08 55 69 c7 42 55 0a 4d 1c ba 43 68 6e d7 b3 79 db 87 93 00 1a da 38 51 28 c0 eb ce 6d 72 82 91 e5 51 ff 98 c3 04 39 71 52 6f af d2 12 46 55 0a fd 6d 2c 0f 5a f6 19 98 dc d5 67 22 32 60 45 65 a4 6f 54 0d 0c 6d 45 8e 8c e5 64 28 f9 1b 98 39 bb a4 f2 eb a9 2a d8 6f e4 7e 05 17 8a e5 6d ff Data Ascii: Y8;zuhi0iW`.?(43fEt~:AGrL.K^pxT3d&_3!U`tTPQ5`"FB3+YpUiBUMChny8Q(mrQ9qRoFUm,Zg"2`EeoTmEd(9*o~m
2024-07-15 15:49:46 UTC	2832	IN	Data Raw: b0 68 98 b4 fb 65 ce 12 a8 9f 3c 33 4c 3a 27 6a 45 ef 89 60 95 44 7a 03 be 20 20 a1 34 41 3e 13 64 e7 10 98 9c 1f 73 a7 09 d0 4c 5e 3d 4c fe a9 04 13 86 93 5f 9e 3d 9a 23 57 fa 81 9c 35 d6 6a 0d 17 fa 31 6d e4 d9 fb 36 b2 1b 6f 9e 29 1b 67 4f 84 58 37 58 39 21 0a 4a 6b 95 5e 52 ab 9a 1c 95 71 f2 aa 35 13 0d 78 60 65 5b 27 d9 56 6d 4e 25 69 4d 1a 0f ca 47 96 6f c9 01 db 54 46 ce be 08 73 95 60 f5 84 80 04 e0 e4 00 78 4d de 96 58 02 a2 39 0a 26 cb 3c b0 4c 36 6d eb dc bb 07 6c 8d 03 96 cc 07 a5 5d 6b c0 70 d0 2d f9 4c ce b6 f7 cb af e4 a9 78 22 98 c2 04 ab 9f d8 ca a1 38 a1 b1 61 12 18 06 1e 58 0e 93 43 ec 35 79 dd 9a 49 5a 07 93 4d bb 4e ee 3d 37 a7 dc 50 9a 3a 4d 88 95 83 e7 d4 53 0b 67 6b 49 6b ca 63 b2 37 42 32 4c a8 3e c2 3c b1 92 08 9f 09 55 4d ce 51 Data Ascii: he<3L:'jE`Dz 4A>dsL^=L_=#W5j1m6o)gOX7X9!Jk^Rq5x`e['VmN%iMGoTFs`xMX9&<L6ml]kp-Lx"8aXC5yIZMN=7P:MSgkIkc7B2L><UMQ
2024-07-15 15:49:46 UTC	10674	IN	Data Raw: 75 ed 75 ea 61 12 5c 23 99 7b 52 68 18 1d 71 a3 23 16 0c b0 cd 73 3c cc a2 66 6f 6e 4d 69 2a 5b 0d 4c 9a d7 59 8e 33 e3 8a 0a 4c 92 f1 8d 63 18 86 11 0d 07 a6 66 df 58 d7 53 fb 71 29 71 7f ff a1 3a 1a 67 2b fe 12 26 7f ae 74 20 c0 19 b0 c0 69 b2 3b 3e 13 a2 99 78 95 9f 0e d2 0f 80 44 43 eb 76 4e 64 80 60 12 0d ac 60 34 1a 8d d2 5b 2b c6 ae 52 37 49 8b 1b cb f2 74 6f 38 ce f1 21 33 04 93 70 60 c5 29 da cf b7 2e 43 e4 33 91 02 3c 61 30 29 c3 a4 6d 44 d3 dc 9f 5c cd 90 1f 25 9e 14 49 d7 d6 75 3b 8d e3 22 f1 fa 04 26 86 9f 6e 6a 41 be 60 e1 18 e1 7f 24 a9 1d 9c 73 7e fe 56 74 a7 2f 5b 39 8f 87 c9 70 38 1c 0e e6 06 3b ba 0c 93 b3 13 24 3d 7e f2 2b 2b 43 47 2c 26 61 53 6b 06 d6 2d 56 45 7a d7 d6 e8 b4 37 b7 46 a7 4b 61 72 32 18 e3 fc 8f ce a8 02 93 59 96 0d b0 Data Ascii: uua\#{Rhq#s<fonMi*[LY3LcfXSq)q:g+&t i;>xDCvNd``4[+R7Ito8!3p`).C3<a0)mD\%Iu;"&njA`$s~Vt/[9p8;$=~++CG,&aSk-VEz7FKar2Y
2024-07-15 15:49:46 UTC	11860	IN	Data Raw: 6a 52 7e 09 a8 14 06 35 39 cc c4 01 05 7e 22 26 fc fc fe 57 a5 99 ec 9d b0 46 26 ec 05 0b 0c 97 26 85 2e 93 5a 90 54 9b 12 40 ef 09 21 4a 05 26 94 28 f8 cf 5e cb b7 fc 81 f9 46 aa 24 f9 75 99 24 d5 cc 12 a4 95 54 67 e4 c8 a3 2d 40 af 46 ea 79 65 ca 89 c8 77 2d 95 fa 29 98 28 59 0b 27 8c 23 52 6c b8 42 93 3a d7 09 e9 6c 42 a8 52 d7 18 16 f6 73 e4 f6 0e e6 49 3d 4c 64 b2 90 ef ec b2 ca 42 71 43 f6 80 5b d8 7e ec 9d 25 50 c2 27 e6 87 ca 3b 7d 0b f6 a9 1e 47 58 27 1f 02 6e 62 c9 39 cb 28 59 fe 81 a9 3e b2 4a 25 81 31 1c d1 be a4 da f1 15 86 84 61 bd 30 e9 23 2d 74 12 4e 10 98 7c a2 34 13 25 8f 64 09 7b 90 4a fd 20 59 56 08 8b 13 03 3f 6c a9 69 12 1f ab 03 f4 13 f4 53 c0 e4 d7 77 ac ae 2a 64 1e bd 71 ed dd bf fd 66 e5 9b 84 70 95 f7 ef 7f 91 5f 57 75 12 08 12 Data Ascii: jR~59~"&WF&&.ZT@!J&(^F$u$Tg-@Fyew-)(Y'#RlB:lBRsI=LdBqC[~%P';}GX'nb9(Y>J%1a0#-tN\|4%d{J YV?liSw*dqfp_Wu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	65071	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:46 UTC	691	OUT	GET /lib_LUGoPiqXXlDptSWA/jocl5anhrivcjdwx.png HTTP/1.1 Host: www.umso.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:46 UTC	251	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 47233 Content-Type: image/png Last-Modified: Fri, 03 May 2024 09:59:16 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:49:46 GMT Connection: close
2024-07-15 15:49:46 UTC	935	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 b6 00 00 04 0e 08 03 00 00 00 d8 1a 54 3c 00 00 03 00 50 4c 54 45 32 34 42 2c 2e 36 20 20 20 22 22 22 24 24 26 24 24 24 2e 30 3a 4c 69 71 22 22 22 30 32 3e 30 32 40 22 22 22 2a 2c 32 26 26 2a 20 20 20 23 23 23 28 28 2e 23 23 23 26 28 2a 30 32 3c 28 2a 2e 28 2a 30 22 22 22 23 23 23 21 21 21 24 24 24 28 28 2c 2b 2c 34 26 26 28 2c 2e 34 25 25 25 23 23 23 2a 2a 30 20 20 20 28 28 28 20 20 20 2a 2a 32 24 24 28 2e 2e 38 32 32 40 20 20 20 20 20 20 24 24 24 2c 2e 38 24 26 26 26 26 26 20 20 20 28 2a 2c 26 28 2c 2e 30 38 62 bf f9 ff ff ff 2e 30 3c ff ff ff ff ff ff ff ff ff 62 bf f8 ff ff ff 61 c0 fa 63 bf f8 62 bf f9 ff ff ff ff ff ff 33 4e 64 48 8a b5 63 bf fa 63 bf fa 63 bf f8 1c 2e 3d 28 49 5e 1f 38 49 5f Data Ascii: PNGIHDRT<PLTE24B,.6 """$$&$$$.0:Liq"""02>02@""",2&& ###((.###&(02<(.(0"""###!!!$$$((,+,4&&(,.4%%%###0 ((( 2$$(..822@ $$$,.8$&&&&& (,&(,.08b.0<bacb3NdHccc.=(I^8I_
2024-07-15 15:49:46 UTC	2372	IN	Data Raw: af 70 f1 cf 10 8f 40 a0 df 7f 50 90 af 8f 91 20 80 48 bf df b0 af 40 20 60 cf d6 ef b7 bc 96 bf ef 8a ef 70 30 ba 80 af bf 7f cf 7f 68 c7 98 4c a0 87 c7 d7 40 c7 50 cf 6f bf cf 6f 78 18 28 db f9 a5 87 62 ee f9 14 88 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 9c ec bd 5b 8c 2c db 79 df d7 55 b5 56 f5 b7 ea da d5 5d 7d ef ea eb 74 f7 dc 7a 66 93 67 9f 7d 78 40 ee 23 50 0c 21 e3 f8 80 10 09 8a 92 42 3e 38 38 90 4c 0a 20 2d 52 b4 05 46 8c 25 43 8e 04 10 b2 2e 80 10 04 50 02 07 71 80 e4 25 97 a7 60 f8 94 07 fa c1 41 1e a4 40 46 12 23 81 a3 24 8e 12 c7 b9 d8 89 93 48 79 0a be 55 55 dd 55 dd d5 3d dd 33 7d 99 9a f9 7e 00 79 66 ef 3d b7 ae ae 7f ad b5 be cb ff 2b 14 09 82 c8 19 85 53 ff 02 04 41 ec 0a c9 96 20 72 07 Data Ascii: p@P H@ `p0hL@Poox(bpHYs IDATx[,yUV]}tzfg}x@#P!B>88L -RF%C.Pq%`A@F#$HyUUU=3}~yf=+SA r
2024-07-15 15:49:46 UTC	538	IN	Data Raw: fd f8 a9 7f 03 82 d8 0b 2f 49 b6 04 f1 4c 20 d9 12 44 ee 20 d9 12 44 ee 20 d9 12 44 ee 20 d9 12 44 ee 78 49 b2 a5 bc 2d f1 4c 20 d9 12 44 ee 20 d9 12 44 ee 20 d9 12 44 ee 20 d9 12 44 ee 78 49 b2 fd dc 57 4e fd 1b 10 c4 5e 78 49 b2 25 88 67 02 c9 96 20 72 07 c9 96 20 72 07 c9 96 20 72 c7 4b 92 ed 57 be 70 ea df 80 20 f6 c2 4b 92 2d 15 37 12 cf 04 92 2d 41 e4 0e 92 2d 41 e4 0e 92 2d 41 e4 8e 97 24 db 5f fa ec a9 7f 03 82 d8 0b 2f 49 b6 04 f1 4c 20 d9 12 44 ee 20 d9 12 44 ee 20 d9 12 44 ee 20 d9 12 44 ee 78 49 b2 a5 48 32 f1 4c 78 49 b2 a5 e2 46 e2 99 40 b2 25 88 dc 41 b2 25 88 dc 41 b2 25 88 dc f1 92 64 fb e9 5f 3a f5 6f 40 10 7b e1 25 c9 96 20 9e 09 24 5b 82 c8 1d 24 5b 82 c8 1d 24 5b 82 c8 1d 2f 49 b6 9f fb f4 a9 7f 03 82 d8 0b 2f 49 b6 54 25 45 3c 13 48 Data Ascii: /IL D D D DxI-L D D D DxIWN^xI%g r r rKWp K-7-A-A-A$_/IL D D D DxIH2LxIF@%A%A%d_:o@{% $[$[$[/I/IT%E<H
2024-07-15 15:49:46 UTC	4744	IN	Data Raw: 6c 89 8a ae 5f 49 d5 5a 92 5b 54 ae fc 56 04 b1 25 24 db 62 71 d4 d3 a2 75 f1 fa 36 d0 2b ba 72 1b 64 c9 2d c4 b8 52 82 6a c9 96 eb 6e 2d fe ba 70 05 ee 69 00 d7 7e 99 03 98 26 74 02 91 fd 0d c4 ea 22 ee 76 71 85 57 87 dd 6e d3 f3 9a cd ae 7c 04 10 c4 5a 5e b2 6c e5 d9 b5 51 ec 02 b7 70 0b 1b ae a8 9b b9 62 52 ae ae db d3 78 e7 b6 1a 28 f1 92 2c 44 c5 f7 03 5d 7e 8b ca 44 b1 fc 0e 40 65 8d 6e 2d 05 bf 4c d7 71 8f cc cb b8 6c c7 5b f2 eb eb 72 b9 7c cd 01 9a c5 67 82 d3 d8 70 92 20 1e ca 4b 92 ed e7 be 92 f8 83 d3 6d 86 52 19 aa 1e 7c e2 7e c1 e2 42 5b 51 6c fc 0a b3 86 ff 6f dd f7 e9 6b 54 bb 8c 8d 8b 3c 6e c9 2b 72 79 16 57 d5 16 03 38 6e 9c 4a 06 da 86 dd d9 9e 4f d8 43 dc 7f 80 d6 a3 93 fb be 79 49 b2 5d e0 cc 5c e0 d7 65 4b 08 d1 02 b7 6e 02 ab 5a 25 Data Ascii: l_IZ[TV%$bqu6+rd-Rjn-pi~&t"vqWn\|Z^lQpbRx(,D]~D@en-Lql[r\|gp KmR\|~B[QlokT<n+ryW8nJOCyI]\eKnZ%
2024-07-15 15:49:46 UTC	5930	IN	Data Raw: 54 97 fa de 95 db 0d f3 9c eb 3b 3d 7b b0 ff a8 3e ea 1e a5 43 4f c5 47 13 e3 e5 db c4 35 b7 92 b1 5d 85 41 3f eb 77 54 6e e3 54 b5 d7 91 39 33 cd 91 9a 8d 3a 37 d0 10 71 63 ce db 50 16 0f 87 09 38 03 2d f9 18 7c ee b4 8f bf e0 3e 34 24 65 3e 20 67 29 83 51 0f 05 63 00 7e e8 4b 23 fa e8 e9 96 bc 2f 74 bf e3 57 03 45 c1 a3 9b 60 2b 59 dd 29 f4 4c a6 14 7e e3 b7 a2 cb 3c ef ac d5 5a 86 1e da b3 ae da 55 18 6b ca 1c 1d 2f 5e b5 b7 9e 37 7d b4 64 01 36 17 af ec 84 af 53 27 4d be 26 fc 2d 3a 61 d8 ce b5 0b 05 1b b4 9e 5a ac 71 3f 9e 27 bd 13 be 86 bb 9e c2 0b 42 1c 7d c1 7d a0 6c 07 0f 58 6d e3 60 d4 1e 2e 93 bf e1 a7 2b e5 d5 75 c1 96 e1 ee bf f9 31 7e ac 57 e7 d7 b8 81 a9 28 dc 30 37 5c 58 fd 22 1d 9a 0b ab b9 05 cd a8 09 f5 e0 f3 a6 77 a7 8e 9b 0d b6 1c 39 Data Ascii: T;={>COG5]A?wTnT93:7qcP8-\|>4$e> g)Qc~K#/tWE`+Y)L~<ZUk/^7}d6S'M&-:aZq?'B}}lXm`.+u1~W(07\X"w9
2024-07-15 15:49:46 UTC	7116	IN	Data Raw: c8 ed 49 65 fd 3b a6 88 42 67 29 ea a4 fb 0c a2 3e 1f 9f 01 ab fa fe ce f5 c6 98 98 11 d5 40 c7 5d eb 4a 4c cb 38 e3 9c 01 2b 95 4a 71 b3 52 85 85 05 da 32 c8 16 67 75 44 25 19 68 cb 46 cf aa 90 df 42 b7 82 d7 8b c5 1a 33 04 d3 4e 54 35 77 44 d9 c2 27 a4 83 02 a0 3f d9 53 45 6f e1 40 5e 00 6e b7 2c 45 57 82 6a 8b 6b 03 59 b9 5f 18 1f 36 96 ff e9 1f de 17 97 0a 39 07 db 06 ce cc 9b 7a fd 26 7a 8c c8 7c 6d 94 bf 98 2c 1f 43 fa 10 27 43 5f 63 f4 29 bd ed 15 6c f3 d4 d2 69 d0 c1 55 6f fd 81 8f 43 29 c3 f4 60 f1 2b dc 5b 38 78 1f 82 b1 52 6a 97 50 61 58 45 5d a9 de 96 cb f3 53 b3 be 68 37 14 65 6c 50 38 b3 43 1b ef 8c 28 d9 59 a2 22 6a ca b2 4e 01 ca fd ba 55 60 56 54 cd 7e 61 da 3f d2 f0 da d3 c9 56 85 4e 20 0a 46 1b cc 23 e6 e6 76 e4 0c dc 66 b7 db 03 d0 dc Data Ascii: Ie;Bg)>@]JL8+JqR2guD%hFB3NT5wD'?SEo@^n,EWjkY_69z&z\|m,C'C_c)liUoC)`+[8xRjPaXE]Sh7elP8C(Y"jNU`VT~a?VN F#vf
2024-07-15 15:49:46 UTC	8302	IN	Data Raw: 30 2d 61 dd fa 56 19 6b 8f 36 d5 46 c4 2d f5 4b f6 c9 99 34 e4 7c 01 ac a1 5a 3e fd 8e 4c e8 74 e4 ee 7a b6 f4 2e a2 21 4d e2 4f db c7 1d 2d 26 fc eb 72 75 4d 94 78 ba fc a2 b0 d4 f9 34 ba ed bb 6b 4d 1f 84 35 3f 75 69 61 d8 6e 09 fd 04 85 52 fb 96 ed 69 0f b7 46 90 1b d5 7e e1 2b f7 7c 82 9a 38 40 e9 0b b7 94 2c fa 61 71 9a c8 ca 55 ac d2 b8 c1 60 b1 b9 52 49 e6 81 a5 84 3d 43 cb 67 9d d4 72 19 79 40 6d 85 b5 31 44 d9 8f 4f 8f 8a 22 7f 9e e1 33 61 9d 46 b7 76 56 bb 8f d6 97 13 0d e7 57 6a b4 fc 26 18 42 54 ae ec 44 d1 49 5e 65 eb 31 9c de 78 22 84 9d 23 3b e4 7b c7 52 a7 47 a0 a5 f6 a9 cb af 3b 2c a9 ba 6f f0 e5 82 e4 dc dc a5 79 f2 b1 cf 4c f2 b0 93 ee 46 da 7a 08 ed 22 c4 bd 86 f8 c8 8c e6 cb 30 6e 31 c0 bd e7 69 74 2b d0 d5 7d f9 82 8c 20 08 c6 d1 44 Data Ascii: 0-aVk6F-K4\|Z>Ltz.!MO-&ruMx4kM5?uianRiF~+\|8@,aqU`RI=Cgry@m1DO"3aFvVWj&BTDI^e1x"#;{RG;,oyLFz"0n1it+} D
2024-07-15 15:49:46 UTC	2831	IN	Data Raw: da e5 cf fe f5 9f 71 fe c4 e5 ff 9e f0 2f 27 fc 55 c6 8f fe bd 7f 38 31 8f 19 19 80 9a 3f b7 69 a4 02 b8 53 e3 8c 7e d0 e0 0a 43 01 c2 3d 29 19 30 1d b0 35 ad 55 89 5c 35 2e 1f 41 64 0b b2 4e 6f 92 83 88 9c e4 76 8d eb f4 46 5e 3a 00 d3 fd 86 7d 40 86 24 0d 6d 28 97 81 0e cb 1d 6a 95 2e 84 c9 96 f2 73 3f e4 f2 17 97 f0 57 fe e2 5f 59 ca 7f 10 c2 7f 3c e1 bf 67 ff ff 4f 18 3f fb 85 d7 18 5f f8 c2 17 5e fb 3c 87 7e fd 85 2f f0 ff f3 ef d9 8f 3f f5 f9 4f bd f6 85 d7 be f0 da a7 28 9f ff c2 a7 c2 f8 04 e7 b5 d7 3e f1 f9 cf 7f ea b5 d7 3e 31 cb e7 5f fb c4 27 be f8 89 cf bf f6 c5 2f 7e f1 b5 d7 3e ff da a7 be e8 f1 a9 d7 e8 37 9f fa 3c fb e6 b5 cf 7f e2 df 8b e0 8b 9f 67 ff fc b5 39 3e f1 f7 ff c2 59 f9 f7 23 f9 47 5f fc 8c cb 5f fb 6f fe fe 3f fa 4b cb f9 85 Data Ascii: q/'U81?iS~C=)05U\5.AdNovF^:}@$m(j.s?W_Y<gO?_^<~/?O(>>1_'/~>7<g9>Y#G__o?K
2024-07-15 15:49:46 UTC	10674	IN	Data Raw: b6 39 5e de b9 e6 0a 11 5c b6 55 75 51 2a d0 24 f8 a8 13 68 00 68 5a c9 4d d0 ed 68 3e 07 2d f3 57 f0 8b b1 48 e2 33 e6 e5 6c 64 4c da 6a 6b e6 dd b3 eb f5 40 36 7c 9b fc f4 a0 18 b1 ad e8 40 4f 2f e9 e9 66 cd ee 43 6d b2 52 17 08 b9 f3 b1 34 6d 1c 92 3d 20 00 b3 b5 49 c5 4d 9b c8 c7 9b c8 f8 ed ba ba e5 59 16 5e 9c 6c 49 7e a4 a2 5a 46 c3 70 9d f8 b5 38 15 9a 24 4f b6 8a ba b0 03 8d ed 89 7a 00 86 21 d3 50 8f 2f 5b 77 a8 f1 f6 9b 13 1d d3 94 85 78 64 8a 9f 03 25 37 17 02 6a 50 9b 42 06 0d 88 16 b6 c9 9f c5 02 76 6f cb 17 8b b2 2f ba 6d d4 ee 7c 86 64 8b f4 e0 e9 da 6c 94 b7 0e e7 0f a8 5e 42 20 cd 20 65 85 3a a5 f8 8d 6a c9 3c 5b 77 01 70 3b ec 5d bd 93 23 c9 b2 cd 45 65 d5 7a 97 95 11 d6 1d 89 56 9a f3 a6 48 13 7d b3 5d 30 c9 4a 43 88 41 de c5 f9 70 66 Data Ascii: 9^\UuQ*$hhZMh>-WH3ldLjk@6\|@O/fCmR4m= IMY^lI~ZFp8$Oz!P/[wxd%7jPBvo/m\|dl^B e:j<[wp;]#EezVH}]0JCApf
2024-07-15 15:49:46 UTC	3791	IN	Data Raw: 6d d3 5e 3d 51 ba 67 db b6 66 8e 36 36 80 b7 0e b9 bd 6b 26 4c b3 24 a5 c4 77 c0 b5 97 55 00 25 b3 f0 07 b9 0c 32 e6 a4 03 ab 61 6b bc f8 56 2f 6a 66 2e b7 b3 62 59 e4 32 5a 40 6f 06 32 01 c8 fa 32 37 12 2c db 11 8f db ae b2 dc 1a c5 a4 55 d9 22 97 c3 b1 0a fd 1a f5 7a d6 35 80 0e 5d 69 3b e0 ec 6f 2e b1 5d f1 02 c3 e9 40 e9 7e 82 65 ab 98 bc aa aa 11 15 5a e3 f6 8d a1 cb 45 50 d1 1f 15 c9 07 30 bb 71 11 bb 3b 6d 20 4d 1b 46 fb 40 0a d2 01 31 37 d9 c7 42 51 27 2d ea b2 a6 2f 78 9b 60 d9 ba e3 6f 8a 5a 54 df 10 00 62 13 da 51 b3 8c a2 5d 00 06 80 96 a1 e4 80 26 44 28 39 cd 86 4d 0e 78 d8 ab 98 5e 9f b3 b4 ed 57 6d a2 65 cb c7 df f0 41 90 61 14 a1 bb d3 6d 55 71 53 bb 18 94 ed 72 5c ad 56 36 d9 9d 31 35 82 3c 9f ac a6 13 d0 82 49 7c 52 e2 53 58 7c 43 07 66 Data Ascii: m^=Qgf66k&L$wU%2akV/jf.bY2Z@o227,U"z5]i;o.]@~eZEP0q;m MF@17BQ'-/x`oZTbQ]&D(9Mx^WmeAamUqSr\V615<I\|RSX\|Cf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	65070	76.76.21.164	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:46 UTC	628	OUT	GET /static/js/main.b963c2e4.js HTTP/1.1 Host: nextgen-widget.vercel.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:46 UTC	529	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 2074287 Cache-Control: s-maxage=31536000, immutable Content-Disposition: inline; filename="main.b963c2e4.js" Content-Length: 1779444 Content-Type: application/javascript; charset=utf-8 Date: Mon, 15 Jul 2024 15:49:46 GMT Etag: "c31084dba070a068dd086c002e87ce3e" Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Cache: HIT X-Vercel-Id: iad1::sbmg2-1721058586084-ea2a3bb731af Connection: close
2024-07-15 15:49:46 UTC	2372	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 62 39 36 33 63 32 65 34 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 34 31 32 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 21 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 5f 5f 53 45 4e 54 52 59 5f 42 52 4f 57 53 45 52 5f 42 55 4e 44 4c 45 5f 5f 26 26 5f 5f 53 45 4e 54 52 59 5f 42 52 4f 57 53 45 52 5f 42 55 4e 44 4c 45 5f 5f 29 26 26 22 5b 6f 62 6a 65 63 74 20 70 72 6f 63 65 73 73 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 Data Ascii: /! For license information please see main.b963c2e4.js.LICENSE.txt /(()=>{var e={4125:(e,t,n)=>{"use strict";function r(){return!("undefined"!==typeof __SENTRY_BROWSER_BUNDLE__&&__SENTRY_BROWSER_BUNDLE__)&&"[object process]"===Object.prototype.toString
2024-07-15 15:49:46 UTC	1024	IN	Data Raw: 74 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 74 7d 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 64 65 66 61 75 6c 74 3d 74 7d 29 2c 61 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 69 6d 70 6f 72 74 53 74 61 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 74 3d 7b 7d 3b 69 66 28 6e 75 6c 6c 21 3d 65 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 22 64 65 66 61 75 6c 74 22 21 3d 3d 6e 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 6e 29 26 26 72 28 74 2c Data Ascii: t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),a=this&&this.__importStar\|\|function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var n in e)"default"!==n&&Object.prototype.hasOwnProperty.call(e,n)&&r(t,
2024-07-15 15:49:46 UTC	4744	IN	Data Raw: 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 6f 3d 6e 28 35 38 39 33 29 2c 73 3d 61 28 6e 28 34 33 33 37 29 29 2c 6c 3d 61 28 6e 28 35 36 39 38 29 29 2c 75 3d 6e 28 34 35 38 33 29 2c 63 3d 7b 6d 61 72 67 69 6e 3a 32 30 2c 62 6f 72 64 65 72 52 61 64 69 75 73 3a 38 2c 70 61 64 64 69 6e 67 3a 34 30 2c 62 61 63 6b 67 72 6f 75 6e 64 3a 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 29 22 2c 74 65 78 74 41 6c 69 67 6e 3a 22 63 65 6e 74 65 72 22 2c 66 6f 6e 74 46 61 6d 69 6c 79 3a 22 76 61 72 28 2d 2d 66 6f 6e 74 2d 73 79 73 74 65 6d 29 22 7d 3b 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 61 2c 41 2c 64 3d 65 2e 65 6c 49 64 2c 67 3d 65 Data Ascii: ineProperty(t,"__esModule",{value:!0});var o=n(5893),s=a(n(4337)),l=a(n(5698)),u=n(4583),c={margin:20,borderRadius:8,padding:40,background:"rgba(0,0,0,0.1)",textAlign:"center",fontFamily:"var(--font-system)"};t.default=function(e){var t,n,a,A,d=e.elId,g=e
2024-07-15 15:49:46 UTC	5930	IN	Data Raw: 73 78 29 28 50 2e 64 65 66 61 75 6c 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 6c 65 2e 63 68 69 6c 64 72 65 6e 2c 64 61 74 61 3a 6e 2c 64 61 74 61 50 61 74 68 3a 72 65 2c 61 74 6f 6d 50 61 74 68 3a 69 28 69 28 5b 5d 2c 6e 65 2c 21 30 29 2c 5b 74 2e 6b 65 79 5d 2c 21 31 29 2c 63 61 6c 6c 62 61 63 6b 73 3a 65 2e 63 61 6c 6c 62 61 63 6b 73 7d 29 7d 29 29 3b 63 61 73 65 22 6d 61 72 71 75 65 65 22 3a 76 61 72 20 75 65 3d 74 2e 70 72 6f 70 73 3b 72 65 74 75 72 6e 28 30 2c 6f 2e 6a 73 78 29 28 6b 2e 64 65 66 61 75 6c 74 2c 72 28 7b 7d 2c 75 65 2c 7b 63 61 6c 6c 62 61 63 6b 73 3a 65 2e 63 61 6c 6c 62 61 63 6b 73 2c 61 74 6f 6d 50 61 74 68 3a 6e 65 2c 64 61 74 61 50 61 74 68 3a 69 65 2c 61 74 6f 6d 4b 65 79 3a 74 2e 6b 65 79 7d 2c 7b 63 68 69 6c 64 72 65 6e 3a 28 30 2c Data Ascii: sx)(P.default,{children:le.children,data:n,dataPath:re,atomPath:i(i([],ne,!0),[t.key],!1),callbacks:e.callbacks})}));case"marquee":var ue=t.props;return(0,o.jsx)(k.default,r({},ue,{callbacks:e.callbacks,atomPath:ne,dataPath:ie,atomKey:t.key},{children:(0,
2024-07-15 15:49:46 UTC	7116	IN	Data Raw: 6d 50 61 74 68 3a 6e 65 2c 64 61 74 61 50 61 74 68 3a 69 65 2c 61 74 6f 6d 4b 65 79 3a 74 2e 6b 65 79 7d 29 3b 63 61 73 65 22 62 6c 6f 67 50 6f 73 74 43 6f 6e 74 65 6e 74 22 3a 72 65 74 75 72 6e 28 30 2c 6f 2e 6a 73 78 29 28 52 2e 64 65 66 61 75 6c 74 2c 7b 61 74 6f 6d 50 61 74 68 3a 6e 65 2c 64 61 74 61 50 61 74 68 3a 69 65 2c 61 74 6f 6d 4b 65 79 3a 74 2e 6b 65 79 7d 29 3b 63 61 73 65 22 62 6c 6f 67 50 6f 73 74 49 6d 61 67 65 22 3a 72 65 74 75 72 6e 28 30 2c 6f 2e 6a 73 78 29 28 59 2e 64 65 66 61 75 6c 74 2c 7b 76 61 6c 75 65 3a 28 30 2c 63 2e 67 65 74 44 61 74 61 29 28 6e 2c 69 65 2c 22 76 61 6c 75 65 22 29 2c 61 74 6f 6d 50 61 74 68 3a 6e 65 2c 64 61 74 61 50 61 74 68 3a 69 65 2c 61 74 6f 6d 4b 65 79 3a 74 2e 6b 65 79 7d 29 3b 63 61 73 65 22 62 6c 6f Data Ascii: mPath:ne,dataPath:ie,atomKey:t.key});case"blogPostContent":return(0,o.jsx)(R.default,{atomPath:ne,dataPath:ie,atomKey:t.key});case"blogPostImage":return(0,o.jsx)(Y.default,{value:(0,c.getData)(n,ie,"value"),atomPath:ne,dataPath:ie,atomKey:t.key});case"blo
2024-07-15 15:49:46 UTC	8302	IN	Data Raw: 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 6e 7c 7c 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 72 2c 69 3d 30 2c 61 3d 74 2e 6c 65 6e 67 74 68 3b 69 3c 61 3b 69 2b 2b 29 21 72 26 26 69 20 69 6e 20 74 7c 7c 28 72 7c 7c 28 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2c 30 2c 69 29 29 2c 72 5b 69 5d 3d 74 5b 69 5d 29 3b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 63 61 74 28 72 7c 7c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 29 7d 2c 69 3d 74 68 69 73 26 26 74 68 69 Data Ascii: e,t,n){"use strict";var r=this&&this.__spreadArray\|\|function(e,t,n){if(n\|\|2===arguments.length)for(var r,i=0,a=t.length;i<a;i++)!r&&i in t\|\|(r\|\|(r=Array.prototype.slice.call(t,0,i)),r[i]=t[i]);return e.concat(r\|\|Array.prototype.slice.call(t))},i=this&&thi
2024-07-15 15:49:46 UTC	6676	IN	Data Raw: 51 6b 4a 43 55 6c 4a 53 59 6d 4a 69 67 6f 4b 43 6b 70 4b 53 73 72 4b 79 77 73 4c 43 30 74 4c 53 38 76 4c 7a 41 77 4d 44 45 78 4d 54 4d 7a 4d 7a 59 32 4e 6a 63 33 4e 7a 6b 35 4f 54 6f 36 4f 6a 73 37 4f 7a 30 39 50 54 38 2f 50 30 42 41 51 45 46 42 51 55 4a 43 51 6b 4e 44 51 30 52 45 52 45 56 46 52 55 5a 47 52 6b 64 48 52 30 68 49 53 45 6c 4a 53 55 70 4b 53 6b 74 4c 53 30 78 4d 54 45 31 4e 54 55 35 4f 54 6b 39 50 54 31 42 51 55 46 46 52 55 56 4a 53 55 6c 4e 54 55 31 52 55 56 46 56 56 56 56 5a 57 56 6c 64 58 56 31 68 59 57 46 6c 5a 57 56 70 61 57 6c 74 62 57 31 78 63 58 46 31 64 58 56 35 65 58 6c 39 66 58 32 42 67 59 47 46 68 59 57 4a 69 59 6d 4e 6a 59 32 52 6b 5a 47 56 6c 5a 57 5a 6d 5a 6d 64 6e 5a 32 68 6f 61 47 6c 70 61 57 70 71 61 6d 74 72 61 32 78 73 62 Data Ascii: QkJCUlJSYmJigoKCkpKSsrKywsLC0tLS8vLzAwMDExMTMzMzY2Njc3Nzk5OTo6Ojs7Oz09PT8/P0BAQEFBQUJCQkNDQ0REREVFRUZGRkdHR0hISElJSUpKSktLS0xMTE1NTU5OTk9PT1BQUFFRUVJSUlNTU1RUVFVVVVZWVldXV1hYWFlZWVpaWltbW1xcXF1dXV5eXl9fX2BgYGFhYWJiYmNjY2RkZGVlZWZmZmdnZ2hoaGlpaWpqamtra2xsb
2024-07-15 15:49:46 UTC	10674	IN	Data Raw: 4e 4d 6a 44 39 53 42 76 6e 73 77 64 34 57 49 6b 44 73 7a 77 6b 4d 43 30 4c 43 41 77 4d 4e 77 54 77 67 49 70 61 4d 30 50 76 62 43 55 48 43 44 50 48 61 30 50 4f 72 41 64 66 4b 49 64 77 67 73 42 4b 39 76 34 75 77 72 6a 61 43 43 68 67 4e 77 61 67 41 49 73 33 77 2f 74 45 58 6a 4a 6f 38 6b 67 67 6c 4c 63 43 4a 41 43 4b 2f 6f 4e 49 4a 50 4b 4d 36 77 67 59 76 50 62 39 73 41 43 4b 7a 51 4e 50 37 4f 77 74 41 4d 67 55 35 4c 62 39 54 41 43 4b 6f 34 4e 50 36 65 39 49 2f 34 67 4e 44 50 62 34 2b 41 43 4b 65 67 4e 54 72 36 33 6f 2f 6f 67 4a 4e 4c 62 34 71 41 43 4b 57 49 4e 58 71 32 38 59 2b 49 67 4a 58 50 62 31 6e 2b 43 47 51 77 4e 58 62 43 77 6c 41 6b 67 46 68 4c 62 30 5a 41 43 4c 67 61 74 62 4c 65 34 67 39 55 67 34 55 73 4e 62 44 75 33 34 65 63 67 35 77 76 62 30 2f 51 Data Ascii: NMjD9SBvnswd4WIkDszwkMC0LCAwMNwTwgIpaM0PvbCUHCDPHa0POrAdfKIdwgsBK9v4uwrjaCChgNwagAIs3w/tEXjJo8kgglLcCJACK/oNIJPKM6wgYvPb9sACKzQNP7OwtAMgU5Lb9TACKo4NP6e9I/4gNDPb4+ACKegNTr63o/ogJNLb4qACKWINXq28Y+IgJXPb1n+CGQwNXbCwlAkgFhLb0ZACLgatbLe4g9Ug4UsNbDu34ecg5wvb0/Q
2024-07-15 15:49:46 UTC	11860	IN	Data Raw: 57 43 76 65 4d 49 2b 76 4b 41 43 53 6f 42 76 51 67 41 72 42 75 41 76 2f 71 43 75 59 73 41 43 76 32 41 53 38 6b 58 32 66 75 41 71 37 6c 53 74 5a 51 49 6f 5a 77 50 34 4b 76 47 45 4e 46 54 65 4a 41 64 67 72 75 63 43 42 6a 73 68 6f 76 65 46 38 66 6c 67 4c 68 34 63 72 69 47 41 41 68 42 67 45 31 75 41 62 73 35 61 49 71 54 43 51 76 4e 49 46 65 52 67 43 71 51 41 63 31 6f 43 47 61 56 69 4f 76 6e 49 4d 4f 55 43 47 42 30 41 49 77 74 45 4d 77 44 69 46 75 75 42 79 76 59 49 4b 49 34 43 46 5a 6b 41 63 78 76 43 46 74 4c 43 4b 78 41 49 4a 2b 78 61 44 55 4e 42 71 75 68 45 4f 37 66 69 44 72 39 43 4d 77 67 49 49 44 52 43 44 51 6f 42 78 78 4d 45 4e 76 56 43 44 72 4d 41 4d 79 58 49 48 43 4e 43 42 4f 2f 43 4e 78 4b 45 4e 46 61 6c 2f 71 71 41 4d 79 31 49 48 4a 76 6c 2f 4f 36 43 Data Ascii: WCveMI+vKACSoBvQgArBuAv/qCuYsACv2AS8kX2fuAq7lStZQIoZwP4KvGENFTeJAdgrucCBjshoveF8flgLh4criGAAhBgE1uAbs5aIqTCQvNIFeRgCqQAc1oCGaViOvnIMOUCGB0AIwtEMwDiFuuByvYIKI4CFZkAcxvCFtLCKxAIJ+xaDUNBquhEO7fiDr9CMwgIIDRCDQoBxxMENvVCDrMAMyXIHCNCBO/CNxKENFal/qqAMy1IHJvl/O6C
2024-07-15 15:49:46 UTC	10234	IN	Data Raw: 64 67 71 33 59 69 6e 70 45 4d 63 32 49 48 36 79 61 6d 78 44 48 43 30 6e 53 6a 66 77 48 6d 4a 67 78 43 6f 64 41 75 69 37 67 4e 2f 74 6c 48 37 39 4b 32 41 44 4b 39 6a 42 45 72 61 77 68 6a 33 6c 33 6f 7a 66 62 79 31 69 6c 51 7a 4a 43 7a 67 4c 73 46 46 47 36 42 73 73 63 31 57 5a 77 76 54 78 78 51 46 73 68 4c 48 36 2f 51 37 63 56 59 53 41 50 58 77 31 41 42 74 64 31 46 36 2f 76 57 34 56 47 33 54 66 58 51 54 41 35 75 36 2f 42 36 35 48 58 2b 55 46 34 6e 66 33 36 71 56 52 52 2f 4c 54 32 77 78 59 53 63 48 35 33 45 33 77 61 73 37 2b 4d 58 33 30 4b 67 4e 57 4a 38 59 2b 63 72 2f 66 47 6e 4a 30 76 37 72 48 67 42 55 4f 78 49 39 63 58 72 67 47 48 4f 65 6e 4c 6a 46 67 74 56 6a 32 30 2f 59 57 37 34 39 2f 63 43 2f 2b 4b 68 37 59 6e 37 5a 48 78 78 72 69 6f 48 2f 41 4e 58 2b Data Ascii: dgq3YinpEMc2IH6yamxDHC0nSjfwHmJgxCodAui7gN/tlH79K2ADK9jBErawhj3l3ozfby1ilQzJCzgLsFFG6Bssc1WZwvTxxQFshLH6/Q7cVYSAPXw1ABtd1F6/vW4VG3TfXQTA5u6/B65HX+UF4nf36qVRR/LT2wxYScH53E3was7+MX30KgNWJ8Y+cr/fGnJ0v7rHgBUOxI9cXrgGHOenLjFgtVj20/YW749/cC/+Kh7Yn7ZHxxrioH/ANX+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	65074	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:46 UTC	702	OUT	GET /lib_LUGoPiqXXlDptSWA/b0hytbjf7cdicnze.svg?h=80&dpr=2 HTTP/1.1 Host: www.umso.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:46 UTC	254	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 2897 Content-Type: image/svg+xml Last-Modified: Fri, 03 May 2024 10:23:22 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:49:46 GMT Connection: close
2024-07-15 15:49:46 UTC	932	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 30 20 33 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 33 36 2e 38 20 31 32 48 35 31 76 32 2e 36 68 2d 35 2e 36 76 31 34 2e 36 68 2d 33 56 31 34 2e 36 68 2d 35 2e 36 56 31 32 7a 6d 31 33 2e 36 20 34 2e 37 48 35 33 76 32 2e 34 6c 2e 35 2d 31 61 34 2e 36 20 34 2e 36 20 30 20 30 20 31 20 32 2d 31 2e 35 20 33 2e 35 20 33 2e 35 20 30 20 30 20 31 20 31 2e 32 2d 2e 32 68 31 2e 31 76 32 2e 37 61 39 20 39 20 30 20 30 20 30 2d 2e 36 20 30 20 35 2e 32 20 35 2e 32 20 30 20 30 20 30 2d 2e 36 2d 2e 31 63 2d 2e 35 20 30 2d 31 20 30 2d 31 2e 34 2e 33 61 33 20 33 20 30 20 30 20 30 Data Ascii: <svg viewBox="0 0 140 34" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M36.8 12H51v2.6h-5.6v14.6h-3V14.6h-5.6V12zm13.6 4.7H53v2.4l.5-1a4.6 4.6 0 0 1 2-1.5 3.5 3.5 0 0 1 1.2-.2h1.1v2.7a9 9 0 0 0-.6 0 5.2 5.2 0 0 0-.6-.1c-.5 0-1 0-1.4.3a3 3 0 0 0
2024-07-15 15:49:46 UTC	1965	IN	Data Raw: 2e 33 2e 35 2e 34 20 31 20 2e 36 6c 31 2e 32 2e 33 20 31 2e 36 2e 33 20 31 2e 35 2e 35 63 2e 35 2e 31 2e 39 2e 33 20 31 2e 33 2e 36 73 2e 37 2e 36 2e 39 20 31 63 2e 32 2e 35 2e 34 20 31 20 2e 34 20 31 2e 36 20 30 20 2e 37 2d 2e 32 20 31 2e 33 2d 2e 36 20 31 2e 39 61 34 20 34 20 30 20 30 20 31 2d 31 2e 33 20 31 2e 32 20 36 2e 33 20 36 2e 33 20 30 20 30 20 31 2d 31 2e 38 2e 37 20 39 2e 33 20 39 2e 33 20 30 20 30 20 31 2d 32 20 2e 32 20 38 2e 36 20 38 2e 36 20 30 20 30 20 31 2d 32 2e 32 2d 2e 32 63 2d 2e 37 2d 2e 32 2d 31 2e 33 2d 2e 35 2d 31 2e 38 2d 2e 38 41 34 20 34 20 30 20 30 20 31 20 37 33 20 32 37 63 2d 2e 33 2d 2e 35 2d 2e 34 2d 31 2e 32 2d 2e 34 2d 31 2e 39 68 32 2e 38 7a 6d 39 2e 32 2d 38 2e 35 68 32 2e 31 56 31 33 68 32 2e 38 76 33 2e 37 48 39 32 Data Ascii: .3.5.4 1 .6l1.2.3 1.6.3 1.5.5c.5.1.9.3 1.3.6s.7.6.9 1c.2.5.4 1 .4 1.6 0 .7-.2 1.3-.6 1.9a4 4 0 0 1-1.3 1.2 6.3 6.3 0 0 1-1.8.7 9.3 9.3 0 0 1-2 .2 8.6 8.6 0 0 1-2.2-.2c-.7-.2-1.3-.5-1.8-.8A4 4 0 0 1 73 27c-.3-.5-.4-1.2-.4-1.9h2.8zm9.2-8.5h2.1V13h2.8v3.7H92

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	65068	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:46 UTC	708	OUT	GET /lib_LUGoPiqXXlDptSWA/csi5g5qmp4uscbth.png?w=200&h=40&dpr=2 HTTP/1.1 Host: www.umso.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:46 UTC	250	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 9764 Content-Type: image/png Last-Modified: Fri, 03 May 2024 09:59:15 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:49:46 GMT Connection: close
2024-07-15 15:49:46 UTC	936	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 8e 00 00 00 4f 08 03 00 00 00 cb 19 d2 eb 00 00 03 00 50 4c 54 45 4c 69 71 f9 f3 ff f8 f2 ff f7 f2 ff f8 f3 fe f8 f3 ff f7 f3 ff f8 f3 ff f8 f3 ff f9 f3 ff f8 f3 ff f8 f3 ff f9 f5 ff f8 f3 ff f7 f3 ff f9 f4 ff f8 f3 ff f8 f3 ff f7 f2 ff f9 f6 ff f8 f3 ff f8 f3 ff f8 f4 ff f7 f3 ff f8 f2 ff f8 f3 ff f8 f3 ff f8 f3 ff f8 f4 ff f8 f3 ff f8 f2 ff f8 f3 ff f8 f3 ff f7 f3 ff f9 f3 ff f8 f3 ff f8 f4 ff f8 f2 ff f8 f3 ff f8 f2 ff f8 f4 ff f8 f4 ff f8 f3 ff f7 f2 ff f9 f3 ff f8 f3 ff f8 f3 ff f8 f3 ff f8 f3 ff f8 f2 ff f8 f4 ff f8 f3 ff f8 f3 ff f9 f4 ff f9 f3 ff f8 f3 ff f8 f4 ff f8 f3 ff f8 f3 ff f8 f3 ff f8 f3 ff f8 f3 ff f9 f3 ff f8 f3 ff f8 f3 fe f8 f3 ff f8 f3 ff f8 f3 ff f9 f3 ff f8 f3 ff f8 f2 ff f8 Data Ascii: PNGIHDROPLTELiq
2024-07-15 15:49:46 UTC	2372	IN	Data Raw: 38 11 f7 0a a6 b1 17 14 41 36 d5 e1 0d 10 f9 ce e4 bd eb a8 a2 fb 2b f5 f2 a4 a0 28 1e 3c 19 47 2d e6 d2 4e 20 4a 3d ef a5 e0 a3 d0 f3 33 0f 15 4c b0 51 4b cc d5 cf 34 37 54 de 52 9a 22 01 f4 f4 50 f8 ab 53 5d b5 5c 35 4d 4f 45 d4 ec d5 d4 5f 0c 5a 59 ee 98 cf 9f de 3b f3 e0 5b 6d ed d6 03 db 9b 69 96 cc db cd 79 7e df d2 6f 61 87 8d ed 93 8a 72 0c e9 7f dd f1 fd cf 90 82 75 85 b0 f6 67 7c d2 d1 dd 7c f4 7e 0a 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 9c ed 5c 0b 70 4c e7 db 7f ed d9 3d ef 3a 9b 5d b2 a2 1b 83 c8 44 19 ac 24 22 91 54 58 d9 71 a9 c9 10 52 36 99 56 52 04 4d d5 34 ec 5f 5d 8a 52 71 99 ac 4b 28 32 5a e3 d2 0b a5 7a 11 31 42 46 5b 97 84 f0 69 fb b9 94 9a 06 d5 2a fe 6a a8 f6 73 7d df 73 36 fd e6 Data Ascii: 8A6+(<G-N J=3LQK47TR"PS]\5MOE_ZY;[miy~oarug\|\|~pHYs IDATx\pL=:]D$"TXqR6VRM4_]RqK(2Zz1BF[i*js}s6
2024-07-15 15:49:46 UTC	538	IN	Data Raw: f1 fc 97 fc d2 3c 37 88 b7 21 3b 6d a0 09 66 10 8a 16 3b ce 9b e0 77 3f 4d fd 02 5a 4a 0b 4d 14 25 bb 28 0a 05 c1 62 d0 f2 4e ef 8f 1a 35 aa 63 10 6f d5 04 5c 98 5f 39 f6 cd d4 d4 9f 09 45 ce af 5b e7 53 91 ab 83 f7 9f 38 4c 55 c4 97 1b 7a 6c 66 93 13 5a d1 37 f5 48 02 f9 7a c3 f1 22 3a d1 2e 10 0e 88 a1 5e 0a 36 25 50 8f 4d 58 74 21 5d 88 f9 d2 a3 42 d4 4d 7b 2e 37 38 2e 39 10 c7 04 08 62 1d 67 21 24 27 f0 40 8b 47 da e3 77 33 06 b0 07 e1 04 29 c4 c1 89 e9 75 c8 81 d1 a7 5a 7e f0 da 9c fb 25 05 8b 99 44 2d 34 2e aa 5d bb 41 cb 97 77 ea f4 fe fb a3 46 6d 7f f5 d5 8e ed 82 cd 5a c6 d0 5f 4e 8e 3d f9 66 6a 6a ea a9 6b f7 ef 7f 45 28 42 e3 ac 92 81 24 13 d9 af c6 59 3b 88 88 14 16 3a 04 4f 26 1a 38 a5 1e 65 03 be fe ce 0a 2f 9c 18 c4 59 29 d3 2b d1 bc 47 e3 Data Ascii: <7!;mf;w?MZJM%(bN5co\_9E[S8LUzlfZ7Hz":.^6%PMXt!]BM{.78.9bg!$'@Gw3)uZ~%D-4.]AwFmZ_N=fjjkE(B$Y;:O&8e/Y)+G
2024-07-15 15:49:46 UTC	4744	IN	Data Raw: a7 88 2c 19 c1 e2 ac c5 68 5b 7d 2a 24 fc 53 80 43 af 93 32 4d 34 07 44 22 72 72 48 c7 be a1 cc 16 46 82 57 12 91 84 90 84 3d 50 d5 12 9d e4 c0 af ab 27 34 82 d6 d8 2c 87 ab 10 43 8c a2 ef 7c fa 4a 5c fc b9 ec 1d 18 d9 1c 52 a9 d6 55 f1 60 66 09 16 14 34 f4 b5 88 b3 8b 58 44 56 9b 15 21 09 d9 c8 5a 29 3b b3 28 48 a9 d3 7c bc 72 2b 01 ed 14 82 84 0f 0a 99 16 75 b0 58 b6 6c d9 b2 2e 5d 16 3d ff 6a c0 9c 95 65 ec db b2 f5 de bd 7e 14 11 99 22 54 d6 69 9c 45 01 b9 4a ca 27 27 68 b6 3e 82 52 64 87 69 68 88 7a cb 53 87 03 8a 52 82 88 b7 de dc b6 66 4d fc 6f 77 31 72 29 02 a0 a0 01 ed 58 9c 7c 65 e3 2b 71 55 47 f7 4b d8 84 38 36 62 31 e3 d9 ca 54 19 41 bb 3c c9 29 7f 4f d2 73 d2 71 e5 12 06 bd b6 4e c4 83 3f d1 fa 2a 1e c4 88 0e c4 82 61 9d 28 25 20 f4 43 cc f1 Data Ascii: ,h[}$SC2M4D"rrHFW=P'4,C\|J\RU`f4XDV!Z);(H\|r+uXl.]=je~"TiEJ''h>RdihzSRfMow1r)X\|e+qUGK86b1TA<)OsqN?a(% C
2024-07-15 15:49:46 UTC	1174	IN	Data Raw: 1d 46 30 fa 4f 2c 76 b0 5b 38 4d e7 02 9b 5a 93 1d e7 0d 0b 6c e6 02 fc 65 22 de b5 9a fd 80 d4 2c 88 83 42 2d 2a 7f cd 2f c3 0f 6d 4d 41 d8 ed f4 a2 62 92 41 b0 24 bb fd ae 5d 24 a7 1b b3 89 3a 2b 59 3c 68 a4 bb 80 24 e6 aa b3 22 ab 7e 74 d9 8f b6 e9 92 0e ab ad fb ce ff cd 3f 85 17 ec 19 00 38 67 96 b0 23 93 f4 71 d0 bb 83 58 8f f5 26 7b 82 88 52 37 d7 ed 4a 36 82 48 29 81 bd fe 24 68 63 4f 25 72 c9 a3 b5 82 14 a4 b1 47 d4 bf 28 0f 9b 7c 6d 6f 06 00 7a 24 49 48 f4 d8 af 93 f9 65 d7 00 b1 de e5 c0 a8 67 b0 7a 03 0f 40 d7 e7 24 24 d9 ad 2f ea 2c 3a fa 0d 28 e9 31 34 b9 04 8c 71 46 e7 10 6f 5d 08 34 1e 80 bd c5 19 47 95 32 6d 46 7a 7b 92 3f 10 76 50 67 25 af 88 13 ed 20 55 c4 b4 94 be b4 b3 4a ed ad 8a 2e d8 52 50 53 53 53 33 6f c3 bd 9a a1 f3 76 d7 fb ac Data Ascii: F0O,v[8MZle",B-*/mMAbA$]$:+Y<h$"~t?8g#qX&{R7J6H)$hcO%rG(\|moz$IHegz@$$/,:(14qFo]4G2mFz{?vPg% UJ.RPSSS3ov

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	65073	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:46 UTC	691	OUT	GET /lib_LUGoPiqXXlDptSWA/amufjz1o6hqa4qle.png HTTP/1.1 Host: www.umso.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:46 UTC	250	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 4737 Content-Type: image/png Last-Modified: Fri, 03 May 2024 09:59:16 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:49:46 GMT Connection: close
2024-07-15 15:49:46 UTC	936	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 64 08 03 00 00 00 47 3c 65 66 00 00 00 3c 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4c 69 71 00 00 00 00 00 00 6d 32 b6 2c 00 00 00 14 74 52 4e 53 1a 10 0f 0d 11 14 13 18 16 17 0c 0b 09 08 07 05 04 00 03 01 a5 35 16 68 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 11 cb 49 44 41 54 68 81 55 5a 89 96 24 29 8c 13 60 b0 0d 71 64 d6 fc ff bf ee 93 20 7b 77 6b de 74 77 65 46 10 e0 43 96 ec 00 10 c8 36 e0 98 ab 00 70 47 35 5c c3 81 0e 00 b5 22 10 03 3d 31 80 31 07 80 ab 00 63 75 e3 f7 fc 23 0c ef d0 d5 c0 c0 a3 bf 9d b7 3b f2 fc 12 fc 2b ce 9a 6b 34 Data Ascii: PNGIHDRddG<ef<PLTELiqm2,tRNS5hpHYsIDAThUZ$)`qd {wktweFC6pG5\"=11cu#;+k4
2024-07-15 15:49:46 UTC	2372	IN	Data Raw: 7e 2f f8 06 bc 8f 84 4f ed 61 c9 48 8a b3 d4 2a d6 d0 ea 1b 8d a9 2e 18 54 48 c9 d3 5e 83 7b 9a 6e d5 f1 b5 6d f9 28 f9 09 c7 53 72 9b 4b 70 42 6b 34 c4 50 3e f1 b3 4f f6 08 e4 15 3a c8 b1 dc 20 56 f1 29 8c 4c 58 e9 28 de e4 63 e3 87 83 35 8d 78 19 8e 82 99 e5 cd 8e 51 a3 dc ba fd 03 b4 86 4a 23 77 5c 1d be f0 b2 5a a1 10 50 b4 e3 21 af 0a 44 06 ee 1d 71 d3 51 e6 73 f1 b1 c6 44 63 92 85 3d 7c 2c cb 62 bf 5e ae 87 c7 13 63 98 00 8d a0 31 3c 71 0d f4 e0 e1 e8 cc e2 ba 8e 2b a6 67 23 3c 7b 0f 5c a6 b4 59 66 65 4d 60 7c 4c 98 ae 9c bb c3 09 12 0c d0 41 10 06 ca 04 2c 62 e0 f6 fc b3 c8 7b 57 f4 c5 03 33 04 4f 7c 65 e4 8e 4c 42 0a f7 2c 30 e7 83 c6 7f 78 95 2b 51 86 c2 f2 e4 55 e4 20 38 5b a7 df 91 e9 a3 60 78 ab 45 0e d0 5a ac fb ed 50 0c 2e f1 32 49 78 d2 3e Data Ascii: ~/OaH*.TH^{nm(SrKpBk4P>O: V)LX(c5xQJ#w\ZP!DqQsDc=\|,b^c1<q+g#<{\YfeM`\|LA,b{W3O\|eLB,0x+QU 8[`xEZP.2Ix>
2024-07-15 15:49:46 UTC	538	IN	Data Raw: 35 c1 99 4f 63 67 c5 2b e7 27 e4 b6 34 84 02 5c 1d d1 2d 55 f9 f4 55 bd dc be 58 f5 53 41 72 c3 2a 93 cc c6 0a cf ba 55 ef 69 e6 df 46 76 be 83 aa 16 4b 4b 7c 88 98 5b a9 b3 a1 95 58 24 00 a2 9d 9d 61 f9 e0 56 6b 45 85 8f 76 66 38 6c 3f 25 5b 97 ec 95 0f f6 cf 38 9b 8a 10 25 b5 34 8e 0b e4 6c 57 b3 74 36 de ba 7b 02 a9 4e 5f ec 21 1e 6a 5c dd 15 1f ac db 32 d5 b3 f3 4a b3 8a fc ae 14 be a5 9e 1a 14 ab 6c ff d1 3c c5 3c 6e d6 4a 09 21 a8 b1 d6 31 db 92 ac 90 f4 98 4a 2c ea de c0 4b 68 e1 51 94 5d f9 e4 16 2f 94 13 b5 a8 69 df d4 b1 61 f5 62 72 0f 2a c7 a8 bb 41 4f 38 94 3c e0 68 84 9c aa e8 17 e6 bc 06 6a 95 39 aa be d0 ee ba 9a dc 2a 16 fc b4 4b 47 27 45 a4 a7 91 b2 b0 b2 73 17 25 b2 e9 4b 89 9e 34 00 d1 69 13 40 51 19 96 80 57 37 6e 5f 12 d4 d4 ea 56 ac Data Ascii: 5Ocg+'4\-UUXSArUiFvKK\|[X$aVkEvf8l?%[8%4lWt6{N_!j\2Jl<<nJ!1J,KhQ]/iabrAO8<hj9*KG'Es%K4i@QW7n_V
2024-07-15 15:49:46 UTC	891	IN	Data Raw: a6 66 f4 b0 67 5e de a9 63 36 48 14 e6 8f d0 5f 21 70 e6 ef 76 a6 66 ac b2 18 31 2a 15 8c ef 39 7b 70 a4 67 35 a4 63 69 af 27 d9 20 7f 60 3e 2b 83 6a 98 28 5c a5 54 fa ee b6 09 b9 25 3d f2 6f 32 cc 0e b0 46 50 80 4f fa 33 ea 1f 2b 53 16 ea ef fb 4a 0a 08 ce 69 1e 3d 73 e1 e5 f6 92 7d 1f aa 92 d3 40 fc 41 82 fa 69 03 e3 62 12 b0 d3 46 0e 35 be a4 77 67 ea cc f3 38 99 f3 f3 d9 5d 78 e9 36 36 0a e4 fc e4 8e 68 eb 1b 5b c6 d3 3a 87 ee 4a ba 93 68 0a e7 0a 51 9e a2 52 2d 7d a1 18 3c 58 0d 59 b8 59 a6 54 4b 7b 67 a4 10 70 35 2e 55 b2 fc c8 d9 e2 cc 0b f6 2a 4e 6c 15 f2 2e d3 e0 82 34 4b cd df f8 fe ba c8 a7 86 29 73 ce 86 74 e6 04 fe c8 4a 68 89 c9 97 02 88 45 3c f0 47 42 84 93 d1 c1 e9 48 90 41 fd e6 e4 1c 8c cf 86 ea ac 87 12 0b 99 84 e3 d4 a4 8c df 0e ce c7 Data Ascii: fg^c6H_!pvf19{pg5ci' `>+j(\T%=o2FPO3+SJi=s}@AibF5wg8]x66h[:JhQR-}<XYYTK{gp5.UNl.4K)stJhE<GBHA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	65075	104.17.3.184	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:46 UTC	926	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/933894468:1721056355:RyplnyimmfYhJciDA6jrSPoRvYRXtp1ZR4mVrzF0eEo/8a3ae756188b0f7f/4b6ddc26d277b97 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 31947 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 4b6ddc26d277b97 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/7nmk9/0x4AAAAAAAeyiL9ArCePgoa_/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:46 UTC	16384	OUT	Data Raw: 76 5f 38 61 33 61 65 37 35 36 31 38 38 62 30 66 37 66 3d 52 37 68 58 33 71 59 6f 64 6c 37 68 4a 78 6f 71 47 46 32 46 32 78 24 46 76 46 36 58 54 58 24 6f 46 53 46 72 69 59 44 66 59 59 66 58 6d 35 78 37 35 46 54 24 46 54 69 24 30 59 45 46 65 69 30 42 46 24 75 46 6b 47 66 4a 58 66 50 46 71 37 46 6d 46 50 77 72 4e 46 50 35 59 49 44 46 46 64 46 48 50 4b 68 4b 36 44 70 45 41 24 56 6d 4f 46 59 6e 35 46 51 44 69 37 46 25 32 62 46 2b 64 59 78 44 7a 59 71 32 68 46 32 4e 46 6b 59 66 58 6c 4a 66 46 78 4c 68 46 45 30 6b 50 58 45 58 46 2d 30 78 30 46 6f 48 42 37 63 54 71 35 31 74 67 24 4c 68 30 46 44 72 4a 46 34 4a 64 50 46 46 54 64 58 46 6c 6f 4b 2d 71 67 35 4b 77 46 48 72 6d 2b 68 2b 6b 51 2b 30 70 6a 32 32 78 6b 4a 50 49 56 32 4f 56 2d 6d 61 71 79 64 65 52 73 63 2d Data Ascii: v_8a3ae756188b0f7f=R7hX3qYodl7hJxoqGF2F2x$FvF6XTX$oFSFriYDfYYfXm5x75FT$FTi$0YEFei0BF$uFkGfJXfPFq7FmFPwrNFP5YIDFFdFHPKhK6DpEA$VmOFYn5FQDi7F%2bF+dYxDzYq2hF2NFkYfXlJfFxLhFE0kPXEXF-0x0FoHB7cTq51tg$Lh0FDrJF4JdPFFTdXFloK-qg5KwFHrm+h+kQ+0pj22xkJPIV2OV-maqydeRsc-
2024-07-15 15:49:46 UTC	15563	OUT	Data Raw: 4b 49 59 39 35 75 4a 44 24 46 46 78 75 6a 37 48 6a 52 58 57 33 57 77 71 38 59 35 46 46 62 46 47 59 4f 64 52 58 24 30 58 43 30 68 4e 24 24 46 34 39 4d 39 6e 46 46 48 68 65 46 24 35 59 62 46 4e 6f 48 69 46 46 46 4d 66 69 46 72 46 46 38 58 5a 46 45 46 62 34 42 4a 46 48 46 72 58 57 4a 59 38 46 4f 58 59 46 59 65 69 71 68 46 47 46 72 46 66 69 35 35 46 54 46 46 58 57 44 59 4f 58 57 30 57 36 46 45 64 6f 35 48 30 46 59 69 78 69 48 41 59 53 2d 57 46 4b 6e 42 76 58 65 69 4b 4a 59 31 24 6a 69 46 51 6e 51 46 54 69 48 2b 63 31 58 50 71 4b 6e 42 50 46 54 69 24 64 46 47 35 6f 69 78 32 46 31 46 46 58 4b 69 46 36 46 48 46 4b 64 46 2d 46 46 46 59 75 4c 58 31 4a 78 33 46 4d 35 50 37 46 47 46 4d 35 72 30 69 78 46 24 46 66 4a 57 33 59 61 46 72 35 4b 62 59 4f 46 62 53 51 56 59 Data Ascii: KIY95uJD$FFxuj7HjRXW3Wwq8Y5FFbFGYOdRX$0XC0hN$$F49M9nFFHheF$5YbFNoHiFFFMfiFrFF8XZFEFb4BJFHFrXWJY8FOXYFYeiqhFGFrFfi55FTFFXWDYOXW0W6FEdo5H0FYixiHAYS-WFKnBvXeiKJY1$jiFQnQFTiH+c1XPqKnBPFTi$dFG5oix2F1FFXKiF6FHFKdF-FFFYuLX1Jx3FM5P7FGFM5r0ixF$FfJW3YaFr5KbYOFbSQVY
2024-07-15 15:49:46 UTC	330	IN	HTTP/1.1 200 OK Date: Mon, 15 Jul 2024 15:49:46 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 24208 Connection: close cf-chl-gen: cwIyl9e8SAFqTf6Txq+/sgysojaGZQ+FwGeNYT90RgMx/DWW2y22x3QPZkURgCzI0JNnf9tPqTS2XeF8$/5gwMaI7R9DLOZA9 Server: cloudflare CF-RAY: 8a3ae7848a8c42c6-EWR alt-svc: h3=":443"; ma=86400
2024-07-15 15:49:46 UTC	1039	IN	Data Raw: 6c 6e 47 47 76 4b 5a 33 6a 61 71 67 74 34 32 6d 6f 71 47 57 6c 4b 4f 6a 70 6f 32 46 75 72 69 52 69 62 33 46 71 64 50 42 6b 73 65 57 72 4c 69 72 33 62 37 4c 71 73 4f 78 74 62 54 42 32 73 54 47 73 39 58 4a 70 38 69 6e 78 62 7a 4b 76 2f 44 56 77 38 2f 44 78 75 58 38 76 4e 6a 62 33 64 48 61 2b 4e 7a 67 7a 77 62 6d 38 67 66 69 78 4e 51 44 34 77 6a 6f 37 74 72 39 38 75 44 32 39 4f 30 4d 38 2b 63 49 38 50 72 57 32 42 4d 45 37 41 54 6b 4a 67 63 55 47 50 33 69 49 41 63 48 41 67 45 50 35 50 49 53 38 52 51 45 2b 43 77 57 4f 78 7a 39 50 68 38 65 47 78 30 51 51 30 4d 6e 46 44 51 57 4a 41 4e 49 4b 53 6f 75 4a 6b 51 6e 43 78 45 76 4d 6a 59 75 4d 44 77 70 4d 6b 34 37 47 44 6c 52 55 46 4d 67 55 56 6b 31 5a 56 5a 57 4a 43 6f 36 57 6b 52 41 53 56 52 54 58 6d 31 79 62 56 4a Data Ascii: lnGGvKZ3jaqgt42moqGWlKOjpo2FuriRib3FqdPBkseWrLir3b7LqsOxtbTB2sTGs9XJp8inxbzKv/DVw8/DxuX8vNjb3dHa+Nzgzwbm8gfixNQD4wjo7tr98uD29O0M8+cI8PrW2BME7ATkJgcUGP3iIAcHAgEP5PIS8RQE+CwWOxz9Ph8eGx0QQ0MnFDQWJANIKSouJkQnCxEvMjYuMDwpMk47GDlRUFMgUVk1ZVZWJCo6WkRASVRTXm1ybVJ
2024-07-15 15:49:46 UTC	1369	IN	Data Raw: 43 67 72 75 36 68 63 43 65 72 36 61 63 6f 62 44 55 78 4d 61 31 31 4b 61 70 31 39 79 61 6d 36 75 39 6f 64 7a 41 6d 74 66 45 77 4e 6a 44 78 61 4f 2b 7a 63 75 38 77 4d 79 70 38 62 54 50 36 73 62 47 38 74 58 38 7a 4f 72 49 7a 2f 7a 55 31 67 48 57 77 51 50 69 42 63 48 56 43 4d 76 4b 79 39 66 74 30 66 7a 77 44 51 6a 7a 35 50 59 4b 30 75 6a 73 2b 4e 55 66 39 50 33 5a 33 77 49 43 34 53 4d 5a 43 75 48 6e 41 77 66 6c 36 77 34 78 4b 2b 6f 31 4e 65 30 6d 47 76 6b 37 4a 52 4d 2f 43 54 41 4c 44 42 51 33 2f 67 45 56 4b 52 55 6a 4e 44 56 4d 50 55 31 47 53 43 4d 46 56 52 49 4f 4c 79 38 4c 52 43 77 37 58 6c 30 2b 53 7a 4d 2b 50 32 4d 36 4f 55 38 38 52 69 70 63 58 57 34 71 57 46 70 76 5a 45 35 4b 51 6e 4a 6c 4e 32 64 4b 51 33 70 63 63 56 31 68 59 56 63 38 63 30 4e 7a 66 6a Data Ascii: Cgru6hcCer6acobDUxMa11Kap19yam6u9odzAmtfEwNjDxaO+zcu8wMyp8bTP6sbG8tX8zOrIz/zU1gHWwQPiBcHVCMvKy9ft0fzwDQjz5PYK0ujs+NUf9P3Z3wIC4SMZCuHnAwfl6w4xK+o1Ne0mGvk7JRM/CTALDBQ3/gEVKRUjNDVMPU1GSCMFVRIOLy8LRCw7Xl0+SzM+P2M6OU88RipcXW4qWFpvZE5KQnJlN2dKQ3pccV1hYVc8c0Nzfj
2024-07-15 15:49:46 UTC	1369	IN	Data Raw: 71 4b 4f 78 6b 72 75 76 79 35 47 76 6c 4a 58 55 78 63 32 78 70 72 43 77 30 61 32 7a 77 70 36 7a 75 75 6d 35 77 65 53 34 76 38 58 41 7a 4e 37 41 72 50 4b 39 37 74 58 6b 7a 4f 58 37 35 64 6a 33 2f 72 2f 32 37 72 37 39 39 67 50 47 78 39 6a 70 76 51 62 2b 44 4e 37 6b 45 2b 73 51 33 4e 34 48 38 76 59 4b 35 52 76 6d 2f 76 7a 30 43 51 50 59 39 42 38 56 4a 42 72 36 2b 50 4d 59 2f 42 63 65 48 53 55 70 2f 52 41 75 43 53 6b 5a 4d 77 30 72 38 76 4d 57 47 77 37 35 2b 51 49 77 4f 2f 63 64 41 6b 4d 48 43 43 30 63 52 41 30 59 47 79 78 4a 51 6c 55 6a 46 30 63 7a 44 43 35 4d 4e 31 6c 63 54 6a 73 32 48 43 30 69 50 7a 6c 5a 61 55 63 36 61 32 68 6f 4e 30 4a 6b 4c 32 31 52 55 55 49 70 4e 57 4d 30 55 44 4e 35 63 6f 42 52 65 30 30 2f 59 7a 2b 46 5a 6e 39 6d 58 33 35 6f 52 49 52 Data Ascii: qKOxkruvy5GvlJXUxc2xprCw0a2zwp6zuum5weS4v8XAzN7ArPK97tXkzOX75dj3/r/27r799gPGx9jpvQb+DN7kE+sQ3N4H8vYK5Rvm/vz0CQPY9B8VJBr6+PMY/BceHSUp/RAuCSkZMw0r8vMWGw75+QIwO/cdAkMHCC0cRA0YGyxJQlUjF0czDC5MN1lcTjs2HC0iPzlZaUc6a2hoN0JkL21RUUIpNWM0UDN5coBRe00/Yz+FZn9mX35oRIR
2024-07-15 15:49:46 UTC	1369	IN	Data Raw: 36 54 4b 6c 73 6d 61 30 70 6a 4c 75 70 61 32 73 72 36 34 72 4e 36 6d 78 71 4f 6a 31 36 48 74 71 65 62 68 6f 75 50 4e 34 38 48 78 35 73 50 4f 77 76 72 53 37 2f 44 63 32 4e 76 57 30 50 7a 45 76 2f 4c 6b 2b 4e 4d 44 44 50 6e 72 7a 64 66 66 34 4f 6e 4e 30 65 73 41 47 4e 4c 5a 43 67 6f 4d 43 64 51 54 46 4e 50 76 41 66 59 44 46 39 38 66 46 2f 6b 6d 43 75 33 74 44 65 30 47 36 77 55 6c 45 52 55 4b 44 52 6f 63 4f 66 6f 6f 4d 30 41 50 38 79 49 7a 50 79 51 31 53 51 45 64 42 53 73 34 4c 53 30 78 4b 45 4a 44 56 45 51 30 46 69 49 58 56 44 45 56 4f 43 74 4d 4f 79 35 4e 47 6b 42 69 50 6c 68 46 52 47 42 61 53 79 64 74 54 6b 56 47 55 6b 45 39 53 6c 5a 72 55 57 70 56 62 57 64 73 58 30 74 72 57 6e 49 37 55 56 70 68 65 32 46 59 5a 58 39 68 5a 47 39 62 65 32 5a 74 6a 6e 47 4a Data Ascii: 6TKlsma0pjLupa2sr64rN6mxqOj16HtqebhouPN48Hx5sPOwvrS7/Dc2NvW0PzEv/Lk+NMDDPnrzdff4OnN0esAGNLZCgoMCdQTFNPvAfYDF98fF/kmCu3tDe0G6wUlERUKDRocOfooM0AP8yIzPyQ1SQEdBSs4LS0xKEJDVEQ0FiIXVDEVOCtMOy5NGkBiPlhFRGBaSydtTkVGUkE9SlZrUWpVbWdsX0trWnI7UVphe2FYZX9hZG9be2ZtjnGJ
2024-07-15 15:49:46 UTC	1369	IN	Data Raw: 4b 54 71 64 33 4c 79 74 72 66 75 71 50 6e 35 64 50 57 70 2b 66 43 72 4d 76 4f 71 76 44 53 77 4d 33 51 77 38 7a 50 32 65 7a 55 79 39 65 32 31 4e 58 68 75 39 76 7a 31 51 62 52 34 4e 37 32 35 75 6b 49 77 41 58 50 43 4f 7a 6e 35 41 66 51 39 4d 2f 75 37 4f 63 4f 7a 77 44 71 47 2f 44 69 33 74 34 6c 48 77 55 48 38 2f 34 56 48 75 59 71 36 44 44 77 36 44 44 30 38 76 4d 45 46 76 6b 31 47 66 6b 51 43 69 6f 32 49 42 55 53 47 53 55 44 46 30 6e 37 43 55 31 49 50 68 67 76 44 46 45 79 50 7a 49 72 49 55 70 56 4f 6c 4d 32 4d 54 6c 57 4b 79 42 52 55 30 4e 44 56 6a 4a 45 61 6b 46 64 57 68 39 5a 54 6d 78 78 4f 6d 74 44 55 6c 42 55 5a 6e 70 69 53 6a 67 38 53 32 78 77 4f 48 64 42 50 57 4a 69 51 45 4a 37 57 6a 31 45 66 6f 52 42 53 47 4b 49 52 55 78 6c 62 45 39 32 61 47 70 4e 56 Data Ascii: KTqd3LytrfuqPn5dPWp+fCrMvOqvDSwM3Qw8zP2ezUy9e21NXhu9vz1QbR4N725ukIwAXPCOzn5AfQ9M/u7OcOzwDqG/Di3t4lHwUH8/4VHuYq6DDw6DD08vMEFvk1GfkQCio2IBUSGSUDF0n7CU1IPhgvDFEyPzIrIUpVOlM2MTlWKyBRU0NDVjJEakFdWh9ZTmxxOmtDUlBUZnpiSjg8S2xwOHdBPWJiQEJ7Wj1EfoRBSGKIRUxlbE92aGpNV
2024-07-15 15:49:46 UTC	1369	IN	Data Raw: 36 31 37 48 6c 74 37 69 7a 73 37 76 49 74 71 44 44 79 62 32 36 71 65 65 77 35 4c 62 50 74 64 50 58 30 38 6d 37 34 4d 2f 30 2f 50 6e 75 7a 64 33 65 77 67 62 49 31 67 66 39 44 75 34 50 45 66 45 48 37 66 48 4e 41 2b 7a 6d 43 41 33 70 44 52 48 62 39 77 4d 56 44 77 49 42 33 77 48 39 43 69 45 72 41 53 4c 6b 4d 50 34 43 48 68 77 65 43 2b 30 41 4f 42 49 38 48 51 55 53 47 78 6b 78 47 54 54 37 44 78 73 53 46 45 67 6a 46 67 51 58 49 42 35 4d 55 52 6f 6c 4d 44 49 57 51 6a 59 78 46 6a 6f 55 48 55 73 2b 47 43 46 50 50 42 34 33 4c 68 35 65 59 69 46 4b 59 44 68 71 4c 69 74 4b 52 31 51 73 50 6a 59 74 57 46 63 33 56 44 4e 71 58 33 6f 2b 59 45 4a 79 54 33 53 47 52 33 42 49 52 33 69 4d 53 46 39 58 65 55 39 45 67 49 6c 64 58 35 56 7a 53 32 2b 55 6b 34 6c 79 6d 46 6c 2f 62 33 Data Ascii: 617Hlt7izs7vItqDDyb26qeew5LbPtdPX08m74M/0/Pnuzd3ewgbI1gf9Du4PEfEH7fHNA+zmCA3pDRHb9wMVDwIB3wH9CiErASLkMP4CHhweC+0AOBI8HQUSGxkxGTT7DxsSFEgjFgQXIB5MURolMDIWQjYxFjoUHUs+GCFPPB43Lh5eYiFKYDhqLitKR1QsPjYtWFc3VDNqX3o+YEJyT3SGR3BIR3iMSF9XeU9EgIldX5VzS2+Uk4lymFl/b3
2024-07-15 15:49:46 UTC	1369	IN	Data Raw: 34 73 79 2b 78 2b 44 66 34 38 76 6c 38 74 4c 55 72 38 44 6e 32 65 37 51 37 74 37 63 34 4e 2f 66 30 38 33 64 39 2f 33 64 35 50 7a 6e 37 4f 45 41 42 66 76 6f 43 50 48 64 42 75 37 50 34 41 76 30 2b 50 67 50 2b 67 66 30 33 52 6b 57 32 78 41 47 41 39 38 5a 43 75 51 72 47 41 30 4c 47 79 45 4e 42 52 55 52 46 75 30 6e 43 68 66 78 4d 79 34 59 43 7a 63 66 49 66 73 4e 4e 43 59 37 48 54 73 72 4b 53 30 73 4c 43 41 61 4b 6b 52 4b 4b 6a 46 4a 4e 44 6b 75 54 46 46 49 4e 56 51 2b 4b 6c 49 37 49 44 6b 69 58 56 6f 67 56 45 70 48 4a 46 78 4f 4b 57 39 63 55 55 39 66 5a 56 46 4a 57 56 56 61 4d 6d 74 4f 57 7a 64 64 62 32 4e 50 50 48 4a 6e 59 33 64 78 67 47 78 6d 66 6f 56 68 58 6d 5a 74 55 48 4a 2f 62 31 4e 32 69 34 74 38 62 6f 36 4f 62 31 31 32 65 31 2b 58 65 4a 42 7a 6d 4a 47 Data Ascii: 4sy+x+Df48vl8tLUr8Dn2e7Q7t7c4N/f083d9/3d5Pzn7OEABfvoCPHdBu7P4Av0+PgP+gf03RkW2xAGA98ZCuQrGA0LGyENBRURFu0nChfxMy4YCzcfIfsNNCY7HTsrKS0sLCAaKkRKKjFJNDkuTFFINVQ+KlI7IDkiXVogVEpHJFxOKW9cUU9fZVFJWVVaMmtOWzddb2NPPHJnY3dxgGxmfoVhXmZtUHJ/b1N2i4t8bo6Ob112e1+XeJBzmJG
2024-07-15 15:49:46 UTC	1369	IN	Data Raw: 74 4b 2b 37 75 50 56 31 4d 54 73 32 75 37 4d 36 64 32 33 32 4f 2f 62 75 39 44 30 35 75 54 51 35 2b 72 59 32 50 33 74 37 4f 54 6a 38 66 44 6f 42 50 4c 50 37 41 6e 36 2b 50 41 52 2f 64 55 62 45 41 4d 58 2f 42 67 48 47 2f 67 61 43 76 63 58 49 51 6a 6e 41 53 41 52 36 77 6b 69 46 69 73 42 4b 68 73 75 4b 78 41 65 4d 78 45 77 49 42 45 56 4e 43 63 56 46 53 6b 6e 42 55 73 67 4f 45 4a 50 44 6a 49 68 4e 55 6b 30 4a 42 68 4a 4f 6b 38 39 53 6a 35 52 57 31 46 43 4d 54 6c 57 52 6a 55 35 57 6b 70 4a 54 57 46 49 4b 44 6c 65 55 6b 46 46 56 56 55 77 54 57 68 61 4e 45 6c 51 58 6c 31 68 64 57 4a 33 57 57 52 6c 51 47 6c 38 61 6d 65 48 65 32 36 44 61 58 46 76 53 34 4f 46 64 6d 56 68 65 58 52 55 61 5a 42 39 56 32 43 41 67 6f 46 78 68 59 61 46 66 58 79 4c 65 58 6d 4d 6a 36 4f 42 Data Ascii: tK+7uPV1MTs2u7M6d232O/bu9D05uTQ5+rY2P3t7OTj8fDoBPLP7An6+PAR/dUbEAMX/BgHG/gaCvcXIQjnASAR6wkiFisBKhsuKxAeMxEwIBEVNCcVFSknBUsgOEJPDjIhNUk0JBhJOk89Sj5RW1FCMTlWRjU5WkpJTWFIKDleUkFFVVUwTWhaNElQXl1hdWJ3WWRlQGl8ameHe26DaXFvS4OFdmVheXRUaZB9V2CAgoFxhYaFfXyLeXmMj6OB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	65078	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:46 UTC	691	OUT	GET /lib_LUGoPiqXXlDptSWA/havnu57r2hcv4i5a.png HTTP/1.1 Host: www.umso.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:46 UTC	251	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 78783 Content-Type: image/png Last-Modified: Fri, 03 May 2024 09:59:16 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:49:46 GMT Connection: close
2024-07-15 15:49:46 UTC	935	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 63 00 00 01 9c 08 03 00 00 00 4a 8f 9d 5d 00 00 03 00 50 4c 54 45 4c 69 71 d8 22 ff c5 1f ff d4 18 ff ff 52 ff 84 35 ff d4 1e ff 8e 3f ff ef ff ff 93 43 ff d6 15 ff 78 38 ff 73 38 ff 78 36 ff 7b 36 ff d8 11 ff 70 38 ff a9 23 ff 6f 38 ff db 0f ff c1 17 ff bd 19 ff 6b 3a ff 6a 39 ff ae 22 ff d8 10 ff d6 11 ff 9b 28 ff cb 15 ff 6c 39 ff 81 30 ff 94 2b ff bd 1b ff db 0f ff 7c 31 ff 69 39 ff 69 3a ff 84 2f ff b4 1e ff d9 10 ff c6 16 ff d7 10 ff 6b 39 ff 8c 2d ff ba 1b ff ab 21 ff 78 33 ff 8f 2b ff d6 10 ff 8a 2d ff 6a 39 ff 72 35 ff cb 14 ff d9 0f ff d9 0f ff 6d 37 ff 83 2f ff d7 10 ff b5 1c ff d9 0f ff d9 0f ff 9c 25 ff da 0f ff d1 12 ff ce 13 ff d9 0f ff d8 0f ff d7 10 ff d6 10 ff d9 0f ff a9 21 ff 69 Data Ascii: PNGIHDRcJ]PLTELiq"R5?Cx8s8x6{6p8#o8k:j9"(l90+\|1i9i:/k9-!x3+-j9r5m7/%!i
2024-07-15 15:49:46 UTC	2372	IN	Data Raw: 8f 3f cc f7 f8 5a cc 53 f5 f5 6a d4 e6 62 a0 d7 51 75 dc f7 bf ca f9 6b f0 99 ee de f3 e4 f9 e7 d7 a8 e5 e4 ee ed 5b a7 cd cb 91 ed 66 d4 ea bd b9 ea ee eb c1 e9 bc a7 cb cb f0 ee de f3 b3 70 73 7c e9 88 e5 75 9d ae c8 a8 d4 b2 b1 c3 87 87 9b 86 e0 7f a6 93 c2 92 f7 b4 87 dd af f3 d8 dd 7d 63 9a 7d 72 d4 f8 d6 de 6b 74 9d 7d 91 c3 a0 bb b1 ee 7d cb a0 9c cb 74 91 8f b9 9b d4 f9 fb d6 7f bd 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 9c ac bd 5d a8 96 e7 99 fe 6d 3a 26 ba fa 35 c3 8c 9d a1 a5 23 6f 6c c3 a4 dd 28 a5 e9 34 94 0e 6d a6 9d 32 5d 43 49 42 68 08 19 26 0d b3 20 84 29 99 15 12 b2 24 ac 85 92 50 97 15 13 e3 52 fc 40 ac e8 b8 8c d2 fa b9 e1 df 01 69 79 a1 b5 3b 82 91 17 dc 50 bb 15 30 3b c1 0d f3 69 12 Data Ascii: ?ZSjbQuk[fps\|u}c}rkt}}tpHYs IDATx]m:&5#ol(4m2]CIBh& )$PR@iy;P0;i
2024-07-15 15:49:46 UTC	538	IN	Data Raw: 17 ff 66 a0 43 e6 5b 63 77 c8 44 95 25 67 97 7a 6e a9 d7 88 17 b7 e2 15 5d 32 29 f6 8d fa f1 3a 94 d1 ba b5 66 bf 45 fd fa 9b 65 24 43 b2 e8 57 25 63 4c c9 b4 91 0c 7a 64 da 0e 99 b8 b2 64 a1 4c 5c be ae 39 53 22 a6 e9 c2 6b dd 52 d7 29 45 4a 66 7c 29 33 2c 64 2c f7 6d 48 a3 c1 ef 4d 42 66 a0 78 1d f6 c8 a8 5b aa 29 d3 8f 7d cd 2c 79 ba 84 a1 6f 72 4a be b8 d4 bb ac 2d a6 ae 29 59 e2 db b3 4a 4f 04 2a a6 f2 4a 03 56 c9 a9 18 a7 63 12 64 7e fc df 75 e4 fb 1f 55 55 49 23 5f df 1e 53 55 95 52 1e 03 c6 b8 3c 86 5d 78 ae 7a ed 65 8c ba a5 92 31 45 20 03 1d a3 90 c9 8c 09 85 cc 0f 98 c8 64 b3 54 55 96 7c ea eb 85 4c 9d c8 3c 2c 6e a9 6a c3 2b 22 99 36 f7 ad 02 99 5e 01 bb 34 4b 39 f1 6d da 64 ac b8 64 98 a9 28 93 85 8c d7 31 96 fc 86 a5 a5 2e 62 62 cc 44 c5 a5 Data Ascii: fC[cwD%gzn]2):fEe$CW%cLzddL\9S"kR)EJf\|)3,d,mHMBfx[)},yorJ-)YJO*JVcd~uUUI#_SUR<]xze1E dTU\|L<,nj+"6^4K9mdd(1.bbD
2024-07-15 15:49:46 UTC	4744	IN	Data Raw: 0b 5e 23 63 be fa 8d b8 74 fd e5 81 ee 18 eb 8f 41 1c 93 18 63 b5 eb 36 90 b1 d4 d7 77 fa 8e 39 b2 54 54 96 fe ad 9d 59 aa bc 92 f5 fa 36 03 05 f5 3c 41 4d 99 b2 db 37 d0 31 55 bf af ef c3 bb 27 f4 49 f6 ca 23 05 15 67 28 63 52 1a 53 09 99 6c 96 6a c2 bc d7 2f 2c 75 74 0c 09 13 da a5 91 88 09 a4 0c 10 53 50 06 8d be c1 48 41 cf 2a 45 94 a9 d5 0c 09 33 7c 41 c6 c4 e5 eb 81 da 52 d8 86 97 52 df d6 2d 05 66 09 64 b1 c8 d7 0c 53 a1 65 4c c2 04 4a c6 95 af 07 87 09 72 24 d3 91 31 2f 79 1d 53 d6 94 c6 54 31 cf 8c 93 c6 14 a3 4a 4f 57 32 46 d2 98 4a c7 a4 c4 37 88 63 4a 1d 53 c7 31 4d 59 29 e8 8f b1 46 df 62 62 a9 30 4b 51 61 a9 d3 21 33 9e 90 29 13 99 fb 34 91 69 62 df 4e 22 53 f7 c8 38 cc bc 58 f6 fb 6a c3 6f 1b c8 a4 3e 99 7b 5a 15 63 7c 49 6d 32 9d b9 a5 15 Data Ascii: ^#ctAc6w9TTY6<AM71U'I#g(cRSlj/,utSPHA*E3\|ARR-fdSeLJr$1/yST1JOW2FJ7cJS1MY)Fbb0KQa!3)4ibN"S8Xjo>{Zc\|Im2
2024-07-15 15:49:46 UTC	5930	IN	Data Raw: 76 fb fa bd be 01 67 c2 7d 78 e3 54 af fb 88 89 76 6e 46 9b 7d 73 1e d3 1f bf 1e 3a 33 12 57 f7 70 5a ed c5 73 ac 61 59 a9 2d 2d 15 88 89 4e 74 53 bc ac 4a 88 51 21 63 1a 46 14 8c 7c b3 64 ad 71 cc f9 0d aa 60 2c 8f 01 59 ac 74 0d c2 9c cf 41 cc a2 db e5 50 18 a5 a8 2f 26 ac 29 f5 8e 22 18 9c 54 1a 4a 63 c6 39 e5 3a 68 c0 8b 9b 7c a9 63 26 54 c9 a4 c4 b7 5a f0 d0 5b 1d 4e c4 b4 07 2d fd b0 bf d7 37 38 fb ba 39 6b e9 5f e2 4e bc 9a 32 bd 5d 32 98 5c 8a 66 97 6c b0 60 cf 1e a1 4b 4e 65 e4 7d 0f 70 23 ae 49 29 33 79 cf e4 37 ed 0b a5 25 b0 65 12 62 46 e4 8c 82 66 c5 9d 93 79 a2 20 41 c6 ef dc cc 5e a9 9e 29 d0 75 55 71 f2 db cd 7c 43 c3 c4 ea d2 90 8e 69 23 99 98 30 51 b7 6f 67 7d f8 58 90 19 52 32 6e 7f f8 cd 66 be dd d3 af e3 9d 9b a3 16 e2 85 81 8c f5 e1 Data Ascii: vg}xTvnF}s:3WpZsaY--NtSJQ!cF\|dq`,YtAP/&)"TJc9:h\|c&TZ[N-789k_N2]2\fl`KNe}p#I)3y7%ebFfy A^)uUq\|Ci#0Qog}XR2nf
2024-07-15 15:49:46 UTC	7116	IN	Data Raw: a5 d4 17 94 51 c7 24 b9 af c9 18 49 7e 49 19 ea 19 80 a4 bf ad 6a fc 7d 78 a3 4f 42 19 2f 91 69 01 d3 19 5b 8a 13 99 de 64 a4 6e c4 0b a5 8c a5 be c6 98 c4 1a a8 98 d5 79 3c d2 ec d2 6a bf 0b 6f 35 1e be 0c 34 2b ef 90 ac d7 74 0c f2 5e 13 34 e0 0b eb d7 4e c8 28 65 ca 4b 84 8c 80 86 99 2f ef f6 7a e2 cc e2 99 45 8d 61 6c 7c 80 41 af d6 ac ad 29 46 b3 98 dd 0f 3e f3 e0 ee b8 2f a6 5d 7b 57 9f 6c dd 0d 63 b2 51 0a c3 98 6e 1a 63 61 cc df 37 53 04 d1 e2 18 37 aa 84 25 9b 56 ba 9e 58 b2 7c f9 52 60 26 f5 f9 66 25 e3 cb d7 43 66 29 70 4b 4d 22 e3 4f 29 20 62 d2 de cd 5c 5b 0a 5a f1 0a 25 53 15 97 ea f3 50 9a c1 82 c3 a9 be e4 6a d8 29 fc 5d 97 28 23 86 49 10 83 f7 76 05 4c a9 65 76 2a 61 48 1b 68 18 60 46 c2 99 a4 63 f8 ac 20 60 56 88 8e b1 1f 9c 8d 64 e9 9a Data Ascii: Q$I~Ij}xOB/i[dny<jo54+t^4N(eK/zEal\|A)F>/]{WlcQnca7S7%VX\|R`&f%Cf)pKM"O) b\[Z%SPj)](#IvLev*aHh`Fc `Vd
2024-07-15 15:49:46 UTC	8302	IN	Data Raw: 07 08 97 cc 15 a0 65 e1 80 98 a5 59 7d 9c 43 72 2a 46 dc 92 66 31 8a 16 d1 31 d3 f8 fa 68 76 5a f3 5d 40 25 f1 65 c6 53 66 e6 fd 69 f9 92 fa 12 eb d7 33 e0 0c 3e 4c 63 e0 94 66 28 64 c4 2f b1 c6 04 ca 00 37 c8 63 ae cf cf 5f 07 5e 80 15 e3 0b 9d 12 aa 4b ca 95 24 63 2e e2 1f de 7c f3 22 09 03 05 23 6c 51 ca 28 67 32 66 44 c7 9c 95 f7 59 28 19 75 48 f9 59 ad 4f 2e 2c 25 29 b3 71 f5 46 79 83 2f 24 8c 40 86 44 31 bc d8 df ca 16 51 2f 70 4c 94 2f 78 93 34 7a 6d 29 e8 72 cc c5 30 27 cf 1c 3b 83 67 2f 9e bd 97 ce 40 bd 9c 01 5b f6 a6 5a b5 e0 65 b7 7e 31 85 d1 20 66 fd 83 eb d1 12 43 11 73 42 67 ac 1f cd 22 26 cf 40 8a 88 b9 d0 16 94 3a dd bd ed f6 de a1 b8 d7 75 c6 b4 5b c2 bf fc d7 d1 2c a4 11 a6 d9 e1 eb a7 ad 8b cc 17 33 91 4b 97 2d 5f 2a 27 a0 18 63 ec cc Data Ascii: eY}CrFf11hvZ]@%eSfi3>Lcf(d/7c_^K$c.\|"#lQ(g2fDY(uHYO.,%)qFy/$@D1Q/pL/x4zm)r0';g/@[Ze~1 fCsBg"&@:u[,3K-_'c
2024-07-15 15:49:46 UTC	2831	IN	Data Raw: 6c ef de ad 7b b7 2a 66 b6 56 88 21 66 68 8c bc 84 c1 3f ac 3f 5d 29 18 6d 87 69 35 cc ae 54 ad a6 84 b9 70 21 25 31 2f 40 c3 68 4b 8c 0e 0f 88 88 61 d8 8b 7a 52 16 31 24 cc 1f 1f fb d7 3f 96 35 eb 62 7e a0 29 28 7d b5 9c 51 f2 a7 b5 0d 6f 08 6f 75 4c 3a 51 c9 35 c6 a4 fd bd f5 91 4a b2 be d7 1a 62 d8 7e b7 64 39 32 19 2b 2e c9 74 a4 21 66 29 3b 69 8c 31 2e 92 a9 a6 0a c6 cc 7d db 0d bf 41 79 c9 18 53 f6 fc 06 a1 4c 99 ca 64 ca a8 5f 72 bd 32 ed 0c 93 68 99 e7 c8 19 8b 65 72 25 5b a3 99 9f fe 74 3f 2f 1d 64 2a c3 df 83 bf b6 60 26 71 46 51 e3 aa d9 fe 12 e7 24 ac 59 27 ac 51 eb 74 aa b2 4c a7 20 63 f8 8f 0e 34 c6 17 fb b5 6f 93 fa 23 c3 0b 61 23 4a c6 f8 52 73 46 04 0d d1 22 84 49 bf 5b bc 24 0d a3 84 d1 8b bf 62 ca 90 2c f8 ac 4d 0a 66 ed 91 1d 54 2d f9 Data Ascii: l{fV!fh??])mi5Tp!%1/@hKazR1$?5b~)(}QoouL:Q5Jb~d92+.t!f);i1.}AySLd_r2her%[t?/d`&qFQ$Y'QtL c4o#a#JRsF"I[$b,MfT-
2024-07-15 15:49:46 UTC	10674	IN	Data Raw: e1 b7 99 8f ec 0d 48 86 c9 6f ed 97 fe 39 aa 2f 85 bd 32 ff 9b 52 19 d6 b1 89 19 33 4c dc fb f0 4b e1 8c 94 98 2a c3 f4 2b d5 32 af 7a c8 28 68 c4 32 ed f7 e1 4c 00 1a bd 25 fd b5 6b 0d 3f 39 a0 51 49 43 d2 a8 98 51 fb 24 b0 c9 bc f1 9c 51 ca 24 d0 6c 52 b8 e0 ca ac 49 7c c1 4f fb 65 84 b9 ac a0 71 7c 11 96 c8 4f 87 17 c1 8d 08 19 8a 19 e1 0c e0 b2 59 ec 51 92 2b e4 8a b1 26 ff e8 01 26 bd 85 2c e7 f4 6b 2d 69 22 ff a0 84 11 a2 00 31 8e 2f f2 00 2b 49 b5 6c f3 60 49 df 09 30 8a 19 78 23 f9 00 30 04 cd e9 bd bf 38 7d fa 17 a5 47 12 c2 fc 8f 8a 18 23 8c c8 97 ff 91 dd 0d 9a c3 fc d6 21 c6 5f 17 02 0d 73 55 20 43 c4 fc 9e 17 9a 62 92 4b 7a 4a 09 23 3e e9 8f 82 98 b2 b5 b7 58 15 53 76 c5 54 27 5a 37 69 af 1d d5 d6 db 7b d7 74 f7 16 07 b6 15 4b c2 d3 99 90 da Data Ascii: Ho9/2R3LK*+2z(h2L%k?9QICQ$Q$lRI\|Oeq\|OYQ+&&,k-i"1/+Il`I0x#08}G#!_sU CbKzJ#>XSvT'Z7i{tK
2024-07-15 15:49:46 UTC	11860	IN	Data Raw: 41 a0 14 8c 69 5a 94 ee 1d e9 20 b0 b3 da 38 56 2a 85 4a 7e ce c9 c7 75 63 ac 4e c6 aa 6d a0 61 78 a0 1b b3 d8 f7 78 ff 35 1a 97 12 63 2a df 37 8d 94 99 54 f2 db 38 bf dd fc 52 33 86 b3 a7 65 7a 25 79 14 33 4b be 85 cd 90 29 5a b2 31 c4 0a 84 59 f3 f5 42 99 75 48 66 9b 9e a9 31 03 ce bc 55 89 19 77 80 0b 66 5e 9a 09 66 82 32 26 69 10 38 49 c7 f8 fd 90 60 73 68 f3 4e 5e 87 36 1f c2 c5 75 c2 af 43 27 b0 85 96 43 57 0f 01 2a d2 33 0e 99 bc af 9e 38 76 22 3e b7 70 07 5e ae 52 c7 9c 00 43 00 1b 92 a5 60 c6 98 13 2f c4 cc 15 00 85 68 b9 72 0b 94 31 84 dc 0a a2 14 ae 18 56 f8 06 8c dc da 71 eb d6 2d d2 c4 77 b0 25 de de 03 53 70 03 61 f6 ef d8 ff 5e 41 8a f1 a5 2c 7f 2f 22 06 70 c1 4d 51 52 4b 19 b1 e5 36 2e 6c 97 2f b7 09 97 01 5d b0 83 2f 85 32 bb df 7f 3f 03 Data Ascii: AiZ 8VJ~ucNmaxx5c7T8R3ez%y3K)Z1YBuHf1Uwf^f2&i8I`shN^6uC'CW*38v">p^RC`/hr1Vq-w%Spa^A,/"pMQRK6.l/]/2?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	65085	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:46 UTC	603	OUT	GET /lib_LUGoPiqXXlDptSWA/ogsxa8h0dl6bydus.png HTTP/1.1 Host: www.umso.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
2024-07-15 15:49:46 UTC	251	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 59938 Content-Type: image/png Last-Modified: Fri, 03 May 2024 09:59:16 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:49:46 GMT Connection: close
2024-07-15 15:49:46 UTC	935	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 b6 00 00 04 36 08 03 00 00 00 30 33 d1 fc 00 00 03 00 50 4c 54 45 4c 69 71 0d 0d 0d 34 34 37 31 31 38 03 02 05 00 00 00 00 00 00 02 02 04 02 02 03 00 00 01 37 37 3a 2f 2f 37 38 38 38 38 38 38 33 33 3a 31 31 38 28 28 32 33 33 38 89 89 8b 38 38 38 31 31 34 86 82 96 33 33 3a 31 31 38 2a 2a 2f 8a 8a 8c 89 8a 8d 37 37 38 37 37 38 fc fd fd 28 28 33 79 70 66 fa fd ff 38 39 39 39 3b 40 30 30 37 bc b1 e0 16 17 19 38 38 39 ff ff ff 90 9c 97 f3 f6 f7 75 4c ee e7 e9 ee 7a 50 f3 7e 52 f5 7b 51 f4 7b 51 f3 37 36 38 ff ff ff fe ff ff ff ff ff 89 8a 8c 8b 8b 8d ff ff ff ff ff ff f2 f5 f8 2e 2d 35 7b 51 f3 bb c2 cd ff ff ff ac 9f 97 89 8a 8c 31 31 38 ff ff ff ff ff ff 89 8a 8c fc fd ff da df e5 71 45 28 da e1 e3 c0 Data Ascii: PNGIHDR603PLTELiq44711877://788888833:118((233888811433:118**/778778((3ypf8999;@007889uLzP~R{Q{Q768.-5{Q118qE(
2024-07-15 15:49:46 UTC	2372	IN	Data Raw: 95 b0 cb b8 9e c8 76 9d b4 69 c6 7d 6f e3 78 60 77 84 38 fe 88 5d db 4d 32 0d 82 be 49 f3 02 f7 ee 4d 2a b2 69 31 22 29 52 36 25 91 4c 2c 3a 61 48 29 1c 89 12 e9 11 55 49 e4 08 cc c0 81 20 b9 3f ae a4 5e 19 50 2b 0b 10 21 e8 07 65 43 12 3c 7d a1 fc 70 93 8e d3 cc 0f c5 2e 0c f4 47 12 27 6f a6 41 81 66 fa 31 d3 8b b5 cf 39 e4 39 87 87 e4 21 c5 4f 71 3d 6d 2c 8a e7 90 a2 29 3e 5e fb ac bd d6 de 1a 0d b2 55 79 75 5b 6e e7 3f f0 f0 d7 7f 40 90 92 a2 b7 e9 7c be 16 a3 bd c1 eb b0 53 05 4e 9c da 57 ac 8f 07 b2 25 b4 fd 1e 3a 5b 72 f4 7a 83 c9 e7 eb 34 da 3d c1 b1 b0 92 b6 94 d2 93 87 8a f6 09 41 2a 90 bd 07 72 39 fb e1 d2 7f 68 11 bd de 64 f0 f9 16 98 b6 69 ac a5 94 a2 b7 48 1a be 81 0e 95 01 bd 5e e7 f3 f9 86 8c 76 8f df 9f 5e db 13 f5 f8 b1 45 14 f9 7a 39 3e Data Ascii: vi}ox`w8]M2IMi1")R6%L,:aH)UI ?^P+!eC<}p.G'oAf199!Oq=m,)>^Uyu[n?@\|SNW%:[rz4=Ar9hdiH^v^Ez9>
2024-07-15 15:49:46 UTC	538	IN	Data Raw: 9c 9a 46 46 6d 6b 0a d4 56 dd 62 ab 01 b3 39 fd 62 ab af 7d f5 c9 c7 3f fd e7 95 4d 0e a2 93 89 64 a6 2d 64 a4 16 c5 15 c9 a2 d2 46 c5 8b 5b ec 00 aa 1d 76 ef 52 7f ee 37 6b 39 91 1c 89 a4 df 47 fe 67 42 39 d4 d2 3b 6f e5 bd db 88 07 7a e4 85 4b db d6 8c 89 64 e5 ab 5b d4 16 41 6d a5 da 9a 23 91 31 75 ab 59 7c f5 f1 cf 7e 7c 39 8f 3d e7 a1 47 5e 9c 48 d6 5b 5b 2d 0e 28 6d 54 ec 91 57 18 26 a3 b6 08 6a 9b 80 25 92 cd 91 50 7a e3 be 90 b7 fc 5c b8 f0 c9 c7 ff f2 4f 67 ed b9 6e 49 d0 9a d4 d6 62 b1 b6 ba d3 f7 c8 2b 0c 93 51 5b 04 b5 15 59 ab 27 81 48 24 7d 22 d9 f8 b3 8f bf ba a0 48 ff d2 3b 6f ac a8 d4 76 0e 56 6d 94 96 36 42 8f 7c 30 4d 8f 7c 6a 36 19 b5 45 50 5b 69 22 39 12 69 cc e4 9c d1 f1 cf 3f fd f8 13 65 79 d9 a8 d9 af b2 47 5e 92 48 6e cc d4 23 9f Data Ascii: FFmkVb9b}?Md-dF[vR7k9GgB9;ozKd[Am#1uY\|~\|9=G^H[[-(mTW&j%Pz\OgnIb+Q[Y'H$}"H;ovVm6B\|0M\|j6EP[i"9i?eyG^Hn#
2024-07-15 15:49:46 UTC	4744	IN	Data Raw: c9 a8 2d 82 da 8a 13 c9 11 93 29 4b 8f 7c 70 e5 bd b7 5e 97 b8 fb fa 5b ef ad 04 1b 8c f9 f4 c8 f3 a5 8d c3 e9 4a 1b 95 87 c9 a8 2d 82 da 8a d7 48 d6 99 4c 43 d9 cd 33 7a 83 67 df 7b 43 e2 ae e2 a8 39 e3 62 ab a2 1e f9 f9 ec db ff 88 87 c9 a8 2d 82 da 8a 13 c9 3a 93 49 75 a1 a2 d1 eb 3f 7b 59 1a 78 61 d4 6c cf b1 47 de da 1a 52 ee 91 4f 5b 2c 85 da 22 a8 ad 28 91 6c 36 99 ae 31 23 79 54 c8 6b 97 8f 9a b3 d4 38 76 4a 13 c9 42 69 63 f6 7d e4 93 c3 64 d4 16 d9 a4 b6 86 80 2b 5f 42 06 52 69 a5 8d 11 93 69 3a 29 ad 7a 77 8d 9e e0 d9 cb fc a8 39 4b 4f 50 b7 fa 1e f9 74 de a2 b6 b5 43 71 96 80 fb e4 ad 0f f2 e7 f2 92 8d 54 98 b6 06 d3 75 b0 d6 2e 90 93 bb 76 ef ca d9 cb 6f 64 19 24 3b a5 3d f2 a0 ed 08 24 92 1d e9 77 ed 92 5f de a2 b6 b5 43 51 e6 6d 97 3e 78 7b Data Ascii: -)K\|p^[J-HLC3zg{C9b-:Iu?{YxalGRO[,"(l61#yTk8vJBic}d+_BRii:)zw9KOPtCqTu.vod$;=$w_CQm>x{
2024-07-15 15:49:46 UTC	5930	IN	Data Raw: d2 44 32 97 91 12 bf 08 b1 ba 12 79 15 22 af 25 83 b6 db 65 da c6 98 b5 03 b1 d8 d4 e4 72 d2 d6 fb 9f f1 dc ff 08 b4 9d 9a ea 8d 0d 70 24 9c 05 5e 29 c7 6f a4 66 b0 6d db 89 da 6e b6 47 de 98 b9 b4 31 39 ed 23 c3 af aa b4 51 d6 23 2f d3 36 29 ae 1a 77 5b cf 67 d4 f6 41 89 b6 e0 e1 c0 40 6c 66 2a be bc f6 d1 fd fb f7 df ff ec fe fd fb f7 3f fb ec ee dd bb 77 3f fb ec 33 2e da 4e 4d c5 06 7a 06 7a c0 da 01 b1 b6 67 f2 7d 57 11 b5 da 66 1f 25 63 b4 cd bf 47 5e 3c ed a3 72 98 6c cf d0 23 2f 1e 23 8b 5f 4a 66 79 13 f6 7e 23 43 46 6a a7 4c db 01 18 21 f3 d6 7e 06 ba b2 3f ee 7d 78 eb d6 ad 0f ef 32 6f 45 c1 16 be a0 b6 25 02 b5 cd 1b a1 47 be 8f 69 2b f4 ab a7 84 5a e5 01 72 e6 61 b2 31 c3 62 ab 8a da 26 5f 50 b6 c8 9b 93 b6 2c d6 76 2d af 7d c4 74 bd 77 ef 2e Data Ascii: D2y"%erp$^)ofmnG19#Q#/6)w[gA@lf*?w?3.NMzzg}Wf%cG^<rl#/#_Jfy~#CFjL!~?}x2oE%Gi+Zra1b&_P,v-}tw.
2024-07-15 15:49:46 UTC	7116	IN	Data Raw: 5b 7d 47 de a9 97 08 bc bf 79 e7 b2 37 4f 6d 5d 09 6b db 7a db 5e 65 6b 45 71 1b d9 ae ae 5f 11 b4 dd 60 da f6 c4 7a 59 b6 2a b6 1e 9f 59 5d 5d 5f 1b 45 6d 8b 0b 4e 00 e5 9b 48 4e 09 64 bc bc c9 c8 eb 95 5d f2 ce cf fb b3 5f f2 a6 eb 91 37 eb 74 2e c8 54 a5 19 fb 6a 1b de fb e7 9f 7d 9c 56 de 9f bd f6 9e 3d 67 6d 41 da b6 af be fa e2 8b 2f fa 5e ed eb 82 f5 66 60 66 76 00 ac e5 b5 bd 73 7b 03 56 a4 81 fb 59 52 0a 76 db 8b 2f af fd ea 57 38 48 2e 2e a8 6d be 3d f2 6c 6c 9b 8a 82 bb e2 c0 db 91 3d f0 72 89 64 59 8f bc de ac d3 65 5f 6c d5 38 f6 fa bf a4 73 f7 ab 8f 7f 33 7c d9 9b cb bc 6d b4 ad af fb 8b 2f 3e f9 e4 93 4f be 78 b5 6f 12 16 b9 80 c0 0a c3 60 d8 52 5e d0 76 66 35 0e 07 06 b9 9c 14 8c 91 e3 bf 6a 9b be 81 29 a9 62 82 da e6 d9 6c db 9c b8 2e 55 Data Ascii: [}Gy7Om]kz^ekEq_`zY*Y]]_EmNHNd]_7t.Tj}V=gmA/^f`fvs{VYRv/W8H..m=ll=rdYe_l8s3\|m/>Oxo`R^vf5j)bl.U
2024-07-15 15:49:46 UTC	8302	IN	Data Raw: ba 41 ca bd f0 84 3f 4c f3 88 27 d3 3e e2 e9 cc f7 b1 85 c6 90 02 53 b7 fd a1 92 5b 4b 88 ed 61 bc c4 cd 83 ef a7 ac e9 f5 23 85 a5 be f6 68 34 8f 35 66 e6 fb 1a cd d3 0a 77 3f 9d f2 23 f2 79 84 ec be 6f 6d 5d 67 eb 4a 84 c2 0f 7e c2 56 06 6d c9 0f 1e 48 7d 31 65 7b 13 aa 86 3d df 11 f3 a3 7a 8d 66 cf 8f be 23 e7 69 58 7a e4 3b 99 81 d5 c0 52 1f f9 ad fa f4 8f dc a3 d1 ec f8 56 ca bd 3f dc 2e 7f 51 fc cb 12 7d bb 45 a3 ad f8 13 b5 a3 48 a4 fb d4 d6 d5 d5 fd cf 72 58 4b 6c 4f a4 bc 90 a2 bf 09 e2 77 a1 e4 bf 65 64 4b 51 f7 c0 ee bd ff a3 84 ec 7d f8 bb a2 cf 6c 5d dd 8e af 95 45 5b f2 b8 d8 9d ba 07 fe b6 b4 6f c2 23 db 50 dc da 66 73 4b c0 d5 fd ed d7 4b 3d 48 35 ec dd 25 7c 66 eb ca a8 ed 8e a4 b7 75 7f ff 77 25 7f 13 be 9d 78 13 90 5a 64 53 13 40 75 07 Data Ascii: A?L'>S[Ka#h45fw?#yom]gJ~VmH}1e{=zf#iXz;RV?.Q}EHrXKlOwedKQ}l]E[o#PfsKK=H5%\|fuw%xZdS@u
2024-07-15 15:49:46 UTC	2831	IN	Data Raw: 61 6a 52 83 11 65 44 30 08 82 20 08 82 20 08 82 ac 0f 2e 01 97 b5 ec 48 db 6d ab ed 38 0c 66 53 e0 00 50 16 b2 e3 8e 6c 46 5e 0c 66 0b a0 b6 d9 06 5f 93 9d 9e 4b f0 83 e6 26 27 98 7d 9b 0f 26 49 1f cd 56 bf 44 d4 36 ab 10 ed fb f1 b3 6f 3e 95 5c 5e 38 76 60 8d c3 33 05 c1 bc 79 f4 e5 b5 66 49 1d 78 fd 85 24 07 f3 d4 d1 97 b9 cb 22 6d 16 d4 36 9b 10 1d 78 2a e9 0b 26 51 94 ea 8d d7 57 cb 2b a2 dc 37 53 10 0c 25 7f 73 b5 5f 11 d1 be 43 6f a4 22 98 a7 7e ba 25 6f 71 09 b8 2c 42 94 7b 38 f9 47 26 39 3a 57 f1 56 94 fb f3 d4 04 43 1d 5e e9 ad 48 f4 cc 76 5e b2 76 13 1c 5c ab 2a 82 20 04 91 e8 68 aa 96 26 7e e3 78 a2 b7 29 0c 46 f5 ec ca 60 0e b4 a5 2a 98 37 71 ea 14 b2 0e 22 d1 01 49 8a 8e 4d 8a 4a 34 45 24 ca 4d 5d 30 92 dc 15 ab 5b 3c 9b ba 60 5e 42 6f 91 35 Data Ascii: ajReD0 .Hm8fSPlF^f_K&'}&IVD6o>\^8v`3yfIx$"m6x&QW+7S%s_Co"~%oq,B{8G&9:WVC^Hv^v\ h&~x)F`*7q"IMJ4E$M]0[<`^Bo5
2024-07-15 15:49:46 UTC	10674	IN	Data Raw: 7a 29 97 8d 26 21 98 7d 79 fb f7 ef dd bb 0b 82 d9 20 38 6e 9b 25 b0 07 27 a8 b2 77 ef de a7 81 dc 9d 86 bc 0a bc 1c 4c 25 14 1c 9b b1 60 f6 a7 26 98 55 a3 61 83 d9 9b dc 60 56 fc a0 6d 10 d4 36 5b 10 a8 c2 ba b2 e3 90 97 8a 5b 2b 4a 6d 30 9c 27 2b 45 21 c1 c4 bd dd 9b da 60 36 06 6a 9b 35 08 55 49 1a ec a1 99 78 6c a6 28 98 d5 45 e1 bc 4d d1 47 b3 95 fe 28 d4 36 6b 10 2d 1f 9d 49 3b 3c f7 c3 91 b9 8a b5 29 09 86 8d 86 0d 66 45 34 24 98 54 7c 34 2b 82 d9 08 b8 04 5c f6 10 57 85 1c 9e 2c 3b 77 4c 12 e0 b5 56 f3 24 1e cc be 24 06 f3 c3 d1 f0 3f 9a d4 05 93 c9 6c 7c f0 f6 d7 fc 95 66 9e cb 11 2e 67 91 30 0e 7b 82 b7 eb 5f e5 ac b5 d4 05 d9 f5 e4 ba 03 bb cf e5 ec 42 44 3c 57 08 fb 77 0e ee 15 e0 d5 56 3f 34 53 10 0c 89 46 b4 66 34 24 d6 dd 10 4c e6 92 b7 61 Data Ascii: z)&!}y 8n%'wL%`&Ua`Vm6[[+Jm0'+E!`6j5UIxl(EMG(6k-I;<)fE4$T\|4+\W,;wLV$$?l\|f.g0{_BD<WwV?4SFf4$La
2024-07-15 15:49:46 UTC	11860	IN	Data Raw: 85 21 20 c6 61 b5 5a 6d b3 b3 f0 f7 b5 96 9e f1 21 36 d9 d6 d5 f5 f7 c7 cd ed eb 9b bc 25 85 51 22 ab d3 c9 98 19 67 c8 7d e1 72 05 a4 db c1 f1 f9 7b d7 af 5f bf f7 e8 fa c3 ee 99 f9 71 c3 85 da e6 76 43 61 81 d5 1b b6 ac a6 ed 72 1d b9 0c 3a a1 4a cb ce 9d 39 73 ea d4 99 73 b1 64 5b 52 72 4e 5d 53 2b 05 6d 89 b7 2c 6c b2 bd d5 bb 95 e3 3e cd 27 49 c1 40 6d 56 6b bb 6f bb b4 95 8a c5 e2 0f 36 96 44 8b ce 8b 47 d6 2e 55 5d 7a bb 1a b8 b4 6a e9 a9 1b 8f 1f df a6 76 84 6f 65 56 ab cd 1b f6 02 b3 b3 b3 b3 03 9f 7e f5 d5 57 cd 2e b3 99 69 e9 1a 61 eb c8 c2 f9 c8 75 75 63 93 bd a3 83 83 77 bf bc 7b 77 d4 4a ae 1e b4 74 b3 86 d4 92 59 6d af cf df bb 33 33 21 bd 27 ad fd f4 93 59 63 41 c7 9f e7 bd 1a 5e d3 36 d1 de d2 d2 12 e8 89 2a 2d 2d 3b 07 de 9e 3b 77 0e b6 Data Ascii: ! aZm!6%Q"g}r{_qvCar:J9ssd[RrN]S+m,l>'I@mVko6DG.U]zjvoeV~W.iauucw{wJtYm33!'YcA^6*--;;w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	65076	64.233.166.155	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:46 UTC	849	OUT	POST /g/collect?v=2&tid=G-CXEH5WRXTW&cid=470383722.1721058585&gtm=45je4790v9133397838za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0&frm=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.umso.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:46 UTC	446	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.umso.com Date: Mon, 15 Jul 2024 15:49:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	65080	64.233.166.155	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:46 UTC	849	OUT	POST /g/collect?v=2&tid=G-VYY8D05ZV0&cid=470383722.1721058585&gtm=45je4790v9133397838za200&aip=1&dma=0&gcd=13l3l3l3l1&npa=0&frm=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.umso.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:46 UTC	446	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.umso.com Date: Mon, 15 Jul 2024 15:49:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	65079	142.250.186.110	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:46 UTC	1344	OUT	POST /g/collect?v=2&tid=G-CXEH5WRXTW&gtm=45je4790v9133397838za200&_p=1721058584658&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&tag_exp=0&cid=470383722.1721058585&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1721058585&sct=1&seg=0&dl=https%3A%2F%2Fwww.umso.com%2F%3Futm_source%3Dusite%26utm_campaign%3Dfree%26utm_medium%3Dbtmbadge%26utm_term%3Dxai6l1pibnxefgt2&dt=Umso%20-%20The%20Fastest%20Website%20Builder&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1&tfd=2358&_z=fetch HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.umso.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:46 UTC	446	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.umso.com Date: Mon, 15 Jul 2024 15:49:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	65077	142.250.186.110	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:46 UTC	1337	OUT	POST /g/collect?v=2&tid=G-VYY8D05ZV0&gtm=45je4790v9133397838za200&_p=1721058584658&_gaz=1&gcd=13l3l3l3l1&npa=0&dma=0&tag_exp=0&cid=470383722.1721058585&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1721058585&sct=1&seg=0&dl=https%3A%2F%2Fwww.umso.com%2F%3Futm_source%3Dusite%26utm_campaign%3Dfree%26utm_medium%3Dbtmbadge%26utm_term%3Dxai6l1pibnxefgt2&dt=Umso%20-%20The%20Fastest%20Website%20Builder&en=page_view&_fv=1&_ss=1&_ee=1&tfd=2387&_z=fetch HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.umso.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:46 UTC	446	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.umso.com Date: Mon, 15 Jul 2024 15:49:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	65083	172.217.16.130	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:46 UTC	1459	OUT	GET /td/rul/11236809420?random=1721058585147&cv=11&fst=1721058585147&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2F%3Futm_source%3Dusite%26utm_campaign%3Dfree%26utm_medium%3Dbtmbadge%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20The%20Fastest%20Website%20Builder&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:46 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jul 2024 15:49:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 15-Jul-2024 16:04:46 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-15 15:49:46 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-07-15 15:49:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	65082	172.217.16.130	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:46 UTC	990	OUT	GET /td/ga/rul?tid=G-CXEH5WRXTW&gacid=470383722.1721058585&gtm=45je4790v9133397838za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=1599414305 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:46 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jul 2024 15:49:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 15-Jul-2024 16:04:46 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-15 15:49:46 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-07-15 15:49:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	65081	142.250.185.66	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:46 UTC	1335	OUT	GET /pagead/viewthroughconversion/11236809420/?random=1721058585147&cv=11&fst=1721058585147&bg=ffffff&guid=ON&async=1&gtm=45je4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2F%3Futm_source%3Dusite%26utm_campaign%3Dfree%26utm_medium%3Dbtmbadge%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20The%20Fastest%20Website%20Builder&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:46 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jul 2024 15:49:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 15-Jul-2024 16:04:46 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-15 15:49:46 UTC	548	IN	Data Raw: 61 38 61 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 70 3d 3d 6e 75 6c 6c 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: a8a(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var
2024-07-15 15:49:46 UTC	1390	IN	Data Raw: 20 67 3f 21 21 74 26 26 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 Data Ascii: g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("E
2024-07-15 15:49:46 UTC	767	IN	Data Raw: 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 74 61 67 5f 65 78 70 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 75 6d 73 6f 2e 63 6f 6d 25 32 46 25 33 46 75 74 6d 5f 73 6f 75 72 63 65 25 33 44 75 73 69 74 65 25 32 36 75 74 6d 5f 63 61 6d 70 61 69 67 6e 25 33 44 66 72 65 65 25 32 36 75 74 6d 5f 6d 65 64 69 75 6d 25 33 44 62 74 6d 62 61 64 67 65 25 32 36 75 74 6d 5f 74 65 72 6d 25 33 44 78 61 69 36 6c 31 70 69 62 6e 78 65 66 67 74 32 5c 78 32 36 68 6e 5c 78 33 64 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 55 Data Ascii: 1\x26dma\x3d0\x26tag_exp\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fwww.umso.com%2F%3Futm_source%3Dusite%26utm_campaign%3Dfree%26utm_medium%3Dbtmbadge%26utm_term%3Dxai6l1pibnxefgt2\x26hn\x3dwww.googleadservices.com\x26frm\x3d0\x26tiba\x3dU
2024-07-15 15:49:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	65084	172.217.16.130	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:46 UTC	989	OUT	GET /td/ga/rul?tid=G-VYY8D05ZV0&gacid=470383722.1721058585&gtm=45je4790v9133397838za200&dma=0&gcd=13l3l3l3l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&z=955179475 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:46 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jul 2024 15:49:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 15-Jul-2024 16:04:46 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-15 15:49:46 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-07-15 15:49:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	65091	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:47 UTC	570	OUT	GET /api/view HTTP/1.1 Host: www.umso.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
2024-07-15 15:49:47 UTC	314	IN	HTTP/1.1 404 Not Found Cache-Control: public, max-age=0, must-revalidate Content-Length: 55100 Content-Type: text/html;charset=utf-8 Referrer-Policy: no-referrer-when-downgrade Strict-Transport-Security: max-age=15552000 X-Frame-Options: sameorigin Date: Mon, 15 Jul 2024 15:49:47 GMT Connection: close
2024-07-15 15:49:47 UTC	872	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 6d 73 6f 2e 63 6f 6d 2f 6c 69 62 5f 4c 55 47 6f 50 69 71 58 58 6c 44 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><link rel="icon" href="https://www.umso.com/lib_LUGoPiqXXlD
2024-07-15 15:49:47 UTC	2372	IN	Data Raw: 74 65 72 27 2c 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 53 65 67 6f 65 20 55 49 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 0a 20 20 2d 2d 66 6f 6e 74 2d 74 69 74 6c 65 3a 20 6e 6f 72 6d 61 6c 20 6e 6f 72 6d 61 6c 20 38 30 30 20 31 65 6d 20 27 49 6e 74 65 72 27 2c 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 53 65 67 6f 65 20 55 49 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 2d 2d 66 6f 6e 74 2d 73 79 73 74 65 6d 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 Data Ascii: ter', -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica, Arial, sans-serif; line-height: 1.5; --font-title: normal normal 800 1em 'Inter', -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica, Arial, sans-serif; --font-system: -apple-system,
2024-07-15 15:49:47 UTC	538	IN	Data Raw: 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2d 37 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 35 30 25 20 35 30 25 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 2e 33 73 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 20 62 61 63 6b 67 72 6f 75 6e 64 20 63 6f 6c 6f 72 3b 0a 7d 0a 2e 6d 61 64 65 57 69 74 68 55 6d 73 6f 20 73 76 67 20 7b 0a 20 Data Ascii: font-weight: 500; white-space: nowrap; margin-right: -70px !important; border-radius: 6px; text-decoration: none !important; transform-origin: 50% 50%; animation-duration: 1.3s; transition-property: background color;}.madeWithUmso svg {
2024-07-15 15:49:47 UTC	4744	IN	Data Raw: 2e 62 61 64 67 65 2d 2d 72 69 67 68 74 20 7b 0a 20 20 6c 65 66 74 3a 20 31 30 30 25 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 31 36 35 70 78 3b 0a 7d 0a 2e 6d 61 64 65 57 69 74 68 55 6d 73 6f 2e 62 61 64 67 65 2d 2d 63 65 6e 74 65 72 20 7b 0a 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 37 30 70 78 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 35 30 70 78 29 20 7b 0a 20 20 20 2e 6d 61 64 65 57 69 74 68 55 6d 73 6f 2e 66 6f 6f 74 65 72 42 61 64 67 65 20 7b 0a 20 20 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 37 30 70 78 3b 0a 20 20 7d 0a 7d 0a 2e 6d 61 64 65 57 69 74 68 55 6d 73 6f 3a 68 6f 76 65 72 20 73 76 67 20 7b 0a 20 20 66 Data Ascii: .badge--right { left: 100%; margin-left: -165px;}.madeWithUmso.badge--center { left: 50%; margin-left: -70px;}@media (max-width: 750px) { .madeWithUmso.footerBadge { left: 50%; margin-left: -70px; }}.madeWithUmso:hover svg { f
2024-07-15 15:49:47 UTC	5930	IN	Data Raw: 2d 2d 63 6f 6c 6f 72 2d 74 65 78 74 2d 70 72 69 6d 61 72 79 29 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 67 72 6f 77 3a 20 31 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 75 6d 2d 6e 61 76 2d 77 72 61 70 70 65 72 20 2e 75 6d 2d 6e 61 76 2d 64 72 61 77 65 72 54 72 69 67 67 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 75 6d 2d 6e 61 76 2d 77 72 61 70 70 65 72 2e 75 6d 2d 73 70 61 63 65 2d 62 65 74 77 65 65 6e 20 2e 75 6d 2d 6e 61 76 2d 6c 69 6e 6b 73 20 7b 0a 20 20 70 61 64 64 69 6e 67 6c 65 66 74 3a 20 33 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 7d 0a 2e 75 6d 2d 6e 61 76 2d 77 72 61 70 70 65 72 2e 75 6d 2d 6c 69 6e 6b Data Ascii: --color-text-primary); display: flex; flex-grow: 1; align-items: center;}.um-nav-wrapper .um-nav-drawerTrigger { display: none;}.um-nav-wrapper.um-space-between .um-nav-links { paddingleft: 30; margin-right: auto;}.um-nav-wrapper.um-link
2024-07-15 15:49:48 UTC	7116	IN	Data Raw: 20 33 30 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 75 6d 73 6f 4d 6f 64 61 6c 20 7b 0a 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 34 30 70 78 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 30 30 31 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 35 30 30 70 78 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 Data Ascii: 30px; background: transparent; text-align: center;}.umsoModal { top: 50%; left: 50%; color: black; display: block; padding: 40px; z-index: 10001; position: fixed; min-width: 500px; transform: translate(-50%, -50%); background: w
2024-07-15 15:49:48 UTC	8302	IN	Data Raw: 20 69 6e 68 65 72 69 74 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 7d 0a 2e 5f 33 32 63 61 65 64 35 39 20 3e 20 61 3a 68 6f 76 65 72 2c 20 2e 5f 33 32 63 61 65 64 35 39 20 3e 20 73 70 61 6e 3a 68 6f 76 65 72 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 5f 33 32 63 61 65 64 35 39 20 3e 20 61 20 3e 20 64 69 76 20 2b 20 73 70 61 6e 2c 20 2e 5f 33 32 63 61 65 64 35 39 20 3e 20 73 70 61 6e 20 3e 20 64 69 76 20 2b 20 73 70 61 6e 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 63 61 6c 63 28 31 35 70 78 20 2a 20 76 61 72 28 2d 2d 67 61 70 29 29 3b 0a 7d 0a 2e 5f 62 39 39 32 Data Ascii: inherit; display: flex; align-items: center; line-height: 0;}._32caed59 > a:hover, ._32caed59 > span:hover { text-decoration: none;}._32caed59 > a > div + span, ._32caed59 > span > div + span { margin-left: calc(15px * var(--gap));}._b992
2024-07-15 15:49:48 UTC	9488	IN	Data Raw: 69 76 20 63 6c 61 73 73 3d 22 75 6d 2d 64 72 61 77 65 72 2d 62 75 74 74 6f 6e 73 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 70 70 2e 75 6d 73 6f 2e 63 6f 6d 2f 6c 6f 67 69 6e 22 20 69 64 3d 22 64 5f 62 74 6e 5f 39 76 63 71 79 79 63 69 6a 39 22 20 63 6c 61 73 73 3d 22 5f 65 37 32 65 37 35 62 32 20 62 74 6e 22 3e 3c 73 70 61 6e 3e 4c 6f 67 69 6e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 70 70 2e 75 6d 73 6f 2e 63 6f 6d 2f 73 69 67 6e 75 70 22 20 69 64 3d 22 64 5f 68 30 34 72 71 7a 36 30 68 66 74 22 20 63 6c 61 73 73 3d 22 5f 38 39 35 31 37 35 36 33 20 62 74 6e 22 3e 3c 73 70 61 6e 3e 53 69 67 6e 20 55 70 3c 2f 73 70 61 6e 3e 3c 73 76 67 20 77 69 64 74 68 3d 22 31 65 6d 22 20 76 69 65 77 42 6f 78 Data Ascii: iv class="um-drawer-buttons"><a href="https://app.umso.com/login" id="d_btn_9vcqyycij9" class="_e72e75b2 btn"><span>Login</span></a><a href="https://app.umso.com/signup" id="d_h04rqz60hft" class="_89517563 btn"><span>Sign Up</span><svg width="1em" viewBox
2024-07-15 15:49:48 UTC	10674	IN	Data Raw: 27 29 3b 65 26 26 28 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 27 6e 6f 6e 65 27 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 6d 61 64 65 57 69 74 68 55 6d 73 6f 27 29 3b 6e 75 6c 6c 21 3d 3d 65 26 26 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 62 61 64 67 65 2d 2d 63 65 6e 74 65 72 27 29 7d 28 29 7d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 6d 61 74 63 68 28 27 74 72 61 63 6b 69 6e 67 50 72 65 66 65 72 65 6e 63 65 73 27 29 3f 65 28 29 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 62 61 6e 6e 65 72 57 72 61 70 70 65 72 27 29 3b 65 26 26 28 65 2e 73 74 79 6c Data Ascii: ');e&&(e.style.display='none'),function(){const e=document.getElementById('madeWithUmso');null!==e&&e.classList.add('badge--center')}()}document.cookie.match('trackingPreferences')?e():function(){const e=document.getElementById('bannerWrapper');e&&(e.styl
2024-07-15 15:49:48 UTC	5064	IN	Data Raw: 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 65 29 7d 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 65 29 3a 65 2e 53 6d 6f 6f 74 68 53 63 72 6f 6c 6c 3d 74 28 65 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 29 7b 66 6f 72 28 76 Data Ascii: "function"==typeof define&&define.amd?define([],function(){return t(e)}):"object"==typeof exports?module.exports=t(e):e.SmoothScroll=t(e)}("undefined"!=typeof global?global:"undefined"!=typeof window?window:this,function(b){"use strict";function O(){for(v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	65093	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:47 UTC	614	OUT	GET /lib_LUGoPiqXXlDptSWA/b0hytbjf7cdicnze.svg?h=80&dpr=2 HTTP/1.1 Host: www.umso.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
2024-07-15 15:49:47 UTC	254	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 2897 Content-Type: image/svg+xml Last-Modified: Fri, 03 May 2024 10:23:22 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:49:47 GMT Connection: close
2024-07-15 15:49:47 UTC	932	IN	Data Raw: 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 34 30 20 33 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 4d 33 36 2e 38 20 31 32 48 35 31 76 32 2e 36 68 2d 35 2e 36 76 31 34 2e 36 68 2d 33 56 31 34 2e 36 68 2d 35 2e 36 56 31 32 7a 6d 31 33 2e 36 20 34 2e 37 48 35 33 76 32 2e 34 6c 2e 35 2d 31 61 34 2e 36 20 34 2e 36 20 30 20 30 20 31 20 32 2d 31 2e 35 20 33 2e 35 20 33 2e 35 20 30 20 30 20 31 20 31 2e 32 2d 2e 32 68 31 2e 31 76 32 2e 37 61 39 20 39 20 30 20 30 20 30 2d 2e 36 20 30 20 35 2e 32 20 35 2e 32 20 30 20 30 20 30 2d 2e 36 2d 2e 31 63 2d 2e 35 20 30 2d 31 20 30 2d 31 2e 34 2e 33 61 33 20 33 20 30 20 30 20 30 Data Ascii: <svg viewBox="0 0 140 34" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M36.8 12H51v2.6h-5.6v14.6h-3V14.6h-5.6V12zm13.6 4.7H53v2.4l.5-1a4.6 4.6 0 0 1 2-1.5 3.5 3.5 0 0 1 1.2-.2h1.1v2.7a9 9 0 0 0-.6 0 5.2 5.2 0 0 0-.6-.1c-.5 0-1 0-1.4.3a3 3 0 0 0
2024-07-15 15:49:47 UTC	1965	IN	Data Raw: 2e 33 2e 35 2e 34 20 31 20 2e 36 6c 31 2e 32 2e 33 20 31 2e 36 2e 33 20 31 2e 35 2e 35 63 2e 35 2e 31 2e 39 2e 33 20 31 2e 33 2e 36 73 2e 37 2e 36 2e 39 20 31 63 2e 32 2e 35 2e 34 20 31 20 2e 34 20 31 2e 36 20 30 20 2e 37 2d 2e 32 20 31 2e 33 2d 2e 36 20 31 2e 39 61 34 20 34 20 30 20 30 20 31 2d 31 2e 33 20 31 2e 32 20 36 2e 33 20 36 2e 33 20 30 20 30 20 31 2d 31 2e 38 2e 37 20 39 2e 33 20 39 2e 33 20 30 20 30 20 31 2d 32 20 2e 32 20 38 2e 36 20 38 2e 36 20 30 20 30 20 31 2d 32 2e 32 2d 2e 32 63 2d 2e 37 2d 2e 32 2d 31 2e 33 2d 2e 35 2d 31 2e 38 2d 2e 38 41 34 20 34 20 30 20 30 20 31 20 37 33 20 32 37 63 2d 2e 33 2d 2e 35 2d 2e 34 2d 31 2e 32 2d 2e 34 2d 31 2e 39 68 32 2e 38 7a 6d 39 2e 32 2d 38 2e 35 68 32 2e 31 56 31 33 68 32 2e 38 76 33 2e 37 48 39 32 Data Ascii: .3.5.4 1 .6l1.2.3 1.6.3 1.5.5c.5.1.9.3 1.3.6s.7.6.9 1c.2.5.4 1 .4 1.6 0 .7-.2 1.3-.6 1.9a4 4 0 0 1-1.3 1.2 6.3 6.3 0 0 1-1.8.7 9.3 9.3 0 0 1-2 .2 8.6 8.6 0 0 1-2.2-.2c-.7-.2-1.3-.5-1.8-.8A4 4 0 0 1 73 27c-.3-.5-.4-1.2-.4-1.9h2.8zm9.2-8.5h2.1V13h2.8v3.7H92

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	65088	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:47 UTC	620	OUT	GET /lib_LUGoPiqXXlDptSWA/csi5g5qmp4uscbth.png?w=200&h=40&dpr=2 HTTP/1.1 Host: www.umso.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
2024-07-15 15:49:47 UTC	250	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 9764 Content-Type: image/png Last-Modified: Fri, 03 May 2024 09:59:15 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:49:47 GMT Connection: close
2024-07-15 15:49:47 UTC	936	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 8e 00 00 00 4f 08 03 00 00 00 cb 19 d2 eb 00 00 03 00 50 4c 54 45 4c 69 71 f9 f3 ff f8 f2 ff f7 f2 ff f8 f3 fe f8 f3 ff f7 f3 ff f8 f3 ff f8 f3 ff f9 f3 ff f8 f3 ff f8 f3 ff f9 f5 ff f8 f3 ff f7 f3 ff f9 f4 ff f8 f3 ff f8 f3 ff f7 f2 ff f9 f6 ff f8 f3 ff f8 f3 ff f8 f4 ff f7 f3 ff f8 f2 ff f8 f3 ff f8 f3 ff f8 f3 ff f8 f4 ff f8 f3 ff f8 f2 ff f8 f3 ff f8 f3 ff f7 f3 ff f9 f3 ff f8 f3 ff f8 f4 ff f8 f2 ff f8 f3 ff f8 f2 ff f8 f4 ff f8 f4 ff f8 f3 ff f7 f2 ff f9 f3 ff f8 f3 ff f8 f3 ff f8 f3 ff f8 f3 ff f8 f2 ff f8 f4 ff f8 f3 ff f8 f3 ff f9 f4 ff f9 f3 ff f8 f3 ff f8 f4 ff f8 f3 ff f8 f3 ff f8 f3 ff f8 f3 ff f8 f3 ff f9 f3 ff f8 f3 ff f8 f3 fe f8 f3 ff f8 f3 ff f8 f3 ff f9 f3 ff f8 f3 ff f8 f2 ff f8 Data Ascii: PNGIHDROPLTELiq
2024-07-15 15:49:47 UTC	2372	IN	Data Raw: 38 11 f7 0a a6 b1 17 14 41 36 d5 e1 0d 10 f9 ce e4 bd eb a8 a2 fb 2b f5 f2 a4 a0 28 1e 3c 19 47 2d e6 d2 4e 20 4a 3d ef a5 e0 a3 d0 f3 33 0f 15 4c b0 51 4b cc d5 cf 34 37 54 de 52 9a 22 01 f4 f4 50 f8 ab 53 5d b5 5c 35 4d 4f 45 d4 ec d5 d4 5f 0c 5a 59 ee 98 cf 9f de 3b f3 e0 5b 6d ed d6 03 db 9b 69 96 cc db cd 79 7e df d2 6f 61 87 8d ed 93 8a 72 0c e9 7f dd f1 fd cf 90 82 75 85 b0 f6 67 7c d2 d1 dd 7c f4 7e 0a 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 9c ed 5c 0b 70 4c e7 db 7f ed d9 3d ef 3a 9b 5d b2 a2 1b 83 c8 44 19 ac 24 22 91 54 58 d9 71 a9 c9 10 52 36 99 56 52 04 4d d5 34 ec 5f 5d 8a 52 71 99 ac 4b 28 32 5a e3 d2 0b a5 7a 11 31 42 46 5b 97 84 f0 69 fb b9 94 9a 06 d5 2a fe 6a a8 f6 73 7d df 73 36 fd e6 Data Ascii: 8A6+(<G-N J=3LQK47TR"PS]\5MOE_ZY;[miy~oarug\|\|~pHYs IDATx\pL=:]D$"TXqR6VRM4_]RqK(2Zz1BF[i*js}s6
2024-07-15 15:49:47 UTC	538	IN	Data Raw: f1 fc 97 fc d2 3c 37 88 b7 21 3b 6d a0 09 66 10 8a 16 3b ce 9b e0 77 3f 4d fd 02 5a 4a 0b 4d 14 25 bb 28 0a 05 c1 62 d0 f2 4e ef 8f 1a 35 aa 63 10 6f d5 04 5c 98 5f 39 f6 cd d4 d4 9f 09 45 ce af 5b e7 53 91 ab 83 f7 9f 38 4c 55 c4 97 1b 7a 6c 66 93 13 5a d1 37 f5 48 02 f9 7a c3 f1 22 3a d1 2e 10 0e 88 a1 5e 0a 36 25 50 8f 4d 58 74 21 5d 88 f9 d2 a3 42 d4 4d 7b 2e 37 38 2e 39 10 c7 04 08 62 1d 67 21 24 27 f0 40 8b 47 da e3 77 33 06 b0 07 e1 04 29 c4 c1 89 e9 75 c8 81 d1 a7 5a 7e f0 da 9c fb 25 05 8b 99 44 2d 34 2e aa 5d bb 41 cb 97 77 ea f4 fe fb a3 46 6d 7f f5 d5 8e ed 82 cd 5a c6 d0 5f 4e 8e 3d f9 66 6a 6a ea a9 6b f7 ef 7f 45 28 42 e3 ac 92 81 24 13 d9 af c6 59 3b 88 88 14 16 3a 04 4f 26 1a 38 a5 1e 65 03 be fe ce 0a 2f 9c 18 c4 59 29 d3 2b d1 bc 47 e3 Data Ascii: <7!;mf;w?MZJM%(bN5co\_9E[S8LUzlfZ7Hz":.^6%PMXt!]BM{.78.9bg!$'@Gw3)uZ~%D-4.]AwFmZ_N=fjjkE(B$Y;:O&8e/Y)+G
2024-07-15 15:49:47 UTC	4744	IN	Data Raw: a7 88 2c 19 c1 e2 ac c5 68 5b 7d 2a 24 fc 53 80 43 af 93 32 4d 34 07 44 22 72 72 48 c7 be a1 cc 16 46 82 57 12 91 84 90 84 3d 50 d5 12 9d e4 c0 af ab 27 34 82 d6 d8 2c 87 ab 10 43 8c a2 ef 7c fa 4a 5c fc b9 ec 1d 18 d9 1c 52 a9 d6 55 f1 60 66 09 16 14 34 f4 b5 88 b3 8b 58 44 56 9b 15 21 09 d9 c8 5a 29 3b b3 28 48 a9 d3 7c bc 72 2b 01 ed 14 82 84 0f 0a 99 16 75 b0 58 b6 6c d9 b2 2e 5d 16 3d ff 6a c0 9c 95 65 ec db b2 f5 de bd 7e 14 11 99 22 54 d6 69 9c 45 01 b9 4a ca 27 27 68 b6 3e 82 52 64 87 69 68 88 7a cb 53 87 03 8a 52 82 88 b7 de dc b6 66 4d fc 6f 77 31 72 29 02 a0 a0 01 ed 58 9c 7c 65 e3 2b 71 55 47 f7 4b d8 84 38 36 62 31 e3 d9 ca 54 19 41 bb 3c c9 29 7f 4f d2 73 d2 71 e5 12 06 bd b6 4e c4 83 3f d1 fa 2a 1e c4 88 0e c4 82 61 9d 28 25 20 f4 43 cc f1 Data Ascii: ,h[}$SC2M4D"rrHFW=P'4,C\|J\RU`f4XDV!Z);(H\|r+uXl.]=je~"TiEJ''h>RdihzSRfMow1r)X\|e+qUGK86b1TA<)OsqN?a(% C
2024-07-15 15:49:47 UTC	1174	IN	Data Raw: 1d 46 30 fa 4f 2c 76 b0 5b 38 4d e7 02 9b 5a 93 1d e7 0d 0b 6c e6 02 fc 65 22 de b5 9a fd 80 d4 2c 88 83 42 2d 2a 7f cd 2f c3 0f 6d 4d 41 d8 ed f4 a2 62 92 41 b0 24 bb fd ae 5d 24 a7 1b b3 89 3a 2b 59 3c 68 a4 bb 80 24 e6 aa b3 22 ab 7e 74 d9 8f b6 e9 92 0e ab ad fb ce ff cd 3f 85 17 ec 19 00 38 67 96 b0 23 93 f4 71 d0 bb 83 58 8f f5 26 7b 82 88 52 37 d7 ed 4a 36 82 48 29 81 bd fe 24 68 63 4f 25 72 c9 a3 b5 82 14 a4 b1 47 d4 bf 28 0f 9b 7c 6d 6f 06 00 7a 24 49 48 f4 d8 af 93 f9 65 d7 00 b1 de e5 c0 a8 67 b0 7a 03 0f 40 d7 e7 24 24 d9 ad 2f ea 2c 3a fa 0d 28 e9 31 34 b9 04 8c 71 46 e7 10 6f 5d 08 34 1e 80 bd c5 19 47 95 32 6d 46 7a 7b 92 3f 10 76 50 67 25 af 88 13 ed 20 55 c4 b4 94 be b4 b3 4a ed ad 8a 2e d8 52 50 53 53 53 33 6f c3 bd 9a a1 f3 76 d7 fb ac Data Ascii: F0O,v[8MZle",B-*/mMAbA$]$:+Y<h$"~t?8g#qX&{R7J6H)$hcO%rG(\|moz$IHegz@$$/,:(14qFo]4G2mFz{?vPg% UJ.RPSSS3ov

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	65090	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:47 UTC	603	OUT	GET /lib_LUGoPiqXXlDptSWA/amufjz1o6hqa4qle.png HTTP/1.1 Host: www.umso.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
2024-07-15 15:49:47 UTC	250	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 4737 Content-Type: image/png Last-Modified: Fri, 03 May 2024 09:59:16 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:49:47 GMT Connection: close
2024-07-15 15:49:47 UTC	936	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 64 08 03 00 00 00 47 3c 65 66 00 00 00 3c 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4c 69 71 00 00 00 00 00 00 6d 32 b6 2c 00 00 00 14 74 52 4e 53 1a 10 0f 0d 11 14 13 18 16 17 0c 0b 09 08 07 05 04 00 03 01 a5 35 16 68 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 11 cb 49 44 41 54 68 81 55 5a 89 96 24 29 8c 13 60 b0 0d 71 64 d6 fc ff bf ee 93 20 7b 77 6b de 74 77 65 46 10 e0 43 96 ec 00 10 c8 36 e0 98 ab 00 70 47 35 5c c3 81 0e 00 b5 22 10 03 3d 31 80 31 07 80 ab 00 63 75 e3 f7 fc 23 0c ef d0 d5 c0 c0 a3 bf 9d b7 3b f2 fc 12 fc 2b ce 9a 6b 34 Data Ascii: PNGIHDRddG<ef<PLTELiqm2,tRNS5hpHYsIDAThUZ$)`qd {wktweFC6pG5\"=11cu#;+k4
2024-07-15 15:49:47 UTC	2372	IN	Data Raw: 7e 2f f8 06 bc 8f 84 4f ed 61 c9 48 8a b3 d4 2a d6 d0 ea 1b 8d a9 2e 18 54 48 c9 d3 5e 83 7b 9a 6e d5 f1 b5 6d f9 28 f9 09 c7 53 72 9b 4b 70 42 6b 34 c4 50 3e f1 b3 4f f6 08 e4 15 3a c8 b1 dc 20 56 f1 29 8c 4c 58 e9 28 de e4 63 e3 87 83 35 8d 78 19 8e 82 99 e5 cd 8e 51 a3 dc ba fd 03 b4 86 4a 23 77 5c 1d be f0 b2 5a a1 10 50 b4 e3 21 af 0a 44 06 ee 1d 71 d3 51 e6 73 f1 b1 c6 44 63 92 85 3d 7c 2c cb 62 bf 5e ae 87 c7 13 63 98 00 8d a0 31 3c 71 0d f4 e0 e1 e8 cc e2 ba 8e 2b a6 67 23 3c 7b 0f 5c a6 b4 59 66 65 4d 60 7c 4c 98 ae 9c bb c3 09 12 0c d0 41 10 06 ca 04 2c 62 e0 f6 fc b3 c8 7b 57 f4 c5 03 33 04 4f 7c 65 e4 8e 4c 42 0a f7 2c 30 e7 83 c6 7f 78 95 2b 51 86 c2 f2 e4 55 e4 20 38 5b a7 df 91 e9 a3 60 78 ab 45 0e d0 5a ac fb ed 50 0c 2e f1 32 49 78 d2 3e Data Ascii: ~/OaH*.TH^{nm(SrKpBk4P>O: V)LX(c5xQJ#w\ZP!DqQsDc=\|,b^c1<q+g#<{\YfeM`\|LA,b{W3O\|eLB,0x+QU 8[`xEZP.2Ix>
2024-07-15 15:49:47 UTC	538	IN	Data Raw: 35 c1 99 4f 63 67 c5 2b e7 27 e4 b6 34 84 02 5c 1d d1 2d 55 f9 f4 55 bd dc be 58 f5 53 41 72 c3 2a 93 cc c6 0a cf ba 55 ef 69 e6 df 46 76 be 83 aa 16 4b 4b 7c 88 98 5b a9 b3 a1 95 58 24 00 a2 9d 9d 61 f9 e0 56 6b 45 85 8f 76 66 38 6c 3f 25 5b 97 ec 95 0f f6 cf 38 9b 8a 10 25 b5 34 8e 0b e4 6c 57 b3 74 36 de ba 7b 02 a9 4e 5f ec 21 1e 6a 5c dd 15 1f ac db 32 d5 b3 f3 4a b3 8a fc ae 14 be a5 9e 1a 14 ab 6c ff d1 3c c5 3c 6e d6 4a 09 21 a8 b1 d6 31 db 92 ac 90 f4 98 4a 2c ea de c0 4b 68 e1 51 94 5d f9 e4 16 2f 94 13 b5 a8 69 df d4 b1 61 f5 62 72 0f 2a c7 a8 bb 41 4f 38 94 3c e0 68 84 9c aa e8 17 e6 bc 06 6a 95 39 aa be d0 ee ba 9a dc 2a 16 fc b4 4b 47 27 45 a4 a7 91 b2 b0 b2 73 17 25 b2 e9 4b 89 9e 34 00 d1 69 13 40 51 19 96 80 57 37 6e 5f 12 d4 d4 ea 56 ac Data Ascii: 5Ocg+'4\-UUXSArUiFvKK\|[X$aVkEvf8l?%[8%4lWt6{N_!j\2Jl<<nJ!1J,KhQ]/iabrAO8<hj9*KG'Es%K4i@QW7n_V
2024-07-15 15:49:47 UTC	891	IN	Data Raw: a6 66 f4 b0 67 5e de a9 63 36 48 14 e6 8f d0 5f 21 70 e6 ef 76 a6 66 ac b2 18 31 2a 15 8c ef 39 7b 70 a4 67 35 a4 63 69 af 27 d9 20 7f 60 3e 2b 83 6a 98 28 5c a5 54 fa ee b6 09 b9 25 3d f2 6f 32 cc 0e b0 46 50 80 4f fa 33 ea 1f 2b 53 16 ea ef fb 4a 0a 08 ce 69 1e 3d 73 e1 e5 f6 92 7d 1f aa 92 d3 40 fc 41 82 fa 69 03 e3 62 12 b0 d3 46 0e 35 be a4 77 67 ea cc f3 38 99 f3 f3 d9 5d 78 e9 36 36 0a e4 fc e4 8e 68 eb 1b 5b c6 d3 3a 87 ee 4a ba 93 68 0a e7 0a 51 9e a2 52 2d 7d a1 18 3c 58 0d 59 b8 59 a6 54 4b 7b 67 a4 10 70 35 2e 55 b2 fc c8 d9 e2 cc 0b f6 2a 4e 6c 15 f2 2e d3 e0 82 34 4b cd df f8 fe ba c8 a7 86 29 73 ce 86 74 e6 04 fe c8 4a 68 89 c9 97 02 88 45 3c f0 47 42 84 93 d1 c1 e9 48 90 41 fd e6 e4 1c 8c cf 86 ea ac 87 12 0b 99 84 e3 d4 a4 8c df 0e ce c7 Data Ascii: fg^c6H_!pvf19{pg5ci' `>+j(\T%=o2FPO3+SJi=s}@AibF5wg8]x66h[:JhQR-}<XYYTK{gp5.UNl.4K)stJhE<GBHA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	65094	104.17.3.184	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:47 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/933894468:1721056355:RyplnyimmfYhJciDA6jrSPoRvYRXtp1ZR4mVrzF0eEo/8a3ae756188b0f7f/4b6ddc26d277b97 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:47 UTC	379	IN	HTTP/1.1 404 Not Found Date: Mon, 15 Jul 2024 15:49:47 GMT Content-Type: application/json Content-Length: 7 Connection: close cf-chl-out: xXYYiUX4j4CXm1xW/+7MbmTiBl5uosaAlYA=$n0FhrNAVIZ2z9VB5 cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8a3ae78e5a180c94-EWR alt-svc: h3=":443"; ma=86400
2024-07-15 15:49:47 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	65087	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:47 UTC	603	OUT	GET /lib_LUGoPiqXXlDptSWA/jocl5anhrivcjdwx.png HTTP/1.1 Host: www.umso.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
2024-07-15 15:49:47 UTC	251	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 47233 Content-Type: image/png Last-Modified: Fri, 03 May 2024 09:59:16 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:49:47 GMT Connection: close
2024-07-15 15:49:47 UTC	935	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 b6 00 00 04 0e 08 03 00 00 00 d8 1a 54 3c 00 00 03 00 50 4c 54 45 32 34 42 2c 2e 36 20 20 20 22 22 22 24 24 26 24 24 24 2e 30 3a 4c 69 71 22 22 22 30 32 3e 30 32 40 22 22 22 2a 2c 32 26 26 2a 20 20 20 23 23 23 28 28 2e 23 23 23 26 28 2a 30 32 3c 28 2a 2e 28 2a 30 22 22 22 23 23 23 21 21 21 24 24 24 28 28 2c 2b 2c 34 26 26 28 2c 2e 34 25 25 25 23 23 23 2a 2a 30 20 20 20 28 28 28 20 20 20 2a 2a 32 24 24 28 2e 2e 38 32 32 40 20 20 20 20 20 20 24 24 24 2c 2e 38 24 26 26 26 26 26 20 20 20 28 2a 2c 26 28 2c 2e 30 38 62 bf f9 ff ff ff 2e 30 3c ff ff ff ff ff ff ff ff ff 62 bf f8 ff ff ff 61 c0 fa 63 bf f8 62 bf f9 ff ff ff ff ff ff 33 4e 64 48 8a b5 63 bf fa 63 bf fa 63 bf f8 1c 2e 3d 28 49 5e 1f 38 49 5f Data Ascii: PNGIHDRT<PLTE24B,.6 """$$&$$$.0:Liq"""02>02@""",2&& ###((.###&(02<(.(0"""###!!!$$$((,+,4&&(,.4%%%###0 ((( 2$$(..822@ $$$,.8$&&&&& (,&(,.08b.0<bacb3NdHccc.=(I^8I_
2024-07-15 15:49:47 UTC	2372	IN	Data Raw: af 70 f1 cf 10 8f 40 a0 df 7f 50 90 af 8f 91 20 80 48 bf df b0 af 40 20 60 cf d6 ef b7 bc 96 bf ef 8a ef 70 30 ba 80 af bf 7f cf 7f 68 c7 98 4c a0 87 c7 d7 40 c7 50 cf 6f bf cf 6f 78 18 28 db f9 a5 87 62 ee f9 14 88 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 9c ec bd 5b 8c 2c db 79 df d7 55 b5 56 f5 b7 ea da d5 5d 7d ef ea eb 74 f7 dc 7a 66 93 67 9f 7d 78 40 ee 23 50 0c 21 e3 f8 80 10 09 8a 92 42 3e 38 38 90 4c 0a 20 2d 52 b4 05 46 8c 25 43 8e 04 10 b2 2e 80 10 04 50 02 07 71 80 e4 25 97 a7 60 f8 94 07 fa c1 41 1e a4 40 46 12 23 81 a3 24 8e 12 c7 b9 d8 89 93 48 79 0a be 55 55 dd 55 dd d5 3d dd 33 7d 99 9a f9 7e 00 79 66 ef 3d b7 ae ae 7f ad b5 be cb ff 2b 14 09 82 c8 19 85 53 ff 02 04 41 ec 0a c9 96 20 72 07 Data Ascii: p@P H@ `p0hL@Poox(bpHYs IDATx[,yUV]}tzfg}x@#P!B>88L -RF%C.Pq%`A@F#$HyUUU=3}~yf=+SA r
2024-07-15 15:49:47 UTC	538	IN	Data Raw: fd f8 a9 7f 03 82 d8 0b 2f 49 b6 04 f1 4c 20 d9 12 44 ee 20 d9 12 44 ee 20 d9 12 44 ee 20 d9 12 44 ee 78 49 b2 a5 bc 2d f1 4c 20 d9 12 44 ee 20 d9 12 44 ee 20 d9 12 44 ee 20 d9 12 44 ee 78 49 b2 fd dc 57 4e fd 1b 10 c4 5e 78 49 b2 25 88 67 02 c9 96 20 72 07 c9 96 20 72 07 c9 96 20 72 c7 4b 92 ed 57 be 70 ea df 80 20 f6 c2 4b 92 2d 15 37 12 cf 04 92 2d 41 e4 0e 92 2d 41 e4 0e 92 2d 41 e4 8e 97 24 db 5f fa ec a9 7f 03 82 d8 0b 2f 49 b6 04 f1 4c 20 d9 12 44 ee 20 d9 12 44 ee 20 d9 12 44 ee 20 d9 12 44 ee 78 49 b2 a5 48 32 f1 4c 78 49 b2 a5 e2 46 e2 99 40 b2 25 88 dc 41 b2 25 88 dc 41 b2 25 88 dc f1 92 64 fb e9 5f 3a f5 6f 40 10 7b e1 25 c9 96 20 9e 09 24 5b 82 c8 1d 24 5b 82 c8 1d 24 5b 82 c8 1d 2f 49 b6 9f fb f4 a9 7f 03 82 d8 0b 2f 49 b6 54 25 45 3c 13 48 Data Ascii: /IL D D D DxI-L D D D DxIWN^xI%g r r rKWp K-7-A-A-A$_/IL D D D DxIH2LxIF@%A%A%d_:o@{% $[$[$[/I/IT%E<H
2024-07-15 15:49:47 UTC	4744	IN	Data Raw: 6c 89 8a ae 5f 49 d5 5a 92 5b 54 ae fc 56 04 b1 25 24 db 62 71 d4 d3 a2 75 f1 fa 36 d0 2b ba 72 1b 64 c9 2d c4 b8 52 82 6a c9 96 eb 6e 2d fe ba 70 05 ee 69 00 d7 7e 99 03 98 26 74 02 91 fd 0d c4 ea 22 ee 76 71 85 57 87 dd 6e d3 f3 9a cd ae 7c 04 10 c4 5a 5e b2 6c e5 d9 b5 51 ec 02 b7 70 0b 1b ae a8 9b b9 62 52 ae ae db d3 78 e7 b6 1a 28 f1 92 2c 44 c5 f7 03 5d 7e 8b ca 44 b1 fc 0e 40 65 8d 6e 2d 05 bf 4c d7 71 8f cc cb b8 6c c7 5b f2 eb eb 72 b9 7c cd 01 9a c5 67 82 d3 d8 70 92 20 1e ca 4b 92 ed e7 be 92 f8 83 d3 6d 86 52 19 aa 1e 7c e2 7e c1 e2 42 5b 51 6c fc 0a b3 86 ff 6f dd f7 e9 6b 54 bb 8c 8d 8b 3c 6e c9 2b 72 79 16 57 d5 16 03 38 6e 9c 4a 06 da 86 dd d9 9e 4f d8 43 dc 7f 80 d6 a3 93 fb be 79 49 b2 5d e0 cc 5c e0 d7 65 4b 08 d1 02 b7 6e 02 ab 5a 25 Data Ascii: l_IZ[TV%$bqu6+rd-Rjn-pi~&t"vqWn\|Z^lQpbRx(,D]~D@en-Lql[r\|gp KmR\|~B[QlokT<n+ryW8nJOCyI]\eKnZ%
2024-07-15 15:49:47 UTC	5930	IN	Data Raw: 54 97 fa de 95 db 0d f3 9c eb 3b 3d 7b b0 ff a8 3e ea 1e a5 43 4f c5 47 13 e3 e5 db c4 35 b7 92 b1 5d 85 41 3f eb 77 54 6e e3 54 b5 d7 91 39 33 cd 91 9a 8d 3a 37 d0 10 71 63 ce db 50 16 0f 87 09 38 03 2d f9 18 7c ee b4 8f bf e0 3e 34 24 65 3e 20 67 29 83 51 0f 05 63 00 7e e8 4b 23 fa e8 e9 96 bc 2f 74 bf e3 57 03 45 c1 a3 9b 60 2b 59 dd 29 f4 4c a6 14 7e e3 b7 a2 cb 3c ef ac d5 5a 86 1e da b3 ae da 55 18 6b ca 1c 1d 2f 5e b5 b7 9e 37 7d b4 64 01 36 17 af ec 84 af 53 27 4d be 26 fc 2d 3a 61 d8 ce b5 0b 05 1b b4 9e 5a ac 71 3f 9e 27 bd 13 be 86 bb 9e c2 0b 42 1c 7d c1 7d a0 6c 07 0f 58 6d e3 60 d4 1e 2e 93 bf e1 a7 2b e5 d5 75 c1 96 e1 ee bf f9 31 7e ac 57 e7 d7 b8 81 a9 28 dc 30 37 5c 58 fd 22 1d 9a 0b ab b9 05 cd a8 09 f5 e0 f3 a6 77 a7 8e 9b 0d b6 1c 39 Data Ascii: T;={>COG5]A?wTnT93:7qcP8-\|>4$e> g)Qc~K#/tWE`+Y)L~<ZUk/^7}d6S'M&-:aZq?'B}}lXm`.+u1~W(07\X"w9
2024-07-15 15:49:48 UTC	7116	IN	Data Raw: c8 ed 49 65 fd 3b a6 88 42 67 29 ea a4 fb 0c a2 3e 1f 9f 01 ab fa fe ce f5 c6 98 98 11 d5 40 c7 5d eb 4a 4c cb 38 e3 9c 01 2b 95 4a 71 b3 52 85 85 05 da 32 c8 16 67 75 44 25 19 68 cb 46 cf aa 90 df 42 b7 82 d7 8b c5 1a 33 04 d3 4e 54 35 77 44 d9 c2 27 a4 83 02 a0 3f d9 53 45 6f e1 40 5e 00 6e b7 2c 45 57 82 6a 8b 6b 03 59 b9 5f 18 1f 36 96 ff e9 1f de 17 97 0a 39 07 db 06 ce cc 9b 7a fd 26 7a 8c c8 7c 6d 94 bf 98 2c 1f 43 fa 10 27 43 5f 63 f4 29 bd ed 15 6c f3 d4 d2 69 d0 c1 55 6f fd 81 8f 43 29 c3 f4 60 f1 2b dc 5b 38 78 1f 82 b1 52 6a 97 50 61 58 45 5d a9 de 96 cb f3 53 b3 be 68 37 14 65 6c 50 38 b3 43 1b ef 8c 28 d9 59 a2 22 6a ca b2 4e 01 ca fd ba 55 60 56 54 cd 7e 61 da 3f d2 f0 da d3 c9 56 85 4e 20 0a 46 1b cc 23 e6 e6 76 e4 0c dc 66 b7 db 03 d0 dc Data Ascii: Ie;Bg)>@]JL8+JqR2guD%hFB3NT5wD'?SEo@^n,EWjkY_69z&z\|m,C'C_c)liUoC)`+[8xRjPaXE]Sh7elP8C(Y"jNU`VT~a?VN F#vf
2024-07-15 15:49:48 UTC	8302	IN	Data Raw: 30 2d 61 dd fa 56 19 6b 8f 36 d5 46 c4 2d f5 4b f6 c9 99 34 e4 7c 01 ac a1 5a 3e fd 8e 4c e8 74 e4 ee 7a b6 f4 2e a2 21 4d e2 4f db c7 1d 2d 26 fc eb 72 75 4d 94 78 ba fc a2 b0 d4 f9 34 ba ed bb 6b 4d 1f 84 35 3f 75 69 61 d8 6e 09 fd 04 85 52 fb 96 ed 69 0f b7 46 90 1b d5 7e e1 2b f7 7c 82 9a 38 40 e9 0b b7 94 2c fa 61 71 9a c8 ca 55 ac d2 b8 c1 60 b1 b9 52 49 e6 81 a5 84 3d 43 cb 67 9d d4 72 19 79 40 6d 85 b5 31 44 d9 8f 4f 8f 8a 22 7f 9e e1 33 61 9d 46 b7 76 56 bb 8f d6 97 13 0d e7 57 6a b4 fc 26 18 42 54 ae ec 44 d1 49 5e 65 eb 31 9c de 78 22 84 9d 23 3b e4 7b c7 52 a7 47 a0 a5 f6 a9 cb af 3b 2c a9 ba 6f f0 e5 82 e4 dc dc a5 79 f2 b1 cf 4c f2 b0 93 ee 46 da 7a 08 ed 22 c4 bd 86 f8 c8 8c e6 cb 30 6e 31 c0 bd e7 69 74 2b d0 d5 7d f9 82 8c 20 08 c6 d1 44 Data Ascii: 0-aVk6F-K4\|Z>Ltz.!MO-&ruMx4kM5?uianRiF~+\|8@,aqU`RI=Cgry@m1DO"3aFvVWj&BTDI^e1x"#;{RG;,oyLFz"0n1it+} D
2024-07-15 15:49:48 UTC	2831	IN	Data Raw: da e5 cf fe f5 9f 71 fe c4 e5 ff 9e f0 2f 27 fc 55 c6 8f fe bd 7f 38 31 8f 19 19 80 9a 3f b7 69 a4 02 b8 53 e3 8c 7e d0 e0 0a 43 01 c2 3d 29 19 30 1d b0 35 ad 55 89 5c 35 2e 1f 41 64 0b b2 4e 6f 92 83 88 9c e4 76 8d eb f4 46 5e 3a 00 d3 fd 86 7d 40 86 24 0d 6d 28 97 81 0e cb 1d 6a 95 2e 84 c9 96 f2 73 3f e4 f2 17 97 f0 57 fe e2 5f 59 ca 7f 10 c2 7f 3c e1 bf 67 ff ff 4f 18 3f fb 85 d7 18 5f f8 c2 17 5e fb 3c 87 7e fd 85 2f f0 ff f3 ef d9 8f 3f f5 f9 4f bd f6 85 d7 be f0 da a7 28 9f ff c2 a7 c2 f8 04 e7 b5 d7 3e f1 f9 cf 7f ea b5 d7 3e 31 cb e7 5f fb c4 27 be f8 89 cf bf f6 c5 2f 7e f1 b5 d7 3e ff da a7 be e8 f1 a9 d7 e8 37 9f fa 3c fb e6 b5 cf 7f e2 df 8b e0 8b 9f 67 ff fc b5 39 3e f1 f7 ff c2 59 f9 f7 23 f9 47 5f fc 8c cb 5f fb 6f fe fe 3f fa 4b cb f9 85 Data Ascii: q/'U81?iS~C=)05U\5.AdNovF^:}@$m(j.s?W_Y<gO?_^<~/?O(>>1_'/~>7<g9>Y#G__o?K
2024-07-15 15:49:48 UTC	10674	IN	Data Raw: b6 39 5e de b9 e6 0a 11 5c b6 55 75 51 2a d0 24 f8 a8 13 68 00 68 5a c9 4d d0 ed 68 3e 07 2d f3 57 f0 8b b1 48 e2 33 e6 e5 6c 64 4c da 6a 6b e6 dd b3 eb f5 40 36 7c 9b fc f4 a0 18 b1 ad e8 40 4f 2f e9 e9 66 cd ee 43 6d b2 52 17 08 b9 f3 b1 34 6d 1c 92 3d 20 00 b3 b5 49 c5 4d 9b c8 c7 9b c8 f8 ed ba ba e5 59 16 5e 9c 6c 49 7e a4 a2 5a 46 c3 70 9d f8 b5 38 15 9a 24 4f b6 8a ba b0 03 8d ed 89 7a 00 86 21 d3 50 8f 2f 5b 77 a8 f1 f6 9b 13 1d d3 94 85 78 64 8a 9f 03 25 37 17 02 6a 50 9b 42 06 0d 88 16 b6 c9 9f c5 02 76 6f cb 17 8b b2 2f ba 6d d4 ee 7c 86 64 8b f4 e0 e9 da 6c 94 b7 0e e7 0f a8 5e 42 20 cd 20 65 85 3a a5 f8 8d 6a c9 3c 5b 77 01 70 3b ec 5d bd 93 23 c9 b2 cd 45 65 d5 7a 97 95 11 d6 1d 89 56 9a f3 a6 48 13 7d b3 5d 30 c9 4a 43 88 41 de c5 f9 70 66 Data Ascii: 9^\UuQ*$hhZMh>-WH3ldLjk@6\|@O/fCmR4m= IMY^lI~ZFp8$Oz!P/[wxd%7jPBvo/m\|dl^B e:j<[wp;]#EezVH}]0JCApf
2024-07-15 15:49:48 UTC	3791	IN	Data Raw: 6d d3 5e 3d 51 ba 67 db b6 66 8e 36 36 80 b7 0e b9 bd 6b 26 4c b3 24 a5 c4 77 c0 b5 97 55 00 25 b3 f0 07 b9 0c 32 e6 a4 03 ab 61 6b bc f8 56 2f 6a 66 2e b7 b3 62 59 e4 32 5a 40 6f 06 32 01 c8 fa 32 37 12 2c db 11 8f db ae b2 dc 1a c5 a4 55 d9 22 97 c3 b1 0a fd 1a f5 7a d6 35 80 0e 5d 69 3b e0 ec 6f 2e b1 5d f1 02 c3 e9 40 e9 7e 82 65 ab 98 bc aa aa 11 15 5a e3 f6 8d a1 cb 45 50 d1 1f 15 c9 07 30 bb 71 11 bb 3b 6d 20 4d 1b 46 fb 40 0a d2 01 31 37 d9 c7 42 51 27 2d ea b2 a6 2f 78 9b 60 d9 ba e3 6f 8a 5a 54 df 10 00 62 13 da 51 b3 8c a2 5d 00 06 80 96 a1 e4 80 26 44 28 39 cd 86 4d 0e 78 d8 ab 98 5e 9f b3 b4 ed 57 6d a2 65 cb c7 df f0 41 90 61 14 a1 bb d3 6d 55 71 53 bb 18 94 ed 72 5c ad 56 36 d9 9d 31 35 82 3c 9f ac a6 13 d0 82 49 7c 52 e2 53 58 7c 43 07 66 Data Ascii: m^=Qgf66k&L$wU%2akV/jf.bY2Z@o227,U"z5]i;o.]@~eZEP0q;m MF@17BQ'-/x`oZTbQ]&D(9Mx^WmeAamUqSr\V615<I\|RSX\|Cf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	65086	142.250.185.132	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:47 UTC	1462	OUT	GET /pagead/1p-user-list/11236809420/?random=1721058585147&cv=11&fst=1721055600000&bg=ffffff&guid=ON&async=1&gtm=45je4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2F%3Futm_source%3Dusite%26utm_campaign%3Dfree%26utm_medium%3Dbtmbadge%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20The%20Fastest%20Website%20Builder&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDaQooLlTAzaYJ2BeuPXBUCeKp275wbbm2UzA&random=314603920&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:48 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jul 2024 15:49:47 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-15 15:49:48 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	65092	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:47 UTC	603	OUT	GET /lib_LUGoPiqXXlDptSWA/5segal4xfx8mljy3.png HTTP/1.1 Host: www.umso.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
2024-07-15 15:49:47 UTC	252	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 137194 Content-Type: image/png Last-Modified: Fri, 03 May 2024 09:59:16 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:49:47 GMT Connection: close
2024-07-15 15:49:47 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 4c 00 00 04 fc 08 03 00 00 00 ae 15 e5 fd 00 00 03 00 50 4c 54 45 4c 69 71 0f 0f 0f 09 09 09 05 05 05 18 18 18 0f 0f 0f 0b 0b 0b c4 c4 c4 35 35 35 1c 1c 1c 07 07 07 07 07 07 05 05 05 05 05 05 07 07 07 03 03 03 04 04 04 04 04 04 05 05 05 07 08 0a 04 04 04 2d 2e 2f 09 0b 0e 0c 0d 0e 40 41 43 08 0a 0d 09 0b 0e 21 22 24 3c 3d 3f 22 23 25 36 37 38 35 35 36 66 d5 bd 67 d5 be 63 ce b7 63 cd b6 09 0b 0e 25 27 2c 24 25 28 2a 2a 2f 0a 0c 0f 14 18 1f 26 27 2c 00 00 00 24 26 2a 08 09 0b d8 68 c6 1f 20 25 68 d8 c0 21 22 27 3b 3c 41 28 29 2d 22 24 28 0d 0f 12 30 33 39 1c 1e 22 40 41 43 0f 11 15 23 25 2a 0a 14 39 ca d1 d8 18 1a 1d 07 04 04 2b 2d 30 36 36 37 15 16 1a 59 74 9b 2e 30 33 10 07 07 48 4b 4f 2c 23 23 3e Data Ascii: PNGIHDRLPLTELiq555-./@AC!"$<=?"#%678556fgcc%',$%(*/&',$&h %h!"';<A()-"$(039"@AC#%*9+-0667Yt.03HKO,##>
2024-07-15 15:49:47 UTC	2372	IN	Data Raw: 07 ca 14 29 a1 0e 89 90 50 92 20 81 50 c9 4e 23 bd f9 03 8e 21 23 ad fc 0b 64 c9 3f 65 8d d7 cd d0 46 bb dd 46 5b 0d 0d 63 6c eb b2 22 32 1e 29 a9 aa ba 5e 53 aa ee 58 b3 77 97 9e f9 52 c6 2f d6 2b d6 fa e6 9b db ca ff 85 8c 18 d1 e5 a7 5b df 4b 46 be 72 31 30 31 92 17 03 13 23 b7 14 03 13 23 06 26 46 ee 45 0c 4c 8c 18 98 18 d9 63 98 e0 5a d7 bd a9 38 95 db ca 8d 77 65 44 48 b7 8d 37 7f 3b 63 e6 18 d9 23 98 e0 76 e5 ec f9 e1 4d e5 b4 78 5b b9 f1 ae 8c 08 29 1d 15 dc 0d 9c 18 98 18 d9 1f 98 60 e7 a8 74 8b e1 6a 60 f2 38 f2 bc 62 19 98 18 d9 4f 98 58 95 db dd d4 06 26 8f 25 67 6d fd f7 33 9a 89 91 7d 81 09 76 6e a3 96 18 98 3c a6 fc a7 6e e9 18 98 18 d9 17 98 b4 8f 6e 79 47 1b cd e4 f1 c4 31 30 31 b2 7f 30 b9 b5 62 62 60 f2 88 72 a6 b9 4d 8c 66 62 64 4f 60 Data Ascii: )P PN#!#d?eFF[cl"2)^SXwR/+[KFr101##&FELcZ8weDH7;c#vMx[)`tj`8bOX&%gm3}vn<nnyG1010bb`rMfbdO`
2024-07-15 15:49:47 UTC	538	IN	Data Raw: c3 b0 e4 eb 14 e7 f4 57 fd a7 37 9a 89 91 bb c1 a4 7d fa ab 5e ba cf c8 d7 24 85 ea cf da 33 03 13 23 77 83 49 a5 fa b3 51 4c be 56 b1 72 aa 89 81 89 91 bb c1 a4 61 14 93 af 58 7e d6 bd 26 06 26 46 ee 06 93 5f 4f b7 b3 97 8c 7c 2d e2 ea 76 8e 81 89 91 bb c1 a4 da d8 aa b8 65 e4 ab 11 ab 55 57 4f 0c 4c 8c dc 0d 26 ad c6 a3 dd c9 46 1e 5d b0 fe f3 1b 98 18 b9 a5 18 98 18 c9 cf 25 06 26 46 6e 29 06 26 46 0c 4c 8c dc 8b 18 98 18 31 30 31 72 2f 62 60 62 c4 c0 c4 c8 bd 88 81 89 11 03 13 23 f7 22 06 26 46 0c 4c 8c dc 8b 18 98 18 31 30 31 72 2f 62 60 62 c4 c0 c4 c8 bd c8 97 03 13 dc 38 53 4f da bd 07 5b 04 6d d5 0b e8 81 a5 f2 57 97 83 30 79 26 46 1e 10 26 ce 74 c9 56 eb b4 17 e9 9c 65 da 37 06 be 9e 71 df 98 8c ae b9 41 0f a3 f9 f5 77 b1 7b 2f 65 22 eb fe 02 a1 Data Ascii: W7}^$3#wIQLVraX~&&F_O\|-veUWOL&F]%&Fn)&FL101r/b`b#"&FL101r/b`b8SO[mW0y&F&tVe7qAw{/e"
2024-07-15 15:49:47 UTC	4744	IN	Data Raw: 7c 1c be 50 c1 d8 81 ff d7 4f c4 b7 ac 4a e3 84 69 22 96 53 41 d6 41 19 59 e2 ac 0b d9 e9 c2 0b b8 72 24 d4 15 ec 34 8e c5 97 6b c7 0d 27 cf 85 ee 73 75 91 dc fa 11 bb 0c f2 70 2a d9 7b 70 c2 b8 e2 58 f8 b8 00 5b 6d d7 b3 97 0b 18 bb 0d f6 92 84 09 3e 6e 54 f2 8a 92 5b ca 7e 22 f8 06 3f bf 6b c5 68 26 46 1e 12 26 d6 20 ad 23 d4 ed 90 66 e0 d7 10 ea ad 22 84 ac ea 9a 10 e2 83 7b b0 b7 9c a1 fa 20 61 37 79 75 b9 70 90 55 1d 10 42 26 ca 75 c8 61 72 d4 49 3d 84 2c 6f 4d 48 3c 85 92 d5 5e da f7 52 42 96 9e 8b 50 7f 65 db 24 96 ce 97 5a 19 36 91 b4 60 a3 d3 e5 29 bc 34 5c 7a 08 4d d7 cd 4e 9c 88 23 c4 0d f8 54 54 65 14 28 c1 e3 69 0b 60 72 9c 44 c8 19 c4 76 18 27 15 e4 c5 7d 84 5a f1 68 b8 8e 49 52 84 0d 3a a3 94 90 75 6b bc 54 0a 56 61 1e 13 92 f6 2b 08 b5 d6 Data Ascii: \|POJi"SAAYr$4k'sup*{pX[m>nT[~"?kh&F& #f"{ a7yupUB&uarI=,oMH<^RBPe$Z6`)4\zMN#TTe(i`rDv'}ZhIR:ukTVa+
2024-07-15 15:49:47 UTC	5930	IN	Data Raw: 86 da ba 96 c2 dc bb f6 4b b3 6b 3f c2 64 37 4c 3e 7e 84 7f c8 9b a7 17 1a 1e 8d 76 15 2c 3a f8 cc ab b1 21 95 59 4a 06 5a 45 93 db 39 60 55 84 f3 27 19 3d 94 f7 5f 3e 45 5b 2a cc 99 be f2 0f 35 37 ee 18 d0 ba 3a 9e 85 37 b4 a1 97 b3 fa e5 eb 72 ce de 30 27 f2 4a 7f 3e b3 35 a7 1c c8 23 aa 9d 5f bc 56 fe 0f 1d 1e 99 7e a2 2c 1a a9 9a bc 10 e6 4f 9e 3f 12 3a af c1 ce 51 c7 ad eb 06 8f 7c fe 5c 33 11 33 80 fa 47 62 45 79 c2 84 63 2c 17 ab 13 be da c7 86 49 35 a6 67 08 45 e4 6c b3 71 f9 55 e2 a9 66 77 db 52 1f cb ce 52 bb 61 42 c2 b7 bf fc 42 02 80 c9 9b 8f 0f 0e 13 28 b9 74 85 58 b3 cd 82 da 57 88 e8 bb 91 97 a2 aa 6c 7f 13 f1 82 74 d8 c4 77 8e e6 c8 99 8f a5 d3 6b c1 1a 99 f0 a4 8c 1e dd 26 cf 56 0d cb d4 2a 35 c8 84 97 50 53 e5 37 7d 87 fa 80 d4 67 f7 fc Data Ascii: Kk?d7L>~v,:!YJZE9`U'=_>E[57:7r0'J>5#_V~,O?:Q\|\33GbEyc,I5gElqUfwRRaBB(tXWltwk&V5PS7}g
2024-07-15 15:49:48 UTC	7116	IN	Data Raw: 7e 64 8f ff 07 d3 44 fe 17 7b fc af df 7c f3 ec 9b ef d9 c3 ff c5 6e d4 ff e3 df ff df 42 a1 e0 b0 fb d9 2d 80 b8 ec 3e 77 d8 e3 1a 1b 16 15 f6 98 0d 00 8b 3d 64 b5 6a a1 4e 2e 7b 0c 63 83 7f b5 8b d5 57 2d 0e 19 90 0a 1b 2a d9 57 d9 b0 6a cb 3d 61 b1 27 f6 7a 45 7e 15 e1 42 a1 72 19 4c 38 1c fe c9 f5 13 c5 0f 1d 26 cc 67 02 f5 06 e8 6f 6f b6 61 a2 d9 29 5b 83 5a 3a 6c d4 a7 54 28 57 00 22 e7 45 d1 e8 21 b6 26 63 c6 9a a3 65 c3 ca d1 77 c9 3f 9f f9 4c d8 bf 99 7e a2 9c ae f9 a5 7e 7c f4 ab 45 3a d2 45 f6 30 3e 13 23 5f 8b f0 4a 6b c2 3c 97 3e 13 7d d9 46 6e a9 9f 9c f4 b2 68 ce c6 34 ab 69 e9 39 6b 5f 25 62 68 ba b9 9c 73 f9 81 48 05 3e a7 e4 6f 79 28 75 7d 3f 6f df c8 8f f2 07 57 c2 e4 02 aa 8d bf 7d fb cb eb 2b 34 93 17 2f 7f b1 ed 2d 98 68 aa 86 3c c5 Data Ascii: ~dD{\|nB->w=djN.{cW-*Wj=a'zE~BrL8&gooa)[Z:lT(W"E!&cew?L~~\|E:E0>#_Jk<>}Fnh4i9k_%bhsH>oy(u}?oW}+4/-h<
2024-07-15 15:49:48 UTC	8302	IN	Data Raw: 59 38 86 3b 7a 9c 75 d1 04 98 84 cb 68 d8 9f c5 69 d1 e2 30 69 cf a1 57 60 8b 2e 1c e4 ce a8 3f ea cf 28 34 e3 33 66 ce ad 45 74 f4 e3 7e 93 ac 3a bd a0 89 9e b1 c6 41 a2 47 72 18 4c 2e d1 4b 0a c5 de 15 95 b3 8d dc 5e 70 f7 a8 78 da bd 54 33 d9 0a e8 64 99 26 aa ac 09 03 0a 5f 33 21 55 12 b9 d4 ef 01 60 82 a7 74 54 c3 b8 9e 50 07 f5 96 a4 8e 51 ad 15 c7 35 84 93 60 e6 22 dc 88 a8 f2 99 9c a4 a1 d7 46 08 8f 42 bf 8b 91 33 0a e7 ae 0e 93 06 f1 2b 18 59 cd 70 e1 b8 b3 d0 c3 08 55 69 c7 42 55 0a 4d 1c ba 43 68 6e d7 b3 79 db 87 93 00 1a da 38 51 28 c0 eb ce 6d 72 82 91 e5 51 ff 98 c3 04 39 71 52 6f af d2 12 46 55 0a fd 6d 2c 0f 5a f6 19 98 dc d5 67 22 32 60 45 65 a4 6f 54 0d 0c 6d 45 8e 8c e5 64 28 f9 1b 98 39 bb a4 f2 eb a9 2a d8 6f e4 7e 05 17 8a e5 6d ff Data Ascii: Y8;zuhi0iW`.?(43fEt~:AGrL.K^pxT3d&_3!U`tTPQ5`"FB3+YpUiBUMChny8Q(mrQ9qRoFUm,Zg"2`EeoTmEd(9*o~m
2024-07-15 15:49:48 UTC	2832	IN	Data Raw: b0 68 98 b4 fb 65 ce 12 a8 9f 3c 33 4c 3a 27 6a 45 ef 89 60 95 44 7a 03 be 20 20 a1 34 41 3e 13 64 e7 10 98 9c 1f 73 a7 09 d0 4c 5e 3d 4c fe a9 04 13 86 93 5f 9e 3d 9a 23 57 fa 81 9c 35 d6 6a 0d 17 fa 31 6d e4 d9 fb 36 b2 1b 6f 9e 29 1b 67 4f 84 58 37 58 39 21 0a 4a 6b 95 5e 52 ab 9a 1c 95 71 f2 aa 35 13 0d 78 60 65 5b 27 d9 56 6d 4e 25 69 4d 1a 0f ca 47 96 6f c9 01 db 54 46 ce be 08 73 95 60 f5 84 80 04 e0 e4 00 78 4d de 96 58 02 a2 39 0a 26 cb 3c b0 4c 36 6d eb dc bb 07 6c 8d 03 96 cc 07 a5 5d 6b c0 70 d0 2d f9 4c ce b6 f7 cb af e4 a9 78 22 98 c2 04 ab 9f d8 ca a1 38 a1 b1 61 12 18 06 1e 58 0e 93 43 ec 35 79 dd 9a 49 5a 07 93 4d bb 4e ee 3d 37 a7 dc 50 9a 3a 4d 88 95 83 e7 d4 53 0b 67 6b 49 6b ca 63 b2 37 42 32 4c a8 3e c2 3c b1 92 08 9f 09 55 4d ce 51 Data Ascii: he<3L:'jE`Dz 4A>dsL^=L_=#W5j1m6o)gOX7X9!Jk^Rq5x`e['VmN%iMGoTFs`xMX9&<L6ml]kp-Lx"8aXC5yIZMN=7P:MSgkIkc7B2L><UMQ
2024-07-15 15:49:48 UTC	10674	IN	Data Raw: 75 ed 75 ea 61 12 5c 23 99 7b 52 68 18 1d 71 a3 23 16 0c b0 cd 73 3c cc a2 66 6f 6e 4d 69 2a 5b 0d 4c 9a d7 59 8e 33 e3 8a 0a 4c 92 f1 8d 63 18 86 11 0d 07 a6 66 df 58 d7 53 fb 71 29 71 7f ff a1 3a 1a 67 2b fe 12 26 7f ae 74 20 c0 19 b0 c0 69 b2 3b 3e 13 a2 99 78 95 9f 0e d2 0f 80 44 43 eb 76 4e 64 80 60 12 0d ac 60 34 1a 8d d2 5b 2b c6 ae 52 37 49 8b 1b cb f2 74 6f 38 ce f1 21 33 04 93 70 60 c5 29 da cf b7 2e 43 e4 33 91 02 3c 61 30 29 c3 a4 6d 44 d3 dc 9f 5c cd 90 1f 25 9e 14 49 d7 d6 75 3b 8d e3 22 f1 fa 04 26 86 9f 6e 6a 41 be 60 e1 18 e1 7f 24 a9 1d 9c 73 7e fe 56 74 a7 2f 5b 39 8f 87 c9 70 38 1c 0e e6 06 3b ba 0c 93 b3 13 24 3d 7e f2 2b 2b 43 47 2c 26 61 53 6b 06 d6 2d 56 45 7a d7 d6 e8 b4 37 b7 46 a7 4b 61 72 32 18 e3 fc 8f ce a8 02 93 59 96 0d b0 Data Ascii: uua\#{Rhq#s<fonMi*[LY3LcfXSq)q:g+&t i;>xDCvNd``4[+R7Ito8!3p`).C3<a0)mD\%Iu;"&njA`$s~Vt/[9p8;$=~++CG,&aSk-VEz7FKar2Y
2024-07-15 15:49:48 UTC	11860	IN	Data Raw: 6a 52 7e 09 a8 14 06 35 39 cc c4 01 05 7e 22 26 fc fc fe 57 a5 99 ec 9d b0 46 26 ec 05 0b 0c 97 26 85 2e 93 5a 90 54 9b 12 40 ef 09 21 4a 05 26 94 28 f8 cf 5e cb b7 fc 81 f9 46 aa 24 f9 75 99 24 d5 cc 12 a4 95 54 67 e4 c8 a3 2d 40 af 46 ea 79 65 ca 89 c8 77 2d 95 fa 29 98 28 59 0b 27 8c 23 52 6c b8 42 93 3a d7 09 e9 6c 42 a8 52 d7 18 16 f6 73 e4 f6 0e e6 49 3d 4c 64 b2 90 ef ec b2 ca 42 71 43 f6 80 5b d8 7e ec 9d 25 50 c2 27 e6 87 ca 3b 7d 0b f6 a9 1e 47 58 27 1f 02 6e 62 c9 39 cb 28 59 fe 81 a9 3e b2 4a 25 81 31 1c d1 be a4 da f1 15 86 84 61 bd 30 e9 23 2d 74 12 4e 10 98 7c a2 34 13 25 8f 64 09 7b 90 4a fd 20 59 56 08 8b 13 03 3f 6c a9 69 12 1f ab 03 f4 13 f4 53 c0 e4 d7 77 ac ae 2a 64 1e bd 71 ed dd bf fd 66 e5 9b 84 70 95 f7 ef 7f 91 5f 57 75 12 08 12 Data Ascii: jR~59~"&WF&&.ZT@!J&(^F$u$Tg-@Fyew-)(Y'#RlB:lBRsI=LdBqC[~%P';}GX'nb9(Y>J%1a0#-tN\|4%d{J YV?liSw*dqfp_Wu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	65097	142.250.184.194	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:47 UTC	1122	OUT	GET /pagead/viewthroughconversion/11236809420/?random=1721058585147&cv=11&fst=1721058585147&bg=ffffff&guid=ON&async=1&gtm=45je4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2F%3Futm_source%3Dusite%26utm_campaign%3Dfree%26utm_medium%3Dbtmbadge%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20The%20Fastest%20Website%20Builder&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-07-15 15:49:48 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jul 2024 15:49:48 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUleh47c-J5qwqTFYpiO4OvnlceM0zWFa6Qx_rk5pk0lMl5rR_z9LUwJfy5y; expires=Wed, 15-Jul-2026 15:49:48 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-15 15:49:48 UTC	379	IN	Data Raw: 61 39 64 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 70 3d 3d 6e 75 6c 6c 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: a9d(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var
2024-07-15 15:49:48 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 61 2e 62 72 61 6e 64 29 26 26 61 2e 69 6e 64 65 78 4f 66 28 64 29 21 3d 2d 31 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 61 3d 22 22 7d 72 65 74 75 72 6e 20 61 2e 69 6e 64 65 78 4f 66 28 64 29 21 3d 2d 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 72 65 74 75 72 6e 20 67 3f 21 21 74 26 26 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 Data Ascii: unction(a){return(a=a.brand)&&a.indexOf(d)!=-1}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return a.indexOf(d)!=-1};function y(){return g?!!t&&t.brands.length>0:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("Cr
2024-07-15 15:49:48 UTC	955	IN	Data Raw: 32 33 36 38 30 39 34 32 30 2f 3f 72 61 6e 64 6f 6d 5c 78 33 64 31 37 32 31 30 35 38 35 38 35 31 34 37 5c 78 32 36 63 76 5c 78 33 64 31 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 32 31 30 35 35 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 6a 65 34 37 39 30 76 39 31 33 33 33 39 37 38 33 38 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 74 61 67 5f 65 78 70 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 Data Ascii: 236809420/?random\x3d1721058585147\x26cv\x3d11\x26fst\x3d1721055600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45je4790v9133397838za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26tag_exp\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fww
2024-07-15 15:49:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	65098	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:49 UTC	917	OUT	GET /lib_LUGoPiqXXlDptSWA/eljn5jc5doqj8c8f.png HTTP/1.1 Host: www.umso.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
2024-07-15 15:49:49 UTC	250	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 4055 Content-Type: image/png Last-Modified: Fri, 03 May 2024 09:59:16 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:49:49 GMT Connection: close
2024-07-15 15:49:49 UTC	936	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 80 08 03 00 00 00 f4 e0 91 f9 00 00 03 00 50 4c 54 45 4c 69 71 0a 01 18 10 00 20 0a 02 18 0a 01 18 10 00 18 08 00 18 0b 01 18 0a 01 19 09 01 19 0b 00 19 0a 02 18 0a 01 18 f8 f3 ff f7 f2 fe f8 f3 fe b9 b3 c2 0a 02 19 15 0c 23 23 1a 30 bb b5 c4 bd b7 c6 c1 bb ca 17 0e 25 ba b4 c3 bc b6 c5 b3 ad bc b8 b2 c1 46 3e 52 b5 af be 19 10 26 b7 b1 c0 0f 06 1d be b8 c7 2a 22 37 49 41 55 c9 c3 d1 ae a8 b7 aa a4 b3 0e 05 1c b6 b0 bf 12 09 20 b4 ae bd cd c7 d5 c0 ba c9 b0 aa b9 ad a7 b7 a7 a1 b1 0d 04 1b 2d 24 3a 2e 26 3b 14 0b 21 29 20 36 1b 12 29 1c 14 2a 3d 35 49 cc c6 d4 b1 ab ba cf c9 d7 bf b9 c8 d5 d0 dd 4f 47 5b ac a6 b6 a6 a0 b0 56 4e 62 27 1f 35 1f 17 2d 3e 36 4b 21 19 2f c8 c2 d1 c2 bc cb 11 Data Ascii: PNGIHDRPLTELiq ##0%F>R&"7IAU -$:.&;!) 6)=5IOG[VNb'5->6K!/
2024-07-15 15:49:49 UTC	2372	IN	Data Raw: 5a 71 eb 3e 6d ed 37 cf bd ef 1b c2 1e 69 31 9d 6f 72 7f 30 40 96 73 9e 73 ce f3 dc fb be 99 30 18 64 8d 1e 23 37 0a bd b1 35 4e 6e fc db 0c f1 35 56 0e bd f1 f5 96 18 85 ff 8c 7b f3 f8 08 8d 1b 4f e3 8f 41 52 5a 63 a8 fa a5 85 8f 10 d6 60 ac 54 f4 27 6b 1c e4 e0 2d e9 e1 23 24 c7 60 8c 95 26 3e 42 a3 19 e3 a5 4b 60 0c 43 0a 13 40 7c c9 31 a4 18 41 58 a3 18 d2 c5 47 48 46 80 21 b3 00 c9 42 28 e5 c5 90 11 40 32 0b a4 bc 18 32 02 48 66 81 94 17 43 46 00 c9 2c f8 7f b2 40 ed bb e4 5c 26 8b c5 84 05 3f e5 e1 a7 3c f5 17 8b c9 12 a4 8c 2c 81 dd b9 4c a6 3c 00 b3 00 95 c5 64 31 37 02 38 66 40 16 cb d5 71 04 09 7c cb 04 c0 2c a2 80 bc 38 ae d8 12 8c 1c 81 14 d6 46 60 40 e1 d2 c2 63 4d 08 1b 6c 83 7c ca 48 11 70 74 65 32 59 d8 00 31 d1 e5 b1 28 c0 8c c0 67 31 37 Data Ascii: Zq>m7i1or0@ss0d#75Nn5V{OARZc`T'k-#$`&>BK`C@\|1AXGHF!B(@22HfCF,@\&?<,L<d178f@q\|,8F`@cMl\|Hpte2Y1(g17
2024-07-15 15:49:49 UTC	538	IN	Data Raw: 3f 48 03 0c 45 00 45 1f 3a f4 f0 01 94 0e ae 83 f0 80 7e e3 c1 43 7b d8 7d f4 7f c3 1e 70 b8 5c cd a3 46 3c 27 65 a0 70 e1 02 38 91 89 a7 d3 fa 42 7b 9b f9 89 4f 86 c2 47 83 de a0 48 ba 50 d9 71 ef c5 0d 2c 3c 06 bf 71 e3 d7 1f 82 8c ad 94 81 80 ba ba 02 84 00 36 9f a3 3c 9e 53 b3 fe cc 1f 81 02 c8 90 99 79 22 cd 58 d3 fa a0 8f fa 90 f8 68 f0 5b 34 49 50 52 f9 cb df 1f fd f9 fc d9 b3 17 8f fe ba 57 68 af 43 ed bf fa 64 ec f3 93 b1 07 4e 5e 05 51 61 4e 2a 3a 2d 99 e5 27 33 8b 74 26 71 05 70 42 d7 5d 35 24 3e 1a e2 1e d1 ec 97 4b c1 d7 cc 16 88 b7 ae ae 3d dd e5 58 02 15 05 05 0e 39 02 18 f1 9c 9a 9b 60 eb c1 c7 52 01 39 1b 97 fd 35 6d 68 7c 34 d4 4d 2a cb 87 4b cb a9 6c af d7 3d 0e 2d 6e 0c 04 6e 13 05 3a 39 4f 70 0a c9 71 30 2c df ad 55 38 b9 f1 27 72 16 Data Ascii: ?HEE:~C{}p\F<'ep8B{OGHPq,<q6<Sy"Xh[4IPRWhCdN^QaN:-'3t&qpB]5$>K=X9`R95mh\|4MKl=-nn:9Opq0,U8'r
2024-07-15 15:49:49 UTC	209	IN	Data Raw: 35 3f b0 70 f9 e5 10 cc 41 65 22 80 c2 a9 52 7e 32 cc 41 b8 38 8e 0a 53 b8 17 d0 f7 06 e2 3f 4c 00 21 34 3d e9 fb c2 db f8 b8 a3 d2 79 0a e6 a0 26 c6 2f ff ae 6a 18 e8 68 98 1f 5a 69 95 9c fd f6 87 93 c7 e1 d8 a9 6c 5a f9 fb 73 87 5e f7 8c 46 9c c0 3f b9 18 ff e8 bb c9 08 0c 63 31 90 94 17 43 46 00 c9 2c 90 f2 62 c8 08 20 99 05 52 5e 0c 19 01 24 b3 40 ca 8b 21 23 30 4a ba 12 8c 93 fe 97 dd c6 48 97 c0 78 c6 68 e9 12 78 9b 21 5d 0f de fa 37 7c e9 95 21 ed af fd 32 a4 fe c5 67 86 d4 bf fa cd 60 8c fd ef 9b c7 97 eb f5 fd fb f1 72 6f 50 86 51 72 63 46 53 c8 ff 03 67 d4 bd d1 e2 0c b1 d1 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 5?pAe"R~2A8S?L!4=y&/jhZilZs^F?c1CF,b R^$@!#0JHxhx!]7\|!2g`roPQrcFSgIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	65102	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:49 UTC	603	OUT	GET /lib_LUGoPiqXXlDptSWA/havnu57r2hcv4i5a.png HTTP/1.1 Host: www.umso.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
2024-07-15 15:49:49 UTC	251	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 78783 Content-Type: image/png Last-Modified: Fri, 03 May 2024 09:59:16 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:49:49 GMT Connection: close
2024-07-15 15:49:49 UTC	935	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 63 00 00 01 9c 08 03 00 00 00 4a 8f 9d 5d 00 00 03 00 50 4c 54 45 4c 69 71 d8 22 ff c5 1f ff d4 18 ff ff 52 ff 84 35 ff d4 1e ff 8e 3f ff ef ff ff 93 43 ff d6 15 ff 78 38 ff 73 38 ff 78 36 ff 7b 36 ff d8 11 ff 70 38 ff a9 23 ff 6f 38 ff db 0f ff c1 17 ff bd 19 ff 6b 3a ff 6a 39 ff ae 22 ff d8 10 ff d6 11 ff 9b 28 ff cb 15 ff 6c 39 ff 81 30 ff 94 2b ff bd 1b ff db 0f ff 7c 31 ff 69 39 ff 69 3a ff 84 2f ff b4 1e ff d9 10 ff c6 16 ff d7 10 ff 6b 39 ff 8c 2d ff ba 1b ff ab 21 ff 78 33 ff 8f 2b ff d6 10 ff 8a 2d ff 6a 39 ff 72 35 ff cb 14 ff d9 0f ff d9 0f ff 6d 37 ff 83 2f ff d7 10 ff b5 1c ff d9 0f ff d9 0f ff 9c 25 ff da 0f ff d1 12 ff ce 13 ff d9 0f ff d8 0f ff d7 10 ff d6 10 ff d9 0f ff a9 21 ff 69 Data Ascii: PNGIHDRcJ]PLTELiq"R5?Cx8s8x6{6p8#o8k:j9"(l90+\|1i9i:/k9-!x3+-j9r5m7/%!i
2024-07-15 15:49:49 UTC	2372	IN	Data Raw: 8f 3f cc f7 f8 5a cc 53 f5 f5 6a d4 e6 62 a0 d7 51 75 dc f7 bf ca f9 6b f0 99 ee de f3 e4 f9 e7 d7 a8 e5 e4 ee ed 5b a7 cd cb 91 ed 66 d4 ea bd b9 ea ee eb c1 e9 bc a7 cb cb f0 ee de f3 b3 70 73 7c e9 88 e5 75 9d ae c8 a8 d4 b2 b1 c3 87 87 9b 86 e0 7f a6 93 c2 92 f7 b4 87 dd af f3 d8 dd 7d 63 9a 7d 72 d4 f8 d6 de 6b 74 9d 7d 91 c3 a0 bb b1 ee 7d cb a0 9c cb 74 91 8f b9 9b d4 f9 fb d6 7f bd 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 20 00 49 44 41 54 78 9c ac bd 5d a8 96 e7 99 fe 6d 3a 26 ba fa 35 c3 8c 9d a1 a5 23 6f 6c c3 a4 dd 28 a5 e9 34 94 0e 6d a6 9d 32 5d 43 49 42 68 08 19 26 0d b3 20 84 29 99 15 12 b2 24 ac 85 92 50 97 15 13 e3 52 fc 40 ac e8 b8 8c d2 fa b9 e1 df 01 69 79 a1 b5 3b 82 91 17 dc 50 bb 15 30 3b c1 0d f3 69 12 Data Ascii: ?ZSjbQuk[fps\|u}c}rkt}}tpHYs IDATx]m:&5#ol(4m2]CIBh& )$PR@iy;P0;i
2024-07-15 15:49:49 UTC	538	IN	Data Raw: 17 ff 66 a0 43 e6 5b 63 77 c8 44 95 25 67 97 7a 6e a9 d7 88 17 b7 e2 15 5d 32 29 f6 8d fa f1 3a 94 d1 ba b5 66 bf 45 fd fa 9b 65 24 43 b2 e8 57 25 63 4c c9 b4 91 0c 7a 64 da 0e 99 b8 b2 64 a1 4c 5c be ae 39 53 22 a6 e9 c2 6b dd 52 d7 29 45 4a 66 7c 29 33 2c 64 2c f7 6d 48 a3 c1 ef 4d 42 66 a0 78 1d f6 c8 a8 5b aa 29 d3 8f 7d cd 2c 79 ba 84 a1 6f 72 4a be b8 d4 bb ac 2d a6 ae 29 59 e2 db b3 4a 4f 04 2a a6 f2 4a 03 56 c9 a9 18 a7 63 12 64 7e fc df 75 e4 fb 1f 55 55 49 23 5f df 1e 53 55 95 52 1e 03 c6 b8 3c 86 5d 78 ae 7a ed 65 8c ba a5 92 31 45 20 03 1d a3 90 c9 8c 09 85 cc 0f 98 c8 64 b3 54 55 96 7c ea eb 85 4c 9d c8 3c 2c 6e a9 6a c3 2b 22 99 36 f7 ad 02 99 5e 01 bb 34 4b 39 f1 6d da 64 ac b8 64 98 a9 28 93 85 8c d7 31 96 fc 86 a5 a5 2e 62 62 cc 44 c5 a5 Data Ascii: fC[cwD%gzn]2):fEe$CW%cLzddL\9S"kR)EJf\|)3,d,mHMBfx[)},yorJ-)YJO*JVcd~uUUI#_SUR<]xze1E dTU\|L<,nj+"6^4K9mdd(1.bbD
2024-07-15 15:49:49 UTC	4744	IN	Data Raw: 0b 5e 23 63 be fa 8d b8 74 fd e5 81 ee 18 eb 8f 41 1c 93 18 63 b5 eb 36 90 b1 d4 d7 77 fa 8e 39 b2 54 54 96 fe ad 9d 59 aa bc 92 f5 fa 36 03 05 f5 3c 41 4d 99 b2 db 37 d0 31 55 bf af ef c3 bb 27 f4 49 f6 ca 23 05 15 67 28 63 52 1a 53 09 99 6c 96 6a c2 bc d7 2f 2c 75 74 0c 09 13 da a5 91 88 09 a4 0c 10 53 50 06 8d be c1 48 41 cf 2a 45 94 a9 d5 0c 09 33 7c 41 c6 c4 e5 eb 81 da 52 d8 86 97 52 df d6 2d 05 66 09 64 b1 c8 d7 0c 53 a1 65 4c c2 04 4a c6 95 af 07 87 09 72 24 d3 91 31 2f 79 1d 53 d6 94 c6 54 31 cf 8c 93 c6 14 a3 4a 4f 57 32 46 d2 98 4a c7 a4 c4 37 88 63 4a 1d 53 c7 31 4d 59 29 e8 8f b1 46 df 62 62 a9 30 4b 51 61 a9 d3 21 33 9e 90 29 13 99 fb 34 91 69 62 df 4e 22 53 f7 c8 38 cc bc 58 f6 fb 6a c3 6f 1b c8 a4 3e 99 7b 5a 15 63 7c 49 6d 32 9d b9 a5 15 Data Ascii: ^#ctAc6w9TTY6<AM71U'I#g(cRSlj/,utSPHA*E3\|ARR-fdSeLJr$1/yST1JOW2FJ7cJS1MY)Fbb0KQa!3)4ibN"S8Xjo>{Zc\|Im2
2024-07-15 15:49:49 UTC	5930	IN	Data Raw: 76 fb fa bd be 01 67 c2 7d 78 e3 54 af fb 88 89 76 6e 46 9b 7d 73 1e d3 1f bf 1e 3a 33 12 57 f7 70 5a ed c5 73 ac 61 59 a9 2d 2d 15 88 89 4e 74 53 bc ac 4a 88 51 21 63 1a 46 14 8c 7c b3 64 ad 71 cc f9 0d aa 60 2c 8f 01 59 ac 74 0d c2 9c cf 41 cc a2 db e5 50 18 a5 a8 2f 26 ac 29 f5 8e 22 18 9c 54 1a 4a 63 c6 39 e5 3a 68 c0 8b 9b 7c a9 63 26 54 c9 a4 c4 b7 5a f0 d0 5b 1d 4e c4 b4 07 2d fd b0 bf d7 37 38 fb ba 39 6b e9 5f e2 4e bc 9a 32 bd 5d 32 98 5c 8a 66 97 6c b0 60 cf 1e a1 4b 4e 65 e4 7d 0f 70 23 ae 49 29 33 79 cf e4 37 ed 0b a5 25 b0 65 12 62 46 e4 8c 82 66 c5 9d 93 79 a2 20 41 c6 ef dc cc 5e a9 9e 29 d0 75 55 71 f2 db cd 7c 43 c3 c4 ea d2 90 8e 69 23 99 98 30 51 b7 6f 67 7d f8 58 90 19 52 32 6e 7f f8 cd 66 be dd d3 af e3 9d 9b a3 16 e2 85 81 8c f5 e1 Data Ascii: vg}xTvnF}s:3WpZsaY--NtSJQ!cF\|dq`,YtAP/&)"TJc9:h\|c&TZ[N-789k_N2]2\fl`KNe}p#I)3y7%ebFfy A^)uUq\|Ci#0Qog}XR2nf
2024-07-15 15:49:49 UTC	7116	IN	Data Raw: a5 d4 17 94 51 c7 24 b9 af c9 18 49 7e 49 19 ea 19 80 a4 bf ad 6a fc 7d 78 a3 4f 42 19 2f 91 69 01 d3 19 5b 8a 13 99 de 64 a4 6e c4 0b a5 8c a5 be c6 98 c4 1a a8 98 d5 79 3c d2 ec d2 6a bf 0b 6f 35 1e be 0c 34 2b ef 90 ac d7 74 0c f2 5e 13 34 e0 0b eb d7 4e c8 28 65 ca 4b 84 8c 80 86 99 2f ef f6 7a e2 cc e2 99 45 8d 61 6c 7c 80 41 af d6 ac ad 29 46 b3 98 dd 0f 3e f3 e0 ee b8 2f a6 5d 7b 57 9f 6c dd 0d 63 b2 51 0a c3 98 6e 1a 63 61 cc df 37 53 04 d1 e2 18 37 aa 84 25 9b 56 ba 9e 58 b2 7c f9 52 60 26 f5 f9 66 25 e3 cb d7 43 66 29 70 4b 4d 22 e3 4f 29 20 62 d2 de cd 5c 5b 0a 5a f1 0a 25 53 15 97 ea f3 50 9a c1 82 c3 a9 be e4 6a d8 29 fc 5d 97 28 23 86 49 10 83 f7 76 05 4c a9 65 76 2a 61 48 1b 68 18 60 46 c2 99 a4 63 f8 ac 20 60 56 88 8e b1 1f 9c 8d 64 e9 9a Data Ascii: Q$I~Ij}xOB/i[dny<jo54+t^4N(eK/zEal\|A)F>/]{WlcQnca7S7%VX\|R`&f%Cf)pKM"O) b\[Z%SPj)](#IvLev*aHh`Fc `Vd
2024-07-15 15:49:49 UTC	8302	IN	Data Raw: 07 08 97 cc 15 a0 65 e1 80 98 a5 59 7d 9c 43 72 2a 46 dc 92 66 31 8a 16 d1 31 d3 f8 fa 68 76 5a f3 5d 40 25 f1 65 c6 53 66 e6 fd 69 f9 92 fa 12 eb d7 33 e0 0c 3e 4c 63 e0 94 66 28 64 c4 2f b1 c6 04 ca 00 37 c8 63 ae cf cf 5f 07 5e 80 15 e3 0b 9d 12 aa 4b ca 95 24 63 2e e2 1f de 7c f3 22 09 03 05 23 6c 51 ca 28 67 32 66 44 c7 9c 95 f7 59 28 19 75 48 f9 59 ad 4f 2e 2c 25 29 b3 71 f5 46 79 83 2f 24 8c 40 86 44 31 bc d8 df ca 16 51 2f 70 4c 94 2f 78 93 34 7a 6d 29 e8 72 cc c5 30 27 cf 1c 3b 83 67 2f 9e bd 97 ce 40 bd 9c 01 5b f6 a6 5a b5 e0 65 b7 7e 31 85 d1 20 66 fd 83 eb d1 12 43 11 73 42 67 ac 1f cd 22 26 cf 40 8a 88 b9 d0 16 94 3a dd bd ed f6 de a1 b8 d7 75 c6 b4 5b c2 bf fc d7 d1 2c a4 11 a6 d9 e1 eb a7 ad 8b cc 17 33 91 4b 97 2d 5f 2a 27 a0 18 63 ec cc Data Ascii: eY}CrFf11hvZ]@%eSfi3>Lcf(d/7c_^K$c.\|"#lQ(g2fDY(uHYO.,%)qFy/$@D1Q/pL/x4zm)r0';g/@[Ze~1 fCsBg"&@:u[,3K-_'c
2024-07-15 15:49:49 UTC	2831	IN	Data Raw: 6c ef de ad 7b b7 2a 66 b6 56 88 21 66 68 8c bc 84 c1 3f ac 3f 5d 29 18 6d 87 69 35 cc ae 54 ad a6 84 b9 70 21 25 31 2f 40 c3 68 4b 8c 0e 0f 88 88 61 d8 8b 7a 52 16 31 24 cc 1f 1f fb d7 3f 96 35 eb 62 7e a0 29 28 7d b5 9c 51 f2 a7 b5 0d 6f 08 6f 75 4c 3a 51 c9 35 c6 a4 fd bd f5 91 4a b2 be d7 1a 62 d8 7e b7 64 39 32 19 2b 2e c9 74 a4 21 66 29 3b 69 8c 31 2e 92 a9 a6 0a c6 cc 7d db 0d bf 41 79 c9 18 53 f6 fc 06 a1 4c 99 ca 64 ca a8 5f 72 bd 32 ed 0c 93 68 99 e7 c8 19 8b 65 72 25 5b a3 99 9f fe 74 3f 2f 1d 64 2a c3 df 83 bf b6 60 26 71 46 51 e3 aa d9 fe 12 e7 24 ac 59 27 ac 51 eb 74 aa b2 4c a7 20 63 f8 8f 0e 34 c6 17 fb b5 6f 93 fa 23 c3 0b 61 23 4a c6 f8 52 73 46 04 0d d1 22 84 49 bf 5b bc 24 0d a3 84 d1 8b bf 62 ca 90 2c f8 ac 4d 0a 66 ed 91 1d 54 2d f9 Data Ascii: l{fV!fh??])mi5Tp!%1/@hKazR1$?5b~)(}QoouL:Q5Jb~d92+.t!f);i1.}AySLd_r2her%[t?/d`&qFQ$Y'QtL c4o#a#JRsF"I[$b,MfT-
2024-07-15 15:49:49 UTC	10674	IN	Data Raw: e1 b7 99 8f ec 0d 48 86 c9 6f ed 97 fe 39 aa 2f 85 bd 32 ff 9b 52 19 d6 b1 89 19 33 4c dc fb f0 4b e1 8c 94 98 2a c3 f4 2b d5 32 af 7a c8 28 68 c4 32 ed f7 e1 4c 00 1a bd 25 fd b5 6b 0d 3f 39 a0 51 49 43 d2 a8 98 51 fb 24 b0 c9 bc f1 9c 51 ca 24 d0 6c 52 b8 e0 ca ac 49 7c c1 4f fb 65 84 b9 ac a0 71 7c 11 96 c8 4f 87 17 c1 8d 08 19 8a 19 e1 0c e0 b2 59 ec 51 92 2b e4 8a b1 26 ff e8 01 26 bd 85 2c e7 f4 6b 2d 69 22 ff a0 84 11 a2 00 31 8e 2f f2 00 2b 49 b5 6c f3 60 49 df 09 30 8a 19 78 23 f9 00 30 04 cd e9 bd bf 38 7d fa 17 a5 47 12 c2 fc 8f 8a 18 23 8c c8 97 ff 91 dd 0d 9a c3 fc d6 21 c6 5f 17 02 0d 73 55 20 43 c4 fc 9e 17 9a 62 92 4b 7a 4a 09 23 3e e9 8f 82 98 b2 b5 b7 58 15 53 76 c5 54 27 5a 37 69 af 1d d5 d6 db 7b d7 74 f7 16 07 b6 15 4b c2 d3 99 90 da Data Ascii: Ho9/2R3LK*+2z(h2L%k?9QICQ$Q$lRI\|Oeq\|OYQ+&&,k-i"1/+Il`I0x#08}G#!_sU CbKzJ#>XSvT'Z7i{tK
2024-07-15 15:49:49 UTC	11860	IN	Data Raw: 41 a0 14 8c 69 5a 94 ee 1d e9 20 b0 b3 da 38 56 2a 85 4a 7e ce c9 c7 75 63 ac 4e c6 aa 6d a0 61 78 a0 1b b3 d8 f7 78 ff 35 1a 97 12 63 2a df 37 8d 94 99 54 f2 db 38 bf dd fc 52 33 86 b3 a7 65 7a 25 79 14 33 4b be 85 cd 90 29 5a b2 31 c4 0a 84 59 f3 f5 42 99 75 48 66 9b 9e a9 31 03 ce bc 55 89 19 77 80 0b 66 5e 9a 09 66 82 32 26 69 10 38 49 c7 f8 fd 90 60 73 68 f3 4e 5e 87 36 1f c2 c5 75 c2 af 43 27 b0 85 96 43 57 0f 01 2a d2 33 0e 99 bc af 9e 38 76 22 3e b7 70 07 5e ae 52 c7 9c 00 43 00 1b 92 a5 60 c6 98 13 2f c4 cc 15 00 85 68 b9 72 0b 94 31 84 dc 0a a2 14 ae 18 56 f8 06 8c dc da 71 eb d6 2d d2 c4 77 b0 25 de de 03 53 70 03 61 f6 ef d8 ff 5e 41 8a f1 a5 2c 7f 2f 22 06 70 c1 4d 51 52 4b 19 b1 e5 36 2e 6c 97 2f b7 09 97 01 5d b0 83 2f 85 32 bb df 7f 3f 03 Data Ascii: AiZ 8VJ~ucNmaxx5c7T8R3ez%y3K)Z1YBuHf1Uwf^f2&i8I`shN^6uC'CW*38v">p^RC`/hr1Vq-w%Spa^A,/"pMQRK6.l/]/2?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	65099	54.185.96.248	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:49 UTC	885	OUT	POST /public/nextgen/parameters HTTP/1.1 Host: api.umso.com Connection: keep-alive Content-Length: 439 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.umso.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
2024-07-15 15:49:49 UTC	439	OUT	Data Raw: 7b 22 73 61 76 65 22 3a 66 61 6c 73 65 2c 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 6d 65 74 61 22 3a 7b 22 70 72 6f 64 75 63 74 22 3a 6e 75 6c 6c 2c 22 61 75 64 69 65 6e 63 65 22 3a 6e 75 6c 6c 7d 2c 22 63 6f 6c 6f 72 73 22 3a 7b 22 62 72 61 6e 64 22 3a 6e 75 6c 6c 2c 22 74 68 65 6d 65 22 3a 22 6c 69 67 68 74 22 2c 22 73 61 74 75 72 61 74 69 6f 6e 22 3a 35 7d 2c 22 66 6f 6e 74 73 22 3a 7b 22 73 74 79 6c 65 22 3a 22 73 61 6e 73 2d 73 65 72 69 66 22 7d 2c 22 61 72 74 22 3a 7b 22 73 74 79 6c 65 22 3a 22 69 6c 6c 75 73 74 72 61 74 69 6f 6e 22 7d 2c 22 73 65 63 74 69 6f 6e 73 22 3a 5b 7b 22 67 72 6f 75 70 49 64 22 3a 22 73 74 67 5f 78 71 53 66 69 55 62 52 79 6b 78 46 53 58 49 66 22 7d 2c 7b 22 67 72 6f 75 70 49 64 22 3a 22 73 74 67 5f 45 4c 47 75 43 4e 65 64 73 Data Ascii: {"save":false,"settings":{"meta":{"product":null,"audience":null},"colors":{"brand":null,"theme":"light","saturation":5},"fonts":{"style":"sans-serif"},"art":{"style":"illustration"},"sections":[{"groupId":"stg_xqSfiUbRykxFSXIf"},{"groupId":"stg_ELGuCNeds
2024-07-15 15:49:50 UTC	308	IN	HTTP/1.1 200 OK Date: Mon, 15 Jul 2024 15:49:50 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.umso.com Access-Control-Expose-Headers: x-umso-appver X-Umso-Appver: 5.1.8
2024-07-15 15:49:50 UTC	16076	IN	Data Raw: 37 65 64 39 0d 0a 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 6d 65 74 61 22 3a 7b 22 70 72 6f 64 75 63 74 22 3a 22 73 61 61 73 22 2c 22 61 75 64 69 65 6e 63 65 22 3a 6e 75 6c 6c 7d 2c 22 63 6f 6c 6f 72 73 22 3a 7b 22 74 68 65 6d 65 22 3a 22 6c 69 67 68 74 22 2c 22 62 61 73 65 22 3a 22 74 65 61 6c 22 2c 22 73 61 74 75 72 61 74 69 6f 6e 22 3a 35 7d 2c 22 61 72 74 22 3a 7b 22 73 74 79 6c 65 22 3a 22 69 6c 6c 75 73 74 72 61 74 69 6f 6e 22 7d 2c 22 66 6f 6e 74 73 22 3a 7b 22 73 74 79 6c 65 22 3a 22 73 61 6e 73 2d 73 65 72 69 66 22 7d 2c 22 73 65 63 74 69 6f 6e 73 22 3a 5b 7b 22 67 72 6f 75 70 49 64 22 3a 22 73 74 67 5f 78 71 53 66 69 55 62 52 79 6b 78 46 53 58 49 66 22 2c 22 73 74 72 75 63 74 75 72 65 49 64 22 3a 6e 75 6c 6c 2c 22 73 74 72 75 63 74 75 72 65 56 Data Ascii: 7ed9{"settings":{"meta":{"product":"saas","audience":null},"colors":{"theme":"light","base":"teal","saturation":5},"art":{"style":"illustration"},"fonts":{"style":"sans-serif"},"sections":[{"groupId":"stg_xqSfiUbRykxFSXIf","structureId":null,"structureV
2024-07-15 15:49:50 UTC	16384	IN	Data Raw: 73 74 65 64 20 62 79 20 69 6d 61 67 69 6e 61 72 79 20 43 6f 6d 70 61 6e 69 65 73 22 2c 22 5f 5f 76 61 72 69 61 74 69 6f 6e 22 3a 74 72 75 65 7d 7d 7d 7d 7d 7d 2c 22 64 61 74 5f 51 76 44 4a 74 64 62 65 63 52 45 55 49 79 66 71 22 3a 7b 22 66 61 76 69 63 6f 6e 22 3a 7b 22 66 69 6c 65 22 3a 7b 22 5f 5f 76 61 72 69 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 64 65 66 61 75 6c 74 22 3a 7b 22 66 69 6c 65 49 64 22 3a 22 75 33 36 6f 36 71 64 36 72 33 6f 39 62 6e 6d 71 2e 70 6e 67 22 2c 22 6c 69 62 72 61 72 79 49 64 22 3a 22 6c 69 62 5f 78 45 61 44 64 4a 46 41 58 74 70 67 74 4d 73 50 22 2c 22 74 79 70 65 22 3a 22 6c 69 62 72 61 72 79 22 2c 22 75 72 6c 22 3a 22 2f 6c 69 62 5f 78 45 61 44 64 4a 46 41 58 74 70 67 74 4d 73 50 2f 75 33 36 6f 36 71 64 36 72 33 6f 39 62 6e 6d Data Ascii: sted by imaginary Companies","__variation":true}}}}}},"dat_QvDJtdbecREUIyfq":{"favicon":{"file":{"__variation":true,"default":{"fileId":"u36o6qd6r3o9bnmq.png","libraryId":"lib_xEaDdJFAXtpgtMsP","type":"library","url":"/lib_xEaDdJFAXtpgtMsP/u36o6qd6r3o9bnm
2024-07-15 15:49:50 UTC	21	IN	Data Raw: 43 6f 6c 6f 72 22 3a 22 72 67 62 28 32 32 39 2c 20 32 32 0d 0a Data Ascii: Color":"rgb(229, 22
2024-07-15 15:49:50 UTC	4324	IN	Data Raw: 31 30 64 63 0d 0a 39 2c 20 32 32 39 29 22 7d 2c 22 6e 6f 72 6d 61 6c 22 3a 7b 22 5f 66 6f 6e 74 22 3a 7b 22 73 74 79 6c 65 22 3a 22 6e 6f 72 6d 61 6c 22 2c 22 66 61 6d 69 6c 79 22 3a 22 76 61 72 28 2d 2d 66 6f 6e 74 2d 73 79 73 74 65 6d 29 22 2c 22 77 65 69 67 68 74 22 3a 35 30 30 2c 22 66 6f 6e 74 54 79 70 65 22 3a 22 73 79 73 74 65 6d 22 2c 22 76 61 72 69 61 6e 74 73 22 3a 5b 22 33 30 30 22 2c 22 34 30 30 22 2c 22 35 30 30 22 2c 22 36 30 30 22 2c 22 37 30 30 22 2c 22 38 30 30 22 2c 22 39 30 30 22 5d 7d 2c 22 63 6f 6c 6f 72 22 3a 22 72 67 62 28 30 2c 20 30 2c 20 30 29 22 2c 22 5f 73 68 61 64 6f 77 73 22 3a 5b 7b 22 79 22 3a 32 2c 22 62 6c 75 72 22 3a 35 2c 22 63 6f 6c 6f 72 22 3a 22 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 22 7d 5d 2c 22 66 6f 6e Data Ascii: 10dc9, 229)"},"normal":{"_font":{"style":"normal","family":"var(--font-system)","weight":500,"fontType":"system","variants":["300","400","500","600","700","800","900"]},"color":"rgb(0, 0, 0)","_shadows":[{"y":2,"blur":5,"color":"rgba(0, 0, 0, 0)"}],"fon
2024-07-15 15:49:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	65100	54.185.96.248	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:49 UTC	822	OUT	GET /public/structures/groups HTTP/1.1 Host: api.umso.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.umso.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
2024-07-15 15:49:50 UTC	308	IN	HTTP/1.1 200 OK Date: Mon, 15 Jul 2024 15:49:50 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.umso.com Access-Control-Expose-Headers: x-umso-appver X-Umso-Appver: 5.1.8
2024-07-15 15:49:50 UTC	16076	IN	Data Raw: 37 65 64 38 0d 0a 5b 7b 22 69 64 22 3a 22 73 74 67 5f 71 54 55 79 5a 67 74 51 43 74 55 48 45 73 79 43 22 2c 22 6e 61 6d 65 22 3a 22 54 65 73 74 69 6d 6f 6e 69 61 6c 22 2c 22 73 74 61 74 75 73 22 3a 22 6f 66 66 69 63 69 61 6c 22 2c 22 64 65 66 61 75 6c 74 44 61 74 61 22 3a 7b 22 6f 6d 69 74 74 65 64 22 3a 74 72 75 65 7d 2c 22 6f 77 6e 65 64 42 79 22 3a 22 6f 72 67 5f 44 73 6a 64 53 4a 72 54 68 41 77 44 6f 75 6a 76 22 2c 22 63 72 65 61 74 65 64 41 74 22 3a 22 32 30 32 33 2d 30 35 2d 31 35 54 31 34 3a 35 38 3a 32 35 5a 22 2c 22 6d 65 74 61 22 3a 7b 22 73 68 6f 77 49 6e 47 65 6e 65 72 61 74 6f 72 22 3a 74 72 75 65 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 74 65 73 74 69 6d 6f 6e 69 61 6c 73 22 2c 22 73 75 62 43 61 74 65 67 6f 72 79 22 3a 22 22 2c 22 64 65 73 63 Data Ascii: 7ed8[{"id":"stg_qTUyZgtQCtUHEsyC","name":"Testimonial","status":"official","defaultData":{"omitted":true},"ownedBy":"org_DsjdSJrThAwDoujv","createdAt":"2023-05-15T14:58:25Z","meta":{"showInGenerator":true,"category":"testimonials","subCategory":"","desc
2024-07-15 15:49:50 UTC	16384	IN	Data Raw: 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 70 72 69 6d 61 72 79 43 6f 6c 6f 72 22 3a 74 72 75 65 2c 22 73 65 63 6f 6e 64 61 72 79 43 6f 6c 6f 72 22 3a 74 72 75 65 7d 2c 22 63 61 72 64 73 22 3a 7b 22 69 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 73 70 61 63 69 6e 67 22 3a 7b 22 74 6f 70 22 3a 74 72 75 65 2c 22 62 6f 74 74 6f 6d 22 3a 74 72 75 65 2c 22 69 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 7b 22 63 6c 65 61 72 22 3a 74 72 75 65 2c 22 63 6f 6c 6f 72 22 3a 74 72 75 65 2c 22 6d 65 64 69 61 22 3a 74 72 75 65 2c 22 76 69 64 65 6f 22 3a 74 72 75 65 2c 22 67 72 61 64 69 65 6e 74 22 3a 74 72 75 65 2c 22 69 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 7d 7d 7d 2c 22 6f 77 6e 65 64 42 79 22 3a 22 6f 72 Data Ascii: sEnabled":true,"primaryColor":true,"secondaryColor":true},"cards":{"isEnabled":true},"spacing":{"top":true,"bottom":true,"isEnabled":true},"background":{"clear":true,"color":true,"media":true,"video":true,"gradient":true,"isEnabled":true}}}},"ownedBy":"or
2024-07-15 15:49:50 UTC	20	IN	Data Raw: 2c 22 64 65 73 69 67 6e 22 3a 7b 22 6f 70 74 69 6f 6e 0d 0a Data Ascii: ,"design":{"option
2024-07-15 15:49:50 UTC	16384	IN	Data Raw: 38 30 30 30 0d 0a 73 22 3a 7b 22 6d 69 73 63 22 3a 7b 22 6d 61 78 57 69 64 74 68 22 3a 74 72 75 65 2c 22 69 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 63 63 65 6e 74 43 6f 6c 6f 72 22 3a 74 72 75 65 7d 2c 22 74 65 78 74 22 3a 7b 22 62 6f 64 79 22 3a 74 72 75 65 2c 22 74 69 74 6c 65 22 3a 74 72 75 65 2c 22 66 6f 6e 74 53 69 7a 65 22 3a 74 72 75 65 2c 22 69 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 70 72 69 6d 61 72 79 43 6f 6c 6f 72 22 3a 74 72 75 65 2c 22 73 65 63 6f 6e 64 61 72 79 43 6f 6c 6f 72 22 3a 74 72 75 65 7d 2c 22 73 70 61 63 69 6e 67 22 3a 7b 22 74 6f 70 22 3a 74 72 75 65 2c 22 62 6f 74 74 6f 6d 22 3a 74 72 75 65 2c 22 69 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 7b 22 63 6c 65 61 72 22 Data Ascii: 8000s":{"misc":{"maxWidth":true,"isEnabled":true,"accentColor":true},"text":{"body":true,"title":true,"fontSize":true,"isEnabled":true,"primaryColor":true,"secondaryColor":true},"spacing":{"top":true,"bottom":true,"isEnabled":true},"background":{"clear"
2024-07-15 15:49:50 UTC	16384	IN	Data Raw: 6d 65 22 3a 22 43 61 72 64 20 77 69 74 68 20 54 65 73 74 69 6d 6f 6e 69 61 6c 22 2c 22 76 65 72 73 69 6f 6e 22 3a 31 30 2c 22 6d 61 78 56 65 72 73 69 6f 6e 22 3a 31 30 2c 22 73 74 61 74 75 73 22 3a 22 6f 66 66 69 63 69 61 6c 22 2c 22 73 74 72 75 63 74 54 79 70 65 22 3a 22 73 65 63 74 69 6f 6e 22 2c 22 64 61 74 61 22 3a 7b 22 6f 6d 69 74 74 65 64 22 3a 74 72 75 65 7d 2c 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 69 74 65 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 6d 65 64 69 61 4c 65 66 74 22 2c 22 6e 61 6d 65 22 3a 22 49 6d 61 67 65 20 4c 65 66 74 22 2c 22 74 79 70 65 22 3a 22 62 6f 6f 6c 65 61 6e 22 7d 2c 7b 22 6b 65 79 22 3a 22 61 6c 69 67 6e 4d 65 64 69 61 22 2c 22 6e 61 6d 65 22 3a 22 41 6c 69 67 6e 20 4d 65 64 69 61 22 2c 22 74 79 70 65 22 3a 22 73 65 6c 65 Data Ascii: me":"Card with Testimonial","version":10,"maxVersion":10,"status":"official","structType":"section","data":{"omitted":true},"settings":{"items":[{"key":"mediaLeft","name":"Image Left","type":"boolean"},{"key":"alignMedia","name":"Align Media","type":"sele
2024-07-15 15:49:50 UTC	8	IN	Data Raw: 2c 22 64 61 74 61 0d 0a Data Ascii: ,"data
2024-07-15 15:49:50 UTC	16384	IN	Data Raw: 34 35 38 30 0d 0a 22 3a 7b 22 6f 6d 69 74 74 65 64 22 3a 74 72 75 65 7d 2c 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 69 74 65 6d 73 22 3a 5b 5d 2c 22 64 65 73 69 67 6e 22 3a 7b 22 6f 70 74 69 6f 6e 73 22 3a 7b 22 74 65 78 74 22 3a 7b 22 62 6f 64 79 22 3a 74 72 75 65 2c 22 74 69 74 6c 65 22 3a 74 72 75 65 2c 22 69 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 70 72 69 6d 61 72 79 43 6f 6c 6f 72 22 3a 74 72 75 65 2c 22 73 65 63 6f 6e 64 61 72 79 43 6f 6c 6f 72 22 3a 74 72 75 65 7d 2c 22 73 70 61 63 69 6e 67 22 3a 7b 22 74 6f 70 22 3a 74 72 75 65 2c 22 62 6f 74 74 6f 6d 22 3a 74 72 75 65 2c 22 69 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 7b 22 63 6c 65 61 72 22 3a 74 72 75 65 2c 22 63 6f 6c 6f 72 22 3a 74 72 75 65 Data Ascii: 4580":{"omitted":true},"settings":{"items":[],"design":{"options":{"text":{"body":true,"title":true,"isEnabled":true,"primaryColor":true,"secondaryColor":true},"spacing":{"top":true,"bottom":true,"isEnabled":true},"background":{"clear":true,"color":true
2024-07-15 15:49:50 UTC	1416	IN	Data Raw: 6f 72 67 5f 44 73 6a 64 53 4a 72 54 68 41 77 44 6f 75 6a 76 22 2c 22 63 72 65 61 74 65 64 41 74 22 3a 22 32 30 32 34 2d 30 31 2d 32 36 54 32 30 3a 32 30 3a 30 39 5a 22 2c 22 67 72 6f 75 70 4e 61 6d 65 22 3a 22 4d 61 70 22 2c 22 67 72 6f 75 70 49 64 22 3a 22 73 74 67 5f 7a 53 64 49 79 6b 44 55 68 6f 6c 78 45 6a 76 7a 22 2c 22 74 61 67 73 22 3a 5b 22 62 69 67 20 6d 61 70 22 5d 7d 2c 7b 22 69 64 22 3a 22 73 74 5f 55 62 4c 6a 4e 51 61 73 71 4c 50 4d 79 61 63 43 22 2c 22 6e 61 6d 65 22 3a 22 43 6c 61 73 73 69 63 22 2c 22 76 65 72 73 69 6f 6e 22 3a 33 2c 22 6d 61 78 56 65 72 73 69 6f 6e 22 3a 33 2c 22 73 74 61 74 75 73 22 3a 22 6f 66 66 69 63 69 61 6c 22 2c 22 73 74 72 75 63 74 54 79 70 65 22 3a 22 73 65 63 74 69 6f 6e 22 2c 22 64 61 74 61 22 3a 7b 22 6f 6d 69 Data Ascii: org_DsjdSJrThAwDoujv","createdAt":"2024-01-26T20:20:09Z","groupName":"Map","groupId":"stg_zSdIykDUholxEjvz","tags":["big map"]},{"id":"st_UbLjNQasqLPMyacC","name":"Classic","version":3,"maxVersion":3,"status":"official","structType":"section","data":{"omi
2024-07-15 15:49:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	65106	54.185.96.248	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:51 UTC	995	OUT	GET /public/structures?ids=st_gmfhijCMMxAcBLrJ:9,st_uGerXxeRYOSTsrnJ:4,st_NwmLNovUgREHorrQ:4,st_CoBBHOGIRGblDvui:3,st_yjWwCAcrrTwyuqKH:5,st_ZhZeMoQDspyfOwZC:5,st_gVwJmnNuAaIUzPZB:5,st_EjpMuJiVfBUfYXvK:4 HTTP/1.1 Host: api.umso.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.umso.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
2024-07-15 15:49:51 UTC	308	IN	HTTP/1.1 200 OK Date: Mon, 15 Jul 2024 15:49:51 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.umso.com Access-Control-Expose-Headers: x-umso-appver X-Umso-Appver: 5.1.8
2024-07-15 15:49:51 UTC	16076	IN	Data Raw: 35 34 63 33 0d 0a 5b 7b 22 69 64 22 3a 22 73 74 5f 79 6a 57 77 43 41 63 72 72 54 77 79 75 71 4b 48 22 2c 22 6e 61 6d 65 22 3a 22 43 6c 61 73 73 69 63 20 33 20 43 6f 6c 75 6d 6e 22 2c 22 76 65 72 73 69 6f 6e 22 3a 35 2c 22 6d 61 78 56 65 72 73 69 6f 6e 22 3a 35 2c 22 73 74 61 74 75 73 22 3a 22 6f 66 66 69 63 69 61 6c 22 2c 22 73 74 72 75 63 74 54 79 70 65 22 3a 22 73 65 63 74 69 6f 6e 22 2c 22 64 61 74 61 22 3a 7b 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 6b 65 79 22 3a 22 73 31 22 2c 22 74 79 70 65 22 3a 22 73 65 63 74 69 6f 6e 22 2c 22 70 72 6f 70 73 22 3a 7b 22 73 74 79 6c 65 22 3a 7b 22 64 69 73 70 6c 61 79 22 3a 22 66 6c 65 78 22 2c 22 70 61 64 64 69 6e 67 22 3a 5b 33 30 2c 30 2c 36 30 2c 30 5d 2c 22 62 6f 72 64 65 72 54 6f 70 22 3a 22 31 70 78 20 73 6f 6c Data Ascii: 54c3[{"id":"st_yjWwCAcrrTwyuqKH","name":"Classic 3 Column","version":5,"maxVersion":5,"status":"official","structType":"section","data":{"content":{"key":"s1","type":"section","props":{"style":{"display":"flex","padding":[30,0,60,0],"borderTop":"1px sol
2024-07-15 15:49:51 UTC	5631	IN	Data Raw: 67 6e 49 74 65 6d 73 22 3a 22 63 65 6e 74 65 72 22 2c 22 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 34 30 70 78 29 22 3a 7b 22 61 6c 69 67 6e 49 74 65 6d 73 22 3a 22 66 6c 65 78 2d 73 74 61 72 74 22 2c 22 66 6c 65 78 44 69 72 65 63 74 69 6f 6e 22 3a 22 63 6f 6c 75 6d 6e 22 7d 7d 2c 22 63 68 69 6c 64 72 65 6e 22 3a 5b 7b 22 6b 65 79 22 3a 22 62 31 22 2c 22 74 79 70 65 22 3a 22 62 6f 78 22 2c 22 70 72 6f 70 73 22 3a 7b 22 73 74 79 6c 65 22 3a 7b 22 77 69 64 74 68 22 3a 22 63 61 6c 63 28 35 30 25 20 2d 20 36 30 70 78 29 22 2c 22 64 69 73 70 6c 61 79 22 3a 22 66 6c 65 78 22 2c 22 74 65 78 74 41 6c 69 67 6e 22 3a 22 6c 65 66 74 22 2c 22 61 6c 69 67 6e 49 74 65 6d 73 22 3a 22 66 6c 65 78 2d 73 74 61 72 74 22 2c 22 66 6c 65 78 53 68 72 69 6e 6b Data Ascii: gnItems":"center","@media (max-width: 740px)":{"alignItems":"flex-start","flexDirection":"column"}},"children":[{"key":"b1","type":"box","props":{"style":{"width":"calc(50% - 60px)","display":"flex","textAlign":"left","alignItems":"flex-start","flexShrink
2024-07-15 15:49:51 UTC	653	IN	Data Raw: 32 38 36 0d 0a 61 62 6c 65 22 3a 74 72 75 65 7d 7d 2c 22 69 74 65 6d 4e 61 6d 65 22 3a 22 46 41 51 22 2c 22 64 69 72 65 63 74 69 6f 6e 22 3a 22 63 6f 6c 75 6d 6e 22 7d 7d 5d 7d 7d 5d 2c 22 68 69 64 65 57 68 65 6e 45 6d 70 74 79 22 3a 74 72 75 65 7d 7d 5d 2c 22 64 65 73 69 67 6e 54 61 72 67 65 74 22 3a 74 72 75 65 7d 7d 7d 2c 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 69 74 65 6d 73 22 3a 5b 5d 2c 22 64 65 73 69 67 6e 22 3a 7b 22 6f 70 74 69 6f 6e 73 22 3a 7b 22 6d 69 73 63 22 3a 7b 22 6d 61 78 57 69 64 74 68 22 3a 74 72 75 65 2c 22 69 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 63 63 65 6e 74 43 6f 6c 6f 72 22 3a 74 72 75 65 2c 22 62 6f 72 64 65 72 43 6f 6c 6f 72 22 3a 74 72 75 65 2c 22 62 6f 72 64 65 72 57 69 64 74 68 22 3a 74 72 75 65 7d 2c 22 74 65 Data Ascii: 286able":true}},"itemName":"FAQ","direction":"column"}}]}}],"hideWhenEmpty":true}}],"designTarget":true}}},"settings":{"items":[],"design":{"options":{"misc":{"maxWidth":true,"isEnabled":true,"accentColor":true,"borderColor":true,"borderWidth":true},"te
2024-07-15 15:49:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	65108	18.245.206.205	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:51 UTC	699	OUT	GET /st_DhlQhQgafqkiwvHx/5?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:51 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 33844 Connection: close Date: Mon, 15 Jul 2024 04:03:19 GMT x-amzn-RequestId: 1d72db26-1632-45d9-a835-80237eb493c4 Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66949f7d-67787d2705c567fa353fc2ff;parent=235dcbd643165a59;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 2801a11fe30495c492c94ec08d26a9f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: 22FwfNlCJUON0c92i_a-BjnFc_0F4l8OtqV96kQmwIh2uv57V60ZbQ== Age: 42392
2024-07-15 15:49:51 UTC	15847	IN	Data Raw: 52 49 46 46 2c 84 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 04 04 00 41 4c 50 48 e8 25 00 00 01 1c b5 6d 1b 39 b2 f7 df fa 3e 5d a8 be 8a 88 09 20 5b a7 36 38 9e 9d 7b ff c8 e7 2d 30 60 92 25 25 b5 d5 e5 8b c9 f5 01 92 b8 20 df 69 e9 a6 6b 6d 7b 22 c9 f9 45 55 dd c3 b0 bc 77 60 08 7d 01 cc 90 33 5f 00 33 33 33 3b 64 8c 9c b3 b3 cd cc cc 5e 32 2e 18 bb ab 74 4e 81 54 23 fd 65 f8 ff 9e 55 44 48 60 db 46 92 24 39 99 7a ba a7 27 15 60 eb fe 9a ba bf 01 14 88 bf ff 28 22 c2 1f ff ff 8a 9e c6 ff f7 3c e7 cc 5c 57 3c 94 40 bd 85 65 09 a5 ee ae 14 b6 ee ee ef ba b7 40 65 69 f0 40 5d b0 d5 ba 53 79 ef d6 dd 0d 68 b7 ee d4 8b 6b 88 00 49 ae b1 d7 ed 36 f3 3a 67 ce 4c e0 2d cd 1f 8d 08 59 b0 ad 86 6d f4 64 ab 51 9a 76 1f 78 85 25 19 cb a2 9f c0 Data Ascii: RIFF,WEBPVP8XALPH%m9>] [68{-0`%% ikm{"EUw`}3_333;d^2.tNT#eUDH`F$9z'`("<\W<@e@ei@]SyhkI6:gL-YmdQvx%
2024-07-15 15:49:51 UTC	16384	IN	Data Raw: ec e3 23 4e 96 84 3b 4e 7b e9 f2 48 a6 6b c7 79 7a 3e 7b 37 76 23 e5 84 f4 b8 41 23 c8 05 cc 77 23 59 12 f5 a8 3f 00 68 71 24 46 0c f1 3f de 1a 58 1a 24 10 a8 5f 66 f2 39 b4 3d ff 15 f5 f9 41 35 3b b8 e4 c1 16 51 42 ab 07 37 58 98 1d 9d 4b 5f 6a 5a ab 59 f7 88 8e 28 05 c9 df 7f a9 76 a5 a0 53 45 10 37 44 a6 2e 57 78 ce e4 4d eb 65 0b 88 52 d3 76 03 07 54 e3 9a 3b 8f cf 27 ee 66 95 e7 d3 be f0 42 02 a7 63 b0 c5 31 64 ea b0 a0 20 50 c7 98 aa fb a3 4e be fd 96 3b 93 a0 7d ef 2a d8 25 85 11 ca 0a 6c d6 78 b4 8a 4f b2 5a 77 82 1d 2b ed db be d8 51 79 a5 47 0c f0 f0 6b ff 6f 20 9a 50 67 07 99 f3 28 3b 34 18 63 e5 6a 15 e2 fb 99 8e 2e 69 ce 83 5d 67 83 76 89 74 82 e4 f9 a3 bc ec 84 12 4e fe dd c0 c1 fe 70 ba dc ee 5b 8c 86 32 3e d7 ba bb 6f d3 14 ef 78 52 62 49 Data Ascii: #N;N{Hkyz>{7v#A#w#Y?hq$F?X$_f9=A5;QB7XK_jZY(vSE7D.WxMeRvT;'fBc1d PN;}*%lxOZw+QyGko Pg(;4cj.i]gvtNp[2>oxRbI
2024-07-15 15:49:51 UTC	1613	IN	Data Raw: 3c b9 0f 65 67 0b 42 34 59 ef dd 59 9b 75 78 d7 27 5a 81 43 26 21 db d2 81 4d 35 94 d7 35 c0 ff 29 e5 94 8d e2 4c 1a 95 fc e0 3f 4e 86 45 49 59 72 e5 5f 64 40 38 48 ae 85 38 7a 08 d9 2b 97 45 a8 f4 7b 3c cd 26 8f 16 4d 5e 4d e8 5f 2d 22 98 4d f1 cb fe 2a dc 77 6f 2b 5a 9f 80 88 d0 84 e9 54 09 49 d1 1d 9c 02 33 4c 92 06 65 02 a5 2b 16 17 8f 81 be b0 64 a5 bf e0 1a d1 d8 0a d5 6f 5c 69 91 f4 53 eb a5 2d df 7e 87 b3 bb 6b 28 e6 b0 bd 18 13 92 2c ac 57 a1 79 29 83 3d 8c d1 d1 ed 98 56 1d df b9 47 81 dc 9a 16 1d 93 3b 55 c7 2a 34 b1 8e 5e 26 6e 19 8d 0b 6a e5 1d 46 9c db ba 80 b7 79 8a f4 75 e9 f2 eb 95 14 07 6e 18 a5 ef fd fd 7c 5b 2b e0 78 bc f4 5c 52 85 36 25 5d a9 9c 16 51 67 9c cb a2 c5 b3 ae a3 6a 4a 2a 03 58 a9 47 6b 15 2c e6 82 60 d6 ba f4 0c fe 50 d7 Data Ascii: <egB4YYux'ZC&!M55)L?NEIYr_d@8H8z+E{<&M^M_-"Mwo+ZTI3Le+do\iS-~k(,Wy)=VG;U4^&njFyun\|[+x\R6%]QgjJ*XGk,`P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	65109	18.245.206.205	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:51 UTC	699	OUT	GET /st_wqnaCNxfMwAMacVY/4?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:51 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 32548 Connection: close Date: Mon, 15 Jul 2024 04:03:16 GMT x-amzn-RequestId: 1ed78420-5381-4d74-bed5-9dd24373201e Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66949f7d-6664ba9434ad20b9025ffb01;parent=191a13b07bd07fbd;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 7e0c27121f91f2e977088357fc7e2d06.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: -Utr7YfcXS36SVrRwkllEVp49XgcFRkuMKtv1_OZjchvc8JNbSIswg== Age: 42395
2024-07-15 15:49:51 UTC	15847	IN	Data Raw: 52 49 46 46 1c 7f 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 e0 02 00 41 4c 50 48 f8 22 00 00 01 1c c5 6d db 38 92 f7 1f fb 7a fd 46 c4 04 b0 ba a7 e5 84 09 49 88 38 b2 50 66 8c 2d a3 c9 12 cc 34 a1 a8 e0 48 5a 1d 63 cb 27 db 3d 6f 36 cc 52 e8 68 db a4 48 72 22 b3 1a 97 c1 dc 03 a0 05 92 89 a6 74 04 32 75 00 66 06 93 e9 10 ba 85 5c dd 81 99 a5 65 ee c1 ca fc 23 32 4a 7a 9e 0a b5 fe 88 90 00 c9 76 db 36 07 f7 fa 70 e9 89 02 01 f3 9c 32 74 24 db 56 24 49 ef 7d 8a 48 2a e6 da c1 c0 2a 98 47 67 da 04 ab cc 4c 32 ca a3 f3 68 a3 31 33 33 63 64 c4 37 8b f8 ff 45 74 b7 f4 6e 51 44 40 62 db 46 92 24 c7 75 a4 d3 b5 83 45 63 ee f9 17 fc 61 db a7 68 6a fc 7f 77 55 75 8f 0f 83 4d 5c 20 1b 2c 6e 48 1c 8b bb bb bb db 66 f1 c0 40 dc 75 7d 09 71 77 c5 Data Ascii: RIFFWEBPVP8XALPH"m8zFI8Pf-4HZc'=o6RhHr"t2uf\e#2Jzv6p2t$V$I}H**GgL2h133cd7EtnQD@bF$uEcahjwUuM\ ,nHf@u}qw
2024-07-15 15:49:51 UTC	16384	IN	Data Raw: 0a e5 9f a2 35 d9 2b 52 ed 1c cc 3b d5 78 67 9e 00 27 c2 56 7d 6e a8 80 4c 3c cf 55 dd 37 0d 16 f7 1f 51 e9 c9 c6 8d 9b 64 f2 a2 2f 2e 2f 29 56 dc d7 96 a3 43 bd 1b 76 f2 9f c2 5b 75 e9 e9 32 ed 80 10 77 3a 0e 5f b1 f2 4c 1d 2f 10 56 58 c4 87 af 40 1f ba 2b c9 0b 37 50 06 be 89 2b a8 54 cd 35 bf 18 e7 1a 27 d5 32 c3 71 32 e1 04 0c 4c ba 47 44 9a d7 81 e2 91 26 9f 04 58 76 ff 3c b6 f8 b5 90 1a 28 12 52 b6 27 58 60 ab 0a 5a 77 3f 55 32 59 c7 79 77 45 17 e1 af 8b 52 40 17 97 2d ad ed 09 bc d9 85 d9 41 ab b7 4d 6f b9 25 35 8a 4e b5 e8 43 cc e0 79 46 d4 98 6e 01 a4 73 b6 42 69 37 57 bd 61 ab d2 53 0d cf b3 9e a5 9e ce c6 af d6 f0 ef 33 42 60 5e e2 4d 78 2b 28 0e 37 df a9 c5 70 b8 5f ae 41 3a 14 72 96 fb 78 ab cd e2 ce 8d 1b af 4e ea 15 5c 2e db bc d1 f2 7a e7 Data Ascii: 5+R;xg'V}nL<U7Qd/./)VCv[u2w:_L/VX@+7P+T5'2q2LGD&Xv<(R'X`Zw?U2YywER@-AMo%5NCyFnsBi7WaS3B`^Mx+(7p_A:rxN\.z
2024-07-15 15:49:51 UTC	317	IN	Data Raw: e6 80 00 02 ea 4b 1f be 0d b2 9e 80 18 28 ee f8 11 37 fd 12 85 59 c8 68 4e cb ac e0 c0 cd 7c 74 79 f6 cb 3d 97 ca cc 10 90 37 ba fd ad be f4 7a 88 79 91 fd 3c ce 2d 12 80 60 dd 13 17 c9 09 2a d1 52 9c 96 dd fb 00 00 00 03 8c 00 a8 bf da 14 a5 c8 84 94 a6 89 3b fc fa cf 41 b3 9b 4f b5 f0 7f 9b 3c 3b 1c 8e 1a 1b c8 25 04 8a a8 40 cc d1 bf 63 bd bc e9 68 38 a5 49 c5 39 26 39 c7 0d f5 4a b8 6e a7 f7 0d 80 00 01 ab bf 38 e6 80 0d 1d 80 e6 c7 f9 ef 8c ea 85 ce e7 01 b8 ec a7 d8 d5 9d 81 1b 23 9c 9b 86 5f 2a 53 a8 7b f6 41 ba 9d bf 10 d6 36 00 00 18 01 3b f3 80 43 b8 80 01 f4 26 2b 4e 4d d5 d8 64 41 73 22 62 94 c7 1c da e1 e5 80 00 01 52 b6 b0 a6 90 00 27 4e e6 f0 97 10 3a 49 3b 0d 68 00 00 21 f0 5b c9 8e b0 d4 61 d0 75 32 5a b9 2a 2b 4c 58 6d f4 ef 65 c3 a6 15 Data Ascii: K(7YhN\|ty=7zy<-`R;AO<;%@ch8I9&9Jn8#_S{A6;C&+NMdAs"bR'N:I;h![au2Z*+LXme

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	65111	18.245.206.205	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:51 UTC	699	OUT	GET /st_RiCaApghsiWDsXYm/3?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:51 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 33990 Connection: close Date: Mon, 15 Jul 2024 04:03:18 GMT x-amzn-RequestId: 424888ab-ce9e-4677-a7db-f6cd80a9b5c7 Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66949f7d-5324315e18ada6c529a3e31a;parent=135b1f142ce1b6da;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 804261ff0b3271a24a562f70d4c0c93a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: b-ft2UW4FPMo3Ex-otmCHdtFFbHfU1Ply4sdVDSV7Xc7tGquq_p_hg== Age: 42393
2024-07-15 15:49:51 UTC	15847	IN	Data Raw: 52 49 46 46 be 84 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 0e 03 00 41 4c 50 48 f8 1e 00 00 01 1c b5 6d db 48 8a f6 df 3a df 5d 75 57 46 c4 04 f0 bc 31 f4 28 d8 79 bc bb 6b 78 3e 79 35 42 94 0b 43 4e 01 28 97 ef fd 4d 49 92 24 29 92 94 29 c3 f8 57 66 86 23 bc 90 16 cf 83 b7 ee 6a bc 4d 2c 94 c4 4c 6b 44 b0 61 1b 49 91 e7 a9 3d e8 ff 9e 5f d8 b0 6d 53 eb b6 d6 3b 33 92 29 76 ec 80 cb 90 76 97 99 19 02 65 66 66 66 3c dd e1 38 50 66 66 66 66 66 e6 26 65 6e 1a 28 05 1c 43 12 db 6b 49 33 df 75 49 df 8c 46 cb fb 50 f5 a3 11 41 8d b6 de b0 6d f3 d1 46 4a d7 c9 f9 c0 23 32 94 04 51 80 b1 ee 87 dc 6c 9b 14 c9 a9 ee 99 39 e6 33 2f 80 13 b3 4c 66 c8 80 4c b9 cc cc 10 00 c6 20 57 11 c8 95 a2 d8 73 c5 64 4a d6 4d f7 5f d5 d5 4e 95 20 22 e0 b0 6d Data Ascii: RIFFWEBPVP8XALPHmH:]uWF1(ykx>y5BCN(MI$))Wf#jM,LkDaI=_mS;3)vvefff<8Pfffff&en(CkI3uIFPAmFJ#2Ql93/LfL WsdJM_N "m
2024-07-15 15:49:51 UTC	16384	IN	Data Raw: 65 af 4f 8b 24 41 63 7e cb 1a 41 7d 2d 48 bc c4 30 2a 19 f3 73 77 a0 09 af c7 12 38 54 42 bf 06 f8 53 e2 4c 39 60 51 40 bd 16 84 7b c7 e1 00 e9 aa 10 85 ef 75 3c 12 76 d4 b0 da bb 4d cf 10 bc 8c 85 63 b1 c4 7f 6b db 02 db 6c 68 b7 3a 4d 5c 7c a0 71 39 30 25 13 9a 9f ea e8 94 c3 38 2b 47 f5 ca ea 8c e6 90 c4 6f cd d2 93 65 1e c9 42 a5 f2 c9 87 78 06 2e e9 aa 7d 46 07 1e 58 06 30 98 23 53 de 17 2e 30 b7 c5 d3 e2 07 c6 81 47 9a 21 d0 1d c0 56 4f 76 ae 28 d5 3c 9b e6 ac ba 5a db 1e 7c 1d 69 ec ca dd 0b db d8 69 0a 8f 25 fb 9e 89 8f 59 a9 33 42 51 2d ee 0a b9 c1 fd be 11 af 75 a9 54 c0 a5 ef f9 94 bb 80 80 b6 81 83 4a 44 83 1b bd 79 b3 9b be ba 7d a6 27 46 66 64 97 eb 03 03 45 29 a8 44 ab 2c 98 6f 6c e0 36 3c 3a e2 8f b6 1c 84 c0 07 17 e8 de d3 7a 3b 3e e9 0e Data Ascii: eO$Ac~A}-H0*sw8TBSL9`Q@{u<vMcklh:M\\|q90%8+GoeBx.}FX0#S.0G!VOv(<Z\|ii%Y3BQ-uTJDy}'FfdE)D,ol6<:z;>
2024-07-15 15:49:51 UTC	1759	IN	Data Raw: 89 9b d1 75 2d 32 42 bd 06 db a4 72 06 be b6 a6 df 64 ef 40 b5 81 d1 9f 7d ba ac 44 f5 1b 46 84 38 c5 41 f7 a8 ab 00 23 7b 58 80 02 a2 22 f3 f1 2e 7b b3 d7 e0 50 ad be dc d3 12 d8 7a c6 b0 de 8e ac 21 b1 0a 70 66 e1 58 1d df 4c f0 e6 27 dd 24 b6 4e da 76 1a ef 03 63 1f 9c 80 70 37 9d 1f dd 9b 7a 15 fc 97 60 cc 32 c9 f6 1f 20 21 aa 70 20 9d 15 70 14 99 8c 04 aa 78 35 91 51 99 ef 44 af c7 d1 fa 14 ca de 38 4d ed 3f f3 92 52 50 cd 80 52 89 a7 98 b8 c6 2e d3 56 6c 31 11 0d 80 75 cc db b5 a3 0a 18 2d 7b 62 9a e0 fa e6 27 99 a9 8c d4 c6 80 02 11 64 08 94 fb 93 e3 f8 65 11 45 40 cd 64 05 75 51 0f ce ca 24 f2 12 08 71 0b 37 06 94 4f 54 da ac 7e 7a 0b c8 6c 73 a2 18 e2 e6 b9 69 18 fc 35 6f 87 15 af dd 97 cc 8e 45 90 bc 8f 50 31 d6 e9 ec a6 5a b1 0e d9 cd 96 e5 61 Data Ascii: u-2Brd@}DF8A#{X".{Pz!pfXL'$Nvcp7z`2 !p px5QD8M?RPR.Vl1u-{b'deE@duQ$q7OT~zlsi5oEP1Za

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	65110	18.245.206.205	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:51 UTC	699	OUT	GET /st_SgsUvIflyiJLKbkn/5?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:51 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 29616 Connection: close Date: Mon, 15 Jul 2024 04:03:15 GMT x-amzn-RequestId: 9ba6e880-28d8-4d75-a92a-21ee2aa9e860 Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66949f7d-4d0e005475220a234effe435;parent=34483d3bcaac8a65;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 fde2aef68e69b880ea1fac26ee454b6e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: 4bQDW7hSAjlZMYJSm6os68TtekrQqx-NbMZ3e_5XBCaIacky1tZGdg== Age: 42396
2024-07-15 15:49:51 UTC	16384	IN	Data Raw: 52 49 46 46 a8 73 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 d5 01 00 41 4c 50 48 4f 25 00 00 01 14 c7 8d 24 29 52 65 fa ef f5 52 c3 1e 3c 23 62 02 32 90 6c df d7 ed c0 af 07 41 e5 72 43 e1 34 df 21 09 56 33 e3 52 10 38 63 0a 4f cf 50 1c a6 82 a0 78 c9 49 da 11 4f b1 b8 4d b7 c5 f6 36 d7 e5 8c 45 f7 4b e8 c3 23 96 f7 d9 de f7 b0 24 af 67 fb df 87 d7 d3 db 6d db a6 6d db d6 96 5b 6d 6d 70 5a cb b6 6d db b6 6d db b6 6d db f6 da b6 6d 9b 4b 7d b2 af 3e 7b 45 0e a1 85 b5 7e 40 29 f9 4b 44 38 52 23 c9 91 d4 64 41 8e fb c0 ba 66 8f fe b0 ff 53 24 b5 fe bf 67 55 75 cf cc 1a 8b 6d 5c 20 27 ee 86 c4 71 e2 ee ee 2e c8 49 f0 2c bb c4 5d 8f 1f 42 dc 5d b1 b8 1b 31 4e de ef 20 c1 7d 59 81 b5 e9 ee 7a 5d 57 f7 ab aa 6b 66 97 23 ff 45 04 2d c8 56 eb Data Ascii: RIFFsWEBPVP8XALPHO%$)ReR<#b2lArC4!V3R8cOPxIOM6EK#$gmm[mmpZmmmmK}>{E~@)KD8R#dAfS$gUum\ 'q.I,]B]1N }Yz]Wkf#E-V
2024-07-15 15:49:51 UTC	13232	IN	Data Raw: e7 2f ca 47 41 e8 d3 10 2e c2 37 f7 02 82 67 38 36 c6 fa 0d 5f 6c 6e 39 49 d7 6b bf bb 75 79 92 95 2c 1b 05 5f c7 3a a1 ff 34 cd db 68 b0 f4 c0 0b de be 2a 94 64 13 e2 44 87 13 1c 2b 75 c3 65 2d 56 6e 81 f9 85 58 65 5a 8a d4 cd 7c 75 48 04 0e 2a e8 51 bf 68 a8 26 ce 9c cc c5 a1 b6 1c 58 a9 d2 75 8a 1b d3 1b 5b c9 23 47 24 52 9d d3 8b c4 c0 0d b5 dd 73 53 65 e6 8b b1 f7 18 0b 8d 2e 85 c5 0b 6b 25 52 7e d0 e7 76 9c ab f1 8d 46 50 7f fb df 51 f0 b2 52 ab 74 7e 2c f1 64 dc 3b 44 41 92 c7 db aa a2 47 99 2e 11 b8 a3 ab 9e e2 c4 8a d3 b7 82 73 a0 c9 7a ff 18 61 c6 be 1b 29 36 31 0c ba 54 9f 8f cd 54 9a 30 bb 12 c3 48 36 25 41 fe 5f b3 93 4a fe cf e1 2c 44 e6 20 36 42 1a 13 cd 52 30 cc 4f bb 20 cd 52 a4 9c 20 4b 27 d4 f6 5d 49 3a f0 d9 0d c5 af 72 51 ad 34 64 96 Data Ascii: /GA.7g86_ln9Ikuy,_:4hdD+ue-VnXeZ\|uHQh&Xu[#G$RsSe.k%R~vFPQRt~,d;DAG.sza)61TT0H6%A_J,D 6BR0O R K']I:rQ4d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	65107	18.245.206.205	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:51 UTC	699	OUT	GET /st_ZhZeMoQDspyfOwZC/5?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:51 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 30304 Connection: close Date: Mon, 15 Jul 2024 04:03:16 GMT x-amzn-RequestId: d7ec076f-0474-434a-838c-975b55155b61 Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66949f7d-52d99c313d7cb42255f30264;parent=4c7df8b59d110d57;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 fde2aef68e69b880ea1fac26ee454b6e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: 7tJEOvTV_xz5QrkWnZ_mouTGHLntr3dQRMIsvLXVD0K8C1dwGWhzTA== Age: 42395
2024-07-15 15:49:51 UTC	15847	IN	Data Raw: 52 49 46 46 58 76 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 08 02 00 41 4c 50 48 51 1e 00 00 01 ff 27 24 48 f0 ff 78 6b 44 a4 ee 29 8c db 36 72 24 ab ff ae 37 ef e5 7b 45 c4 04 64 39 ab f3 06 03 6a 61 fd 08 a3 ea 4e 8a 80 3d 6a f6 56 c9 81 95 de 63 70 b4 20 0a aa c7 30 94 29 d4 03 84 aa ed 03 a4 27 9a 03 22 56 31 b1 73 1f a1 31 ba 4f 9c 99 6b a5 6e 79 8c 1b 48 d5 f2 20 3f 4f 30 e0 ff 9f 46 6e b4 9f 24 7b 66 79 43 5b 86 a4 d7 50 99 92 72 1b 2a 33 33 33 d3 f5 c2 b0 9b 32 e3 f1 95 99 99 99 31 29 73 98 61 b3 90 2c cc d8 d2 ff 79 ec bf 64 7b b2 bd 17 f6 85 88 fe cb 82 6d 27 6c a3 a7 84 2e d9 34 f3 e4 01 8a b1 0c 52 f8 93 63 5b db b1 3d f7 fd 3c bf 8d 59 04 95 51 d9 98 44 32 02 db 76 99 79 a8 62 c7 29 38 b5 51 7e 88 cd eb 24 b9 22 fa ef 88 Data Ascii: RIFFXvWEBPVP8XALPHQ'$HxkD)6r$7{Ed9jaN=jVcp 0)'"V1s1OknyH ?O0Fn${fyC[Pr*33321)sa,yd{m'l.4Rc[=<YQD2vyb)8Q~$"
2024-07-15 15:49:51 UTC	14457	IN	Data Raw: 1c 6f e7 cb bb 16 94 d8 13 81 a8 e4 74 10 c0 b5 e9 1a 0e 37 f0 99 ea 4e 8b 6a 61 2c b3 f1 81 c9 b9 47 89 05 63 21 74 b3 e8 04 b2 71 96 bd ee c0 e8 df 98 f1 56 47 58 2f 3e 68 ed 41 26 1c c8 c8 10 ec 4a 5a e0 72 82 e9 a3 ed 89 03 a3 30 9c 94 70 f4 e6 0b 7a ce 1d c4 44 05 44 f6 ff 12 f2 d9 ec cb 29 f6 7b ca 98 9a dd 0e bd 6f 36 71 04 fb 72 a5 99 43 3f b5 8b 7f e1 aa 4a fd 05 31 cf 40 c9 13 90 46 2f ee 1c 48 08 12 04 e8 d0 ec c3 9c b4 bd 89 ea a5 22 cb 6d 10 b4 5e a6 01 6a 7b fc 4d a3 24 35 ab c4 ba b7 b8 4e 19 8e 16 88 03 0d ee 23 91 98 0e 8d 2a 5c 65 31 15 59 49 39 49 f7 a8 7c fb 5c 00 00 01 89 4e ad b2 02 c7 07 87 55 1b 46 9b 3a 78 0a d3 00 00 71 42 d4 10 ca d0 d2 af 27 9c 9c e0 38 d2 65 5c 00 46 c7 b3 b4 bc 61 29 2e 6c 33 69 1d 64 38 d2 eb 07 11 44 41 0d Data Ascii: ot7Nja,Gc!tqVGX/>hA&JZr0pzDD){o6qrC?J1@F/H"m^j{M$5N#*\e1YI9I\|\NUF:xqB'8e\Fa).l3id8DA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	65112	18.245.206.205	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:51 UTC	699	OUT	GET /st_zuqDuEpnkgCElcsn/8?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:51 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 40024 Connection: close Date: Mon, 15 Jul 2024 04:03:18 GMT x-amzn-RequestId: 7d90613e-71e9-475b-bc4e-5772bd99acdb Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66949f7d-23b17c920df07e74501747f6;parent=31e1b8b3c5d89a0e;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 7e0c27121f91f2e977088357fc7e2d06.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: WSMnfYPYxHj9tl8lZq1tC7bUotjdRujhr2TxnKnFoKGE4drcB3is7w== Age: 42392
2024-07-15 15:49:51 UTC	16384	IN	Data Raw: 52 49 46 46 50 9c 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 bb 02 00 41 4c 50 48 d1 6b 00 00 01 1c 86 01 90 84 81 40 fd ff e6 74 b3 0f 22 62 02 b0 1a e8 05 68 23 32 33 49 d8 92 56 12 b4 93 cc d8 12 7a d5 d6 99 9f f1 9d 96 f4 2b 47 b8 3b 6b de f2 94 b6 fd ad 54 92 30 78 d2 48 46 91 44 fa 06 70 9d a3 33 52 99 c9 04 80 ae 3f 5f da 24 25 e9 01 24 d9 7e f1 d7 13 d7 34 52 4b 51 55 6c b7 10 c1 bb 6a 0d a0 49 46 3c e8 39 50 da ff cf 90 24 fd 23 22 6b ec eb ac 6d bf 03 e3 66 e3 6e 7b b7 b1 b6 6d db bb 6f c2 36 4f 66 63 59 c8 a7 35 9d 39 4f 64 c4 3f bf ff 4b 44 48 80 64 bb 6d 1b 81 9d f8 52 04 57 28 d0 aa 50 a6 3d d4 68 db 3a f6 56 a3 f6 87 a8 b6 ed 36 4d fa d5 b6 7d db 24 6d 3e f6 da b6 6d db b6 6d db b6 6d e5 fd de 31 de e7 9c 7d ce f3 7c e8 Data Ascii: RIFFPWEBPVP8XALPHk@t"bh#23IVz+G;kT0xHFDp3R?_$%$~4RKQUljIF<9P$#"kmfn{mo6OfcY59Od?KDHdmRW(P=h:V6M}$m>mmm1}\|
2024-07-15 15:49:51 UTC	16384	IN	Data Raw: d7 e2 b7 fa 46 47 fe da d3 56 3a 42 23 c1 12 de d2 be 1c dc cb d5 2d 8a 12 9d d8 4c 53 4b 2b a8 63 17 0d 23 ec 80 98 a1 c1 74 a4 49 41 c8 50 08 22 9a 50 93 82 c4 08 88 8c 36 20 92 39 f6 ea c7 bf b0 06 11 91 f4 4f 32 58 ff b2 67 7f 58 d8 d8 38 ff db a7 2e db 08 82 eb 3a ab bb 31 77 21 9d 6a f8 c8 85 74 44 78 c2 a7 89 22 a4 85 66 a1 4d 60 00 ce ea 2a 35 99 a5 29 08 75 69 75 82 2a 49 41 fa f2 d0 60 5d 02 4d 4a 62 10 01 73 92 b4 6a 39 46 40 64 e6 9a 3d ce b8 d5 0a 44 24 75 5d 9c ff 16 61 b9 5c 9a d8 df 89 75 d8 ff 2d be a7 2b 59 e8 48 68 b3 42 4f a6 2c ab 80 33 ba 82 19 41 c0 57 28 03 53 10 de 01 01 d5 ee dd c9 5c 04 c9 41 4c 0a d2 df fc ea 06 09 39 c8 c8 51 20 94 cd 49 f2 aa e5 29 b1 89 95 04 44 6a 0f ba e8 be f7 30 88 64 b7 29 f7 3b 9e 5b 3c 8c c0 5a 7d cd Data Ascii: FGV:B#-LSK+c#tIAP"P6 9O2XgX8.:1w!jtDx"fM`5)uiuIA`]MJbsj9F@d=D$u]a\u-+YHhBO,3AW(S\AL9Q I)Dj0d);[<Z}
2024-07-15 15:49:51 UTC	7256	IN	Data Raw: 6d ae 8d a3 41 16 2c c8 5e 9a 40 78 39 69 48 96 4f bd ef fb 0b e6 d5 9c d5 a1 2e 4b 15 0d cb 16 87 15 73 0b 09 56 ed 43 16 fc 22 b3 0f 30 51 56 2d 37 66 8e cc 67 3f 29 92 78 8f 12 be ca ae da 06 80 02 67 72 a4 a9 c1 cd 44 e0 51 a9 2c c6 5b f9 91 cc af 30 94 00 23 2b f9 ab df 9f 2d d1 c3 3f cb 90 08 b5 d9 05 f1 84 36 3a df 8c 37 f6 b8 12 2c 69 ab 70 2d 9a bb 63 9e 1a 72 20 f6 14 9f ff 75 d0 07 a7 af 8c da e4 96 28 05 1a f0 f9 00 3f f6 7e 85 07 97 73 27 8a 3c dd 42 12 b7 80 e8 fe 51 5d db a0 8c 1a a7 a1 0b 58 a5 31 d7 3b 9c 86 6d bd 33 4a 2b ce f5 9a 2f 2f 09 4f a3 1c 99 f5 43 27 b1 72 c3 9e 85 ad 2d 3f d6 00 0e 3f e9 dc a7 f0 65 50 70 1b 13 a4 10 7f 48 d9 33 d5 b7 fd 21 49 7e 96 4c 03 2e cb 7f 2a e7 12 c3 ac 0d ce a3 c0 6f 42 e4 ad 36 50 2b 8a 83 cd 69 bc Data Ascii: mA,^@x9iHO.KsVC"0QV-7fg?)xgrDQ,[0#+-?6:7,ip-cr u(?~s'<BQ]X1;m3J+//OC'r-??ePpH3!I~L.*oB6P+i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	65113	76.76.21.164	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:52 UTC	375	OUT	GET /static/js/main.b963c2e4.js HTTP/1.1 Host: nextgen-widget.vercel.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:52 UTC	529	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 2074293 Cache-Control: s-maxage=31536000, immutable Content-Disposition: inline; filename="main.b963c2e4.js" Content-Length: 1779444 Content-Type: application/javascript; charset=utf-8 Date: Mon, 15 Jul 2024 15:49:52 GMT Etag: "c31084dba070a068dd086c002e87ce3e" Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Cache: HIT X-Vercel-Id: iad1::4h2bj-1721058592295-d4c1b0d7b999 Connection: close
2024-07-15 15:49:52 UTC	2372	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 62 39 36 33 63 32 65 34 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 34 31 32 35 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 21 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 5f 5f 53 45 4e 54 52 59 5f 42 52 4f 57 53 45 52 5f 42 55 4e 44 4c 45 5f 5f 26 26 5f 5f 53 45 4e 54 52 59 5f 42 52 4f 57 53 45 52 5f 42 55 4e 44 4c 45 5f 5f 29 26 26 22 5b 6f 62 6a 65 63 74 20 70 72 6f 63 65 73 73 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 Data Ascii: /! For license information please see main.b963c2e4.js.LICENSE.txt /(()=>{var e={4125:(e,t,n)=>{"use strict";function r(){return!("undefined"!==typeof __SENTRY_BROWSER_BUNDLE__&&__SENTRY_BROWSER_BUNDLE__)&&"[object process]"===Object.prototype.toString
2024-07-15 15:49:52 UTC	1024	IN	Data Raw: 74 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 74 7d 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 64 65 66 61 75 6c 74 3d 74 7d 29 2c 61 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 69 6d 70 6f 72 74 53 74 61 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 74 3d 7b 7d 3b 69 66 28 6e 75 6c 6c 21 3d 65 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 22 64 65 66 61 75 6c 74 22 21 3d 3d 6e 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 6e 29 26 26 72 28 74 2c Data Ascii: t){Object.defineProperty(e,"default",{enumerable:!0,value:t})}:function(e,t){e.default=t}),a=this&&this.__importStar\|\|function(e){if(e&&e.__esModule)return e;var t={};if(null!=e)for(var n in e)"default"!==n&&Object.prototype.hasOwnProperty.call(e,n)&&r(t,
2024-07-15 15:49:52 UTC	4744	IN	Data Raw: 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 6f 3d 6e 28 35 38 39 33 29 2c 73 3d 61 28 6e 28 34 33 33 37 29 29 2c 6c 3d 61 28 6e 28 35 36 39 38 29 29 2c 75 3d 6e 28 34 35 38 33 29 2c 63 3d 7b 6d 61 72 67 69 6e 3a 32 30 2c 62 6f 72 64 65 72 52 61 64 69 75 73 3a 38 2c 70 61 64 64 69 6e 67 3a 34 30 2c 62 61 63 6b 67 72 6f 75 6e 64 3a 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 29 22 2c 74 65 78 74 41 6c 69 67 6e 3a 22 63 65 6e 74 65 72 22 2c 66 6f 6e 74 46 61 6d 69 6c 79 3a 22 76 61 72 28 2d 2d 66 6f 6e 74 2d 73 79 73 74 65 6d 29 22 7d 3b 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 2c 61 2c 41 2c 64 3d 65 2e 65 6c 49 64 2c 67 3d 65 Data Ascii: ineProperty(t,"__esModule",{value:!0});var o=n(5893),s=a(n(4337)),l=a(n(5698)),u=n(4583),c={margin:20,borderRadius:8,padding:40,background:"rgba(0,0,0,0.1)",textAlign:"center",fontFamily:"var(--font-system)"};t.default=function(e){var t,n,a,A,d=e.elId,g=e
2024-07-15 15:49:52 UTC	5930	IN	Data Raw: 73 78 29 28 50 2e 64 65 66 61 75 6c 74 2c 7b 63 68 69 6c 64 72 65 6e 3a 6c 65 2e 63 68 69 6c 64 72 65 6e 2c 64 61 74 61 3a 6e 2c 64 61 74 61 50 61 74 68 3a 72 65 2c 61 74 6f 6d 50 61 74 68 3a 69 28 69 28 5b 5d 2c 6e 65 2c 21 30 29 2c 5b 74 2e 6b 65 79 5d 2c 21 31 29 2c 63 61 6c 6c 62 61 63 6b 73 3a 65 2e 63 61 6c 6c 62 61 63 6b 73 7d 29 7d 29 29 3b 63 61 73 65 22 6d 61 72 71 75 65 65 22 3a 76 61 72 20 75 65 3d 74 2e 70 72 6f 70 73 3b 72 65 74 75 72 6e 28 30 2c 6f 2e 6a 73 78 29 28 6b 2e 64 65 66 61 75 6c 74 2c 72 28 7b 7d 2c 75 65 2c 7b 63 61 6c 6c 62 61 63 6b 73 3a 65 2e 63 61 6c 6c 62 61 63 6b 73 2c 61 74 6f 6d 50 61 74 68 3a 6e 65 2c 64 61 74 61 50 61 74 68 3a 69 65 2c 61 74 6f 6d 4b 65 79 3a 74 2e 6b 65 79 7d 2c 7b 63 68 69 6c 64 72 65 6e 3a 28 30 2c Data Ascii: sx)(P.default,{children:le.children,data:n,dataPath:re,atomPath:i(i([],ne,!0),[t.key],!1),callbacks:e.callbacks})}));case"marquee":var ue=t.props;return(0,o.jsx)(k.default,r({},ue,{callbacks:e.callbacks,atomPath:ne,dataPath:ie,atomKey:t.key},{children:(0,
2024-07-15 15:49:52 UTC	7116	IN	Data Raw: 6d 50 61 74 68 3a 6e 65 2c 64 61 74 61 50 61 74 68 3a 69 65 2c 61 74 6f 6d 4b 65 79 3a 74 2e 6b 65 79 7d 29 3b 63 61 73 65 22 62 6c 6f 67 50 6f 73 74 43 6f 6e 74 65 6e 74 22 3a 72 65 74 75 72 6e 28 30 2c 6f 2e 6a 73 78 29 28 52 2e 64 65 66 61 75 6c 74 2c 7b 61 74 6f 6d 50 61 74 68 3a 6e 65 2c 64 61 74 61 50 61 74 68 3a 69 65 2c 61 74 6f 6d 4b 65 79 3a 74 2e 6b 65 79 7d 29 3b 63 61 73 65 22 62 6c 6f 67 50 6f 73 74 49 6d 61 67 65 22 3a 72 65 74 75 72 6e 28 30 2c 6f 2e 6a 73 78 29 28 59 2e 64 65 66 61 75 6c 74 2c 7b 76 61 6c 75 65 3a 28 30 2c 63 2e 67 65 74 44 61 74 61 29 28 6e 2c 69 65 2c 22 76 61 6c 75 65 22 29 2c 61 74 6f 6d 50 61 74 68 3a 6e 65 2c 64 61 74 61 50 61 74 68 3a 69 65 2c 61 74 6f 6d 4b 65 79 3a 74 2e 6b 65 79 7d 29 3b 63 61 73 65 22 62 6c 6f Data Ascii: mPath:ne,dataPath:ie,atomKey:t.key});case"blogPostContent":return(0,o.jsx)(R.default,{atomPath:ne,dataPath:ie,atomKey:t.key});case"blogPostImage":return(0,o.jsx)(Y.default,{value:(0,c.getData)(n,ie,"value"),atomPath:ne,dataPath:ie,atomKey:t.key});case"blo
2024-07-15 15:49:52 UTC	8302	IN	Data Raw: 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 6e 7c 7c 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 72 2c 69 3d 30 2c 61 3d 74 2e 6c 65 6e 67 74 68 3b 69 3c 61 3b 69 2b 2b 29 21 72 26 26 69 20 69 6e 20 74 7c 7c 28 72 7c 7c 28 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2c 30 2c 69 29 29 2c 72 5b 69 5d 3d 74 5b 69 5d 29 3b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 63 61 74 28 72 7c 7c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 29 7d 2c 69 3d 74 68 69 73 26 26 74 68 69 Data Ascii: e,t,n){"use strict";var r=this&&this.__spreadArray\|\|function(e,t,n){if(n\|\|2===arguments.length)for(var r,i=0,a=t.length;i<a;i++)!r&&i in t\|\|(r\|\|(r=Array.prototype.slice.call(t,0,i)),r[i]=t[i]);return e.concat(r\|\|Array.prototype.slice.call(t))},i=this&&thi
2024-07-15 15:49:52 UTC	6676	IN	Data Raw: 51 6b 4a 43 55 6c 4a 53 59 6d 4a 69 67 6f 4b 43 6b 70 4b 53 73 72 4b 79 77 73 4c 43 30 74 4c 53 38 76 4c 7a 41 77 4d 44 45 78 4d 54 4d 7a 4d 7a 59 32 4e 6a 63 33 4e 7a 6b 35 4f 54 6f 36 4f 6a 73 37 4f 7a 30 39 50 54 38 2f 50 30 42 41 51 45 46 42 51 55 4a 43 51 6b 4e 44 51 30 52 45 52 45 56 46 52 55 5a 47 52 6b 64 48 52 30 68 49 53 45 6c 4a 53 55 70 4b 53 6b 74 4c 53 30 78 4d 54 45 31 4e 54 55 35 4f 54 6b 39 50 54 31 42 51 55 46 46 52 55 56 4a 53 55 6c 4e 54 55 31 52 55 56 46 56 56 56 56 5a 57 56 6c 64 58 56 31 68 59 57 46 6c 5a 57 56 70 61 57 6c 74 62 57 31 78 63 58 46 31 64 58 56 35 65 58 6c 39 66 58 32 42 67 59 47 46 68 59 57 4a 69 59 6d 4e 6a 59 32 52 6b 5a 47 56 6c 5a 57 5a 6d 5a 6d 64 6e 5a 32 68 6f 61 47 6c 70 61 57 70 71 61 6d 74 72 61 32 78 73 62 Data Ascii: QkJCUlJSYmJigoKCkpKSsrKywsLC0tLS8vLzAwMDExMTMzMzY2Njc3Nzk5OTo6Ojs7Oz09PT8/P0BAQEFBQUJCQkNDQ0REREVFRUZGRkdHR0hISElJSUpKSktLS0xMTE1NTU5OTk9PT1BQUFFRUVJSUlNTU1RUVFVVVVZWVldXV1hYWFlZWVpaWltbW1xcXF1dXV5eXl9fX2BgYGFhYWJiYmNjY2RkZGVlZWZmZmdnZ2hoaGlpaWpqamtra2xsb
2024-07-15 15:49:52 UTC	10674	IN	Data Raw: 4e 4d 6a 44 39 53 42 76 6e 73 77 64 34 57 49 6b 44 73 7a 77 6b 4d 43 30 4c 43 41 77 4d 4e 77 54 77 67 49 70 61 4d 30 50 76 62 43 55 48 43 44 50 48 61 30 50 4f 72 41 64 66 4b 49 64 77 67 73 42 4b 39 76 34 75 77 72 6a 61 43 43 68 67 4e 77 61 67 41 49 73 33 77 2f 74 45 58 6a 4a 6f 38 6b 67 67 6c 4c 63 43 4a 41 43 4b 2f 6f 4e 49 4a 50 4b 4d 36 77 67 59 76 50 62 39 73 41 43 4b 7a 51 4e 50 37 4f 77 74 41 4d 67 55 35 4c 62 39 54 41 43 4b 6f 34 4e 50 36 65 39 49 2f 34 67 4e 44 50 62 34 2b 41 43 4b 65 67 4e 54 72 36 33 6f 2f 6f 67 4a 4e 4c 62 34 71 41 43 4b 57 49 4e 58 71 32 38 59 2b 49 67 4a 58 50 62 31 6e 2b 43 47 51 77 4e 58 62 43 77 6c 41 6b 67 46 68 4c 62 30 5a 41 43 4c 67 61 74 62 4c 65 34 67 39 55 67 34 55 73 4e 62 44 75 33 34 65 63 67 35 77 76 62 30 2f 51 Data Ascii: NMjD9SBvnswd4WIkDszwkMC0LCAwMNwTwgIpaM0PvbCUHCDPHa0POrAdfKIdwgsBK9v4uwrjaCChgNwagAIs3w/tEXjJo8kgglLcCJACK/oNIJPKM6wgYvPb9sACKzQNP7OwtAMgU5Lb9TACKo4NP6e9I/4gNDPb4+ACKegNTr63o/ogJNLb4qACKWINXq28Y+IgJXPb1n+CGQwNXbCwlAkgFhLb0ZACLgatbLe4g9Ug4UsNbDu34ecg5wvb0/Q
2024-07-15 15:49:52 UTC	11860	IN	Data Raw: 57 43 76 65 4d 49 2b 76 4b 41 43 53 6f 42 76 51 67 41 72 42 75 41 76 2f 71 43 75 59 73 41 43 76 32 41 53 38 6b 58 32 66 75 41 71 37 6c 53 74 5a 51 49 6f 5a 77 50 34 4b 76 47 45 4e 46 54 65 4a 41 64 67 72 75 63 43 42 6a 73 68 6f 76 65 46 38 66 6c 67 4c 68 34 63 72 69 47 41 41 68 42 67 45 31 75 41 62 73 35 61 49 71 54 43 51 76 4e 49 46 65 52 67 43 71 51 41 63 31 6f 43 47 61 56 69 4f 76 6e 49 4d 4f 55 43 47 42 30 41 49 77 74 45 4d 77 44 69 46 75 75 42 79 76 59 49 4b 49 34 43 46 5a 6b 41 63 78 76 43 46 74 4c 43 4b 78 41 49 4a 2b 78 61 44 55 4e 42 71 75 68 45 4f 37 66 69 44 72 39 43 4d 77 67 49 49 44 52 43 44 51 6f 42 78 78 4d 45 4e 76 56 43 44 72 4d 41 4d 79 58 49 48 43 4e 43 42 4f 2f 43 4e 78 4b 45 4e 46 61 6c 2f 71 71 41 4d 79 31 49 48 4a 76 6c 2f 4f 36 43 Data Ascii: WCveMI+vKACSoBvQgArBuAv/qCuYsACv2AS8kX2fuAq7lStZQIoZwP4KvGENFTeJAdgrucCBjshoveF8flgLh4criGAAhBgE1uAbs5aIqTCQvNIFeRgCqQAc1oCGaViOvnIMOUCGB0AIwtEMwDiFuuByvYIKI4CFZkAcxvCFtLCKxAIJ+xaDUNBquhEO7fiDr9CMwgIIDRCDQoBxxMENvVCDrMAMyXIHCNCBO/CNxKENFal/qqAMy1IHJvl/O6C
2024-07-15 15:49:52 UTC	10234	IN	Data Raw: 64 67 71 33 59 69 6e 70 45 4d 63 32 49 48 36 79 61 6d 78 44 48 43 30 6e 53 6a 66 77 48 6d 4a 67 78 43 6f 64 41 75 69 37 67 4e 2f 74 6c 48 37 39 4b 32 41 44 4b 39 6a 42 45 72 61 77 68 6a 33 6c 33 6f 7a 66 62 79 31 69 6c 51 7a 4a 43 7a 67 4c 73 46 46 47 36 42 73 73 63 31 57 5a 77 76 54 78 78 51 46 73 68 4c 48 36 2f 51 37 63 56 59 53 41 50 58 77 31 41 42 74 64 31 46 36 2f 76 57 34 56 47 33 54 66 58 51 54 41 35 75 36 2f 42 36 35 48 58 2b 55 46 34 6e 66 33 36 71 56 52 52 2f 4c 54 32 77 78 59 53 63 48 35 33 45 33 77 61 73 37 2b 4d 58 33 30 4b 67 4e 57 4a 38 59 2b 63 72 2f 66 47 6e 4a 30 76 37 72 48 67 42 55 4f 78 49 39 63 58 72 67 47 48 4f 65 6e 4c 6a 46 67 74 56 6a 32 30 2f 59 57 37 34 39 2f 63 43 2f 2b 4b 68 37 59 6e 37 5a 48 78 78 72 69 6f 48 2f 41 4e 58 2b Data Ascii: dgq3YinpEMc2IH6yamxDHC0nSjfwHmJgxCodAui7gN/tlH79K2ADK9jBErawhj3l3ozfby1ilQzJCzgLsFFG6Bssc1WZwvTxxQFshLH6/Q7cVYSAPXw1ABtd1F6/vW4VG3TfXQTA5u6/B65HX+UF4nf36qVRR/LT2wxYScH53E3was7+MX30KgNWJ8Y+cr/fGnJ0v7rHgBUOxI9cXrgGHOenLjFgtVj20/YW749/cC/+Kh7Yn7ZHxxrioH/ANX+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	65115	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:52 UTC	603	OUT	GET /lib_LUGoPiqXXlDptSWA/eljn5jc5doqj8c8f.png HTTP/1.1 Host: www.umso.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
2024-07-15 15:49:53 UTC	250	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 4055 Content-Type: image/png Last-Modified: Fri, 03 May 2024 09:59:16 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:49:53 GMT Connection: close
2024-07-15 15:49:53 UTC	936	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 80 08 03 00 00 00 f4 e0 91 f9 00 00 03 00 50 4c 54 45 4c 69 71 0a 01 18 10 00 20 0a 02 18 0a 01 18 10 00 18 08 00 18 0b 01 18 0a 01 19 09 01 19 0b 00 19 0a 02 18 0a 01 18 f8 f3 ff f7 f2 fe f8 f3 fe b9 b3 c2 0a 02 19 15 0c 23 23 1a 30 bb b5 c4 bd b7 c6 c1 bb ca 17 0e 25 ba b4 c3 bc b6 c5 b3 ad bc b8 b2 c1 46 3e 52 b5 af be 19 10 26 b7 b1 c0 0f 06 1d be b8 c7 2a 22 37 49 41 55 c9 c3 d1 ae a8 b7 aa a4 b3 0e 05 1c b6 b0 bf 12 09 20 b4 ae bd cd c7 d5 c0 ba c9 b0 aa b9 ad a7 b7 a7 a1 b1 0d 04 1b 2d 24 3a 2e 26 3b 14 0b 21 29 20 36 1b 12 29 1c 14 2a 3d 35 49 cc c6 d4 b1 ab ba cf c9 d7 bf b9 c8 d5 d0 dd 4f 47 5b ac a6 b6 a6 a0 b0 56 4e 62 27 1f 35 1f 17 2d 3e 36 4b 21 19 2f c8 c2 d1 c2 bc cb 11 Data Ascii: PNGIHDRPLTELiq ##0%F>R&"7IAU -$:.&;!) 6)=5IOG[VNb'5->6K!/
2024-07-15 15:49:53 UTC	2372	IN	Data Raw: 5a 71 eb 3e 6d ed 37 cf bd ef 1b c2 1e 69 31 9d 6f 72 7f 30 40 96 73 9e 73 ce f3 dc fb be 99 30 18 64 8d 1e 23 37 0a bd b1 35 4e 6e fc db 0c f1 35 56 0e bd f1 f5 96 18 85 ff 8c 7b f3 f8 08 8d 1b 4f e3 8f 41 52 5a 63 a8 fa a5 85 8f 10 d6 60 ac 54 f4 27 6b 1c e4 e0 2d e9 e1 23 24 c7 60 8c 95 26 3e 42 a3 19 e3 a5 4b 60 0c 43 0a 13 40 7c c9 31 a4 18 41 58 a3 18 d2 c5 47 48 46 80 21 b3 00 c9 42 28 e5 c5 90 11 40 32 0b a4 bc 18 32 02 48 66 81 94 17 43 46 00 c9 2c f8 7f b2 40 ed bb e4 5c 26 8b c5 84 05 3f e5 e1 a7 3c f5 17 8b c9 12 a4 8c 2c 81 dd b9 4c a6 3c 00 b3 00 95 c5 64 31 37 02 38 66 40 16 cb d5 71 04 09 7c cb 04 c0 2c a2 80 bc 38 ae d8 12 8c 1c 81 14 d6 46 60 40 e1 d2 c2 63 4d 08 1b 6c 83 7c ca 48 11 70 74 65 32 59 d8 00 31 d1 e5 b1 28 c0 8c c0 67 31 37 Data Ascii: Zq>m7i1or0@ss0d#75Nn5V{OARZc`T'k-#$`&>BK`C@\|1AXGHF!B(@22HfCF,@\&?<,L<d178f@q\|,8F`@cMl\|Hpte2Y1(g17
2024-07-15 15:49:53 UTC	538	IN	Data Raw: 3f 48 03 0c 45 00 45 1f 3a f4 f0 01 94 0e ae 83 f0 80 7e e3 c1 43 7b d8 7d f4 7f c3 1e 70 b8 5c cd a3 46 3c 27 65 a0 70 e1 02 38 91 89 a7 d3 fa 42 7b 9b f9 89 4f 86 c2 47 83 de a0 48 ba 50 d9 71 ef c5 0d 2c 3c 06 bf 71 e3 d7 1f 82 8c ad 94 81 80 ba ba 02 84 00 36 9f a3 3c 9e 53 b3 fe cc 1f 81 02 c8 90 99 79 22 cd 58 d3 fa a0 8f fa 90 f8 68 f0 5b 34 49 50 52 f9 cb df 1f fd f9 fc d9 b3 17 8f fe ba 57 68 af 43 ed bf fa 64 ec f3 93 b1 07 4e 5e 05 51 61 4e 2a 3a 2d 99 e5 27 33 8b 74 26 71 05 70 42 d7 5d 35 24 3e 1a e2 1e d1 ec 97 4b c1 d7 cc 16 88 b7 ae ae 3d dd e5 58 02 15 05 05 0e 39 02 18 f1 9c 9a 9b 60 eb c1 c7 52 01 39 1b 97 fd 35 6d 68 7c 34 d4 4d 2a cb 87 4b cb a9 6c af d7 3d 0e 2d 6e 0c 04 6e 13 05 3a 39 4f 70 0a c9 71 30 2c df ad 55 38 b9 f1 27 72 16 Data Ascii: ?HEE:~C{}p\F<'ep8B{OGHPq,<q6<Sy"Xh[4IPRWhCdN^QaN:-'3t&qpB]5$>K=X9`R95mh\|4MKl=-nn:9Opq0,U8'r
2024-07-15 15:49:53 UTC	209	IN	Data Raw: 35 3f b0 70 f9 e5 10 cc 41 65 22 80 c2 a9 52 7e 32 cc 41 b8 38 8e 0a 53 b8 17 d0 f7 06 e2 3f 4c 00 21 34 3d e9 fb c2 db f8 b8 a3 d2 79 0a e6 a0 26 c6 2f ff ae 6a 18 e8 68 98 1f 5a 69 95 9c fd f6 87 93 c7 e1 d8 a9 6c 5a f9 fb 73 87 5e f7 8c 46 9c c0 3f b9 18 ff e8 bb c9 08 0c 63 31 90 94 17 43 46 00 c9 2c 90 f2 62 c8 08 20 99 05 52 5e 0c 19 01 24 b3 40 ca 8b 21 23 30 4a ba 12 8c 93 fe 97 dd c6 48 97 c0 78 c6 68 e9 12 78 9b 21 5d 0f de fa 37 7c e9 95 21 ed af fd 32 a4 fe c5 67 86 d4 bf fa cd 60 8c fd ef 9b c7 97 eb f5 fd fb f1 72 6f 50 86 51 72 63 46 53 c8 ff 03 67 d4 bd d1 e2 0c b1 d1 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 5?pAe"R~2A8S?L!4=y&/jhZilZs^F?c1CF,b R^$@!#0JHxhx!]7\|!2g`roPQrcFSgIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	65114	216.58.212.132	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:52 UTC	1149	OUT	GET /pagead/1p-user-list/11236809420/?random=1721058585147&cv=11&fst=1721055600000&bg=ffffff&guid=ON&async=1&gtm=45je4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2F%3Futm_source%3Dusite%26utm_campaign%3Dfree%26utm_medium%3Dbtmbadge%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20The%20Fastest%20Website%20Builder&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSGwDaQooLlTAzaYJ2BeuPXBUCeKp275wbbm2UzA&random=314603920&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:53 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jul 2024 15:49:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-15 15:49:53 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	65125	18.245.206.203	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:52 UTC	386	OUT	GET /st_RiCaApghsiWDsXYm/3?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:53 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 33990 Connection: close Date: Mon, 15 Jul 2024 04:03:18 GMT x-amzn-RequestId: 424888ab-ce9e-4677-a7db-f6cd80a9b5c7 Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66949f7d-5324315e18ada6c529a3e31a;parent=135b1f142ce1b6da;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 aa8b1db19c7e8f695264b9aeb5d56724.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: f5fvYYSVFcJ0OZ5iFEWMfx_H_-ldHGrzWM_xDsZCk9v54g4mna_Mtw== Age: 42395
2024-07-15 15:49:53 UTC	16384	IN	Data Raw: 52 49 46 46 be 84 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 0e 03 00 41 4c 50 48 f8 1e 00 00 01 1c b5 6d db 48 8a f6 df 3a df 5d 75 57 46 c4 04 f0 bc 31 f4 28 d8 79 bc bb 6b 78 3e 79 35 42 94 0b 43 4e 01 28 97 ef fd 4d 49 92 24 29 92 94 29 c3 f8 57 66 86 23 bc 90 16 cf 83 b7 ee 6a bc 4d 2c 94 c4 4c 6b 44 b0 61 1b 49 91 e7 a9 3d e8 ff 9e 5f d8 b0 6d 53 eb b6 d6 3b 33 92 29 76 ec 80 cb 90 76 97 99 19 02 65 66 66 66 3c dd e1 38 50 66 66 66 66 66 e6 26 65 6e 1a 28 05 1c 43 12 db 6b 49 33 df 75 49 df 8c 46 cb fb 50 f5 a3 11 41 8d b6 de b0 6d f3 d1 46 4a d7 c9 f9 c0 23 32 94 04 51 80 b1 ee 87 dc 6c 9b 14 c9 a9 ee 99 39 e6 33 2f 80 13 b3 4c 66 c8 80 4c b9 cc cc 10 00 c6 20 57 11 c8 95 a2 d8 73 c5 64 4a d6 4d f7 5f d5 d5 4e 95 20 22 e0 b0 6d Data Ascii: RIFFWEBPVP8XALPHmH:]uWF1(ykx>y5BCN(MI$))Wf#jM,LkDaI=_mS;3)vvefff<8Pfffff&en(CkI3uIFPAmFJ#2Ql93/LfL WsdJM_N "m
2024-07-15 15:49:53 UTC	16384	IN	Data Raw: 80 59 ea be 40 80 bd 74 1c 74 eb 58 f0 e8 46 52 30 07 85 c1 a1 c9 42 2b 0e 27 ce 22 fe e9 ab e6 87 f4 7e 4c d9 25 89 9a b7 68 b2 6b 41 e9 6c 3e 3a cb e1 5a 5d b6 3b 22 61 b2 8b cb 97 9d fa 06 2a da fb ca 7b fb 5b 4e 37 22 89 68 52 3d 0a 8e 47 9e 57 e9 f6 88 b5 4b 0d e3 04 a8 97 fb 6e c0 4b bd b2 b3 38 62 1d fd c7 15 cf 61 dd 2c b1 ac bc 04 e8 5f 87 ff c8 6f 33 06 16 4c de a5 26 a9 a1 40 49 48 76 dc 01 df cf f6 dc fb 9e 3e 95 ec f6 9c 13 94 99 11 1e 41 72 a3 e4 7b 67 3a 48 dc 23 15 11 a1 72 e7 fd 29 d9 4c 2a 3f 0d 24 31 f7 dc 20 72 8f b3 6e 45 70 6b 31 f1 91 89 15 cc 7f ab b9 87 ba 66 b7 d6 75 d9 9e 4e 87 75 41 1d d2 1b a9 91 2c 02 4c 68 b7 06 30 e3 8b b6 54 c2 0f 22 3b 69 39 5c d7 50 bb 99 b8 20 19 77 b5 41 a2 db 89 2f bc 21 a4 fb 11 ba cb 30 c3 5c 6a 05 Data Ascii: Y@ttXFR0B+'"~L%hkAl>:Z];"a{[N7"hR=GWKnK8ba,_o3L&@IHv>Ar{g:H#r)L?$1 rnEpk1fuNuA,Lh0T";i9\P wA/!0\j
2024-07-15 15:49:53 UTC	1222	IN	Data Raw: fd b0 d3 7f 49 90 26 66 df 00 00 00 ee 14 03 d8 a7 6f 69 61 5f 44 15 ce b1 b9 a1 b2 c8 ec 3c 15 04 d7 b4 82 0b 9c 79 ab 0f 53 d2 3e 4f d0 6b ff d5 5c 63 05 53 d4 c7 94 96 89 d5 4a 7d 25 c4 3c f5 be 04 ac 44 e1 a7 e7 3b 66 ad db a3 83 18 91 35 db 10 a5 3c 52 0c f0 d3 ee cb 8b 86 95 57 0d 02 5d 8c 18 23 4a 7d 97 0a 50 28 40 9e 9c ae 33 d6 fd 8f f6 2d 46 f5 5c e7 2d 4c 6a 00 b4 d4 97 77 a6 78 11 32 c0 e2 0b da 4c 6d a9 66 e4 6a 72 07 ec 19 3a 68 ec 3d 4b 45 2d 52 fc 43 92 c7 05 f1 73 a9 f2 a9 c1 dd e2 2c 3d 52 1f dc 7a 72 44 0a 90 ee 2b 86 cd 26 4c ba 1e 73 42 5a bf 0a 37 7e a2 22 e1 5e 67 56 c8 21 ea ab 1f 61 ee c9 1d 9d a7 32 73 b0 00 05 3e 4a a9 12 72 7a d4 31 a4 cd ca a2 d4 9d 3c 8c da a9 3b 9d 4e 3c bd c9 a2 e5 50 a2 27 d5 dc d3 fc 2c 30 52 49 d1 5f b8 Data Ascii: I&foia_D<yS>Ok\cSJ}%<D;f5<RW]#J}P(@3-F\-Ljwx2Lmfjr:h=KE-RCs,=RzrD+&LsBZ7~"^gV!a2s>Jrz1<;N<P',0RI_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	65126	18.245.206.203	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:52 UTC	386	OUT	GET /st_ZhZeMoQDspyfOwZC/5?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:53 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 30304 Connection: close Date: Mon, 15 Jul 2024 04:03:16 GMT x-amzn-RequestId: d7ec076f-0474-434a-838c-975b55155b61 Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66949f7d-52d99c313d7cb42255f30264;parent=4c7df8b59d110d57;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 270872b356df5edccbe6b50376e25078.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: zykz9o6H9bu6yuz9b1QIwOLI-gnUVPEc1zayq4ck1iFUp7XZeKqWpQ== Age: 42397
2024-07-15 15:49:53 UTC	16384	IN	Data Raw: 52 49 46 46 58 76 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 08 02 00 41 4c 50 48 51 1e 00 00 01 ff 27 24 48 f0 ff 78 6b 44 a4 ee 29 8c db 36 72 24 ab ff ae 37 ef e5 7b 45 c4 04 64 39 ab f3 06 03 6a 61 fd 08 a3 ea 4e 8a 80 3d 6a f6 56 c9 81 95 de 63 70 b4 20 0a aa c7 30 94 29 d4 03 84 aa ed 03 a4 27 9a 03 22 56 31 b1 73 1f a1 31 ba 4f 9c 99 6b a5 6e 79 8c 1b 48 d5 f2 20 3f 4f 30 e0 ff 9f 46 6e b4 9f 24 7b 66 79 43 5b 86 a4 d7 50 99 92 72 1b 2a 33 33 33 d3 f5 c2 b0 9b 32 e3 f1 95 99 99 99 31 29 73 98 61 b3 90 2c cc d8 d2 ff 79 ec bf 64 7b b2 bd 17 f6 85 88 fe cb 82 6d 27 6c a3 a7 84 2e d9 34 f3 e4 01 8a b1 0c 52 f8 93 63 5b db b1 3d f7 fd 3c bf 8d 59 04 95 51 d9 98 44 32 02 db 76 99 79 a8 62 c7 29 38 b5 51 7e 88 cd eb 24 b9 22 fa ef 88 Data Ascii: RIFFXvWEBPVP8XALPHQ'$HxkD)6r$7{Ed9jaN=jVcp 0)'"V1s1OknyH ?O0Fn${fyC[Pr*33321)sa,yd{m'l.4Rc[=<YQD2vyb)8Q~$"
2024-07-15 15:49:53 UTC	13920	IN	Data Raw: 79 ef f3 73 f1 89 5c 30 c3 3e de 8d a2 c1 32 f7 59 7c ca 55 d9 a1 06 2f d9 50 8b dc 02 b3 a9 68 0b 37 bf dd 8a 7b 2a cd 94 3b e9 17 74 76 41 af 77 ac 70 a0 d1 f5 bc f5 c7 0b b3 54 5b 80 5f f2 8a f2 4e 40 47 34 99 f9 90 12 b9 b3 47 39 f2 88 fa 0a 2a f3 7e 9b 62 77 21 88 87 b9 7e ca 2d 3d 85 f9 62 65 19 f9 5d f3 e9 b0 ad a6 be 1d 31 11 15 ec 95 39 f6 8b ff 5c d1 6f 89 e8 e5 67 49 9a 26 c3 10 01 90 59 8b 4d 7c 30 8b c1 c1 bc 1c 7e 8f 7a 57 bb d0 d6 50 ee fc c9 0e 6a e8 00 20 84 4e dd 87 cd c3 bd f5 08 b9 3b a7 91 30 0d 51 21 88 82 4e 90 26 66 47 19 0b 84 be b3 02 56 9a 6d 80 8d c7 48 ee ac 21 a0 b0 6c 00 be f6 80 9d 23 18 b9 18 fa 7a 07 f2 b0 6b ad 7c 36 73 d7 9e 3b f6 92 63 74 74 f3 46 31 3f 6c d7 8e cc 57 56 ed cd 5a 5d ff 1d 7b 51 dd 01 fb 67 81 78 44 a9 Data Ascii: ys\0>2Y\|U/Ph7{;tvAwpT[_N@G4G9~bw!~-=be]19\ogI&YM\|0~zWPj N;0Q!N&fGVmH!l#zk\|6s;cttF1?lWVZ]{QgxD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	65116	35.80.254.51	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:52 UTC	545	OUT	GET /public/nextgen/parameters HTTP/1.1 Host: api.umso.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
2024-07-15 15:49:53 UTC	264	IN	HTTP/1.1 405 Method Not Allowed Date: Mon, 15 Jul 2024 15:49:53 GMT Content-Type: application/json;charset=utf-8 Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: x-umso-appver X-Umso-Appver: 5.1.8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	65117	35.80.254.51	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:53 UTC	544	OUT	GET /public/structures/groups HTTP/1.1 Host: api.umso.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
2024-07-15 15:49:53 UTC	257	IN	HTTP/1.1 200 OK Date: Mon, 15 Jul 2024 15:49:53 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: x-umso-appver X-Umso-Appver: 5.1.8
2024-07-15 15:49:53 UTC	16127	IN	Data Raw: 37 66 30 62 0d 0a 5b 7b 22 69 64 22 3a 22 73 74 67 5f 71 54 55 79 5a 67 74 51 43 74 55 48 45 73 79 43 22 2c 22 6e 61 6d 65 22 3a 22 54 65 73 74 69 6d 6f 6e 69 61 6c 22 2c 22 73 74 61 74 75 73 22 3a 22 6f 66 66 69 63 69 61 6c 22 2c 22 64 65 66 61 75 6c 74 44 61 74 61 22 3a 7b 22 6f 6d 69 74 74 65 64 22 3a 74 72 75 65 7d 2c 22 6f 77 6e 65 64 42 79 22 3a 22 6f 72 67 5f 44 73 6a 64 53 4a 72 54 68 41 77 44 6f 75 6a 76 22 2c 22 63 72 65 61 74 65 64 41 74 22 3a 22 32 30 32 33 2d 30 35 2d 31 35 54 31 34 3a 35 38 3a 32 35 5a 22 2c 22 6d 65 74 61 22 3a 7b 22 73 68 6f 77 49 6e 47 65 6e 65 72 61 74 6f 72 22 3a 74 72 75 65 2c 22 63 61 74 65 67 6f 72 79 22 3a 22 74 65 73 74 69 6d 6f 6e 69 61 6c 73 22 2c 22 73 75 62 43 61 74 65 67 6f 72 79 22 3a 22 22 2c 22 64 65 73 63 Data Ascii: 7f0b[{"id":"stg_qTUyZgtQCtUHEsyC","name":"Testimonial","status":"official","defaultData":{"omitted":true},"ownedBy":"org_DsjdSJrThAwDoujv","createdAt":"2023-05-15T14:58:25Z","meta":{"showInGenerator":true,"category":"testimonials","subCategory":"","desc
2024-07-15 15:49:53 UTC	16384	IN	Data Raw: 3a 74 72 75 65 7d 2c 22 63 61 72 64 73 22 3a 7b 22 69 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 73 70 61 63 69 6e 67 22 3a 7b 22 74 6f 70 22 3a 74 72 75 65 2c 22 62 6f 74 74 6f 6d 22 3a 74 72 75 65 2c 22 69 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 7b 22 63 6c 65 61 72 22 3a 74 72 75 65 2c 22 63 6f 6c 6f 72 22 3a 74 72 75 65 2c 22 6d 65 64 69 61 22 3a 74 72 75 65 2c 22 76 69 64 65 6f 22 3a 74 72 75 65 2c 22 67 72 61 64 69 65 6e 74 22 3a 74 72 75 65 2c 22 69 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 7d 7d 7d 2c 22 6f 77 6e 65 64 42 79 22 3a 22 6f 72 67 5f 44 73 6a 64 53 4a 72 54 68 41 77 44 6f 75 6a 76 22 2c 22 63 72 65 61 74 65 64 41 74 22 3a 22 32 30 32 33 2d 30 36 2d 33 30 54 31 37 3a 30 32 3a 33 Data Ascii: :true},"cards":{"isEnabled":true},"spacing":{"top":true,"bottom":true,"isEnabled":true},"background":{"clear":true,"color":true,"media":true,"video":true,"gradient":true,"isEnabled":true}}}},"ownedBy":"org_DsjdSJrThAwDoujv","createdAt":"2023-06-30T17:02:3
2024-07-15 15:49:53 UTC	20	IN	Data Raw: 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 61 63 63 65 6e 0d 0a Data Ascii: abled":true,"accen
2024-07-15 15:49:53 UTC	16384	IN	Data Raw: 38 30 30 30 0d 0a 74 43 6f 6c 6f 72 22 3a 74 72 75 65 7d 2c 22 74 65 78 74 22 3a 7b 22 62 6f 64 79 22 3a 74 72 75 65 2c 22 74 69 74 6c 65 22 3a 74 72 75 65 2c 22 66 6f 6e 74 53 69 7a 65 22 3a 74 72 75 65 2c 22 69 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 70 72 69 6d 61 72 79 43 6f 6c 6f 72 22 3a 74 72 75 65 2c 22 73 65 63 6f 6e 64 61 72 79 43 6f 6c 6f 72 22 3a 74 72 75 65 7d 2c 22 73 70 61 63 69 6e 67 22 3a 7b 22 74 6f 70 22 3a 74 72 75 65 2c 22 62 6f 74 74 6f 6d 22 3a 74 72 75 65 2c 22 69 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 7b 22 63 6c 65 61 72 22 3a 74 72 75 65 2c 22 63 6f 6c 6f 72 22 3a 74 72 75 65 2c 22 6d 65 64 69 61 22 3a 74 72 75 65 2c 22 76 69 64 65 6f 22 3a 74 72 75 65 2c 22 67 72 61 64 69 Data Ascii: 8000tColor":true},"text":{"body":true,"title":true,"fontSize":true,"isEnabled":true,"primaryColor":true,"secondaryColor":true},"spacing":{"top":true,"bottom":true,"isEnabled":true},"background":{"clear":true,"color":true,"media":true,"video":true,"gradi
2024-07-15 15:49:53 UTC	16384	IN	Data Raw: 6e 22 3a 31 30 2c 22 73 74 61 74 75 73 22 3a 22 6f 66 66 69 63 69 61 6c 22 2c 22 73 74 72 75 63 74 54 79 70 65 22 3a 22 73 65 63 74 69 6f 6e 22 2c 22 64 61 74 61 22 3a 7b 22 6f 6d 69 74 74 65 64 22 3a 74 72 75 65 7d 2c 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 69 74 65 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 6d 65 64 69 61 4c 65 66 74 22 2c 22 6e 61 6d 65 22 3a 22 49 6d 61 67 65 20 4c 65 66 74 22 2c 22 74 79 70 65 22 3a 22 62 6f 6f 6c 65 61 6e 22 7d 2c 7b 22 6b 65 79 22 3a 22 61 6c 69 67 6e 4d 65 64 69 61 22 2c 22 6e 61 6d 65 22 3a 22 41 6c 69 67 6e 20 4d 65 64 69 61 22 2c 22 74 79 70 65 22 3a 22 73 65 6c 65 63 74 22 2c 22 6f 70 74 69 6f 6e 73 22 3a 5b 22 73 74 61 72 74 22 2c 22 63 65 6e 74 65 72 22 2c 22 65 6e 64 22 5d 7d 5d 2c 22 64 65 73 69 67 6e 22 3a 7b Data Ascii: n":10,"status":"official","structType":"section","data":{"omitted":true},"settings":{"items":[{"key":"mediaLeft","name":"Image Left","type":"boolean"},{"key":"alignMedia","name":"Align Media","type":"select","options":["start","center","end"]}],"design":{
2024-07-15 15:49:53 UTC	8	IN	Data Raw: 73 69 67 6e 22 3a 0d 0a Data Ascii: sign":
2024-07-15 15:49:53 UTC	16384	IN	Data Raw: 34 35 34 64 0d 0a 7b 22 6f 70 74 69 6f 6e 73 22 3a 7b 22 74 65 78 74 22 3a 7b 22 62 6f 64 79 22 3a 74 72 75 65 2c 22 74 69 74 6c 65 22 3a 74 72 75 65 2c 22 69 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 70 72 69 6d 61 72 79 43 6f 6c 6f 72 22 3a 74 72 75 65 2c 22 73 65 63 6f 6e 64 61 72 79 43 6f 6c 6f 72 22 3a 74 72 75 65 7d 2c 22 73 70 61 63 69 6e 67 22 3a 7b 22 74 6f 70 22 3a 74 72 75 65 2c 22 62 6f 74 74 6f 6d 22 3a 74 72 75 65 2c 22 69 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 7b 22 63 6c 65 61 72 22 3a 74 72 75 65 2c 22 63 6f 6c 6f 72 22 3a 74 72 75 65 2c 22 6d 65 64 69 61 22 3a 74 72 75 65 2c 22 76 69 64 65 6f 22 3a 74 72 75 65 2c 22 67 72 61 64 69 65 6e 74 22 3a 74 72 75 65 2c 22 69 73 45 6e 61 62 6c Data Ascii: 454d{"options":{"text":{"body":true,"title":true,"isEnabled":true,"primaryColor":true,"secondaryColor":true},"spacing":{"top":true,"bottom":true,"isEnabled":true},"background":{"clear":true,"color":true,"media":true,"video":true,"gradient":true,"isEnabl
2024-07-15 15:49:53 UTC	1365	IN	Data Raw: 3a 30 39 5a 22 2c 22 67 72 6f 75 70 4e 61 6d 65 22 3a 22 4d 61 70 22 2c 22 67 72 6f 75 70 49 64 22 3a 22 73 74 67 5f 7a 53 64 49 79 6b 44 55 68 6f 6c 78 45 6a 76 7a 22 2c 22 74 61 67 73 22 3a 5b 22 62 69 67 20 6d 61 70 22 5d 7d 2c 7b 22 69 64 22 3a 22 73 74 5f 55 62 4c 6a 4e 51 61 73 71 4c 50 4d 79 61 63 43 22 2c 22 6e 61 6d 65 22 3a 22 43 6c 61 73 73 69 63 22 2c 22 76 65 72 73 69 6f 6e 22 3a 33 2c 22 6d 61 78 56 65 72 73 69 6f 6e 22 3a 33 2c 22 73 74 61 74 75 73 22 3a 22 6f 66 66 69 63 69 61 6c 22 2c 22 73 74 72 75 63 74 54 79 70 65 22 3a 22 73 65 63 74 69 6f 6e 22 2c 22 64 61 74 61 22 3a 7b 22 6f 6d 69 74 74 65 64 22 3a 74 72 75 65 7d 2c 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 69 74 65 6d 73 22 3a 5b 5d 2c 22 64 65 73 69 67 6e 22 3a 7b 22 6f 70 74 69 6f Data Ascii: :09Z","groupName":"Map","groupId":"stg_zSdIykDUholxEjvz","tags":["big map"]},{"id":"st_UbLjNQasqLPMyacC","name":"Classic","version":3,"maxVersion":3,"status":"official","structType":"section","data":{"omitted":true},"settings":{"items":[],"design":{"optio
2024-07-15 15:49:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	65119	18.245.206.205	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:53 UTC	699	OUT	GET /st_YamYHUIqgrxdLNhe/9?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:53 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 21116 Connection: close Date: Mon, 15 Jul 2024 04:03:17 GMT x-amzn-RequestId: 38d6f54a-5133-4b33-a198-39a8058bf56a Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66949f7d-54b560ca79653400475b3975;parent=410a6c910821168e;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 41adb03fdd2f2e41452857114c7a3288.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: g9TbrZ1VcTVMMIeRAcXu18dvY3qk0zw-ylw9-fbi2VPnd0pk9bY3Mw== Age: 42397
2024-07-15 15:49:53 UTC	16384	IN	Data Raw: 52 49 46 46 74 52 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 bb 02 00 41 4c 50 48 b2 38 00 00 01 1c 05 6d 1b 39 69 af fc 49 ff 1e 00 22 62 02 78 50 48 12 ea ee 90 04 20 89 bd 1a 97 5a 6f e0 76 1f 3b ef c9 6c 62 14 36 67 e4 24 d9 e1 61 b6 e1 b4 c0 2e 83 7b 0f 3b c9 99 df 6a 58 fd 1d 55 3d 1d ac aa e8 3c 5d 53 96 b6 dd b4 ed fc 63 8c b9 bc d6 46 a5 6b db c9 05 98 3d db b6 6d a7 95 5e ba 66 cb c9 75 d8 b6 b5 11 4e fc 07 8b 55 63 8d 53 f5 7d 67 9d 3f 22 20 31 6e e3 48 2a 63 ba 37 63 b7 b1 f7 eb 74 d1 07 df db b6 9d 8d ff ff 5f 67 9a 36 4d cd a4 6d 6a 8c fd b4 ed 97 6d db 36 16 5f 6b b6 f1 07 d8 b6 fd b4 1f 78 d9 e6 b4 bd b7 ed be ce eb 4e 3a af d7 76 67 26 79 2c 44 04 2d 06 54 2a 49 96 c0 4a 01 e2 0d 49 79 fb 61 f7 f8 d7 27 fe f0 ff 53 ec Data Ascii: RIFFtRWEBPVP8XALPH8m9iI"bxPH Zov;lb6g$a.{;jXU=<]ScFk=m^fuNUcS}g?" 1nHc7ct_g6Mmjm6_kxN:vg&y,D-TIJIya'S
2024-07-15 15:49:53 UTC	4732	IN	Data Raw: 58 9b 94 c8 a4 8a 8b f2 61 51 7e 4c 28 49 21 05 5f 96 bf 93 39 75 59 5f 75 94 00 66 88 10 24 b7 71 7a 8e b0 fc f9 0b 10 e6 72 ce ec 11 8d 19 76 e8 0a b2 02 11 ce d7 1c 70 9b da 4f 20 9e 83 18 85 c6 e2 90 b0 41 74 ba 78 5f 1a 1e a1 ad 81 70 8e e2 9c b4 6b 1c 8a 8d 63 91 51 a9 7b bb 53 b6 3c 3e 5f 55 b1 77 5c 82 89 56 4e 30 3a 7c e7 61 33 48 fd 88 8d 80 c4 32 59 5b 52 04 c1 64 16 e5 e6 4f ed 0a e5 38 06 63 33 a8 ef c7 2d 26 e1 62 42 d3 4a fe 13 2e 99 6d 12 f4 f3 55 f2 b2 ca 8d 63 91 51 a9 7b bb 53 8e d5 61 84 d8 ca 8a 0d 43 d5 a0 28 a3 a2 86 2b 24 c5 c6 31 af 74 3a 25 c7 79 a0 39 29 4a f7 4e e0 93 0a 8b f2 61 51 7e 4a a1 b8 b6 57 bc d9 4f 30 c3 53 29 3c 88 f6 8b b5 e3 ed 3f ea 9e b3 2e c0 7f 8d 71 ac 72 2a b6 23 3b f0 c7 4e 2b 2c a8 d6 39 15 1a c3 dc 95 47 Data Ascii: XaQ~L(I!_9uY_uf$qzrvpO Atx_pkcQ{S<>_Uw\VN0:\|a3H2Y[RdO8c3-&bBJ.mUcQ{SaC(+$1t:%y9)JNaQ~JWO0S)<?.qr*#;N+,9G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	65118	18.245.206.205	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:53 UTC	699	OUT	GET /st_xdCTWzCYkQXYraKJ/2?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:53 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 11784 Connection: close Date: Mon, 15 Jul 2024 04:03:16 GMT x-amzn-RequestId: 9e673882-aa23-4ef6-a9b1-69b0d5c939db Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66949f7d-091b4ec903f93f596be7f70d;parent=2542b72b18c3485f;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 096cbf96ced54c7259a8b0eff4bd4704.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: MS-acQnllnGmKAfiaIvI4lCuGLBgXavGIcwn6HTS_Z-HIUbGmcaLBw== Age: 42397
2024-07-15 15:49:53 UTC	11784	IN	Data Raw: 52 49 46 46 00 2e 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 e1 01 00 41 4c 50 48 47 1e 00 00 01 14 c7 6d 23 39 92 54 f9 67 3d 16 dd 7b f6 15 11 13 40 77 bf c0 10 80 a8 51 51 2a ab e6 bc d4 18 92 18 56 58 6d 3f 51 cb 65 77 48 82 6a 9d 2c 71 85 52 48 01 32 87 08 38 2f 02 46 05 08 fb 75 9c 0e a3 a0 76 18 27 73 8a 2f ba de a3 ac cc d3 96 a5 c7 3c a5 fd fe 3c 29 48 6b db 3e 43 9e f3 56 55 f7 68 37 b6 6d db b6 0f 9d b3 e4 0b 38 6b db fc 02 39 b5 6d e7 c8 b6 f9 c7 7a 67 b6 a7 2b 9a ae b7 7b aa 73 cd fc 6a 11 11 92 d8 46 72 24 29 a2 5d f5 ee dd 65 6a bd ab ee b8 fd c9 8d 24 59 b6 95 b9 db 5f 00 09 37 30 00 4b d0 3e 5e 80 b6 4a 38 88 0b 48 48 58 01 53 3d ef 68 3f 7e 45 84 23 b7 6d 24 49 fd 01 23 99 7d 31 5a 7d f4 80 6d 9b 1a b7 f9 ff dd 33 23 Data Ascii: RIFF.WEBPVP8XALPHGm#9Tg={@wQQ*VXm?QewHj,qRH28/Fuv's/<<)Hk>CVUh7m8k9mzg+{sjFr$)]ej$Y_70K>^J8HHXS=h?~E#m$I#}1Z}m3#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	65124	35.80.254.51	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:53 UTC	717	OUT	GET /public/structures?ids=st_gmfhijCMMxAcBLrJ:9,st_uGerXxeRYOSTsrnJ:4,st_NwmLNovUgREHorrQ:4,st_CoBBHOGIRGblDvui:3,st_yjWwCAcrrTwyuqKH:5,st_ZhZeMoQDspyfOwZC:5,st_gVwJmnNuAaIUzPZB:5,st_EjpMuJiVfBUfYXvK:4 HTTP/1.1 Host: api.umso.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
2024-07-15 15:49:53 UTC	257	IN	HTTP/1.1 200 OK Date: Mon, 15 Jul 2024 15:49:53 GMT Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Expose-Headers: x-umso-appver X-Umso-Appver: 5.1.8
2024-07-15 15:49:53 UTC	16127	IN	Data Raw: 35 37 34 39 0d 0a 5b 7b 22 69 64 22 3a 22 73 74 5f 79 6a 57 77 43 41 63 72 72 54 77 79 75 71 4b 48 22 2c 22 6e 61 6d 65 22 3a 22 43 6c 61 73 73 69 63 20 33 20 43 6f 6c 75 6d 6e 22 2c 22 76 65 72 73 69 6f 6e 22 3a 35 2c 22 6d 61 78 56 65 72 73 69 6f 6e 22 3a 35 2c 22 73 74 61 74 75 73 22 3a 22 6f 66 66 69 63 69 61 6c 22 2c 22 73 74 72 75 63 74 54 79 70 65 22 3a 22 73 65 63 74 69 6f 6e 22 2c 22 64 61 74 61 22 3a 7b 22 63 6f 6e 74 65 6e 74 22 3a 7b 22 6b 65 79 22 3a 22 73 31 22 2c 22 74 79 70 65 22 3a 22 73 65 63 74 69 6f 6e 22 2c 22 70 72 6f 70 73 22 3a 7b 22 73 74 79 6c 65 22 3a 7b 22 64 69 73 70 6c 61 79 22 3a 22 66 6c 65 78 22 2c 22 70 61 64 64 69 6e 67 22 3a 5b 33 30 2c 30 2c 36 30 2c 30 5d 2c 22 62 6f 72 64 65 72 54 6f 70 22 3a 22 31 70 78 20 73 6f 6c Data Ascii: 5749[{"id":"st_yjWwCAcrrTwyuqKH","name":"Classic 3 Column","version":5,"maxVersion":5,"status":"official","structType":"section","data":{"content":{"key":"s1","type":"section","props":{"style":{"display":"flex","padding":[30,0,60,0],"borderTop":"1px sol
2024-07-15 15:49:53 UTC	6226	IN	Data Raw: 67 6e 49 74 65 6d 73 22 3a 22 66 6c 65 78 2d 73 74 61 72 74 22 2c 22 66 6c 65 78 44 69 72 65 63 74 69 6f 6e 22 3a 22 63 6f 6c 75 6d 6e 22 7d 7d 2c 22 63 68 69 6c 64 72 65 6e 22 3a 5b 7b 22 6b 65 79 22 3a 22 62 31 22 2c 22 74 79 70 65 22 3a 22 62 6f 78 22 2c 22 70 72 6f 70 73 22 3a 7b 22 73 74 79 6c 65 22 3a 7b 22 77 69 64 74 68 22 3a 22 63 61 6c 63 28 35 30 25 20 2d 20 36 30 70 78 29 22 2c 22 64 69 73 70 6c 61 79 22 3a 22 66 6c 65 78 22 2c 22 74 65 78 74 41 6c 69 67 6e 22 3a 22 6c 65 66 74 22 2c 22 61 6c 69 67 6e 49 74 65 6d 73 22 3a 22 66 6c 65 78 2d 73 74 61 72 74 22 2c 22 66 6c 65 78 53 68 72 69 6e 6b 22 3a 30 2c 22 70 61 64 64 69 6e 67 54 6f 70 22 3a 22 31 30 30 70 78 22 2c 22 70 61 64 64 69 6e 67 52 69 67 68 74 22 3a 36 30 2c 22 66 6c 65 78 44 69 72 Data Ascii: gnItems":"flex-start","flexDirection":"column"}},"children":[{"key":"b1","type":"box","props":{"style":{"width":"calc(50% - 60px)","display":"flex","textAlign":"left","alignItems":"flex-start","flexShrink":0,"paddingTop":"100px","paddingRight":60,"flexDir
2024-07-15 15:49:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	65127	18.245.206.203	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:53 UTC	386	OUT	GET /st_wqnaCNxfMwAMacVY/4?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:53 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 32548 Connection: close Date: Mon, 15 Jul 2024 04:03:16 GMT x-amzn-RequestId: 1ed78420-5381-4d74-bed5-9dd24373201e Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66949f7d-6664ba9434ad20b9025ffb01;parent=191a13b07bd07fbd;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 270872b356df5edccbe6b50376e25078.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: 7TTalmJOPKVp0hwq_EARc-SbL5gCwUIgj5I7DVYDtYTsUTal6vnamA== Age: 42397
2024-07-15 15:49:53 UTC	16384	IN	Data Raw: 52 49 46 46 1c 7f 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 e0 02 00 41 4c 50 48 f8 22 00 00 01 1c c5 6d db 38 92 f7 1f fb 7a fd 46 c4 04 b0 ba a7 e5 84 09 49 88 38 b2 50 66 8c 2d a3 c9 12 cc 34 a1 a8 e0 48 5a 1d 63 cb 27 db 3d 6f 36 cc 52 e8 68 db a4 48 72 22 b3 1a 97 c1 dc 03 a0 05 92 89 a6 74 04 32 75 00 66 06 93 e9 10 ba 85 5c dd 81 99 a5 65 ee c1 ca fc 23 32 4a 7a 9e 0a b5 fe 88 90 00 c9 76 db 36 07 f7 fa 70 e9 89 02 01 f3 9c 32 74 24 db 56 24 49 ef 7d 8a 48 2a e6 da c1 c0 2a 98 47 67 da 04 ab cc 4c 32 ca a3 f3 68 a3 31 33 33 63 64 c4 37 8b f8 ff 45 74 b7 f4 6e 51 44 40 62 db 46 92 24 c7 75 a4 d3 b5 83 45 63 ee f9 17 fc 61 db a7 68 6a fc 7f 77 55 75 8f 0f 83 4d 5c 20 1b 2c 6e 48 1c 8b bb bb bb db 66 f1 c0 40 dc 75 7d 09 71 77 c5 Data Ascii: RIFFWEBPVP8XALPH"m8zFI8Pf-4HZc'=o6RhHr"t2uf\e#2Jzv6p2t$V$I}H**GgL2h133cd7EtnQD@bF$uEcahjwUuM\ ,nHf@u}qw
2024-07-15 15:49:53 UTC	16164	IN	Data Raw: 56 db 71 f4 11 f7 7c bd a0 3b 3c 77 70 ac 0d 44 78 f7 e7 46 b4 9b f0 86 a7 94 3a 2b 34 a5 4b eb 9d 04 79 c2 c4 1c b8 12 bd e8 c1 8d 24 f1 40 32 82 4b f3 fd 45 35 9f 95 9e 65 d0 2b 01 da 6f ca 6e 7d 19 2f 84 ff ed 10 1b 8d 76 53 5f 5d 90 3f de 6e e7 55 c9 6d 47 0e 30 a3 1e 46 2f e9 46 db 9d 5b de 8e 09 81 ce 04 a9 3b 42 90 1a e0 d7 27 09 2f 42 84 2d c8 e9 0c 53 88 1c f0 08 c6 2f 61 11 e2 d7 b4 a0 6a a3 83 9f 2b e8 8c c2 81 34 54 b8 1c d7 7e 5d 25 8f 83 a7 08 5d d5 ed e1 03 5c ce 14 7a 6e 6c d8 e5 c6 8e b1 35 69 75 70 ad f5 fe 6b 80 c3 4c f7 cf 20 c5 2a cf f1 2a ee 60 c9 e0 0d 73 02 4c 99 4e 9e 7c d8 4b d7 4d 8a 0e 66 6c b8 31 c2 c2 34 a8 6a 7b a5 75 2a c9 89 62 47 a4 e9 d5 ba e7 1d 82 93 05 dc 2a f9 f7 4a 22 90 1c be 9d 2a a9 f2 24 60 47 47 9d 3d 4e 09 13 Data Ascii: Vq\|;<wpDxF:+4Ky$@2KE5e+on}/vS_]?nUmG0F/F[;B'/B-S/aj+4T~]%]\znl5iupkL *`sLN\|KMfl14j{ubGJ"$`GG=N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	65122	18.245.206.205	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:53 UTC	699	OUT	GET /st_cdJoZDlmunztgvLx/3?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:53 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 14258 Connection: close Date: Mon, 15 Jul 2024 04:03:15 GMT x-amzn-RequestId: 576bd603-be36-499d-84c3-1edfda01a450 Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66949f7d-1068599b31eb315817180136;parent=63345c28f8840a91;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 8a92b2b0171484a741fd7fa869ed518c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: -i5-i0IUNF_LlPssM20o-__sUEjm7lXWMlOJg2FQE_3qNcrGplCzfw== Age: 42398
2024-07-15 15:49:53 UTC	14258	IN	Data Raw: 52 49 46 46 aa 37 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 1b 02 00 41 4c 50 48 d4 21 00 00 01 14 c7 6d 23 39 52 49 f9 67 bd 3d 7e 77 cf bc 22 62 02 f2 03 15 e1 28 b2 90 3d c2 75 d2 a6 e6 78 c2 c4 0e 71 18 a0 8f 71 01 e9 1d 92 d9 29 99 28 28 b0 6e be bd 28 45 02 92 7a 95 4d 3a 04 b9 56 16 99 af a2 02 15 d2 ae 96 83 d4 32 9a 4d 95 89 d9 8a b9 d9 d5 3c a2 2c 94 d3 b3 e7 12 f6 f8 73 45 92 6d db aa 9d 9c 77 5f dc f3 04 a9 c6 3d e9 03 da 2a 1a e0 4e d5 3a c0 48 09 eb 85 bb c6 a5 15 50 84 2f 67 1f de 58 11 e1 86 6d 1b 49 62 76 66 91 c5 cd 55 53 ee 93 7d 2a ca b6 6d ab b1 9b 73 75 a5 a2 07 a1 a6 a9 15 ec 31 33 73 fa dc 72 3e c0 cc 10 66 4e 7e 20 ff c0 cc d0 63 66 e6 c4 ec e7 d4 2b 99 4a 77 1f 90 ae a5 1a 19 15 11 92 d8 46 72 24 29 72 b6 c7 Data Ascii: RIFF7WEBPVP8XALPH!m#9RIg=~w"b(=uxqq)((n(EzM:V2M<,sEmw_=N:HP/gXmIbvfUS}msu13sr>fN~ cf+JwFr$)r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	65120	18.245.206.205	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:53 UTC	699	OUT	GET /st_oWLFmgFHQeYRFSAt/2?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:53 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 12686 Connection: close Date: Mon, 15 Jul 2024 04:03:18 GMT x-amzn-RequestId: 265dd89d-5e2e-4c96-a5e4-b792cd59168e Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66949f7d-62cb0a2d4faeb432729feccb;parent=15723a062c9456dd;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 ded55b591af1d1483f01430e831e3a6e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: 518PRwqA1hg9RlZN1Q5dkkZc7oa8EZfjSkHq1cpXrxZRw9fOoHq-oQ== Age: 42395
2024-07-15 15:49:53 UTC	12686	IN	Data Raw: 52 49 46 46 86 31 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 e1 01 00 41 4c 50 48 d4 21 00 00 01 14 c5 6d 23 29 49 ff 65 1f 33 bc 22 62 02 78 95 06 02 06 da 9d 35 47 20 8b ae 25 6a 26 bd 5b bf 17 93 e4 81 d2 b7 82 22 31 a5 6b 89 cb b8 0e 26 35 ed 6a 07 1d ee a3 a7 b4 6d 9b 21 c9 fa 22 33 b2 ed de cd 9c 73 56 b6 7f 80 6d db de da b6 f1 0b b4 f4 ca 5a 9d ad 6d fb f4 65 d7 a9 38 28 c4 17 f1 c5 75 55 bd 71 a6 bf 88 80 04 49 92 a3 a6 fa 0c 9e 9e c6 83 b4 bb 48 3f 0f d8 fe 29 92 5a ff df ab aa ba 67 d6 97 b0 b8 04 c2 61 89 bb 7b 08 9c b8 bb 7f 82 c4 05 88 1c 1c b2 10 17 20 ee 9e 40 dc dd 0d 48 0e 1a 27 1e dc 59 63 65 da de d7 d5 fd ae ea 9a d9 7c 2c c7 22 42 16 6d 5b 41 1b 5d 12 26 a4 69 d7 bd cf e1 09 fa 44 c8 27 65 7f a9 ff a8 ff a8 ff a8 Data Ascii: RIFF1WEBPVP8XALPH!m#)Ie3"bx5G %j&["1k&5jm!"3sVmZme8(uUqIH?)Zga{ @H'Yce\|,"Bm[A]&iD'e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	65121	18.245.206.205	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:53 UTC	699	OUT	GET /st_WSDCBUQTPPjxTZvb/2?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:53 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 13584 Connection: close Date: Mon, 15 Jul 2024 09:48:27 GMT x-amzn-RequestId: 8aab461e-1634-49bc-985b-9b1d014913da Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-6694f067-2784061b501f8a9e00283491;parent=35a54573c988042d;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 006b25462db4c833e7b95f066ef77882.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: ra4ZOG4EqpS9pteDOcYTCxa15_JNXAG2AIlRSvFJKRpZ1_syYp9tPw== Age: 21686
2024-07-15 15:49:53 UTC	13584	IN	Data Raw: 52 49 46 46 08 35 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 55 02 00 41 4c 50 48 8c 21 00 00 01 14 c6 6d 1b 39 92 d5 7f d7 3b d8 74 f9 5e 11 31 01 f9 f6 3d dc 33 b4 6e ac 77 0b c3 51 37 13 b0 07 cd c6 2a 08 08 88 e0 fe f4 0a 02 15 66 47 05 2c ec 8a ed 26 bd 40 ec df 22 01 0a c4 d1 6c 6a 67 4f b6 ee e9 dd eb dd e7 70 7f 50 3c d0 d6 a6 48 6e b4 6d 57 44 64 56 83 9a 04 6d 12 6b 2c 32 93 c0 2c 32 33 33 c3 f0 88 46 23 86 96 cc cc cc cc 4c 22 33 33 c9 9e b1 98 b1 d5 a0 a6 aa cc 88 7b ad ca 3b 22 b3 aa a5 79 a0 1f 88 08 59 b4 6d 55 6d b5 89 e4 9a a4 1d 7b 9f 1b 10 f0 08 a7 af 1f 4a da f6 26 92 24 c9 10 91 59 55 cd dc 7d 83 9e f5 1c 80 19 f6 cc 27 60 66 66 c6 35 5e 82 e7 04 cc cc 0c cb c9 ca f0 f3 44 86 e5 e8 c1 d0 1f 9d ad 88 80 c4 b6 91 23 Data Ascii: RIFF5WEBPVP8XUALPH!m9;t^1=3nwQ7*fG,&@"ljgOpP<HnmWDdVmk,2,233F#L"33{;"yYmUm{J&$YU}'`ff5^D#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	65123	18.245.206.205	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:53 UTC	699	OUT	GET /st_McLyNmihmZpQwQyb/5?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:53 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 15986 Connection: close Date: Mon, 15 Jul 2024 01:50:15 GMT x-amzn-RequestId: 79244220-3678-415c-b81f-d59ec33364f6 Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66948051-70e02fe14c04e4344f893eeb;parent=79ce0565371739dc;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 ded55b591af1d1483f01430e831e3a6e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: IJV3OUF4V0XDC-0yrgFUuswWjj6aMlAu1yG4_RywCd2hpeuyuuF-bQ== Age: 50379
2024-07-15 15:49:53 UTC	15847	IN	Data Raw: 52 49 46 46 6a 3e 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 bb 02 00 41 4c 50 48 37 27 00 00 01 1c 05 6d db 48 c9 8e 3f ea 6d f7 03 88 88 09 88 d3 be 1f eb c4 67 41 65 da 55 ca 38 68 01 e8 b9 dd 8d ec 22 7b 42 3c 8c 72 a6 65 bf 8a 4f 47 39 15 e7 c7 e2 8e 45 df f7 80 6d 9b 22 a9 f9 ff dd 55 d5 b3 2e 68 1c 7d 83 c5 71 e2 58 dc dd dd dd 83 7b dc f5 75 24 46 5c 71 89 bb bb e2 b0 79 13 64 59 67 d9 e9 ee 7a 8e a3 fb a9 ea 9a 59 d8 8f cc f1 f9 10 11 b2 68 db aa da 6a 91 d0 6b 6e da b1 0f 23 10 c4 23 72 fa f8 a1 ad ed 93 21 4f fa 65 66 55 63 66 d6 b6 6d 1d da b8 03 7b 0f 6d db 38 9a d9 5b d0 e9 5e c1 9e da b6 8d b1 bb 06 5d 95 11 51 31 8a fc cf 13 11 01 89 91 24 47 4a ae b4 78 a8 cd c1 b3 cc 4d 61 3e 72 b4 ed 6d 23 07 94 48 85 c9 39 ad d3 69 Data Ascii: RIFFj>WEBPVP8XALPH7'mH?mgAeU8h"{B<reOG9Em"U.h}qX{u$F\qydYgzYhjkn##r!OefUcfm{m8[^]Q1$GJxMa>rm#H9i
2024-07-15 15:49:53 UTC	139	IN	Data Raw: 41 b9 a1 fc 33 ac 77 32 80 aa 01 82 20 24 d1 0e 7b 61 15 0f 3a 1b 8b e3 99 31 7b d1 08 09 f9 b5 d5 7d 0a 16 1f 4a 70 49 e4 49 2f 87 1b 6a af ea 48 00 00 00 00 12 c1 4e e7 74 01 00 00 1e ac 8f 39 3b 15 c8 4b de e4 5d ec af 88 76 83 81 ab 4f cb 6e ad e4 4c 24 8d e9 22 12 7f 39 e6 f0 9a db f7 3c 7e 87 10 f0 05 e3 8c 00 6c a2 55 de 4e c3 d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: A3w2 ${a:1{}JpII/jHNt9;K]vOnL$"9<~lUN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	65130	18.245.206.205	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:54 UTC	699	OUT	GET /st_KuGLRGupwTcTRRKP/7?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:54 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 16062 Connection: close Date: Mon, 15 Jul 2024 04:03:15 GMT x-amzn-RequestId: 09c1a216-1d5c-4a72-882d-f5e3e23b9929 Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66949f7d-07e3ec2801e99d775b7ba3db;parent=5215f06c362eecf7;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 6b0f39470c6ab87051bec6c0e8aee2de.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: aEFJ8UZ1_NA_cL8TydnS3W3l1bABTPywvWRWoim4st-RSHd_yZKfSQ== Age: 42400
2024-07-15 15:49:54 UTC	15847	IN	Data Raw: 52 49 46 46 b6 3e 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 bb 02 00 41 4c 50 48 ef 26 00 00 01 ff 27 24 48 f0 ff 78 6b 44 a4 ee 39 8a db b6 71 6c 6b ff a9 73 bd fc 23 62 02 f4 60 8f af f0 64 e6 3c bd 2f 01 32 ac d9 34 b5 91 46 65 17 da 15 80 15 e9 b2 8c 50 25 ad 0a bd d5 01 49 ca 7a da fa 66 b2 4b b1 3d e4 b9 f3 25 c7 b6 ad da ca 3a f7 7d 77 4b 80 ae b6 20 00 d7 18 5c 22 70 a7 65 f9 90 8a bb 93 82 c3 b7 27 c8 17 98 eb 5e 56 44 ff 21 b1 6d e4 48 e2 74 f7 f4 4e c2 6e 5d 78 6d 4e 35 a0 63 5b 9b 22 c9 89 cc 88 8c e4 62 6e 66 66 7b 66 0f e3 cf b8 b3 90 b1 e4 31 ed 81 25 4b da 82 4c b2 d9 65 96 0a e2 9c 8c 3f fe 48 b1 fe f3 37 44 f4 1f 12 24 b9 71 9b d9 88 45 01 20 e3 17 ca f7 9d 10 e5 81 fe 3f 45 52 b3 fd fb 54 55 cf ac b0 82 c6 d1 2b 58 Data Ascii: RIFF>WEBPVP8XALPH&'$HxkD9qlks#b`d</24FeP%IzfK=%:}wK \"pe'^VD!mHtNn]xmN5c["bnff{f1%KLe?H7D$qE ?ERTU+X
2024-07-15 15:49:54 UTC	215	IN	Data Raw: 78 25 00 00 56 4f 81 72 8b 61 d4 91 2f c0 7d 6d 04 51 5a 5a 39 55 a7 b7 83 67 81 c0 6d 08 80 00 00 00 00 00 00 02 67 b6 72 a0 fa ee e4 c7 72 63 b9 31 dc 04 05 8a b4 7b 43 0f 8e c1 4f 5a bf 9b 3a 80 6b 9a 73 50 20 d4 34 c1 cd 74 9b 49 1a 9c e4 9e 47 05 72 8e e3 f0 11 b4 4f eb 02 58 01 8c 08 be ac 5a 3e 3e 38 7d e1 eb 7f cc 47 e6 da ed 4e 6f 43 a3 6b d4 e0 28 d2 c3 50 86 eb b0 cf c1 ae 04 3e df 6f 1e 75 61 ae 60 20 4d 80 4f dd 8b 85 4a 58 b3 9e ce 3e 81 7a a3 49 52 0a 15 9d eb 37 be 2e 6d 8c 05 ca 71 54 3e 2b 3d c2 8c 5b a1 96 2f 76 63 c6 2f 77 2a 4b 89 2e a4 48 ec f3 77 52 49 a8 dc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: x%VOra/}mQZZ9Ugmgrrc1{COZ:ksP 4tIGrOXZ>>8}GNoCk(P>oua` MOJX>zIR7.mqT>+=[/vc/w*K.HwRI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	65128	18.245.206.205	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:54 UTC	699	OUT	GET /st_kaYPadHYbGttSsxI/4?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:54 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 13702 Connection: close Date: Mon, 15 Jul 2024 04:03:15 GMT x-amzn-RequestId: 224a1380-f571-4221-b004-9d94ceb6c7c0 Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66949f7d-22e7e70162f1eadc06d2b3cb;parent=578a13a7f139ee5e;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 3e451e9597256bf0aa25b96dd37c1986.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: oYj7Soe4O8ZF8_QPpLvq-jvAy-6gJnGcljDEo_Y5xjSuXWaWottYAg== Age: 42400
2024-07-15 15:49:54 UTC	13702	IN	Data Raw: 52 49 46 46 7e 35 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 0b 02 00 41 4c 50 48 85 1f 00 00 01 14 c7 6d 23 39 92 a4 fc b3 5e 7b 33 b3 e7 5e 11 31 01 fc 0e b5 9a 4c 79 66 55 14 15 c5 f1 f0 ea 78 a6 16 47 36 1c bb 02 68 e5 70 67 37 6a 51 38 8a 87 74 aa a2 51 ce 2a 93 5a 41 d9 d5 51 8a 2e 52 0c dd ad 63 ad b3 ed 7c ce 34 7f db a9 fe 35 a5 83 6d 8f 22 c9 51 55 75 0f ee f5 ed 99 19 52 66 0a 99 21 62 08 99 d9 3e 36 33 53 ca ec dc 8f 33 66 47 cc 6c 1f e3 8c 71 67 bb bb 9e e7 66 ba 4b 35 5d 6d 90 ce a7 88 90 c4 36 92 23 49 8a f2 63 d0 1d 7b fe 6a aa 2b 77 e6 e5 8d d6 36 45 72 a3 6d 3b 23 22 b3 b9 d5 2d 96 59 f2 58 64 7b c0 20 30 8b cc 24 30 33 33 7b 3c 62 cb 2d 99 19 87 47 96 99 19 45 66 66 d2 f8 be 8d 82 b6 65 41 ab ab 5b 4d 55 99 11 d7 5a Data Ascii: RIFF~5WEBPVP8XALPHm#9^{3^1LyfUxG6hpg7jQ8tQ*ZAQ.Rc\|45m"QUuRf!b>63S3fGlqgfK5]m6#Ic{j+w6Erm;#"-YXd{ 0$033{<b-GEffeA[MUZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.6	65129	18.245.206.205	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:54 UTC	699	OUT	GET /st_DpulgycoFXEXRDEk/6?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/?utm_source=usite&utm_campaign=free&utm_medium=btmbadge&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:54 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 14676 Connection: close Date: Mon, 15 Jul 2024 04:03:17 GMT x-amzn-RequestId: 43bc64c3-ca39-4024-9796-dd806d362bd5 Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66949f7d-1e02f42032db155119815e73;parent=2da300a1817d5543;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 270872b356df5edccbe6b50376e25078.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: V6oeNpaYkOaBIyvRJS5aDRmJaTMO5TkFKGutrAjqs4THeIbfCJ2ApQ== Age: 42397
2024-07-15 15:49:54 UTC	14676	IN	Data Raw: 52 49 46 46 4c 39 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 0b 02 00 41 4c 50 48 15 23 00 00 01 f7 47 26 6d d3 d6 bf f5 ed 8e 88 c4 91 7c 45 51 dc b6 8d 23 ed bf 76 ae f7 7b 45 c4 04 30 ba 17 9b c5 3b 38 1b ea 70 7b 6d 7a 18 20 12 15 33 7b 0a 2d 64 c0 f1 4a ed 3e 61 38 02 65 83 9a 1c 07 18 2f f4 5f c4 1f ff 7f 8a ad c6 da f6 ad aa ee b5 b6 6f 82 c4 13 98 1c 48 88 bb 2b 81 89 7b 4e 5c 4e dc 03 24 64 c8 26 d8 86 b8 00 e3 13 77 98 b8 bb 0b 30 99 b8 2b ee ba 05 d8 b2 5a 7e 7f ac fe 55 75 75 ef c5 39 d7 d5 eb 3a d7 8e e8 bf 2c da 56 c2 c6 ba a6 b6 76 3a b3 2e e4 49 4c 42 0d b4 ef 8b 71 db b6 81 f6 df fc 92 a8 df 63 44 b0 6d db 46 10 6f 01 c5 03 7c f5 15 ca fe a5 db 7f f0 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff Data Ascii: RIFFL9WEBPVP8XALPH#G&m\|EQ#v{E0;8p{mz 3{-dJ>a8e/_oH+{N\N$d&w0+Z~Uuu9:,Vv:.ILBqcDmFo\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.6	65133	18.245.206.203	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:54 UTC	386	OUT	GET /st_SgsUvIflyiJLKbkn/5?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:54 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 29616 Connection: close Date: Mon, 15 Jul 2024 04:03:15 GMT x-amzn-RequestId: 9ba6e880-28d8-4d75-a92a-21ee2aa9e860 Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66949f7d-4d0e005475220a234effe435;parent=34483d3bcaac8a65;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 096cbf96ced54c7259a8b0eff4bd4704.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: cqXNqPGck1xxZeKBIZ0s2IqBu0Kr6XFC0cZKYkAZgvJErO5A38s6VQ== Age: 42399
2024-07-15 15:49:54 UTC	16384	IN	Data Raw: 52 49 46 46 a8 73 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 d5 01 00 41 4c 50 48 4f 25 00 00 01 14 c7 8d 24 29 52 65 fa ef f5 52 c3 1e 3c 23 62 02 32 90 6c df d7 ed c0 af 07 41 e5 72 43 e1 34 df 21 09 56 33 e3 52 10 38 63 0a 4f cf 50 1c a6 82 a0 78 c9 49 da 11 4f b1 b8 4d b7 c5 f6 36 d7 e5 8c 45 f7 4b e8 c3 23 96 f7 d9 de f7 b0 24 af 67 fb df 87 d7 d3 db 6d db a6 6d db d6 96 5b 6d 6d 70 5a cb b6 6d db b6 6d db b6 6d db f6 da b6 6d 9b 4b 7d b2 af 3e 7b 45 0e a1 85 b5 7e 40 29 f9 4b 44 38 52 23 c9 91 d4 64 41 8e fb c0 ba 66 8f fe b0 ff 53 24 b5 fe bf 67 55 75 cf cc 1a 8b 6d 5c 20 27 ee 86 c4 71 e2 ee ee 2e c8 49 f0 2c bb c4 5d 8f 1f 42 dc 5d b1 b8 1b 31 4e de ef 20 c1 7d 59 81 b5 e9 ee 7a 5d 57 f7 ab aa 6b 66 97 23 ff 45 04 2d c8 56 eb Data Ascii: RIFFsWEBPVP8XALPHO%$)ReR<#b2lArC4!V3R8cOPxIOM6EK#$gmm[mmpZmmmmK}>{E~@)KD8R#dAfS$gUum\ 'q.I,]B]1N }Yz]Wkf#E-V
2024-07-15 15:49:54 UTC	13232	IN	Data Raw: e7 2f ca 47 41 e8 d3 10 2e c2 37 f7 02 82 67 38 36 c6 fa 0d 5f 6c 6e 39 49 d7 6b bf bb 75 79 92 95 2c 1b 05 5f c7 3a a1 ff 34 cd db 68 b0 f4 c0 0b de be 2a 94 64 13 e2 44 87 13 1c 2b 75 c3 65 2d 56 6e 81 f9 85 58 65 5a 8a d4 cd 7c 75 48 04 0e 2a e8 51 bf 68 a8 26 ce 9c cc c5 a1 b6 1c 58 a9 d2 75 8a 1b d3 1b 5b c9 23 47 24 52 9d d3 8b c4 c0 0d b5 dd 73 53 65 e6 8b b1 f7 18 0b 8d 2e 85 c5 0b 6b 25 52 7e d0 e7 76 9c ab f1 8d 46 50 7f fb df 51 f0 b2 52 ab 74 7e 2c f1 64 dc 3b 44 41 92 c7 db aa a2 47 99 2e 11 b8 a3 ab 9e e2 c4 8a d3 b7 82 73 a0 c9 7a ff 18 61 c6 be 1b 29 36 31 0c ba 54 9f 8f cd 54 9a 30 bb 12 c3 48 36 25 41 fe 5f b3 93 4a fe cf e1 2c 44 e6 20 36 42 1a 13 cd 52 30 cc 4f bb 20 cd 52 a4 9c 20 4b 27 d4 f6 5d 49 3a f0 d9 0d c5 af 72 51 ad 34 64 96 Data Ascii: /GA.7g86_ln9Ikuy,_:4hdD+ue-VnXeZ\|uHQh&Xu[#G$RsSe.k%R~vFPQRt~,d;DAG.sza)61TT0H6%A_J,D 6BR0O R K']I:rQ4d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	65131	18.245.206.203	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:54 UTC	386	OUT	GET /st_DhlQhQgafqkiwvHx/5?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:54 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 33844 Connection: close Date: Mon, 15 Jul 2024 04:03:19 GMT x-amzn-RequestId: 1d72db26-1632-45d9-a835-80237eb493c4 Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66949f7d-67787d2705c567fa353fc2ff;parent=235dcbd643165a59;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 7e0c27121f91f2e977088357fc7e2d06.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: zPn7yFDplRaPaITjVejCgDosV_hy6c1fe-ta2zIJxRrW9MXd_f5J8Q== Age: 42395
2024-07-15 15:49:54 UTC	16384	IN	Data Raw: 52 49 46 46 2c 84 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 04 04 00 41 4c 50 48 e8 25 00 00 01 1c b5 6d 1b 39 b2 f7 df fa 3e 5d a8 be 8a 88 09 20 5b a7 36 38 9e 9d 7b ff c8 e7 2d 30 60 92 25 25 b5 d5 e5 8b c9 f5 01 92 b8 20 df 69 e9 a6 6b 6d 7b 22 c9 f9 45 55 dd c3 b0 bc 77 60 08 7d 01 cc 90 33 5f 00 33 33 33 3b 64 8c 9c b3 b3 cd cc cc 5e 32 2e 18 bb ab 74 4e 81 54 23 fd 65 f8 ff 9e 55 44 48 60 db 46 92 24 39 99 7a ba a7 27 15 60 eb fe 9a ba bf 01 14 88 bf ff 28 22 c2 1f ff ff 8a 9e c6 ff f7 3c e7 cc 5c 57 3c 94 40 bd 85 65 09 a5 ee ae 14 b6 ee ee ef ba b7 40 65 69 f0 40 5d b0 d5 ba 53 79 ef d6 dd 0d 68 b7 ee d4 8b 6b 88 00 49 ae b1 d7 ed 36 f3 3a 67 ce 4c e0 2d cd 1f 8d 08 59 b0 ad 86 6d f4 64 ab 51 9a 76 1f 78 85 25 19 cb a2 9f c0 Data Ascii: RIFF,WEBPVP8XALPH%m9>] [68{-0`%% ikm{"EUw`}3_333;d^2.tNT#eUDH`F$9z'`("<\W<@e@ei@]SyhkI6:gL-YmdQvx%
2024-07-15 15:49:54 UTC	16384	IN	Data Raw: ea 84 03 a9 5d d8 12 a6 d2 76 78 23 1e fa 89 43 87 57 48 db 02 4f 48 4a 77 83 3c cc 98 bf f6 2b c7 03 bf 66 ab 8e 90 06 2c 9b a5 84 66 0d fc 84 68 c6 49 cb 48 2c c2 f0 57 58 fd c7 34 1f df d3 d7 ed fd 38 d2 c0 d4 58 3f f0 45 9c 42 ef df 9f 2a 24 89 7e 7b 7a a9 18 36 9f 80 73 f5 e5 ac 65 d3 36 08 9d ff d7 3f 0e d1 bb 87 35 65 44 5c ba e9 f2 6f c3 39 5c d2 66 01 e1 1c 88 30 d9 cd ab e8 c8 c3 42 8f 91 5d 95 c4 45 b1 7c a5 6c 74 55 29 f0 5c 28 49 57 59 db 89 20 40 49 44 71 a8 d9 dc 11 4b 75 94 c9 61 62 99 69 4d a1 10 33 03 6e c0 38 a1 78 0c 9c b7 0c 6b e1 0f 32 1d 68 6b bd 37 49 06 52 5c 01 14 83 a3 55 23 6b ac 95 39 0a 40 48 26 7f 3e 50 43 aa e6 9f 8d ce 1c f0 dd 05 5c 6a 7b 6f ff b4 24 33 33 6c b3 49 f6 a3 ef 79 ba a9 82 44 bb 6d f8 38 15 e9 0b b0 ec d4 ba Data Ascii: ]vx#CWHOHJw<+f,fhIH,WX48X?EB*$~{z6se6?5eD\o9\f0B]E\|ltU)\(IWY @IDqKuabiM3n8xk2hk7IR\U#k9@H&>PC\j{o$33lIyDm8
2024-07-15 15:49:54 UTC	1076	IN	Data Raw: d6 66 10 a2 80 90 36 23 67 cc 3f 74 b4 d6 b6 78 1e 4f 26 a9 97 08 24 b8 4b d7 e5 1e 0c 4c 79 9d 71 6b 39 d8 5b da d1 07 44 ee fb d0 b4 2a 8e 8b 58 e8 32 bc ee 76 2e af a4 ce fc 28 6a 49 c2 1f 05 a9 1b 04 37 77 0e 5f 7a 95 96 d3 9d eb b7 1d 69 76 a0 42 f1 45 cf 9b 5e ef 51 15 a0 7a ab 89 cc fc 40 d1 b7 29 69 db ac a9 29 bd 99 47 91 b9 08 36 c0 e5 0b df 26 0a 06 2c 2d 52 99 ac 40 c4 d7 b3 10 3a 61 62 ef b0 ad 25 9e 64 0c e8 9b 47 00 71 c3 22 d2 b3 16 f1 4b 13 9b 61 c9 f3 f2 43 de 97 23 70 0f e1 f6 20 16 bf 5b 4f ac 51 8b 92 a6 90 80 dc b4 4e 1d a2 aa 08 e6 6f 0d 8d b4 7f 2f 9b 9e e2 34 6a c7 89 9b 7f ea c1 32 fe 9d e6 7c 40 f6 da bb 3e 4a 23 01 f1 4c 12 21 a9 05 06 d3 cf 60 97 08 06 b1 eb 09 0c 4d 92 95 fd b7 f4 f2 00 94 7b 87 70 a4 dc 42 b1 9c 67 e9 ce 02 Data Ascii: f6#g?txO&$KLyqk9[D*X2v.(jI7w_zivBE^Qz@)i)G6&,-R@:ab%dGq"KaC#p [OQNo/4j2\|@>J#L!`M{pBg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.6	65132	18.245.206.203	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:54 UTC	386	OUT	GET /st_zuqDuEpnkgCElcsn/8?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:54 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 40024 Connection: close Date: Mon, 15 Jul 2024 04:03:18 GMT x-amzn-RequestId: 7d90613e-71e9-475b-bc4e-5772bd99acdb Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66949f7d-23b17c920df07e74501747f6;parent=31e1b8b3c5d89a0e;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 fde2aef68e69b880ea1fac26ee454b6e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: K076zfB2ytm4Ikvit7rcLOrOMqqOeKjVXn-p36jC9L8wYdZctMN7fA== Age: 42395
2024-07-15 15:49:54 UTC	16384	IN	Data Raw: 52 49 46 46 50 9c 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 bb 02 00 41 4c 50 48 d1 6b 00 00 01 1c 86 01 90 84 81 40 fd ff e6 74 b3 0f 22 62 02 b0 1a e8 05 68 23 32 33 49 d8 92 56 12 b4 93 cc d8 12 7a d5 d6 99 9f f1 9d 96 f4 2b 47 b8 3b 6b de f2 94 b6 fd ad 54 92 30 78 d2 48 46 91 44 fa 06 70 9d a3 33 52 99 c9 04 80 ae 3f 5f da 24 25 e9 01 24 d9 7e f1 d7 13 d7 34 52 4b 51 55 6c b7 10 c1 bb 6a 0d a0 49 46 3c e8 39 50 da ff cf 90 24 fd 23 22 6b ec eb ac 6d bf 03 e3 66 e3 6e 7b b7 b1 b6 6d db bb 6f c2 36 4f 66 63 59 c8 a7 35 9d 39 4f 64 c4 3f bf ff 4b 44 48 80 64 bb 6d 1b 81 9d f8 52 04 57 28 d0 aa 50 a6 3d d4 68 db 3a f6 56 a3 f6 87 a8 b6 ed 36 4d fa d5 b6 7d db 24 6d 3e f6 da b6 6d db b6 6d db b6 6d e5 fd de 31 de e7 9c 7d ce f3 7c e8 Data Ascii: RIFFPWEBPVP8XALPHk@t"bh#23IVz+G;kT0xHFDp3R?_$%$~4RKQUljIF<9P$#"kmfn{mo6OfcY59Od?KDHdmRW(P=h:V6M}$m>mmm1}\|
2024-07-15 15:49:54 UTC	16384	IN	Data Raw: d7 e2 b7 fa 46 47 fe da d3 56 3a 42 23 c1 12 de d2 be 1c dc cb d5 2d 8a 12 9d d8 4c 53 4b 2b a8 63 17 0d 23 ec 80 98 a1 c1 74 a4 49 41 c8 50 08 22 9a 50 93 82 c4 08 88 8c 36 20 92 39 f6 ea c7 bf b0 06 11 91 f4 4f 32 58 ff b2 67 7f 58 d8 d8 38 ff db a7 2e db 08 82 eb 3a ab bb 31 77 21 9d 6a f8 c8 85 74 44 78 c2 a7 89 22 a4 85 66 a1 4d 60 00 ce ea 2a 35 99 a5 29 08 75 69 75 82 2a 49 41 fa f2 d0 60 5d 02 4d 4a 62 10 01 73 92 b4 6a 39 46 40 64 e6 9a 3d ce b8 d5 0a 44 24 75 5d 9c ff 16 61 b9 5c 9a d8 df 89 75 d8 ff 2d be a7 2b 59 e8 48 68 b3 42 4f a6 2c ab 80 33 ba 82 19 41 c0 57 28 03 53 10 de 01 01 d5 ee dd c9 5c 04 c9 41 4c 0a d2 df fc ea 06 09 39 c8 c8 51 20 94 cd 49 f2 aa e5 29 b1 89 95 04 44 6a 0f ba e8 be f7 30 88 64 b7 29 f7 3b 9e 5b 3c 8c c0 5a 7d cd Data Ascii: FGV:B#-LSK+c#tIAP"P6 9O2XgX8.:1w!jtDx"fM`5)uiuIA`]MJbsj9F@d=D$u]a\u-+YHhBO,3AW(S\AL9Q I)Dj0d);[<Z}
2024-07-15 15:49:54 UTC	5608	IN	Data Raw: 6d ae 8d a3 41 16 2c c8 5e 9a 40 78 39 69 48 96 4f bd ef fb 0b e6 d5 9c d5 a1 2e 4b 15 0d cb 16 87 15 73 0b 09 56 ed 43 16 fc 22 b3 0f 30 51 56 2d 37 66 8e cc 67 3f 29 92 78 8f 12 be ca ae da 06 80 02 67 72 a4 a9 c1 cd 44 e0 51 a9 2c c6 5b f9 91 cc af 30 94 00 23 2b f9 ab df 9f 2d d1 c3 3f cb 90 08 b5 d9 05 f1 84 36 3a df 8c 37 f6 b8 12 2c 69 ab 70 2d 9a bb 63 9e 1a 72 20 f6 14 9f ff 75 d0 07 a7 af 8c da e4 96 28 05 1a f0 f9 00 3f f6 7e 85 07 97 73 27 8a 3c dd 42 12 b7 80 e8 fe 51 5d db a0 8c 1a a7 a1 0b 58 a5 31 d7 3b 9c 86 6d bd 33 4a 2b ce f5 9a 2f 2f 09 4f a3 1c 99 f5 43 27 b1 72 c3 9e 85 ad 2d 3f d6 00 0e 3f e9 dc a7 f0 65 50 70 1b 13 a4 10 7f 48 d9 33 d5 b7 fd 21 49 7e 96 4c 03 2e cb 7f 2a e7 12 c3 ac 0d ce a3 c0 6f 42 e4 ad 36 50 2b 8a 83 cd 69 bc Data Ascii: mA,^@x9iHO.KsVC"0QV-7fg?)xgrDQ,[0#+-?6:7,ip-cr u(?~s'<BQ]X1;m3J+//OC'r-??ePpH3!I~L.*oB6P+i
2024-07-15 15:49:54 UTC	1648	IN	Data Raw: 9a 7d a9 de 34 37 9b d1 45 3e 74 b8 b0 74 66 d9 bd f2 a8 69 de c6 5f cc 48 bb e0 f3 35 90 00 0c a0 81 2c d6 95 5b 08 11 97 51 ef cc 64 4c 93 a9 23 ef c9 ed 0f 86 35 1d bf 45 3f fd ed d9 52 d5 58 57 f2 dd fd 8a 0d 11 7f 0d 97 3a d9 d1 c3 e9 81 5f 56 f7 21 a8 a1 d0 2a 19 9f b6 9c 50 24 79 48 b3 ce 8e 82 96 b4 ef 29 1d 07 58 c3 8d 67 72 4d 14 e0 14 0a a0 12 93 a9 9a 83 55 3c 9e 6b 6a 39 a3 ec 59 a2 fa 36 5d 5e 16 4b ff 60 57 5b 0a 9b b6 2e ad b2 f4 91 d0 58 a2 bb d4 94 df b3 bb 0c aa 4f 8c 1c d2 ab b1 4b eb 37 23 a9 bc ba 25 13 4b 4f f8 5f b2 a7 b7 39 50 a6 90 af 30 d0 7c aa 05 74 1e d8 43 6b 5f d5 40 38 a0 4e b4 99 71 16 cd b5 35 c0 79 02 4b d5 36 f0 6d 39 7d a0 98 4a 61 23 19 d5 47 9b 04 74 ba b1 1f b8 25 a3 68 6c fe d2 21 ec f1 c6 fe e2 85 92 0e 06 27 9a Data Ascii: }47E>ttfi_H5,[QdL#5E?RXW:_V!*P$yH)XgrMU<kj9Y6]^K`W[.XOK7#%KO_9P0\|tCk_@8Nq5yK6m9}Ja#Gt%hl!'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	65135	18.245.206.203	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:54 UTC	386	OUT	GET /st_McLyNmihmZpQwQyb/5?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:55 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 15986 Connection: close Date: Mon, 15 Jul 2024 01:50:15 GMT x-amzn-RequestId: 79244220-3678-415c-b81f-d59ec33364f6 Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66948051-70e02fe14c04e4344f893eeb;parent=79ce0565371739dc;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 87cf72c437234cbf39f4ff898bdb2088.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: K9kbMZSiFWoxmhMYA0SPZK7DrVsTqDJUtI3oeDAe7C880L8zrNxPcQ== Age: 50380
2024-07-15 15:49:55 UTC	15847	IN	Data Raw: 52 49 46 46 6a 3e 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 bb 02 00 41 4c 50 48 37 27 00 00 01 1c 05 6d db 48 c9 8e 3f ea 6d f7 03 88 88 09 88 d3 be 1f eb c4 67 41 65 da 55 ca 38 68 01 e8 b9 dd 8d ec 22 7b 42 3c 8c 72 a6 65 bf 8a 4f 47 39 15 e7 c7 e2 8e 45 df f7 80 6d 9b 22 a9 f9 ff dd 55 d5 b3 2e 68 1c 7d 83 c5 71 e2 58 dc dd dd dd 83 7b dc f5 75 24 46 5c 71 89 bb bb e2 b0 79 13 64 59 67 d9 e9 ee 7a 8e a3 fb a9 ea 9a 59 d8 8f cc f1 f9 10 11 b2 68 db aa da 6a 91 d0 6b 6e da b1 0f 23 10 c4 23 72 fa f8 a1 ad ed 93 21 4f fa 65 66 55 63 66 d6 b6 6d 1d da b8 03 7b 0f 6d db 38 9a d9 5b d0 e9 5e c1 9e da b6 8d b1 bb 06 5d 95 11 51 31 8a fc cf 13 11 01 89 91 24 47 4a ae b4 78 a8 cd c1 b3 cc 4d 61 3e 72 b4 ed 6d 23 07 94 48 85 c9 39 ad d3 69 Data Ascii: RIFFj>WEBPVP8XALPH7'mH?mgAeU8h"{B<reOG9Em"U.h}qX{u$F\qydYgzYhjkn##r!OefUcfm{m8[^]Q1$GJxMa>rm#H9i
2024-07-15 15:49:55 UTC	139	IN	Data Raw: 41 b9 a1 fc 33 ac 77 32 80 aa 01 82 20 24 d1 0e 7b 61 15 0f 3a 1b 8b e3 99 31 7b d1 08 09 f9 b5 d5 7d 0a 16 1f 4a 70 49 e4 49 2f 87 1b 6a af ea 48 00 00 00 00 12 c1 4e e7 74 01 00 00 1e ac 8f 39 3b 15 c8 4b de e4 5d ec af 88 76 83 81 ab 4f cb 6e ad e4 4c 24 8d e9 22 12 7f 39 e6 f0 9a db f7 3c 7e 87 10 f0 05 e3 8c 00 6c a2 55 de 4e c3 d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: A3w2 ${a:1{}JpII/jHNt9;K]vOnL$"9<~lUN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	65134	18.245.206.203	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:54 UTC	386	OUT	GET /st_WSDCBUQTPPjxTZvb/2?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:55 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 13584 Connection: close Date: Mon, 15 Jul 2024 09:48:27 GMT x-amzn-RequestId: 8aab461e-1634-49bc-985b-9b1d014913da Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-6694f067-2784061b501f8a9e00283491;parent=35a54573c988042d;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 c57fa457bd748a6a32e4c903c084c08e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: F_o0mON5Km8PzMPknwqY-8-0KJN1GIHwrVN1aqK6s12y2C0Ez2Rl1w== Age: 21687
2024-07-15 15:49:55 UTC	13584	IN	Data Raw: 52 49 46 46 08 35 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 55 02 00 41 4c 50 48 8c 21 00 00 01 14 c6 6d 1b 39 92 d5 7f d7 3b d8 74 f9 5e 11 31 01 f9 f6 3d dc 33 b4 6e ac 77 0b c3 51 37 13 b0 07 cd c6 2a 08 08 88 e0 fe f4 0a 02 15 66 47 05 2c ec 8a ed 26 bd 40 ec df 22 01 0a c4 d1 6c 6a 67 4f b6 ee e9 dd eb dd e7 70 7f 50 3c d0 d6 a6 48 6e b4 6d 57 44 64 56 83 9a 04 6d 12 6b 2c 32 93 c0 2c 32 33 33 c3 f0 88 46 23 86 96 cc cc cc cc 4c 22 33 33 c9 9e b1 98 b1 d5 a0 a6 aa cc 88 7b ad ca 3b 22 b3 aa a5 79 a0 1f 88 08 59 b4 6d 55 6d b5 89 e4 9a a4 1d 7b 9f 1b 10 f0 08 a7 af 1f 4a da f6 26 92 24 c9 10 91 59 55 cd dc 7d 83 9e f5 1c 80 19 f6 cc 27 60 66 66 c6 35 5e 82 e7 04 cc cc 0c cb c9 ca f0 f3 44 86 e5 e8 c1 d0 1f 9d ad 88 80 c4 b6 91 23 Data Ascii: RIFF5WEBPVP8XUALPH!m9;t^1=3nwQ7*fG,&@"ljgOpP<HnmWDdVmk,2,233F#L"33{;"yYmUm{J&$YU}'`ff5^D#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	65136	18.245.206.203	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:54 UTC	386	OUT	GET /st_cdJoZDlmunztgvLx/3?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:55 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 14258 Connection: close Date: Mon, 15 Jul 2024 04:03:15 GMT x-amzn-RequestId: 576bd603-be36-499d-84c3-1edfda01a450 Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66949f7d-1068599b31eb315817180136;parent=63345c28f8840a91;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 c979c3e583fed64b596466c844d47be2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: 939s0r1LKeWXhE1TVw7-mUrWRjKlPsXc8BuSUWiG36bXtVcWR0Iwjw== Age: 42399
2024-07-15 15:49:55 UTC	14258	IN	Data Raw: 52 49 46 46 aa 37 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 1b 02 00 41 4c 50 48 d4 21 00 00 01 14 c7 6d 23 39 52 49 f9 67 bd 3d 7e 77 cf bc 22 62 02 f2 03 15 e1 28 b2 90 3d c2 75 d2 a6 e6 78 c2 c4 0e 71 18 a0 8f 71 01 e9 1d 92 d9 29 99 28 28 b0 6e be bd 28 45 02 92 7a 95 4d 3a 04 b9 56 16 99 af a2 02 15 d2 ae 96 83 d4 32 9a 4d 95 89 d9 8a b9 d9 d5 3c a2 2c 94 d3 b3 e7 12 f6 f8 73 45 92 6d db aa 9d 9c 77 5f dc f3 04 a9 c6 3d e9 03 da 2a 1a e0 4e d5 3a c0 48 09 eb 85 bb c6 a5 15 50 84 2f 67 1f de 58 11 e1 86 6d 1b 49 62 76 66 91 c5 cd 55 53 ee 93 7d 2a ca b6 6d ab b1 9b 73 75 a5 a2 07 a1 a6 a9 15 ec 31 33 73 fa dc 72 3e c0 cc 10 66 4e 7e 20 ff c0 cc d0 63 66 e6 c4 ec e7 d4 2b 99 4a 77 1f 90 ae a5 1a 19 15 11 92 d8 46 72 24 29 72 b6 c7 Data Ascii: RIFF7WEBPVP8XALPH!m#9RIg=~w"b(=uxqq)((n(EzM:V2M<,sEmw_=N:HP/gXmIbvfUS}msu13sr>fN~ cf+JwFr$)r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	65137	18.245.206.203	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:55 UTC	386	OUT	GET /st_YamYHUIqgrxdLNhe/9?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:55 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 21116 Connection: close Date: Mon, 15 Jul 2024 04:03:17 GMT x-amzn-RequestId: 38d6f54a-5133-4b33-a198-39a8058bf56a Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66949f7d-54b560ca79653400475b3975;parent=410a6c910821168e;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 c72ddc350eba084cc5efeb61f68b51c4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: CF8wni4cpL4JlqOyc3uYZnWNJGu43zc0E8iBg6qgiSN-eoKrPk7MZQ== Age: 42399
2024-07-15 15:49:55 UTC	15847	IN	Data Raw: 52 49 46 46 74 52 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 bb 02 00 41 4c 50 48 b2 38 00 00 01 1c 05 6d 1b 39 69 af fc 49 ff 1e 00 22 62 02 78 50 48 12 ea ee 90 04 20 89 bd 1a 97 5a 6f e0 76 1f 3b ef c9 6c 62 14 36 67 e4 24 d9 e1 61 b6 e1 b4 c0 2e 83 7b 0f 3b c9 99 df 6a 58 fd 1d 55 3d 1d ac aa e8 3c 5d 53 96 b6 dd b4 ed fc 63 8c b9 bc d6 46 a5 6b db c9 05 98 3d db b6 6d a7 95 5e ba 66 cb c9 75 d8 b6 b5 11 4e fc 07 8b 55 63 8d 53 f5 7d 67 9d 3f 22 20 31 6e e3 48 2a 63 ba 37 63 b7 b1 f7 eb 74 d1 07 df db b6 9d 8d ff ff 5f 67 9a 36 4d cd a4 6d 6a 8c fd b4 ed 97 6d db 36 16 5f 6b b6 f1 07 d8 b6 fd b4 1f 78 d9 e6 b4 bd b7 ed be ce eb 4e 3a af d7 76 67 26 79 2c 44 04 2d 06 54 2a 49 96 c0 4a 01 e2 0d 49 79 fb 61 f7 f8 d7 27 fe f0 ff 53 ec Data Ascii: RIFFtRWEBPVP8XALPH8m9iI"bxPH Zov;lb6g$a.{;jXU=<]ScFk=m^fuNUcS}g?" 1nHc7ct_g6Mmjm6_kxN:vg&y,D-TIJIya'S
2024-07-15 15:49:55 UTC	5269	IN	Data Raw: 6b e5 69 aa cb 8e be dc 42 a3 03 52 ff 18 12 2d dc 8b 01 10 a8 db 6e ee e6 9c 50 78 c9 66 7a e8 7b 10 d3 9d 86 36 91 41 e7 94 c2 59 81 5d 50 17 5c 11 4c 94 4b 8d 74 dd 3a 5e 3e 25 33 d8 7f 13 a5 8f ac c3 d6 7f de 05 d3 6b 78 cf cf 0f 1f 6c 1a fd 46 01 60 8f 71 20 cc ad 76 6c a3 10 9c 19 ea 3a 14 2b 5a a5 41 c7 d8 4f c6 2c 87 5c 2d 5c 87 99 21 86 aa 2a e5 63 d9 35 da e9 08 c8 4c 54 dd db d2 0c ba cf 04 3b 83 47 3b 6d ef 63 2c c3 bb 76 75 23 67 10 ab 24 b5 26 c1 54 37 80 8f 54 c7 38 14 2e 73 42 02 0d 2b f9 a6 92 5e 10 90 26 70 ab 3e 55 05 4b 24 4e 1b ab ee 48 78 75 af a3 b2 44 05 86 c4 ff b3 e6 0d 90 48 a3 41 a0 92 dc 00 b7 d9 2f 03 47 55 de 9d 4d 02 5e ec 64 0c 46 c3 bf 12 ac b5 4f 1d 90 3e e3 97 57 d2 e1 8f 28 48 a7 7a b1 99 94 2b e2 32 d8 c8 b7 2c 2f 71 Data Ascii: kiBR-nPxfz{6AY]P\LKt:^>%3kxlF`q vl:+ZAO,\-\!*c5LT;G;mc,vu#g$&T7T8.sB+^&p>UK$NHxuDHA/GUM^dFO>W(Hz+2,/q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.6	65139	18.245.206.203	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:55 UTC	386	OUT	GET /st_xdCTWzCYkQXYraKJ/2?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:55 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 11784 Connection: close Date: Mon, 15 Jul 2024 04:03:16 GMT x-amzn-RequestId: 9e673882-aa23-4ef6-a9b1-69b0d5c939db Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66949f7d-091b4ec903f93f596be7f70d;parent=2542b72b18c3485f;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 7c93ea6c9a104f7686467d54f1d9ce02.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: WE-X2t1shysQPzpbDw2oZrm2et8h80i7AHFXJI4Wtv7D7AExocIh8Q== Age: 42399
2024-07-15 15:49:55 UTC	11784	IN	Data Raw: 52 49 46 46 00 2e 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 e1 01 00 41 4c 50 48 47 1e 00 00 01 14 c7 6d 23 39 92 54 f9 67 3d 16 dd 7b f6 15 11 13 40 77 bf c0 10 80 a8 51 51 2a ab e6 bc d4 18 92 18 56 58 6d 3f 51 cb 65 77 48 82 6a 9d 2c 71 85 52 48 01 32 87 08 38 2f 02 46 05 08 fb 75 9c 0e a3 a0 76 18 27 73 8a 2f ba de a3 ac cc d3 96 a5 c7 3c a5 fd fe 3c 29 48 6b db 3e 43 9e f3 56 55 f7 68 37 b6 6d db b6 0f 9d b3 e4 0b 38 6b db fc 02 39 b5 6d e7 c8 b6 f9 c7 7a 67 b6 a7 2b 9a ae b7 7b aa 73 cd fc 6a 11 11 92 d8 46 72 24 29 a2 5d f5 ee dd 65 6a bd ab ee b8 fd c9 8d 24 59 b6 95 b9 db 5f 00 09 37 30 00 4b d0 3e 5e 80 b6 4a 38 88 0b 48 48 58 01 53 3d ef 68 3f 7e 45 84 23 b7 6d 24 49 fd 01 23 99 7d 31 5a 7d f4 80 6d 9b 1a b7 f9 ff dd 33 23 Data Ascii: RIFF.WEBPVP8XALPHGm#9Tg={@wQQ*VXm?QewHj,qRH28/Fuv's/<<)Hk>CVUh7m8k9mzg+{sjFr$)]ej$Y_70K>^J8HHXS=h?~E#m$I#}1Z}m3#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.6	65138	18.245.206.203	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:55 UTC	386	OUT	GET /st_oWLFmgFHQeYRFSAt/2?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:55 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 12686 Connection: close Date: Mon, 15 Jul 2024 04:03:18 GMT x-amzn-RequestId: 265dd89d-5e2e-4c96-a5e4-b792cd59168e Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66949f7d-62cb0a2d4faeb432729feccb;parent=15723a062c9456dd;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 964ce500d5725709d138a8248f208fc2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: PMCSruREK9a9QQemAqlRdvrrQmWk2N0s0DaVAh9zs3sfVSPL__wWIA== Age: 42397
2024-07-15 15:49:55 UTC	9594	IN	Data Raw: 52 49 46 46 86 31 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 e1 01 00 41 4c 50 48 d4 21 00 00 01 14 c5 6d 23 29 49 ff 65 1f 33 bc 22 62 02 78 95 06 02 06 da 9d 35 47 20 8b ae 25 6a 26 bd 5b bf 17 93 e4 81 d2 b7 82 22 31 a5 6b 89 cb b8 0e 26 35 ed 6a 07 1d ee a3 a7 b4 6d 9b 21 c9 fa 22 33 b2 ed de cd 9c 73 56 b6 7f 80 6d db de da b6 f1 0b b4 f4 ca 5a 9d ad 6d fb f4 65 d7 a9 38 28 c4 17 f1 c5 75 55 bd 71 a6 bf 88 80 04 49 92 a3 a6 fa 0c 9e 9e c6 83 b4 bb 48 3f 0f d8 fe 29 92 5a ff df ab aa ba 67 d6 97 b0 b8 04 c2 61 89 bb 7b 08 9c b8 bb 7f 82 c4 05 88 1c 1c b2 10 17 20 ee 9e 40 dc dd 0d 48 0e 1a 27 1e dc 59 63 65 da de d7 d5 fd ae ea 9a d9 7c 2c c7 22 42 16 6d 5b 41 1b 5d 12 26 a4 69 d7 bd cf e1 09 fa 44 c8 27 65 7f a9 ff a8 ff a8 ff a8 Data Ascii: RIFF1WEBPVP8XALPH!m#)Ie3"bx5G %j&["1k&5jm!"3sVmZme8(uUqIH?)Zga{ @H'Yce\|,"Bm[A]&iD'e
2024-07-15 15:49:55 UTC	3092	IN	Data Raw: 74 43 a9 39 3b a2 1d 49 c9 dd 10 ea 4e 50 02 a4 3d 80 4e 13 4d 8b ff 55 1f 3f 81 db cd 5a f2 47 66 db 65 c7 fd 32 01 2a fa 3e 0d 7e b1 98 87 02 35 f9 73 4b 92 c0 50 e1 64 a0 7a 78 81 a5 a7 bb 10 ea 4e 4e e8 87 52 72 77 44 3a 93 93 bb 7a 26 b4 b0 a2 39 1d af 6c b3 9d 13 f1 35 a5 83 8b 4f 76 21 d4 9c 9d d1 0e a4 e4 ee 88 75 27 27 10 cb 08 43 a5 b2 05 48 9c e0 2a 44 e7 01 52 27 38 0a 91 39 c0 54 89 cd d3 25 3d 21 18 a8 ec 6e 45 d8 dc 8b b1 0e 02 94 00 50 26 b5 27 27 74 43 a9 39 3b a2 1d 49 c9 dc ee 15 76 6a f3 f7 75 67 40 a9 13 9c 04 f1 c8 89 49 3e b2 6c 05 a7 01 52 27 38 0a 91 39 c0 50 2e fb 66 a5 3c 34 53 82 19 b9 96 74 67 fb 0e 01 02 4f 60 9d 5f 12 04 42 06 96 9e ec 43 a9 39 3b a2 1d 49 c9 c5 77 f4 b0 23 b0 dd 76 4d 80 b4 df ef 44 e7 01 52 27 38 0a 91 39 Data Ascii: tC9;INP=NMU?ZGfe2>~5sKPdzxNNRrwD:z&9l5Ov!u''CHDR'89T%=!nEP&''tC9;Ivjug@I>lR'89P.f<4StgO`_BC9;Iw#vMDR'89

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.6	65140	18.245.206.203	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:55 UTC	386	OUT	GET /st_KuGLRGupwTcTRRKP/7?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:56 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 16062 Connection: close Date: Mon, 15 Jul 2024 04:03:15 GMT x-amzn-RequestId: 09c1a216-1d5c-4a72-882d-f5e3e23b9929 Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66949f7d-07e3ec2801e99d775b7ba3db;parent=5215f06c362eecf7;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 3573acc97218ab909da0d90d3dbfa532.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: 0u-4bgVZkmgOG3ykQvO5L3Teru0GOEuALCIa3H8AqmlPRNuVJaUo4w== Age: 42401
2024-07-15 15:49:56 UTC	15847	IN	Data Raw: 52 49 46 46 b6 3e 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 bb 02 00 41 4c 50 48 ef 26 00 00 01 ff 27 24 48 f0 ff 78 6b 44 a4 ee 39 8a db b6 71 6c 6b ff a9 73 bd fc 23 62 02 f4 60 8f af f0 64 e6 3c bd 2f 01 32 ac d9 34 b5 91 46 65 17 da 15 80 15 e9 b2 8c 50 25 ad 0a bd d5 01 49 ca 7a da fa 66 b2 4b b1 3d e4 b9 f3 25 c7 b6 ad da ca 3a f7 7d 77 4b 80 ae b6 20 00 d7 18 5c 22 70 a7 65 f9 90 8a bb 93 82 c3 b7 27 c8 17 98 eb 5e 56 44 ff 21 b1 6d e4 48 e2 74 f7 f4 4e c2 6e 5d 78 6d 4e 35 a0 63 5b 9b 22 c9 89 cc 88 8c e4 62 6e 66 66 7b 66 0f e3 cf b8 b3 90 b1 e4 31 ed 81 25 4b da 82 4c b2 d9 65 96 0a e2 9c 8c 3f fe 48 b1 fe f3 37 44 f4 1f 12 24 b9 71 9b d9 88 45 01 20 e3 17 ca f7 9d 10 e5 81 fe 3f 45 52 b3 fd fb 54 55 cf ac b0 82 c6 d1 2b 58 Data Ascii: RIFF>WEBPVP8XALPH&'$HxkD9qlks#b`d</24FeP%IzfK=%:}wK \"pe'^VD!mHtNn]xmN5c["bnff{f1%KLe?H7D$qE ?ERTU+X
2024-07-15 15:49:56 UTC	215	IN	Data Raw: 78 25 00 00 56 4f 81 72 8b 61 d4 91 2f c0 7d 6d 04 51 5a 5a 39 55 a7 b7 83 67 81 c0 6d 08 80 00 00 00 00 00 00 02 67 b6 72 a0 fa ee e4 c7 72 63 b9 31 dc 04 05 8a b4 7b 43 0f 8e c1 4f 5a bf 9b 3a 80 6b 9a 73 50 20 d4 34 c1 cd 74 9b 49 1a 9c e4 9e 47 05 72 8e e3 f0 11 b4 4f eb 02 58 01 8c 08 be ac 5a 3e 3e 38 7d e1 eb 7f cc 47 e6 da ed 4e 6f 43 a3 6b d4 e0 28 d2 c3 50 86 eb b0 cf c1 ae 04 3e df 6f 1e 75 61 ae 60 20 4d 80 4f dd 8b 85 4a 58 b3 9e ce 3e 81 7a a3 49 52 0a 15 9d eb 37 be 2e 6d 8c 05 ca 71 54 3e 2b 3d c2 8c 5b a1 96 2f 76 63 c6 2f 77 2a 4b 89 2e a4 48 ec f3 77 52 49 a8 dc 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: x%VOra/}mQZZ9Ugmgrrc1{COZ:ksP 4tIGrOXZ>>8}GNoCk(P>oua` MOJX>zIR7.mqT>+=[/vc/w*K.HwRI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.6	65141	18.245.206.203	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:55 UTC	386	OUT	GET /st_kaYPadHYbGttSsxI/4?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:56 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 13702 Connection: close Date: Mon, 15 Jul 2024 04:03:15 GMT x-amzn-RequestId: 224a1380-f571-4221-b004-9d94ceb6c7c0 Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66949f7d-22e7e70162f1eadc06d2b3cb;parent=578a13a7f139ee5e;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 252162a8cc054bc7eec19ebbe021d8ca.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: fTtZXW1PMJDCa-X5Eua25h_dhJP0N0OcYkFV35DVwm1S7NeBsZ4ggA== Age: 42401
2024-07-15 15:49:56 UTC	12792	IN	Data Raw: 52 49 46 46 7e 35 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 0b 02 00 41 4c 50 48 85 1f 00 00 01 14 c7 6d 23 39 92 a4 fc b3 5e 7b 33 b3 e7 5e 11 31 01 fc 0e b5 9a 4c 79 66 55 14 15 c5 f1 f0 ea 78 a6 16 47 36 1c bb 02 68 e5 70 67 37 6a 51 38 8a 87 74 aa a2 51 ce 2a 93 5a 41 d9 d5 51 8a 2e 52 0c dd ad 63 ad b3 ed 7c ce 34 7f db a9 fe 35 a5 83 6d 8f 22 c9 51 55 75 0f ee f5 ed 99 19 52 66 0a 99 21 62 08 99 d9 3e 36 33 53 ca ec dc 8f 33 66 47 cc 6c 1f e3 8c 71 67 bb bb 9e e7 66 ba 4b 35 5d 6d 90 ce a7 88 90 c4 36 92 23 49 8a f2 63 d0 1d 7b fe 6a aa 2b 77 e6 e5 8d d6 36 45 72 a3 6d 3b 23 22 b3 b9 d5 2d 96 59 f2 58 64 7b c0 20 30 8b cc 24 30 33 33 7b 3c 62 cb 2d 99 19 87 47 96 99 19 45 66 66 d2 f8 be 8d 82 b6 65 41 ab ab 5b 4d 55 99 11 d7 5a Data Ascii: RIFF~5WEBPVP8XALPHm#9^{3^1LyfUxG6hpg7jQ8tQ*ZAQ.Rc\|45m"QUuRf!b>63S3fGlqgfK5]m6#Ic{j+w6Erm;#"-YXd{ 0$033{<b-GEffeA[MUZ
2024-07-15 15:49:56 UTC	910	IN	Data Raw: 8a d7 a5 df 5c 77 98 93 cc 21 e2 3c 9f f7 74 f7 f9 13 91 73 35 85 c8 c1 82 16 74 ff 40 1d 91 79 8e 2d 1b 96 23 84 93 b5 e9 6e 53 76 7d 2e 7f ee 1f 0b 3e d9 43 74 c8 82 0e c4 c4 12 4f bc 58 8d 35 d3 f9 43 fd f9 da a5 c3 14 da 30 be cd d9 5c 08 9b 68 a1 94 95 53 c9 20 a4 7d 65 a7 10 95 11 0a 36 55 c1 4a 50 fe 31 6b 8a 99 6a a9 c2 a5 1d f0 a5 bb cc 29 0a 61 4e 54 a5 30 75 bf 7d bd 24 8b a4 61 4e 14 ad 0b bc 70 c7 b6 e7 93 98 ed 67 0d 50 cc e7 6d c4 5f e2 63 9f da 77 cf 26 9c 87 46 14 da 3c 99 ad 9e 38 f9 73 11 63 37 4f 9c 77 a6 3d 5e d0 37 a6 55 f3 72 cd b3 a0 ba 49 1b ea 47 b4 ed ef 64 7d 18 87 a5 e1 14 86 d7 50 a7 3a 20 bd b9 cb 92 e7 18 c1 27 c9 39 e5 54 2a e5 c3 64 62 f3 50 ac 4f e5 2a 04 43 10 cf c6 fa 3d 3c 1b 28 c4 31 b1 92 7f 64 ab 81 51 fa 30 24 1a Data Ascii: \w!<ts5t@y-#nSv}.>CtOX5C0\hS }e6UJP1kj)aNT0u}$aNpgPm_cw&F<8sc7Ow=^7UrIGd}P: '9TdbPOC=<(1dQ0$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.6	65142	18.245.206.203	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:49:55 UTC	386	OUT	GET /st_DpulgycoFXEXRDEk/6?darkmode=true HTTP/1.1 Host: di7r6y9oc27j.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:49:56 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/webp Content-Length: 14676 Connection: close Date: Mon, 15 Jul 2024 04:03:17 GMT x-amzn-RequestId: 43bc64c3-ca39-4024-9796-dd806d362bd5 Cache-Control: public, max-age=86400 X-Amzn-Trace-Id: root=1-66949f7d-1e02f42032db155119815e73;parent=2da300a1817d5543;sampled=0;lineage=516c7e67:0 X-Cache: Hit from cloudfront Via: 1.1 b98ad683217772a49be8a51cec374194.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LHR5-P3 X-Amz-Cf-Id: Te-Y9EOVTdhrHA49sp7wtmOg9rQ7xT_YgmB89bfLpXKpT-MNqFFcAQ== Age: 42398
2024-07-15 15:49:56 UTC	14676	IN	Data Raw: 52 49 46 46 4c 39 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 10 00 00 00 ff 03 00 0b 02 00 41 4c 50 48 15 23 00 00 01 f7 47 26 6d d3 d6 bf f5 ed 8e 88 c4 91 7c 45 51 dc b6 8d 23 ed bf 76 ae f7 7b 45 c4 04 30 ba 17 9b c5 3b 38 1b ea 70 7b 6d 7a 18 20 12 15 33 7b 0a 2d 64 c0 f1 4a ed 3e 61 38 02 65 83 9a 1c 07 18 2f f4 5f c4 1f ff 7f 8a ad c6 da f6 ad aa ee b5 b6 6f 82 c4 13 98 1c 48 88 bb 2b 81 89 7b 4e 5c 4e dc 03 24 64 c8 26 d8 86 b8 00 e3 13 77 98 b8 bb 0b 30 99 b8 2b ee ba 05 d8 b2 5a 7e 7f ac fe 55 75 75 ef c5 39 d7 d5 eb 3a d7 8e e8 bf 2c da 56 c2 c6 ba a6 b6 76 3a b3 2e e4 49 4c 42 0d b4 ef 8b 71 db b6 81 f6 df fc 92 a8 df 63 44 b0 6d db 46 10 6f 01 c5 03 7c f5 15 ca fe a5 db 7f f0 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff Data Ascii: RIFFL9WEBPVP8XALPH#G&m\|EQ#v{E0;8p{mz 3{-dJ>a8e/_oH+{N\N$d&w0+Z~Uuu9:,Vv:.ILBqcDmFo\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.6	65144	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:02 UTC	942	OUT	GET /?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 HTTP/1.1 Host: www.umso.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
2024-07-15 15:50:03 UTC	308	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=0, must-revalidate Content-Length: 118961 Content-Type: text/html;charset=utf-8 Referrer-Policy: no-referrer-when-downgrade Strict-Transport-Security: max-age=15552000 X-Frame-Options: sameorigin Date: Mon, 15 Jul 2024 15:50:02 GMT Connection: close
2024-07-15 15:50:03 UTC	878	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 6d 73 6f 2e 63 6f 6d 2f 6c 69 62 5f 4c 55 47 6f 50 69 71 58 58 6c 44 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><link rel="icon" href="https://www.umso.com/lib_LUGoPiqXXlD
2024-07-15 15:50:03 UTC	2372	IN	Data Raw: 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 3a 77 69 64 74 68 22 20 63 6f 6e 74 65 6e 74 3d 22 31 32 30 30 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 3a 68 65 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 36 33 30 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 6d 73 6f 2e 63 6f 6d 2f 6c 69 62 5f 4c 55 47 6f 50 69 71 58 58 6c 44 70 74 53 57 41 2f 36 39 6b 33 32 69 75 61 31 6a 78 72 32 75 79 6a 2e 70 6e 67 3f 77 3d 31 32 30 30 26 61 6d 70 3b 68 3d 36 33 30 26 61 6d 70 3b 66 69 74 3d 63 72 6f 70 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 Data Ascii: ><meta property="og:image:width" content="1200"><meta property="og:image:height" content="630"><meta name="twitter:image" content="https://www.umso.com/lib_LUGoPiqXXlDptSWA/69k32iua1jxr2uyj.png?w=1200&h=630&fit=crop"><link rel="canonical" href="ht
2024-07-15 15:50:03 UTC	538	IN	Data Raw: 74 6f 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 20 33 30 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 77 72 2d 6d 61 78 29 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 7d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 30 30 70 78 29 20 7b 0a 20 20 2e 77 72 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 35 70 78 3b 0a 20 20 7d 0a 7d 0a 2e 75 6d 2d 62 61 63 6b 64 72 6f 70 20 7b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 2d 31 3b Data Ascii: to; padding: 0 30px; position: relative; max-width: var(--wr-max); box-sizing: border-box;}@media only screen and (max-width: 700px) { .wr { padding: 0 15px; }}.um-backdrop { top: 0; left: 0; right: 0; bottom: 0; z-index: -1;
2024-07-15 15:50:03 UTC	4744	IN	Data Raw: 6f 72 74 61 6e 74 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 20 39 70 78 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 30 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 6b 65 79 66 72 61 6d 65 73 2d 62 61 64 67 65 46 61 64 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 33 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 33 29 2c 20 30 20 36 70 78 20 31 33 70 78 20 72 67 62 Data Ascii: ortant; height: 30px; display: flex !important; padding: 0 9px; z-index: 100; position: fixed !important; animation: keyframes-badgeFade; font-size: 13px; background: #fff !important; box-shadow: 0 1px 3px rgba(0,0,0,0.3), 0 6px 13px rgb
2024-07-15 15:50:03 UTC	5930	IN	Data Raw: 34 65 6d 3b 0a 7d 0a 2e 62 74 6e 2e 62 74 6e 2d 2d 69 63 6f 6e 20 73 76 67 2c 20 2e 62 74 6e 2e 62 74 6e 2d 2d 69 63 6f 6e 20 69 6d 67 20 7b 0a 20 20 77 69 64 74 68 3a 20 69 6e 69 74 69 61 6c 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 2e 32 65 6d 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 2d 30 2e 31 65 6d 3b 0a 7d 0a 2e 62 74 6e 3a 68 6f 76 65 72 2c 20 2e 62 74 6e 3a 68 6f 76 65 72 20 73 70 61 6e 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 62 74 6e 2e 70 72 69 6d 61 72 79 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 20 72 67 62 28 39 34 2c 20 33 34 2c 20 31 39 Data Ascii: 4em;}.btn.btn--icon svg, .btn.btn--icon img { width: initial; height: 1.2em; margin: -0.1em;}.btn:hover, .btn:hover span { text-decoration: none;}.btn.primary { color: rgb(255, 255, 255); background: linear-gradient(90deg, rgb(94, 34, 19
2024-07-15 15:50:03 UTC	7116	IN	Data Raw: 20 7b 0a 20 20 74 6f 70 3a 20 63 61 6c 63 28 35 30 25 20 2d 20 32 70 78 29 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 31 33 35 64 65 67 29 3b 0a 7d 0a 2e 75 6d 2d 6e 61 76 2d 64 72 61 77 65 72 20 2e 75 6d 2d 64 72 61 77 65 72 2d 6c 69 6e 6b 73 20 3e 20 6c 69 20 3e 20 62 75 74 74 6f 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 74 6f 70 3a 20 63 61 6c 63 28 35 30 25 20 2d 20 36 70 78 29 3b 0a 20 20 72 69 67 68 74 3a 20 32 30 70 78 3b 0a 20 20 77 69 64 74 68 3a 20 37 70 78 3b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 74 65 78 74 2d 73 65 63 6f 6e 64 61 72 79 29 3b 0a 20 20 68 65 69 67 68 74 3a 20 37 70 78 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0a 20 20 6f 70 61 63 69 74 79 3a Data Ascii: { top: calc(50% - 2px); transform: rotate(135deg);}.um-nav-drawer .um-drawer-links > li > button:before { top: calc(50% - 6px); right: 20px; width: 7px; border: 2px solid var(--color-text-secondary); height: 7px; content: ""; opacity:
2024-07-15 15:50:03 UTC	8302	IN	Data Raw: 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 7d 0a 7d 0a 3c 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 20 64 61 74 61 2d 76 65 72 73 69 6f 6e 3d 22 32 22 20 64 61 74 61 2d 63 6f 6e 74 65 6e 74 3d 22 73 65 63 74 69 6f 6e 73 22 3e 2e 5f 35 38 63 65 38 33 64 38 20 7b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 31 36 33 2c 20 31 36 33 2c 20 31 36 33 29 3b 0a 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 68 65 69 67 68 74 3a 20 37 30 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 3b 0a 20 20 2d 2d 77 72 2d 6d 61 78 3a 20 31 31 38 32 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 61 6c 69 67 Data Ascii: ex-direction: column; }}</style><style data-version="2" data-content="sections">._58ce83d8 { top: 0; left: 0; color: rgb(163, 163, 163); right: 0; height: 70px; display: flex; z-index: 99; --wr-max: 1182px; position: absolute; alig
2024-07-15 15:50:03 UTC	9488	IN	Data Raw: 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 2e 36 65 6d 3b 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 35 65 6d 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 61 63 63 65 6e 74 2d 70 72 69 6d 61 72 79 3a 20 72 67 62 28 33 31 2c 20 32 31 39 2c 20 31 39 31 29 3b 0a 7d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 35 30 30 70 78 29 20 7b 0a 20 20 2e 5f 38 63 32 33 39 35 33 61 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 35 30 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 37 Data Ascii: font-size: 15px; padding-top: 1.6em; padding-bottom: 5em; --color-accent-primary: rgb(31, 219, 191);}@media only screen and (max-width: 500px) { ._8c23953a { display: none; }}@media only screen and (min-width: 500px) and (max-width: 77
2024-07-15 15:50:03 UTC	10674	IN	Data Raw: 20 2d 2d 66 6f 6e 74 53 69 7a 65 2d 74 69 74 6c 65 3a 20 34 30 70 78 3b 0a 20 20 2d 2d 63 61 72 64 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 3a 20 72 67 62 28 36 34 2c 20 32 34 2c 20 31 32 38 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 74 65 78 74 2d 70 72 69 6d 61 72 79 3a 20 72 67 62 28 31 31 34 2c 20 39 34 2c 20 32 35 35 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 74 65 78 74 2d 73 65 63 6f 6e 64 61 72 79 3a 20 72 67 62 28 31 31 34 2c 20 39 34 2c 20 32 35 35 29 3b 0a 20 20 2d 2d 66 6f 6e 74 53 69 7a 65 2d 74 69 74 6c 65 2d 73 65 63 74 69 6f 6e 3a 20 34 30 70 78 3b 0a 7d 0a 2e 5f 32 30 32 35 32 37 63 64 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 61 72 64 2d 74 65 78 74 43 6f 6c 6f 72 53 65 63 6f 6e 64 61 72 79 29 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 Data Ascii: --fontSize-title: 40px; --card-borderColor: rgb(64, 24, 128); --color-text-primary: rgb(114, 94, 255); --color-text-secondary: rgb(114, 94, 255); --fontSize-title-section: 40px;}._202527cd { color: var(--card-textColorSecondary); display: f
2024-07-15 15:50:03 UTC	11860	IN	Data Raw: 74 70 73 3a 2f 2f 61 70 70 2e 75 6d 73 6f 2e 63 6f 6d 2f 73 69 67 6e 75 70 22 20 69 64 3d 22 64 5f 68 30 34 72 71 7a 36 30 68 66 74 22 20 63 6c 61 73 73 3d 22 5f 38 39 35 31 37 35 36 33 20 62 74 6e 22 3e 3c 73 70 61 6e 3e 53 69 67 6e 20 55 70 3c 2f 73 70 61 6e 3e 3c 73 76 67 20 77 69 64 74 68 3d 22 31 65 6d 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 20 31 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 63 6c 61 73 73 3d 22 75 6d 2d 61 72 72 6f 77 22 3e 3c 70 61 74 68 20 64 3d 22 4d 39 2e 36 20 37 48 31 61 31 20 31 20 30 20 31 20 31 20 30 2d 32 68 38 2e 36 4c 37 20 32 2e 34 41 31 20 31 20 30 20 30 20 31 20 38 2e 34 20 31 6c 34 2e 33 20 34 2e 32 63 2e 32 2e 33 2e 33 2e 35 2e 33 2e 38 Data Ascii: tps://app.umso.com/signup" id="d_h04rqz60hft" class="_89517563 btn"><span>Sign Up</span><svg width="1em" viewBox="0 0 15 12" xmlns="http://www.w3.org/2000/svg" class="um-arrow"><path d="M9.6 7H1a1 1 0 1 1 0-2h8.6L7 2.4A1 1 0 0 1 8.4 1l4.3 4.2c.2.3.3.5.3.8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.6	65149	76.76.21.164	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:04 UTC	695	OUT	GET /static/css/main.90e78f57.css HTTP/1.1 Host: nextgen-widget.vercel.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.umso.com/?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "f3ec470bd3e2d9be7615479589c21b36"
2024-07-15 15:50:04 UTC	220	IN	HTTP/1.1 304 Not Modified Cache-Control: s-maxage=31536000, immutable Date: Mon, 15 Jul 2024 15:50:04 GMT Server: Vercel X-Vercel-Cache: HIT X-Vercel-Id: iad1::6j58b-1721058604303-24f235537267 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.6	65147	40.113.110.67	443

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:04 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 62 77 67 4c 37 34 4b 47 73 55 4b 48 36 34 48 72 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 34 33 64 64 66 39 63 64 63 37 65 37 31 61 65 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: bwgL74KGsUKH64Hr.1Context: d43ddf9cdc7e71ae
2024-07-15 15:50:04 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-07-15 15:50:04 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 62 77 67 4c 37 34 4b 47 73 55 4b 48 36 34 48 72 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 34 33 64 64 66 39 63 64 63 37 65 37 31 61 65 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 5a 30 4a 6c 55 68 35 69 59 44 63 44 74 58 66 52 2b 42 73 31 6b 47 69 43 4e 41 6d 33 73 6a 45 31 4d 31 63 77 38 53 6a 2b 71 75 75 45 30 74 6f 79 48 32 77 75 56 5a 72 67 78 7a 30 6f 53 67 32 76 56 74 38 62 70 38 4c 30 49 33 32 4a 35 59 76 43 7a 76 7a 2b 68 41 4a 65 39 5a 78 6a 52 6b 41 62 48 66 54 33 76 59 74 38 4b 78 53 5a 52 Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: bwgL74KGsUKH64Hr.2Context: d43ddf9cdc7e71ae<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAZ0JlUh5iYDcDtXfR+Bs1kGiCNAm3sjE1M1cw8Sj+quuE0toyH2wuVZrgxz0oSg2vVt8bp8L0I32J5YvCzvz+hAJe9ZxjRkAbHfT3vYt8KxSZR
2024-07-15 15:50:04 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 62 77 67 4c 37 34 4b 47 73 55 4b 48 36 34 48 72 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 64 34 33 64 64 66 39 63 64 63 37 65 37 31 61 65 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: bwgL74KGsUKH64Hr.3Context: d43ddf9cdc7e71ae<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-07-15 15:50:04 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-07-15 15:50:04 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 78 33 61 62 78 59 70 73 4c 45 75 45 4c 47 36 6d 71 47 67 42 4c 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: x3abxYpsLEuELG6mqGgBLg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.6	65150	76.76.21.164	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:04 UTC	679	OUT	GET /static/js/main.b963c2e4.js HTTP/1.1 Host: nextgen-widget.vercel.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.umso.com/?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "c31084dba070a068dd086c002e87ce3e"
2024-07-15 15:50:04 UTC	220	IN	HTTP/1.1 304 Not Modified Cache-Control: s-maxage=31536000, immutable Date: Mon, 15 Jul 2024 15:50:04 GMT Server: Vercel X-Vercel-Cache: HIT X-Vercel-Id: iad1::wmjcd-1721058604615-fdc1a5ab48ea Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.6	57807	76.76.21.164	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:05 UTC	426	OUT	GET /static/js/main.b963c2e4.js HTTP/1.1 Host: nextgen-widget.vercel.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "c31084dba070a068dd086c002e87ce3e"
2024-07-15 15:50:05 UTC	220	IN	HTTP/1.1 304 Not Modified Cache-Control: s-maxage=31536000, immutable Date: Mon, 15 Jul 2024 15:50:05 GMT Server: Vercel X-Vercel-Cache: HIT X-Vercel-Id: iad1::kcwrw-1721058605331-bc0157344bad Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.6	57809	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:06 UTC	949	OUT	GET /pricing?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 HTTP/1.1 Host: www.umso.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.0.1721058585.60.0.0; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_VYY8D05ZV0=GS1.1.1721058585.1.0.1721058585.60.0.0
2024-07-15 15:50:06 UTC	307	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=0, must-revalidate Content-Length: 87511 Content-Type: text/html;charset=utf-8 Referrer-Policy: no-referrer-when-downgrade Strict-Transport-Security: max-age=15552000 X-Frame-Options: sameorigin Date: Mon, 15 Jul 2024 15:50:06 GMT Connection: close
2024-07-15 15:50:06 UTC	879	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 6d 73 6f 2e 63 6f 6d 2f 6c 69 62 5f 4c 55 47 6f 50 69 71 58 58 6c 44 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><link rel="icon" href="https://www.umso.com/lib_LUGoPiqXXlD
2024-07-15 15:50:06 UTC	2372	IN	Data Raw: 77 2e 75 6d 73 6f 2e 63 6f 6d 2f 6c 69 62 5f 4c 55 47 6f 50 69 71 58 58 6c 44 70 74 53 57 41 2f 36 67 32 75 33 7a 70 30 31 65 36 76 74 7a 6e 79 2e 70 6e 67 3f 77 3d 31 32 30 30 26 61 6d 70 3b 68 3d 36 33 30 26 61 6d 70 3b 66 69 74 3d 63 72 6f 70 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 6d 73 6f 2e 63 6f 6d 2f 70 72 69 63 69 6e 67 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 65 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 6d 73 6f 2e 63 6f 6d 2f 70 72 69 63 69 6e 67 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 6c 61 6e 67 3d 22 66 72 22 20 68 72 65 66 3d Data Ascii: w.umso.com/lib_LUGoPiqXXlDptSWA/6g2u3zp01e6vtzny.png?w=1200&h=630&fit=crop"><link rel="canonical" href="https://www.umso.com/pricing"><link rel="alternate" hreflang="en" href="https://www.umso.com/pricing"><link rel="alternate" hreflang="fr" href=
2024-07-15 15:50:06 UTC	538	IN	Data Raw: 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 30 30 70 78 29 20 7b 0a 20 20 2e 77 72 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 35 70 78 3b 0a 20 20 7d 0a 7d 0a 2e 75 6d 2d 62 61 63 6b 64 72 6f 70 20 7b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 2d 31 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 7d 0a 2e 75 6d 2d 62 61 63 6b 64 72 6f 70 20 3e 20 76 69 64 65 6f 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 62 6a 65 63 74 2d 66 69 74 3a 20 63 6f 76 65 72 3b 0a 7d 0a 2e 75 6d 2d 62 61 63 6b 64 72 6f 70 20 Data Ascii: reen and (max-width: 700px) { .wr { padding: 0 15px; }}.um-backdrop { top: 0; left: 0; right: 0; bottom: 0; z-index: -1; position: absolute;}.um-backdrop > video { width: 100%; height: 100%; object-fit: cover;}.um-backdrop
2024-07-15 15:50:06 UTC	4744	IN	Data Raw: 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 6b 65 79 66 72 61 6d 65 73 2d 62 61 64 67 65 46 61 64 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 33 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 33 29 2c 20 30 20 36 70 78 20 31 33 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 29 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 Data Ascii: animation: keyframes-badgeFade; font-size: 13px; background: #fff !important; box-shadow: 0 1px 3px rgba(0,0,0,0.3), 0 6px 13px rgba(0,0,0,0.1); transition: all 0.2s ease-in-out; align-items: center; font-family: -apple-system, BlinkMacSyst
2024-07-15 15:50:06 UTC	5930	IN	Data Raw: 2e 62 74 6e 3a 68 6f 76 65 72 20 73 70 61 6e 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 62 74 6e 2e 70 72 69 6d 61 72 79 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 20 72 67 62 28 39 34 2c 20 33 34 2c 20 31 39 30 29 20 30 25 2c 20 72 67 62 28 31 31 35 2c 20 33 38 2c 20 32 33 39 29 20 31 30 30 25 29 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 33 70 78 20 38 70 78 20 30 70 78 20 72 67 62 61 28 31 31 37 2c 20 31 38 2c 20 31 34 35 2c 20 30 2e 32 29 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 28 31 31 35 2c 20 33 38 2c Data Ascii: .btn:hover span { text-decoration: none;}.btn.primary { color: rgb(255, 255, 255); background: linear-gradient(90deg, rgb(94, 34, 190) 0%, rgb(115, 38, 239) 100%); box-shadow: 0px 3px 8px 0px rgba(117, 18, 145, 0.2); border-color: rgb(115, 38,
2024-07-15 15:50:06 UTC	7116	IN	Data Raw: 74 6f 70 3a 20 63 61 6c 63 28 35 30 25 20 2d 20 36 70 78 29 3b 0a 20 20 72 69 67 68 74 3a 20 32 30 70 78 3b 0a 20 20 77 69 64 74 68 3a 20 37 70 78 3b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 74 65 78 74 2d 73 65 63 6f 6e 64 61 72 79 29 3b 0a 20 20 68 65 69 67 68 74 3a 20 37 70 78 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 36 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 2d 34 35 64 65 67 29 3b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 77 69 64 74 68 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 2d 62 Data Ascii: top: calc(50% - 6px); right: 20px; width: 7px; border: 2px solid var(--color-text-secondary); height: 7px; content: ""; opacity: 0.6; position: absolute; transform: rotate(-45deg); border-top-width: 0; border-right-width: 0; border-b
2024-07-15 15:50:06 UTC	8302	IN	Data Raw: 30 3b 0a 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 31 36 33 2c 20 31 36 33 2c 20 31 36 33 29 3b 0a 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 68 65 69 67 68 74 3a 20 37 30 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 3b 0a 20 20 2d 2d 77 72 2d 6d 61 78 3a 20 31 31 38 32 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 76 61 72 28 2d 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 62 6f 72 64 65 72 2d 6e 6f 72 6d 61 6c 29 3b 0a 20 20 2d 2d 63 6f 6c 6f 72 2d 62 6f 72 64 65 72 2d 6e 6f 72 6d 61 6c 3a 20 72 67 Data Ascii: 0; color: rgb(163, 163, 163); right: 0; height: 70px; display: flex; z-index: 99; --wr-max: 1182px; position: absolute; align-items: center; border-bottom: var(--border-width) solid var(--color-border-normal); --color-border-normal: rg
2024-07-15 15:50:06 UTC	9488	IN	Data Raw: 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 47 2d 56 59 59 38 44 30 35 5a 56 30 22 20 64 61 74 61 2d 63 73 2d 63 61 74 65 67 6f 72 79 3d 22 70 65 72 66 6f 72 6d 61 6e 63 65 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 61 73 79 6e 63 3d 22 22 20 64 61 74 61 2d 63 73 2d 63 61 74 65 67 6f 72 79 3d 22 70 65 72 66 6f 72 6d 61 6e 63 65 22 3e 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 3d 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 7c 7c 5b 5d 2c 67 74 61 67 28 22 6a 73 22 2c 6e 65 77 20 44 61 74 65 29 2c 67 74 61 67 28 22 63 6f 6e 66 69 67 22 2c 22 47 2d 56 59 59 Data Ascii: .googletagmanager.com/gtag/js?id=G-VYY8D05ZV0" data-cs-category="performance"></script><script async="" data-cs-category="performance">function gtag(){dataLayer.push(arguments)}window.dataLayer=window.dataLayer\|\|[],gtag("js",new Date),gtag("config","G-VYY
2024-07-15 15:50:06 UTC	10674	IN	Data Raw: 6e 3e 3c 2f 61 3e 3c 75 6c 20 63 6c 61 73 73 3d 22 5f 39 63 65 66 30 35 33 36 22 3e 3c 6c 69 20 63 6c 61 73 73 3d 22 5f 62 32 34 34 30 30 30 33 22 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 31 65 6d 22 20 76 69 65 77 42 6f 78 3d 22 30 20 39 36 20 39 36 30 20 39 36 30 22 20 77 69 64 74 68 3d 22 31 65 6d 22 20 63 6c 61 73 73 3d 22 5f 63 32 36 61 66 64 66 34 20 75 6d 73 6f 2d 6d 69 6e 69 49 63 6f 6e 2d 63 68 65 63 6b 22 3e 3c 70 61 74 68 20 64 3d 22 4d 33 37 38 20 38 33 34 20 31 33 30 20 35 38 36 6c 36 38 2d 36 38 20 31 38 30 20 31 38 30 20 33 38 33 2d 33 38 33 20 36 38 20 36 38 2d 34 35 31 20 34 35 31 5a 22 20 66 69 6c 6c 3d 22 63 75 72 72 65 6e 74 43 6f Data Ascii: n></a><ul class="_9cef0536"><li class="_b2440003"><svg xmlns="http://www.w3.org/2000/svg" height="1em" viewBox="0 96 960 960" width="1em" class="_c26afdf4 umso-miniIcon-check"><path d="M378 834 130 586l68-68 180 180 383-383 68 68-451 451Z" fill="currentCo
2024-07-15 15:50:06 UTC	11860	IN	Data Raw: 3e 3c 2f 6c 69 3e 3c 6c 69 20 63 6c 61 73 73 3d 22 5f 62 32 34 34 30 30 30 33 22 3e 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 31 65 6d 22 20 76 69 65 77 42 6f 78 3d 22 30 20 39 36 20 39 36 30 20 39 36 30 22 20 77 69 64 74 68 3d 22 31 65 6d 22 20 63 6c 61 73 73 3d 22 5f 63 32 36 61 66 64 66 34 20 75 6d 73 6f 2d 6d 69 6e 69 49 63 6f 6e 2d 63 68 65 63 6b 2d 63 69 72 63 6c 65 22 3e 3c 70 61 74 68 20 64 3d 22 6d 34 31 39 20 37 37 33 20 32 39 34 2d 32 39 34 2d 36 36 2d 36 36 2d 32 32 38 20 32 32 38 2d 31 31 31 2d 31 31 31 2d 36 35 20 36 36 20 31 37 36 20 31 37 37 5a 6d 36 31 2e 31 33 38 20 32 32 38 71 2d 38 38 2e 31 33 38 20 30 2d 31 36 35 2e 36 32 35 2d 33 33 Data Ascii: ></li><li class="_b2440003"><svg xmlns="http://www.w3.org/2000/svg" height="1em" viewBox="0 96 960 960" width="1em" class="_c26afdf4 umso-miniIcon-check-circle"><path d="m419 773 294-294-66-66-228 228-111-111-65 66 176 177Zm61.138 228q-88.138 0-165.625-33

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.6	57808	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:06 UTC	943	OUT	POST /api/view HTTP/1.1 Host: www.umso.com Connection: keep-alive Content-Length: 161 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.umso.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.umso.com/pricing?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058605.40.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058605.40.0.0
2024-07-15 15:50:06 UTC	161	OUT	Data Raw: 7b 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 70 61 74 68 22 3a 22 2f 70 72 69 63 69 6e 67 22 2c 22 69 73 50 72 69 6f 72 42 6c 6f 63 6b 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 75 74 6d 5f 73 6f 75 72 63 65 22 3a 22 75 73 69 74 65 22 2c 22 75 74 6d 5f 6d 65 64 69 75 6d 22 3a 22 62 74 6d 62 61 64 67 65 22 2c 22 75 74 6d 5f 63 61 6d 70 61 69 67 6e 22 3a 22 66 72 65 65 22 2c 22 75 74 6d 5f 74 65 72 6d 22 3a 22 78 61 69 36 6c 31 70 69 62 6e 78 65 66 67 74 32 22 7d Data Ascii: {"referrer":"","path":"/pricing","isPriorBlockingEnabled":false,"utm_source":"usite","utm_medium":"btmbadge","utm_campaign":"free","utm_term":"xai6l1pibnxefgt2"}
2024-07-15 15:50:06 UTC	372	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.umso.com Content-Length: 16 Content-Type: application/json;charset=utf-8 Date: Mon, 15 Jul 2024 15:50:06 GMT Set-Cookie: usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; Path=/; Domain=www.umso.com; Expires=Tue, 15 Jul 2025 15:50:06 GMT; HttpOnly; Secure Connection: close
2024-07-15 15:50:06 UTC	16	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d Data Ascii: {"success":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.6	57810	142.250.185.66	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:07 UTC	1401	OUT	GET /pagead/viewthroughconversion/11236809420/?random=1721058605790&cv=11&fst=1721058605790&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2Fpricing%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20Pricing&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.umso.com/pricing?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUleh47c-J5qwqTFYpiO4OvnlceM0zWFa6Qx_rk5pk0lMl5rR_z9LUwJfy5y
2024-07-15 15:50:07 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jul 2024 15:50:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-15 15:50:07 UTC	687	IN	Data Raw: 61 38 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 70 3d 3d 6e 75 6c 6c 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: a89(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var
2024-07-15 15:50:07 UTC	1390	IN	Data Raw: 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 29 7c 7c 79 28 29 26 26 77 28 22 4f 70 65 72 61 22 29 3b 76 61 72 20 41 3d 2f 23 7c 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 42 28 64 29 7b 76 61 72 20 61 3d 64 2e 73 65 61 72 63 68 28 41 29 2c 62 3b 61 3a 7b 66 6f 72 28 62 3d 30 3b 28 62 3d 64 2e 69 6e 64 65 78 4f 66 28 22 66 6d 74 22 2c 62 29 29 3e 3d 30 26 26 62 3c 61 3b 29 7b 76 61 72 20 63 3d 64 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2d 31 29 3b 69 Data Ascii: \|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);i
2024-07-15 15:50:07 UTC	627	IN	Data Raw: 6d 25 33 44 62 74 6d 62 61 64 67 65 25 32 36 75 74 6d 5f 63 61 6d 70 61 69 67 6e 25 33 44 66 72 65 65 25 32 36 75 74 6d 5f 74 65 72 6d 25 33 44 78 61 69 36 6c 31 70 69 62 6e 78 65 66 67 74 32 5c 78 32 36 68 6e 5c 78 33 64 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 55 6d 73 6f 25 32 30 2d 25 32 30 50 72 69 63 69 6e 67 5c 78 32 36 6e 70 61 5c 78 33 64 30 5c 78 32 36 70 73 63 64 6c 5c 78 33 64 6e 6f 61 70 69 5c 78 32 36 61 75 69 64 5c 78 33 64 38 33 36 35 36 31 30 32 37 2e 31 37 32 31 30 35 38 35 38 35 5c 78 32 36 75 61 61 5c 78 33 64 78 38 36 5c 78 32 36 75 61 62 5c 78 33 64 36 34 5c 78 32 36 75 61 66 76 6c 5c 78 33 64 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 Data Ascii: m%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2\x26hn\x3dwww.googleadservices.com\x26frm\x3d0\x26tiba\x3dUmso%20-%20Pricing\x26npa\x3d0\x26pscdl\x3dnoapi\x26auid\x3d836561027.1721058585\x26uaa\x3dx86\x26uab\x3d64\x26uafvl\x3dGoogle%2520Ch
2024-07-15 15:50:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.6	57811	172.217.16.130	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:07 UTC	1525	OUT	GET /td/rul/11236809420?random=1721058605790&cv=11&fst=1721058605790&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2Fpricing%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20Pricing&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.umso.com/pricing?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUleh47c-J5qwqTFYpiO4OvnlceM0zWFa6Qx_rk5pk0lMl5rR_z9LUwJfy5y
2024-07-15 15:50:07 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jul 2024 15:50:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-15 15:50:07 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-07-15 15:50:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.6	57812	142.250.186.110	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:07 UTC	1306	OUT	POST /g/collect?v=2&tid=G-CXEH5WRXTW&gtm=45be4790v9133397838za200&_p=1721058605648&gcd=13l3l3l3l1&npa=0&dma=0&tag_exp=0&cid=470383722.1721058585&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1721058585&sct=1&seg=1&dl=https%3A%2F%2Fwww.umso.com%2Fpricing%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&dt=Umso%20-%20Pricing&en=page_view&_ee=1&tfd=1031&_z=fetch HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.umso.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.umso.com/pricing?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:50:07 UTC	446	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.umso.com Date: Mon, 15 Jul 2024 15:50:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.6	57813	142.250.186.110	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:07 UTC	1306	OUT	POST /g/collect?v=2&tid=G-VYY8D05ZV0&gtm=45be4790v9133397838za200&_p=1721058605648&gcd=13l3l3l3l1&npa=0&dma=0&tag_exp=0&cid=470383722.1721058585&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1721058585&sct=1&seg=1&dl=https%3A%2F%2Fwww.umso.com%2Fpricing%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&dt=Umso%20-%20Pricing&en=page_view&_ee=1&tfd=1036&_z=fetch HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.umso.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.umso.com/pricing?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:50:07 UTC	446	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.umso.com Date: Mon, 15 Jul 2024 15:50:07 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.6	57814	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:07 UTC	570	OUT	GET /api/view HTTP/1.1 Host: www.umso.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058605.40.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058605.40.0.0
2024-07-15 15:50:07 UTC	314	IN	HTTP/1.1 404 Not Found Cache-Control: public, max-age=0, must-revalidate Content-Length: 55100 Content-Type: text/html;charset=utf-8 Referrer-Policy: no-referrer-when-downgrade Strict-Transport-Security: max-age=15552000 X-Frame-Options: sameorigin Date: Mon, 15 Jul 2024 15:50:07 GMT Connection: close
2024-07-15 15:50:07 UTC	872	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 6d 73 6f 2e 63 6f 6d 2f 6c 69 62 5f 4c 55 47 6f 50 69 71 58 58 6c 44 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><link rel="icon" href="https://www.umso.com/lib_LUGoPiqXXlD
2024-07-15 15:50:07 UTC	2372	IN	Data Raw: 74 65 72 27 2c 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 53 65 67 6f 65 20 55 49 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 0a 20 20 2d 2d 66 6f 6e 74 2d 74 69 74 6c 65 3a 20 6e 6f 72 6d 61 6c 20 6e 6f 72 6d 61 6c 20 38 30 30 20 31 65 6d 20 27 49 6e 74 65 72 27 2c 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 53 65 67 6f 65 20 55 49 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 2d 2d 66 6f 6e 74 2d 73 79 73 74 65 6d 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 Data Ascii: ter', -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica, Arial, sans-serif; line-height: 1.5; --font-title: normal normal 800 1em 'Inter', -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica, Arial, sans-serif; --font-system: -apple-system,
2024-07-15 15:50:07 UTC	538	IN	Data Raw: 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2d 37 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 35 30 25 20 35 30 25 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 2e 33 73 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 20 62 61 63 6b 67 72 6f 75 6e 64 20 63 6f 6c 6f 72 3b 0a 7d 0a 2e 6d 61 64 65 57 69 74 68 55 6d 73 6f 20 73 76 67 20 7b 0a 20 Data Ascii: font-weight: 500; white-space: nowrap; margin-right: -70px !important; border-radius: 6px; text-decoration: none !important; transform-origin: 50% 50%; animation-duration: 1.3s; transition-property: background color;}.madeWithUmso svg {
2024-07-15 15:50:07 UTC	4744	IN	Data Raw: 2e 62 61 64 67 65 2d 2d 72 69 67 68 74 20 7b 0a 20 20 6c 65 66 74 3a 20 31 30 30 25 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 31 36 35 70 78 3b 0a 7d 0a 2e 6d 61 64 65 57 69 74 68 55 6d 73 6f 2e 62 61 64 67 65 2d 2d 63 65 6e 74 65 72 20 7b 0a 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 37 30 70 78 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 35 30 70 78 29 20 7b 0a 20 20 20 2e 6d 61 64 65 57 69 74 68 55 6d 73 6f 2e 66 6f 6f 74 65 72 42 61 64 67 65 20 7b 0a 20 20 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 37 30 70 78 3b 0a 20 20 7d 0a 7d 0a 2e 6d 61 64 65 57 69 74 68 55 6d 73 6f 3a 68 6f 76 65 72 20 73 76 67 20 7b 0a 20 20 66 Data Ascii: .badge--right { left: 100%; margin-left: -165px;}.madeWithUmso.badge--center { left: 50%; margin-left: -70px;}@media (max-width: 750px) { .madeWithUmso.footerBadge { left: 50%; margin-left: -70px; }}.madeWithUmso:hover svg { f
2024-07-15 15:50:07 UTC	5930	IN	Data Raw: 2d 2d 63 6f 6c 6f 72 2d 74 65 78 74 2d 70 72 69 6d 61 72 79 29 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 67 72 6f 77 3a 20 31 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 75 6d 2d 6e 61 76 2d 77 72 61 70 70 65 72 20 2e 75 6d 2d 6e 61 76 2d 64 72 61 77 65 72 54 72 69 67 67 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 75 6d 2d 6e 61 76 2d 77 72 61 70 70 65 72 2e 75 6d 2d 73 70 61 63 65 2d 62 65 74 77 65 65 6e 20 2e 75 6d 2d 6e 61 76 2d 6c 69 6e 6b 73 20 7b 0a 20 20 70 61 64 64 69 6e 67 6c 65 66 74 3a 20 33 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 7d 0a 2e 75 6d 2d 6e 61 76 2d 77 72 61 70 70 65 72 2e 75 6d 2d 6c 69 6e 6b Data Ascii: --color-text-primary); display: flex; flex-grow: 1; align-items: center;}.um-nav-wrapper .um-nav-drawerTrigger { display: none;}.um-nav-wrapper.um-space-between .um-nav-links { paddingleft: 30; margin-right: auto;}.um-nav-wrapper.um-link
2024-07-15 15:50:07 UTC	7116	IN	Data Raw: 20 33 30 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 75 6d 73 6f 4d 6f 64 61 6c 20 7b 0a 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 34 30 70 78 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 30 30 31 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 35 30 30 70 78 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 Data Ascii: 30px; background: transparent; text-align: center;}.umsoModal { top: 50%; left: 50%; color: black; display: block; padding: 40px; z-index: 10001; position: fixed; min-width: 500px; transform: translate(-50%, -50%); background: w
2024-07-15 15:50:07 UTC	8302	IN	Data Raw: 20 69 6e 68 65 72 69 74 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 7d 0a 2e 5f 33 32 63 61 65 64 35 39 20 3e 20 61 3a 68 6f 76 65 72 2c 20 2e 5f 33 32 63 61 65 64 35 39 20 3e 20 73 70 61 6e 3a 68 6f 76 65 72 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 5f 33 32 63 61 65 64 35 39 20 3e 20 61 20 3e 20 64 69 76 20 2b 20 73 70 61 6e 2c 20 2e 5f 33 32 63 61 65 64 35 39 20 3e 20 73 70 61 6e 20 3e 20 64 69 76 20 2b 20 73 70 61 6e 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 63 61 6c 63 28 31 35 70 78 20 2a 20 76 61 72 28 2d 2d 67 61 70 29 29 3b 0a 7d 0a 2e 5f 62 39 39 32 Data Ascii: inherit; display: flex; align-items: center; line-height: 0;}._32caed59 > a:hover, ._32caed59 > span:hover { text-decoration: none;}._32caed59 > a > div + span, ._32caed59 > span > div + span { margin-left: calc(15px * var(--gap));}._b992
2024-07-15 15:50:07 UTC	9488	IN	Data Raw: 69 76 20 63 6c 61 73 73 3d 22 75 6d 2d 64 72 61 77 65 72 2d 62 75 74 74 6f 6e 73 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 70 70 2e 75 6d 73 6f 2e 63 6f 6d 2f 6c 6f 67 69 6e 22 20 69 64 3d 22 64 5f 62 74 6e 5f 39 76 63 71 79 79 63 69 6a 39 22 20 63 6c 61 73 73 3d 22 5f 65 37 32 65 37 35 62 32 20 62 74 6e 22 3e 3c 73 70 61 6e 3e 4c 6f 67 69 6e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 70 70 2e 75 6d 73 6f 2e 63 6f 6d 2f 73 69 67 6e 75 70 22 20 69 64 3d 22 64 5f 68 30 34 72 71 7a 36 30 68 66 74 22 20 63 6c 61 73 73 3d 22 5f 38 39 35 31 37 35 36 33 20 62 74 6e 22 3e 3c 73 70 61 6e 3e 53 69 67 6e 20 55 70 3c 2f 73 70 61 6e 3e 3c 73 76 67 20 77 69 64 74 68 3d 22 31 65 6d 22 20 76 69 65 77 42 6f 78 Data Ascii: iv class="um-drawer-buttons"><a href="https://app.umso.com/login" id="d_btn_9vcqyycij9" class="_e72e75b2 btn"><span>Login</span></a><a href="https://app.umso.com/signup" id="d_h04rqz60hft" class="_89517563 btn"><span>Sign Up</span><svg width="1em" viewBox
2024-07-15 15:50:07 UTC	10674	IN	Data Raw: 27 29 3b 65 26 26 28 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 27 6e 6f 6e 65 27 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 6d 61 64 65 57 69 74 68 55 6d 73 6f 27 29 3b 6e 75 6c 6c 21 3d 3d 65 26 26 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 62 61 64 67 65 2d 2d 63 65 6e 74 65 72 27 29 7d 28 29 7d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 6d 61 74 63 68 28 27 74 72 61 63 6b 69 6e 67 50 72 65 66 65 72 65 6e 63 65 73 27 29 3f 65 28 29 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 62 61 6e 6e 65 72 57 72 61 70 70 65 72 27 29 3b 65 26 26 28 65 2e 73 74 79 6c Data Ascii: ');e&&(e.style.display='none'),function(){const e=document.getElementById('madeWithUmso');null!==e&&e.classList.add('badge--center')}()}document.cookie.match('trackingPreferences')?e():function(){const e=document.getElementById('bannerWrapper');e&&(e.styl
2024-07-15 15:50:07 UTC	5064	IN	Data Raw: 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 65 29 7d 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 65 29 3a 65 2e 53 6d 6f 6f 74 68 53 63 72 6f 6c 6c 3d 74 28 65 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 29 7b 66 6f 72 28 76 Data Ascii: "function"==typeof define&&define.amd?define([],function(){return t(e)}):"object"==typeof exports?module.exports=t(e):e.SmoothScroll=t(e)}("undefined"!=typeof global?global:"undefined"!=typeof window?window:this,function(b){"use strict";function O(){for(v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.6	57815	142.250.185.132	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:08 UTC	1468	OUT	GET /pagead/1p-user-list/11236809420/?random=1721058605790&cv=11&fst=1721055600000&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2Fpricing%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20Pricing&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLINMBcAkYffxtmSyYyC1I-PRWPs__mXGeysiqwjFu28fppJT0&random=241697532&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/pricing?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:50:08 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jul 2024 15:50:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-15 15:50:08 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.6	57816	142.250.184.194	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:08 UTC	1141	OUT	GET /pagead/viewthroughconversion/11236809420/?random=1721058605790&cv=11&fst=1721058605790&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2Fpricing%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20Pricing&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUleh47c-J5qwqTFYpiO4OvnlceM0zWFa6Qx_rk5pk0lMl5rR_z9LUwJfy5y
2024-07-15 15:50:08 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jul 2024 15:50:08 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-15 15:50:08 UTC	687	IN	Data Raw: 61 38 61 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 70 3d 3d 6e 75 6c 6c 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: a8a(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var
2024-07-15 15:50:08 UTC	1390	IN	Data Raw: 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 29 7c 7c 79 28 29 26 26 77 28 22 4f 70 65 72 61 22 29 3b 76 61 72 20 41 3d 2f 23 7c 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 42 28 64 29 7b 76 61 72 20 61 3d 64 2e 73 65 61 72 63 68 28 41 29 2c 62 3b 61 3a 7b 66 6f 72 28 62 3d 30 3b 28 62 3d 64 2e 69 6e 64 65 78 4f 66 28 22 66 6d 74 22 2c 62 29 29 3e 3d 30 26 26 62 3c 61 3b 29 7b 76 61 72 20 63 3d 64 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2d 31 29 3b 69 Data Ascii: \|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);i
2024-07-15 15:50:08 UTC	628	IN	Data Raw: 6d 25 33 44 62 74 6d 62 61 64 67 65 25 32 36 75 74 6d 5f 63 61 6d 70 61 69 67 6e 25 33 44 66 72 65 65 25 32 36 75 74 6d 5f 74 65 72 6d 25 33 44 78 61 69 36 6c 31 70 69 62 6e 78 65 66 67 74 32 5c 78 32 36 68 6e 5c 78 33 64 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 55 6d 73 6f 25 32 30 2d 25 32 30 50 72 69 63 69 6e 67 5c 78 32 36 6e 70 61 5c 78 33 64 30 5c 78 32 36 70 73 63 64 6c 5c 78 33 64 6e 6f 61 70 69 5c 78 32 36 61 75 69 64 5c 78 33 64 38 33 36 35 36 31 30 32 37 2e 31 37 32 31 30 35 38 35 38 35 5c 78 32 36 75 61 61 5c 78 33 64 78 38 36 5c 78 32 36 75 61 62 5c 78 33 64 36 34 5c 78 32 36 75 61 66 76 6c 5c 78 33 64 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 Data Ascii: m%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2\x26hn\x3dwww.googleadservices.com\x26frm\x3d0\x26tiba\x3dUmso%20-%20Pricing\x26npa\x3d0\x26pscdl\x3dnoapi\x26auid\x3d836561027.1721058585\x26uaa\x3dx86\x26uab\x3d64\x26uafvl\x3dGoogle%2520Ch
2024-07-15 15:50:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.6	57817	216.58.212.132	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:09 UTC	1148	OUT	GET /pagead/1p-user-list/11236809420/?random=1721058605790&cv=11&fst=1721055600000&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2Fpricing%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20Pricing&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLINMBcAkYffxtmSyYyC1I-PRWPs__mXGeysiqwjFu28fppJT0&random=241697532&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:50:09 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jul 2024 15:50:09 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-15 15:50:09 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.6	57819	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:10 UTC	950	OUT	GET /showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 HTTP/1.1 Host: www.umso.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058605.40.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058605.40.0.0
2024-07-15 15:50:10 UTC	307	IN	HTTP/1.1 200 OK Cache-Control: public, max-age=0, must-revalidate Content-Length: 70931 Content-Type: text/html;charset=utf-8 Referrer-Policy: no-referrer-when-downgrade Strict-Transport-Security: max-age=15552000 X-Frame-Options: sameorigin Date: Mon, 15 Jul 2024 15:50:10 GMT Connection: close
2024-07-15 15:50:10 UTC	879	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 6d 73 6f 2e 63 6f 6d 2f 6c 69 62 5f 4c 55 47 6f 50 69 71 58 58 6c 44 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><link rel="icon" href="https://www.umso.com/lib_LUGoPiqXXlD
2024-07-15 15:50:10 UTC	2372	IN	Data Raw: 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 3a 68 65 69 67 68 74 22 20 63 6f 6e 74 65 6e 74 3d 22 36 33 30 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 6d 73 6f 2e 63 6f 6d 2f 6c 69 62 5f 4c 55 47 6f 50 69 71 58 58 6c 44 70 74 53 57 41 2f 36 39 6b 33 32 69 75 61 31 6a 78 72 32 75 79 6a 2e 70 6e 67 3f 77 3d 31 32 30 30 26 61 6d 70 3b 68 3d 36 33 30 26 61 6d 70 3b 66 69 74 3d 63 72 6f 70 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 6d 73 6f 2e 63 6f 6d 2f 73 68 6f 77 63 61 73 65 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 6c 74 65 72 6e 61 74 65 22 20 68 72 65 66 Data Ascii: roperty="og:image:height" content="630"><meta name="twitter:image" content="https://www.umso.com/lib_LUGoPiqXXlDptSWA/69k32iua1jxr2uyj.png?w=1200&h=630&fit=crop"><link rel="canonical" href="https://www.umso.com/showcase"><link rel="alternate" href
2024-07-15 15:50:10 UTC	538	IN	Data Raw: 6e 67 3a 20 30 20 33 30 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 77 72 2d 6d 61 78 29 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 7d 0a 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 30 30 70 78 29 20 7b 0a 20 20 2e 77 72 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 35 70 78 3b 0a 20 20 7d 0a 7d 0a 2e 75 6d 2d 62 61 63 6b 64 72 6f 70 20 7b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 2d 31 3b 0a 20 20 70 6f 73 69 74 69 6f 6e Data Ascii: ng: 0 30px; position: relative; max-width: var(--wr-max); box-sizing: border-box;}@media only screen and (max-width: 700px) { .wr { padding: 0 15px; }}.um-backdrop { top: 0; left: 0; right: 0; bottom: 0; z-index: -1; position
2024-07-15 15:50:10 UTC	4744	IN	Data Raw: 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 20 39 70 78 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 30 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 6b 65 79 66 72 61 6d 65 73 2d 62 61 64 67 65 46 61 64 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 31 70 78 20 33 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 33 29 2c 20 30 20 36 70 78 20 31 33 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 Data Ascii: eight: 30px; display: flex !important; padding: 0 9px; z-index: 100; position: fixed !important; animation: keyframes-badgeFade; font-size: 13px; background: #fff !important; box-shadow: 0 1px 3px rgba(0,0,0,0.3), 0 6px 13px rgba(0,0,0,0.1
2024-07-15 15:50:10 UTC	5930	IN	Data Raw: 2e 62 74 6e 2d 2d 69 63 6f 6e 20 73 76 67 2c 20 2e 62 74 6e 2e 62 74 6e 2d 2d 69 63 6f 6e 20 69 6d 67 20 7b 0a 20 20 77 69 64 74 68 3a 20 69 6e 69 74 69 61 6c 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 2e 32 65 6d 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 2d 30 2e 31 65 6d 3b 0a 7d 0a 2e 62 74 6e 3a 68 6f 76 65 72 2c 20 2e 62 74 6e 3a 68 6f 76 65 72 20 73 70 61 6e 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 62 74 6e 2e 70 72 69 6d 61 72 79 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 30 64 65 67 2c 20 72 67 62 28 39 34 2c 20 33 34 2c 20 31 39 30 29 20 30 25 2c 20 72 67 62 28 Data Ascii: .btn--icon svg, .btn.btn--icon img { width: initial; height: 1.2em; margin: -0.1em;}.btn:hover, .btn:hover span { text-decoration: none;}.btn.primary { color: rgb(255, 255, 255); background: linear-gradient(90deg, rgb(94, 34, 190) 0%, rgb(
2024-07-15 15:50:10 UTC	7116	IN	Data Raw: 61 6c 63 28 35 30 25 20 2d 20 32 70 78 29 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 31 33 35 64 65 67 29 3b 0a 7d 0a 2e 75 6d 2d 6e 61 76 2d 64 72 61 77 65 72 20 2e 75 6d 2d 64 72 61 77 65 72 2d 6c 69 6e 6b 73 20 3e 20 6c 69 20 3e 20 62 75 74 74 6f 6e 3a 62 65 66 6f 72 65 20 7b 0a 20 20 74 6f 70 3a 20 63 61 6c 63 28 35 30 25 20 2d 20 36 70 78 29 3b 0a 20 20 72 69 67 68 74 3a 20 32 30 70 78 3b 0a 20 20 77 69 64 74 68 3a 20 37 70 78 3b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 74 65 78 74 2d 73 65 63 6f 6e 64 61 72 79 29 3b 0a 20 20 68 65 69 67 68 74 3a 20 37 70 78 3b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 36 3b 0a 20 20 70 6f 73 Data Ascii: alc(50% - 2px); transform: rotate(135deg);}.um-nav-drawer .um-drawer-links > li > button:before { top: calc(50% - 6px); right: 20px; width: 7px; border: 2px solid var(--color-text-secondary); height: 7px; content: ""; opacity: 0.6; pos
2024-07-15 15:50:10 UTC	8302	IN	Data Raw: 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 7d 0a 7d 0a 3c 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 20 64 61 74 61 2d 76 65 72 73 69 6f 6e 3d 22 32 22 20 64 61 74 61 2d 63 6f 6e 74 65 6e 74 3d 22 73 65 63 74 69 6f 6e 73 22 3e 2e 5f 35 38 63 65 38 33 64 38 20 7b 0a 20 20 74 6f 70 3a 20 30 3b 0a 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 31 36 33 2c 20 31 36 33 2c 20 31 36 33 29 3b 0a 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 68 65 69 67 68 74 3a 20 37 30 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 3b 0a 20 20 2d 2d 77 72 2d 6d 61 78 3a 20 31 31 38 32 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 Data Ascii: n: column; }}</style><style data-version="2" data-content="sections">._58ce83d8 { top: 0; left: 0; color: rgb(163, 163, 163); right: 0; height: 70px; display: flex; z-index: 99; --wr-max: 1182px; position: absolute; align-items: ce
2024-07-15 15:50:10 UTC	9488	IN	Data Raw: 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 61 72 64 2d 74 65 78 74 43 6f 6c 6f 72 53 65 63 6f 6e 64 61 72 79 29 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 32 65 6d 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 63 61 72 64 2d 62 67 29 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 76 61 72 28 2d 2d 63 61 72 64 2d 62 6f 78 53 68 61 64 6f 77 29 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 61 72 64 2d 62 6f 72 64 65 72 43 6f 6c 6f 72 29 3b 0a 20 20 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 20 20 Data Ascii: color: var(--card-textColorSecondary); display: flex; padding: 2em; background: var(--card-bg); box-shadow: var(--card-boxShadow); box-sizing: border-box; align-items: center; border-color: var(--card-borderColor); border-style: solid;
2024-07-15 15:50:10 UTC	10674	IN	Data Raw: 2d 77 69 64 74 68 3d 22 32 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 63 61 70 3d 22 72 6f 75 6e 64 22 20 73 74 72 6f 6b 65 2d 6c 69 6e 65 6a 6f 69 6e 3d 22 72 6f 75 6e 64 22 3e 3c 6c 69 6e 65 20 78 31 3d 22 31 38 22 20 79 31 3d 22 36 22 20 78 32 3d 22 36 22 20 79 32 3d 22 31 38 22 3e 3c 2f 6c 69 6e 65 3e 3c 6c 69 6e 65 20 78 31 3d 22 36 22 20 79 31 3d 22 36 22 20 78 32 3d 22 31 38 22 20 79 32 3d 22 31 38 22 3e 3c 2f 6c 69 6e 65 3e 3c 2f 73 76 67 3e 3c 2f 62 75 74 74 6f 6e 3e 3c 2f 68 65 61 64 65 72 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 75 6d 2d 64 72 61 77 65 72 2d 6c 69 6e 6b 73 22 3e 3c 6c 69 3e 3c 62 75 74 74 6f 6e 3e 4c 61 6e 67 75 61 67 65 3a 20 45 4e 3c 2f 62 75 74 74 6f 6e 3e 3c 75 6c 3e 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f Data Ascii: -width="2" stroke-linecap="round" stroke-linejoin="round"><line x1="18" y1="6" x2="6" y2="18"></line><line x1="6" y1="6" x2="18" y2="18"></line></svg></button></header><div class="um-drawer-links"><li><button>Language: EN</button><ul><li><a href="https://
2024-07-15 15:50:10 UTC	11860	IN	Data Raw: 2e 39 63 2d 32 2e 31 20 33 37 2d 32 2e 31 20 31 34 37 2e 39 20 30 20 31 38 34 2e 39 20 31 2e 37 20 33 35 2e 39 20 39 2e 39 20 36 37 2e 37 20 33 36 2e 32 20 39 33 2e 39 73 35 38 20 33 34 2e 34 20 39 33 2e 39 20 33 36 2e 32 63 33 37 20 32 2e 31 20 31 34 37 2e 39 20 32 2e 31 20 31 38 34 2e 39 20 30 20 33 35 2e 39 2d 31 2e 37 20 36 37 2e 37 2d 39 2e 39 20 39 33 2e 39 2d 33 36 2e 32 20 32 36 2e 32 2d 32 36 2e 32 20 33 34 2e 34 2d 35 38 20 33 36 2e 32 2d 39 33 2e 39 20 32 2e 31 2d 33 37 20 32 2e 31 2d 31 34 37 2e 38 20 30 2d 31 38 34 2e 38 7a 4d 33 39 38 2e 38 20 33 38 38 61 37 35 2e 36 20 37 35 2e 36 20 30 20 30 20 31 2d 34 32 2e 36 20 34 32 2e 36 63 2d 32 39 2e 35 20 31 31 2e 37 2d 39 39 2e 35 20 39 2d 31 33 32 2e 31 20 39 73 2d 31 30 32 2e 37 20 32 2e 36 2d Data Ascii: .9c-2.1 37-2.1 147.9 0 184.9 1.7 35.9 9.9 67.7 36.2 93.9s58 34.4 93.9 36.2c37 2.1 147.9 2.1 184.9 0 35.9-1.7 67.7-9.9 93.9-36.2 26.2-26.2 34.4-58 36.2-93.9 2.1-37 2.1-147.8 0-184.8zM398.8 388a75.6 75.6 0 0 1-42.6 42.6c-29.5 11.7-99.5 9-132.1 9s-102.7 2.6-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.6	57818	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:10 UTC	937	OUT	GET /lib_idKrFnnqnDIKXMAQ/eanc9lnqfsu41h6a.png?w=500&dpr=2 HTTP/1.1 Host: www.umso.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
2024-07-15 15:50:10 UTC	252	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 133005 Content-Type: image/png Last-Modified: Fri, 03 May 2024 10:23:22 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:50:10 GMT Connection: close
2024-07-15 15:50:10 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 05 7e 08 03 00 00 00 d2 92 e4 b2 00 00 03 00 50 4c 54 45 17 22 30 19 24 32 fe ff ff 17 23 31 21 2c 3a f2 f5 f9 16 21 2f f3 f6 fa 2d 3a 48 ff ff ff 01 ff b3 f1 f4 f8 b9 e6 fd 14 1f 2d ef f2 f6 ed f0 f4 06 12 21 f0 f3 f8 12 1d 2b 0c 18 27 09 15 24 16 22 2f 22 2e 3d fd fd fd ff fe ff fd ff ff 0f 1b 29 17 d9 dd 2c 39 47 ea ed f0 f6 f7 f8 2f 3c 4a fb fd ff 0c e5 d0 f1 f1 f1 2d 3b 49 f3 f4 f6 0f e2 d3 ec ef f2 26 32 40 1b 27 34 de e1 e4 1c d3 e5 e4 e6 e9 fa fb fd e8 eb ee 8b 91 99 28 34 42 e2 e4 e7 5f 67 72 da fc f1 07 ea c9 1d d1 e9 17 d5 e1 00 86 c9 18 d7 e0 e9 ea ec 03 0f 1e fa f9 fa 0e e7 cc f6 f9 fc d8 da de f1 f2 f4 1d 29 37 e5 e8 ed db de e1 13 dd d9 ce d1 d5 07 ef c3 c5 c8 cd d2 d5 d9 3b Data Ascii: PNGIHDR~PLTE"0$2#1!,:!/-:H-!+'$"/".=),9G/<J-;I&2@'4(4B_gr)7;
2024-07-15 15:50:10 UTC	2372	IN	Data Raw: a2 dc 38 e4 24 fe 7c 39 2f 6f d6 aa ea bf 34 8c 7f 00 71 5c 1f b1 a9 ae aa ae 2a ba fb 5b cf b3 9e e7 59 6b 71 1c 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 db 89 19 71 e6 cd 3b 18 87 36 ed 58 0c 06 63 93 30 9b 91 d9 8c 36 17 33 da bc 1b 07 83 c1 78 7b cc 66 33 82 9b 0d 32 73 66 26 75 06 63 a7 60 36 13 4f 1b 39 37 17 8d 33 73 cc a8 33 18 3b 07 33 c7 71 18 4e 4c 6e 26 4b 1e 8d dc 3d de f5 9f c6 60 30 0c 10 6d 9f fb ea 37 97 59 bf 0a 37 33 be c7 60 30 de 06 12 36 83 ce a5 fa de cd a5 7e 4e 43 88 29 9d c1 d8 21 98 39 22 74 5f 7d 6f fc 66 d2 1b 3f eb 16 88 f3 ce 6c 3a 83 b1 23 30 23 c4 39 bd 9b 2c f4 78 5d e8 e4 d8 0c 06 e3 9d 63 26 62 34 6f ba 45 a7 42 27 d9 f4 1d 6c d1 41 00 f8 ae af 84 c1 d8 7a 10 c2 e6 ad b1 e8 b4 70 66 Data Ascii: 8$\|9/o4q\*[Ykq`0`0`0`0q;6Xc063x{f32sf&uc`6O973s3;3qNLn&K=`0m7Y73`06~NC)!9"t_}of?l:#0#9,x]c&b4oEB'lAzpf
2024-07-15 15:50:10 UTC	538	IN	Data Raw: ee 2b 84 17 d3 3b 44 b1 b6 50 ea 49 e8 3b 3e 5c d4 24 bd b5 f7 0e a4 f2 aa ba ae a6 b3 05 89 71 07 ea ac b9 47 41 53 9b 23 37 ad 6c ac e6 84 55 01 d6 b2 fe b1 33 c5 c4 75 94 86 4a c4 9e ab e5 8e d6 f3 8e f2 72 39 b1 a0 6b ac ad 33 ce da d7 ae 14 d6 59 33 0b 2f 8d 0d 9c 89 be 14 39 3b ab e6 94 2c 4a ed 9d c8 56 74 76 ac aa 4b 6c e9 91 94 a2 61 47 79 b7 24 17 9f 11 0b bb f8 e1 7d cd ca 85 6e e9 4c 21 be 98 15 27 65 f7 88 20 a6 d0 db c7 1a 6b c6 2e 66 5b eb 1a c8 13 1e 40 f1 c6 be 61 29 fb 84 a3 bb cb 51 5a 00 2e 15 62 31 bb 9a 2b ca 75 0c b7 80 d1 42 45 cc 2e 8d 3c 10 87 50 6d 41 f6 b0 28 29 2d ed 72 cf 81 6a b1 a4 9b bf 78 a1 fa 62 8b 78 31 bd ca d1 da e9 38 df 2f f6 34 8c e4 9c 18 19 3b 51 33 d6 99 3d 36 dc e7 18 e8 34 4b e5 d9 56 25 e2 ad 12 4b 4b 2a 11 Data Ascii: +;DPI;>\$qGAS#7lU3uJr9k3Y3/9;,JVtvKlaGy$}nL!'e k.f[@a)QZ.b1+uBE.<PmA()-rjxbx18/4;Q3=64KV%KK*
2024-07-15 15:50:10 UTC	4744	IN	Data Raw: cd 2d b8 9d ae fa a0 d0 87 f7 8f 3b a4 86 6e 47 5b 0d 2f d6 f5 8c 36 48 d6 91 3d 17 6b 1a f0 58 75 ee 58 79 ff 98 b5 a9 58 92 1d 5d 85 f2 a5 fd 71 d2 48 62 41 63 57 77 77 57 63 81 52 d9 d2 21 f2 ad 15 d2 c5 7d d5 92 23 f7 40 22 69 5b be 15 40 6a 2c e9 6f 3c 71 3a 0b 35 9d b7 02 6b 67 93 d2 92 58 93 5d 8e cf 93 16 a3 35 bb 7d ec 54 b1 80 38 88 b9 a2 e6 c1 9a f2 b8 da 2e 5c f8 17 d9 d1 da e6 e8 cc b5 f2 03 6d 2d 4d 0e a0 b4 95 9f 12 f8 68 57 12 8b a3 35 45 c5 39 b8 e5 a2 64 ed a8 b0 96 77 89 25 3d 92 d2 30 3c d6 38 60 95 db 86 87 2b 24 ce 51 3e 08 5b 8e f3 4a 51 73 66 41 fb 25 49 8c 6c e7 2b d2 a5 80 d0 cf b6 b4 1e b7 f2 55 e5 1d b9 d9 85 18 29 8e 9a 7e 07 27 27 42 eb 48 5d f6 be e6 e3 85 65 97 44 47 47 56 6e d3 99 7d a7 32 b3 6a 2e f1 e2 9a 6b 91 4f b5 b7 Data Ascii: -;nG[/6H=kXuXyX]qHbAcWwwWcR!}#@"i[@j,o<q:5kgX]5}T8.\m-MhW5E9dw%=0<8`+$Q>[JQsfA%Il+U)~''BH]eDGGVn}2j.kO
2024-07-15 15:50:10 UTC	5930	IN	Data Raw: 10 fa b1 83 e4 f1 60 2c 22 75 4e 7f 74 bd c7 12 79 98 65 8f 12 39 d5 f9 5f a3 84 fe 85 fe ff 8b bf 7e 11 92 fa 17 77 35 62 7f 42 52 df 42 a1 9b e1 7a c4 3a 29 44 aa 76 fb 1b 65 27 dd 78 5e 05 ac 2a 2e bf 66 de a4 a3 41 80 24 5e de 51 77 df 0f 1e 84 20 76 3f ba 47 15 1d 4b ed 07 a9 bc 03 06 3d 4a e7 5f 06 7f 47 1a 74 c3 a8 1b 44 9b f2 30 1f 9e 48 7b 8d da ff 4a c5 1e 0e 95 b8 ae 73 5d e9 df 5e a1 42 0f 86 e4 f4 04 e0 96 7c b1 10 b1 75 31 d1 d6 9e 10 41 55 f3 3f bc 7c f9 a9 7e 79 ef 0b 48 55 e6 af 5f bf 4e 42 1f af 05 00 20 e6 7b 2e 58 e5 d1 13 43 22 d8 a4 cb 63 bc 3d 88 0b 13 fa c9 7a 5d ef 27 a3 7c 77 e2 bd 13 8b 1e a5 f4 2f 63 5b f4 08 95 1b ee 7b b4 d2 83 42 0f d7 b8 ae 6f fa 3b ca a0 87 49 fd 6f 61 42 87 66 2a 35 92 1d 8c 48 c1 6f 2a 50 fb e6 69 6c 6e Data Ascii: `,"uNtye9_~w5bBRBz:)Dve'x^.fA$^Qw v?GK=J_GtD0H{Js]^B\|u1AU?\|~yHU_NB {.XC"c=z]'\|w/c[{Bo;IoaBf5Ho*Piln
2024-07-15 15:50:10 UTC	7116	IN	Data Raw: 40 4d fa 94 d1 77 1e 38 27 88 e7 ee 8a 5d 02 4b f7 10 87 2c f9 85 d9 79 ad 54 cd 62 cf 91 dd 9f 74 a5 b4 d3 de aa 91 42 17 6f e4 ef 49 2e 16 38 60 b3 0e 64 55 22 29 4a e8 43 79 7b 4c fd db 5e ec 4e fa df 04 4c 7a 7a 7a 5e fa f9 b2 ba a1 4b 97 86 db 69 11 4d b5 4c fb 3a 7e 98 42 5f 8c 32 e9 ba c4 d7 1b e9 d9 18 09 76 6b 9c f7 df f4 21 60 8d a8 fb 17 64 a6 e4 80 49 a7 dd 54 f3 2c 21 f2 c8 6d 3b a9 9c d4 bf 6e a9 eb 1e 61 c4 cd 88 cc e1 f0 f8 a1 46 3a 93 60 32 82 24 dd a4 4b 9e b8 ee b4 44 5c 0f c8 79 54 5a f7 4e ac bb 1f 42 a8 b8 88 27 7f 3b ac 53 8b 11 8e bb f3 64 de 03 11 74 13 4f fe 89 82 38 52 1b 77 67 e6 ce 6d 27 ed 83 a2 d2 9e aa 7e 12 07 88 48 af 41 cd bd 3c 43 62 ed 64 0b 51 f6 f4 94 5f f1 78 e7 a6 97 54 34 19 21 74 a8 92 da b8 9b d7 bd 76 92 0b 80 Data Ascii: @Mw8']K,yTbtBoI.8`dU")JCy{L^NLzzz^KiML:~B_2vk!`dIT,!m;naF:`2$KD\yTZNB';SdtO8Rwgm'~HA<CbdQ_xT4!tv
2024-07-15 15:50:10 UTC	8302	IN	Data Raw: b4 18 f6 4a 32 1f 9b 0f b8 4b 3a 5c 65 e9 d2 f5 15 dc 14 18 90 74 3f f2 9c 4a 31 ba a5 68 9f 86 29 c4 32 06 d0 35 8d 0a 70 bf 6d 38 c3 1a a4 10 40 3a 0a 0f 0f 1f 4e 90 04 1d 3f dd f3 d5 c5 25 39 3f 87 62 12 af 95 c0 3e 0e 34 cb f0 a3 af ac 80 2e e3 25 77 1d e8 ee 47 9e 49 1d d9 9c ac ec 40 0f 79 68 3d 84 de e9 e7 a1 0f ef fc 19 3c 0f da f4 c6 6b be 5b 26 d3 dd 01 33 e9 dd cc cc f2 74 62 25 37 bf 3b 13 de 4d 66 ca 87 c9 e4 cc a1 63 79 3f e7 9b c9 85 46 67 32 43 70 77 26 32 bd 18 da 4f cf f4 a6 e2 f9 d0 e8 36 4c 4f c1 f4 f2 72 62 77 d9 77 2b 9e be ae d1 af a4 85 24 8e b9 59 a3 5f 47 3f 61 d1 b8 46 8a dd 9b aa e2 5a 35 fa 37 9a 46 bf 8f a8 3b e0 e5 c8 f0 70 3c 26 6a 9d 6c 40 c8 c3 4e 57 15 03 96 e7 12 ee 4e f7 81 06 54 80 ce e0 94 00 64 bc 0e 9f 3c 99 a5 50 Data Ascii: J2K:\et?J1h)25pm8@:N?%9?b>4.%wGI@yh=<k[&3tb%7;Mfcy?Fg2Cpw&2O6LOrbww+$Y_G?aFZ57F;p<&jl@NWNTd<P
2024-07-15 15:50:10 UTC	2832	IN	Data Raw: bb 80 ef 30 d7 40 d0 68 d2 b6 16 40 6f da b8 e1 7d 6d 01 d9 83 3e ec ac 9f 02 da ca db a4 7b 26 fd 72 64 22 94 0d 3a 36 9e 6f 3c 83 06 d0 ad 1b 50 e1 a7 35 dd 5b 54 7a bb 50 5c 8d 72 e2 1a d3 dd 28 75 27 ba bc 0e 75 eb 50 dc ef ee 11 e8 c3 91 85 d3 1d db 26 46 45 98 3a 3a 5e 09 a4 91 32 35 2f 4a 99 34 8e 09 3b ae 23 75 79 59 c2 25 b8 79 54 dd 1f 2a 60 b4 9f 16 64 34 e9 98 53 c7 6c b9 ca 69 7e e8 4c a8 01 7d 3b 22 a2 95 e1 a9 ca 59 c6 67 57 0a 49 9e 45 c7 f0 40 1d b4 a5 66 2f e7 e3 1d c2 f1 45 ff 44 25 b9 8f b2 eb 9e 85 d3 0e 61 cb b6 f3 ab 6a 68 5a c6 67 17 be d5 cb ac d7 3f 73 3a 9b 0b c5 08 98 f9 98 6f be 7a b4 0a 17 04 39 13 28 1f cf e2 a9 a1 e2 69 69 a8 4c 30 c5 01 6f 3e 78 39 cb 71 c9 68 7e ec 72 3e 92 15 c7 93 91 ea ec 16 a4 88 93 f1 c1 50 72 70 36 Data Ascii: 0@h@o}m>{&rd":6o<P5[TzP\r(u'uP&FE::^25/J4;#uyY%yT*`d4Sli~L};"YgWIE@f/ED%ajhZg?s:oz9(iiL0o>x9qh~r>Prp6
2024-07-15 15:50:10 UTC	10674	IN	Data Raw: 60 1c d0 f7 e3 e4 ef 38 59 46 de d2 2d e8 32 6d 6b 7d b5 f6 5a 5b a7 ef 53 3b a0 fe 96 ee 5f db 5b df 9c 34 ef 6a 07 96 25 33 e5 b4 56 fd 6a 54 c8 d5 e6 b1 90 a7 00 e9 5e a3 f4 ce 7a 75 0d 6c 9a a1 5a db 49 e7 ad 35 95 d4 6a 5b d7 d6 ea a7 d2 6b f1 9e d6 b6 82 e6 3c fa 35 53 d7 3e 22 ea 6e 99 45 a7 fc af 2d 30 6f 46 fa 5d b6 a9 72 3c f9 ba d2 22 29 f2 2d 06 bc 24 02 82 66 f2 43 a0 aa 95 43 1a ab c6 e9 96 b4 22 9c bc 1a 17 25 9e ad 1d 80 84 b7 8c 3d e9 6a 8e fe 26 bb 72 92 48 bb 60 58 5e 12 69 cb 04 20 08 a1 87 24 2d 32 f4 f8 74 2d c9 53 6b 02 44 24 02 b2 42 3f c6 b8 a8 ef aa 6d 2a 92 07 14 5d 43 01 c9 92 2b a9 dd 12 29 10 25 97 a5 5d 24 8f f4 5b 22 cf 0b ed 4e f5 cb 65 39 49 db 8d ee af 75 df f0 22 63 ba 25 96 d1 57 8c 1b 2f e8 19 48 95 3b 29 81 af 5d dd Data Ascii: `8YF-2mk}Z[S;_[4j%3VjT^zulZI5j[k<5S>"nE-0oF]r<")-$fCC"%=j&rH`X^i $-2t-SkD$B?m*]C+)%]$["Ne9Iu"c%W/H;)]
2024-07-15 15:50:10 UTC	11860	IN	Data Raw: a4 d1 7e 05 99 50 df 54 a3 63 c3 82 cd 53 b7 5c da 3b d1 7d 6f 45 91 ba b6 f2 34 57 bc e1 a8 c7 f1 08 0b 08 6f f0 1c f5 5f a5 03 a0 4e ec 46 07 1b 3c b3 81 c9 02 a6 53 0e 4e 46 98 7e 20 1a b2 88 0d 1f 36 e3 4c fa 31 65 4e 50 d5 c8 55 11 25 3a 30 99 1e 9a 06 b6 89 44 10 94 3d 75 a2 4e 3a cf 42 22 20 22 8f 64 fa 45 c5 f1 44 9d ec fa b7 b0 c2 23 99 7f 4a 19 28 f9 07 a3 d7 6e 64 5b bf de 45 cb 14 4b c6 43 40 7a 79 f5 1c 60 69 fe 75 a3 7a f1 d5 be 97 97 25 cf bf 2d a4 39 d1 3f 1b 00 25 7e 58 e0 68 c8 89 1e aa c1 00 8e 06 8f 28 0c 58 98 46 6f e8 ef e8 2a 37 27 5c 07 6d 00 c0 eb 95 16 18 1a 19 32 0d 63 e1 af 5e 00 2a d4 65 40 23 5b 68 03 c1 08 2a d1 43 51 78 da 1d fd e1 c1 c6 b4 3b e5 46 bf 0b 0c a0 b1 26 46 55 43 4e 6f 6c 40 af d2 b1 a1 3b d7 53 77 16 a3 9c da Data Ascii: ~PTcS\;}oE4Wo_NF<SNF~ 6L1eNPU%:0D=uN:B" "dED#J(nd[EKC@zy`iuz%-9?%~Xh(XFo7'\m2c^e@#[h*CQx;F&FUCNol@;Sw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.6	57825	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:11 UTC	944	OUT	POST /api/view HTTP/1.1 Host: www.umso.com Connection: keep-alive Content-Length: 162 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: / Origin: https://www.umso.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.umso.com/showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
2024-07-15 15:50:11 UTC	162	OUT	Data Raw: 7b 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 70 61 74 68 22 3a 22 2f 73 68 6f 77 63 61 73 65 22 2c 22 69 73 50 72 69 6f 72 42 6c 6f 63 6b 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 75 74 6d 5f 73 6f 75 72 63 65 22 3a 22 75 73 69 74 65 22 2c 22 75 74 6d 5f 6d 65 64 69 75 6d 22 3a 22 62 74 6d 62 61 64 67 65 22 2c 22 75 74 6d 5f 63 61 6d 70 61 69 67 6e 22 3a 22 66 72 65 65 22 2c 22 75 74 6d 5f 74 65 72 6d 22 3a 22 78 61 69 36 6c 31 70 69 62 6e 78 65 66 67 74 32 22 7d Data Ascii: {"referrer":"","path":"/showcase","isPriorBlockingEnabled":false,"utm_source":"usite","utm_medium":"btmbadge","utm_campaign":"free","utm_term":"xai6l1pibnxefgt2"}
2024-07-15 15:50:11 UTC	372	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.umso.com Content-Length: 16 Content-Type: application/json;charset=utf-8 Date: Mon, 15 Jul 2024 15:50:11 GMT Set-Cookie: usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; Path=/; Domain=www.umso.com; Expires=Tue, 15 Jul 2025 15:50:11 GMT; HttpOnly; Secure Connection: close
2024-07-15 15:50:11 UTC	16	IN	Data Raw: 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d Data Ascii: {"success":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.6	57826	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:11 UTC	937	OUT	GET /lib_idKrFnnqnDIKXMAQ/gekox94o9ioxkh7i.png?w=500&dpr=2 HTTP/1.1 Host: www.umso.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
2024-07-15 15:50:11 UTC	252	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 302992 Content-Type: image/png Last-Modified: Fri, 03 May 2024 10:23:22 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:50:11 GMT Connection: close
2024-07-15 15:50:11 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 05 7e 08 03 00 00 00 d2 92 e4 b2 00 00 03 00 50 4c 54 45 ff ff ff 1c 18 15 18 15 11 fd fe fe 24 1f 1b fc 63 37 18 17 14 fe fe fe fd fc fc ff fd fd fc fb fb 13 10 0d 22 1e 1a 15 13 10 1b 17 13 20 1b 17 fb fb fb 26 21 1d 1e 1a 16 21 1d 19 f9 f9 f9 fe ff ff 10 0e 0b f1 ea e3 ff ff ff f8 f7 f7 cc c3 b7 1d 1c 1a f2 eb e5 29 24 20 ef ef ef fb f9 f9 e1 e1 e1 ca bc ac 0b 09 08 c6 b8 a9 c0 b1 a1 26 23 20 2c 27 22 e9 e9 ea c4 b5 a5 e6 e6 e6 c5 bb ae ca c1 b4 ee e8 df f6 f6 f6 db a7 7b d7 d7 d8 ed e6 de 01 01 01 cd d4 dc e8 e0 d7 73 63 5e f1 f1 f1 d1 d7 de ce c5 ba cc be af eb ec ec c6 cd d7 7f 6f 68 83 73 6c cd c0 b2 c9 d0 da f3 f3 f2 ee e8 e1 6f 5f 5a 87 77 6f f3 ed e7 dc dc dc 7b 6b 65 f3 f4 f4 b7 Data Ascii: PNGIHDR~PLTE$c7" &!!)$ &# ,'"{sc^ohslo_Zwo{ke
2024-07-15 15:50:11 UTC	2372	IN	Data Raw: ce 75 dd 63 00 7e f4 59 73 b5 9d cf 74 ae c9 a5 f2 31 18 63 30 50 7f f7 f5 79 5f 37 21 df 43 78 3c c2 e3 f1 5a 5b 79 9c e0 a3 d6 d6 56 3e 9f cf c7 1b b8 6f ca 1f 53 f8 ad 9d 32 35 88 6c c4 14 28 3c 7a f4 e0 c1 83 a7 93 69 83 3f b7 6a 75 9a 2c 26 93 c9 39 6f 0d 04 5f 3e 9f 9c 9c 9c 1c 7d 11 2c 7a d5 de 2c 88 57 26 73 6e bc 78 fe 22 9d 7e f9 f2 4d 3a 95 4a a5 47 d3 e9 d1 d1 f4 94 3f 92 8b 1b 46 27 1b 44 e5 f7 e5 42 73 5d d2 b9 48 74 66 94 4a 3a 9d 4e cf 8c d2 67 93 e9 68 7c 65 71 de 69 32 59 d6 86 ef 3f 1b 57 c8 14 32 b5 5a 06 a2 50 28 64 32 b5 5a a1 18 51 c8 d4 de 44 60 37 f6 e6 f5 7e 2c b8 bb bd b3 b3 b7 11 58 0f 04 36 76 b6 37 37 37 b7 b7 77 50 b6 77 0b a9 54 2a b8 b9 bd b7 b7 b3 fb 3a 9d 9a 4a a7 53 a9 09 ee 3d e1 7e 06 64 54 1e 9f 33 cd 2f 26 bc 5e b5 Data Ascii: uc~Yst1c0Py_7!Cx<Z[yV>oS25l(<zi?ju,&9o_>},z,W&snx"~M:JG?F'DBs]HtfJ:Ngh\|eqi2Y?W2ZP(d2ZQD`7~,X6v777wPwT*:JS=~dT3/&^
2024-07-15 15:50:11 UTC	538	IN	Data Raw: 9f 3e 19 0c 85 42 aa 60 30 00 e8 69 e4 6d 26 3d 33 93 32 7c da d9 58 87 e8 da a7 dd ed c0 0a 78 c9 40 33 0d ba 53 4d 5b 4b 82 d1 3b 7a 39 32 0a a8 82 ca 88 22 3f 6c 59 dc d8 df 5b 34 29 14 b2 c4 46 f0 75 2a 9d 9e 4a 4d 21 dc 30 a8 80 a3 80 ae 3a 92 9e fe b4 f7 8b db 32 3c 8e f1 09 7a 1a 38 21 06 06 b2 09 e7 da 7d aa bf b5 62 0d 63 d7 85 e3 ba b9 41 8f 5e fb f7 04 b4 39 08 a3 b7 d9 18 a0 9d 61 8c 3a 7f d2 1f 8f 43 d0 1d 7d 7a 4a 7a 2d 13 a7 54 e2 11 62 71 87 58 e2 19 74 1b 3d b9 68 34 ee d6 2f 83 41 bf cc d8 8c 0c c3 48 96 97 c5 97 35 3a 1a f2 5c 00 1f 6c f9 ef 00 3a 70 4e a3 ed 98 52 a3 56 3b 1f 29 17 80 bd 8e 6a 5c d8 03 60 b3 84 b3 a4 77 76 76 fe 5e ea a9 29 ff 55 e9 e4 8f 67 e1 9f 1b 7f d4 89 d5 9d fd 17 cf 9f 4f 3e 88 ad 78 f3 32 6a cd 3a 01 3c 9a d9 Data Ascii: >B`0im&=32\|Xx@3SM[K;z92"?lY[4)Fu*JM!0:2<z8!}bcA^9a:C}zJz-TbqXt=h4/AH5:\l:pNRV;)j\`wvv^)UgO>x2j:<
2024-07-15 15:50:11 UTC	4744	IN	Data Raw: 52 29 70 96 d9 67 af 0b 85 d7 05 78 5e 48 a5 5e ef 17 0a 85 bd 95 79 93 49 6d b2 58 9c d6 9d cd d5 04 90 0c 89 af 3c 17 0e 40 b0 29 dc dc 33 9a f1 66 49 57 73 d5 35 23 6b 96 f9 c0 fa bc 4c a1 4e 04 76 5f c3 48 32 03 be 39 eb 9d a7 d3 05 73 10 a2 72 53 b0 35 3d 93 9e 32 e0 08 83 d1 09 04 9d 72 0e a0 e7 87 01 54 46 22 91 68 34 5a c6 38 10 19 f4 18 31 e2 cd d2 ac b9 41 a3 73 2f 41 22 1d 38 d7 6a f4 5d f1 70 3c 9e 93 ea b5 50 05 53 f3 f0 eb 01 39 96 61 91 72 d9 a8 9b 33 1a 07 fc 49 1f 38 e9 ac ee 6e 48 de d5 6d 00 c4 bc c1 3d a7 f2 6d ea bc 9d cd 9e d3 fa 29 36 6d 4e 9f b2 05 32 57 82 6f 4d 75 fa 47 14 be 2c 8b 88 53 4b 3c 01 fe f6 d3 9f 7e 8a ad 80 12 57 7b d5 32 ef ea ee eb bd 6c 2d 5a c5 aa 51 0e 34 3c 52 2d 9b 5f dd 7c 93 4a a5 de 14 f6 5f ef ef c7 82 c1 Data Ascii: R)pgx^H^yImX<@)3fIWs5#kLNv_H29srS5=2rTF"h4Z81As/A"8j]p<PS9ar3I8nHm=m)6mN2WoMuG,SK<~W{2l-ZQ4<R-_\|J_
2024-07-15 15:50:11 UTC	5930	IN	Data Raw: de 12 11 7a ef 3e ab 94 d5 43 ec 40 d1 0a c1 b8 cb a0 9f 02 a9 17 47 0b a7 1f 33 ef 4e 3f 66 3e 7e f8 f0 2e f3 ea ec e3 19 54 c3 67 de 9d 1d 65 ee 1c 5d 1c bd cb c0 8b ae 8b 27 1f de 5d 7c fc 78 e7 ce c5 d1 9d 8f 0b ef 4e 2f 32 0b 99 a3 d3 77 ef 3e 66 ee 2c 64 2e ce 4e 33 99 8b 8f 77 32 0b a7 a7 17 ae 8b f3 a3 77 a7 0b 99 3b ae a3 b3 a3 4c e6 e3 c5 c7 77 17 1f 2f 4e df b1 06 3d ce 64 79 4f 5e d5 49 bf 19 74 58 bb c9 66 b3 0f c6 0d ac 7b 5e 2b 92 bb ce 39 ab c1 b9 84 3b 62 8e a4 53 b5 fe 15 ff 2f 5c 16 1d 5c 74 9c b8 f6 77 41 f7 3a 1c 95 a1 ce 0a e8 f0 bb 95 a5 92 a0 bd 1d bc 6b 0a 7a 19 6c 44 2f 05 7d a9 32 46 f8 b0 4b a5 9b 02 2b 3b 74 54 51 7f 83 d1 96 70 cc ce 3a 0e 1d a0 8c f0 d7 c0 07 3b be 4a 07 6c 4e a3 ab e1 bc 45 50 49 dd d7 40 17 08 c8 c8 21 4d Data Ascii: z>C@G3N?f>~.Tge]']\|xN/2w>f,d.N3w2w;Lw/N=dyO^ItXf{^+9;bS/\\twA:kzlD/}2FK+;tTQp:;JlNEPI@!M
2024-07-15 15:50:11 UTC	7116	IN	Data Raw: 15 47 a6 f5 8d cd 58 fa e5 e4 a3 47 8f 7e a4 3f 3f b2 fb df 20 93 bb 81 95 da 55 b1 d7 b9 b8 38 3f ef 34 39 e7 e7 e7 a1 77 93 db ed c1 80 99 74 20 e7 c3 45 cc e5 13 53 33 93 a3 28 33 f8 85 0f 46 47 27 27 27 e1 87 7d e9 8a cc a0 e0 3d b7 fc 29 18 eb 2c d8 35 85 6e 80 c7 66 b3 af 4b af 51 4a 60 de aa 3c 1a e9 72 4b bb dc 1e 23 a3 e9 00 cc 6d 9e 81 9c cf 4f 31 f7 83 d5 0e 77 3e 58 d7 e1 1b 34 3a fc 80 d5 c6 6f 6b c3 0c 5b 4f 67 ad d3 0c 08 96 18 d6 50 af c1 ce 21 4f ef 9a 72 db a5 cf 99 f5 26 56 b6 9f ff f4 af 9c fc 08 5f 3f 3e 7d fa f4 e9 f3 a7 2f b6 03 14 ef 62 b6 86 39 10 5e 43 c3 0b e2 64 c5 eb 85 0d 09 af 1a 36 aa d5 14 65 af 77 de eb 9d 4f 78 9d 4e b5 53 ed 74 ce d3 dd e7 61 e3 3c 50 9d 48 38 bd 8d e3 c1 22 1c 31 ef f5 7a 13 d9 95 c0 f6 6e ec 75 fa 4d Data Ascii: GXG~?? U8?49wt ES3(3FG'''}=),5nfKQJ`<rK#mO1w>X4:ok[OgP!Or&V_?>}/b9^Cd6ewOxNSta<PH8"1znuM
2024-07-15 15:50:11 UTC	8302	IN	Data Raw: 20 b3 ea 4b 1a 60 3a ea e5 f6 ea 34 bb b6 9d 85 12 59 40 db ab 06 da d8 6c 98 37 90 62 03 eb 85 8d f5 f5 4d 28 54 ad d5 cb a2 e9 4e d5 38 cb 39 cc 6f a9 4d 45 43 b5 9e da df 59 b5 ce 9b 2c 6b 90 35 03 95 7e bf 17 48 7f 46 59 65 35 35 28 73 1c ad d4 32 70 d6 eb 9a 1c b6 8f 40 79 2b 3d 96 7a fb 74 58 c0 51 40 9d 48 98 d8 dc 3a bc 72 5f a2 61 63 71 10 ef 06 83 7d 2e 12 f6 63 23 76 8c 7e a9 92 be b0 2f e7 d6 83 75 0d d8 fe 70 39 2b 46 63 e8 ca ff 9f bd b7 fb 4d 33 cd b3 45 91 a2 08 3b 57 75 51 56 d4 56 d4 f1 d6 19 a9 4f db 6e 61 81 07 d4 80 50 42 e1 1e 13 94 52 d9 ae 73 c1 2b 9a f1 d0 9b 8f 90 60 02 0a 17 85 f8 1e 4a 07 08 98 1d 86 0b 10 20 14 10 36 db d9 4c 13 3b 73 9c 4e 47 19 55 f5 a4 dc 2d 75 b4 a3 54 aa a5 8a 52 2a e2 48 75 11 f9 8f 38 5a bf e7 79 01 3b Data Ascii: K`:4Y@l7bM(TN89oMECY,k5~HFYe55(s2p@y+=ztXQ@H:r_acq}.c#v~/up9+FcM3E;WuQVVOnaPBRs+`J 6L;sNGU-uTR*Hu8Zy;
2024-07-15 15:50:11 UTC	2832	IN	Data Raw: b1 3e 17 23 7a ab 9b f0 cb a6 d2 1d 32 4e 85 e7 b9 df e6 8e a7 62 5a 1a ae 2d ce 2f 2c bc ff e1 87 1f fe ea ec d9 79 67 b4 1d 30 fc 56 57 4b dd e8 26 53 61 9d cb 96 a7 f2 a1 9b 49 f9 fc 1d a5 d2 b4 5b c8 c7 b1 5b 27 ba 3a b1 6d 55 fa 87 a5 0d 53 2b df 1e d1 df e3 07 95 39 15 e7 40 fc 50 09 df bf 41 99 3c 35 f0 c8 42 11 fe e6 d9 c3 29 3c 4d e0 18 33 47 54 a1 a1 1c de 19 ad a0 5a 17 b7 d7 69 79 ae 41 42 f0 95 19 cb 8a c5 2f d8 15 73 ec 3a 02 42 ec 74 4c fb 96 fc d1 47 e7 bf e2 19 93 c8 7c 36 77 28 1e 0a 85 dc 35 21 ec 0f c3 d4 40 4d 9a 4a 35 77 28 55 40 33 0b a9 3a 76 d5 69 59 9d 35 aa c4 b5 6d b6 0c 92 06 97 d4 ef 4b 65 1a 1a 6a a5 f1 95 96 82 cd cf a5 1e 6b e4 a0 60 03 67 ae a9 85 58 45 2e 17 cd 40 91 0e cb 2e e1 5a bd d9 b2 4e 63 db 55 86 17 8c 44 fc b6 Data Ascii: >#z2NbZ-/,yg0VWK&SaI[[':mUS+9@PA<5B)<M3GTZiyAB/s:BtLG\|6w(5!@MJ5w(U@3:viY5mKejk`gXE.@.ZNcUD
2024-07-15 15:50:11 UTC	10674	IN	Data Raw: 6c 68 b4 a3 f1 da e8 bc f2 48 25 7f cf 62 39 b5 9a 75 72 f2 67 01 03 06 4d ee 50 28 1e 4f 14 7a cc f1 b0 d9 4d 16 42 10 46 1e 34 cc 3a 34 a9 6a 75 ad 5d 48 30 1e 4e db ff 15 db 30 e5 bc db d1 81 49 2a 33 79 22 c0 83 7b c7 e9 39 26 13 f0 bb 2e 83 12 3c d4 5f fc 7e 38 28 ba 43 f1 78 c8 1d 76 75 00 63 ce 4b 1d 74 07 d8 8b d1 5d eb e9 75 99 e1 85 e6 e9 37 07 7b ac 04 df 61 2d 76 a0 99 be da ba b9 f5 d1 f9 ab 57 59 f6 8e c6 dc 16 af e2 ef 1d 3c 7e fe fc 57 5a 6d 12 92 96 32 19 28 f8 b9 49 b4 08 e4 3a a8 4a 89 e2 71 6a 93 5a 39 44 81 1d c6 f0 70 68 1f 64 f0 fd c2 5d cc ee ff 52 9c cf ce cd ae ad ac 29 2c 10 a5 ca e6 62 d8 5b d3 eb a1 2c 6f b5 52 71 2e 52 60 55 c6 15 99 d0 8e e9 b5 b1 69 af 51 a1 b0 ab c0 8b 1b 31 e3 46 e7 35 40 ff 31 0a 52 ec a5 20 29 a7 c9 b5 Data Ascii: lhH%b9urgMP(OzMBF4:4ju]H0N0I*3y"{9&.<_~8(CxvucKt]u7{a-vWY<~WZm2(I:JqjZ9Dphd]R),b[,oRq.R`UiQ1F5@1R )
2024-07-15 15:50:11 UTC	11860	IN	Data Raw: 1b 7b 87 e3 f8 cf 03 bd 26 f9 d9 3b 63 ef b2 8b c4 85 df 49 de 3d 76 6c 0c 7d 3a fa 82 37 e3 3e 39 f1 ee d8 b1 77 de f9 11 5d 0b 7e ff 8b ef 6d 91 7e 4c aa 04 c4 45 a4 0f b1 60 45 fe 0c ed af 89 6c 1a 21 94 69 cd cf 2f f6 9b e1 e4 bd e4 6c 34 ac 8d 41 9b bc 99 ac bb 6d 7e 22 d6 50 65 4f 6a 13 e9 74 3a 62 ab e3 42 d0 c2 e6 a7 4f 40 df 8e c2 f6 50 9e 8e cf 2e 17 cc 99 58 da 2e f8 ea d5 72 32 16 8d 39 b1 15 2e c3 d5 20 ad 4c cb bc 96 c9 fd c7 df 1c dc bc 75 fd fa 47 d7 19 cc ff f7 de de 9f f6 1f 3f c5 79 fc f0 4f 7f 42 80 df 12 bb 74 2c a3 bf be b5 75 fd 23 8a f5 ec 7e c6 8d 83 d9 f2 75 16 d1 35 10 a9 5b e4 40 a7 90 0e f1 78 b1 1c 66 7f f3 a8 0a 5c b1 fe f7 00 b4 22 d0 89 93 8a 7c 3d 57 c9 12 c5 b5 12 b3 b2 e7 be 34 a1 b3 ea f5 8d 92 53 af 2f 15 ed cb 67 ce Data Ascii: {&;cI=vl}:7>9w]~m~LE`El!i/l4Am~"PeOjt:bBO@P.X.r29. LuG?yOBt,u#~u5[@xf\"\|=W4S/g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.6	57824	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:11 UTC	937	OUT	GET /lib_idKrFnnqnDIKXMAQ/s1uokjc6kos2mlac.png?w=500&dpr=2 HTTP/1.1 Host: www.umso.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
2024-07-15 15:50:11 UTC	252	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 198350 Content-Type: image/png Last-Modified: Fri, 03 May 2024 10:23:22 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:50:11 GMT Connection: close
2024-07-15 15:50:11 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 05 7e 08 03 00 00 00 d2 92 e4 b2 00 00 03 00 50 4c 54 45 ff ff ff f8 f8 f8 f9 f9 fa ed ed ee fc fc fd fb fb fb 05 c6 ff fd fd fe ff ff ff ff fe fe 1f 0f 08 3f 20 0f f4 f4 f4 0d 0a 09 50 3e 2c f0 f0 f1 48 23 0f 18 0b 06 82 52 33 2e 18 0c 47 3a 29 38 1e 0e 99 6c 4f f6 f6 f6 e9 e9 ea 35 1a 0b a1 72 55 90 69 50 4d 2a 15 54 2e 18 26 11 08 72 62 60 f8 f0 fc fe e4 6f 00 c3 ff 59 45 2f f2 f2 f2 87 57 39 63 4b 32 5b 32 1a 52 4a 47 60 39 22 75 45 2a 6d 40 27 8c 5c 3e 86 61 46 49 45 41 97 76 64 93 67 49 7b 4b 2f 67 3b 22 53 52 52 28 16 0b 44 29 16 41 3e 3a fb b2 63 4a 40 36 fd db 76 61 53 51 56 58 5c 52 45 3c 70 5a 53 67 5a 58 78 4f 35 53 25 10 7a 6c 6b 7c 64 5a 92 60 41 6d 49 30 f4 ac 69 39 32 2a 40 Data Ascii: PNGIHDR~PLTE? P>,H#R3.G:)8lO5rUiPMT.&rb`oYE/W9cK2[2RJG`9"uEm@'\>aFIEAvdgI{K/g;"SRR(D)A>:cJ@6vaSQVX\RE<pZSgZXxO5S%zlk\|dZ`AmI0i92*@
2024-07-15 15:50:11 UTC	2372	IN	Data Raw: 10 39 14 8d 75 ba 6a d7 2d ab fa fc 73 ab ce fe 6b ea f7 5b 6b 3d cf 7a 9e 24 a0 80 dd 78 ce f3 03 f2 c6 43 4c 62 3e f9 fe de d6 6f 11 b2 1e 66 36 13 53 44 33 18 0c 06 3c 81 73 dd de 56 33 9c 3a 75 e8 94 da 52 34 d7 c3 6e 3f 04 df 87 64 bb 83 76 e9 ce 25 6a 37 6f 5e 7a 79 f3 25 7c cb f6 90 7e 3f 41 7b 8e b6 f8 7c 71 71 71 71 50 36 37 fc c8 36 09 3f 2b 5a 6a 2a fe c0 29 bd 9a ea 4e 85 53 6a 6e fc 81 53 3c c3 8b 05 ee 82 d4 82 d4 02 7a 82 3f cb 59 79 79 39 fc a8 ed ec d9 b3 f0 83 f6 84 9e 3c 79 82 4f ed 21 3b 47 3b fb e4 09 fb 3d b7 f2 b3 ec 1e 0a ca e5 7f 41 7e b0 a9 07 53 0f 8a 56 5b 7b b0 56 6b f5 f4 4b 6b a1 f5 e2 dc 1c e9 ed 01 70 cb 8c 33 dc 75 7b 0b cd 88 c4 52 78 0f 21 bf 70 82 f0 c3 cd ec 0a bb 49 f9 56 28 87 6f 8a fa 1d 8e ba da 5e be bc f4 f2 92 Data Ascii: 9uj-sk[k=z$xCLb>of6SD3<sV3:uR4n?dv%j7o^zy%\|~?A{\|qqqqP676?+Zj*)NSjnS<z?Yyy9<yO!;G;=A~SV[{VkKkp3u{Rx!pIV(o^
2024-07-15 15:50:11 UTC	538	IN	Data Raw: a7 df 23 04 ea bc fb 5d ee 9c 59 ad a2 9b 14 41 c7 85 e7 50 3f 80 ce 18 dd 75 d7 4d b7 75 30 13 49 c1 ca 3a b2 0e 4e 3c eb 97 d3 b4 ca 89 2d b1 da 42 9b 5c 66 fb 02 24 7d 95 8f 43 58 cb c2 0a e8 a0 e7 3a e8 ba e9 b6 7e a0 b3 26 1a da 84 43 9b 63 1f aa 55 3d 6c 01 6b c4 40 1d 68 5f e5 e3 50 f7 b8 43 80 4e 7b 5d 75 45 d7 4d b7 f5 03 9d 75 c9 b2 ee 5f 01 f5 72 6d 4e 4e f6 df 95 fc 3b 2f a5 af c5 75 17 32 71 94 73 da f9 96 a2 83 ae 9b 6e eb 60 26 92 92 12 9b 22 4c e4 e2 d2 4e 93 73 11 ba 67 22 f4 be 73 ff 1d 58 5f dd a3 50 71 8e 9d 32 b1 af 04 ba 49 ee 0e 5c ed 0b a0 9b 6e ff 52 40 4f 81 d5 45 a7 62 d8 b0 5d 1a b2 df 11 51 57 a6 4d 09 81 ba ca 7f 57 4a e9 ab 7c 14 ea a5 2c dc 71 8f 59 1e 74 d5 af 74 d4 75 fb e9 cc bc e1 2c 02 e8 31 31 b1 31 b8 f4 f3 54 0c 9d Data Ascii: #]YAP?uMu0I:N<-B\f$}CX:~&CcU=lk@h_PCN{]uEMu_rmNN;/u2qsn`&"LNsg"sX_Pq2I\nR@OEb]QWMWJ\|,qYttu,111T
2024-07-15 15:50:11 UTC	4744	IN	Data Raw: f2 01 26 aa e6 27 0c a4 7a 03 99 19 86 33 01 58 1a d0 63 52 70 b0 22 5f ab 5f 5d 6d a8 e6 e1 ba 98 84 0f f3 e0 35 f9 f7 d5 2a ba 02 ba 30 d1 99 4e 96 89 08 ba c9 44 e6 37 69 30 47 d4 47 e7 c9 89 d5 3c 00 dd 74 d3 18 b8 bd 46 3a 98 30 e2 34 bd 18 03 5d f0 4d 5b 3a 0d d5 d5 13 f3 d3 1b c5 96 e6 a7 aa 81 74 b3 1a f4 04 7c dc 4c d2 d1 73 36 e1 a7 02 75 e1 39 ea 6c a0 a4 88 ba 9c 94 13 49 5f c5 3b c6 a4 1a f1 2c a7 dc a3 81 6e 36 9d 20 4b 11 30 47 d4 97 74 d2 75 5b 07 33 99 88 41 9e 71 15 c9 12 13 13 4c 04 fd 63 d0 f3 6a 70 30 37 90 6d 9a 19 37 42 5e 5b 89 d2 39 e8 4c d2 01 75 a3 c1 64 a8 86 68 1d 60 17 3d 78 59 d6 b5 aa 2e 16 d5 57 f3 a2 0a ed af 6a 41 8f ac e8 27 c8 3c e3 5c eb bd 6f da 64 d5 35 5d b7 b5 1b d4 81 12 57 b0 b8 04 3a 56 06 f4 7c 62 2c 8a f2 fc Data Ascii: &'z3XcRp"__]m5*0ND7i0GG<tF:04]M[:t\|Ls6u9lI_;,n6 K0Gtu[3AqLcjp07m7B^[9Ludh`=xY.WjA'<\od5]W:V\|b,
2024-07-15 15:50:11 UTC	5930	IN	Data Raw: 15 d0 c1 c2 2a 6d 7c 4b 56 b2 2e c9 38 26 e8 91 40 57 7a dd a1 c6 36 01 85 0b cd d3 d5 93 ee f2 2b 0b a5 25 78 83 9b 69 67 1c f0 ce 6f 09 ef 8c e3 68 1a 88 c1 6c 36 63 8b 24 dc 07 ed 7c 03 e2 e0 3e cc 06 c0 07 6f 82 d9 05 d0 d8 16 c3 7e 0f c3 0c f0 cc 04 7f 64 82 ce 38 f8 47 d2 8f 76 d7 85 73 ce 3f 0b cc d8 5a 07 04 43 eb 1a 36 dd 19 e0 81 43 37 1e 81 05 56 70 df ca 3f 00 91 23 34 6a d3 a7 82 f3 0f e1 a1 1a f0 9f d4 76 c6 d1 97 80 de 6c c0 ce 38 7c 42 f8 dc e0 d9 b0 7e 3a 93 09 6f 88 da eb 1e 97 12 03 63 26 12 53 12 d3 d3 61 55 8b bc b0 45 06 3d 42 c3 9b a6 9f 45 db d3 a5 be 31 42 f3 4b 84 23 54 37 ad d8 4d 1b a1 8e ce 83 f4 57 48 c6 45 ec 9e 39 25 6e d2 f8 8a 74 af 16 74 61 39 3a 9b 32 a1 ed 8b d3 17 a4 ff 98 86 ed d1 2b 1c 11 1b a3 e9 3b db f8 a6 5e d4 Data Ascii: *m\|KV.8&@Wz6+%xigohl6c$\|>o~d8Gvs?ZC6C7Vp?#4jvl8\|B~:oc&SaUE=BE1BK#T7MWHE9%ntta9:2+;^
2024-07-15 15:50:11 UTC	7116	IN	Data Raw: cc 57 6d 2e 4e a6 0e 5a 5e 61 ed 8a 66 95 9a 5a ce 91 f1 3b 08 f9 da 41 0f db 80 96 a5 0f f8 f8 cf e5 9f 95 6e 1b db 62 8c 09 5f 1d 70 3a 9d 76 bb dd e7 f3 d9 b3 a0 41 06 62 74 ef 96 b4 34 9f e7 a3 34 6f 76 76 7c 76 36 84 e8 5e 80 16 70 06 92 87 87 33 86 3d be b4 7c 6f 9a 27 e7 ab 8f d0 71 67 a8 83 5f 9f 63 b1 64 66 da 72 20 d8 f7 7a 73 6c b9 b9 50 60 db 6f 93 72 73 2d b6 2c 3f 8c ac 80 fe 77 ec 7b af aa aa 1a 18 d8 57 d5 de d9 d9 be 67 68 68 4f fb 1e 10 75 e6 bd 73 a3 8c bb cb dc 93 e8 ae 23 e7 28 e4 65 6e 66 83 a9 93 20 e7 ee c1 45 b7 7b 71 70 b1 80 2a 3a 80 be b8 58 90 7a 90 fa ee 17 2f 5e ac bf a8 05 9d 0a 3a fd a6 55 74 45 d0 11 f4 fe 8b b5 a9 05 67 9f 5c ba 74 e7 50 c2 ca 10 af 68 7c 6c 2e 4f 6d ab 4d 90 57 75 ae 5d 55 4d 93 a5 1c 94 5c a6 7c ed a0 Data Ascii: Wm.NZ^afZ;Anb_p:vAbt44ovv\|v6^p3=\|o'qg_cdfr zslP`ors-,?w{WghhOus#(enf E{qp*:Xz/^:UtEg\tPh\|l.OmMWu]UM\\|
2024-07-15 15:50:11 UTC	8302	IN	Data Raw: b2 50 7d 32 75 12 7c 77 ae e8 2d 02 e8 61 05 36 b8 41 d5 18 a7 06 9d 2a 3a 93 74 40 55 c8 aa 69 a9 0e a3 5c 9e ca 2e 97 cc 23 34 b2 2b f9 75 a5 81 9d fb ea 54 c5 f1 94 56 17 68 df 9f 32 00 57 07 5d b7 28 66 22 e9 ff fa 43 00 7d f3 e6 f7 28 e3 1c f4 0f 69 d6 fd 43 f0 df 85 51 12 72 01 0e c5 1a 6f 67 ed 71 b8 0f 13 ab ad f1 45 6f 6c 67 26 af d7 bb db 8e 72 0e 27 67 20 17 27 81 9c f7 58 5c 0e 97 0d 87 44 06 5b b1 bc 16 6c ed 6c 95 02 9d 9d 9d 9d 7f df 7b fc 38 0d a9 2b 43 fd 5d 5d 93 5d 5d 93 d8 3a 23 80 fe 0a 6e 7c 2a bc ff 27 53 27 6b 27 65 ce f7 c8 a0 bf 2b 6b ba b0 83 03 9b 25 c5 c6 3d 53 d0 ab 00 f4 10 f3 dd 29 e8 90 79 7f f2 e4 09 84 da 2c b7 06 24 2f 8f b9 50 4e 13 fb df d8 ac 18 0d e6 c8 b8 aa 5e ce e3 71 79 d5 3d 83 5b 6e 0b d2 41 d7 2d 9a 19 c8 b6 Data Ascii: P}2u\|w-a6A:t@Ui\.#4+uTVh2W](f"C}(iCQrogqEolg&r'g 'X\D[ll{8+C]]]]:#n\|'S'k'e+k%=S)y,$/PN^qy=[nA-
2024-07-15 15:50:11 UTC	2832	IN	Data Raw: f1 26 ba 4d c4 29 18 4f 24 a2 89 c4 0a 84 9b 6e 25 a2 69 a9 e1 69 fe 83 8b 60 3a 4f c4 83 c1 60 58 12 5e 0d 19 97 9c 77 e1 ba f4 3a 2f 59 31 d0 ef fe 66 df 2b ec b8 0b d0 21 dc 66 83 9c f4 da 45 53 9c 79 1a 9d d4 5b 78 ea 72 3b 93 26 e8 ac f5 38 af 2a ce af ba bd 10 f4 50 73 43 83 0e 7a 8b 04 1d 8b 5f 48 d1 67 07 67 07 7a 7d 27 43 b3 83 b3 a4 e8 b3 74 95 fa c3 6a 6a 72 52 a4 b4 08 74 90 0d 13 3a ad db 0a 7d 3c c6 05 9e 80 27 32 e5 4f c9 6b 17 11 fa 83 a3 0f 1e e4 77 cc 10 ef 94 9b ab e0 3f d5 50 75 d0 ce 51 ba 49 3a eb ba f4 b8 0b cd a2 db 79 96 48 2c 25 94 11 e5 90 6d f6 d3 19 ef 74 3a 1d 4b a7 63 d1 74 3a 06 11 27 1d 8f 01 ef 60 67 18 80 57 0b 37 dd 04 bc 0b 90 77 c1 4a 2f f3 92 15 03 fd 9f 7f a3 d7 ce 99 73 31 5d 46 74 c9 f1 23 34 60 86 d3 70 66 12 ce Data Ascii: &M)O$n%ii`:O`X^w:/Y1f+!fESy[xr;&8*PsCz_Hggz}'CtjjrRt:}<'2Okw?PuQI:yH,%mt:Kct:'`gW7wJ/s1]Ft#4`pf
2024-07-15 15:50:11 UTC	10674	IN	Data Raw: c2 4a af f3 92 e5 9b d3 e1 78 fb 15 6b ca ad 70 e3 a2 ec 94 93 99 76 e1 b6 b7 9e 11 86 19 32 54 4a 33 8f aa 93 9a a3 aa e6 75 07 ea 9b 3d 0d f0 dc d5 f1 d4 ba 80 af c5 23 b5 9d 7c f7 be be 80 d7 85 64 dc c9 93 bd a1 5e b7 db e5 76 55 b9 7a 7b 43 97 30 4e 6a 10 19 b9 99 55 02 1d ae fb c6 c6 72 3a 91 58 a6 4a 7a 3a 18 b4 70 fe c3 c6 ee bd d4 74 81 3a f9 ee 0f 44 b4 4e 25 b7 a3 0f ce f1 7b 00 cb be c8 c7 51 8d 2d 4f d4 b9 11 87 38 47 03 ae d5 24 eb d2 5f 7f 71 da 4d 36 b5 32 ea dc c0 5e d4 30 03 47 50 ce 7f b9 be d6 d8 58 02 bd 64 45 cd 69 ec 7f 47 eb 8c 61 da 75 c8 51 7b 93 94 eb a3 64 e4 12 55 9e fc 28 4f b1 11 e3 68 94 21 af 1d eb 51 bd 7d f5 cd ba a0 37 78 ea 42 bd 70 db 7b 7a 7a 50 52 c7 e4 b8 fa fa 96 40 c0 eb c6 79 f4 93 be de 50 c0 8d 79 b1 55 ae 40 Data Ascii: Jxkpv2TJ3u=#\|d^vUz{C0NjUr:XJz:pt:DN%{Q-O8G$_qM62^0GPXdEiGauQ{dU(Oh!Q}7xBp{zzPR@yPyU@
2024-07-15 15:50:11 UTC	11860	IN	Data Raw: b9 8b 55 e7 72 28 b3 c9 3a af 36 27 1f be b6 d6 5c 7b 2c 72 76 fc d6 50 87 41 52 5d 42 d1 fb bb 7a 10 a6 37 d7 d5 77 b4 d4 8a 25 8c 62 a2 0c 49 7a 18 aa cc 99 f2 7e ec 56 24 ce 53 ab fd 3d ed 0c 3a ef 42 46 c3 88 3c 4d 52 8d 0a 7d 34 8a 08 7d 85 00 27 cc 17 d7 18 eb 4d 01 38 19 70 1c 1d 65 01 27 9b 9c 3c 8d 4f 81 74 49 e8 28 29 31 c1 9e 22 de 53 49 8a d2 65 3b db c5 46 3a d6 ae a5 e2 44 84 6e e5 9c 05 7d 72 2b 9e 48 68 a0 b3 9a 83 72 b2 b6 b6 b6 8e 53 a7 4e 75 d0 87 d2 f6 02 c2 b5 c8 bc 38 e6 9a b2 4b c8 85 a0 97 40 2f 59 3e e8 ff 3b 14 5d 0b d2 5b 01 ba 5b 7a ee 34 79 5d 6d 4c b2 b2 2e 1c f9 be be 02 ce 79 2d 03 10 ae 00 8d 4f a3 31 9c 18 a1 b9 71 1d 1d f5 f5 2d 7d 81 50 28 8f f4 98 aa 7c f7 87 7a 7b 31 29 ae 1f 9c f7 88 13 22 b2 d3 1c c4 0b 4d af ae 96 Data Ascii: Ur(:6'\{,rvPAR]Bz7w%bIz~V$S=:BF<MR}4}'M8pe'<OtI()1"SIe;F:Dn}r+HhrSNu8K@/Y>;][[z4y]mL.y-O1q-}P(\|z{1)"M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.6	57828	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:11 UTC	937	OUT	GET /lib_ppHbngvSkiYmyFdO/m7f7yovyl5ocidz5.png?w=500&dpr=2 HTTP/1.1 Host: www.umso.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
2024-07-15 15:50:11 UTC	252	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 134447 Content-Type: image/png Last-Modified: Fri, 03 May 2024 10:23:22 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:50:11 GMT Connection: close
2024-07-15 15:50:11 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 05 7e 08 03 00 00 00 d2 92 e4 b2 00 00 03 00 50 4c 54 45 ff ff ff 17 94 f4 f7 f8 f8 fb fb fb fc fd fd 20 21 21 0e 94 f6 fe ff ff fd fe ff fe ff ff fe fd fd f9 f9 f9 e8 e9 e9 f2 f2 f2 f4 f5 f5 f6 f6 f6 37 44 44 fb fd ff 34 41 42 ff ff fe 26 33 34 ec ee ee e6 e7 e7 fe bf 26 db dc db fe ba 23 ca ea ff 09 0c 0f 2a 37 38 1a 96 f5 ea eb eb fe b1 1e ee 98 47 1a 1b 1b 2e 3a 3b fe c3 2a ef f0 f0 01 8b f5 fb a1 14 32 3d 3e dd de dd ff cc 2f 12 12 12 fe b6 21 ed 94 43 06 8f f5 d8 da da fe a9 18 bd c1 c1 e3 e5 e5 eb 8c 3d 3c 47 47 fe c7 2d fe ae 1d de e0 e0 d6 ed fd d1 d4 d4 25 26 25 ab da fd 0c 91 f4 b7 bd bd 71 76 75 e0 e2 e1 b1 b8 b8 28 9d f4 d4 d7 d8 c9 cd cd c0 c5 c6 cd d1 d1 21 2e 2f 13 88 d9 f5 Data Ascii: PNGIHDR~PLTE !!7DD4AB&34&#78G.:;2=>/!C=<GG-%&%qvu(!./
2024-07-15 15:50:11 UTC	2372	IN	Data Raw: f2 ac ec 6e c0 f0 c6 c0 2c 66 f9 fd 03 83 73 23 f8 52 ea 95 59 f9 54 c6 2f 53 12 19 8c b8 71 23 18 bf 7b ce 3d e7 dc 73 00 5c b8 70 e1 c2 85 0b 17 2e 5c b8 70 e1 c2 85 0b 17 2e 5c b8 70 e1 c2 85 0b 17 2e 5c b8 70 e1 c2 85 0b 17 2e 5c dc 50 08 94 4a cf 07 22 08 02 df 6d 86 0a 44 7a 03 21 d0 d7 7b 77 5d b8 78 23 c0 f3 02 ed 91 f5 59 41 04 87 47 3c e5 e9 9b c9 28 4a f8 fe 60 e4 c2 c5 bb 0a 5e a0 50 89 d5 9e 0b 55 a0 bc 4d 22 9e 52 9e 0f c6 de 3c 54 93 0a 7d fe 81 cc 85 8b 9b 02 81 2a ad 66 e1 f9 d0 ac 29 94 0a 76 2b bc 50 88 84 df 3c 44 9a 49 78 43 75 0d 17 2e 5e 21 04 aa b4 6b f0 3c 54 e0 a1 d2 2c 29 c4 21 3a 44 e3 f1 5b 6f 20 c2 1d 90 58 17 5d b8 78 97 41 f9 1f fc 22 a6 24 9f c7 ce 95 84 66 55 b1 59 24 50 e5 0f 91 5b 6f 20 46 c2 35 a7 8b 2e 5c bc cb 10 24 Data Ascii: n,fs#RYT/Sq#{=s\p.\p.\p.\p.\PJ"mDz!{w]x#YAG<(J`^PUM"R<T}*f)v+P<DIxCu.^!k<T,)!:D[o X]xA"$fUY$P[o F5.\$
2024-07-15 15:50:11 UTC	538	IN	Data Raw: 74 94 5a 27 18 a9 41 31 5e 2f 84 9b 9d 50 13 0a a8 fd 15 b0 23 6d ab 54 0f b5 0a 56 2b 76 29 19 98 44 6f 46 6b 91 5a d2 6a 57 1a ed 52 18 99 cd 8f d4 a0 58 4c 16 1a 15 ab 5d 09 59 c9 b6 55 b1 0a a5 d8 15 06 6c 09 9a 85 64 b9 03 ed 48 ad 33 52 80 a6 15 6c 47 a2 d1 70 15 9a 0d a8 45 6a d1 cb 03 2c 28 14 1b d5 4e a8 a0 e0 bd 6c 26 43 ed 52 1d da f1 4e 3d 1c ab 84 6a 50 8b 27 83 e1 46 a7 d5 68 54 eb c9 42 a3 d5 6e d0 62 a3 15 6b 5d 66 83 38 97 e8 02 85 8a 65 15 e2 05 28 85 1a cd 62 3c 1a 2b d3 5a b8 d9 8c b4 07 bf bb 4b 55 f7 70 ac 55 0c 85 c3 71 2b 18 ac 27 9b e1 a6 54 ef 44 43 71 87 e8 45 69 a4 16 0c b7 2b b5 68 34 dc a4 d5 7a a5 13 2e 56 6a 9d 16 32 3d 6e 05 6b d1 26 93 e8 91 6a 2d 1c b6 a0 51 80 6a dd 92 9a e1 4e ab 56 89 e1 97 87 92 3e 59 0c d7 a4 58 47 Data Ascii: tZ'A1^/P#mTV+v)DoFkZjWRXL]YUldH3RlGpEj,(Nl&CRN=jP'FhTBnbk]f8e(b<+ZKUpUq+'TDCqEi+h4z.Vj2=nk&j-QjNV>YXG
2024-07-15 15:50:11 UTC	4744	IN	Data Raw: 6c 40 34 12 bc 6a 8e ce 17 23 56 b8 99 8c c6 0b ed 62 88 6f 86 6a 12 58 4d 50 8a c5 24 12 3d 24 55 e3 1d fb c6 55 ac 62 bb 19 8f d6 e2 85 cb c7 b0 f3 89 2e 41 2d 54 81 d8 48 ab d0 48 42 ad 5c 8a 85 f8 5a b9 05 ed 46 72 a0 7f e7 10 bd cf b2 88 d5 49 96 3a c5 70 bb 55 0e b7 4b e5 60 2d 1c 8f d6 c2 23 b7 46 a2 b5 50 23 18 0c d7 ab e1 86 15 6e 48 8d 62 b2 18 2e 2a a1 76 f2 56 b8 61 c5 6f dd 8a 34 4a 38 14 17 90 bf d5 ba d5 e8 44 e3 ed a4 15 1e 49 16 8b d0 08 37 ea e5 5a 2c dc e9 84 c3 a5 76 08 9a e1 50 05 89 1e b1 a2 15 44 2b 09 c1 41 f3 dc 6b 91 e8 1b 1f e5 6f 2f a7 0f 6e e7 77 17 91 c3 bb 5b 3b f9 fc 2e 70 8c e8 cb 87 f9 47 d3 77 f3 0b 3d a2 13 2e 9b cf 1b 7e 40 63 dc dd e3 83 83 cc 47 79 83 63 73 f4 f7 f2 8b 30 0e db f9 fc ec 01 ea f9 dc 98 99 7f 02 e9 bc Data Ascii: l@4j#VbojXMP$=$UUb.A-THHB\ZFrI:pUK`-#FP#nHb.*vVao4J8DI7Z,vPD+Ako/nw[;.pGw=.~@cGycs0
2024-07-15 15:50:11 UTC	5930	IN	Data Raw: 05 14 60 83 aa 3b 70 f6 41 14 c8 dc f4 89 88 0a c2 f6 06 36 32 81 9b d7 c6 f1 a9 10 80 db 58 5b 5b 9b e9 5a b9 05 f0 e6 0c 59 d4 d2 1e 34 d5 c3 c6 ce 36 e3 b9 20 a0 29 7e f5 e0 27 99 a3 d3 15 a1 2b 3a 05 9e 08 30 b5 70 b8 9f d9 3f 9d c3 67 81 75 6d 66 63 1c f5 04 0a 30 b9 76 b0 9f c9 1c 2d fb 1d 93 e2 85 44 97 45 75 1b 30 8a 0f 32 ea 00 d1 15 34 0c 4e 2d 1f ff af bb 87 0b 63 4e 1b 82 40 60 74 e6 38 b3 7b ba 84 43 92 2d d1 c1 bf 86 17 11 00 2a a0 9b 62 74 7d fb 28 93 d9 3f 9d 06 e1 19 6d 99 6f 13 04 0a 3b 99 fe 2c 5d 20 f0 e4 f0 5b 4a 74 1e 88 44 21 d9 29 c6 23 23 a1 91 91 91 91 50 68 a4 1c 89 58 c5 76 b5 82 6e 7a 49 72 c9 fe 02 20 08 b0 a8 22 b5 8f 31 8c 94 70 30 61 eb f1 13 c0 81 27 ab ea 7a e2 1e 50 e0 e0 e8 4b 43 d3 64 9c 09 53 b8 73 94 d5 d4 04 5a c8 Data Ascii: `;pA62X[[ZY46 )~'+:0p?gumfc0v-DEu024N-cN@`t8{C-*bt}(?mo;,] [JtD!)##PhXvnzIr "1p0a'zPKCdSsZ
2024-07-15 15:50:11 UTC	7116	IN	Data Raw: f3 fe a6 13 1d f1 32 2a 53 db 8e ba 77 34 bd c7 db 60 8c 5b 3f da 3d 9e 9e 0c 04 26 ef 1c ee 1e 6d a0 31 2e b0 b5 bb 7f 32 19 78 2e 89 3e 34 30 38 7e ae a1 21 a2 6f b8 ef 0f 04 dd df 4f 69 fb fd 23 03 67 85 f9 b9 3b 0f 9e ba 6b ec eb c9 fc 73 8f b2 1b 9d 3c 5c fc 7a 05 2f fd 26 bb d7 5c bc d3 44 0f f8 27 67 fd 8c de 93 fe d9 49 7b 32 8b a6 b9 21 6a 5e 5f a2 77 c5 ea d3 c2 7b 90 e6 83 12 bb 4f c3 01 2d bb bf ef 90 14 0f d8 e3 c6 35 76 3e d3 a1 be e1 f0 1c cb 21 4e d2 67 ef cc 39 16 08 97 e8 2e 6e a2 ea de 53 ad 87 66 b4 67 66 dd 6f 31 bc 4f db 10 ce db cb cb 3c 8c ae 44 77 71 e3 e0 44 c6 0d d8 cc 7a a6 b3 61 69 db 97 ca d7 a1 cc 99 7d 06 8e bd 7c c7 6b 7c e0 1d d6 df af 6a e5 19 d0 37 fd bb 12 dd c5 0d 25 fa 85 01 24 e7 b1 ec c2 79 ee 80 be 3e b4 ef 10 43 Data Ascii: 2*Sw4`[?=&m1.2x.>408~!oOi#g;ks<\z/&\D'gI{2!j^_w{O-5v>!Ng9.nSfgfo1O<DwqDzai}\|k\|j7%$y>C
2024-07-15 15:50:11 UTC	8302	IN	Data Raw: 0f 81 ed aa 92 cb 2a 55 6f 15 24 46 89 c5 40 97 a9 72 c9 c0 00 5e c4 62 8a eb 45 1a 19 19 1f 45 ba d8 05 56 1d f1 14 74 6a 6e 65 65 6e 2a 8d 57 4a dc 66 d2 ab 38 9e f4 b6 8b 26 fd 89 24 78 12 46 cc 88 21 b2 d8 a8 aa 2c 4e a0 89 8d 1d 38 3e b9 ac c8 48 ae 5f 1d 83 9f 37 a9 b8 42 55 50 22 c2 cf 4b 10 90 86 6c 10 22 b1 d8 f1 06 d7 14 f9 ac 3d 6e 7f 16 e8 fc 8c ca fa 5c d2 73 8e 6b 29 c7 b0 90 50 a0 aa cf 40 3b 42 8a 9d 8a b0 0f 16 03 c9 7b df 2a 8a fd b1 34 8a 64 41 f4 d0 dd 92 ed 6b b1 1d d9 4f 44 68 31 35 17 f4 30 6d 8e af 3f 72 74 ec d4 a8 cf e1 72 f9 1c 2e 9f cf e9 72 b9 9c 24 22 67 e6 41 b7 b9 5c 0e a7 d3 79 6a fc d4 aa 27 fe 76 68 1c b7 70 fa 1c 3e 9f cb e5 74 3a e4 c3 2b e7 f8 fe 02 eb 3f 04 e8 88 89 f0 0b 1b 4b 09 cf 48 5b 45 22 7c 07 e4 40 c2 1e 81 Data Ascii: Uo$F@r^bEEVtjneenWJf8&$xF!,N8>H_7BUP"Kl"=n\sk)P@;B{*4dAkODh150m?rtr.r$"gA\yj'vhp>t:+?KH[E"\|@
2024-07-15 15:50:11 UTC	2832	IN	Data Raw: a4 27 d0 7c b4 7b 36 e8 66 cf 84 d7 a2 96 a9 3d 7b 5a 07 9d 0a 85 cd 66 76 78 0e f6 9b 0d 36 9b cd 40 84 7c b1 58 2c 16 b3 7b 78 a0 7f e4 f0 c1 83 93 43 13 28 93 de b3 80 a0 ef 0b 41 77 df 3e fc 4b 9e 71 df ed de b7 8f 7b e4 b7 23 ef 93 97 76 ef db 47 40 9f 57 76 3d b7 2b 28 cf 1d 5b cb 81 de c2 61 48 9e bc 63 5d bf b5 ba 5a f7 da 36 ed 1b 0a 85 c5 e5 fa c3 fe fd dd 43 03 ad 1f 62 86 3b 71 ca 3b 48 51 4b 47 d0 6a 27 90 f7 62 16 6c 6f ef 93 1b 3f 15 e2 ec 2d 3c e0 1c dd 41 f2 6f fc 40 1a 1d a2 f5 68 91 36 14 43 46 5f 14 40 59 5f 32 94 59 b5 f5 2a 63 12 a8 ec f5 5a 9d bd 18 92 34 ba 4a 55 25 86 cd ed da 8a 86 02 6e 51 3b c9 aa c7 95 b7 0a bb 4a 45 40 a9 b3 d6 9b 94 d6 48 28 e9 4b e5 ee 1b c6 3e 95 d6 64 37 02 ab b4 ab 1a b5 f6 42 88 d5 da 55 ca 26 82 7e 01 Data Ascii: '\|{6f={Zfvx6@\|X,{xC(Aw>Kq{#vG@Wv=+([aHc]Z6Cb;q;HQKGj'blo?-<Ao@h6CF_@Y_2Y*cZ4JU%nQ;JE@H(K>d7BU&~
2024-07-15 15:50:11 UTC	10674	IN	Data Raw: 6e ed e0 ba cc 70 e3 d6 5a 07 37 6e fc 59 77 f7 8b 2b 03 53 98 c3 da c4 0b c9 33 3f 32 8d be 28 f7 b1 b0 b1 31 af cf 52 e9 01 d0 c9 fb b7 57 35 8b 8d 79 c2 85 e5 41 27 45 26 14 e4 ba fd 18 6b b7 44 18 2c 96 a9 e9 a9 69 8b c5 30 3d 8d 2a 3b e7 da 11 b7 79 7a 7a 62 d2 6c b0 a0 bf ee 99 f4 7b 27 ce 17 9c f6 7b ae 79 de fb fb 35 19 af 9e 35 f0 a0 ef de 77 f1 cc f4 b9 e0 a2 99 f0 65 c0 e6 be 74 c9 3f 71 69 28 75 9d e8 a5 75 eb 5e 5a b7 2e 06 f6 e6 95 ab 15 f2 08 85 22 42 71 6e df b9 89 79 41 9f ab d5 03 1a 5d 08 bb 7f 5a 5e b5 69 53 de b6 b3 ef 65 09 a0 cb 64 0a 83 41 66 b3 39 2d e7 51 a5 0b b5 6b 1d ad dd 9d 1d 7b de df d3 85 7d de b1 3c 75 70 ff 81 c1 9f 0b 53 d5 82 a4 07 1b d1 85 99 f0 8b a0 2f ca f7 2d 34 fc e6 99 07 9e 79 66 cb 3c 45 2d 31 0c c3 c4 70 43 Data Ascii: npZ7nYw+S3?2(1RW5yA'E&kD,i0=*;yzzbl{'{y55wet?qi(uu^Z."BqnyA]Z^iSedAf9-Qk{}<upS/-4yf<E-1pC
2024-07-15 15:50:11 UTC	11860	IN	Data Raw: bf fd e2 da 6f fe fd f7 85 66 79 51 4f 29 6f d2 66 41 c2 43 0a 12 e0 63 ca 73 73 2b 72 59 cb dc 25 15 d3 13 a7 27 56 4c 9f 39 7d 7a 85 54 2a 85 45 1a f0 b2 50 17 0e 7a 6f 9b d7 d6 5a 53 53 a7 52 a9 55 55 03 4c 2a 8e b4 c0 b2 6f b1 8d 52 74 0c 3a e2 71 0e c0 4e e5 6f 99 c1 c9 c4 6f c1 94 e8 bd d5 33 c3 72 dd 29 ef 7d f3 66 26 44 8f c1 2d ae d0 0f 03 71 fa 18 6b 22 45 58 c2 c1 76 7d 02 a4 03 e7 22 21 ff 73 75 43 f3 8d 13 9f 77 34 37 aa a4 12 c5 f9 d3 0a d9 b1 13 27 6e 9c 5b 91 23 53 37 c3 d5 54 55 e3 a7 0a a9 44 42 48 a7 0a d8 b1 20 9e 89 15 9b 1a 72 c4 eb 7a 2f c9 a4 a3 5c f7 4b e4 10 84 f4 92 f6 fc e9 d8 a1 21 cd f9 f3 aa a1 4b 97 34 97 c2 9c fc af 52 74 3c 8d 7e e1 2f 6f bf bd 50 37 57 5f 68 d6 e9 af b6 9d 4b 78 00 aa e7 f8 3b e7 e6 26 4e 4f cc 65 67 dc Data Ascii: ofyQO)ofACcss+rY%'VL9}zTEPzoZSSRUULoRt:qNoo3r)}f&D-qk"EXv}"!suCw47'n[#S7TUDBH rz/\K!K4Rt<~/oP7W_hKx;&NOeg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.6	57827	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:11 UTC	937	OUT	GET /lib_uKHflxJGsjrjWGxc/dod4uf2jzflk15qm.png?w=500&dpr=2 HTTP/1.1 Host: www.umso.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
2024-07-15 15:50:11 UTC	252	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 109357 Content-Type: image/png Last-Modified: Fri, 03 May 2024 10:23:22 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:50:11 GMT Connection: close
2024-07-15 15:50:11 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 05 7e 08 03 00 00 00 d2 92 e4 b2 00 00 03 00 50 4c 54 45 ff ff ff fb fb fc f8 f8 f8 ff ff ff fe fe ff fc fc fd f2 f2 f3 fe fe fe fe fd fe 00 00 00 fc fc ff ea ea ea ef ef ef f6 f6 f6 f5 70 3c ed ed ed f0 f0 f0 f1 f1 f2 fa fa fb f9 f9 fa ec ec ec fd f3 d1 e6 e6 e6 ff ff fe f4 f4 f5 ff 78 00 f3 f3 f4 fe fe fe fb ef 74 04 05 08 32 33 5d f8 f8 ff e0 e0 df e4 e4 e4 35 36 5f ec 8c 8c ff ec e0 df e1 ff f0 f1 ff fe c9 a2 f3 f4 ff 8f 4d 2e ea eb ff f6 f6 ff e3 e4 ff ec ed ff e8 e9 ff d5 d7 ff 0a 0b 0e fc fe fe ff f3 e9 ff f7 ed ff f0 e4 2f 30 5b 8b 99 ab 87 94 a7 19 36 5b ff e6 da ff fb f1 d5 da e1 d0 d5 dd 13 30 56 96 a2 b3 55 19 02 2a 2c 57 ea ec f0 b6 be c9 69 24 04 5f 1e 03 81 45 29 bc c3 cd 26 Data Ascii: PNGIHDR~PLTEp<xt23]56_M./0[6[0VU*,Wi$_E)&
2024-07-15 15:50:11 UTC	2372	IN	Data Raw: d1 b5 18 34 70 1b 86 06 9e 86 e1 87 73 22 93 64 7d 74 ab 2d ab d5 55 d5 e7 67 ab 2a 2b 33 32 22 92 cd 7f 9e 88 13 11 27 00 41 10 6e 17 5b 78 ed fb 6f bd f3 ce f7 5e 7f fd 35 62 0b 5b 5b 2f bb 4a 82 20 7c d3 6c e1 b5 ef 7e ff ad 77 be a7 94 be 45 4a ff c6 cb 10 04 e1 25 b3 85 d7 df fb ee ca a4 8b d0 05 e1 d6 0a fd 3d 32 e9 eb b6 fb cb ae 92 20 08 df 34 5b 78 fd 5d 16 3a 2b 5d 2c ba 20 dc 5e a1 73 2f 5d b5 dd c5 17 27 08 b7 90 2d bc fe a6 32 e9 ab 4e ba 20 08 b7 0d 11 ba 20 bc 02 88 d0 05 e1 95 11 fa 77 d9 1b 27 4d 77 41 b8 a5 88 d0 05 e1 15 11 fa 9b ef 7e f7 fb ae 45 a7 81 74 41 10 6e 1b 22 74 0f 5d d7 cf 7d 30 e7 ff 14 84 1b cd ad 15 ba 4e ca f5 80 fe 5c a9 59 ed fa e6 8f db f2 69 08 af 3a 5b b7 53 e8 fa 1d 16 b8 46 78 62 bf ea 1d 00 f7 bc 0e 4a cb 3f 74 Data Ascii: 4ps"d}t-Ug*+32"'An[xo^5b[[/J \|l~wEJ%=2 4[x]:+], ^s/]'-2N w'MwA~EtAn"t]}0N\Yi:[SFxbJ?t
2024-07-15 15:50:11 UTC	538	IN	Data Raw: 5b 74 c4 c7 4d f8 a0 21 3a d5 63 76 67 ec cf 4d 83 7b 53 bb bc eb 8c cb 89 f1 a8 ae 45 a7 19 52 ea f1 31 4a ed 67 ab 90 84 5e 28 e4 50 bf 9f 44 7c 6a 23 37 6e 27 c8 7b 1a bd 7f 9c eb 63 67 6a fb ab 4e 01 ed 71 06 9d fb e9 90 5b 46 fa 7e 13 89 b1 43 35 39 18 57 83 07 75 11 fa 35 16 fa ef ef 7d e7 de 1f fe f5 8f a4 f4 7b bf c0 3f 7a ae b9 7b bf c0 82 2d ba 7e 67 8b 07 d9 34 a0 dc ca d4 bb 5e fc 89 4d dc 95 e7 f4 2b 80 8e dd a6 d5 e7 e7 2f 3e 57 2c ba 97 29 f4 76 bb 7d 7c 1c 6e 1c fb a8 81 8a c2 b1 86 ea b8 09 24 c7 bb ed a9 e3 38 63 87 66 0f 3d 35 07 68 c8 8f 53 38 2e 00 23 ea a3 db a3 c4 b8 03 24 c6 95 92 2b f4 ea 38 ef 09 5d a3 a6 7b 7e 7a 9c 2c 3f 53 18 2c f4 42 bb 6d 8f e3 e9 71 1c e8 dc ef a7 a7 d5 51 ee 38 d1 28 50 cf dc 39 46 77 dc a4 c5 c1 a8 8f 13 Data Ascii: [tM!:cvgM{SER1Jg^(PD\|j#7n'{cgjNq[F~C59Wu5}{?z{-~g4^M+/>W,)v}\|n$8cf=5hS8.#$+8]{~z,?S,BmqQ8(P9Fw
2024-07-15 15:50:11 UTC	4744	IN	Data Raw: 59 bb b9 69 8a 7a 62 bb 89 1d a4 a6 85 12 bd f3 ca 55 14 8e fd e8 8e 3b 25 55 46 8d 7b 16 ce b1 46 7d f4 6a da 19 d3 a4 e9 db c1 6d 13 fa 2f 4f bf c4 bf 52 d3 fd df f1 e1 ef ef fd 0e 01 6a c7 bb 42 ff a7 d7 1e 4f fe cb ca 8c 69 48 0d ad 88 65 9a a6 69 54 94 ff 97 87 4f 03 ae 03 56 45 8c e4 a4 0b 73 d2 c7 be ba a0 53 3b 5f 9d d6 ee 5c e3 a6 fb c8 d6 43 38 98 fa ea f7 0f 4a c9 fb 39 fe 46 7b 42 af df ef f8 3b c7 e4 50 7f 3a 1a 12 e3 42 34 da 1e 17 61 8f db f1 dc fd 28 46 d3 7a ed 78 5a 4e 4d 47 f1 ca f4 d8 97 1a 17 4a 21 68 38 18 37 6b 8d fb 2d 6d d4 f0 75 ee 3f 33 53 16 7a 9f 9c 71 89 ed f1 28 91 1e db d4 f2 18 21 3a 3d ee d3 2a 7f e7 98 ba d0 25 1f d5 df 19 1f 57 71 30 9e c6 e1 3f 3e 6e b5 8e a7 be 9a 12 7a e9 f8 78 17 b6 b3 9b b9 4f 33 97 9f 2d f4 38 c2 Data Ascii: YizbU;%UF{F}jm/ORjBOiHeiTOVEsS;_\C8J9F{B;P:B4a(FzxZNMGJ!h87k-mu?3Szq(!:=*%Wq0?>nzxO3-8
2024-07-15 15:50:11 UTC	5930	IN	Data Raw: 42 3f bb 24 74 f5 08 2b a1 c3 c7 83 72 d9 59 99 7b 33 09 77 5c ce 34 06 83 01 3b de 2d 11 ba 70 33 a1 2f 77 83 f5 b8 47 9a f0 9a ee 75 84 90 32 dc a6 3b 3b c9 8a 08 d3 92 94 c8 ba e9 4e 0e f7 95 f1 3e e2 e1 35 65 e3 69 22 7a f6 d1 5c 7b 1e a1 bb c3 7b 24 6c 4a bd d9 47 a7 66 b3 69 0c d8 df 4e af 18 1a 0e 53 0d 8f 6f 4e e8 47 e4 7f 5c 0b 5d cd 20 b2 26 67 dc 60 a7 57 18 d7 3b e9 ef 57 77 83 c1 60 70 97 5a 3d 2f ef 1f 4b 10 be 2e f4 35 8f b9 43 49 bc b4 24 ce 83 5d f3 3e b6 67 ec 8c ab b8 ee ef 79 0a a8 f0 a4 98 cb 42 d7 03 28 ab d1 aa 59 3d 5e 5b 98 34 c5 9c d4 f7 1c 42 2f 4f d8 13 58 d4 f4 8c 71 ae e9 ee 8d fc b9 7d 7b ee ee ab fe 82 f6 e2 84 ae 94 6d 1a 13 55 aa cf 6b c3 d0 db 6b d9 58 36 96 b4 e6 47 10 6e 20 2b a1 87 b9 7b cd 8d 70 33 62 19 c3 01 0f 44 Data Ascii: B?$t+rY{3w\4;-p3/wGu2;;N>5ei"z\{{$lJGfiNSoNG\] &g`W;Ww`pZ=/K.5CI$]>gyB(Y=^[4B/OXq}{mUkkX6Gn +{p3bD
2024-07-15 15:50:11 UTC	7116	IN	Data Raw: 34 33 3a d5 c5 5d 33 9f 1b 8d 1a 25 7b 64 a7 b4 62 b3 12 94 9e ba 70 ad d1 35 34 0b b8 03 ad 31 2a c1 87 64 c3 0d f0 e2 d9 3c 85 da be 41 d9 52 26 80 84 1d e2 bb f9 32 ca 4e 82 4f 2b a5 af 9a 09 6a ef 05 b5 37 8a db 56 50 a5 ba db a8 f0 c5 94 13 77 ef 0d 96 81 76 c7 db 0a 21 97 a3 98 ee 5e 6a 95 ef f6 2e 10 4b 02 e8 1c ac 32 52 42 07 b0 af 23 5c 76 0b a5 9a d0 ab 65 5d 01 cf 59 17 cb bb cf b7 aa 80 77 51 43 d1 b6 39 a7 80 57 75 0e 08 4f f8 50 b5 47 31 6f a9 3c 6d f6 64 3b 85 0c 12 9d 38 f4 c2 a8 e0 93 a8 d4 c2 f5 46 43 c9 a6 5d 53 0b 4e 05 ba 56 48 43 43 37 9d 2e b9 aa d8 ad 69 a5 4a 66 07 48 54 ea bb a4 24 c4 d3 99 bd 50 2b bc d3 74 32 ad 3d 60 a7 5e a9 85 80 b2 53 4a 55 d2 aa ad 8d 72 8b db e2 f1 12 e0 ab 55 ea 65 68 e8 f3 fe 66 fd 04 90 48 ed 65 78 cf Data Ascii: 43:]3%{dbp541*d<AR&2NO+j7VPwv!^j.K2RB#\ve]YwQC9WuOPG1o<md;8FC]SNVHCC7.iJfHT$P+t2=`^SJUrUehfHex
2024-07-15 15:50:11 UTC	8302	IN	Data Raw: dc f2 c3 cf 55 13 b8 f8 8e c1 fc 1d 70 dd 04 f3 f5 c5 f3 77 57 87 6b 7b 7b c3 bd 66 b7 cc f3 d9 72 b9 0c f9 7b 39 9d 2e 95 86 6b 87 a7 a7 ab 87 a7 9d 94 c0 a7 48 2a 16 8f 93 14 41 09 8d dc f2 d9 27 38 a8 63 30 3f 7f 20 20 df 54 7d 59 5b 7d 07 9e 0f 77 77 87 c3 52 b9 dc 84 93 3a a8 0e c9 7b 36 dd e9 34 9b 87 87 9d 4e a9 5b 4e a7 62 0d 5d 94 e6 38 8e 63 19 21 55 bf fb ab d1 05 3c 6e 9e c1 60 7e ee c7 f3 a9 24 78 be bb b6 bb bb bb 37 44 c9 3b d4 dc 05 41 10 20 7f e7 b3 e9 62 f1 74 37 5f ea 74 ca dd 72 36 1d 65 18 8a a2 08 86 a1 19 42 68 d8 5f 7c 8e ee e6 7e ea 3f 09 06 83 f9 df 1d cf 55 aa b3 83 e7 ef ae ae 0e 77 0f af d6 f6 4e f7 9a cd 52 a9 cc 0b 24 81 a0 a0 26 57 ce 56 8e 3a e5 d2 30 cb 97 53 79 8a 89 c5 62 24 35 fa 65 82 e4 73 77 7e 8d fe be c0 ff 97 31 Data Ascii: UpwWk{{fr{9.kH*A'8c0? T}Y[}wwR:{64N[Nb]8c!U<n`~$x7D;A bt7_tr6eBh_\|~?UwNR$&WV:0Syb$5esw~1
2024-07-15 15:50:11 UTC	2832	IN	Data Raw: e4 5e 75 0b 5d a9 ff fe 4f 7f fa cb f7 fc e9 fe fd 3f 41 17 1c 2c 67 81 f6 38 49 82 9b b6 84 28 85 fd a1 10 ea 80 1d 89 ee f8 20 ba e9 f1 e7 f8 72 0d 83 19 23 6a b5 4a 3f 28 b6 41 f4 23 14 d2 fb 79 45 a1 ca 7b dd b2 50 2e 95 b3 8a 12 d5 6c 1b e0 d1 9a 07 85 75 4f 6d 27 59 b3 5a 2d d6 da 41 4e d7 4e 24 12 3a a3 31 9e 7a ff fe fd ab f7 ef 5f bd 7a ff ea d5 87 6f 10 39 d1 e5 12 c3 ae 70 d8 6e 2a 14 12 52 38 ec f7 86 fc a1 ad 15 8d 13 2c 77 38 6c 1c e7 74 d2 44 36 0c 01 1d 3f 52 c5 60 c6 86 5a ad d2 f6 8a d9 7a a6 9f e9 83 e8 ad 7e 27 df 8a f2 7b dd 6e 8a ef 96 ca 9d 56 5b b3 bf 60 f0 5c 8f 8d f3 f9 76 26 93 3b 3e ab c5 67 dd aa b7 13 a2 91 73 38 59 52 e0 5f bd 7f 55 cc bd 4f a5 52 f1 14 cf bf 7f 1f e7 e3 f1 78 2a fe 3e 5e 78 ff 4a 74 f9 67 67 ed b2 2e 9e 40 Data Ascii: ^u]O?A,g8I( r#jJ?(A#yE{P.luOm'YZ-ANN$:1z_zo9pnR8,w8ltD6?R`Zz~'{nV[`\v&;>gs8YR_UORx>^xJtgg.@
2024-07-15 15:50:11 UTC	10674	IN	Data Raw: 7a 3a 6f a5 98 ce 92 14 49 70 64 9c 80 fb 30 96 7e 72 7e 7e be bf 39 0b 41 1d 1d d4 e1 32 dd a0 9f 9a 82 a8 3e 6d f9 5e 74 b0 bc ea f5 82 ea 7e 57 28 54 dd d7 b8 6d 6e b7 c6 e1 74 38 39 9b 03 4e e9 1c e7 a4 09 9a 2e 24 60 06 2c fe a0 31 98 b1 a1 56 a9 6f 7f e4 cd 17 fb ad d5 7e 07 89 9e 19 28 b9 8a 94 90 a4 7a 25 50 e8 e9 7a bd 62 3a 1b 23 48 81 63 62 31 06 89 be 71 be b2 bf 7f be bf 38 e7 ad 56 93 f0 c0 c5 67 f1 2c 68 f5 7a 83 d6 a0 35 5b 2c 30 71 6a 1e de b9 6d 79 ab 5e 6f b5 0a a2 fb 43 d5 15 58 93 0c a2 db 40 70 54 8e 73 72 36 10 3d 9e 80 8d c9 f8 43 c6 60 c6 86 5a 75 f3 f6 2f 7a 79 05 b6 37 74 5a ad 62 a6 35 18 64 ea 45 d1 24 87 e5 5e 22 d2 2b 84 7b b9 62 36 c6 90 02 c3 91 02 01 c9 3b b3 b1 bf b2 b9 b9 b2 0f 41 7d bd 9a 5c 9a 9f f7 c1 f4 67 8f 47 0b Data Ascii: z:oIpd0~r~~9A2>m^t~W(Tmnt89N.$`,1Vo~(z%Pzb:#Hcb1q8Vg,hz5[,0qjmy^oCX@pTsr6=C`Zu/zy7tZb5dE$^"+{b6;A}\gG
2024-07-15 15:50:11 UTC	11860	IN	Data Raw: cb 72 55 11 85 b2 aa 16 9f 6a fb 65 4f b9 56 3f aa 86 c5 aa a4 e4 71 5c e0 ea f9 92 42 e0 36 36 8f 11 cd 52 a1 24 93 5c be a4 37 68 5f 90 aa 7c 8c 68 ff 80 cd 76 86 00 8f 9a 4b 9e a3 88 74 04 fa e9 8c 79 63 b1 e3 a6 93 18 5f 4e 34 1a 95 cf ba eb 77 a3 f5 6b 3f 2a a4 df 34 c1 9a da 8e 5b 7b e3 2c 75 b1 60 55 9c ab 0d fa d4 5e df 1e f8 ef ae a1 21 97 d3 65 9f 1e 1c 9c f7 8e 8d 9d 4f c6 5e 56 d3 f7 5f 3e fe e6 a8 5e 3f ba 9f 4e 57 25 45 92 75 71 55 4b 17 9f 6a 19 4f 42 af 56 5b 25 5c 4f 4b 55 09 0f 0b a9 66 ad 2e b3 6c 20 5c 0b a6 be 2a 15 f2 38 93 cf cb 18 4b fa 2a 74 a3 03 a9 b9 dc b5 bf 1f 86 d3 2e d1 7a e7 d7 37 ef 50 b7 3b ca bb 43 c3 cc 8d 28 8c 34 3c 46 05 02 fd cf e8 ae 95 87 f3 6b fe 8f 2d fa f0 a9 d3 b2 e8 96 ba 56 b0 2a ce 65 47 85 b5 f8 50 7c cf Data Ascii: rUjeOV?q\B66R$\7h_\|hvKtyc_N4wk?4[{,u`U^!eO^V_>^?NW%EuqUKjOBV[%\OKUf.l \8Kt.z7P;C(4<Fk-VeGP\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.6	57820	142.250.185.66	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:11 UTC	1404	OUT	GET /pagead/viewthroughconversion/11236809420/?random=1721058609649&cv=11&fst=1721058609649&bg=ffffff&guid=ON&async=1&gtm=45je4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2Fshowcase%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20Showcase&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.umso.com/showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUleh47c-J5qwqTFYpiO4OvnlceM0zWFa6Qx_rk5pk0lMl5rR_z9LUwJfy5y
2024-07-15 15:50:11 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jul 2024 15:50:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-15 15:50:11 UTC	687	IN	Data Raw: 61 38 62 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 70 3d 3d 6e 75 6c 6c 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: a8b(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var
2024-07-15 15:50:11 UTC	1390	IN	Data Raw: 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 29 7c 7c 79 28 29 26 26 77 28 22 4f 70 65 72 61 22 29 3b 76 61 72 20 41 3d 2f 23 7c 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 42 28 64 29 7b 76 61 72 20 61 3d 64 2e 73 65 61 72 63 68 28 41 29 2c 62 3b 61 3a 7b 66 6f 72 28 62 3d 30 3b 28 62 3d 64 2e 69 6e 64 65 78 4f 66 28 22 66 6d 74 22 2c 62 29 29 3e 3d 30 26 26 62 3c 61 3b 29 7b 76 61 72 20 63 3d 64 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2d 31 29 3b 69 Data Ascii: \|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);i
2024-07-15 15:50:11 UTC	629	IN	Data Raw: 75 6d 25 33 44 62 74 6d 62 61 64 67 65 25 32 36 75 74 6d 5f 63 61 6d 70 61 69 67 6e 25 33 44 66 72 65 65 25 32 36 75 74 6d 5f 74 65 72 6d 25 33 44 78 61 69 36 6c 31 70 69 62 6e 78 65 66 67 74 32 5c 78 32 36 68 6e 5c 78 33 64 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 55 6d 73 6f 25 32 30 2d 25 32 30 53 68 6f 77 63 61 73 65 5c 78 32 36 6e 70 61 5c 78 33 64 30 5c 78 32 36 70 73 63 64 6c 5c 78 33 64 6e 6f 61 70 69 5c 78 32 36 61 75 69 64 5c 78 33 64 38 33 36 35 36 31 30 32 37 2e 31 37 32 31 30 35 38 35 38 35 5c 78 32 36 75 61 61 5c 78 33 64 78 38 36 5c 78 32 36 75 61 62 5c 78 33 64 36 34 5c 78 32 36 75 61 66 76 6c 5c 78 33 64 47 6f 6f 67 6c 65 25 32 35 32 30 Data Ascii: um%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2\x26hn\x3dwww.googleadservices.com\x26frm\x3d0\x26tiba\x3dUmso%20-%20Showcase\x26npa\x3d0\x26pscdl\x3dnoapi\x26auid\x3d836561027.1721058585\x26uaa\x3dx86\x26uab\x3d64\x26uafvl\x3dGoogle%2520
2024-07-15 15:50:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.6	57822	142.250.186.110	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:11 UTC	1308	OUT	POST /g/collect?v=2&tid=G-CXEH5WRXTW&gtm=45je4790v9133397838za200&_p=1721058609590&gcd=13l3l3l3l1&npa=0&dma=0&tag_exp=0&cid=470383722.1721058585&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1721058585&sct=1&seg=1&dl=https%3A%2F%2Fwww.umso.com%2Fshowcase%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&dt=Umso%20-%20Showcase&en=page_view&_ee=1&tfd=896&_z=fetch HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.umso.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.umso.com/showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:50:11 UTC	446	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.umso.com Date: Mon, 15 Jul 2024 15:50:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.6	57821	172.217.16.130	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:11 UTC	1528	OUT	GET /td/rul/11236809420?random=1721058609649&cv=11&fst=1721058609649&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45je4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2Fshowcase%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20Showcase&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.umso.com/showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUleh47c-J5qwqTFYpiO4OvnlceM0zWFa6Qx_rk5pk0lMl5rR_z9LUwJfy5y
2024-07-15 15:50:11 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jul 2024 15:50:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-15 15:50:11 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-07-15 15:50:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.6	57823	142.250.186.110	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:11 UTC	1308	OUT	POST /g/collect?v=2&tid=G-VYY8D05ZV0&gtm=45je4790v9133397838za200&_p=1721058609590&gcd=13l3l3l3l1&npa=0&dma=0&tag_exp=0&cid=470383722.1721058585&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1721058585&sct=1&seg=1&dl=https%3A%2F%2Fwww.umso.com%2Fshowcase%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&dt=Umso%20-%20Showcase&en=page_view&_ee=1&tfd=901&_z=fetch HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.umso.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.umso.com/showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:50:11 UTC	446	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.umso.com Date: Mon, 15 Jul 2024 15:50:11 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.6	57830	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:11 UTC	615	OUT	GET /lib_idKrFnnqnDIKXMAQ/eanc9lnqfsu41h6a.png?w=500&dpr=2 HTTP/1.1 Host: www.umso.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
2024-07-15 15:50:11 UTC	252	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 133005 Content-Type: image/png Last-Modified: Fri, 03 May 2024 10:23:22 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:50:11 GMT Connection: close
2024-07-15 15:50:11 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 05 7e 08 03 00 00 00 d2 92 e4 b2 00 00 03 00 50 4c 54 45 17 22 30 19 24 32 fe ff ff 17 23 31 21 2c 3a f2 f5 f9 16 21 2f f3 f6 fa 2d 3a 48 ff ff ff 01 ff b3 f1 f4 f8 b9 e6 fd 14 1f 2d ef f2 f6 ed f0 f4 06 12 21 f0 f3 f8 12 1d 2b 0c 18 27 09 15 24 16 22 2f 22 2e 3d fd fd fd ff fe ff fd ff ff 0f 1b 29 17 d9 dd 2c 39 47 ea ed f0 f6 f7 f8 2f 3c 4a fb fd ff 0c e5 d0 f1 f1 f1 2d 3b 49 f3 f4 f6 0f e2 d3 ec ef f2 26 32 40 1b 27 34 de e1 e4 1c d3 e5 e4 e6 e9 fa fb fd e8 eb ee 8b 91 99 28 34 42 e2 e4 e7 5f 67 72 da fc f1 07 ea c9 1d d1 e9 17 d5 e1 00 86 c9 18 d7 e0 e9 ea ec 03 0f 1e fa f9 fa 0e e7 cc f6 f9 fc d8 da de f1 f2 f4 1d 29 37 e5 e8 ed db de e1 13 dd d9 ce d1 d5 07 ef c3 c5 c8 cd d2 d5 d9 3b Data Ascii: PNGIHDR~PLTE"0$2#1!,:!/-:H-!+'$"/".=),9G/<J-;I&2@'4(4B_gr)7;
2024-07-15 15:50:11 UTC	2372	IN	Data Raw: a2 dc 38 e4 24 fe 7c 39 2f 6f d6 aa ea bf 34 8c 7f 00 71 5c 1f b1 a9 ae aa ae 2a ba fb 5b cf b3 9e e7 59 6b 71 1c 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 0c 06 83 c1 60 30 18 db 89 19 71 e6 cd 3b 18 87 36 ed 58 0c 06 63 93 30 9b 91 d9 8c 36 17 33 da bc 1b 07 83 c1 78 7b cc 66 33 82 9b 0d 32 73 66 26 75 06 63 a7 60 36 13 4f 1b 39 37 17 8d 33 73 cc a8 33 18 3b 07 33 c7 71 18 4e 4c 6e 26 4b 1e 8d dc 3d de f5 9f c6 60 30 0c 10 6d 9f fb ea 37 97 59 bf 0a 37 33 be c7 60 30 de 06 12 36 83 ce a5 fa de cd a5 7e 4e 43 88 29 9d c1 d8 21 98 39 22 74 5f 7d 6f fc 66 d2 1b 3f eb 16 88 f3 ce 6c 3a 83 b1 23 30 23 c4 39 bd 9b 2c f4 78 5d e8 e4 d8 0c 06 e3 9d 63 26 62 34 6f ba 45 a7 42 27 d9 f4 1d 6c d1 41 00 f8 ae af 84 c1 d8 7a 10 c2 e6 ad b1 e8 b4 70 66 Data Ascii: 8$\|9/o4q\*[Ykq`0`0`0`0q;6Xc063x{f32sf&uc`6O973s3;3qNLn&K=`0m7Y73`06~NC)!9"t_}of?l:#0#9,x]c&b4oEB'lAzpf
2024-07-15 15:50:11 UTC	538	IN	Data Raw: ee 2b 84 17 d3 3b 44 b1 b6 50 ea 49 e8 3b 3e 5c d4 24 bd b5 f7 0e a4 f2 aa ba ae a6 b3 05 89 71 07 ea ac b9 47 41 53 9b 23 37 ad 6c ac e6 84 55 01 d6 b2 fe b1 33 c5 c4 75 94 86 4a c4 9e ab e5 8e d6 f3 8e f2 72 39 b1 a0 6b ac ad 33 ce da d7 ae 14 d6 59 33 0b 2f 8d 0d 9c 89 be 14 39 3b ab e6 94 2c 4a ed 9d c8 56 74 76 ac aa 4b 6c e9 91 94 a2 61 47 79 b7 24 17 9f 11 0b bb f8 e1 7d cd ca 85 6e e9 4c 21 be 98 15 27 65 f7 88 20 a6 d0 db c7 1a 6b c6 2e 66 5b eb 1a c8 13 1e 40 f1 c6 be 61 29 fb 84 a3 bb cb 51 5a 00 2e 15 62 31 bb 9a 2b ca 75 0c b7 80 d1 42 45 cc 2e 8d 3c 10 87 50 6d 41 f6 b0 28 29 2d ed 72 cf 81 6a b1 a4 9b bf 78 a1 fa 62 8b 78 31 bd ca d1 da e9 38 df 2f f6 34 8c e4 9c 18 19 3b 51 33 d6 99 3d 36 dc e7 18 e8 34 4b e5 d9 56 25 e2 ad 12 4b 4b 2a 11 Data Ascii: +;DPI;>\$qGAS#7lU3uJr9k3Y3/9;,JVtvKlaGy$}nL!'e k.f[@a)QZ.b1+uBE.<PmA()-rjxbx18/4;Q3=64KV%KK*
2024-07-15 15:50:11 UTC	4744	IN	Data Raw: cd 2d b8 9d ae fa a0 d0 87 f7 8f 3b a4 86 6e 47 5b 0d 2f d6 f5 8c 36 48 d6 91 3d 17 6b 1a f0 58 75 ee 58 79 ff 98 b5 a9 58 92 1d 5d 85 f2 a5 fd 71 d2 48 62 41 63 57 77 77 57 63 81 52 d9 d2 21 f2 ad 15 d2 c5 7d d5 92 23 f7 40 22 69 5b be 15 40 6a 2c e9 6f 3c 71 3a 0b 35 9d b7 02 6b 67 93 d2 92 58 93 5d 8e cf 93 16 a3 35 bb 7d ec 54 b1 80 38 88 b9 a2 e6 c1 9a f2 b8 da 2e 5c f8 17 d9 d1 da e6 e8 cc b5 f2 03 6d 2d 4d 0e a0 b4 95 9f 12 f8 68 57 12 8b a3 35 45 c5 39 b8 e5 a2 64 ed a8 b0 96 77 89 25 3d 92 d2 30 3c d6 38 60 95 db 86 87 2b 24 ce 51 3e 08 5b 8e f3 4a 51 73 66 41 fb 25 49 8c 6c e7 2b d2 a5 80 d0 cf b6 b4 1e b7 f2 55 e5 1d b9 d9 85 18 29 8e 9a 7e 07 27 27 42 eb 48 5d f6 be e6 e3 85 65 97 44 47 47 56 6e d3 99 7d a7 32 b3 6a 2e f1 e2 9a 6b 91 4f b5 b7 Data Ascii: -;nG[/6H=kXuXyX]qHbAcWwwWcR!}#@"i[@j,o<q:5kgX]5}T8.\m-MhW5E9dw%=0<8`+$Q>[JQsfA%Il+U)~''BH]eDGGVn}2j.kO
2024-07-15 15:50:11 UTC	5930	IN	Data Raw: 10 fa b1 83 e4 f1 60 2c 22 75 4e 7f 74 bd c7 12 79 98 65 8f 12 39 d5 f9 5f a3 84 fe 85 fe ff 8b bf 7e 11 92 fa 17 77 35 62 7f 42 52 df 42 a1 9b e1 7a c4 3a 29 44 aa 76 fb 1b 65 27 dd 78 5e 05 ac 2a 2e bf 66 de a4 a3 41 80 24 5e de 51 77 df 0f 1e 84 20 76 3f ba 47 15 1d 4b ed 07 a9 bc 03 06 3d 4a e7 5f 06 7f 47 1a 74 c3 a8 1b 44 9b f2 30 1f 9e 48 7b 8d da ff 4a c5 1e 0e 95 b8 ae 73 5d e9 df 5e a1 42 0f 86 e4 f4 04 e0 96 7c b1 10 b1 75 31 d1 d6 9e 10 41 55 f3 3f bc 7c f9 a9 7e 79 ef 0b 48 55 e6 af 5f bf 4e 42 1f af 05 00 20 e6 7b 2e 58 e5 d1 13 43 22 d8 a4 cb 63 bc 3d 88 0b 13 fa c9 7a 5d ef 27 a3 7c 77 e2 bd 13 8b 1e a5 f4 2f 63 5b f4 08 95 1b ee 7b b4 d2 83 42 0f d7 b8 ae 6f fa 3b ca a0 87 49 fd 6f 61 42 87 66 2a 35 92 1d 8c 48 c1 6f 2a 50 fb e6 69 6c 6e Data Ascii: `,"uNtye9_~w5bBRBz:)Dve'x^.fA$^Qw v?GK=J_GtD0H{Js]^B\|u1AU?\|~yHU_NB {.XC"c=z]'\|w/c[{Bo;IoaBf5Ho*Piln
2024-07-15 15:50:11 UTC	7116	IN	Data Raw: 40 4d fa 94 d1 77 1e 38 27 88 e7 ee 8a 5d 02 4b f7 10 87 2c f9 85 d9 79 ad 54 cd 62 cf 91 dd 9f 74 a5 b4 d3 de aa 91 42 17 6f e4 ef 49 2e 16 38 60 b3 0e 64 55 22 29 4a e8 43 79 7b 4c fd db 5e ec 4e fa df 04 4c 7a 7a 7a 5e fa f9 b2 ba a1 4b 97 86 db 69 11 4d b5 4c fb 3a 7e 98 42 5f 8c 32 e9 ba c4 d7 1b e9 d9 18 09 76 6b 9c f7 df f4 21 60 8d a8 fb 17 64 a6 e4 80 49 a7 dd 54 f3 2c 21 f2 c8 6d 3b a9 9c d4 bf 6e a9 eb 1e 61 c4 cd 88 cc e1 f0 f8 a1 46 3a 93 60 32 82 24 dd a4 4b 9e b8 ee b4 44 5c 0f c8 79 54 5a f7 4e ac bb 1f 42 a8 b8 88 27 7f 3b ac 53 8b 11 8e bb f3 64 de 03 11 74 13 4f fe 89 82 38 52 1b 77 67 e6 ce 6d 27 ed 83 a2 d2 9e aa 7e 12 07 88 48 af 41 cd bd 3c 43 62 ed 64 0b 51 f6 f4 94 5f f1 78 e7 a6 97 54 34 19 21 74 a8 92 da b8 9b d7 bd 76 92 0b 80 Data Ascii: @Mw8']K,yTbtBoI.8`dU")JCy{L^NLzzz^KiML:~B_2vk!`dIT,!m;naF:`2$KD\yTZNB';SdtO8Rwgm'~HA<CbdQ_xT4!tv
2024-07-15 15:50:11 UTC	8302	IN	Data Raw: b4 18 f6 4a 32 1f 9b 0f b8 4b 3a 5c 65 e9 d2 f5 15 dc 14 18 90 74 3f f2 9c 4a 31 ba a5 68 9f 86 29 c4 32 06 d0 35 8d 0a 70 bf 6d 38 c3 1a a4 10 40 3a 0a 0f 0f 1f 4e 90 04 1d 3f dd f3 d5 c5 25 39 3f 87 62 12 af 95 c0 3e 0e 34 cb f0 a3 af ac 80 2e e3 25 77 1d e8 ee 47 9e 49 1d d9 9c ac ec 40 0f 79 68 3d 84 de e9 e7 a1 0f ef fc 19 3c 0f da f4 c6 6b be 5b 26 d3 dd 01 33 e9 dd cc cc f2 74 62 25 37 bf 3b 13 de 4d 66 ca 87 c9 e4 cc a1 63 79 3f e7 9b c9 85 46 67 32 43 70 77 26 32 bd 18 da 4f cf f4 a6 e2 f9 d0 e8 36 4c 4f c1 f4 f2 72 62 77 d9 77 2b 9e be ae d1 af a4 85 24 8e b9 59 a3 5f 47 3f 61 d1 b8 46 8a dd 9b aa e2 5a 35 fa 37 9a 46 bf 8f a8 3b e0 e5 c8 f0 70 3c 26 6a 9d 6c 40 c8 c3 4e 57 15 03 96 e7 12 ee 4e f7 81 06 54 80 ce e0 94 00 64 bc 0e 9f 3c 99 a5 50 Data Ascii: J2K:\et?J1h)25pm8@:N?%9?b>4.%wGI@yh=<k[&3tb%7;Mfcy?Fg2Cpw&2O6LOrbww+$Y_G?aFZ57F;p<&jl@NWNTd<P
2024-07-15 15:50:11 UTC	2832	IN	Data Raw: bb 80 ef 30 d7 40 d0 68 d2 b6 16 40 6f da b8 e1 7d 6d 01 d9 83 3e ec ac 9f 02 da ca db a4 7b 26 fd 72 64 22 94 0d 3a 36 9e 6f 3c 83 06 d0 ad 1b 50 e1 a7 35 dd 5b 54 7a bb 50 5c 8d 72 e2 1a d3 dd 28 75 27 ba bc 0e 75 eb 50 dc ef ee 11 e8 c3 91 85 d3 1d db 26 46 45 98 3a 3a 5e 09 a4 91 32 35 2f 4a 99 34 8e 09 3b ae 23 75 79 59 c2 25 b8 79 54 dd 1f 2a 60 b4 9f 16 64 34 e9 98 53 c7 6c b9 ca 69 7e e8 4c a8 01 7d 3b 22 a2 95 e1 a9 ca 59 c6 67 57 0a 49 9e 45 c7 f0 40 1d b4 a5 66 2f e7 e3 1d c2 f1 45 ff 44 25 b9 8f b2 eb 9e 85 d3 0e 61 cb b6 f3 ab 6a 68 5a c6 67 17 be d5 cb ac d7 3f 73 3a 9b 0b c5 08 98 f9 98 6f be 7a b4 0a 17 04 39 13 28 1f cf e2 a9 a1 e2 69 69 a8 4c 30 c5 01 6f 3e 78 39 cb 71 c9 68 7e ec 72 3e 92 15 c7 93 91 ea ec 16 a4 88 93 f1 c1 50 72 70 36 Data Ascii: 0@h@o}m>{&rd":6o<P5[TzP\r(u'uP&FE::^25/J4;#uyY%yT*`d4Sli~L};"YgWIE@f/ED%ajhZg?s:oz9(iiL0o>x9qh~r>Prp6
2024-07-15 15:50:11 UTC	10674	IN	Data Raw: 60 1c d0 f7 e3 e4 ef 38 59 46 de d2 2d e8 32 6d 6b 7d b5 f6 5a 5b a7 ef 53 3b a0 fe 96 ee 5f db 5b df 9c 34 ef 6a 07 96 25 33 e5 b4 56 fd 6a 54 c8 d5 e6 b1 90 a7 00 e9 5e a3 f4 ce 7a 75 0d 6c 9a a1 5a db 49 e7 ad 35 95 d4 6a 5b d7 d6 ea a7 d2 6b f1 9e d6 b6 82 e6 3c fa 35 53 d7 3e 22 ea 6e 99 45 a7 fc af 2d 30 6f 46 fa 5d b6 a9 72 3c f9 ba d2 22 29 f2 2d 06 bc 24 02 82 66 f2 43 a0 aa 95 43 1a ab c6 e9 96 b4 22 9c bc 1a 17 25 9e ad 1d 80 84 b7 8c 3d e9 6a 8e fe 26 bb 72 92 48 bb 60 58 5e 12 69 cb 04 20 08 a1 87 24 2d 32 f4 f8 74 2d c9 53 6b 02 44 24 02 b2 42 3f c6 b8 a8 ef aa 6d 2a 92 07 14 5d 43 01 c9 92 2b a9 dd 12 29 10 25 97 a5 5d 24 8f f4 5b 22 cf 0b ed 4e f5 cb 65 39 49 db 8d ee af 75 df f0 22 63 ba 25 96 d1 57 8c 1b 2f e8 19 48 95 3b 29 81 af 5d dd Data Ascii: `8YF-2mk}Z[S;_[4j%3VjT^zulZI5j[k<5S>"nE-0oF]r<")-$fCC"%=j&rH`X^i $-2t-SkD$B?m*]C+)%]$["Ne9Iu"c%W/H;)]
2024-07-15 15:50:12 UTC	11860	IN	Data Raw: a4 d1 7e 05 99 50 df 54 a3 63 c3 82 cd 53 b7 5c da 3b d1 7d 6f 45 91 ba b6 f2 34 57 bc e1 a8 c7 f1 08 0b 08 6f f0 1c f5 5f a5 03 a0 4e ec 46 07 1b 3c b3 81 c9 02 a6 53 0e 4e 46 98 7e 20 1a b2 88 0d 1f 36 e3 4c fa 31 65 4e 50 d5 c8 55 11 25 3a 30 99 1e 9a 06 b6 89 44 10 94 3d 75 a2 4e 3a cf 42 22 20 22 8f 64 fa 45 c5 f1 44 9d ec fa b7 b0 c2 23 99 7f 4a 19 28 f9 07 a3 d7 6e 64 5b bf de 45 cb 14 4b c6 43 40 7a 79 f5 1c 60 69 fe 75 a3 7a f1 d5 be 97 97 25 cf bf 2d a4 39 d1 3f 1b 00 25 7e 58 e0 68 c8 89 1e aa c1 00 8e 06 8f 28 0c 58 98 46 6f e8 ef e8 2a 37 27 5c 07 6d 00 c0 eb 95 16 18 1a 19 32 0d 63 e1 af 5e 00 2a d4 65 40 23 5b 68 03 c1 08 2a d1 43 51 78 da 1d fd e1 c1 c6 b4 3b e5 46 bf 0b 0c a0 b1 26 46 55 43 4e 6f 6c 40 af d2 b1 a1 3b d7 53 77 16 a3 9c da Data Ascii: ~PTcS\;}oE4Wo_NF<SNF~ 6L1eNPU%:0D=uN:B" "dED#J(nd[EKC@zy`iuz%-9?%~Xh(XFo7'\m2c^e@#[h*CQx;F&FUCNol@;Sw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.6	57829	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:11 UTC	937	OUT	GET /lib_uKHflxJGsjrjWGxc/q6yat3a98b05the9.png?w=500&dpr=2 HTTP/1.1 Host: www.umso.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
2024-07-15 15:50:11 UTC	252	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 133285 Content-Type: image/png Last-Modified: Fri, 03 May 2024 10:23:22 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:50:11 GMT Connection: close
2024-07-15 15:50:11 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 05 7e 08 03 00 00 00 d2 92 e4 b2 00 00 03 00 50 4c 54 45 fa fa fa fc fc fc f0 f0 f0 f4 f4 f4 f9 f9 f9 fd fe fd fb fb fb ff ff ff 73 67 f0 fe fe fe f9 f8 f8 f5 f5 f5 df e1 e6 00 00 00 f6 f6 f6 f7 f7 f7 f1 f1 f1 f3 f3 f3 ee ee ee 72 66 ef ef ef ef de de de ec ec ec e9 e9 e9 6f 63 ef e1 e1 e1 f2 f2 f2 dc dc dc e3 e3 e3 f3 f2 fe d6 d6 d6 e5 e5 e5 74 68 f1 ea ea ea fc fb ff da da da fd fc fe fd fe ff e7 e7 e7 f9 f8 fe c4 c4 c4 80 76 f1 e6 e4 fc 78 6d f0 fa fa ff f7 f6 fd 04 04 04 d3 d3 d3 6b 5e f0 ff ff ff 11 11 11 a8 a8 a8 cb cb cb 14 14 14 eb eb eb 6d 61 ef af af af e6 e6 e6 c9 c9 c9 77 77 77 d1 d1 d1 d9 d8 d8 21 21 21 b6 b6 b6 ce e5 ff f8 f7 ff d7 d7 d7 07 07 07 bb bb bb 7d 7d 7e f5 f4 fd 70 Data Ascii: PNGIHDR~PLTEsgrfocthvxmk^mawww!!!}}~p
2024-07-15 15:50:11 UTC	2372	IN	Data Raw: ce f9 47 bf d6 de bb ca 65 63 1b 03 c6 21 78 3f e9 86 ba ed 5d bb 8a 7a f6 5a 7b ed b5 d7 32 00 07 07 c7 99 87 e1 4b 37 80 83 83 e3 e4 c1 89 ce c1 91 01 e0 44 e7 e0 c8 00 70 a2 73 70 64 00 38 d1 39 38 32 00 29 22 ba ac 43 cc 83 e1 a3 1c 1c 1c 5f 27 d1 e5 48 4e 53 56 cb bd 91 87 38 d5 39 38 be 6a a2 cb 20 f7 56 6a c0 5d 7a 10 2a f7 1d e5 e0 38 fb 90 4f 10 5f 90 e8 48 61 59 78 c2 20 3a e8 01 fc 27 aa 07 9f 08 d8 19 1c ff 56 1c 1c e9 82 7c 08 be ea 84 d8 61 8a 1d 0d 47 93 98 29 91 e8 72 e5 bb 9f 07 6b 6a 6a 06 07 07 07 ef 8b ec 51 41 7e 77 1f 0f 0c 0e 0e d6 0c fe fc ae 92 8b 74 8e af 06 32 1c 91 7e 58 10 2a e5 13 43 25 1c 91 e9 c7 27 3a 3e a4 e3 c9 da 6f 14 6f 7e 33 c8 95 54 75 77 ec ed 7e f7 86 e0 b7 37 8b 4f a8 a0 e7 e0 f8 0a 20 a3 85 a9 32 f9 eb 2b e5 5e Data Ascii: Gec!x?]zZ{2K7Dpspd8982)"C_'HNSV898j Vj]z8O_HaYx :'V\|aG)rkjjQA~wt2~XC%':>oo~3Tuw~7O 2+^
2024-07-15 15:50:11 UTC	538	IN	Data Raw: 3d d9 5e 9f 9b db fc c0 42 51 70 9c 59 e0 9f 77 65 6e 6b 6b e5 ea 45 c7 d5 1d 80 9d ab b0 f9 01 60 b1 e8 1a 12 7d 0b 89 7e 31 09 89 5e 7d 1f 90 83 0e 19 25 fa 9d 2b 8b 9b 35 30 37 7b ff e2 fa da 7b 94 f2 ef ef c3 ee ca ce 2a 2e 36 39 40 a2 df bf 58 0d 70 f7 ca 0e 21 fa d6 2a 80 a3 26 4c f4 bb f9 6b 00 db 87 22 3a c0 1d 34 31 6e ad dc 29 1a 04 58 a5 12 7d 0d 7a a9 76 11 4f 75 2f ba bf f3 7d d1 f7 57 e0 ca 4e cd e6 ea e6 66 c3 ec 7f e4 17 9d cb 2f 6f 68 58 dd 85 ad 9b 17 b7 be 5f a9 dc be b2 7b 7f 78 6d f0 66 f9 f0 f6 fd 9b c3 2f 17 af ac 6e 5e d9 84 d5 e1 e1 41 22 d1 f3 cf e5 17 15 e5 17 e5 af c1 ee 4d 3a 35 f7 25 54 77 c7 bb 1d 46 f3 17 9b 38 c5 16 41 72 fc f7 c6 b4 f7 7e 6e 73 73 ee 3e 2e 45 3f ea 7d 38 be 0a 38 a0 a6 a1 06 a0 b7 7c 07 ae 5e 19 7c 79 75 Data Ascii: =^BQpYwenkkE`}~1^}%+507{{.69@Xp!&Lk":41n)X}zvOu/}WNf/ohX_{xmf/n^A"M:5%TwF8Ar~nss>.E?}88\|^\|yu
2024-07-15 15:50:11 UTC	4744	IN	Data Raw: 2b cf 16 dd 39 60 14 88 d6 ff 6b c4 54 bc 8a c5 e7 ae c3 ee fa 95 d5 1a d8 de 86 d9 0f 00 1f 66 01 3e 6c 6e ef 6e 26 4b f4 bb 2b eb 57 ae ac bf ac 5e b9 82 1d 11 6c 6f ee 6e ad c0 ca 0e 60 ed 2b 09 c6 e8 a8 bc 6f df b9 58 bd b8 5e 54 f4 e1 e2 fb 9a d5 86 ab 6b d7 57 6e 96 17 6d 0e be 7f bf 53 de b0 55 bd d3 b0 76 67 70 67 f0 e6 ee da cd f2 fc f5 c1 8b ab 37 77 2e be 1f dc bc 39 57 73 7d 6d 67 4d 9b 47 3f 57 b4 be 52 44 e5 79 da 89 4e a7 d6 70 c5 b9 4a f4 ed bd bd 9a 08 71 4e 66 d5 7e dd fb 79 6e d5 c0 a7 d6 ce 3c e8 84 37 99 f7 96 1d 00 d7 c9 ee 7f dc 21 bf f0 27 f1 9f 49 e8 bd 8e cc c4 f1 20 f1 92 a1 db 4c a0 dc a1 15 df 21 47 e6 c8 32 f1 c4 4d 21 2e 35 f4 17 ad ec 2e a9 42 f3 6e c1 19 bf ad b9 04 fd 45 b4 0b 2c 75 a4 bb 83 23 fd 9d 41 c0 89 84 bb a4 85 Data Ascii: +9`kTf>lnn&K+W^lon`+oX^TkWnmSUvgpg7w.9Ws}mgMG?WRDyNpJqNf~yn<7!'I L!G2M!.5.BnE,u#A
2024-07-15 15:50:11 UTC	5930	IN	Data Raw: 51 3f 4a f4 a1 e9 a9 a9 25 3f f6 17 59 4b e3 fd 23 01 d6 73 48 20 ba fb eb 3a 95 b6 d0 8c 1b f7 08 79 ef 4d 4f fd d0 21 81 7d 34 d4 a6 74 0e bd c6 de 00 a9 24 02 04 a7 bd 9d 8a e2 aa 1b d9 10 c8 41 46 f4 67 60 ef c3 6b bb e7 25 6a 37 94 41 18 ed e9 1f 79 45 3c f0 44 78 3d 33 35 7d 01 82 fd b5 4a 5b dd 52 30 3c 6e 88 fc 62 25 a8 6a f6 76 2a 9d 5d 93 d0 a4 11 5d 82 b1 91 fe f1 47 85 d0 34 e3 ed ec 03 09 2e cc 8c f7 8f a0 86 63 e9 7b 34 35 f5 e8 36 d1 65 04 f0 cd 4c 4d 2d 4d e2 33 4b 90 f7 ac bb 56 71 d5 f6 04 e8 7c 85 0c 72 f3 0f 53 53 25 60 9a ef ea 54 3a bd 1d 55 09 a6 31 ce b4 c3 0c fd f8 25 41 4a 0a fa cb 04 81 74 10 18 13 f2 f0 a0 e1 18 0f 5f 14 43 d3 90 a2 47 01 be 86 a3 15 15 a5 34 13 9d 88 23 01 7a 14 97 12 ca a5 4c b0 0f 10 0b 9d a2 28 5d 2d 48 cb Data Ascii: Q?J%?YK#sH :yMO!}4t$AFg`k%j7AyE<Dx=35}J[R0<nb%jv*]]G4.c{456eLM-M3KVq\|rSS%`T:U1%AJt_CG4#zL(]-H
2024-07-15 15:50:11 UTC	7116	IN	Data Raw: 39 d1 0d 8c e8 84 e7 f6 e9 ae ae ee ee ae 4f 63 44 5f b5 18 85 5c 2d c1 62 b1 6c 31 82 24 e4 59 c3 37 3a 72 13 75 55 48 92 64 cd cd 29 b0 5a b3 cc 39 66 53 41 8e d5 90 95 93 17 91 9f 21 ea d9 c4 bc dc 2c b3 31 bb c0 6a 22 a1 15 0e 7f 47 d1 40 c2 07 0a 82 81 44 5a 70 0f 0d 24 42 f7 6b 9a 64 04 c3 e3 c5 d0 dd 39 d1 39 be ec 3c ba 70 88 4c 2d 0f ac 48 f4 4a 19 8a a7 ba 7a 46 c7 c7 fb 3f 75 7b e0 ae 08 3e 9f 73 c1 5e f2 6d 49 95 73 79 19 9e df 08 04 5b 83 81 a6 6f 9a 2a 5a 4a 2f 7c 6b 2f 23 d9 37 8e 07 59 86 9c dc c2 8a 0b f7 ee 59 1a ab ee dd bb 61 b3 9f 2f b1 15 d6 db e3 0a 74 ec 7e 2e d8 ab 2a 0a 5b 0b ed 25 24 24 e0 e1 df 0e 5b ce 85 91 1b 30 54 41 87 d2 99 08 2c e9 37 25 fa c1 12 9d 7b c6 71 9c da 6c aa 0f 08 d1 31 60 d8 42 d7 a7 be 1f ff f9 cf bf 7f fa Data Ascii: 9OcD_\-bl1$Y7:ruUHd)Z9fSA!,1j"G@DZp$Bkd99<pL-HJzF?u{>s^mIsy[oZJ/\|k/#7YYa/t~.[%$$[0TA,7%{ql1`B
2024-07-15 15:50:11 UTC	8302	IN	Data Raw: 7a 3a 6b c7 a7 7a 06 7a 86 42 6d 6e 90 c0 ee 0e ba 17 6e 2d df f0 78 82 37 7c be 5b 4d 42 53 d0 ff 8d 2f e8 f7 2c f8 6f 2f 07 dd 3e 9f 67 f9 96 e5 98 44 97 8d 22 48 82 28 8b 06 01 35 69 01 64 03 66 da 8d b3 aa 9b 0c 4b 64 49 96 30 c1 8b 2e 85 73 f2 a2 9d 66 6a 79 ba b0 71 21 22 53 4b ed 40 f7 d0 50 f7 08 66 6a e9 ea f6 0e 0d 74 f5 0c 8c 47 25 70 48 6a f5 1a 35 12 72 70 a4 39 f0 c4 81 aa 3b 52 dd aa 65 6a e9 f4 4e 87 96 9a db 1f d5 92 4c 2d 60 11 49 a2 16 30 89 60 d5 c2 0c 03 88 46 fc f8 ad 98 be e5 90 f2 34 46 63 59 7b 0f 91 a9 85 5c 4f 0b 1d 36 4f 8b 9a a9 65 ac fd f5 eb c6 88 04 0e af 26 e7 27 30 53 cb e7 67 cd 0b 1d 93 7d a3 fd 33 ed a1 a4 89 ce 57 af 71 7c c1 6c aa 49 2f 53 55 89 7e c1 db 19 9a 1e 19 ef e8 5b 22 29 99 c2 69 59 68 72 90 f0 2c b7 96 6b Data Ascii: z:kzzBmnn-x7\|[MBS/,o/>gD"H(5idfKdI0.sfjyq!"SK@PfjtG%pHj5rp9;RejNL-`I0`F4FcY{\O6Oe&'0Sg}3Wq\|lI/SU~[")iYhr,k
2024-07-15 15:50:11 UTC	2832	IN	Data Raw: d5 72 80 22 b5 90 88 4c 9f 3c 24 53 93 44 17 03 50 ac 44 20 af 05 b2 5a 0a 3c 91 ec 95 a2 16 4d e8 44 27 93 6f e9 28 48 31 28 a7 d3 74 aa 5c 4d 44 05 39 0f 89 92 37 a0 a4 20 a9 13 1d 32 2a 0a 7c 21 e7 0d 54 22 10 97 23 50 2a 42 05 4f ea 7e 35 81 1a cf 19 d1 8f fa 18 1d 45 95 8b 86 6a e9 39 28 d8 e7 00 0e 0d 70 3a 5d 4e 97 83 6c 25 b5 7e c3 e7 4f 34 46 17 a4 52 a0 1c 49 2a 4a a5 22 c8 99 4a 49 0c a4 d5 52 41 11 e2 69 bf 80 46 f9 52 a0 98 4c f3 b1 a5 54 3a 5b 21 86 37 b9 50 12 44 25 16 c9 96 32 72 2e 9d 53 88 5e 90 2c 4a 0a 7e 11 95 78 3a 9b 8e 2b bc 54 ca 46 f2 68 b7 37 fc ef a4 1a cf 19 d1 0f ad c3 4c bb 44 b7 58 1c 5e 47 2d fc 50 63 40 a2 b6 42 23 b5 77 55 eb bb 9a ef ef b1 38 b6 93 e2 86 c5 d8 5e d9 e8 8d d5 5b 31 52 cb de 11 9d 0c a1 15 5e 96 ed 76 59 Data Ascii: r"L<$SDPD Z<MD'o(H1(t\MD97 2\|!T"#PBO~5Ej9(p:]Nl%~O4FRI*J"JIRAiFRLT:[!7PD%2r.S^,J~x:+TFh7LDX^G-Pc@B#wU8^[1R^vY
2024-07-15 15:50:11 UTC	10674	IN	Data Raw: 78 bc eb 83 19 7e fb 0a de f6 40 10 89 be 3a 02 33 6f c7 06 07 6d ef 46 a0 f7 17 66 8c eb 30 a2 d3 3d e3 6c 7f fa 7f cd 8f 4c fb 8a c6 12 da 6c a6 83 05 3a b9 f6 a9 25 fa c8 4b 80 fb df ce c1 cb b9 4b ef a7 c1 0c 97 df 5f 0e 2e 38 7e e9 83 4b 6f a7 e7 e7 61 61 65 f0 f5 4b f8 30 66 ba 76 1e 07 e3 1f 96 67 5e f7 7c 18 77 5f 3c f1 fd 2a 40 68 6d f0 d5 35 b0 42 d7 7b 0b 9c 7e 79 7c 79 0e 56 16 06 3f bc 82 77 a1 91 8b e3 5d 1f e0 ed 69 18 7e f9 fd 89 05 58 7e 3d b2 70 d1 c6 24 fa 11 50 dd e9 32 d5 b6 b7 7b 36 59 1e fd db 9f e0 ff ec 6a f1 8f 1a 68 a4 96 8f 87 64 da d9 f4 da d0 38 4a ea 13 30 10 5c 19 01 2b 58 e1 d2 4a c8 65 1a 37 01 9c 5f 09 75 81 29 14 bc f4 3d 8c f7 c2 0f 21 13 58 e1 e4 42 d0 0d f7 57 e6 66 4e 8e fd 16 38 98 5b b8 74 9e e3 c0 35 6e e6 f0 be Data Ascii: x~@:3omFf0=lLl:%KK_.8~KoaaeK0fvg^\|w_<*@hm5B{~y\|yV?w]i~X~=p$P2{6Yjhd8J0\+XJe7_u)=!XBWfN8[t5n
2024-07-15 15:50:12 UTC	11860	IN	Data Raw: ae e5 9b 9b 55 ef 1b e2 06 7d a3 a1 87 35 70 a2 fa a1 d6 30 1d b1 c3 cc 41 00 2f a2 4e 45 b4 be 6d dd 6e 27 b6 ec 3d 04 8e 35 f6 36 c7 ad 82 97 f2 49 62 92 3f d0 e0 75 5d ed e8 81 11 7d 43 50 25 4b 5f 0d b5 55 90 05 6c ed 2e 13 df 15 e8 39 da 0f 2e d0 ab 59 1f a3 1c 6c f0 ed 6d 4c 74 e8 c0 88 be 31 ea 35 d1 2d a3 ba 6e 7a cf b0 f7 39 6e 15 f5 0b b7 19 f6 1e 8c e8 0c 0c 1d 00 46 74 06 86 0e 00 23 3a 03 43 07 80 11 9d 81 a1 03 c0 88 ce c0 d0 01 60 44 67 60 e8 00 30 a2 33 30 74 00 18 d1 19 18 3a 00 8c e8 0c 0c 1d 00 46 74 06 86 0e 00 23 3a 03 43 07 80 11 9d 81 a1 03 c0 88 ce c0 d0 01 60 44 67 60 e8 00 30 a2 33 30 74 00 18 d1 19 18 3a 00 8c e8 0c 0c 1d 00 46 74 06 86 0e 00 23 3a 03 43 07 80 11 9d 81 a1 03 c0 88 ce c0 d0 01 60 44 67 60 e8 00 98 04 06 06 86 23 Data Ascii: U}5p0A/NEmn'=56Ib?u]}CP%K_Ul.9.YlmLt15-nz9nFt#:C`Dg`030t:Ft#:C`Dg`030t:Ft#:C`Dg`#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.6	57831	142.250.185.132	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:12 UTC	1471	OUT	GET /pagead/1p-user-list/11236809420/?random=1721058609649&cv=11&fst=1721055600000&bg=ffffff&guid=ON&async=1&gtm=45je4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2Fshowcase%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20Showcase&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLDIfyd_TUstYfEJgBAvMJ3EaKkJUHE1o-x0D-bMB6l3sbk5lW&random=538509789&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.umso.com/showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:50:12 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jul 2024 15:50:12 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-15 15:50:12 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.6	57835	142.250.184.194	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:13 UTC	1143	OUT	GET /pagead/viewthroughconversion/11236809420/?random=1721058609649&cv=11&fst=1721058609649&bg=ffffff&guid=ON&async=1&gtm=45je4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2Fshowcase%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20Showcase&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUleh47c-J5qwqTFYpiO4OvnlceM0zWFa6Qx_rk5pk0lMl5rR_z9LUwJfy5y
2024-07-15 15:50:14 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jul 2024 15:50:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-15 15:50:14 UTC	687	IN	Data Raw: 61 38 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 70 3d 3d 6e 75 6c 6c 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: a8c(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var
2024-07-15 15:50:14 UTC	1390	IN	Data Raw: 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 29 7c 7c 79 28 29 26 26 77 28 22 4f 70 65 72 61 22 29 3b 76 61 72 20 41 3d 2f 23 7c 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 42 28 64 29 7b 76 61 72 20 61 3d 64 2e 73 65 61 72 63 68 28 41 29 2c 62 3b 61 3a 7b 66 6f 72 28 62 3d 30 3b 28 62 3d 64 2e 69 6e 64 65 78 4f 66 28 22 66 6d 74 22 2c 62 29 29 3e 3d 30 26 26 62 3c 61 3b 29 7b 76 61 72 20 63 3d 64 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2d 31 29 3b 69 Data Ascii: \|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);i
2024-07-15 15:50:14 UTC	630	IN	Data Raw: 75 6d 25 33 44 62 74 6d 62 61 64 67 65 25 32 36 75 74 6d 5f 63 61 6d 70 61 69 67 6e 25 33 44 66 72 65 65 25 32 36 75 74 6d 5f 74 65 72 6d 25 33 44 78 61 69 36 6c 31 70 69 62 6e 78 65 66 67 74 32 5c 78 32 36 68 6e 5c 78 33 64 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 55 6d 73 6f 25 32 30 2d 25 32 30 53 68 6f 77 63 61 73 65 5c 78 32 36 6e 70 61 5c 78 33 64 30 5c 78 32 36 70 73 63 64 6c 5c 78 33 64 6e 6f 61 70 69 5c 78 32 36 61 75 69 64 5c 78 33 64 38 33 36 35 36 31 30 32 37 2e 31 37 32 31 30 35 38 35 38 35 5c 78 32 36 75 61 61 5c 78 33 64 78 38 36 5c 78 32 36 75 61 62 5c 78 33 64 36 34 5c 78 32 36 75 61 66 76 6c 5c 78 33 64 47 6f 6f 67 6c 65 25 32 35 32 30 Data Ascii: um%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2\x26hn\x3dwww.googleadservices.com\x26frm\x3d0\x26tiba\x3dUmso%20-%20Showcase\x26npa\x3d0\x26pscdl\x3dnoapi\x26auid\x3d836561027.1721058585\x26uaa\x3dx86\x26uab\x3d64\x26uafvl\x3dGoogle%2520
2024-07-15 15:50:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.6	57836	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:13 UTC	570	OUT	GET /api/view HTTP/1.1 Host: www.umso.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
2024-07-15 15:50:14 UTC	314	IN	HTTP/1.1 404 Not Found Cache-Control: public, max-age=0, must-revalidate Content-Length: 55100 Content-Type: text/html;charset=utf-8 Referrer-Policy: no-referrer-when-downgrade Strict-Transport-Security: max-age=15552000 X-Frame-Options: sameorigin Date: Mon, 15 Jul 2024 15:50:13 GMT Connection: close
2024-07-15 15:50:14 UTC	872	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 69 65 3d 65 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 75 6d 73 6f 2e 63 6f 6d 2f 6c 69 62 5f 4c 55 47 6f 50 69 71 58 58 6c 44 Data Ascii: <!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><meta http-equiv="x-ua-compatible" content="ie=edge"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><link rel="icon" href="https://www.umso.com/lib_LUGoPiqXXlD
2024-07-15 15:50:14 UTC	2372	IN	Data Raw: 74 65 72 27 2c 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 53 65 67 6f 65 20 55 49 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 35 3b 0a 20 20 2d 2d 66 6f 6e 74 2d 74 69 74 6c 65 3a 20 6e 6f 72 6d 61 6c 20 6e 6f 72 6d 61 6c 20 38 30 30 20 31 65 6d 20 27 49 6e 74 65 72 27 2c 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 53 65 67 6f 65 20 55 49 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 2d 2d 66 6f 6e 74 2d 73 79 73 74 65 6d 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 Data Ascii: ter', -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica, Arial, sans-serif; line-height: 1.5; --font-title: normal normal 800 1em 'Inter', -apple-system, BlinkMacSystemFont, Segoe UI, Helvetica, Arial, sans-serif; --font-system: -apple-system,
2024-07-15 15:50:14 UTC	538	IN	Data Raw: 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2d 37 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 35 30 25 20 35 30 25 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 2e 33 73 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 20 62 61 63 6b 67 72 6f 75 6e 64 20 63 6f 6c 6f 72 3b 0a 7d 0a 2e 6d 61 64 65 57 69 74 68 55 6d 73 6f 20 73 76 67 20 7b 0a 20 Data Ascii: font-weight: 500; white-space: nowrap; margin-right: -70px !important; border-radius: 6px; text-decoration: none !important; transform-origin: 50% 50%; animation-duration: 1.3s; transition-property: background color;}.madeWithUmso svg {
2024-07-15 15:50:14 UTC	4744	IN	Data Raw: 2e 62 61 64 67 65 2d 2d 72 69 67 68 74 20 7b 0a 20 20 6c 65 66 74 3a 20 31 30 30 25 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 31 36 35 70 78 3b 0a 7d 0a 2e 6d 61 64 65 57 69 74 68 55 6d 73 6f 2e 62 61 64 67 65 2d 2d 63 65 6e 74 65 72 20 7b 0a 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 37 30 70 78 3b 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 35 30 70 78 29 20 7b 0a 20 20 20 2e 6d 61 64 65 57 69 74 68 55 6d 73 6f 2e 66 6f 6f 74 65 72 42 61 64 67 65 20 7b 0a 20 20 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 37 30 70 78 3b 0a 20 20 7d 0a 7d 0a 2e 6d 61 64 65 57 69 74 68 55 6d 73 6f 3a 68 6f 76 65 72 20 73 76 67 20 7b 0a 20 20 66 Data Ascii: .badge--right { left: 100%; margin-left: -165px;}.madeWithUmso.badge--center { left: 50%; margin-left: -70px;}@media (max-width: 750px) { .madeWithUmso.footerBadge { left: 50%; margin-left: -70px; }}.madeWithUmso:hover svg { f
2024-07-15 15:50:14 UTC	5930	IN	Data Raw: 2d 2d 63 6f 6c 6f 72 2d 74 65 78 74 2d 70 72 69 6d 61 72 79 29 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 66 6c 65 78 2d 67 72 6f 77 3a 20 31 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 75 6d 2d 6e 61 76 2d 77 72 61 70 70 65 72 20 2e 75 6d 2d 6e 61 76 2d 64 72 61 77 65 72 54 72 69 67 67 65 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 75 6d 2d 6e 61 76 2d 77 72 61 70 70 65 72 2e 75 6d 2d 73 70 61 63 65 2d 62 65 74 77 65 65 6e 20 2e 75 6d 2d 6e 61 76 2d 6c 69 6e 6b 73 20 7b 0a 20 20 70 61 64 64 69 6e 67 6c 65 66 74 3a 20 33 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 0a 7d 0a 2e 75 6d 2d 6e 61 76 2d 77 72 61 70 70 65 72 2e 75 6d 2d 6c 69 6e 6b Data Ascii: --color-text-primary); display: flex; flex-grow: 1; align-items: center;}.um-nav-wrapper .um-nav-drawerTrigger { display: none;}.um-nav-wrapper.um-space-between .um-nav-links { paddingleft: 30; margin-right: auto;}.um-nav-wrapper.um-link
2024-07-15 15:50:14 UTC	7116	IN	Data Raw: 20 33 30 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 75 6d 73 6f 4d 6f 64 61 6c 20 7b 0a 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 34 30 70 78 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 30 30 31 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 35 30 30 70 78 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 Data Ascii: 30px; background: transparent; text-align: center;}.umsoModal { top: 50%; left: 50%; color: black; display: block; padding: 40px; z-index: 10001; position: fixed; min-width: 500px; transform: translate(-50%, -50%); background: w
2024-07-15 15:50:14 UTC	8302	IN	Data Raw: 20 69 6e 68 65 72 69 74 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 7d 0a 2e 5f 33 32 63 61 65 64 35 39 20 3e 20 61 3a 68 6f 76 65 72 2c 20 2e 5f 33 32 63 61 65 64 35 39 20 3e 20 73 70 61 6e 3a 68 6f 76 65 72 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 5f 33 32 63 61 65 64 35 39 20 3e 20 61 20 3e 20 64 69 76 20 2b 20 73 70 61 6e 2c 20 2e 5f 33 32 63 61 65 64 35 39 20 3e 20 73 70 61 6e 20 3e 20 64 69 76 20 2b 20 73 70 61 6e 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 63 61 6c 63 28 31 35 70 78 20 2a 20 76 61 72 28 2d 2d 67 61 70 29 29 3b 0a 7d 0a 2e 5f 62 39 39 32 Data Ascii: inherit; display: flex; align-items: center; line-height: 0;}._32caed59 > a:hover, ._32caed59 > span:hover { text-decoration: none;}._32caed59 > a > div + span, ._32caed59 > span > div + span { margin-left: calc(15px * var(--gap));}._b992
2024-07-15 15:50:14 UTC	9488	IN	Data Raw: 69 76 20 63 6c 61 73 73 3d 22 75 6d 2d 64 72 61 77 65 72 2d 62 75 74 74 6f 6e 73 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 70 70 2e 75 6d 73 6f 2e 63 6f 6d 2f 6c 6f 67 69 6e 22 20 69 64 3d 22 64 5f 62 74 6e 5f 39 76 63 71 79 79 63 69 6a 39 22 20 63 6c 61 73 73 3d 22 5f 65 37 32 65 37 35 62 32 20 62 74 6e 22 3e 3c 73 70 61 6e 3e 4c 6f 67 69 6e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 70 70 2e 75 6d 73 6f 2e 63 6f 6d 2f 73 69 67 6e 75 70 22 20 69 64 3d 22 64 5f 68 30 34 72 71 7a 36 30 68 66 74 22 20 63 6c 61 73 73 3d 22 5f 38 39 35 31 37 35 36 33 20 62 74 6e 22 3e 3c 73 70 61 6e 3e 53 69 67 6e 20 55 70 3c 2f 73 70 61 6e 3e 3c 73 76 67 20 77 69 64 74 68 3d 22 31 65 6d 22 20 76 69 65 77 42 6f 78 Data Ascii: iv class="um-drawer-buttons"><a href="https://app.umso.com/login" id="d_btn_9vcqyycij9" class="_e72e75b2 btn"><span>Login</span></a><a href="https://app.umso.com/signup" id="d_h04rqz60hft" class="_89517563 btn"><span>Sign Up</span><svg width="1em" viewBox
2024-07-15 15:50:14 UTC	10674	IN	Data Raw: 27 29 3b 65 26 26 28 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 27 6e 6f 6e 65 27 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 6d 61 64 65 57 69 74 68 55 6d 73 6f 27 29 3b 6e 75 6c 6c 21 3d 3d 65 26 26 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 27 62 61 64 67 65 2d 2d 63 65 6e 74 65 72 27 29 7d 28 29 7d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 6d 61 74 63 68 28 27 74 72 61 63 6b 69 6e 67 50 72 65 66 65 72 65 6e 63 65 73 27 29 3f 65 28 29 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 62 61 6e 6e 65 72 57 72 61 70 70 65 72 27 29 3b 65 26 26 28 65 2e 73 74 79 6c Data Ascii: ');e&&(e.style.display='none'),function(){const e=document.getElementById('madeWithUmso');null!==e&&e.classList.add('badge--center')}()}document.cookie.match('trackingPreferences')?e():function(){const e=document.getElementById('bannerWrapper');e&&(e.styl
2024-07-15 15:50:14 UTC	5064	IN	Data Raw: 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 28 65 29 7d 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 65 29 3a 65 2e 53 6d 6f 6f 74 68 53 63 72 6f 6c 6c 3d 74 28 65 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 29 7b 66 6f 72 28 76 Data Ascii: "function"==typeof define&&define.amd?define([],function(){return t(e)}):"object"==typeof exports?module.exports=t(e):e.SmoothScroll=t(e)}("undefined"!=typeof global?global:"undefined"!=typeof window?window:this,function(b){"use strict";function O(){for(v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.6	57832	142.250.186.110	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:13 UTC	1336	OUT	POST /g/collect?v=2&tid=G-CXEH5WRXTW&gtm=45be4790v9133397838za200&_p=1721058605648&gcd=13l3l3l3l1&npa=0&dma=0&tag_exp=0&cid=470383722.1721058585&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEA&_s=2&sid=1721058585&sct=1&seg=1&dl=https%3A%2F%2Fwww.umso.com%2Fpricing%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&dt=Umso%20-%20Pricing&en=scroll&epn.percent_scrolled=90&_et=23&tfd=6684&_z=fetch HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.umso.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.umso.com/pricing?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:50:14 UTC	446	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.umso.com Date: Mon, 15 Jul 2024 15:50:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.6	57833	142.250.186.110	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:13 UTC	1336	OUT	POST /g/collect?v=2&tid=G-VYY8D05ZV0&gtm=45be4790v9133397838za200&_p=1721058605648&gcd=13l3l3l3l1&npa=0&dma=0&tag_exp=0&cid=470383722.1721058585&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEA&_s=2&sid=1721058585&sct=1&seg=1&dl=https%3A%2F%2Fwww.umso.com%2Fpricing%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&dt=Umso%20-%20Pricing&en=scroll&epn.percent_scrolled=90&_et=23&tfd=6689&_z=fetch HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.umso.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.umso.com/pricing?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:50:14 UTC	446	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.umso.com Date: Mon, 15 Jul 2024 15:50:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.6	57834	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:13 UTC	615	OUT	GET /lib_uKHflxJGsjrjWGxc/dod4uf2jzflk15qm.png?w=500&dpr=2 HTTP/1.1 Host: www.umso.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
2024-07-15 15:50:14 UTC	252	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 109357 Content-Type: image/png Last-Modified: Fri, 03 May 2024 10:23:22 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:50:13 GMT Connection: close
2024-07-15 15:50:14 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 05 7e 08 03 00 00 00 d2 92 e4 b2 00 00 03 00 50 4c 54 45 ff ff ff fb fb fc f8 f8 f8 ff ff ff fe fe ff fc fc fd f2 f2 f3 fe fe fe fe fd fe 00 00 00 fc fc ff ea ea ea ef ef ef f6 f6 f6 f5 70 3c ed ed ed f0 f0 f0 f1 f1 f2 fa fa fb f9 f9 fa ec ec ec fd f3 d1 e6 e6 e6 ff ff fe f4 f4 f5 ff 78 00 f3 f3 f4 fe fe fe fb ef 74 04 05 08 32 33 5d f8 f8 ff e0 e0 df e4 e4 e4 35 36 5f ec 8c 8c ff ec e0 df e1 ff f0 f1 ff fe c9 a2 f3 f4 ff 8f 4d 2e ea eb ff f6 f6 ff e3 e4 ff ec ed ff e8 e9 ff d5 d7 ff 0a 0b 0e fc fe fe ff f3 e9 ff f7 ed ff f0 e4 2f 30 5b 8b 99 ab 87 94 a7 19 36 5b ff e6 da ff fb f1 d5 da e1 d0 d5 dd 13 30 56 96 a2 b3 55 19 02 2a 2c 57 ea ec f0 b6 be c9 69 24 04 5f 1e 03 81 45 29 bc c3 cd 26 Data Ascii: PNGIHDR~PLTEp<xt23]56_M./0[6[0VU*,Wi$_E)&
2024-07-15 15:50:14 UTC	2372	IN	Data Raw: d1 b5 18 34 70 1b 86 06 9e 86 e1 87 73 22 93 64 7d 74 ab 2d ab d5 55 d5 e7 67 ab 2a 2b 33 32 22 92 cd 7f 9e 88 13 11 27 00 41 10 6e 17 5b 78 ed fb 6f bd f3 ce f7 5e 7f fd 35 62 0b 5b 5b 2f bb 4a 82 20 7c d3 6c e1 b5 ef 7e ff ad 77 be a7 94 be 45 4a ff c6 cb 10 04 e1 25 b3 85 d7 df fb ee ca a4 8b d0 05 e1 d6 0a fd 3d 32 e9 eb b6 fb cb ae 92 20 08 df 34 5b 78 fd 5d 16 3a 2b 5d 2c ba 20 dc 5e a1 73 2f 5d b5 dd c5 17 27 08 b7 90 2d bc fe a6 32 e9 ab 4e ba 20 08 b7 0d 11 ba 20 bc 02 88 d0 05 e1 95 11 fa 77 d9 1b 27 4d 77 41 b8 a5 88 d0 05 e1 15 11 fa 9b ef 7e f7 fb ae 45 a7 81 74 41 10 6e 1b 22 74 0f 5d d7 cf 7d 30 e7 ff 14 84 1b cd ad 15 ba 4e ca f5 80 fe 5c a9 59 ed fa e6 8f db f2 69 08 af 3a 5b b7 53 e8 fa 1d 16 b8 46 78 62 bf ea 1d 00 f7 bc 0e 4a cb 3f 74 Data Ascii: 4ps"d}t-Ug*+32"'An[xo^5b[[/J \|l~wEJ%=2 4[x]:+], ^s/]'-2N w'MwA~EtAn"t]}0N\Yi:[SFxbJ?t
2024-07-15 15:50:14 UTC	538	IN	Data Raw: 5b 74 c4 c7 4d f8 a0 21 3a d5 63 76 67 ec cf 4d 83 7b 53 bb bc eb 8c cb 89 f1 a8 ae 45 a7 19 52 ea f1 31 4a ed 67 ab 90 84 5e 28 e4 50 bf 9f 44 7c 6a 23 37 6e 27 c8 7b 1a bd 7f 9c eb 63 67 6a fb ab 4e 01 ed 71 06 9d fb e9 90 5b 46 fa 7e 13 89 b1 43 35 39 18 57 83 07 75 11 fa 35 16 fa ef ef 7d e7 de 1f fe f5 8f a4 f4 7b bf c0 3f 7a ae b9 7b bf c0 82 2d ba 7e 67 8b 07 d9 34 a0 dc ca d4 bb 5e fc 89 4d dc 95 e7 f4 2b 80 8e dd a6 d5 e7 e7 2f 3e 57 2c ba 97 29 f4 76 bb 7d 7c 1c 6e 1c fb a8 81 8a c2 b1 86 ea b8 09 24 c7 bb ed a9 e3 38 63 87 66 0f 3d 35 07 68 c8 8f 53 38 2e 00 23 ea a3 db a3 c4 b8 03 24 c6 95 92 2b f4 ea 38 ef 09 5d a3 a6 7b 7e 7a 9c 2c 3f 53 18 2c f4 42 bb 6d 8f e3 e9 71 1c e8 dc ef a7 a7 d5 51 ee 38 d1 28 50 cf dc 39 46 77 dc a4 c5 c1 a8 8f 13 Data Ascii: [tM!:cvgM{SER1Jg^(PD\|j#7n'{cgjNq[F~C59Wu5}{?z{-~g4^M+/>W,)v}\|n$8cf=5hS8.#$+8]{~z,?S,BmqQ8(P9Fw
2024-07-15 15:50:14 UTC	4744	IN	Data Raw: 59 bb b9 69 8a 7a 62 bb 89 1d a4 a6 85 12 bd f3 ca 55 14 8e fd e8 8e 3b 25 55 46 8d 7b 16 ce b1 46 7d f4 6a da 19 d3 a4 e9 db c1 6d 13 fa 2f 4f bf c4 bf 52 d3 fd df f1 e1 ef ef fd 0e 01 6a c7 bb 42 ff a7 d7 1e 4f fe cb ca 8c 69 48 0d ad 88 65 9a a6 69 54 94 ff 97 87 4f 03 ae 03 56 45 8c e4 a4 0b 73 d2 c7 be ba a0 53 3b 5f 9d d6 ee 5c e3 a6 fb c8 d6 43 38 98 fa ea f7 0f 4a c9 fb 39 fe 46 7b 42 af df ef f8 3b c7 e4 50 7f 3a 1a 12 e3 42 34 da 1e 17 61 8f db f1 dc fd 28 46 d3 7a ed 78 5a 4e 4d 47 f1 ca f4 d8 97 1a 17 4a 21 68 38 18 37 6b 8d fb 2d 6d d4 f0 75 ee 3f 33 53 16 7a 9f 9c 71 89 ed f1 28 91 1e db d4 f2 18 21 3a 3d ee d3 2a 7f e7 98 ba d0 25 1f d5 df 19 1f 57 71 30 9e c6 e1 3f 3e 6e b5 8e a7 be 9a 12 7a e9 f8 78 17 b6 b3 9b b9 4f 33 97 9f 2d f4 38 c2 Data Ascii: YizbU;%UF{F}jm/ORjBOiHeiTOVEsS;_\C8J9F{B;P:B4a(FzxZNMGJ!h87k-mu?3Szq(!:=*%Wq0?>nzxO3-8
2024-07-15 15:50:14 UTC	5930	IN	Data Raw: 42 3f bb 24 74 f5 08 2b a1 c3 c7 83 72 d9 59 99 7b 33 09 77 5c ce 34 06 83 01 3b de 2d 11 ba 70 33 a1 2f 77 83 f5 b8 47 9a f0 9a ee 75 84 90 32 dc a6 3b 3b c9 8a 08 d3 92 94 c8 ba e9 4e 0e f7 95 f1 3e e2 e1 35 65 e3 69 22 7a f6 d1 5c 7b 1e a1 bb c3 7b 24 6c 4a bd d9 47 a7 66 b3 69 0c d8 df 4e af 18 1a 0e 53 0d 8f 6f 4e e8 47 e4 7f 5c 0b 5d cd 20 b2 26 67 dc 60 a7 57 18 d7 3b e9 ef 57 77 83 c1 60 70 97 5a 3d 2f ef 1f 4b 10 be 2e f4 35 8f b9 43 49 bc b4 24 ce 83 5d f3 3e b6 67 ec 8c ab b8 ee ef 79 0a a8 f0 a4 98 cb 42 d7 03 28 ab d1 aa 59 3d 5e 5b 98 34 c5 9c d4 f7 1c 42 2f 4f d8 13 58 d4 f4 8c 71 ae e9 ee 8d fc b9 7d 7b ee ee ab fe 82 f6 e2 84 ae 94 6d 1a 13 55 aa cf 6b c3 d0 db 6b d9 58 36 96 b4 e6 47 10 6e 20 2b a1 87 b9 7b cd 8d 70 33 62 19 c3 01 0f 44 Data Ascii: B?$t+rY{3w\4;-p3/wGu2;;N>5ei"z\{{$lJGfiNSoNG\] &g`W;Ww`pZ=/K.5CI$]>gyB(Y=^[4B/OXq}{mUkkX6Gn +{p3bD
2024-07-15 15:50:14 UTC	7116	IN	Data Raw: 34 33 3a d5 c5 5d 33 9f 1b 8d 1a 25 7b 64 a7 b4 62 b3 12 94 9e ba 70 ad d1 35 34 0b b8 03 ad 31 2a c1 87 64 c3 0d f0 e2 d9 3c 85 da be 41 d9 52 26 80 84 1d e2 bb f9 32 ca 4e 82 4f 2b a5 af 9a 09 6a ef 05 b5 37 8a db 56 50 a5 ba db a8 f0 c5 94 13 77 ef 0d 96 81 76 c7 db 0a 21 97 a3 98 ee 5e 6a 95 ef f6 2e 10 4b 02 e8 1c ac 32 52 42 07 b0 af 23 5c 76 0b a5 9a d0 ab 65 5d 01 cf 59 17 cb bb cf b7 aa 80 77 51 43 d1 b6 39 a7 80 57 75 0e 08 4f f8 50 b5 47 31 6f a9 3c 6d f6 64 3b 85 0c 12 9d 38 f4 c2 a8 e0 93 a8 d4 c2 f5 46 43 c9 a6 5d 53 0b 4e 05 ba 56 48 43 43 37 9d 2e b9 aa d8 ad 69 a5 4a 66 07 48 54 ea bb a4 24 c4 d3 99 bd 50 2b bc d3 74 32 ad 3d 60 a7 5e a9 85 80 b2 53 4a 55 d2 aa ad 8d 72 8b db e2 f1 12 e0 ab 55 ea 65 68 e8 f3 fe 66 fd 04 90 48 ed 65 78 cf Data Ascii: 43:]3%{dbp541*d<AR&2NO+j7VPwv!^j.K2RB#\ve]YwQC9WuOPG1o<md;8FC]SNVHCC7.iJfHT$P+t2=`^SJUrUehfHex
2024-07-15 15:50:14 UTC	8302	IN	Data Raw: dc f2 c3 cf 55 13 b8 f8 8e c1 fc 1d 70 dd 04 f3 f5 c5 f3 77 57 87 6b 7b 7b c3 bd 66 b7 cc f3 d9 72 b9 0c f9 7b 39 9d 2e 95 86 6b 87 a7 a7 ab 87 a7 9d 94 c0 a7 48 2a 16 8f 93 14 41 09 8d dc f2 d9 27 38 a8 63 30 3f 7f 20 20 df 54 7d 59 5b 7d 07 9e 0f 77 77 87 c3 52 b9 dc 84 93 3a a8 0e c9 7b 36 dd e9 34 9b 87 87 9d 4e a9 5b 4e a7 62 0d 5d 94 e6 38 8e 63 19 21 55 bf fb ab d1 05 3c 6e 9e c1 60 7e ee c7 f3 a9 24 78 be bb b6 bb bb bb 37 44 c9 3b d4 dc 05 41 10 20 7f e7 b3 e9 62 f1 74 37 5f ea 74 ca dd 72 36 1d 65 18 8a a2 08 86 a1 19 42 68 d8 5f 7c 8e ee e6 7e ea 3f 09 06 83 f9 df 1d cf 55 aa b3 83 e7 ef ae ae 0e 77 0f af d6 f6 4e f7 9a cd 52 a9 cc 0b 24 81 a0 a0 26 57 ce 56 8e 3a e5 d2 30 cb 97 53 79 8a 89 c5 62 24 35 fa 65 82 e4 73 77 7e 8d fe be c0 ff 97 31 Data Ascii: UpwWk{{fr{9.kH*A'8c0? T}Y[}wwR:{64N[Nb]8c!U<n`~$x7D;A bt7_tr6eBh_\|~?UwNR$&WV:0Syb$5esw~1
2024-07-15 15:50:14 UTC	2832	IN	Data Raw: e4 5e 75 0b 5d a9 ff fe 4f 7f fa cb f7 fc e9 fe fd 3f 41 17 1c 2c 67 81 f6 38 49 82 9b b6 84 28 85 fd a1 10 ea 80 1d 89 ee f8 20 ba e9 f1 e7 f8 72 0d 83 19 23 6a b5 4a 3f 28 b6 41 f4 23 14 d2 fb 79 45 a1 ca 7b dd b2 50 2e 95 b3 8a 12 d5 6c 1b e0 d1 9a 07 85 75 4f 6d 27 59 b3 5a 2d d6 da 41 4e d7 4e 24 12 3a a3 31 9e 7a ff fe fd ab f7 ef 5f bd 7a ff ea d5 87 6f 10 39 d1 e5 12 c3 ae 70 d8 6e 2a 14 12 52 38 ec f7 86 fc a1 ad 15 8d 13 2c 77 38 6c 1c e7 74 d2 44 36 0c 01 1d 3f 52 c5 60 c6 86 5a ad d2 f6 8a d9 7a a6 9f e9 83 e8 ad 7e 27 df 8a f2 7b dd 6e 8a ef 96 ca 9d 56 5b b3 bf 60 f0 5c 8f 8d f3 f9 76 26 93 3b 3e ab c5 67 dd aa b7 13 a2 91 73 38 59 52 e0 5f bd 7f 55 cc bd 4f a5 52 f1 14 cf bf 7f 1f e7 e3 f1 78 2a fe 3e 5e 78 ff 4a 74 f9 67 67 ed b2 2e 9e 40 Data Ascii: ^u]O?A,g8I( r#jJ?(A#yE{P.luOm'YZ-ANN$:1z_zo9pnR8,w8ltD6?R`Zz~'{nV[`\v&;>gs8YR_UORx>^xJtgg.@
2024-07-15 15:50:14 UTC	10674	IN	Data Raw: 7a 3a 6f a5 98 ce 92 14 49 70 64 9c 80 fb 30 96 7e 72 7e 7e be bf 39 0b 41 1d 1d d4 e1 32 dd a0 9f 9a 82 a8 3e 6d f9 5e 74 b0 bc ea f5 82 ea 7e 57 28 54 dd d7 b8 6d 6e b7 c6 e1 74 38 39 9b 03 4e e9 1c e7 a4 09 9a 2e 24 60 06 2c fe a0 31 98 b1 a1 56 a9 6f 7f e4 cd 17 fb ad d5 7e 07 89 9e 19 28 b9 8a 94 90 a4 7a 25 50 e8 e9 7a bd 62 3a 1b 23 48 81 63 62 31 06 89 be 71 be b2 bf 7f be bf 38 e7 ad 56 93 f0 c0 c5 67 f1 2c 68 f5 7a 83 d6 a0 35 5b 2c 30 71 6a 1e de b9 6d 79 ab 5e 6f b5 0a a2 fb 43 d5 15 58 93 0c a2 db 40 70 54 8e 73 72 36 10 3d 9e 80 8d c9 f8 43 c6 60 c6 86 5a 75 f3 f6 2f 7a 79 05 b6 37 74 5a ad 62 a6 35 18 64 ea 45 d1 24 87 e5 5e 22 d2 2b 84 7b b9 62 36 c6 90 02 c3 91 02 01 c9 3b b3 b1 bf b2 b9 b9 b2 0f 41 7d bd 9a 5c 9a 9f f7 c1 f4 67 8f 47 0b Data Ascii: z:oIpd0~r~~9A2>m^t~W(Tmnt89N.$`,1Vo~(z%Pzb:#Hcb1q8Vg,hz5[,0qjmy^oCX@pTsr6=C`Zu/zy7tZb5dE$^"+{b6;A}\gG
2024-07-15 15:50:14 UTC	11860	IN	Data Raw: cb 72 55 11 85 b2 aa 16 9f 6a fb 65 4f b9 56 3f aa 86 c5 aa a4 e4 71 5c e0 ea f9 92 42 e0 36 36 8f 11 cd 52 a1 24 93 5c be a4 37 68 5f 90 aa 7c 8c 68 ff 80 cd 76 86 00 8f 9a 4b 9e a3 88 74 04 fa e9 8c 79 63 b1 e3 a6 93 18 5f 4e 34 1a 95 cf ba eb 77 a3 f5 6b 3f 2a a4 df 34 c1 9a da 8e 5b 7b e3 2c 75 b1 60 55 9c ab 0d fa d4 5e df 1e f8 ef ae a1 21 97 d3 65 9f 1e 1c 9c f7 8e 8d 9d 4f c6 5e 56 d3 f7 5f 3e fe e6 a8 5e 3f ba 9f 4e 57 25 45 92 75 71 55 4b 17 9f 6a 19 4f 42 af 56 5b 25 5c 4f 4b 55 09 0f 0b a9 66 ad 2e b3 6c 20 5c 0b a6 be 2a 15 f2 38 93 cf cb 18 4b fa 2a 74 a3 03 a9 b9 dc b5 bf 1f 86 d3 2e d1 7a e7 d7 37 ef 50 b7 3b ca bb 43 c3 cc 8d 28 8c 34 3c 46 05 02 fd cf e8 ae 95 87 f3 6b fe 8f 2d fa f0 a9 d3 b2 e8 96 ba 56 b0 2a ce 65 47 85 b5 f8 50 7c cf Data Ascii: rUjeOV?q\B66R$\7h_\|hvKtyc_N4wk?4[{,u`U^!eO^V_>^?NW%EuqUKjOBV[%\OKUf.l \8Kt.z7P;C(4<Fk-VeGP\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.6	57839	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:14 UTC	615	OUT	GET /lib_ppHbngvSkiYmyFdO/m7f7yovyl5ocidz5.png?w=500&dpr=2 HTTP/1.1 Host: www.umso.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
2024-07-15 15:50:14 UTC	252	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 134447 Content-Type: image/png Last-Modified: Fri, 03 May 2024 10:23:22 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:50:14 GMT Connection: close
2024-07-15 15:50:14 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 05 7e 08 03 00 00 00 d2 92 e4 b2 00 00 03 00 50 4c 54 45 ff ff ff 17 94 f4 f7 f8 f8 fb fb fb fc fd fd 20 21 21 0e 94 f6 fe ff ff fd fe ff fe ff ff fe fd fd f9 f9 f9 e8 e9 e9 f2 f2 f2 f4 f5 f5 f6 f6 f6 37 44 44 fb fd ff 34 41 42 ff ff fe 26 33 34 ec ee ee e6 e7 e7 fe bf 26 db dc db fe ba 23 ca ea ff 09 0c 0f 2a 37 38 1a 96 f5 ea eb eb fe b1 1e ee 98 47 1a 1b 1b 2e 3a 3b fe c3 2a ef f0 f0 01 8b f5 fb a1 14 32 3d 3e dd de dd ff cc 2f 12 12 12 fe b6 21 ed 94 43 06 8f f5 d8 da da fe a9 18 bd c1 c1 e3 e5 e5 eb 8c 3d 3c 47 47 fe c7 2d fe ae 1d de e0 e0 d6 ed fd d1 d4 d4 25 26 25 ab da fd 0c 91 f4 b7 bd bd 71 76 75 e0 e2 e1 b1 b8 b8 28 9d f4 d4 d7 d8 c9 cd cd c0 c5 c6 cd d1 d1 21 2e 2f 13 88 d9 f5 Data Ascii: PNGIHDR~PLTE !!7DD4AB&34&#78G.:;2=>/!C=<GG-%&%qvu(!./
2024-07-15 15:50:14 UTC	2372	IN	Data Raw: f2 ac ec 6e c0 f0 c6 c0 2c 66 f9 fd 03 83 73 23 f8 52 ea 95 59 f9 54 c6 2f 53 12 19 8c b8 71 23 18 bf 7b ce 3d e7 dc 73 00 5c b8 70 e1 c2 85 0b 17 2e 5c b8 70 e1 c2 85 0b 17 2e 5c b8 70 e1 c2 85 0b 17 2e 5c b8 70 e1 c2 85 0b 17 2e 5c dc 50 08 94 4a cf 07 22 08 02 df 6d 86 0a 44 7a 03 21 d0 d7 7b 77 5d b8 78 23 c0 f3 02 ed 91 f5 59 41 04 87 47 3c e5 e9 9b c9 28 4a f8 fe 60 e4 c2 c5 bb 0a 5e a0 50 89 d5 9e 0b 55 a0 bc 4d 22 9e 52 9e 0f c6 de 3c 54 93 0a 7d fe 81 cc 85 8b 9b 02 81 2a ad 66 e1 f9 d0 ac 29 94 0a 76 2b bc 50 88 84 df 3c 44 9a 49 78 43 75 0d 17 2e 5e 21 04 aa b4 6b f0 3c 54 e0 a1 d2 2c 29 c4 21 3a 44 e3 f1 5b 6f 20 c2 1d 90 58 17 5d b8 78 97 41 f9 1f fc 22 a6 24 9f c7 ce 95 84 66 55 b1 59 24 50 e5 0f 91 5b 6f 20 46 c2 35 a7 8b 2e 5c bc cb 10 24 Data Ascii: n,fs#RYT/Sq#{=s\p.\p.\p.\p.\PJ"mDz!{w]x#YAG<(J`^PUM"R<T}*f)v+P<DIxCu.^!k<T,)!:D[o X]xA"$fUY$P[o F5.\$
2024-07-15 15:50:14 UTC	538	IN	Data Raw: 74 94 5a 27 18 a9 41 31 5e 2f 84 9b 9d 50 13 0a a8 fd 15 b0 23 6d ab 54 0f b5 0a 56 2b 76 29 19 98 44 6f 46 6b 91 5a d2 6a 57 1a ed 52 18 99 cd 8f d4 a0 58 4c 16 1a 15 ab 5d 09 59 c9 b6 55 b1 0a a5 d8 15 06 6c 09 9a 85 64 b9 03 ed 48 ad 33 52 80 a6 15 6c 47 a2 d1 70 15 9a 0d a8 45 6a d1 cb 03 2c 28 14 1b d5 4e a8 a0 e0 bd 6c 26 43 ed 52 1d da f1 4e 3d 1c ab 84 6a 50 8b 27 83 e1 46 a7 d5 68 54 eb c9 42 a3 d5 6e d0 62 a3 15 6b 5d 66 83 38 97 e8 02 85 8a 65 15 e2 05 28 85 1a cd 62 3c 1a 2b d3 5a b8 d9 8c b4 07 bf bb 4b 55 f7 70 ac 55 0c 85 c3 71 2b 18 ac 27 9b e1 a6 54 ef 44 43 71 87 e8 45 69 a4 16 0c b7 2b b5 68 34 dc a4 d5 7a a5 13 2e 56 6a 9d 16 32 3d 6e 05 6b d1 26 93 e8 91 6a 2d 1c b6 a0 51 80 6a dd 92 9a e1 4e ab 56 89 e1 97 87 92 3e 59 0c d7 a4 58 47 Data Ascii: tZ'A1^/P#mTV+v)DoFkZjWRXL]YUldH3RlGpEj,(Nl&CRN=jP'FhTBnbk]f8e(b<+ZKUpUq+'TDCqEi+h4z.Vj2=nk&j-QjNV>YXG
2024-07-15 15:50:14 UTC	4744	IN	Data Raw: 6c 40 34 12 bc 6a 8e ce 17 23 56 b8 99 8c c6 0b ed 62 88 6f 86 6a 12 58 4d 50 8a c5 24 12 3d 24 55 e3 1d fb c6 55 ac 62 bb 19 8f d6 e2 85 cb c7 b0 f3 89 2e 41 2d 54 81 d8 48 ab d0 48 42 ad 5c 8a 85 f8 5a b9 05 ed 46 72 a0 7f e7 10 bd cf b2 88 d5 49 96 3a c5 70 bb 55 0e b7 4b e5 60 2d 1c 8f d6 c2 23 b7 46 a2 b5 50 23 18 0c d7 ab e1 86 15 6e 48 8d 62 b2 18 2e 2a a1 76 f2 56 b8 61 c5 6f dd 8a 34 4a 38 14 17 90 bf d5 ba d5 e8 44 e3 ed a4 15 1e 49 16 8b d0 08 37 ea e5 5a 2c dc e9 84 c3 a5 76 08 9a e1 50 05 89 1e b1 a2 15 44 2b 09 c1 41 f3 dc 6b 91 e8 1b 1f e5 6f 2f a7 0f 6e e7 77 17 91 c3 bb 5b 3b f9 fc 2e 70 8c e8 cb 87 f9 47 d3 77 f3 0b 3d a2 13 2e 9b cf 1b 7e 40 63 dc dd e3 83 83 cc 47 79 83 63 73 f4 f7 f2 8b 30 0e db f9 fc ec 01 ea f9 dc 98 99 7f 02 e9 bc Data Ascii: l@4j#VbojXMP$=$UUb.A-THHB\ZFrI:pUK`-#FP#nHb.*vVao4J8DI7Z,vPD+Ako/nw[;.pGw=.~@cGycs0
2024-07-15 15:50:14 UTC	5930	IN	Data Raw: 05 14 60 83 aa 3b 70 f6 41 14 c8 dc f4 89 88 0a c2 f6 06 36 32 81 9b d7 c6 f1 a9 10 80 db 58 5b 5b 9b e9 5a b9 05 f0 e6 0c 59 d4 d2 1e 34 d5 c3 c6 ce 36 e3 b9 20 a0 29 7e f5 e0 27 99 a3 d3 15 a1 2b 3a 05 9e 08 30 b5 70 b8 9f d9 3f 9d c3 67 81 75 6d 66 63 1c f5 04 0a 30 b9 76 b0 9f c9 1c 2d fb 1d 93 e2 85 44 97 45 75 1b 30 8a 0f 32 ea 00 d1 15 34 0c 4e 2d 1f ff af bb 87 0b 63 4e 1b 82 40 60 74 e6 38 b3 7b ba 84 43 92 2d d1 c1 bf 86 17 11 00 2a a0 9b 62 74 7d fb 28 93 d9 3f 9d 06 e1 19 6d 99 6f 13 04 0a 3b 99 fe 2c 5d 20 f0 e4 f0 5b 4a 74 1e 88 44 21 d9 29 c6 23 23 a1 91 91 91 91 50 68 a4 1c 89 58 c5 76 b5 82 6e 7a 49 72 c9 fe 02 20 08 b0 a8 22 b5 8f 31 8c 94 70 30 61 eb f1 13 c0 81 27 ab ea 7a e2 1e 50 e0 e0 e8 4b 43 d3 64 9c 09 53 b8 73 94 d5 d4 04 5a c8 Data Ascii: `;pA62X[[ZY46 )~'+:0p?gumfc0v-DEu024N-cN@`t8{C-*bt}(?mo;,] [JtD!)##PhXvnzIr "1p0a'zPKCdSsZ
2024-07-15 15:50:14 UTC	7116	IN	Data Raw: f3 fe a6 13 1d f1 32 2a 53 db 8e ba 77 34 bd c7 db 60 8c 5b 3f da 3d 9e 9e 0c 04 26 ef 1c ee 1e 6d a0 31 2e b0 b5 bb 7f 32 19 78 2e 89 3e 34 30 38 7e ae a1 21 a2 6f b8 ef 0f 04 dd df 4f 69 fb fd 23 03 67 85 f9 b9 3b 0f 9e ba 6b ec eb c9 fc 73 8f b2 1b 9d 3c 5c fc 7a 05 2f fd 26 bb d7 5c bc d3 44 0f f8 27 67 fd 8c de 93 fe d9 49 7b 32 8b a6 b9 21 6a 5e 5f a2 77 c5 ea d3 c2 7b 90 e6 83 12 bb 4f c3 01 2d bb bf ef 90 14 0f d8 e3 c6 35 76 3e d3 a1 be e1 f0 1c cb 21 4e d2 67 ef cc 39 16 08 97 e8 2e 6e a2 ea de 53 ad 87 66 b4 67 66 dd 6f 31 bc 4f db 10 ce db cb cb 3c 8c ae 44 77 71 e3 e0 44 c6 0d d8 cc 7a a6 b3 61 69 db 97 ca d7 a1 cc 99 7d 06 8e bd 7c c7 6b 7c e0 1d d6 df af 6a e5 19 d0 37 fd bb 12 dd c5 0d 25 fa 85 01 24 e7 b1 ec c2 79 ee 80 be 3e b4 ef 10 43 Data Ascii: 2*Sw4`[?=&m1.2x.>408~!oOi#g;ks<\z/&\D'gI{2!j^_w{O-5v>!Ng9.nSfgfo1O<DwqDzai}\|k\|j7%$y>C
2024-07-15 15:50:14 UTC	8302	IN	Data Raw: 0f 81 ed aa 92 cb 2a 55 6f 15 24 46 89 c5 40 97 a9 72 c9 c0 00 5e c4 62 8a eb 45 1a 19 19 1f 45 ba d8 05 56 1d f1 14 74 6a 6e 65 65 6e 2a 8d 57 4a dc 66 d2 ab 38 9e f4 b6 8b 26 fd 89 24 78 12 46 cc 88 21 b2 d8 a8 aa 2c 4e a0 89 8d 1d 38 3e b9 ac c8 48 ae 5f 1d 83 9f 37 a9 b8 42 55 50 22 c2 cf 4b 10 90 86 6c 10 22 b1 d8 f1 06 d7 14 f9 ac 3d 6e 7f 16 e8 fc 8c ca fa 5c d2 73 8e 6b 29 c7 b0 90 50 a0 aa cf 40 3b 42 8a 9d 8a b0 0f 16 03 c9 7b df 2a 8a fd b1 34 8a 64 41 f4 d0 dd 92 ed 6b b1 1d d9 4f 44 68 31 35 17 f4 30 6d 8e af 3f 72 74 ec d4 a8 cf e1 72 f9 1c 2e 9f cf e9 72 b9 9c 24 22 67 e6 41 b7 b9 5c 0e a7 d3 79 6a fc d4 aa 27 fe 76 68 1c b7 70 fa 1c 3e 9f cb e5 74 3a e4 c3 2b e7 f8 fe 02 eb 3f 04 e8 88 89 f0 0b 1b 4b 09 cf 48 5b 45 22 7c 07 e4 40 c2 1e 81 Data Ascii: Uo$F@r^bEEVtjneenWJf8&$xF!,N8>H_7BUP"Kl"=n\sk)P@;B{*4dAkODh150m?rtr.r$"gA\yj'vhp>t:+?KH[E"\|@
2024-07-15 15:50:14 UTC	2832	IN	Data Raw: a4 27 d0 7c b4 7b 36 e8 66 cf 84 d7 a2 96 a9 3d 7b 5a 07 9d 0a 85 cd 66 76 78 0e f6 9b 0d 36 9b cd 40 84 7c b1 58 2c 16 b3 7b 78 a0 7f e4 f0 c1 83 93 43 13 28 93 de b3 80 a0 ef 0b 41 77 df 3e fc 4b 9e 71 df ed de b7 8f 7b e4 b7 23 ef 93 97 76 ef db 47 40 9f 57 76 3d b7 2b 28 cf 1d 5b cb 81 de c2 61 48 9e bc 63 5d bf b5 ba 5a f7 da 36 ed 1b 0a 85 c5 e5 fa c3 fe fd dd 43 03 ad 1f 62 86 3b 71 ca 3b 48 51 4b 47 d0 6a 27 90 f7 62 16 6c 6f ef 93 1b 3f 15 e2 ec 2d 3c e0 1c dd 41 f2 6f fc 40 1a 1d a2 f5 68 91 36 14 43 46 5f 14 40 59 5f 32 94 59 b5 f5 2a 63 12 a8 ec f5 5a 9d bd 18 92 34 ba 4a 55 25 86 cd ed da 8a 86 02 6e 51 3b c9 aa c7 95 b7 0a bb 4a 45 40 a9 b3 d6 9b 94 d6 48 28 e9 4b e5 ee 1b c6 3e 95 d6 64 37 02 ab b4 ab 1a b5 f6 42 88 d5 da 55 ca 26 82 7e 01 Data Ascii: '\|{6f={Zfvx6@\|X,{xC(Aw>Kq{#vG@Wv=+([aHc]Z6Cb;q;HQKGj'blo?-<Ao@h6CF_@Y_2Y*cZ4JU%nQ;JE@H(K>d7BU&~
2024-07-15 15:50:14 UTC	10674	IN	Data Raw: 6e ed e0 ba cc 70 e3 d6 5a 07 37 6e fc 59 77 f7 8b 2b 03 53 98 c3 da c4 0b c9 33 3f 32 8d be 28 f7 b1 b0 b1 31 af cf 52 e9 01 d0 c9 fb b7 57 35 8b 8d 79 c2 85 e5 41 27 45 26 14 e4 ba fd 18 6b b7 44 18 2c 96 a9 e9 a9 69 8b c5 30 3d 8d 2a 3b e7 da 11 b7 79 7a 7a 62 d2 6c b0 a0 bf ee 99 f4 7b 27 ce 17 9c f6 7b ae 79 de fb fb 35 19 af 9e 35 f0 a0 ef de 77 f1 cc f4 b9 e0 a2 99 f0 65 c0 e6 be 74 c9 3f 71 69 28 75 9d e8 a5 75 eb 5e 5a b7 2e 06 f6 e6 95 ab 15 f2 08 85 22 42 71 6e df b9 89 79 41 9f ab d5 03 1a 5d 08 bb 7f 5a 5e b5 69 53 de b6 b3 ef 65 09 a0 cb 64 0a 83 41 66 b3 39 2d e7 51 a5 0b b5 6b 1d ad dd 9d 1d 7b de df d3 85 7d de b1 3c 75 70 ff 81 c1 9f 0b 53 d5 82 a4 07 1b d1 85 99 f0 8b a0 2f ca f7 2d 34 fc e6 99 07 9e 79 66 cb 3c 45 2d 31 0c c3 c4 70 43 Data Ascii: npZ7nYw+S3?2(1RW5yA'E&kD,i0=*;yzzbl{'{y55wet?qi(uu^Z."BqnyA]Z^iSedAf9-Qk{}<upS/-4yf<E-1pC
2024-07-15 15:50:14 UTC	11860	IN	Data Raw: bf fd e2 da 6f fe fd f7 85 66 79 51 4f 29 6f d2 66 41 c2 43 0a 12 e0 63 ca 73 73 2b 72 59 cb dc 25 15 d3 13 a7 27 56 4c 9f 39 7d 7a 85 54 2a 85 45 1a f0 b2 50 17 0e 7a 6f 9b d7 d6 5a 53 53 a7 52 a9 55 55 03 4c 2a 8e b4 c0 b2 6f b1 8d 52 74 0c 3a e2 71 0e c0 4e e5 6f 99 c1 c9 c4 6f c1 94 e8 bd d5 33 c3 72 dd 29 ef 7d f3 66 26 44 8f c1 2d ae d0 0f 03 71 fa 18 6b 22 45 58 c2 c1 76 7d 02 a4 03 e7 22 21 ff 73 75 43 f3 8d 13 9f 77 34 37 aa a4 12 c5 f9 d3 0a d9 b1 13 27 6e 9c 5b 91 23 53 37 c3 d5 54 55 e3 a7 0a a9 44 42 48 a7 0a d8 b1 20 9e 89 15 9b 1a 72 c4 eb 7a 2f c9 a4 a3 5c f7 4b e4 10 84 f4 92 f6 fc e9 d8 a1 21 cd f9 f3 aa a1 4b 97 34 97 c2 9c fc af 52 74 3c 8d 7e e1 2f 6f bf bd 50 37 57 5f 68 d6 e9 af b6 9d 4b 78 00 aa e7 f8 3b e7 e6 26 4e 4f cc 65 67 dc Data Ascii: ofyQO)ofACcss+rY%'VL9}zTEPzoZSSRUULoRt:qNoo3r)}f&D-qk"EXv}"!suCw47'n[#S7TUDBH rz/\K!K4Rt<~/oP7W_hKx;&NOeg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.6	57838	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:14 UTC	615	OUT	GET /lib_idKrFnnqnDIKXMAQ/s1uokjc6kos2mlac.png?w=500&dpr=2 HTTP/1.1 Host: www.umso.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
2024-07-15 15:50:14 UTC	252	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 198350 Content-Type: image/png Last-Modified: Fri, 03 May 2024 10:23:22 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:50:14 GMT Connection: close
2024-07-15 15:50:14 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 05 7e 08 03 00 00 00 d2 92 e4 b2 00 00 03 00 50 4c 54 45 ff ff ff f8 f8 f8 f9 f9 fa ed ed ee fc fc fd fb fb fb 05 c6 ff fd fd fe ff ff ff ff fe fe 1f 0f 08 3f 20 0f f4 f4 f4 0d 0a 09 50 3e 2c f0 f0 f1 48 23 0f 18 0b 06 82 52 33 2e 18 0c 47 3a 29 38 1e 0e 99 6c 4f f6 f6 f6 e9 e9 ea 35 1a 0b a1 72 55 90 69 50 4d 2a 15 54 2e 18 26 11 08 72 62 60 f8 f0 fc fe e4 6f 00 c3 ff 59 45 2f f2 f2 f2 87 57 39 63 4b 32 5b 32 1a 52 4a 47 60 39 22 75 45 2a 6d 40 27 8c 5c 3e 86 61 46 49 45 41 97 76 64 93 67 49 7b 4b 2f 67 3b 22 53 52 52 28 16 0b 44 29 16 41 3e 3a fb b2 63 4a 40 36 fd db 76 61 53 51 56 58 5c 52 45 3c 70 5a 53 67 5a 58 78 4f 35 53 25 10 7a 6c 6b 7c 64 5a 92 60 41 6d 49 30 f4 ac 69 39 32 2a 40 Data Ascii: PNGIHDR~PLTE? P>,H#R3.G:)8lO5rUiPMT.&rb`oYE/W9cK2[2RJG`9"uEm@'\>aFIEAvdgI{K/g;"SRR(D)A>:cJ@6vaSQVX\RE<pZSgZXxO5S%zlk\|dZ`AmI0i92*@
2024-07-15 15:50:14 UTC	2372	IN	Data Raw: 10 39 14 8d 75 ba 6a d7 2d ab fa fc 73 ab ce fe 6b ea f7 5b 6b 3d cf 7a 9e 24 a0 80 dd 78 ce f3 03 f2 c6 43 4c 62 3e f9 fe de d6 6f 11 b2 1e 66 36 13 53 44 33 18 0c 06 3c 81 73 dd de 56 33 9c 3a 75 e8 94 da 52 34 d7 c3 6e 3f 04 df 87 64 bb 83 76 e9 ce 25 6a 37 6f 5e 7a 79 f3 25 7c cb f6 90 7e 3f 41 7b 8e b6 f8 7c 71 71 71 71 50 36 37 fc c8 36 09 3f 2b 5a 6a 2a fe c0 29 bd 9a ea 4e 85 53 6a 6e fc 81 53 3c c3 8b 05 ee 82 d4 82 d4 02 7a 82 3f cb 59 79 79 39 fc a8 ed ec d9 b3 f0 83 f6 84 9e 3c 79 82 4f ed 21 3b 47 3b fb e4 09 fb 3d b7 f2 b3 ec 1e 0a ca e5 7f 41 7e b0 a9 07 53 0f 8a 56 5b 7b b0 56 6b f5 f4 4b 6b a1 f5 e2 dc 1c e9 ed 01 70 cb 8c 33 dc 75 7b 0b cd 88 c4 52 78 0f 21 bf 70 82 f0 c3 cd ec 0a bb 49 f9 56 28 87 6f 8a fa 1d 8e ba da 5e be bc f4 f2 92 Data Ascii: 9uj-sk[k=z$xCLb>of6SD3<sV3:uR4n?dv%j7o^zy%\|~?A{\|qqqqP676?+Zj*)NSjnS<z?Yyy9<yO!;G;=A~SV[{VkKkp3u{Rx!pIV(o^
2024-07-15 15:50:14 UTC	538	IN	Data Raw: a7 df 23 04 ea bc fb 5d ee 9c 59 ad a2 9b 14 41 c7 85 e7 50 3f 80 ce 18 dd 75 d7 4d b7 75 30 13 49 c1 ca 3a b2 0e 4e 3c eb 97 d3 b4 ca 89 2d b1 da 42 9b 5c 66 fb 02 24 7d 95 8f 43 58 cb c2 0a e8 a0 e7 3a e8 ba e9 b6 7e a0 b3 26 1a da 84 43 9b 63 1f aa 55 3d 6c 01 6b c4 40 1d 68 5f e5 e3 50 f7 b8 43 80 4e 7b 5d 75 45 d7 4d b7 f5 03 9d 75 c9 b2 ee 5f 01 f5 72 6d 4e 4e f6 df 95 fc 3b 2f a5 af c5 75 17 32 71 94 73 da f9 96 a2 83 ae 9b 6e eb 60 26 92 92 12 9b 22 4c e4 e2 d2 4e 93 73 11 ba 67 22 f4 be 73 ff 1d 58 5f dd a3 50 71 8e 9d 32 b1 af 04 ba 49 ee 0e 5c ed 0b a0 9b 6e ff 52 40 4f 81 d5 45 a7 62 d8 b0 5d 1a b2 df 11 51 57 a6 4d 09 81 ba ca 7f 57 4a e9 ab 7c 14 ea a5 2c dc 71 8f 59 1e 74 d5 af 74 d4 75 fb e9 cc bc e1 2c 02 e8 31 31 b1 31 b8 f4 f3 54 0c 9d Data Ascii: #]YAP?uMu0I:N<-B\f$}CX:~&CcU=lk@h_PCN{]uEMu_rmNN;/u2qsn`&"LNsg"sX_Pq2I\nR@OEb]QWMWJ\|,qYttu,111T
2024-07-15 15:50:14 UTC	4744	IN	Data Raw: f2 01 26 aa e6 27 0c a4 7a 03 99 19 86 33 01 58 1a d0 63 52 70 b0 22 5f ab 5f 5d 6d a8 e6 e1 ba 98 84 0f f3 e0 35 f9 f7 d5 2a ba 02 ba 30 d1 99 4e 96 89 08 ba c9 44 e6 37 69 30 47 d4 47 e7 c9 89 d5 3c 00 dd 74 d3 18 b8 bd 46 3a 98 30 e2 34 bd 18 03 5d f0 4d 5b 3a 0d d5 d5 13 f3 d3 1b c5 96 e6 a7 aa 81 74 b3 1a f4 04 7c dc 4c d2 d1 73 36 e1 a7 02 75 e1 39 ea 6c a0 a4 88 ba 9c 94 13 49 5f c5 3b c6 a4 1a f1 2c a7 dc a3 81 6e 36 9d 20 4b 11 30 47 d4 97 74 d2 75 5b 07 33 99 88 41 9e 71 15 c9 12 13 13 4c 04 fd 63 d0 f3 6a 70 30 37 90 6d 9a 19 37 42 5e 5b 89 d2 39 e8 4c d2 01 75 a3 c1 64 a8 86 68 1d 60 17 3d 78 59 d6 b5 aa 2e 16 d5 57 f3 a2 0a ed af 6a 41 8f ac e8 27 c8 3c e3 5c eb bd 6f da 64 d5 35 5d b7 b5 1b d4 81 12 57 b0 b8 04 3a 56 06 f4 7c 62 2c 8a f2 fc Data Ascii: &'z3XcRp"__]m5*0ND7i0GG<tF:04]M[:t\|Ls6u9lI_;,n6 K0Gtu[3AqLcjp07m7B^[9Ludh`=xY.WjA'<\od5]W:V\|b,
2024-07-15 15:50:14 UTC	5930	IN	Data Raw: 15 d0 c1 c2 2a 6d 7c 4b 56 b2 2e c9 38 26 e8 91 40 57 7a dd a1 c6 36 01 85 0b cd d3 d5 93 ee f2 2b 0b a5 25 78 83 9b 69 67 1c f0 ce 6f 09 ef 8c e3 68 1a 88 c1 6c 36 63 8b 24 dc 07 ed 7c 03 e2 e0 3e cc 06 c0 07 6f 82 d9 05 d0 d8 16 c3 7e 0f c3 0c f0 cc 04 7f 64 82 ce 38 f8 47 d2 8f 76 d7 85 73 ce 3f 0b cc d8 5a 07 04 43 eb 1a 36 dd 19 e0 81 43 37 1e 81 05 56 70 df ca 3f 00 91 23 34 6a d3 a7 82 f3 0f e1 a1 1a f0 9f d4 76 c6 d1 97 80 de 6c c0 ce 38 7c 42 f8 dc e0 d9 b0 7e 3a 93 09 6f 88 da eb 1e 97 12 03 63 26 12 53 12 d3 d3 61 55 8b bc b0 45 06 3d 42 c3 9b a6 9f 45 db d3 a5 be 31 42 f3 4b 84 23 54 37 ad d8 4d 1b a1 8e ce 83 f4 57 48 c6 45 ec 9e 39 25 6e d2 f8 8a 74 af 16 74 61 39 3a 9b 32 a1 ed 8b d3 17 a4 ff 98 86 ed d1 2b 1c 11 1b a3 e9 3b db f8 a6 5e d4 Data Ascii: *m\|KV.8&@Wz6+%xigohl6c$\|>o~d8Gvs?ZC6C7Vp?#4jvl8\|B~:oc&SaUE=BE1BK#T7MWHE9%ntta9:2+;^
2024-07-15 15:50:14 UTC	7116	IN	Data Raw: cc 57 6d 2e 4e a6 0e 5a 5e 61 ed 8a 66 95 9a 5a ce 91 f1 3b 08 f9 da 41 0f db 80 96 a5 0f f8 f8 cf e5 9f 95 6e 1b db 62 8c 09 5f 1d 70 3a 9d 76 bb dd e7 f3 d9 b3 a0 41 06 62 74 ef 96 b4 34 9f e7 a3 34 6f 76 76 7c 76 36 84 e8 5e 80 16 70 06 92 87 87 33 86 3d be b4 7c 6f 9a 27 e7 ab 8f d0 71 67 a8 83 5f 9f 63 b1 64 66 da 72 20 d8 f7 7a 73 6c b9 b9 50 60 db 6f 93 72 73 2d b6 2c 3f 8c ac 80 fe 77 ec 7b af aa aa 1a 18 d8 57 d5 de d9 d9 be 67 68 68 4f fb 1e 10 75 e6 bd 73 a3 8c bb cb dc 93 e8 ae 23 e7 28 e4 65 6e 66 83 a9 93 20 e7 ee c1 45 b7 7b 71 70 b1 80 2a 3a 80 be b8 58 90 7a 90 fa ee 17 2f 5e ac bf a8 05 9d 0a 3a fd a6 55 74 45 d0 11 f4 fe 8b b5 a9 05 67 9f 5c ba 74 e7 50 c2 ca 10 af 68 7c 6c 2e 4f 6d ab 4d 90 57 75 ae 5d 55 4d 93 a5 1c 94 5c a6 7c ed a0 Data Ascii: Wm.NZ^afZ;Anb_p:vAbt44ovv\|v6^p3=\|o'qg_cdfr zslP`ors-,?w{WghhOus#(enf E{qp*:Xz/^:UtEg\tPh\|l.OmMWu]UM\\|
2024-07-15 15:50:14 UTC	8302	IN	Data Raw: b2 50 7d 32 75 12 7c 77 ae e8 2d 02 e8 61 05 36 b8 41 d5 18 a7 06 9d 2a 3a 93 74 40 55 c8 aa 69 a9 0e a3 5c 9e ca 2e 97 cc 23 34 b2 2b f9 75 a5 81 9d fb ea 54 c5 f1 94 56 17 68 df 9f 32 00 57 07 5d b7 28 66 22 e9 ff fa 43 00 7d f3 e6 f7 28 e3 1c f4 0f 69 d6 fd 43 f0 df 85 51 12 72 01 0e c5 1a 6f 67 ed 71 b8 0f 13 ab ad f1 45 6f 6c 67 26 af d7 bb db 8e 72 0e 27 67 20 17 27 81 9c f7 58 5c 0e 97 0d 87 44 06 5b b1 bc 16 6c ed 6c 95 02 9d 9d 9d 9d 7f df 7b fc 38 0d a9 2b 43 fd 5d 5d 93 5d 5d 93 d8 3a 23 80 fe 0a 6e 7c 2a bc ff 27 53 27 6b 27 65 ce f7 c8 a0 bf 2b 6b ba b0 83 03 9b 25 c5 c6 3d 53 d0 ab 00 f4 10 f3 dd 29 e8 90 79 7f f2 e4 09 84 da 2c b7 06 24 2f 8f b9 50 4e 13 fb df d8 ac 18 0d e6 c8 b8 aa 5e ce e3 71 79 d5 3d 83 5b 6e 0b d2 41 d7 2d 9a 19 c8 b6 Data Ascii: P}2u\|w-a6A:t@Ui\.#4+uTVh2W](f"C}(iCQrogqEolg&r'g 'X\D[ll{8+C]]]]:#n\|'S'k'e+k%=S)y,$/PN^qy=[nA-
2024-07-15 15:50:14 UTC	2832	IN	Data Raw: f1 26 ba 4d c4 29 18 4f 24 a2 89 c4 0a 84 9b 6e 25 a2 69 a9 e1 69 fe 83 8b 60 3a 4f c4 83 c1 60 58 12 5e 0d 19 97 9c 77 e1 ba f4 3a 2f 59 31 d0 ef fe 66 df 2b ec b8 0b d0 21 dc 66 83 9c f4 da 45 53 9c 79 1a 9d d4 5b 78 ea 72 3b 93 26 e8 ac f5 38 af 2a ce af ba bd 10 f4 50 73 43 83 0e 7a 8b 04 1d 8b 5f 48 d1 67 07 67 07 7a 7d 27 43 b3 83 b3 a4 e8 b3 74 95 fa c3 6a 6a 72 52 a4 b4 08 74 90 0d 13 3a ad db 0a 7d 3c c6 05 9e 80 27 32 e5 4f c9 6b 17 11 fa 83 a3 0f 1e e4 77 cc 10 ef 94 9b ab e0 3f d5 50 75 d0 ce 51 ba 49 3a eb ba f4 b8 0b cd a2 db 79 96 48 2c 25 94 11 e5 90 6d f6 d3 19 ef 74 3a 1d 4b a7 63 d1 74 3a 06 11 27 1d 8f 01 ef 60 67 18 80 57 0b 37 dd 04 bc 0b 90 77 c1 4a 2f f3 92 15 03 fd 9f 7f a3 d7 ce 99 73 31 5d 46 74 c9 f1 23 34 60 86 d3 70 66 12 ce Data Ascii: &M)O$n%ii`:O`X^w:/Y1f+!fESy[xr;&8*PsCz_Hggz}'CtjjrRt:}<'2Okw?PuQI:yH,%mt:Kct:'`gW7wJ/s1]Ft#4`pf
2024-07-15 15:50:14 UTC	10674	IN	Data Raw: c2 4a af f3 92 e5 9b d3 e1 78 fb 15 6b ca ad 70 e3 a2 ec 94 93 99 76 e1 b6 b7 9e 11 86 19 32 54 4a 33 8f aa 93 9a a3 aa e6 75 07 ea 9b 3d 0d f0 dc d5 f1 d4 ba 80 af c5 23 b5 9d 7c f7 be be 80 d7 85 64 dc c9 93 bd a1 5e b7 db e5 76 55 b9 7a 7b 43 97 30 4e 6a 10 19 b9 99 55 02 1d ae fb c6 c6 72 3a 91 58 a6 4a 7a 3a 18 b4 70 fe c3 c6 ee bd d4 74 81 3a f9 ee 0f 44 b4 4e 25 b7 a3 0f ce f1 7b 00 cb be c8 c7 51 8d 2d 4f d4 b9 11 87 38 47 03 ae d5 24 eb d2 5f 7f 71 da 4d 36 b5 32 ea dc c0 5e d4 30 03 47 50 ce 7f b9 be d6 d8 58 02 bd 64 45 cd 69 ec 7f 47 eb 8c 61 da 75 c8 51 7b 93 94 eb a3 64 e4 12 55 9e fc 28 4f b1 11 e3 68 94 21 af 1d eb 51 bd 7d f5 cd ba a0 37 78 ea 42 bd 70 db 7b 7a 7a 50 52 c7 e4 b8 fa fa 96 40 c0 eb c6 79 f4 93 be de 50 c0 8d 79 b1 55 ae 40 Data Ascii: Jxkpv2TJ3u=#\|d^vUz{C0NjUr:XJz:pt:DN%{Q-O8G$_qM62^0GPXdEiGauQ{dU(Oh!Q}7xBp{zzPR@yPyU@
2024-07-15 15:50:14 UTC	11860	IN	Data Raw: b9 8b 55 e7 72 28 b3 c9 3a af 36 27 1f be b6 d6 5c 7b 2c 72 76 fc d6 50 87 41 52 5d 42 d1 fb bb 7a 10 a6 37 d7 d5 77 b4 d4 8a 25 8c 62 a2 0c 49 7a 18 aa cc 99 f2 7e ec 56 24 ce 53 ab fd 3d ed 0c 3a ef 42 46 c3 88 3c 4d 52 8d 0a 7d 34 8a 08 7d 85 00 27 cc 17 d7 18 eb 4d 01 38 19 70 1c 1d 65 01 27 9b 9c 3c 8d 4f 81 74 49 e8 28 29 31 c1 9e 22 de 53 49 8a d2 65 3b db c5 46 3a d6 ae a5 e2 44 84 6e e5 9c 05 7d 72 2b 9e 48 68 a0 b3 9a 83 72 b2 b6 b6 b6 8e 53 a7 4e 75 d0 87 d2 f6 02 c2 b5 c8 bc 38 e6 9a b2 4b c8 85 a0 97 40 2f 59 3e e8 ff 3b 14 5d 0b d2 5b 01 ba 5b 7a ee 34 79 5d 6d 4c b2 b2 2e 1c f9 be be 02 ce 79 2d 03 10 ae 00 8d 4f a3 31 9c 18 a1 b9 71 1d 1d f5 f5 2d 7d 81 50 28 8f f4 98 aa 7c f7 87 7a 7b 31 29 ae 1f 9c f7 88 13 22 b2 d3 1c c4 0b 4d af ae 96 Data Ascii: Ur(:6'\{,rvPAR]Bz7w%bIz~V$S=:BF<MR}4}'M8pe'<OtI()1"SIe;F:Dn}r+HhrSNu8K@/Y>;][[z4y]mL.y-O1q-}P(\|z{1)"M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.6	57840	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:14 UTC	615	OUT	GET /lib_idKrFnnqnDIKXMAQ/gekox94o9ioxkh7i.png?w=500&dpr=2 HTTP/1.1 Host: www.umso.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
2024-07-15 15:50:14 UTC	252	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 302992 Content-Type: image/png Last-Modified: Fri, 03 May 2024 10:23:22 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:50:14 GMT Connection: close
2024-07-15 15:50:14 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 05 7e 08 03 00 00 00 d2 92 e4 b2 00 00 03 00 50 4c 54 45 ff ff ff 1c 18 15 18 15 11 fd fe fe 24 1f 1b fc 63 37 18 17 14 fe fe fe fd fc fc ff fd fd fc fb fb 13 10 0d 22 1e 1a 15 13 10 1b 17 13 20 1b 17 fb fb fb 26 21 1d 1e 1a 16 21 1d 19 f9 f9 f9 fe ff ff 10 0e 0b f1 ea e3 ff ff ff f8 f7 f7 cc c3 b7 1d 1c 1a f2 eb e5 29 24 20 ef ef ef fb f9 f9 e1 e1 e1 ca bc ac 0b 09 08 c6 b8 a9 c0 b1 a1 26 23 20 2c 27 22 e9 e9 ea c4 b5 a5 e6 e6 e6 c5 bb ae ca c1 b4 ee e8 df f6 f6 f6 db a7 7b d7 d7 d8 ed e6 de 01 01 01 cd d4 dc e8 e0 d7 73 63 5e f1 f1 f1 d1 d7 de ce c5 ba cc be af eb ec ec c6 cd d7 7f 6f 68 83 73 6c cd c0 b2 c9 d0 da f3 f3 f2 ee e8 e1 6f 5f 5a 87 77 6f f3 ed e7 dc dc dc 7b 6b 65 f3 f4 f4 b7 Data Ascii: PNGIHDR~PLTE$c7" &!!)$ &# ,'"{sc^ohslo_Zwo{ke
2024-07-15 15:50:14 UTC	2372	IN	Data Raw: ce 75 dd 63 00 7e f4 59 73 b5 9d cf 74 ae c9 a5 f2 31 18 63 30 50 7f f7 f5 79 5f 37 21 df 43 78 3c c2 e3 f1 5a 5b 79 9c e0 a3 d6 d6 56 3e 9f cf c7 1b b8 6f ca 1f 53 f8 ad 9d 32 35 88 6c c4 14 28 3c 7a f4 e0 c1 83 a7 93 69 83 3f b7 6a 75 9a 2c 26 93 c9 39 6f 0d 04 5f 3e 9f 9c 9c 9c 1c 7d 11 2c 7a d5 de 2c 88 57 26 73 6e bc 78 fe 22 9d 7e f9 f2 4d 3a 95 4a a5 47 d3 e9 d1 d1 f4 94 3f 92 8b 1b 46 27 1b 44 e5 f7 e5 42 73 5d d2 b9 48 74 66 94 4a 3a 9d 4e cf 8c d2 67 93 e9 68 7c 65 71 de 69 32 59 d6 86 ef 3f 1b 57 c8 14 32 b5 5a 06 a2 50 28 64 32 b5 5a a1 18 51 c8 d4 de 44 60 37 f6 e6 f5 7e 2c b8 bb bd b3 b3 b7 11 58 0f 04 36 76 b6 37 37 37 b7 b7 77 50 b6 77 0b a9 54 2a b8 b9 bd b7 b7 b3 fb 3a 9d 9a 4a a7 53 a9 09 ee 3d e1 7e 06 64 54 1e 9f 33 cd 2f 26 bc 5e b5 Data Ascii: uc~Yst1c0Py_7!Cx<Z[yV>oS25l(<zi?ju,&9o_>},z,W&snx"~M:JG?F'DBs]HtfJ:Ngh\|eqi2Y?W2ZP(d2ZQD`7~,X6v777wPwT*:JS=~dT3/&^
2024-07-15 15:50:14 UTC	538	IN	Data Raw: 9f 3e 19 0c 85 42 aa 60 30 00 e8 69 e4 6d 26 3d 33 93 32 7c da d9 58 87 e8 da a7 dd ed c0 0a 78 c9 40 33 0d ba 53 4d 5b 4b 82 d1 3b 7a 39 32 0a a8 82 ca 88 22 3f 6c 59 dc d8 df 5b 34 29 14 b2 c4 46 f0 75 2a 9d 9e 4a 4d 21 dc 30 a8 80 a3 80 ae 3a 92 9e fe b4 f7 8b db 32 3c 8e f1 09 7a 1a 38 21 06 06 b2 09 e7 da 7d aa bf b5 62 0d 63 d7 85 e3 ba b9 41 8f 5e fb f7 04 b4 39 08 a3 b7 d9 18 a0 9d 61 8c 3a 7f d2 1f 8f 43 d0 1d 7d 7a 4a 7a 2d 13 a7 54 e2 11 62 71 87 58 e2 19 74 1b 3d b9 68 34 ee d6 2f 83 41 bf cc d8 8c 0c c3 48 96 97 c5 97 35 3a 1a f2 5c 00 1f 6c f9 ef 00 3a 70 4e a3 ed 98 52 a3 56 3b 1f 29 17 80 bd 8e 6a 5c d8 03 60 b3 84 b3 a4 77 76 76 fe 5e ea a9 29 ff 55 e9 e4 8f 67 e1 9f 1b 7f d4 89 d5 9d fd 17 cf 9f 4f 3e 88 ad 78 f3 32 6a cd 3a 01 3c 9a d9 Data Ascii: >B`0im&=32\|Xx@3SM[K;z92"?lY[4)Fu*JM!0:2<z8!}bcA^9a:C}zJz-TbqXt=h4/AH5:\l:pNRV;)j\`wvv^)UgO>x2j:<
2024-07-15 15:50:14 UTC	4744	IN	Data Raw: 52 29 70 96 d9 67 af 0b 85 d7 05 78 5e 48 a5 5e ef 17 0a 85 bd 95 79 93 49 6d b2 58 9c d6 9d cd d5 04 90 0c 89 af 3c 17 0e 40 b0 29 dc dc 33 9a f1 66 49 57 73 d5 35 23 6b 96 f9 c0 fa bc 4c a1 4e 04 76 5f c3 48 32 03 be 39 eb 9d a7 d3 05 73 10 a2 72 53 b0 35 3d 93 9e 32 e0 08 83 d1 09 04 9d 72 0e a0 e7 87 01 54 46 22 91 68 34 5a c6 38 10 19 f4 18 31 e2 cd d2 ac b9 41 a3 73 2f 41 22 1d 38 d7 6a f4 5d f1 70 3c 9e 93 ea b5 50 05 53 f3 f0 eb 01 39 96 61 91 72 d9 a8 9b 33 1a 07 fc 49 1f 38 e9 ac ee 6e 48 de d5 6d 00 c4 bc c1 3d a7 f2 6d ea bc 9d cd 9e d3 fa 29 36 6d 4e 9f b2 05 32 57 82 6f 4d 75 fa 47 14 be 2c 8b 88 53 4b 3c 01 fe f6 d3 9f 7e 8a ad 80 12 57 7b d5 32 ef ea ee eb bd 6c 2d 5a c5 aa 51 0e 34 3c 52 2d 9b 5f dd 7c 93 4a a5 de 14 f6 5f ef ef c7 82 c1 Data Ascii: R)pgx^H^yImX<@)3fIWs5#kLNv_H29srS5=2rTF"h4Z81As/A"8j]p<PS9ar3I8nHm=m)6mN2WoMuG,SK<~W{2l-ZQ4<R-_\|J_
2024-07-15 15:50:14 UTC	5930	IN	Data Raw: de 12 11 7a ef 3e ab 94 d5 43 ec 40 d1 0a c1 b8 cb a0 9f 02 a9 17 47 0b a7 1f 33 ef 4e 3f 66 3e 7e f8 f0 2e f3 ea ec e3 19 54 c3 67 de 9d 1d 65 ee 1c 5d 1c bd cb c0 8b ae 8b 27 1f de 5d 7c fc 78 e7 ce c5 d1 9d 8f 0b ef 4e 2f 32 0b 99 a3 d3 77 ef 3e 66 ee 2c 64 2e ce 4e 33 99 8b 8f 77 32 0b a7 a7 17 ae 8b f3 a3 77 a7 0b 99 3b ae a3 b3 a3 4c e6 e3 c5 c7 77 17 1f 2f 4e df b1 06 3d ce 64 79 4f 5e d5 49 bf 19 74 58 bb c9 66 b3 0f c6 0d ac 7b 5e 2b 92 bb ce 39 ab c1 b9 84 3b 62 8e a4 53 b5 fe 15 ff 2f 5c 16 1d 5c 74 9c b8 f6 77 41 f7 3a 1c 95 a1 ce 0a e8 f0 bb 95 a5 92 a0 bd 1d bc 6b 0a 7a 19 6c 44 2f 05 7d a9 32 46 f8 b0 4b a5 9b 02 2b 3b 74 54 51 7f 83 d1 96 70 cc ce 3a 0e 1d a0 8c f0 d7 c0 07 3b be 4a 07 6c 4e a3 ab e1 bc 45 50 49 dd d7 40 17 08 c8 c8 21 4d Data Ascii: z>C@G3N?f>~.Tge]']\|xN/2w>f,d.N3w2w;Lw/N=dyO^ItXf{^+9;bS/\\twA:kzlD/}2FK+;tTQp:;JlNEPI@!M
2024-07-15 15:50:14 UTC	7116	IN	Data Raw: 15 47 a6 f5 8d cd 58 fa e5 e4 a3 47 8f 7e a4 3f 3f b2 fb df 20 93 bb 81 95 da 55 b1 d7 b9 b8 38 3f ef 34 39 e7 e7 e7 a1 77 93 db ed c1 80 99 74 20 e7 c3 45 cc e5 13 53 33 93 a3 28 33 f8 85 0f 46 47 27 27 27 e1 87 7d e9 8a cc a0 e0 3d b7 fc 29 18 eb 2c d8 35 85 6e 80 c7 66 b3 af 4b af 51 4a 60 de aa 3c 1a e9 72 4b bb dc 1e 23 a3 e9 00 cc 6d 9e 81 9c cf 4f 31 f7 83 d5 0e 77 3e 58 d7 e1 1b 34 3a fc 80 d5 c6 6f 6b c3 0c 5b 4f 67 ad d3 0c 08 96 18 d6 50 af c1 ce 21 4f ef 9a 72 db a5 cf 99 f5 26 56 b6 9f ff f4 af 9c fc 08 5f 3f 3e 7d fa f4 e9 f3 a7 2f b6 03 14 ef 62 b6 86 39 10 5e 43 c3 0b e2 64 c5 eb 85 0d 09 af 1a 36 aa d5 14 65 af 77 de eb 9d 4f 78 9d 4e b5 53 ed 74 ce d3 dd e7 61 e3 3c 50 9d 48 38 bd 8d e3 c1 22 1c 31 ef f5 7a 13 d9 95 c0 f6 6e ec 75 fa 4d Data Ascii: GXG~?? U8?49wt ES3(3FG'''}=),5nfKQJ`<rK#mO1w>X4:ok[OgP!Or&V_?>}/b9^Cd6ewOxNSta<PH8"1znuM
2024-07-15 15:50:14 UTC	8302	IN	Data Raw: 20 b3 ea 4b 1a 60 3a ea e5 f6 ea 34 bb b6 9d 85 12 59 40 db ab 06 da d8 6c 98 37 90 62 03 eb 85 8d f5 f5 4d 28 54 ad d5 cb a2 e9 4e d5 38 cb 39 cc 6f a9 4d 45 43 b5 9e da df 59 b5 ce 9b 2c 6b 90 35 03 95 7e bf 17 48 7f 46 59 65 35 35 28 73 1c ad d4 32 70 d6 eb 9a 1c b6 8f 40 79 2b 3d 96 7a fb 74 58 c0 51 40 9d 48 98 d8 dc 3a bc 72 5f a2 61 63 71 10 ef 06 83 7d 2e 12 f6 63 23 76 8c 7e a9 92 be b0 2f e7 d6 83 75 0d d8 fe 70 39 2b 46 63 e8 ca ff 9f bd b7 fb 4d 33 cd b3 45 91 a2 08 3b 57 75 51 56 d4 56 d4 f1 d6 19 a9 4f db 6e 61 81 07 d4 80 50 42 e1 1e 13 94 52 d9 ae 73 c1 2b 9a f1 d0 9b 8f 90 60 02 0a 17 85 f8 1e 4a 07 08 98 1d 86 0b 10 20 14 10 36 db d9 4c 13 3b 73 9c 4e 47 19 55 f5 a4 dc 2d 75 b4 a3 54 aa a5 8a 52 2a e2 48 75 11 f9 8f 38 5a bf e7 79 01 3b Data Ascii: K`:4Y@l7bM(TN89oMECY,k5~HFYe55(s2p@y+=ztXQ@H:r_acq}.c#v~/up9+FcM3E;WuQVVOnaPBRs+`J 6L;sNGU-uTR*Hu8Zy;
2024-07-15 15:50:14 UTC	2832	IN	Data Raw: b1 3e 17 23 7a ab 9b f0 cb a6 d2 1d 32 4e 85 e7 b9 df e6 8e a7 62 5a 1a ae 2d ce 2f 2c bc ff e1 87 1f fe ea ec d9 79 67 b4 1d 30 fc 56 57 4b dd e8 26 53 61 9d cb 96 a7 f2 a1 9b 49 f9 fc 1d a5 d2 b4 5b c8 c7 b1 5b 27 ba 3a b1 6d 55 fa 87 a5 0d 53 2b df 1e d1 df e3 07 95 39 15 e7 40 fc 50 09 df bf 41 99 3c 35 f0 c8 42 11 fe e6 d9 c3 29 3c 4d e0 18 33 47 54 a1 a1 1c de 19 ad a0 5a 17 b7 d7 69 79 ae 41 42 f0 95 19 cb 8a c5 2f d8 15 73 ec 3a 02 42 ec 74 4c fb 96 fc d1 47 e7 bf e2 19 93 c8 7c 36 77 28 1e 0a 85 dc 35 21 ec 0f c3 d4 40 4d 9a 4a 35 77 28 55 40 33 0b a9 3a 76 d5 69 59 9d 35 aa c4 b5 6d b6 0c 92 06 97 d4 ef 4b 65 1a 1a 6a a5 f1 95 96 82 cd cf a5 1e 6b e4 a0 60 03 67 ae a9 85 58 45 2e 17 cd 40 91 0e cb 2e e1 5a bd d9 b2 4e 63 db 55 86 17 8c 44 fc b6 Data Ascii: >#z2NbZ-/,yg0VWK&SaI[[':mUS+9@PA<5B)<M3GTZiyAB/s:BtLG\|6w(5!@MJ5w(U@3:viY5mKejk`gXE.@.ZNcUD
2024-07-15 15:50:14 UTC	10674	IN	Data Raw: 6c 68 b4 a3 f1 da e8 bc f2 48 25 7f cf 62 39 b5 9a 75 72 f2 67 01 03 06 4d ee 50 28 1e 4f 14 7a cc f1 b0 d9 4d 16 42 10 46 1e 34 cc 3a 34 a9 6a 75 ad 5d 48 30 1e 4e db ff 15 db 30 e5 bc db d1 81 49 2a 33 79 22 c0 83 7b c7 e9 39 26 13 f0 bb 2e 83 12 3c d4 5f fc 7e 38 28 ba 43 f1 78 c8 1d 76 75 00 63 ce 4b 1d 74 07 d8 8b d1 5d eb e9 75 99 e1 85 e6 e9 37 07 7b ac 04 df 61 2d 76 a0 99 be da ba b9 f5 d1 f9 ab 57 59 f6 8e c6 dc 16 af e2 ef 1d 3c 7e fe fc 57 5a 6d 12 92 96 32 19 28 f8 b9 49 b4 08 e4 3a a8 4a 89 e2 71 6a 93 5a 39 44 81 1d c6 f0 70 68 1f 64 f0 fd c2 5d cc ee ff 52 9c cf ce cd ae ad ac 29 2c 10 a5 ca e6 62 d8 5b d3 eb a1 2c 6f b5 52 71 2e 52 60 55 c6 15 99 d0 8e e9 b5 b1 69 af 51 a1 b0 ab c0 8b 1b 31 e3 46 e7 35 40 ff 31 0a 52 ec a5 20 29 a7 c9 b5 Data Ascii: lhH%b9urgMP(OzMBF4:4ju]H0N0I*3y"{9&.<_~8(CxvucKt]u7{a-vWY<~WZm2(I:JqjZ9Dphd]R),b[,oRq.R`UiQ1F5@1R )
2024-07-15 15:50:14 UTC	11860	IN	Data Raw: 1b 7b 87 e3 f8 cf 03 bd 26 f9 d9 3b 63 ef b2 8b c4 85 df 49 de 3d 76 6c 0c 7d 3a fa 82 37 e3 3e 39 f1 ee d8 b1 77 de f9 11 5d 0b 7e ff 8b ef 6d 91 7e 4c aa 04 c4 45 a4 0f b1 60 45 fe 0c ed af 89 6c 1a 21 94 69 cd cf 2f f6 9b e1 e4 bd e4 6c 34 ac 8d 41 9b bc 99 ac bb 6d 7e 22 d6 50 65 4f 6a 13 e9 74 3a 62 ab e3 42 d0 c2 e6 a7 4f 40 df 8e c2 f6 50 9e 8e cf 2e 17 cc 99 58 da 2e f8 ea d5 72 32 16 8d 39 b1 15 2e c3 d5 20 ad 4c cb bc 96 c9 fd c7 df 1c dc bc 75 fd fa 47 d7 19 cc ff f7 de de 9f f6 1f 3f c5 79 fc f0 4f 7f 42 80 df 12 bb 74 2c a3 bf be b5 75 fd 23 8a f5 ec 7e c6 8d 83 d9 f2 75 16 d1 35 10 a9 5b e4 40 a7 90 0e f1 78 b1 1c 66 7f f3 a8 0a 5c b1 fe f7 00 b4 22 d0 89 93 8a 7c 3d 57 c9 12 c5 b5 12 b3 b2 e7 be 34 a1 b3 ea f5 8d 92 53 af 2f 15 ed cb 67 ce Data Ascii: {&;cI=vl}:7>9w]~m~LE`El!i/l4Am~"PeOjt:bBO@P.X.r29. LuG?yOBt,u#~u5[@xf\"\|=W4S/g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.6	57837	99.83.181.15	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:14 UTC	615	OUT	GET /lib_uKHflxJGsjrjWGxc/q6yat3a98b05the9.png?w=500&dpr=2 HTTP/1.1 Host: www.umso.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; usr=2c2b74e0-8887-44f6-9a4b-8c54783669ab; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
2024-07-15 15:50:14 UTC	252	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cache-Control: max-age=31536000,public Content-Length: 133285 Content-Type: image/png Last-Modified: Fri, 03 May 2024 10:23:22 GMT X-Cache: edge:hit; Date: Mon, 15 Jul 2024 15:50:14 GMT Connection: close
2024-07-15 15:50:14 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 e8 00 00 05 7e 08 03 00 00 00 d2 92 e4 b2 00 00 03 00 50 4c 54 45 fa fa fa fc fc fc f0 f0 f0 f4 f4 f4 f9 f9 f9 fd fe fd fb fb fb ff ff ff 73 67 f0 fe fe fe f9 f8 f8 f5 f5 f5 df e1 e6 00 00 00 f6 f6 f6 f7 f7 f7 f1 f1 f1 f3 f3 f3 ee ee ee 72 66 ef ef ef ef de de de ec ec ec e9 e9 e9 6f 63 ef e1 e1 e1 f2 f2 f2 dc dc dc e3 e3 e3 f3 f2 fe d6 d6 d6 e5 e5 e5 74 68 f1 ea ea ea fc fb ff da da da fd fc fe fd fe ff e7 e7 e7 f9 f8 fe c4 c4 c4 80 76 f1 e6 e4 fc 78 6d f0 fa fa ff f7 f6 fd 04 04 04 d3 d3 d3 6b 5e f0 ff ff ff 11 11 11 a8 a8 a8 cb cb cb 14 14 14 eb eb eb 6d 61 ef af af af e6 e6 e6 c9 c9 c9 77 77 77 d1 d1 d1 d9 d8 d8 21 21 21 b6 b6 b6 ce e5 ff f8 f7 ff d7 d7 d7 07 07 07 bb bb bb 7d 7d 7e f5 f4 fd 70 Data Ascii: PNGIHDR~PLTEsgrfocthvxmk^mawww!!!}}~p
2024-07-15 15:50:14 UTC	2372	IN	Data Raw: ce f9 47 bf d6 de bb ca 65 63 1b 03 c6 21 78 3f e9 86 ba ed 5d bb 8a 7a f6 5a 7b ed b5 d7 32 00 07 07 c7 99 87 e1 4b 37 80 83 83 e3 e4 c1 89 ce c1 91 01 e0 44 e7 e0 c8 00 70 a2 73 70 64 00 38 d1 39 38 32 00 29 22 ba ac 43 cc 83 e1 a3 1c 1c 1c 5f 27 d1 e5 48 4e 53 56 cb bd 91 87 38 d5 39 38 be 6a a2 cb 20 f7 56 6a c0 5d 7a 10 2a f7 1d e5 e0 38 fb 90 4f 10 5f 90 e8 48 61 59 78 c2 20 3a e8 01 fc 27 aa 07 9f 08 d8 19 1c ff 56 1c 1c e9 82 7c 08 be ea 84 d8 61 8a 1d 0d 47 93 98 29 91 e8 72 e5 bb 9f 07 6b 6a 6a 06 07 07 07 ef 8b ec 51 41 7e 77 1f 0f 0c 0e 0e d6 0c fe fc ae 92 8b 74 8e af 06 32 1c 91 7e 58 10 2a e5 13 43 25 1c 91 e9 c7 27 3a 3e a4 e3 c9 da 6f 14 6f 7e 33 c8 95 54 75 77 ec ed 7e f7 86 e0 b7 37 8b 4f a8 a0 e7 e0 f8 0a 20 a3 85 a9 32 f9 eb 2b e5 5e Data Ascii: Gec!x?]zZ{2K7Dpspd8982)"C_'HNSV898j Vj]z8O_HaYx :'V\|aG)rkjjQA~wt2~XC%':>oo~3Tuw~7O 2+^
2024-07-15 15:50:14 UTC	538	IN	Data Raw: 3d d9 5e 9f 9b db fc c0 42 51 70 9c 59 e0 9f 77 65 6e 6b 6b e5 ea 45 c7 d5 1d 80 9d ab b0 f9 01 60 b1 e8 1a 12 7d 0b 89 7e 31 09 89 5e 7d 1f 90 83 0e 19 25 fa 9d 2b 8b 9b 35 30 37 7b ff e2 fa da 7b 94 f2 ef ef c3 ee ca ce 2a 2e 36 39 40 a2 df bf 58 0d 70 f7 ca 0e 21 fa d6 2a 80 a3 26 4c f4 bb f9 6b 00 db 87 22 3a c0 1d 34 31 6e ad dc 29 1a 04 58 a5 12 7d 0d 7a a9 76 11 4f 75 2f ba bf f3 7d d1 f7 57 e0 ca 4e cd e6 ea e6 66 c3 ec 7f e4 17 9d cb 2f 6f 68 58 dd 85 ad 9b 17 b7 be 5f a9 dc be b2 7b 7f 78 6d f0 66 f9 f0 f6 fd 9b c3 2f 17 af ac 6e 5e d9 84 d5 e1 e1 41 22 d1 f3 cf e5 17 15 e5 17 e5 af c1 ee 4d 3a 35 f7 25 54 77 c7 bb 1d 46 f3 17 9b 38 c5 16 41 72 fc f7 c6 b4 f7 7e 6e 73 73 ee 3e 2e 45 3f ea 7d 38 be 0a 38 a0 a6 a1 06 a0 b7 7c 07 ae 5e 19 7c 79 75 Data Ascii: =^BQpYwenkkE`}~1^}%+507{{.69@Xp!&Lk":41n)X}zvOu/}WNf/ohX_{xmf/n^A"M:5%TwF8Ar~nss>.E?}88\|^\|yu
2024-07-15 15:50:14 UTC	4744	IN	Data Raw: 2b cf 16 dd 39 60 14 88 d6 ff 6b c4 54 bc 8a c5 e7 ae c3 ee fa 95 d5 1a d8 de 86 d9 0f 00 1f 66 01 3e 6c 6e ef 6e 26 4b f4 bb 2b eb 57 ae ac bf ac 5e b9 82 1d 11 6c 6f ee 6e ad c0 ca 0e 60 ed 2b 09 c6 e8 a8 bc 6f df b9 58 bd b8 5e 54 f4 e1 e2 fb 9a d5 86 ab 6b d7 57 6e 96 17 6d 0e be 7f bf 53 de b0 55 bd d3 b0 76 67 70 67 f0 e6 ee da cd f2 fc f5 c1 8b ab 37 77 2e be 1f dc bc 39 57 73 7d 6d 67 4d 9b 47 3f 57 b4 be 52 44 e5 79 da 89 4e a7 d6 70 c5 b9 4a f4 ed bd bd 9a 08 71 4e 66 d5 7e dd fb 79 6e d5 c0 a7 d6 ce 3c e8 84 37 99 f7 96 1d 00 d7 c9 ee 7f dc 21 bf f0 27 f1 9f 49 e8 bd 8e cc c4 f1 20 f1 92 a1 db 4c a0 dc a1 15 df 21 47 e6 c8 32 f1 c4 4d 21 2e 35 f4 17 ad ec 2e a9 42 f3 6e c1 19 bf ad b9 04 fd 45 b4 0b 2c 75 a4 bb 83 23 fd 9d 41 c0 89 84 bb a4 85 Data Ascii: +9`kTf>lnn&K+W^lon`+oX^TkWnmSUvgpg7w.9Ws}mgMG?WRDyNpJqNf~yn<7!'I L!G2M!.5.BnE,u#A
2024-07-15 15:50:14 UTC	5930	IN	Data Raw: 51 3f 4a f4 a1 e9 a9 a9 25 3f f6 17 59 4b e3 fd 23 01 d6 73 48 20 ba fb eb 3a 95 b6 d0 8c 1b f7 08 79 ef 4d 4f fd d0 21 81 7d 34 d4 a6 74 0e bd c6 de 00 a9 24 02 04 a7 bd 9d 8a e2 aa 1b d9 10 c8 41 46 f4 67 60 ef c3 6b bb e7 25 6a 37 94 41 18 ed e9 1f 79 45 3c f0 44 78 3d 33 35 7d 01 82 fd b5 4a 5b dd 52 30 3c 6e 88 fc 62 25 a8 6a f6 76 2a 9d 5d 93 d0 a4 11 5d 82 b1 91 fe f1 47 85 d0 34 e3 ed ec 03 09 2e cc 8c f7 8f a0 86 63 e9 7b 34 35 f5 e8 36 d1 65 04 f0 cd 4c 4d 2d 4d e2 33 4b 90 f7 ac bb 56 71 d5 f6 04 e8 7c 85 0c 72 f3 0f 53 53 25 60 9a ef ea 54 3a bd 1d 55 09 a6 31 ce b4 c3 0c fd f8 25 41 4a 0a fa cb 04 81 74 10 18 13 f2 f0 a0 e1 18 0f 5f 14 43 d3 90 a2 47 01 be 86 a3 15 15 a5 34 13 9d 88 23 01 7a 14 97 12 ca a5 4c b0 0f 10 0b 9d a2 28 5d 2d 48 cb Data Ascii: Q?J%?YK#sH :yMO!}4t$AFg`k%j7AyE<Dx=35}J[R0<nb%jv*]]G4.c{456eLM-M3KVq\|rSS%`T:U1%AJt_CG4#zL(]-H
2024-07-15 15:50:14 UTC	7116	IN	Data Raw: 39 d1 0d 8c e8 84 e7 f6 e9 ae ae ee ee ae 4f 63 44 5f b5 18 85 5c 2d c1 62 b1 6c 31 82 24 e4 59 c3 37 3a 72 13 75 55 48 92 64 cd cd 29 b0 5a b3 cc 39 66 53 41 8e d5 90 95 93 17 91 9f 21 ea d9 c4 bc dc 2c b3 31 bb c0 6a 22 a1 15 0e 7f 47 d1 40 c2 07 0a 82 81 44 5a 70 0f 0d 24 42 f7 6b 9a 64 04 c3 e3 c5 d0 dd 39 d1 39 be ec 3c ba 70 88 4c 2d 0f ac 48 f4 4a 19 8a a7 ba 7a 46 c7 c7 fb 3f 75 7b e0 ae 08 3e 9f 73 c1 5e f2 6d 49 95 73 79 19 9e df 08 04 5b 83 81 a6 6f 9a 2a 5a 4a 2f 7c 6b 2f 23 d9 37 8e 07 59 86 9c dc c2 8a 0b f7 ee 59 1a ab ee dd bb 61 b3 9f 2f b1 15 d6 db e3 0a 74 ec 7e 2e d8 ab 2a 0a 5b 0b ed 25 24 24 e0 e1 df 0e 5b ce 85 91 1b 30 54 41 87 d2 99 08 2c e9 37 25 fa c1 12 9d 7b c6 71 9c da 6c aa 0f 08 d1 31 60 d8 42 d7 a7 be 1f ff f9 cf bf 7f fa Data Ascii: 9OcD_\-bl1$Y7:ruUHd)Z9fSA!,1j"G@DZp$Bkd99<pL-HJzF?u{>s^mIsy[oZJ/\|k/#7YYa/t~.[%$$[0TA,7%{ql1`B
2024-07-15 15:50:14 UTC	8302	IN	Data Raw: 7a 3a 6b c7 a7 7a 06 7a 86 42 6d 6e 90 c0 ee 0e ba 17 6e 2d df f0 78 82 37 7c be 5b 4d 42 53 d0 ff 8d 2f e8 f7 2c f8 6f 2f 07 dd 3e 9f 67 f9 96 e5 98 44 97 8d 22 48 82 28 8b 06 01 35 69 01 64 03 66 da 8d b3 aa 9b 0c 4b 64 49 96 30 c1 8b 2e 85 73 f2 a2 9d 66 6a 79 ba b0 71 21 22 53 4b ed 40 f7 d0 50 f7 08 66 6a e9 ea f6 0e 0d 74 f5 0c 8c 47 25 70 48 6a f5 1a 35 12 72 70 a4 39 f0 c4 81 aa 3b 52 dd aa 65 6a e9 f4 4e 87 96 9a db 1f d5 92 4c 2d 60 11 49 a2 16 30 89 60 d5 c2 0c 03 88 46 fc f8 ad 98 be e5 90 f2 34 46 63 59 7b 0f 91 a9 85 5c 4f 0b 1d 36 4f 8b 9a a9 65 ac fd f5 eb c6 88 04 0e af 26 e7 27 30 53 cb e7 67 cd 0b 1d 93 7d a3 fd 33 ed a1 a4 89 ce 57 af 71 7c c1 6c aa 49 2f 53 55 89 7e c1 db 19 9a 1e 19 ef e8 5b 22 29 99 c2 69 59 68 72 90 f0 2c b7 96 6b Data Ascii: z:kzzBmnn-x7\|[MBS/,o/>gD"H(5idfKdI0.sfjyq!"SK@PfjtG%pHj5rp9;RejNL-`I0`F4FcY{\O6Oe&'0Sg}3Wq\|lI/SU~[")iYhr,k
2024-07-15 15:50:14 UTC	2832	IN	Data Raw: d5 72 80 22 b5 90 88 4c 9f 3c 24 53 93 44 17 03 50 ac 44 20 af 05 b2 5a 0a 3c 91 ec 95 a2 16 4d e8 44 27 93 6f e9 28 48 31 28 a7 d3 74 aa 5c 4d 44 05 39 0f 89 92 37 a0 a4 20 a9 13 1d 32 2a 0a 7c 21 e7 0d 54 22 10 97 23 50 2a 42 05 4f ea 7e 35 81 1a cf 19 d1 8f fa 18 1d 45 95 8b 86 6a e9 39 28 d8 e7 00 0e 0d 70 3a 5d 4e 97 83 6c 25 b5 7e c3 e7 4f 34 46 17 a4 52 a0 1c 49 2a 4a a5 22 c8 99 4a 49 0c a4 d5 52 41 11 e2 69 bf 80 46 f9 52 a0 98 4c f3 b1 a5 54 3a 5b 21 86 37 b9 50 12 44 25 16 c9 96 32 72 2e 9d 53 88 5e 90 2c 4a 0a 7e 11 95 78 3a 9b 8e 2b bc 54 ca 46 f2 68 b7 37 fc ef a4 1a cf 19 d1 0f ad c3 4c bb 44 b7 58 1c 5e 47 2d fc 50 63 40 a2 b6 42 23 b5 77 55 eb bb 9a ef ef b1 38 b6 93 e2 86 c5 d8 5e d9 e8 8d d5 5b 31 52 cb de 11 9d 0c a1 15 5e 96 ed 76 59 Data Ascii: r"L<$SDPD Z<MD'o(H1(t\MD97 2\|!T"#PBO~5Ej9(p:]Nl%~O4FRI*J"JIRAiFRLT:[!7PD%2r.S^,J~x:+TFh7LDX^G-Pc@B#wU8^[1R^vY
2024-07-15 15:50:14 UTC	10674	IN	Data Raw: 78 bc eb 83 19 7e fb 0a de f6 40 10 89 be 3a 02 33 6f c7 06 07 6d ef 46 a0 f7 17 66 8c eb 30 a2 d3 3d e3 6c 7f fa 7f cd 8f 4c fb 8a c6 12 da 6c a6 83 05 3a b9 f6 a9 25 fa c8 4b 80 fb df ce c1 cb b9 4b ef a7 c1 0c 97 df 5f 0e 2e 38 7e e9 83 4b 6f a7 e7 e7 61 61 65 f0 f5 4b f8 30 66 ba 76 1e 07 e3 1f 96 67 5e f7 7c 18 77 5f 3c f1 fd 2a 40 68 6d f0 d5 35 b0 42 d7 7b 0b 9c 7e 79 7c 79 0e 56 16 06 3f bc 82 77 a1 91 8b e3 5d 1f e0 ed 69 18 7e f9 fd 89 05 58 7e 3d b2 70 d1 c6 24 fa 11 50 dd e9 32 d5 b6 b7 7b 36 59 1e fd db 9f e0 ff ec 6a f1 8f 1a 68 a4 96 8f 87 64 da d9 f4 da d0 38 4a ea 13 30 10 5c 19 01 2b 58 e1 d2 4a c8 65 1a 37 01 9c 5f 09 75 81 29 14 bc f4 3d 8c f7 c2 0f 21 13 58 e1 e4 42 d0 0d f7 57 e6 66 4e 8e fd 16 38 98 5b b8 74 9e e3 c0 35 6e e6 f0 be Data Ascii: x~@:3omFf0=lLl:%KK_.8~KoaaeK0fvg^\|w_<*@hm5B{~y\|yV?w]i~X~=p$P2{6Yjhd8J0\+XJe7_u)=!XBWfN8[t5n
2024-07-15 15:50:14 UTC	11860	IN	Data Raw: ae e5 9b 9b 55 ef 1b e2 06 7d a3 a1 87 35 70 a2 fa a1 d6 30 1d b1 c3 cc 41 00 2f a2 4e 45 b4 be 6d dd 6e 27 b6 ec 3d 04 8e 35 f6 36 c7 ad 82 97 f2 49 62 92 3f d0 e0 75 5d ed e8 81 11 7d 43 50 25 4b 5f 0d b5 55 90 05 6c ed 2e 13 df 15 e8 39 da 0f 2e d0 ab 59 1f a3 1c 6c f0 ed 6d 4c 74 e8 c0 88 be 31 ea 35 d1 2d a3 ba 6e 7a cf b0 f7 39 6e 15 f5 0b b7 19 f6 1e 8c e8 0c 0c 1d 00 46 74 06 86 0e 00 23 3a 03 43 07 80 11 9d 81 a1 03 c0 88 ce c0 d0 01 60 44 67 60 e8 00 30 a2 33 30 74 00 18 d1 19 18 3a 00 8c e8 0c 0c 1d 00 46 74 06 86 0e 00 23 3a 03 43 07 80 11 9d 81 a1 03 c0 88 ce c0 d0 01 60 44 67 60 e8 00 30 a2 33 30 74 00 18 d1 19 18 3a 00 8c e8 0c 0c 1d 00 46 74 06 86 0e 00 23 3a 03 43 07 80 11 9d 81 a1 03 c0 88 ce c0 d0 01 60 44 67 60 e8 00 98 04 06 06 86 23 Data Ascii: U}5p0A/NEmn'=56Ib?u]}CP%K_Ul.9.YlmLt15-nz9nFt#:C`Dg`030t:Ft#:C`Dg`030t:Ft#:C`Dg`#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.6	57841	216.58.212.132	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:14 UTC	1150	OUT	GET /pagead/1p-user-list/11236809420/?random=1721058609649&cv=11&fst=1721055600000&bg=ffffff&guid=ON&async=1&gtm=45je4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fwww.umso.com%2Fshowcase%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20-%20Showcase&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=3&is_vtc=1&cid=CAQSKQDaQooLDIfyd_TUstYfEJgBAvMJ3EaKkJUHE1o-x0D-bMB6l3sbk5lW&random=538509789&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:50:14 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jul 2024 15:50:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-15 15:50:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.6	57842	142.250.186.110	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:16 UTC	1339	OUT	POST /g/collect?v=2&tid=G-CXEH5WRXTW&gtm=45je4790v9133397838za200&_p=1721058609590&gcd=13l3l3l3l1&npa=0&dma=0&tag_exp=0&cid=470383722.1721058585&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEA&_s=2&sid=1721058585&sct=1&seg=1&dl=https%3A%2F%2Fwww.umso.com%2Fshowcase%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&dt=Umso%20-%20Showcase&en=scroll&epn.percent_scrolled=90&_et=15&tfd=5902&_z=fetch HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.umso.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.umso.com/showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:50:16 UTC	446	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.umso.com Date: Mon, 15 Jul 2024 15:50:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.6	57843	142.250.186.110	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:16 UTC	1339	OUT	POST /g/collect?v=2&tid=G-VYY8D05ZV0&gtm=45je4790v9133397838za200&_p=1721058609590&gcd=13l3l3l3l1&npa=0&dma=0&tag_exp=0&cid=470383722.1721058585&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_eu=AEA&_s=2&sid=1721058585&sct=1&seg=1&dl=https%3A%2F%2Fwww.umso.com%2Fshowcase%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&dt=Umso%20-%20Showcase&en=scroll&epn.percent_scrolled=90&_et=15&tfd=5902&_z=fetch HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.umso.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.umso.com/showcase?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:50:16 UTC	446	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.umso.com Date: Mon, 15 Jul 2024 15:50:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.6	57844	13.33.88.122	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:16 UTC	905	OUT	GET /login?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 HTTP/1.1 Host: app.umso.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
2024-07-15 15:50:17 UTC	751	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1914 Connection: close Date: Mon, 15 Jul 2024 15:50:18 GMT Cache-Control: max-age=0,no-cache,no-store,must-revalidate Last-Modified: Mon, 15 Jul 2024 11:27:48 GMT X-Amz-Version-Id: ifa2SE85dXM9B2PrGJZ3NVX43fO5ZBTa Etag: "509b5e9b16268a2711b2d35caa9c64ee" Server: AmazonS3 Vary: Accept-Encoding Via: 1.1 29ec57392a878e133a2e208c0dbdc3e2.cloudfront.net (CloudFront) Referrer-Policy: same-origin Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Xss-Protection: 1; mode=block X-Cache: Miss from cloudfront X-Amz-Cf-Pop: SIN2-P2 X-Amz-Cf-Id: mSbVn5GGoyhYYpCUKz12YE9nMDYhZiilimjoTW31HbAWZBvmf3YcMg==
2024-07-15 15:50:17 UTC	1914	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 6d 61 6e 61 67 65 72 2e 63 6f 6d 2f 67 74 61 67 2f 6a 73 3f 69 64 3d 41 57 2d 31 31 32 33 36 38 30 39 34 32 30 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 3d 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 7c 7c 5b 5d 2c 67 74 61 67 28 22 6a 73 22 2c 6e 65 77 20 44 61 74 65 29 2c 67 74 61 67 28 22 63 6f 6e 66 69 67 22 2c 22 41 57 2d 31 31 32 33 Data Ascii: <!doctype html><html lang="en"><head><script async src="https://www.googletagmanager.com/gtag/js?id=AW-11236809420"></script><script>function gtag(){dataLayer.push(arguments)}window.dataLayer=window.dataLayer\|\|[],gtag("js",new Date),gtag("config","AW-1123

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.6	57845	13.33.88.122	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:17 UTC	805	OUT	GET /static/js/main.07ccc171.js HTTP/1.1 Host: app.umso.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://app.umso.com/login?utm_source=usite&utm_medium=btmbadge&utm_campaign=free&utm_term=xai6l1pibnxefgt2 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gcl_au=1.1.836561027.1721058585; _ga=GA1.1.470383722.1721058585; _ga_CXEH5WRXTW=GS1.1.1721058585.1.1.1721058609.36.0.0; _ga_VYY8D05ZV0=GS1.1.1721058585.1.1.1721058609.36.0.0
2024-07-15 15:50:18 UTC	740	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 2372644 Connection: close Date: Mon, 15 Jul 2024 15:50:19 GMT Cache-Control: max-age=31536000,public Last-Modified: Mon, 15 Jul 2024 11:27:45 GMT X-Amz-Version-Id: 1ooKXu4ddbPTfBXqMBB9LJRCz_Ci9V1N Etag: "cc79a886cb6e405ca993797d29bd55a0" Server: AmazonS3 Vary: Accept-Encoding Via: 1.1 31d603b763553e4238110d07f30c186e.cloudfront.net (CloudFront) Referrer-Policy: same-origin Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Content-Type-Options: nosniff X-Frame-Options: DENY X-Xss-Protection: 1; mode=block X-Cache: Miss from cloudfront X-Amz-Cf-Pop: SIN2-P2 X-Amz-Cf-Id: XrmAgnVEm-Htw1i3sOfTKoINDEI1-U9ZzXsjp8F4CgBj-1BltBelHA==
2024-07-15 15:50:18 UTC	4046	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6d 61 69 6e 2e 30 37 63 63 63 31 37 31 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 65 3d 7b 32 39 32 38 32 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 6d 3a 28 29 3d 3e 6f 2c 76 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 3d 6e 28 34 37 33 31 33 29 3b 63 6f 6e 73 74 20 69 3d 72 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 7b 7d 29 2c 6f 3d 28 29 3d 3e 72 2e 75 73 65 43 6f 6e 74 65 78 74 28 69 29 7d 2c 33 35 33 33 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 41 3a 28 29 3d 3e 6c 2c 5a 3a 28 29 3d 3e 75 Data Ascii: /! For license information please see main.07ccc171.js.LICENSE.txt /(()=>{var e={29282:(e,t,n)=>{"use strict";n.d(t,{m:()=>o,v:()=>i});var r=n(47313);const i=r.createContext({}),o=()=>r.useContext(i)},35337:(e,t,n)=>{"use strict";n.d(t,{A:()=>l,Z:()=>u
2024-07-15 15:50:18 UTC	8592	IN	Data Raw: 5b 30 5d 2b 65 5b 30 5d 2b 65 5b 31 5d 2b 65 5b 31 5d 2b 65 5b 32 5d 2b 65 5b 32 5d 29 2c 36 21 3d 3d 65 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 48 45 58 20 63 6f 6c 6f 72 2e 22 29 3b 72 65 74 75 72 6e 2e 32 39 39 2a 70 61 72 73 65 49 6e 74 28 65 2e 73 6c 69 63 65 28 30 2c 32 29 2c 31 36 29 2b 2e 35 38 37 2a 70 61 72 73 65 49 6e 74 28 65 2e 73 6c 69 63 65 28 32 2c 34 29 2c 31 36 29 2b 2e 31 31 34 2a 70 61 72 73 65 49 6e 74 28 65 2e 73 6c 69 63 65 28 34 2c 36 29 2c 31 36 29 3e 31 38 36 3f 22 64 61 72 6b 22 3a 22 6c 69 67 68 74 22 7d 7d 7d 2c 32 36 35 31 34 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 63 7d 29 3b 63 6f 6e 73 74 20 72 Data Ascii: [0]+e[0]+e[1]+e[1]+e[2]+e[2]),6!==e.length)throw new Error("Invalid HEX color.");return.299parseInt(e.slice(0,2),16)+.587parseInt(e.slice(2,4),16)+.114*parseInt(e.slice(4,6),16)>186?"dark":"light"}}},26514:(e,t,n)=>{"use strict";n.d(t,{Z:()=>c});const r
2024-07-15 15:50:18 UTC	1432	IN	Data Raw: 72 6f 6d 70 74 3d 65 3d 3e 7b 6c 65 74 7b 74 69 74 6c 65 3a 74 2c 74 65 78 74 3a 6e 2c 69 6e 70 75 74 54 79 70 65 3a 72 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 69 2c 69 6e 69 74 69 61 6c 56 61 6c 75 65 3a 6f 2c 72 65 71 75 69 72 65 64 3a 73 2c 6f 6e 53 75 62 6d 69 74 3a 61 2c 77 69 64 74 68 3a 6c 7d 3d 65 3b 74 68 69 73 2e 63 62 26 26 74 68 69 73 2e 63 62 28 22 70 72 6f 6d 70 74 22 2c 7b 74 69 74 6c 65 3a 74 2c 74 65 78 74 3a 6e 2c 69 6e 70 75 74 54 79 70 65 3a 72 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 69 2c 69 6e 69 74 69 61 6c 56 61 6c 75 65 3a 6f 2c 72 65 71 75 69 72 65 64 3a 73 2c 6f 6e 53 75 62 6d 69 74 3a 61 2c 77 69 64 74 68 3a 6c 7d 29 7d 7d 62 69 6e 64 45 76 65 6e 74 73 28 65 29 7b 74 68 69 73 2e 63 62 3d 65 7d 7d 7d 2c 39 36 32 39 35 3a 28 65 2c Data Ascii: rompt=e=>{let{title:t,text:n,inputType:r,placeholder:i,initialValue:o,required:s,onSubmit:a,width:l}=e;this.cb&&this.cb("prompt",{title:t,text:n,inputType:r,placeholder:i,initialValue:o,required:s,onSubmit:a,width:l})}}bindEvents(e){this.cb=e}}},96295:(e,
2024-07-15 15:50:19 UTC	16384	IN	Data Raw: 65 6c 65 74 65 28 7b 70 61 74 68 3a 22 2f 73 69 74 65 73 2f 22 2b 65 2b 22 2f 64 6f 6d 61 69 6e 2f 22 2b 74 2c 73 75 63 63 65 73 73 3a 6e 2c 65 72 72 6f 72 3a 6e 7d 29 7d 7d 7d 2c 34 36 37 33 33 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 72 3d 6e 28 33 35 33 33 37 29 3b 63 6c 61 73 73 20 69 7b 73 74 61 74 69 63 20 53 65 6e 64 28 65 2c 74 29 7b 72 2e 5a 2e 50 6f 73 74 28 7b 70 61 74 68 3a 22 2f 66 65 65 64 62 61 63 6b 22 2c 64 61 74 61 3a 65 2c 73 75 63 63 65 73 73 3a 74 2c 65 72 72 6f 72 3a 74 7d 29 7d 7d 7d 2c 31 38 32 38 30 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 4f 72 3a 28 29 3d 3e 75 2c 57 76 3a 28 29 3d 3e Data Ascii: elete({path:"/sites/"+e+"/domain/"+t,success:n,error:n})}}},46733:(e,t,n)=>{"use strict";n.d(t,{Z:()=>i});var r=n(35337);class i{static Send(e,t){r.Z.Post({path:"/feedback",data:e,success:t,error:t})}}},18280:(e,t,n)=>{"use strict";n.d(t,{Or:()=>u,Wv:()=>
2024-07-15 15:50:19 UTC	10824	IN	Data Raw: 6d 28 22 74 65 6d 70 53 69 74 65 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 29 7d 53 61 76 65 41 6e 64 43 6c 65 61 72 28 65 29 7b 63 6f 6e 73 74 20 74 3d 74 68 69 73 2e 47 65 74 44 61 74 61 28 29 3b 74 26 26 74 5b 30 5d 26 26 74 5b 30 5d 2e 67 6c 6f 62 61 6c 73 3f 69 2e 5a 50 2e 43 72 65 61 74 65 28 74 5b 30 5d 2c 6e 75 6c 6c 2c 28 74 3d 3e 7b 65 26 26 65 28 74 29 2c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 22 74 65 6d 70 53 69 74 65 22 29 2c 28 30 2c 72 2e 5a 29 28 22 61 70 70 2e 73 61 76 65 54 72 79 6f 75 74 53 69 74 65 22 29 7d 29 29 3a 65 26 26 65 28 29 7d 7d 7d 2c 32 38 30 39 38 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 5a 3a 28 29 3d 3e 73 7d 29 3b 76 61 Data Ascii: m("tempSite",JSON.stringify(e))}SaveAndClear(e){const t=this.GetData();t&&t[0]&&t[0].globals?i.ZP.Create(t[0],null,(t=>{e&&e(t),localStorage.removeItem("tempSite"),(0,r.Z)("app.saveTryoutSite")})):e&&e()}}},28098:(e,t,n)=>{"use strict";n.d(t,{Z:()=>s});va
2024-07-15 15:50:19 UTC	2864	IN	Data Raw: 65 4e 61 6d 65 3a 22 5c 75 30 35 65 32 5c 75 30 35 64 31 5c 75 30 35 65 38 5c 75 30 35 64 39 5c 75 30 35 65 61 22 7d 2c 69 77 3a 7b 6e 61 6d 65 3a 22 48 65 62 72 65 77 22 2c 6e 61 74 69 76 65 4e 61 6d 65 3a 22 5c 75 30 35 65 32 5c 75 30 35 64 31 5c 75 30 35 65 38 5c 75 30 35 64 39 5c 75 30 35 65 61 22 7d 2c 68 7a 3a 7b 6e 61 6d 65 3a 22 48 65 72 65 72 6f 22 2c 6e 61 74 69 76 65 4e 61 6d 65 3a 22 4f 74 6a 69 68 65 72 65 72 6f 22 7d 2c 68 69 3a 7b 6e 61 6d 65 3a 22 48 69 6e 64 69 22 2c 6e 61 74 69 76 65 4e 61 6d 65 3a 22 5c 75 30 39 33 39 5c 75 30 39 33 66 5c 75 30 39 32 38 5c 75 30 39 34 64 5c 75 30 39 32 36 5c 75 30 39 34 30 2c 20 5c 75 30 39 33 39 5c 75 30 39 33 66 5c 75 30 39 30 32 5c 75 30 39 32 36 5c 75 30 39 34 30 22 7d 2c 68 6f 3a 7b 6e 61 6d 65 3a Data Ascii: eName:"\u05e2\u05d1\u05e8\u05d9\u05ea"},iw:{name:"Hebrew",nativeName:"\u05e2\u05d1\u05e8\u05d9\u05ea"},hz:{name:"Herero",nativeName:"Otjiherero"},hi:{name:"Hindi",nativeName:"\u0939\u093f\u0928\u094d\u0926\u0940, \u0939\u093f\u0902\u0926\u0940"},ho:{name:
2024-07-15 15:50:19 UTC	16384	IN	Data Raw: 30 64 33 65 5c 75 30 64 33 33 5c 75 30 64 30 32 22 7d 2c 6d 74 3a 7b 6e 61 6d 65 3a 22 4d 61 6c 74 65 73 65 22 2c 6e 61 74 69 76 65 4e 61 6d 65 3a 22 4d 61 6c 74 69 22 7d 2c 6d 69 3a 7b 6e 61 6d 65 3a 22 4d 5c 75 30 31 30 31 6f 72 69 22 2c 6e 61 74 69 76 65 4e 61 6d 65 3a 22 74 65 20 72 65 6f 20 4d 5c 75 30 31 30 31 6f 72 69 22 7d 2c 6d 72 3a 7b 6e 61 6d 65 3a 22 4d 61 72 61 74 68 69 22 2c 6e 61 74 69 76 65 4e 61 6d 65 3a 22 5c 75 30 39 32 65 5c 75 30 39 33 30 5c 75 30 39 33 65 5c 75 30 39 32 30 5c 75 30 39 34 30 22 7d 2c 6d 68 3a 7b 6e 61 6d 65 3a 22 4d 61 72 73 68 61 6c 6c 65 73 65 22 2c 6e 61 74 69 76 65 4e 61 6d 65 3a 22 4b 61 6a 69 6e 20 4d 5c 75 30 33 32 37 61 6a 65 5c 75 30 31 33 63 22 7d 2c 6d 6e 3a 7b 6e 61 6d 65 3a 22 4d 6f 6e 67 6f 6c 69 61 6e Data Ascii: 0d3e\u0d33\u0d02"},mt:{name:"Maltese",nativeName:"Malti"},mi:{name:"M\u0101ori",nativeName:"te reo M\u0101ori"},mr:{name:"Marathi",nativeName:"\u092e\u0930\u093e\u0920\u0940"},mh:{name:"Marshallese",nativeName:"Kajin M\u0327aje\u013c"},mn:{name:"Mongolian
2024-07-15 15:50:19 UTC	16384	IN	Data Raw: 6f 6e 65 6e 74 73 5f 63 65 6e 74 65 72 65 64 5f 5f 59 50 76 72 59 22 2c 78 3d 22 63 6f 6d 70 6f 6e 65 6e 74 73 5f 64 65 73 63 72 69 70 74 69 6f 6e 5f 5f 6f 53 38 74 2b 22 2c 4f 3d 22 63 6f 6d 70 6f 6e 65 6e 74 73 5f 64 69 73 61 62 6c 65 64 5f 5f 50 68 47 72 6f 22 2c 77 3d 22 63 6f 6d 70 6f 6e 65 6e 74 73 5f 64 65 73 63 72 69 70 74 69 6f 6e 43 65 6e 74 65 72 65 64 5f 5f 46 6b 31 44 50 22 2c 6b 3d 22 63 6f 6d 70 6f 6e 65 6e 74 73 5f 67 75 69 64 65 5f 5f 76 68 66 56 76 22 2c 53 3d 22 63 6f 6d 70 6f 6e 65 6e 74 73 5f 73 65 6c 65 63 74 5f 5f 55 6a 33 77 51 22 2c 43 3d 22 63 6f 6d 70 6f 6e 65 6e 74 73 5f 63 6f 6c 6f 72 50 69 63 6b 65 72 5f 5f 6e 68 56 77 6f 22 2c 6a 3d 22 63 6f 6d 70 6f 6e 65 6e 74 73 5f 74 65 78 74 49 6e 70 75 74 5f 5f 6a 41 64 69 4e 22 2c 5f Data Ascii: onents_centered__YPvrY",x="components_description__oS8t+",O="components_disabled__PhGro",w="components_descriptionCentered__Fk1DP",k="components_guide__vhfVv",S="components_select__Uj3wQ",C="components_colorPicker__nhVwo",j="components_textInput__jAdiN",_
2024-07-15 15:50:19 UTC	16384	IN	Data Raw: 65 2e 68 65 69 67 68 74 2c 65 2e 77 69 64 74 68 5d 2c 69 3d 78 28 22 63 61 6e 76 61 73 22 2c 7b 77 69 64 74 68 3a 6e 2c 68 65 69 67 68 74 3a 72 7d 29 2c 6f 3d 69 2e 67 65 74 43 6f 6e 74 65 78 74 28 22 32 64 22 29 3b 69 66 28 53 28 65 29 26 26 21 61 77 61 69 74 20 79 28 29 26 26 74 3e 31 29 7b 63 6f 6e 73 74 20 74 3d 78 28 22 63 61 6e 76 61 73 22 2c 7b 77 69 64 74 68 3a 65 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 65 2e 68 65 69 67 68 74 7d 29 3b 74 2e 67 65 74 43 6f 6e 74 65 78 74 28 22 32 64 22 29 2e 70 75 74 49 6d 61 67 65 44 61 74 61 28 65 2c 30 2c 30 29 2c 65 3d 74 7d 72 65 74 75 72 6e 21 61 77 61 69 74 20 79 28 29 26 26 74 3e 31 26 26 6f 2e 74 72 61 6e 73 66 6f 72 6d 2e 61 70 70 6c 79 28 6f 2c 77 28 65 2e 77 69 64 74 68 2c 65 2e 68 65 69 67 68 74 2c Data Ascii: e.height,e.width],i=x("canvas",{width:n,height:r}),o=i.getContext("2d");if(S(e)&&!await y()&&t>1){const t=x("canvas",{width:e.width,height:e.height});t.getContext("2d").putImageData(e,0,0),e=t}return!await y()&&t>1&&o.transform.apply(o,w(e.width,e.height,
2024-07-15 15:50:19 UTC	10992	IN	Data Raw: 6d 70 65 64 41 72 72 61 79 28 6f 2a 73 2a 34 29 3b 66 6f 72 28 75 3d 30 3b 75 3c 73 3b 75 2b 2b 29 66 6f 72 28 63 3d 30 3b 63 3c 6f 3b 63 2b 2b 29 7b 66 6f 72 28 70 3d 30 2c 66 3d 30 2c 6d 3d 30 2c 67 3d 30 2c 79 3d 30 3b 79 3c 64 3b 79 2b 2b 29 66 6f 72 28 76 3d 30 3b 76 3c 64 3b 76 2b 2b 29 62 3d 75 2b 79 2d 68 2c 78 3d 63 2b 76 2d 68 2c 62 3c 30 26 26 28 62 3d 73 2d 31 29 2c 62 3e 3d 73 26 26 28 62 3d 30 29 2c 78 3c 30 26 26 28 78 3d 6f 2d 31 29 2c 78 3e 3d 6f 26 26 28 78 3d 30 29 2c 4f 3d 34 2a 28 62 2a 6f 2b 78 29 2c 77 3d 72 5b 79 2a 64 2b 76 5d 2c 70 2b 3d 61 5b 4f 5d 2a 77 2c 66 2b 3d 61 5b 4f 2b 31 5d 2a 77 2c 6d 2b 3d 61 5b 4f 2b 32 5d 2a 77 2c 67 2b 3d 61 5b 4f 2b 33 5d 2a 77 3b 6b 5b 6c 5d 3d 70 2f 69 2c 6b 5b 6c 2b 31 5d 3d 66 2f 69 2c 6b 5b Data Ascii: mpedArray(os4);for(u=0;u<s;u++)for(c=0;c<o;c++){for(p=0,f=0,m=0,g=0,y=0;y<d;y++)for(v=0;v<d;v++)b=u+y-h,x=c+v-h,b<0&&(b=s-1),b>=s&&(b=0),x<0&&(x=o-1),x>=o&&(x=0),O=4(bo+x),w=r[yd+v],p+=a[O]w,f+=a[O+1]w,m+=a[O+2]w,g+=a[O+3]*w;k[l]=p/i,k[l+1]=f/i,k[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.6	57849	18.245.35.58	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:18 UTC	494	OUT	GET /7.0/pusher.min.js HTTP/1.1 Host: js.pusher.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:50:18 UTC	601	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 65980 Connection: close Date: Sun, 07 Jul 2024 07:53:25 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, HEAD Last-Modified: Fri, 04 Feb 2022 15:47:58 GMT ETag: "50ad48267f5c084cceb88264d13effe0" Cache-Control: max-age=2592000 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 37236193bd380575cb98e661bedbb260.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P8 X-Amz-Cf-Id: mOAKTG2SdS0nsmn9QVODqyIQGLQacqIuMPoaKEI2_Jb06Y3uvXAulg== Age: 719814
2024-07-15 15:50:18 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 50 75 73 68 65 72 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 37 2e 30 2e 36 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 70 75 73 68 65 72 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 30 2c 20 50 75 73 68 65 72 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 63 65 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 Data Ascii: /! Pusher JavaScript Library v7.0.6 * https://pusher.com/ * * Copyright 2020, Pusher * Released under the MIT licence. */!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?de
2024-07-15 15:50:18 UTC	16384	IN	Data Raw: 73 63 72 69 70 74 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 63 61 6c 6c 62 61 63 6b 28 6e 75 6c 6c 29 7d 29 3a 65 2e 73 63 72 69 70 74 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 6c 6f 61 64 65 64 22 21 3d 3d 65 2e 73 63 72 69 70 74 2e 72 65 61 64 79 53 74 61 74 65 26 26 22 63 6f 6d 70 6c 65 74 65 22 21 3d 3d 65 2e 73 63 72 69 70 74 2e 72 65 61 64 79 53 74 61 74 65 7c 7c 74 2e 63 61 6c 6c 62 61 63 6b 28 6e 75 6c 6c 29 7d 2c 76 6f 69 64 20 30 3d 3d 3d 65 2e 73 63 72 69 70 74 2e 61 73 79 6e 63 26 26 64 6f 63 75 6d 65 6e 74 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 2f 6f 70 65 72 61 2f 69 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 3f 28 65 2e 65 72 72 Data Ascii: script.onload=function(){t.callback(null)}):e.script.onreadystatechange=function(){"loaded"!==e.script.readyState&&"complete"!==e.script.readyState\|\|t.callback(null)},void 0===e.script.async&&document.attachEvent&&/opera/i.test(navigator.userAgent)?(e.err
2024-07-15 15:50:18 UTC	16384	IN	Data Raw: 74 79 70 65 2c 6e 65 77 20 6f 29 7d 7d 28 29 2c 4d 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 74 26 26 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7c 7c 74 68 69 73 7d 72 65 74 75 72 6e 20 4e 74 28 65 2c 74 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 61 75 74 68 6f 72 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 51 74 2e 63 72 65 61 74 65 41 75 74 68 6f 72 69 7a 65 72 28 74 68 69 73 2c 74 68 69 73 2e 70 75 73 68 65 72 2e 63 6f 6e 66 69 67 29 2e 61 75 74 68 6f 72 69 7a 65 28 74 2c 65 29 7d 2c 65 7d 28 49 74 29 2c 48 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 74 68 69 73 2e 72 65 73 65 74 28 Data Ascii: type,new o)}}(),Mt=function(t){function e(){return null!==t&&t.apply(this,arguments)\|\|this}return Nt(e,t),e.prototype.authorize=function(t,e){return Qt.createAuthorizer(this,this.pusher.config).authorize(t,e)},e}(It),Ht=function(){function t(){this.reset(
2024-07-15 15:50:19 UTC	16384	IN	Data Raw: 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 65 2c 7b 68 6f 73 74 4e 6f 6e 54 4c 53 3a 74 2e 68 74 74 70 48 6f 73 74 2b 22 3a 22 2b 74 2e 68 74 74 70 50 6f 72 74 2c 68 6f 73 74 54 4c 53 3a 74 2e 68 74 74 70 48 6f 73 74 2b 22 3a 22 2b 74 2e 68 74 74 70 73 50 6f 72 74 2c 68 74 74 70 50 61 74 68 3a 74 2e 68 74 74 70 50 61 74 68 7d 29 2c 75 3d 7b 6c 6f 6f 70 3a 21 30 2c 74 69 6d 65 6f 75 74 3a 31 35 65 33 2c 74 69 6d 65 6f 75 74 4c 69 6d 69 74 3a 36 65 34 7d 2c 68 3d 6e 65 77 20 56 74 28 7b 6c 69 76 65 73 3a 32 2c 6d 69 6e 50 69 6e 67 44 65 6c 61 79 3a 31 65 34 2c 6d 61 78 50 69 6e 67 44 65 6c 61 79 3a 74 2e 61 63 74 69 76 69 74 79 54 69 6d 65 6f 75 74 7d 29 2c 70 3d 6e 65 77 20 56 74 28 7b 6c 69 76 65 73 3a 32 2c 6d 69 6e 50 69 6e 67 44 65 6c 61 79 Data Ascii: =Object.assign({},e,{hostNonTLS:t.httpHost+":"+t.httpPort,hostTLS:t.httpHost+":"+t.httpsPort,httpPath:t.httpPath}),u={loop:!0,timeout:15e3,timeoutLimit:6e4},h=new Vt({lives:2,minPingDelay:1e4,maxPingDelay:t.activityTimeout}),p=new Vt({lives:2,minPingDelay
2024-07-15 15:50:19 UTC	444	IN	Data Raw: 6d 6f 76 65 28 74 29 29 26 26 65 2e 73 75 62 73 63 72 69 62 65 64 26 26 65 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 6e 64 5f 65 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 6e 65 63 74 69 6f 6e 2e 73 65 6e 64 5f 65 76 65 6e 74 28 74 2c 65 2c 6e 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 68 6f 75 6c 64 55 73 65 54 4c 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 66 69 67 2e 75 73 65 54 4c 53 7d 2c 74 2e 69 6e 73 74 61 6e 63 65 73 3d 5b 5d 2c 74 2e 69 73 52 65 61 64 79 3d 21 31 2c 74 2e 6c 6f 67 54 6f 43 6f 6e 73 6f 6c 65 3d 21 31 2c 74 2e 52 75 6e 74 69 6d 65 3d 5f 65 2c 74 2e 53 63 72 69 70 74 52 65 63 Data Ascii: move(t))&&e.subscribed&&e.unsubscribe()},t.prototype.send_event=function(t,e,n){return this.connection.send_event(t,e,n)},t.prototype.shouldUseTLS=function(){return this.config.useTLS},t.instances=[],t.isReady=!1,t.logToConsole=!1,t.Runtime=_e,t.ScriptRec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.6	57850	142.250.185.66	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:18 UTC	1271	OUT	GET /pagead/viewthroughconversion/11236809420/?random=1721058617250&cv=11&fst=1721058617250&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fapp.umso.com%2Flogin%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20App&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUleh47c-J5qwqTFYpiO4OvnlceM0zWFa6Qx_rk5pk0lMl5rR_z9LUwJfy5y
2024-07-15 15:50:18 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jul 2024 15:50:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-15 15:50:18 UTC	687	IN	Data Raw: 61 38 30 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 70 3d 3d 6e 75 6c 6c 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: a80(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],p==null){k=null;break a}k=p}var
2024-07-15 15:50:18 UTC	1390	IN	Data Raw: 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 29 7c 7c 79 28 29 26 26 77 28 22 4f 70 65 72 61 22 29 3b 76 61 72 20 41 3d 2f 23 7c 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 42 28 64 29 7b 76 61 72 20 61 3d 64 2e 73 65 61 72 63 68 28 41 29 2c 62 3b 61 3a 7b 66 6f 72 28 62 3d 30 3b 28 62 3d 64 2e 69 6e 64 65 78 4f 66 28 22 66 6d 74 22 2c 62 29 29 3e 3d 30 26 26 62 3c 61 3b 29 7b 76 61 72 20 63 3d 64 2e 63 68 61 72 43 6f 64 65 41 74 28 62 2d 31 29 3b 69 Data Ascii: \|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;(b=d.indexOf("fmt",b))>=0&&b<a;){var c=d.charCodeAt(b-1);i
2024-07-15 15:50:18 UTC	618	IN	Data Raw: 33 44 62 74 6d 62 61 64 67 65 25 32 36 75 74 6d 5f 63 61 6d 70 61 69 67 6e 25 33 44 66 72 65 65 25 32 36 75 74 6d 5f 74 65 72 6d 25 33 44 78 61 69 36 6c 31 70 69 62 6e 78 65 66 67 74 32 5c 78 32 36 68 6e 5c 78 33 64 77 77 77 2e 67 6f 6f 67 6c 65 61 64 73 65 72 76 69 63 65 73 2e 63 6f 6d 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 55 6d 73 6f 25 32 30 41 70 70 5c 78 32 36 6e 70 61 5c 78 33 64 30 5c 78 32 36 70 73 63 64 6c 5c 78 33 64 6e 6f 61 70 69 5c 78 32 36 61 75 69 64 5c 78 33 64 38 33 36 35 36 31 30 32 37 2e 31 37 32 31 30 35 38 35 38 35 5c 78 32 36 75 61 61 5c 78 33 64 78 38 36 5c 78 32 36 75 61 62 5c 78 33 64 36 34 5c 78 32 36 75 61 66 76 6c 5c 78 33 64 47 6f 6f 67 6c 65 25 32 35 32 30 43 68 72 6f 6d 65 25 33 42 31 31 37 Data Ascii: 3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2\x26hn\x3dwww.googleadservices.com\x26frm\x3d0\x26tiba\x3dUmso%20App\x26npa\x3d0\x26pscdl\x3dnoapi\x26auid\x3d836561027.1721058585\x26uaa\x3dx86\x26uab\x3d64\x26uafvl\x3dGoogle%2520Chrome%3B117
2024-07-15 15:50:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.6	57851	172.217.16.130	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:18 UTC	1395	OUT	GET /td/rul/11236809420?random=1721058617250&cv=11&fst=1721058617250&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be4790v9133397838za200&gcd=13l3l3l3l1&dma=0&tag_exp=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fapp.umso.com%2Flogin%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&hn=www.googleadservices.com&frm=0&tiba=Umso%20App&npa=0&pscdl=noapi&auid=836561027.1721058585&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUleh47c-J5qwqTFYpiO4OvnlceM0zWFa6Qx_rk5pk0lMl5rR_z9LUwJfy5y
2024-07-15 15:50:18 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Mon, 15 Jul 2024 15:50:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-15 15:50:18 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-07-15 15:50:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.6	57852	142.250.186.110	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:18 UTC	1176	OUT	POST /g/collect?v=2&tid=G-CXEH5WRXTW&gtm=45be4790v9133397838za200&_p=1721058617191&gcd=13l3l3l3l1&npa=0&dma=0&tag_exp=0&cid=470383722.1721058585&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1721058585&sct=1&seg=1&dl=https%3A%2F%2Fapp.umso.com%2Flogin%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&dt=Umso%20App&en=page_view&_ee=1&tfd=2422&_z=fetch HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://app.umso.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:50:18 UTC	446	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://app.umso.com Date: Mon, 15 Jul 2024 15:50:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.6	57853	142.250.186.110	443	5892	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-15 15:50:18 UTC	1176	OUT	POST /g/collect?v=2&tid=G-VYY8D05ZV0&gtm=45be4790v9133397838za200&_p=1721058617191&gcd=13l3l3l3l1&npa=0&dma=0&tag_exp=0&cid=470383722.1721058585&ul=en-us&sr=1280x1024&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.134%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.134&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&frm=0&pscdl=noapi&_s=1&sid=1721058585&sct=1&seg=1&dl=https%3A%2F%2Fapp.umso.com%2Flogin%3Futm_source%3Dusite%26utm_medium%3Dbtmbadge%26utm_campaign%3Dfree%26utm_term%3Dxai6l1pibnxefgt2&dt=Umso%20App&en=page_view&_ee=1&tfd=2428&_z=fetch HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://app.umso.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIk6HLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-15 15:50:18 UTC	446	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://app.umso.com Date: Mon, 15 Jul 2024 15:50:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Target ID:	0
Start time:	11:49:15
Start date:	15/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	11:49:19
Start date:	15/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=2232,i,14901034185054434323,6092688555550892506,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	11:49:21
Start date:	15/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://xai6l1pibnxefgt2.umso.co/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://xai6l1pibnxefgt2.umso.co/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Windows Analysis Report
https://xai6l1pibnxefgt2.umso.co/