Edit tour

Windows Analysis Report
http://rotect.com

Overview

General Information

Sample URL:	http://rotect.com
Analysis ID:	1485796
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Detected suspicious crossdomain redirect

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1624 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5748 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1712 --field-trial-handle=1940,i,12065040936513396881,3636851821948398797,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7084 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://rotect.com" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Suricata Signatures

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 142.250.185.206 - Destination IP: 192.168.2.9

Timestamp:	2024-08-01T08:39:25.329151+0200
SID:	2012510
Source Port:	443
Destination Port:	49770
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET PHISHING W3LL STORE Phish Kit Landing Page 2023-04-26 - Source IP: 192.168.2.9 - Destination IP: 104.18.94.41

Timestamp:	2024-08-01T08:39:31.231954+0200
SID:	2045203
Source Port:	49785
Destination Port:	443
Protocol:	TCP
Classtype:	Successful Credential Theft Detected

ET PHISHING W3LL STORE Phish Kit Landing Page 2023-04-26 - Source IP: 192.168.2.9 - Destination IP: 104.18.95.41

Timestamp:	2024-08-01T08:39:45.757359+0200
SID:	2045203
Source Port:	49825
Destination Port:	443
Protocol:	TCP
Classtype:	Successful Credential Theft Detected

ET PHISHING W3LL STORE Phish Kit Landing Page 2023-04-26 - Source IP: 192.168.2.9 - Destination IP: 104.16.42.9

Timestamp:	2024-08-01T08:39:30.759145+0200
SID:	2045203
Source Port:	49784
Destination Port:	443
Protocol:	TCP
Classtype:	Successful Credential Theft Detected

ET PHISHING W3LL STORE Phish Kit Landing Page 2023-04-26 - Source IP: 192.168.2.9 - Destination IP: 104.18.95.41

Timestamp:	2024-08-01T08:39:33.927941+0200
SID:	2045203
Source Port:	49793
Destination Port:	443
Protocol:	TCP
Classtype:	Successful Credential Theft Detected

ET PHISHING W3LL STORE Phish Kit Landing Page 2023-04-26 - Source IP: 192.168.2.9 - Destination IP: 104.18.95.41

Timestamp:	2024-08-01T08:39:38.113661+0200
SID:	2045203
Source Port:	49804
Destination Port:	443
Protocol:	TCP
Classtype:	Successful Credential Theft Detected

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 142.250.186.164 - Destination IP: 192.168.2.9

Timestamp:	2024-08-01T08:38:56.350732+0200
SID:	2012510
Source Port:	443
Destination Port:	49716
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 142.250.184.238 - Destination IP: 192.168.2.9

Timestamp:	2024-08-01T08:39:23.592791+0200
SID:	2012510
Source Port:	443
Destination Port:	49765
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 142.250.185.100 - Destination IP: 192.168.2.9

Timestamp:	2024-08-01T08:39:21.462231+0200
SID:	2012510
Source Port:	443
Destination Port:	49756
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET PHISHING W3LL STORE Phish Kit Landing Page 2023-04-26 - Source IP: 192.168.2.9 - Destination IP: 104.18.4.249

Timestamp:	2024-08-01T08:39:45.640102+0200
SID:	2045203
Source Port:	49824
Destination Port:	443
Protocol:	TCP
Classtype:	Successful Credential Theft Detected

ET SHELLCODE UTF-8/16 Encoded Shellcode - Source IP: 142.250.186.164 - Destination IP: 192.168.2.9

Timestamp:	2024-08-01T08:39:20.182273+0200
SID:	2012510
Source Port:	443
Destination Port:	49755
Protocol:	TCP
Classtype:	Potentially Bad Traffic

ET PHISHING W3LL STORE Phish Kit Landing Page 2023-04-26 - Source IP: 192.168.2.9 - Destination IP: 104.18.95.41

Timestamp:	2024-08-01T08:39:48.366443+0200
SID:	2045203
Source Port:	49832
Destination Port:	443
Protocol:	TCP
Classtype:	Successful Credential Theft Detected

ET PHISHING W3LL STORE Phish Kit Landing Page 2023-04-26 - Source IP: 192.168.2.9 - Destination IP: 104.18.95.41

Timestamp:	2024-08-01T08:39:51.901086+0200
SID:	2045203
Source Port:	49850
Destination Port:	443
Protocol:	TCP
Classtype:	Successful Credential Theft Detected

HTTP Parser: Base64 decoded: {"uuid":"cf37f022-d980-4854-884d-1e3949811b21","page_time":1722494334,"page_url":"http://rotect.com/","page_method":"GET","page_request":{},"page_headers":{},"host":"rotect.com","ip":"8.46.123.33"}

Source: http://ww01.rotect.com/?dn=rotect.com&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&pid=9POT3387I	HTTP Parser: No favicon
Source: http://ww01.rotect.com/?dn=rotect.com&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&pid=9POT3387I	HTTP Parser: No favicon
Source: http://rotect.com/legal	HTTP Parser: No favicon
Source: https://syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol306%2Cpid-bodis-gcontrol426%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol202&client=dp-bodis30_3ph&r=m&hl=en&rpbu=http%3A%2F%2Frotect.com%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2898040491288658&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266&format=r3&nocache=9401722494359241&num=0&output=afd_ads&domain_name=rotect.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1722494359242&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=816&frm=0&uio=-&cont=rs&drt=0&jsid=caf&nfp=1&jsv=652824369&rurl=http%3A%2F%2Frotect.com%2F	HTTP Parser: No favicon
Source: https://syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol306%2Cpid-bodis-gcontrol426%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol202&client=dp-bodis30_3ph&r=m&hl=en&rpbu=http%3A%2F%2Frotect.com%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2898040491288658&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266&format=r3&nocache=9401722494359241&num=0&output=afd_ads&domain_name=rotect.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1722494359242&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=816&frm=0&uio=-&cont=rs&drt=0&jsid=caf&nfp=1&jsv=652824369&rurl=http%3A%2F%2Frotect.com%2F	HTTP Parser: No favicon
Source: https://syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol306%2Cpid-bodis-gcontrol426%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol202&client=dp-bodis30_3ph&r=m&hl=en&rpbu=http%3A%2F%2Frotect.com%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2898040491288658&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266&format=r3&nocache=9401722494359241&num=0&output=afd_ads&domain_name=rotect.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1722494359242&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=816&frm=0&uio=-&cont=rs&drt=0&jsid=caf&nfp=1&jsv=652824369&rurl=http%3A%2F%2Frotect.com%2F	HTTP Parser: No favicon
Source: https://syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol306%2Cpid-bodis-gcontrol426%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol202&client=dp-bodis30_3ph&r=m&hl=en&rpbu=http%3A%2F%2Frotect.com%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2898040491288658&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266&format=r3&nocache=9401722494359241&num=0&output=afd_ads&domain_name=rotect.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1722494359242&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=816&frm=0&uio=-&cont=rs&drt=0&jsid=caf&nfp=1&jsv=652824369&rurl=http%3A%2F%2Frotect.com%2F	HTTP Parser: No favicon
Source: http://ww01.rotect.com/Customer_Service_Support.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElKFiaHSxO91...	HTTP Parser: No favicon
Source: https://www.justanswer.com/	HTTP Parser: No favicon
Source: https://www.justanswer.com/	HTTP Parser: No favicon
Source: http://ww01.rotect.com/Allied_Medical_Winslow_Az_Driver.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElKF...	HTTP Parser: No favicon
Source: https://www.everyjobforme.com/AlliedHealth/Apply	HTTP Parser: No favicon
Source: https://www.everyjobforme.com/AlliedHealth/Apply	HTTP Parser: No favicon
Source: http://ww01.rotect.com/Flatbed_Truck_Driving_Jobs.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElKFiaHSxO...	HTTP Parser: No favicon
Source: http://ww01.rotect.com/Job_Vacancies_Jobs.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5...	HTTP Parser: No favicon
Source: http://ww01.rotect.com/Allied_Medical_Driver.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElKFiaHSxO91VDU...	HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 23.206.229.209:443 -> 192.168.2.9:49750 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.9:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.9:49724 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: r.search.yahoo.com to https://www.bing.com/aclick?ld=e8k4ywntxttsj3pjcdjcei0dvucuylnd8iss8blwsel4fpkdmdc3ng-dlrxboa8swiwe1bvtv3srqiutgfg6buf8uxwk9gx-bhcr5equmns7gc1hul4t4rotk4rskybesbbzsiya3k5wm_-merek6ppwytdzl_ckr_tuoa7ekdapcccdnr&u=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&rlid=2895040d7f52114f837462a652cb27d7
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: r.search.yahoo.com to https://www.bing.com/aclick?ld=e8v9gqknsqbyit5xjpxixanzvucuyllzqwo0olrcqz1mxpl8hcj3k6ueca0aoixs6hd6zufeyllysav5ljqb7mvlxu8niontucp_pyauogg1vmtyqwbh_w0cdm-n2qwwyydzifc_3sbeexxkkf9t0gxmod18wjb3z3c422qhjubroa8nd5&u=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&rlid=409fb85eab00133df3acdef586a7d8bb

Source: unknown

HTTPS traffic detected: 23.206.229.209:443 -> 192.168.2.9:49750 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.11
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.209
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKserver: openrestydate: Thu, 01 Aug 2024 06:38:56 GMTcontent-type: text/html; charset=UTF-8content-encoding: gzipcontent-length: 179cache-control: no-cachex-version: 2.120.3expires: Thu, 01 Jan 1970 00:00:01 GMTcache-control: no-store, must-revalidatecache-control: post-check=0, pre-check=0pragma: no-cacheset-cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; expires=Thu, 01 Aug 2024 06:53:57 GMT; Max-Age=900; path=/; httponlyData Raw: 1f 8b 08 00 00 00 00 00 04 03 1d cc bd 0e 82 30 14 40 e1 57 2a a0 26 0e 2e 08 94 36 dc 12 15 0b 65 a3 62 e4 42 41 13 30 05 9e de 9f ed 2c df b9 ce 51 2d c1 8a 48 58 41 ec 9a 06 e1 a2 e5 7d e1 4b 99 47 ab 76 37 98 22 1f b4 bb 1f 34 95 7e 19 0b aa 72 33 d6 05 37 0c 2d de 7a d9 55 df 56 de 09 d3 7e eb 68 6a 47 36 44 4e 59 48 53 b8 a6 63 ed 13 61 35 08 3d 73 61 85 09 5a 20 02 09 49 33 de 27 d9 63 29 69 38 a9 36 dc aa 4c cd 90 75 1e 04 7e f3 ff d2 9f 7d bd eb 7c 1e 93 23 c7 2a 3f 37 fa c2 76 7a 90 a3 8e c9 e1 03 2c 36 fd 18 b5 00 00 00 Data Ascii: 0@W*&.6ebBA0,Q-HXA}KGv7"4~r37-zUV~hjG6DNYHSca5=saZ I3'c)i86Lu~}|#*?7vz,6

Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&bodis=true HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://rotect.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /delivery/js/cmp_en.min.js HTTP/1.1Host: cdn.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ww01.rotect.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.rotect.com%2F%3Fdn%3Drotect.com%26pbsubid%3Dcf37f022-d980-4854-884d-1e3949811b21%26pid%3D9POT3387I&&l=en&o=1722494338115 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ww01.rotect.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?__cmpcc=1&id=68884&o=1722494340&h=http%3A%2F%2Fww01.rotect.com%2F%3Fdn%3Drotect.com%26pbsubid%3Dcf37f022-d980-4854-884d-1e3949811b21%26pid%3D9POT3387I&&l=en&odw=0&dlt=1&l=en HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ww01.rotect.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cmpcc=1
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.rotect.com%2F%3Fdn%3Drotect.com%26pbsubid%3Dcf37f022-d980-4854-884d-1e3949811b21%26pid%3D9POT3387I&&l=en&o=1722494338115 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cmpcc=1
Source: global traffic	HTTP traffic detected: GET /delivery/js/cmp_en.min.js HTTP/1.1Host: cdn.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?__cmpcc=1&id=68884&o=1722494340&h=http%3A%2F%2Fww01.rotect.com%2F%3Fdn%3Drotect.com%26pbsubid%3Dcf37f022-d980-4854-884d-1e3949811b21%26pid%3D9POT3387I&&l=en&odw=0&dlt=1&l=en HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cmpcc=2
Source: global traffic	HTTP traffic detected: GET /delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfMjY.js HTTP/1.1Host: cdn.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ww01.rotect.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfMjY.js HTTP/1.1Host: cdn.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2F&o=1722494342090&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ww01.rotect.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cmpcc=3
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2F&o=1722494342090&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cmpcc=3
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&bodis=true HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://rotect.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=152789-152789If-Range: "17062080276732993613"
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&bodis=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol306%2Cpid-bodis-gcontrol426%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol202&client=dp-bodis30_3ph&r=m&hl=en&rpbu=http%3A%2F%2Frotect.com%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2898040491288658&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266&format=r3&nocache=9401722494359241&num=0&output=afd_ads&domain_name=rotect.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1722494359242&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=816&frm=0&uio=-&cont=rs&drt=0&jsid=caf&nfp=1&jsv=652824369&rurl=http%3A%2F%2Frotect.com%2F HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: http://rotect.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.rotect.com%2FCustomer_Service_Support.cfm%3Fdomain%3Drotect.com%26fp%3DuQaVNjuDUF4rK4tShEs0Au0%252BUG%252FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%252BbAq91T%252BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%252F%252B4CZ7GqHID18Hn0lG8m%252FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%252FB3mB4%252F7Pf0pa30%252Bn8GQFMwchNirEiFiBbHa%252F3WXS0X4hX9tXVHEVtDO9dSxRwP87%252Fi1FveXGLDtOv0%26yep%3DuR4%252BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%252BrvZrksXCh%252FTWID06mSMUUo50%252FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%252BpDRS3gYFzynxfbhq%252FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%252BErlx0c703%252BKheAp4bPrhPs9N%252BjTikAkPjy%252BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%252BAf1DOeDKAz7sN99h%252Fl6%252BhdNNq%252FajOyXWCcl%252F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%252FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%252F73J2w083cKWeSNilzYTAa4CR%252BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%252Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc6TEPjii6jYyypXxZ4eYyija1oDOtc2I3nx4b%252BUMzFr2c%252FSLfe32iW2HH9q1ePVrxViaalLTTLGyJVWvW5wwyXnk0jGXhUCnigLLVRCzgQ%252Bqa%252BQ7kdoV3Prt2jVq2JIvbEY2Sy%252BlXVGBWokdZSGlvUcAtSWlTxaaJ6vtQd06Kdk1nLhN0fK4ZddBdusz%252Ba%252B4b5VUu3xTRNTeb%252BQEyZFOwuNbMfSEhVodK1RZgbaaONJTbSSfzHB3hSN4H%252Fhjew%252FV%252F2qn2geIorBIGVe8ihORHIvWa9m47FAM1VYbgstMUVFew55MOVOnVfz9%252F3wP9op%252FJdBOQEJ43Iyyhk5bv5IkaaQkmahSo57X7l%252FMZUPXy1JQU6%252F6SK5OBqOjsOztIJI%252FVVafAbGHp7mQ%252BNM7WdgsxJzmRjqbRFV5xZEYb3qkUfRTjeTewHOngd8mFDFv%252B3QCJ101a%252FS7zKV%252FRzq1pebGcywM1t%252FoqCdH3Gh%252F7IfGvgMIrQTiTjdCZWOR%252F5shU74SCxaDbOTGlbbsWMwtODtId1%252BiCgY5XQAHcyDjHD%252Bg3T3ktNbRX7bF7f8ai5iLcllrUsqhNrewG9cmGZj3%252FFhPkTyVr%252FnKpXUeeXa%252FQiF5KpiAf4b0AWLY%252FFHcUqTyjyIrMexuiedMZnTUqo8YnBatBorqKlaZOWnm0%252FsrVNoisJ60CPABKIQ0%252FI0jk%252Fy6J89xswtQCWz6VUSSeWiSckpuUX0EG21Wfgb2zeLmE81Dnrku%252BrT9gXXwQJTRTPsi28z8YXodHl8rDAdx2paTV8uwr5H22Hdk9KnbaHx%252BhkE%252F2EaLaBA2apEQAZxGxEGgg2LoG%252FSX3tLFqFSSiK46HhhFAW7yhI1OWTcMYhRKRZivIAeLnvPC2rCaPur0MWGhd%252BsXcmvqy2%252Bs93uTqsNSyNxZtdcEc%252FJ%252Bz%252B5WOIg%252BoZPG4yDSb9hyEIRcsRsA8ybsXyIJCmarUMDiRUVCgQrTC4oWzFPGuaupZTR34nxdv%252B00eZl%252BMLAyNYPM1gGyB6aC4IYjxv5xIlfmnGLG3l6lxGXE5viAqfh2bQ7lsnjzaZbgn%252B0ko9b4bWbIQ9XKNyOS4oC5tGmapfR3vtg%253D%253D%26gtnp%3D0%26gtpp%3D0%26tp1%3Dcf37f022-d980-4854-884d-1e3949811b21%26kbetu%3D1%26maxads%3D0%26kld%3D1003%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DuizcpS2vK%252BPE8C3jtYNgThNeVom%252Bc90lAaNmJ8t%252FDFo%253D%26pbsubid%3Dcf37f022-d980-4854-884d-1e3949811b21%26gtnp%3D0%26gtpp%3D0%26kt%3D210%26%26kbc%3D707%26ki%3D7505256%26ktd%3D0%26kld%3D1003%26kp%3D1%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1722494361110 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-c
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.rotect.com%2FCustomer_Service_Support.cfm%3Fdomain%3Drotect.com%26fp%3DuQaVNjuDUF4rK4tShEs0Au0%252BUG%252FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%252BbAq91T%252BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%252F%252B4CZ7GqHID18Hn0lG8m%252FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%252FB3mB4%252F7Pf0pa30%252Bn8GQFMwchNirEiFiBbHa%252F3WXS0X4hX9tXVHEVtDO9dSxRwP87%252Fi1FveXGLDtOv0%26yep%3DuR4%252BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%252BrvZrksXCh%252FTWID06mSMUUo50%252FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%252BpDRS3gYFzynxfbhq%252FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%252BErlx0c703%252BKheAp4bPrhPs9N%252BjTikAkPjy%252BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%252BAf1DOeDKAz7sN99h%252Fl6%252BhdNNq%252FajOyXWCcl%252F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%252FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%252F73J2w083cKWeSNilzYTAa4CR%252BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%252Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc6TEPjii6jYyypXxZ4eYyija1oDOtc2I3nx4b%252BUMzFr2c%252FSLfe32iW2HH9q1ePVrxViaalLTTLGyJVWvW5wwyXnk0jGXhUCnigLLVRCzgQ%252Bqa%252BQ7kdoV3Prt2jVq2JIvbEY2Sy%252BlXVGBWokdZSGlvUcAtSWlTxaaJ6vtQd06Kdk1nLhN0fK4ZddBdusz%252Ba%252B4b5VUu3xTRNTeb%252BQEyZFOwuNbMfSEhVodK1RZgbaaONJTbSSfzHB3hSN4H%252Fhjew%252FV%252F2qn2geIorBIGVe8ihORHIvWa9m47FAM1VYbgstMUVFew55MOVOnVfz9%252F3wP9op%252FJdBOQEJ43Iyyhk5bv5IkaaQkmahSo57X7l%252FMZUPXy1JQU6%252F6SK5OBqOjsOztIJI%252FVVafAbGHp7mQ%252BNM7WdgsxJzmRjqbRFV5xZEYb3qkUfRTjeTewHOngd8mFDFv%252B3QCJ101a%252FS7zKV%252FRzq1pebGcywM1t%252FoqCdH3Gh%252F7IfGvgMIrQTiTjdCZWOR%252F5shU74SCxaDbOTGlbbsWMwtODtId1%252BiCgY5XQAHcyDjHD%252Bg3T3ktNbRX7bF7f8ai5iLcllrUsqhNrewG9cmGZj3%252FFhPkTyVr%252FnKpXUeeXa%252FQiF5KpiAf4b0AWLY%252FFHcUqTyjyIrMexuiedMZnTUqo8YnBatBorqKlaZOWnm0%252FsrVNoisJ60CPABKIQ0%252FI0jk%252Fy6J89xswtQCWz6VUSSeWiSckpuUX0EG21Wfgb2zeLmE81Dnrku%252BrT9gXXwQJTRTPsi28z8YXodHl8rDAdx2paTV8uwr5H22Hdk9KnbaHx%252BhkE%252F2EaLaBA2apEQAZxGxEGgg2LoG%252FSX3tLFqFSSiK46HhhFAW7yhI1OWTcMYhRKRZivIAeLnvPC2rCaPur0MWGhd%252BsXcmvqy2%252Bs93uTqsNSyNxZtdcEc%252FJ%252Bz%252B5WOIg%252BoZPG4yDSb9hyEIRcsRsA8ybsXyIJCmarUMDiRUVCgQrTC4oWzFPGuaupZTR34nxdv%252B00eZl%252BMLAyNYPM1gGyB6aC4IYjxv5xIlfmnGLG3l6lxGXE5viAqfh2bQ7lsnjzaZbgn%252B0ko9b4bWbIQ9XKNyOS4oC5tGmapfR3vtg%253D%253D%26gtnp%3D0%26gtpp%3D0%26tp1%3Dcf37f022-d980-4854-884d-1e3949811b21%26kbetu%3D1%26maxads%3D0%26kld%3D1003%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DuizcpS2vK%252BPE8C3jtYNgThNeVom%252Bc90lAaNmJ8t%252FDFo%253D%26pbsubid%3Dcf37f022-d980-4854-884d-1e3949811b21%26gtnp%3D0%26gtpp%3D0%26kt%3D210%26%26kbc%3D707%26ki%3D7505256%26ktd%3D0%26kld%3D1003%26kp%3D1%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1722494361110 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUser-
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2FCustomer_Service_Support.cfm&o=1722494362047&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ww01.rotect.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cmpcc=4
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2FCustomer_Service_Support.cfm&o=1722494362047&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cmpcc=5
Source: global traffic	HTTP traffic detected: GET /rdclk/dWU9OTg3NzI4NDNFMjZBNEIyQiZ1dD0xNzIyNDk0MzYxNDUwJnVvPTc4MjAyOTY4MDQ4NzgxJmx0PTImcz0yJmVzPVNfNXU0WDFqMmFYbkdOd1kuUkpWNWxFek9iSlNBMHAwb1ZLYlRYWGoyRERiMi4udTdEWEpYMHRldEhIc2xiLkdtajg5aWlqYkJ0VGpFbWt4/RV=2/RE=1725086361/RO=14/RU=https%3a%2f%2fwww.bing.com%2faclick%3fld%3de8k4YwntxTTSJ3pjCdJcEi0DVUCUylND8Iss8blWsEl4FPkDmdC3ng-dLrXBoA8SwiWe1BVTv3SRqIUTGfg6bUf8uxWk9GX-bhCR5eQuMNS7Gc1Hul4T4RotK4rsKYbESbbZSiya3k5Wm_-mEREK6PpWyTDZl_cKR_tuOa7ekdaPcCCDNR%26u%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%26rlid%3d2895040d7f52114f837462a652cb27d7/RK=2/RS=nCXp0x1b1QvOi5rZoASWln9SiPg- HTTP/1.1Host: r.search.yahoo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=vnlpe9pke91z&aqid=mS2rZumFD-3hjuwP-r_m-AI&psid=3113057640&pbt=bs&adbx=290&adby=143&adbh=480&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=652824369&csala=4%7C0%7C1089%7C2340%7C119&lle=0&ifv=1&hpt=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://rotect.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=m940ytxo0x3e&aqid=mS2rZumFD-3hjuwP-r_m-AI&psid=3113057640&pbt=bv&adbx=290&adby=143&adbh=480&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=652824369&csala=4%7C0%7C1089%7C2340%7C119&lle=0&ifv=1&hpt=0 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://rotect.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/8c81cb09042c/api.js?onload=UYbeL2&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.justanswer.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/8c81cb09042c/api.js?onload=UYbeL2&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t3qx4/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ac3d4dbc9d715cb&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t3qx4/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t3qx4/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ac3d4dbc9d715cb&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/973676545:1722493710:qLUOnaAFq2dYDUwc3cK0WRe-w7nNJ5AkZcToKJaEcuM/8ac3d4dbc9d715cb/3dabc1f5c15ee26 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8ac3d4dbc9d715cb/1722494372855/pbsCeFj9PGT6Yu- HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t3qx4/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8ac3d4dbc9d715cb/1722494372856/3843ca0d68bc68afcb8f9e3fc4e20a9813e3306fe5d9e6f170ab7f6427b561a3/sU3A5Zaxduayo9D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t3qx4/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8ac3d4dbc9d715cb/1722494372855/pbsCeFj9PGT6Yu- HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.rotect.com%2FAllied_Medical_Winslow_Az_Driver.cfm%3Fdomain%3Drotect.com%26fp%3DuQaVNjuDUF4rK4tShEs0Au0%252BUG%252FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%252BbAq91T%252BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%252F%252B4CZ7GqHID18Hn0lG8m%252FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%252FB3mB4%252F7Pf0pa30%252Bn8GQFMwchNirEiFiBbHa%252F3WXS0X4hX9tXVHEVtDO9dSxRwP87%252Fi1FveXGLDtOv0%26yep%3DuR4%252BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%252BrvZrksXCh%252FTWID06mSMUUo50%252FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%252BpDRS3gYFzynxfbhq%252FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%252BErlx0c703%252BKheAp4bPrhPs9N%252BjTikAkPjy%252BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%252BAf1DOeDKAz7sN99h%252Fl6%252BhdNNq%252FajOyXWCcl%252F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%252FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%252F73J2w083cKWeSNilzYTAa4CR%252BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%252Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc6TEPjii6jYyypXxZ4eYyija1oDOtc2I3nx4b%252BUMzFr2c%252FSLfe32iW2HH9q1ePVrxViaalLTTLGyJVWvW5wwyXnk0jGXhUCnigLLVRCzgQ%252Bqa%252BQ7kdoV3Prt2jVq2JIvbEY2Sy%252BlXVGBWokdZSGlvUcAtSWlTxaaJ6vtQd06Kdk1nLhN0fK4ZddBdusz%252Ba%252B4b5VUu3xTRNTeb%252BQEyZFOwuNbMfSEhVodK1RZgbaaONJTbSSfzHB3hSN4H%252Fhjew%252FV%252F2qn2geIorBIGVe8ihORHIvWa9m47FAM1VYbgstMUVFew55MOVOnVfz9%252F3wP9op%252FJdBOQEJ43Iyyhk5bv5IkaaQkmahSo57X7l%252FMZUPXy1JQU6%252F6SK5OBqOjsOztIJI%252FVVafAbGHp7mQ%252BNM7WdgsxJzmRjqbRFV5xZEYb3qkUfRTjeTewHOngd8mFDFv%252B3QCJ101a%252FS7zKV%252FRzq1pebGcywM1t%252FoqCdH3Gh%252F7IfGvgMIrQTiTjdCZWOR%252F5shU74SCxaDbOTGlbbsWMwtODtId1%252BiCgY5XQAHcyDjHD%252Bg3T3ktNbRX7bF7f8ai5iLcllrUsqhNrewG9cmGZj3%252FFhPkTyVr%252FnKpXUeeXa%252FQiF5KpiAf4b0AWLY%252FFHcUqTyjyIrMexuiedMZnTUqo8YnBatBorqKlaZOWnm0%252FsrVNoisJ60CPABKIQ0%252FI0jk%252Fy6J89xswtQCWz6VUSSeWiSckpuUX0EG21Wfgb2zeLmE81Dnrku%252BrT9gXXwQJTRTPsi28z8YXodHl8rDAdx2paTV8uwr5H22Hdk9KnbaHx%252BhkE%252F2EaLaBA2apEQAZxGxEGgg2LoG%252FSX3tLFqFSSiK46HhhFAW7yhI1OWTcMYhRKRZivIAeLnvPC2rCaPur0MWGhd%252BsXcmvqy2%252Bs93uTqsNSyNxZtdcEc%252FJ%252Bz%252B5WOIg%252BoZPG4yDSb9hyEIRcsRsA8ybsXyIJCmarUMDiRUVCgQrTC4oWzFPGuaupZTR34nxdv%252B00eZl%252BMLAyNYPM1gGyB6aC4IYjxv5xIlfmnGLG3l6lxGXE5viAqfh2bQ7lsnjzaZbgn%252B0ko9b4bWbIQ9XKNyOS4oC5tGmapfR3vtg%253D%253D%26gtnp%3D0%26gtpp%3D0%26tp1%3Dcf37f022-d980-4854-884d-1e3949811b21%26kbetu%3D1%26maxads%3D0%26kld%3D1003%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DuizcpS2vK%252BPE8C3jtYNgThNeVom%252Bc90lAaNmJ8t%252FDFo%253D%26pbsubid%3Dcf37f022-d980-4854-884d-1e3949811b21%26gtnp%3D0%26gtpp%3D0%26kt%3D210%26%26kbc%3D707%26ki%3D326693501%26ktd%3D0%26kld%3D1003%26kp%3D2%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1722494375237 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-al
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/973676545:1722493710:qLUOnaAFq2dYDUwc3cK0WRe-w7nNJ5AkZcToKJaEcuM/8ac3d4dbc9d715cb/3dabc1f5c15ee26 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.rotect.com%2FAllied_Medical_Winslow_Az_Driver.cfm%3Fdomain%3Drotect.com%26fp%3DuQaVNjuDUF4rK4tShEs0Au0%252BUG%252FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%252BbAq91T%252BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%252F%252B4CZ7GqHID18Hn0lG8m%252FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%252FB3mB4%252F7Pf0pa30%252Bn8GQFMwchNirEiFiBbHa%252F3WXS0X4hX9tXVHEVtDO9dSxRwP87%252Fi1FveXGLDtOv0%26yep%3DuR4%252BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%252BrvZrksXCh%252FTWID06mSMUUo50%252FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%252BpDRS3gYFzynxfbhq%252FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%252BErlx0c703%252BKheAp4bPrhPs9N%252BjTikAkPjy%252BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%252BAf1DOeDKAz7sN99h%252Fl6%252BhdNNq%252FajOyXWCcl%252F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%252FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%252F73J2w083cKWeSNilzYTAa4CR%252BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%252Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc6TEPjii6jYyypXxZ4eYyija1oDOtc2I3nx4b%252BUMzFr2c%252FSLfe32iW2HH9q1ePVrxViaalLTTLGyJVWvW5wwyXnk0jGXhUCnigLLVRCzgQ%252Bqa%252BQ7kdoV3Prt2jVq2JIvbEY2Sy%252BlXVGBWokdZSGlvUcAtSWlTxaaJ6vtQd06Kdk1nLhN0fK4ZddBdusz%252Ba%252B4b5VUu3xTRNTeb%252BQEyZFOwuNbMfSEhVodK1RZgbaaONJTbSSfzHB3hSN4H%252Fhjew%252FV%252F2qn2geIorBIGVe8ihORHIvWa9m47FAM1VYbgstMUVFew55MOVOnVfz9%252F3wP9op%252FJdBOQEJ43Iyyhk5bv5IkaaQkmahSo57X7l%252FMZUPXy1JQU6%252F6SK5OBqOjsOztIJI%252FVVafAbGHp7mQ%252BNM7WdgsxJzmRjqbRFV5xZEYb3qkUfRTjeTewHOngd8mFDFv%252B3QCJ101a%252FS7zKV%252FRzq1pebGcywM1t%252FoqCdH3Gh%252F7IfGvgMIrQTiTjdCZWOR%252F5shU74SCxaDbOTGlbbsWMwtODtId1%252BiCgY5XQAHcyDjHD%252Bg3T3ktNbRX7bF7f8ai5iLcllrUsqhNrewG9cmGZj3%252FFhPkTyVr%252FnKpXUeeXa%252FQiF5KpiAf4b0AWLY%252FFHcUqTyjyIrMexuiedMZnTUqo8YnBatBorqKlaZOWnm0%252FsrVNoisJ60CPABKIQ0%252FI0jk%252Fy6J89xswtQCWz6VUSSeWiSckpuUX0EG21Wfgb2zeLmE81Dnrku%252BrT9gXXwQJTRTPsi28z8YXodHl8rDAdx2paTV8uwr5H22Hdk9KnbaHx%252BhkE%252F2EaLaBA2apEQAZxGxEGgg2LoG%252FSX3tLFqFSSiK46HhhFAW7yhI1OWTcMYhRKRZivIAeLnvPC2rCaPur0MWGhd%252BsXcmvqy2%252Bs93uTqsNSyNxZtdcEc%252FJ%252Bz%252B5WOIg%252BoZPG4yDSb9hyEIRcsRsA8ybsXyIJCmarUMDiRUVCgQrTC4oWzFPGuaupZTR34nxdv%252B00eZl%252BMLAyNYPM1gGyB6aC4IYjxv5xIlfmnGLG3l6lxGXE5viAqfh2bQ7lsnjzaZbgn%252B0ko9b4bWbIQ9XKNyOS4oC5tGmapfR3vtg%253D%253D%26gtnp%3D0%26gtpp%3D0%26tp1%3Dcf37f022-d980-4854-884d-1e3949811b21%26kbetu%3D1%26maxads%3D0%26kld%3D1003%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DuizcpS2vK%252BPE8C3jtYNgThNeVom%252Bc90lAaNmJ8t%252FDFo%253D%26pbsubid%3Dcf37f022-d980-4854-884d-1e3949811b21%26gtnp%3D0%26gtpp%3D0%26kt%3D210%26%26kbc%3D707%26ki%3D326693501%26ktd%3D0%26kld%3D1003%26kp%3D2%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1722494375237 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-al
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2FAllied_Medical_Winslow_Az_Driver.cfm&o=1722494376954&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ww01.rotect.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cmpcc=6
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2FAllied_Medical_Winslow_Az_Driver.cfm&o=1722494376954&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cmpcc=7
Source: global traffic	HTTP traffic detected: GET /rdclk/dWU9QjNERUZDNjRCM0EwNDY0RiZ1dD0xNzIyNDk0Mzc1MzcxJnVvPTc5NDM5ODI0NzAxMjczJmx0PTImcz0yJmVzPTJrOE80c041LjJyeUFzUlhaVmhQRDRWdEpMTHZMZkpkaWFjMzJLdW5CeW5acWNHTlVFNzU0TFNrNVpCbF91X0ladk8zRW96MFBvWEVRZy0t/RV=2/RE=1725086375/RO=14/RU=https%3a%2f%2fwww.bing.com%2faclick%3fld%3de8v9GQKnSqbyIt5XJpxiXAnzVUCUyllzQWO0olRcqZ1Mxpl8hcj3k6uecA0aoixs6Hd6ZuFeylLYSaV5ljQB7mvLXU8niOntuCp_PYaUOGG1vmtyqwbH_w0cDm-N2qwwYYDZIFc_3sBEEXxkKf9T0GXMOd18WJb3Z3C422QHJUbROA8ND5%26u%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%26rlid%3d409fb85eab00133df3acdef586a7d8bb/RK=2/RS=aAi_RaFNNNPmV5xsOY2SpL3Aqhk- HTTP/1.1Host: r.search.yahoo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A1=d=AQABBJ0tq2YCEL_MDyb3Sp_JN1S6u6aAd5sFEgEBAQF_rGa1ZtxA0iMA_eMAAA&S=AQAAAu8j9sJ30ypCw7Wm81bvQ6w; A3=d=AQABBJ0tq2YCEL_MDyb3Sp_JN1S6u6aAd5sFEgEBAQF_rGa1ZtxA0iMA_eMAAA&S=AQAAAu8j9sJ30ypCw7Wm81bvQ6w; A1S=d=AQABBJ0tq2YCEL_MDyb3Sp_JN1S6u6aAd5sFEgEBAQF_rGa1ZtxA0iMA_eMAAA&S=AQAAAu8j9sJ30ypCw7Wm81bvQ6w
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.everyjobforme.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/8c81cb09042c/api.js?onload=UYbeL2&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.everyjobforme.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/url8w/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ac3d536ab658cbd&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/url8w/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/url8w/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ac3d536ab658cbd&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1762104049:1722493544:Np3zdzwOpzq4TvaI5wwBswkuEGVUcxd8CUQmfa_Mytk/8ac3d536ab658cbd/af09b333a59d613 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8ac3d536ab658cbd/1722494387392/0b21e6da347028c78568b35d454810d31763306ba96f9ef3f1c4361bef81b042/lcsy_foqe_oORdt HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/url8w/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8ac3d536ab658cbd/1722494387396/SKwrBXNtsNLA2jL HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/url8w/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8ac3d536ab658cbd/1722494387396/SKwrBXNtsNLA2jL HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.rotect.com%2FFlatbed_Truck_Driving_Jobs.cfm%3Fdomain%3Drotect.com%26fp%3DuQaVNjuDUF4rK4tShEs0Au0%252BUG%252FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%252BbAq91T%252BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%252F%252B4CZ7GqHID18Hn0lG8m%252FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%252FB3mB4%252F7Pf0pa30%252Bn8GQFMwchNirEiFiBbHa%252F3WXS0X4hX9tXVHEVtDO9dSxRwP87%252Fi1FveXGLDtOv0%26yep%3DuR4%252BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%252BrvZrksXCh%252FTWID06mSMUUo50%252FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%252BpDRS3gYFzynxfbhq%252FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%252BErlx0c703%252BKheAp4bPrhPs9N%252BjTikAkPjy%252BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%252BAf1DOeDKAz7sN99h%252Fl6%252BhdNNq%252FajOyXWCcl%252F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%252FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%252F73J2w083cKWeSNilzYTAa4CR%252BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%252Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc6TEPjii6jYyypXxZ4eYyija1oDOtc2I3nx4b%252BUMzFr2c%252FSLfe32iW2HH9q1ePVrxViaalLTTLGyJVWvW5wwyXnk0jGXhUCnigLLVRCzgQ%252Bqa%252BQ7kdoV3Prt2jVq2JIvbEY2Sy%252BlXVGBWokdZSGlvUcAtSWlTxaaJ6vtQd06Kdk1nLhN0fK4ZddBdusz%252Ba%252B4b5VUu3xTRNTeb%252BQEyZFOwuNbMfSEhVodK1RZgbaaONJTbSSfzHB3hSN4H%252Fhjew%252FV%252F2qn2geIorBIGVe8ihORHIvWa9m47FAM1VYbgstMUVFew55MOVOnVfz9%252F3wP9op%252FJdBOQEJ43Iyyhk5bv5IkaaQkmahSo57X7l%252FMZUPXy1JQU6%252F6SK5OBqOjsOztIJI%252FVVafAbGHp7mQ%252BNM7WdgsxJzmRjqbRFV5xZEYb3qkUfRTjeTewHOngd8mFDFv%252B3QCJ101a%252FS7zKV%252FRzq1pebGcywM1t%252FoqCdH3Gh%252F7IfGvgMIrQTiTjdCZWOR%252F5shU74SCxaDbOTGlbbsWMwtODtId1%252BiCgY5XQAHcyDjHD%252Bg3T3ktNbRX7bF7f8ai5iLcllrUsqhNrewG9cmGZj3%252FFhPkTyVr%252FnKpXUeeXa%252FQiF5KpiAf4b0AWLY%252FFHcUqTyjyIrMexuiedMZnTUqo8YnBatBorqKlaZOWnm0%252FsrVNoisJ60CPABKIQ0%252FI0jk%252Fy6J89xswtQCWz6VUSSeWiSckpuUX0EG21Wfgb2zeLmE81Dnrku%252BrT9gXXwQJTRTPsi28z8YXodHl8rDAdx2paTV8uwr5H22Hdk9KnbaHx%252BhkE%252F2EaLaBA2apEQAZxGxEGgg2LoG%252FSX3tLFqFSSiK46HhhFAW7yhI1OWTcMYhRKRZivIAeLnvPC2rCaPur0MWGhd%252BsXcmvqy2%252Bs93uTqsNSyNxZtdcEc%252FJ%252Bz%252B5WOIg%252BoZPG4yDSb9hyEIRcsRsA8ybsXyIJCmarUMDiRUVCgQrTC4oWzFPGuaupZTR34nxdv%252B00eZl%252BMLAyNYPM1gGyB6aC4IYjxv5xIlfmnGLG3l6lxGXE5viAqfh2bQ7lsnjzaZbgn%252B0ko9b4bWbIQ9XKNyOS4oC5tGmapfR3vtg%253D%253D%26gtnp%3D0%26gtpp%3D0%26tp1%3Dcf37f022-d980-4854-884d-1e3949811b21%26kbetu%3D1%26maxads%3D0%26kld%3D1003%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DuizcpS2vK%252BPE8C3jtYNgThNeVom%252Bc90lAaNmJ8t%252FDFo%253D%26pbsubid%3Dcf37f022-d980-4854-884d-1e3949811b21%26gtnp%3D0%26gtpp%3D0%26kt%3D210%26%26kbc%3D707%26ki%3D11028627%26ktd%3D0%26kld%3D1003%26kp%3D3%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1722494389080 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivese
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1762104049:1722493544:Np3zdzwOpzq4TvaI5wwBswkuEGVUcxd8CUQmfa_Mytk/8ac3d536ab658cbd/af09b333a59d613 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.rotect.com%2FFlatbed_Truck_Driving_Jobs.cfm%3Fdomain%3Drotect.com%26fp%3DuQaVNjuDUF4rK4tShEs0Au0%252BUG%252FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%252BbAq91T%252BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%252F%252B4CZ7GqHID18Hn0lG8m%252FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%252FB3mB4%252F7Pf0pa30%252Bn8GQFMwchNirEiFiBbHa%252F3WXS0X4hX9tXVHEVtDO9dSxRwP87%252Fi1FveXGLDtOv0%26yep%3DuR4%252BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%252BrvZrksXCh%252FTWID06mSMUUo50%252FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%252BpDRS3gYFzynxfbhq%252FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%252BErlx0c703%252BKheAp4bPrhPs9N%252BjTikAkPjy%252BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%252BAf1DOeDKAz7sN99h%252Fl6%252BhdNNq%252FajOyXWCcl%252F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%252FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%252F73J2w083cKWeSNilzYTAa4CR%252BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%252Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc6TEPjii6jYyypXxZ4eYyija1oDOtc2I3nx4b%252BUMzFr2c%252FSLfe32iW2HH9q1ePVrxViaalLTTLGyJVWvW5wwyXnk0jGXhUCnigLLVRCzgQ%252Bqa%252BQ7kdoV3Prt2jVq2JIvbEY2Sy%252BlXVGBWokdZSGlvUcAtSWlTxaaJ6vtQd06Kdk1nLhN0fK4ZddBdusz%252Ba%252B4b5VUu3xTRNTeb%252BQEyZFOwuNbMfSEhVodK1RZgbaaONJTbSSfzHB3hSN4H%252Fhjew%252FV%252F2qn2geIorBIGVe8ihORHIvWa9m47FAM1VYbgstMUVFew55MOVOnVfz9%252F3wP9op%252FJdBOQEJ43Iyyhk5bv5IkaaQkmahSo57X7l%252FMZUPXy1JQU6%252F6SK5OBqOjsOztIJI%252FVVafAbGHp7mQ%252BNM7WdgsxJzmRjqbRFV5xZEYb3qkUfRTjeTewHOngd8mFDFv%252B3QCJ101a%252FS7zKV%252FRzq1pebGcywM1t%252FoqCdH3Gh%252F7IfGvgMIrQTiTjdCZWOR%252F5shU74SCxaDbOTGlbbsWMwtODtId1%252BiCgY5XQAHcyDjHD%252Bg3T3ktNbRX7bF7f8ai5iLcllrUsqhNrewG9cmGZj3%252FFhPkTyVr%252FnKpXUeeXa%252FQiF5KpiAf4b0AWLY%252FFHcUqTyjyIrMexuiedMZnTUqo8YnBatBorqKlaZOWnm0%252FsrVNoisJ60CPABKIQ0%252FI0jk%252Fy6J89xswtQCWz6VUSSeWiSckpuUX0EG21Wfgb2zeLmE81Dnrku%252BrT9gXXwQJTRTPsi28z8YXodHl8rDAdx2paTV8uwr5H22Hdk9KnbaHx%252BhkE%252F2EaLaBA2apEQAZxGxEGgg2LoG%252FSX3tLFqFSSiK46HhhFAW7yhI1OWTcMYhRKRZivIAeLnvPC2rCaPur0MWGhd%252BsXcmvqy2%252Bs93uTqsNSyNxZtdcEc%252FJ%252Bz%252B5WOIg%252BoZPG4yDSb9hyEIRcsRsA8ybsXyIJCmarUMDiRUVCgQrTC4oWzFPGuaupZTR34nxdv%252B00eZl%252BMLAyNYPM1gGyB6aC4IYjxv5xIlfmnGLG3l6lxGXE5viAqfh2bQ7lsnjzaZbgn%252B0ko9b4bWbIQ9XKNyOS4oC5tGmapfR3vtg%253D%253D%26gtnp%3D0%26gtpp%3D0%26tp1%3Dcf37f022-d980-4854-884d-1e3949811b21%26kbetu%3D1%26maxads%3D0%26kld%3D1003%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DuizcpS2vK%252BPE8C3jtYNgThNeVom%252Bc90lAaNmJ8t%252FDFo%253D%26pbsubid%3Dcf37f022-d980-4854-884d-1e3949811b21%26gtnp%3D0%26gtpp%3D0%26kt%3D210%26%26kbc%3D707%26ki%3D11028627%26ktd%3D0%26kld%3D1003%26kp%3D3%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1722494389080 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUs
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2FFlatbed_Truck_Driving_Jobs.cfm&o=1722494390085&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ww01.rotect.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cmpcc=8
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2FFlatbed_Truck_Driving_Jobs.cfm&o=1722494390085&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cmpcc=9
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.rotect.com%2FJob_Vacancies_Jobs.cfm%3Fdomain%3Drotect.com%26fp%3DuQaVNjuDUF4rK4tShEs0Au0%252BUG%252FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%252BbAq91T%252BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%252F%252B4CZ7GqHID18Hn0lG8m%252FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%252FB3mB4%252F7Pf0pa30%252Bn8GQFMwchNirEiFiBbHa%252F3WXS0X4hX9tXVHEVtDO9dSxRwP87%252Fi1FveXGLDtOv0%26yep%3DuR4%252BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%252BrvZrksXCh%252FTWID06mSMUUo50%252FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%252BpDRS3gYFzynxfbhq%252FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%252BErlx0c703%252BKheAp4bPrhPs9N%252BjTikAkPjy%252BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%252BAf1DOeDKAz7sN99h%252Fl6%252BhdNNq%252FajOyXWCcl%252F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%252FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%252F73J2w083cKWeSNilzYTAa4CR%252BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%252Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc6TEPjii6jYyypXxZ4eYyija1oDOtc2I3nx4b%252BUMzFr2c%252FSLfe32iW2HH9q1ePVrxViaalLTTLGyJVWvW5wwyXnk0jGXhUCnigLLVRCzgQ%252Bqa%252BQ7kdoV3Prt2jVq2JIvbEY2Sy%252BlXVGBWokdZSGlvUcAtSWlTxaaJ6vtQd06Kdk1nLhN0fK4ZddBdusz%252Ba%252B4b5VUu3xTRNTeb%252BQEyZFOwuNbMfSEhVodK1RZgbaaONJTbSSfzHB3hSN4H%252Fhjew%252FV%252F2qn2geIorBIGVe8ihORHIvWa9m47FAM1VYbgstMUVFew55MOVOnVfz9%252F3wP9op%252FJdBOQEJ43Iyyhk5bv5IkaaQkmahSo57X7l%252FMZUPXy1JQU6%252F6SK5OBqOjsOztIJI%252FVVafAbGHp7mQ%252BNM7WdgsxJzmRjqbRFV5xZEYb3qkUfRTjeTewHOngd8mFDFv%252B3QCJ101a%252FS7zKV%252FRzq1pebGcywM1t%252FoqCdH3Gh%252F7IfGvgMIrQTiTjdCZWOR%252F5shU74SCxaDbOTGlbbsWMwtODtId1%252BiCgY5XQAHcyDjHD%252Bg3T3ktNbRX7bF7f8ai5iLcllrUsqhNrewG9cmGZj3%252FFhPkTyVr%252FnKpXUeeXa%252FQiF5KpiAf4b0AWLY%252FFHcUqTyjyIrMexuiedMZnTUqo8YnBatBorqKlaZOWnm0%252FsrVNoisJ60CPABKIQ0%252FI0jk%252Fy6J89xswtQCWz6VUSSeWiSckpuUX0EG21Wfgb2zeLmE81Dnrku%252BrT9gXXwQJTRTPsi28z8YXodHl8rDAdx2paTV8uwr5H22Hdk9KnbaHx%252BhkE%252F2EaLaBA2apEQAZxGxEGgg2LoG%252FSX3tLFqFSSiK46HhhFAW7yhI1OWTcMYhRKRZivIAeLnvPC2rCaPur0MWGhd%252BsXcmvqy2%252Bs93uTqsNSyNxZtdcEc%252FJ%252Bz%252B5WOIg%252BoZPG4yDSb9hyEIRcsRsA8ybsXyIJCmarUMDiRUVCgQrTC4oWzFPGuaupZTR34nxdv%252B00eZl%252BMLAyNYPM1gGyB6aC4IYjxv5xIlfmnGLG3l6lxGXE5viAqfh2bQ7lsnjzaZbgn%252B0ko9b4bWbIQ9XKNyOS4oC5tGmapfR3vtg%253D%253D%26gtnp%3D0%26gtpp%3D0%26tp1%3Dcf37f022-d980-4854-884d-1e3949811b21%26kbetu%3D1%26maxads%3D0%26kld%3D1003%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DuizcpS2vK%252BPE8C3jtYNgThNeVom%252Bc90lAaNmJ8t%252FDFo%253D%26pbsubid%3Dcf37f022-d980-4854-884d-1e3949811b21%26gtnp%3D0%26gtpp%3D0%26kt%3D210%26%26kbc%3D707%26ki%3D321217634%26ktd%3D0%26kld%3D1003%26kp%3D4%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1722494393142 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.rotect.com%2FJob_Vacancies_Jobs.cfm%3Fdomain%3Drotect.com%26fp%3DuQaVNjuDUF4rK4tShEs0Au0%252BUG%252FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%252BbAq91T%252BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%252F%252B4CZ7GqHID18Hn0lG8m%252FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%252FB3mB4%252F7Pf0pa30%252Bn8GQFMwchNirEiFiBbHa%252F3WXS0X4hX9tXVHEVtDO9dSxRwP87%252Fi1FveXGLDtOv0%26yep%3DuR4%252BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%252BrvZrksXCh%252FTWID06mSMUUo50%252FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%252BpDRS3gYFzynxfbhq%252FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%252BErlx0c703%252BKheAp4bPrhPs9N%252BjTikAkPjy%252BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%252BAf1DOeDKAz7sN99h%252Fl6%252BhdNNq%252FajOyXWCcl%252F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%252FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%252F73J2w083cKWeSNilzYTAa4CR%252BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%252Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc6TEPjii6jYyypXxZ4eYyija1oDOtc2I3nx4b%252BUMzFr2c%252FSLfe32iW2HH9q1ePVrxViaalLTTLGyJVWvW5wwyXnk0jGXhUCnigLLVRCzgQ%252Bqa%252BQ7kdoV3Prt2jVq2JIvbEY2Sy%252BlXVGBWokdZSGlvUcAtSWlTxaaJ6vtQd06Kdk1nLhN0fK4ZddBdusz%252Ba%252B4b5VUu3xTRNTeb%252BQEyZFOwuNbMfSEhVodK1RZgbaaONJTbSSfzHB3hSN4H%252Fhjew%252FV%252F2qn2geIorBIGVe8ihORHIvWa9m47FAM1VYbgstMUVFew55MOVOnVfz9%252F3wP9op%252FJdBOQEJ43Iyyhk5bv5IkaaQkmahSo57X7l%252FMZUPXy1JQU6%252F6SK5OBqOjsOztIJI%252FVVafAbGHp7mQ%252BNM7WdgsxJzmRjqbRFV5xZEYb3qkUfRTjeTewHOngd8mFDFv%252B3QCJ101a%252FS7zKV%252FRzq1pebGcywM1t%252FoqCdH3Gh%252F7IfGvgMIrQTiTjdCZWOR%252F5shU74SCxaDbOTGlbbsWMwtODtId1%252BiCgY5XQAHcyDjHD%252Bg3T3ktNbRX7bF7f8ai5iLcllrUsqhNrewG9cmGZj3%252FFhPkTyVr%252FnKpXUeeXa%252FQiF5KpiAf4b0AWLY%252FFHcUqTyjyIrMexuiedMZnTUqo8YnBatBorqKlaZOWnm0%252FsrVNoisJ60CPABKIQ0%252FI0jk%252Fy6J89xswtQCWz6VUSSeWiSckpuUX0EG21Wfgb2zeLmE81Dnrku%252BrT9gXXwQJTRTPsi28z8YXodHl8rDAdx2paTV8uwr5H22Hdk9KnbaHx%252BhkE%252F2EaLaBA2apEQAZxGxEGgg2LoG%252FSX3tLFqFSSiK46HhhFAW7yhI1OWTcMYhRKRZivIAeLnvPC2rCaPur0MWGhd%252BsXcmvqy2%252Bs93uTqsNSyNxZtdcEc%252FJ%252Bz%252B5WOIg%252BoZPG4yDSb9hyEIRcsRsA8ybsXyIJCmarUMDiRUVCgQrTC4oWzFPGuaupZTR34nxdv%252B00eZl%252BMLAyNYPM1gGyB6aC4IYjxv5xIlfmnGLG3l6lxGXE5viAqfh2bQ7lsnjzaZbgn%252B0ko9b4bWbIQ9XKNyOS4oC5tGmapfR3vtg%253D%253D%26gtnp%3D0%26gtpp%3D0%26tp1%3Dcf37f022-d980-4854-884d-1e3949811b21%26kbetu%3D1%26maxads%3D0%26kld%3D1003%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DuizcpS2vK%252BPE8C3jtYNgThNeVom%252Bc90lAaNmJ8t%252FDFo%253D%26pbsubid%3Dcf37f022-d980-4854-884d-1e3949811b21%26gtnp%3D0%26gtpp%3D0%26kt%3D210%26%26kbc%3D707%26ki%3D321217634%26ktd%3D0%26kld%3D1003%26kp%3D4%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1722494393142 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUser-Agen
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2FJob_Vacancies_Jobs.cfm&o=1722494394730&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ww01.rotect.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cmpcc=10
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2FJob_Vacancies_Jobs.cfm&o=1722494394730&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cmpcc=11
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.rotect.com%2FAllied_Medical_Driver.cfm%3Fdomain%3Drotect.com%26fp%3DuQaVNjuDUF4rK4tShEs0Au0%252BUG%252FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%252BbAq91T%252BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%252F%252B4CZ7GqHID18Hn0lG8m%252FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%252FB3mB4%252F7Pf0pa30%252Bn8GQFMwchNirEiFiBbHa%252F3WXS0X4hX9tXVHEVtDO9dSxRwP87%252Fi1FveXGLDtOv0%26yep%3DuR4%252BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%252BrvZrksXCh%252FTWID06mSMUUo50%252FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%252BpDRS3gYFzynxfbhq%252FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%252BErlx0c703%252BKheAp4bPrhPs9N%252BjTikAkPjy%252BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%252BAf1DOeDKAz7sN99h%252Fl6%252BhdNNq%252FajOyXWCcl%252F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%252FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%252F73J2w083cKWeSNilzYTAa4CR%252BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%252Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc6TEPjii6jYyypXxZ4eYyija1oDOtc2I3nx4b%252BUMzFr2c%252FSLfe32iW2HH9q1ePVrxViaalLTTLGyJVWvW5wwyXnk0jGXhUCnigLLVRCzgQ%252Bqa%252BQ7kdoV3Prt2jVq2JIvbEY2Sy%252BlXVGBWokdZSGlvUcAtSWlTxaaJ6vtQd06Kdk1nLhN0fK4ZddBdusz%252Ba%252B4b5VUu3xTRNTeb%252BQEyZFOwuNbMfSEhVodK1RZgbaaONJTbSSfzHB3hSN4H%252Fhjew%252FV%252F2qn2geIorBIGVe8ihORHIvWa9m47FAM1VYbgstMUVFew55MOVOnVfz9%252F3wP9op%252FJdBOQEJ43Iyyhk5bv5IkaaQkmahSo57X7l%252FMZUPXy1JQU6%252F6SK5OBqOjsOztIJI%252FVVafAbGHp7mQ%252BNM7WdgsxJzmRjqbRFV5xZEYb3qkUfRTjeTewHOngd8mFDFv%252B3QCJ101a%252FS7zKV%252FRzq1pebGcywM1t%252FoqCdH3Gh%252F7IfGvgMIrQTiTjdCZWOR%252F5shU74SCxaDbOTGlbbsWMwtODtId1%252BiCgY5XQAHcyDjHD%252Bg3T3ktNbRX7bF7f8ai5iLcllrUsqhNrewG9cmGZj3%252FFhPkTyVr%252FnKpXUeeXa%252FQiF5KpiAf4b0AWLY%252FFHcUqTyjyIrMexuiedMZnTUqo8YnBatBorqKlaZOWnm0%252FsrVNoisJ60CPABKIQ0%252FI0jk%252Fy6J89xswtQCWz6VUSSeWiSckpuUX0EG21Wfgb2zeLmE81Dnrku%252BrT9gXXwQJTRTPsi28z8YXodHl8rDAdx2paTV8uwr5H22Hdk9KnbaHx%252BhkE%252F2EaLaBA2apEQAZxGxEGgg2LoG%252FSX3tLFqFSSiK46HhhFAW7yhI1OWTcMYhRKRZivIAeLnvPC2rCaPur0MWGhd%252BsXcmvqy2%252Bs93uTqsNSyNxZtdcEc%252FJ%252Bz%252B5WOIg%252BoZPG4yDSb9hyEIRcsRsA8ybsXyIJCmarUMDiRUVCgQrTC4oWzFPGuaupZTR34nxdv%252B00eZl%252BMLAyNYPM1gGyB6aC4IYjxv5xIlfmnGLG3l6lxGXE5viAqfh2bQ7lsnjzaZbgn%252B0ko9b4bWbIQ9XKNyOS4oC5tGmapfR3vtg%253D%253D%26gtnp%3D0%26gtpp%3D0%26tp1%3Dcf37f022-d980-4854-884d-1e3949811b21%26kbetu%3D1%26maxads%3D0%26kld%3D1003%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DuizcpS2vK%252BPE8C3jtYNgThNeVom%252Bc90lAaNmJ8t%252FDFo%253D%26pbsubid%3Dcf37f022-d980-4854-884d-1e3949811b21%26gtnp%3D0%26gtpp%3D0%26kt%3D210%26%26kbc%3D707%26ki%3D326693500%26ktd%3D0%26kld%3D1003%26kp%3D5%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1722494399226 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch
Source: global traffic	HTTP traffic detected: GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.rotect.com%2FAllied_Medical_Driver.cfm%3Fdomain%3Drotect.com%26fp%3DuQaVNjuDUF4rK4tShEs0Au0%252BUG%252FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%252BbAq91T%252BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%252F%252B4CZ7GqHID18Hn0lG8m%252FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%252FB3mB4%252F7Pf0pa30%252Bn8GQFMwchNirEiFiBbHa%252F3WXS0X4hX9tXVHEVtDO9dSxRwP87%252Fi1FveXGLDtOv0%26yep%3DuR4%252BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%252BrvZrksXCh%252FTWID06mSMUUo50%252FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%252BpDRS3gYFzynxfbhq%252FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%252BErlx0c703%252BKheAp4bPrhPs9N%252BjTikAkPjy%252BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%252BAf1DOeDKAz7sN99h%252Fl6%252BhdNNq%252FajOyXWCcl%252F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%252FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%252F73J2w083cKWeSNilzYTAa4CR%252BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%252Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc6TEPjii6jYyypXxZ4eYyija1oDOtc2I3nx4b%252BUMzFr2c%252FSLfe32iW2HH9q1ePVrxViaalLTTLGyJVWvW5wwyXnk0jGXhUCnigLLVRCzgQ%252Bqa%252BQ7kdoV3Prt2jVq2JIvbEY2Sy%252BlXVGBWokdZSGlvUcAtSWlTxaaJ6vtQd06Kdk1nLhN0fK4ZddBdusz%252Ba%252B4b5VUu3xTRNTeb%252BQEyZFOwuNbMfSEhVodK1RZgbaaONJTbSSfzHB3hSN4H%252Fhjew%252FV%252F2qn2geIorBIGVe8ihORHIvWa9m47FAM1VYbgstMUVFew55MOVOnVfz9%252F3wP9op%252FJdBOQEJ43Iyyhk5bv5IkaaQkmahSo57X7l%252FMZUPXy1JQU6%252F6SK5OBqOjsOztIJI%252FVVafAbGHp7mQ%252BNM7WdgsxJzmRjqbRFV5xZEYb3qkUfRTjeTewHOngd8mFDFv%252B3QCJ101a%252FS7zKV%252FRzq1pebGcywM1t%252FoqCdH3Gh%252F7IfGvgMIrQTiTjdCZWOR%252F5shU74SCxaDbOTGlbbsWMwtODtId1%252BiCgY5XQAHcyDjHD%252Bg3T3ktNbRX7bF7f8ai5iLcllrUsqhNrewG9cmGZj3%252FFhPkTyVr%252FnKpXUeeXa%252FQiF5KpiAf4b0AWLY%252FFHcUqTyjyIrMexuiedMZnTUqo8YnBatBorqKlaZOWnm0%252FsrVNoisJ60CPABKIQ0%252FI0jk%252Fy6J89xswtQCWz6VUSSeWiSckpuUX0EG21Wfgb2zeLmE81Dnrku%252BrT9gXXwQJTRTPsi28z8YXodHl8rDAdx2paTV8uwr5H22Hdk9KnbaHx%252BhkE%252F2EaLaBA2apEQAZxGxEGgg2LoG%252FSX3tLFqFSSiK46HhhFAW7yhI1OWTcMYhRKRZivIAeLnvPC2rCaPur0MWGhd%252BsXcmvqy2%252Bs93uTqsNSyNxZtdcEc%252FJ%252Bz%252B5WOIg%252BoZPG4yDSb9hyEIRcsRsA8ybsXyIJCmarUMDiRUVCgQrTC4oWzFPGuaupZTR34nxdv%252B00eZl%252BMLAyNYPM1gGyB6aC4IYjxv5xIlfmnGLG3l6lxGXE5viAqfh2bQ7lsnjzaZbgn%252B0ko9b4bWbIQ9XKNyOS4oC5tGmapfR3vtg%253D%253D%26gtnp%3D0%26gtpp%3D0%26tp1%3Dcf37f022-d980-4854-884d-1e3949811b21%26kbetu%3D1%26maxads%3D0%26kld%3D1003%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DuizcpS2vK%252BPE8C3jtYNgThNeVom%252Bc90lAaNmJ8t%252FDFo%253D%26pbsubid%3Dcf37f022-d980-4854-884d-1e3949811b21%26gtnp%3D0%26gtpp%3D0%26kt%3D210%26%26kbc%3D707%26ki%3D326693500%26ktd%3D0%26kld%3D1003%26kp%3D5%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1722494399226 HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUser-A
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2FAllied_Medical_Driver.cfm&o=1722494400190&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ww01.rotect.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cmpcc=12
Source: global traffic	HTTP traffic detected: GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2FAllied_Medical_Driver.cfm&o=1722494400190&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1Host: a.delivery.consentmanager.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cmpcc=13
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: rotect.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bZehyVOgP.js HTTP/1.1Host: rotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21
Source: global traffic	HTTP traffic detected: GET /bZehyVOgP.js HTTP/1.1Host: rotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21
Source: global traffic	HTTP traffic detected: GET /_fd HTTP/1.1Host: rotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21
Source: global traffic	HTTP traffic detected: GET /?dn=rotect.com&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&pid=9POT3387I HTTP/1.1Host: ww01.rotect.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Referer: http://rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_zc HTTP/1.1Host: rotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21
Source: global traffic	HTTP traffic detected: GET /_tr HTTP/1.1Host: rotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21
Source: global traffic	HTTP traffic detected: GET /px.js?ch=1 HTTP/1.1Host: ww01.rotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww01.rotect.com/?dn=rotect.com&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&pid=9POT3387IAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: vsid=919vr47003992153469591
Source: global traffic	HTTP traffic detected: GET /px.js?ch=2 HTTP/1.1Host: ww01.rotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww01.rotect.com/?dn=rotect.com&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&pid=9POT3387IAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: vsid=919vr47003992153469591
Source: global traffic	HTTP traffic detected: GET /__media__/js/min.js?v2.3 HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.js?ch=1 HTTP/1.1Host: ww01.rotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: vsid=919vr47003992153469591
Source: global traffic	HTTP traffic detected: GET /__media__/pics/29590/bg1.png HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/arrrow.png HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /px.js?ch=2 HTTP/1.1Host: ww01.rotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: vsid=919vr47003992153469591
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveOrigin: http://ww01.rotect.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveOrigin: http://ww01.rotect.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/js/min.js?v2.3 HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/29590/bg1.png HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/arrrow.png HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ww01.rotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww01.rotect.com/?dn=rotect.com&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&pid=9POT3387IAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: vsid=919vr47003992153469591; __cmpcc=1; __cmpcccx68884=aBQCr8c8AAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Source: global traffic	HTTP traffic detected: GET /legal HTTP/1.1Host: rotect.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; __cmpcccx68884=aBQCr8c8AAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: rotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://rotect.com/legalAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; __cmpcccx68884=aBQCr8c8AAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: rotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; __cmpcccx68884=aBQCr8c8AAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: rotect.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; __cmpcccx68884=aBQCr8c8AAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: rotect.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; __cmpcccx68884=aBQCr8c8AAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Source: global traffic	HTTP traffic detected: GET /bEZCJCfIn.js HTTP/1.1Host: rotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; __cmpcccx68884=aBQCr8c8AAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Source: global traffic	HTTP traffic detected: GET /bEZCJCfIn.js HTTP/1.1Host: rotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; __cmpcccx68884=aBQCr8c8AAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Source: global traffic	HTTP traffic detected: GET /_fd HTTP/1.1Host: rotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; __cmpcccx68884=aBQCr8c8AAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Source: global traffic	HTTP traffic detected: GET /Customer_Service_Support.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc6TEPjii6jYyypXxZ4eYyija1oDOtc2I3nx4b%2BUMzFr2c%2FSLfe32iW2HH9q1ePVrxViaalLTTLGyJVWvW5wwyXnk0jGXhUCnigLLVRCzgQ%2Bqa%2BQ7kdoV3Prt2jVq2JIvbEY2Sy%2BlXVGBWokdZSGlvUcAtSWlTxaaJ6vtQd06Kdk1nLhN0fK4ZddBdusz%2Ba%2B4b5VUu3xTRNTeb%2BQEyZFOwuNbMfSEhVodK1RZgbaaONJTbSSfzHB3hSN4H%2Fhjew%2FV%2F2qn2geIorBIGVe8ihORHIvWa9m47FAM1VYbgstMUVFew55MOVOnVfz9%2F3wP9op%2FJdBOQEJ43Iyyhk5bv5IkaaQkmahSo57X7l%2FMZUPXy1JQU6%2F6SK5OBqOjsOztIJI%2FVVafAbGHp7mQ%2BNM7WdgsxJzmRjqbRFV5xZEYb3qkUfRTjeTewHOngd8mFDFv%2B3QCJ101a%2FS7zKV%2FRzq1pebGcywM1t%2FoqCdH3Gh%2F7IfGvgMIrQTiTjdCZWOR%2F5shU74SCxaDbOTGlbbsWMwtODtId1%2BiCgY5XQAHcyDjHD%2Bg3T3ktNbRX7bF7f8ai5iLcllrUsqhNrewG9cmGZj3%2FFhPkTyVr%2FnKpXUeeXa%2FQiF5KpiAf4b0AWLY%2FFHcUqTyjyIrMexuiedMZnTUqo8YnBatBorqKlaZOWnm0%2FsrVNoisJ60CPABKIQ0%2FI0jk%2Fy6J89xswtQCWz6VUSSeWiSckpuUX0EG21Wfgb2zeLmE81Dnrku%2BrT9gXXwQJTRTPsi28z8YXodHl8rDAdx2paTV8uwr5H22Hdk9KnbaHx%2BhkE%2F2EaLaBA2apEQAZxGxEGgg2LoG%2FSX3tLFqFSSiK46HhhFAW7yhI1OWTcMYhRKRZivIAeLnvPC2rCaPur0MWGhd%2BsXcmvqy2%2Bs93uTqsNSyNxZtdcEc%2FJ%2Bz%2B5WOIg%2BoZPG4yDSb9hyEIRcsRsA8ybsXyIJCmarUMDiRUVCgQrTC4oWzFPGuaupZTR34nxdv%2B00eZl%2BMLAyNYPM1gGyB6aC4IYjxv5xIlfmnGLG3l6lxGXE5viAqfh2bQ7lsnjzaZbgn%2B0ko9b4bWbIQ9XKNyOS4oC5tGmapfR3vtg%3D%3D&gtnp=0&gtpp=0&tp1=cf37f022-d980-4854-884d-1e3949811b21&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=uizcpS2vK%2BPE8C3jtYNgThNeVom%2Bc90lAaNmJ8t%2FDFo%3D&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&gtnp=0&gtpp=0&kt=210&&kbc=707&ki=7505256&ktd=0&kld=1003&kp=1&bd=-4%231024%231280%231%230 HTTP/1.1Host: ww01.rotect.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: vsid=919vr470039921
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/res-arw.png HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-medium/montserrat-medium.woff HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveOrigin: http://ww01.rotect.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/res-arw.png HTTP/1.1Host: i1.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trf?q=Customer+Service+Support&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9OTg3NzI4NDNFMjZBNEIyQiZ1dD0xNzIyNDk0MzYxNDUwJnVvPTc4MjAyOTY4MDQ4NzgxJmx0PTImcz0yJmVzPVNfNXU0WDFqMmFYbkdOd1kuUkpWNWxFek9iSlNBMHAwb1ZLYlRYWGoyRERiMi4udTdEWEpYMHRldEhIc2xiLkdtajg5aWlqYkJ0VGpFbWt4%2FRV%3D2%2FRE%3D1725086361%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8k4YwntxTTSJ3pjCdJcEi0DVUCUylND8Iss8blWsEl4FPkDmdC3ng-dLrXBoA8SwiWe1BVTv3SRqIUTGfg6bUf8uxWk9GX-bhCR5eQuMNS7Gc1Hul4T4RotK4rsKYbESbbZSiya3k5Wm_-mEREK6PpWyTDZl_cKR_tuOa7ekdaPcCCDNR%2526u%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%2526rlid%253d2895040d7f52114f837462a652cb27d7%2FRK%3D2%2FRS%3DnCXp0x1b1QvOi5rZoASWln9SiPg-&o=qfnFVr%2BNqSQeYEVcv%2FZx5kNOsCBOd7Xswx01SVcPREPqDLJbFjmy6578JkfE%2BNCwqkUyPpLTPh1jk4Fli76jlWnLuLJXga13Pb3ji5QsNup5LmwWzNrthxUKOc%2Frf30QY7PQ1zBdnORDUK%2F6bdroQU7SD68WWGrIyNtTSs34TnBXukbcdPtH2c3cLdCLC%2FYIGJ0crgV848XfhaO74NAE9jpQkCjxf3j%2FgkbaVa%2B8LDr4aRNgheCFhqyh61rwQ6fguGbQxZ6IMngLLAP1oBYxBt74ffvDDIdFqhQv%2FdCEtZ3qZTkvX3TsbVAwLYQGOM2cE9iRcWboo4sz1MlPh1iCHd5uK492tU0mD82vNlurwCw15WvIauULU2nDHBGR8RdEgAX97vAyhfk9FqELWL7V32IQ9R1FLMNww2EkSbPP5oVvId5tDyuttq0PfhKhyDl14yMAQ9LeLEqhVPEFYCmZknCm4MUcR46Ilh4dwTfMhquviyVJdDuShoRk1Sv9B2bFJud%2FDNtMkaua3VLMUTZgGcaOvPsKR5i83OsxccdFY6WwHhvR9TP8tV1OwwRL%2FTBjIIFxhjVm3DCVdtlC5i6sZQzriUh0d3U6neITolzkhBTHpk%2FK3RzPLle7mQlaeB1iJ3rYjObnUWc4VgsSXUHMSQ%3D%3D&c=213247003994489844651283&n=3sGO3zkGqxgtRtuoH5j45vKPO2NfcbhpeY4r2k45M1Ysl%2B%2Fu7xuFIQX51%2B%2FA1An%2F19gE5URlfKVyPV5REkhmi3vjTRVSx%2FXX0kjg1iBkHuZ9EleXh3agXUxCHDLKg%2F7C1Uvp2I5KvMqjOm%2F853mjLY1EKBxEtszEWmZ0D%2BwPwAKVsEihToEYxpZnvBDGOLdNJBHd%2FLB5M0tTX3VSj3CMtA%2Bb%2B6r4rUQ%2B5Vc1F44l2LmDzVohkn0B6%2BnW%2BNU%2FsrCvZkjdB67kMqoWCd1TuxGeZ6oneEFucC%2BrcCsDvbOh4x%2FQITGgG4U7vBqcUKmB4ksGxSXGSex4MBrttWF9pe7%2F4P0titBgqHzNtYjTpMpaVOjhnDvXQjSw7AX3zTdWdjBPPsRRRR26xjjC2Rai9jVXkkYsxyzWk6hkZlV2G833zO%2BaMe8aMQllqt6VIINBznRf%2FZRqe%2FWr5RI3X5RvlK1jsUBzscjxGbJgojSl%2Fbsp0dDo0o%2FvY0emC%2FQMwYUjGL1PKGy4eJDYlndG4Bnzou9QoSQi7xxM1Rb%2BhHNJO%2FoW4QX7M5LJCWQsvJ6z%2BIlib4k2TYXcj45y%2BOf9Fg%2BiZWejYl8Ht2Wc7ADnOJRO8LpLPfnZXm5bVZTROqK5joikt123g%2FgfOVvwwQQ5t9YNGcOU1KWXlQaSzQeSXZ4pbwH8CQl4DBV%2FdLBtTqSTGlP3GIXNYbqTuKKNzM0RqDfuCdcD2vqWLFyGORnpq2DQf3s40quPaPv3jsRbekzrF0IjVX9eXZ7v%2Fb0J9qYz2j%2B1yd%2BM3Jz04fefdohy6Jp3C%2B1y4W1xJrM8SVtnJhBUgAFwa1K92rtixpGntqu
Source: global traffic	HTTP traffic detected: GET /_tr HTTP/1.1Host: rotect.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; __gsas=ID=46e899ebb71f7b61:T=1722494361:RT=1722494361:S=ALNI_Mb5XzFUNBfZRjNKVj9nGqktdtTQHw; __cmpcccx68884=aBQCr8gEAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Source: global traffic	HTTP traffic detected: GET /trf?q=Customer+Service+Support&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9OTg3NzI4NDNFMjZBNEIyQiZ1dD0xNzIyNDk0MzYxNDUwJnVvPTc4MjAyOTY4MDQ4NzgxJmx0PTImcz0yJmVzPVNfNXU0WDFqMmFYbkdOd1kuUkpWNWxFek9iSlNBMHAwb1ZLYlRYWGoyRERiMi4udTdEWEpYMHRldEhIc2xiLkdtajg5aWlqYkJ0VGpFbWt4%2FRV%3D2%2FRE%3D1725086361%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8k4YwntxTTSJ3pjCdJcEi0DVUCUylND8Iss8blWsEl4FPkDmdC3ng-dLrXBoA8SwiWe1BVTv3SRqIUTGfg6bUf8uxWk9GX-bhCR5eQuMNS7Gc1Hul4T4RotK4rsKYbESbbZSiya3k5Wm_-mEREK6PpWyTDZl_cKR_tuOa7ekdaPcCCDNR%2526u%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%2526rlid%253d2895040d7f52114f837462a652cb27d7%2FRK%3D2%2FRS%3DnCXp0x1b1QvOi5rZoASWln9SiPg-&o=qfnFVr%2BNqSQeYEVcv%2FZx5kNOsCBOd7Xswx01SVcPREPqDLJbFjmy6578JkfE%2BNCwqkUyPpLTPh1jk4Fli76jlWnLuLJXga13Pb3ji5QsNup5LmwWzNrthxUKOc%2Frf30QY7PQ1zBdnORDUK%2F6bdroQU7SD68WWGrIyNtTSs34TnBXukbcdPtH2c3cLdCLC%2FYIGJ0crgV848XfhaO74NAE9jpQkCjxf3j%2FgkbaVa%2B8LDr4aRNgheCFhqyh61rwQ6fguGbQxZ6IMngLLAP1oBYxBt74ffvDDIdFqhQv%2FdCEtZ3qZTkvX3TsbVAwLYQGOM2cE9iRcWboo4sz1MlPh1iCHd5uK492tU0mD82vNlurwCw15WvIauULU2nDHBGR8RdEgAX97vAyhfk9FqELWL7V32IQ9R1FLMNww2EkSbPP5oVvId5tDyuttq0PfhKhyDl14yMAQ9LeLEqhVPEFYCmZknCm4MUcR46Ilh4dwTfMhquviyVJdDuShoRk1Sv9B2bFJud%2FDNtMkaua3VLMUTZgGcaOvPsKR5i83OsxccdFY6WwHhvR9TP8tV1OwwRL%2FTBjIIFxhjVm3DCVdtlC5i6sZQzriUh0d3U6neITolzkhBTHpk%2FK3RzPLle7mQlaeB1iJ3rYjObnUWc4VgsSXUHMSQ%3D%3D&c=213247003994489844651283&n=3sGO3zkGqxgtRtuoH5j45vKPO2NfcbhpeY4r2k45M1Ysl%2B%2Fu7xuFIQX51%2B%2FA1An%2F19gE5URlfKVyPV5REkhmi3vjTRVSx%2FXX0kjg1iBkHuZ9EleXh3agXUxCHDLKg%2F7C1Uvp2I5KvMqjOm%2F853mjLY1EKBxEtszEWmZ0D%2BwPwAKVsEihToEYxpZnvBDGOLdNJBHd%2FLB5M0tTX3VSj3CMtA%2Bb%2B6r4rUQ%2B5Vc1F44l2LmDzVohkn0B6%2BnW%2BNU%2FsrCvZkjdB67kMqoWCd1TuxGeZ6oneEFucC%2BrcCsDvbOh4x%2FQITGgG4U7vBqcUKmB4ksGxSXGSex4MBrttWF9pe7%2F4P0titBgqHzNtYjTpMpaVOjhnDvXQjSw7AX3zTdWdjBPPsRRRR26xjjC2Rai9jVXkkYsxyzWk6hkZlV2G833zO%2BaMe8aMQllqt6VIINBznRf%2FZRqe%2FWr5RI3X5RvlK1jsUBzscjxGbJgojSl%2Fbsp0dDo0o%2FvY0emC%2FQMwYUjGL1PKGy4eJDYlndG4Bnzou9QoSQi7xxM1Rb%2BhHNJO%2FoW4QX7M5LJCWQsvJ6z%2BIlib4k2TYXcj45y%2BOf9Fg%2BiZWejYl8Ht2Wc7ADnOJRO8LpLPfnZXm5bVZTROqK5joikt123g%2FgfOVvwwQQ5t9YNGcOU1KWXlQaSzQeSXZ4pbwH8CQl4DBV%2FdLBtTqSTGlP3GIXNYbqTuKKNzM0RqDfuCdcD2vqWLFyGORnpq2DQf3s40quPaPv3jsRbekzrF0IjVX9eXZ7v%2Fb0J9qYz2j%2B1yd%2BM3Jz04fefdohy6Jp3C%2B1y4W1xJrM8SVtnJhBUgAFwa1K92rtixpGntqu
Source: global traffic	HTTP traffic detected: GET /Allied_Medical_Winslow_Az_Driver.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc6TEPjii6jYyypXxZ4eYyija1oDOtc2I3nx4b%2BUMzFr2c%2FSLfe32iW2HH9q1ePVrxViaalLTTLGyJVWvW5wwyXnk0jGXhUCnigLLVRCzgQ%2Bqa%2BQ7kdoV3Prt2jVq2JIvbEY2Sy%2BlXVGBWokdZSGlvUcAtSWlTxaaJ6vtQd06Kdk1nLhN0fK4ZddBdusz%2Ba%2B4b5VUu3xTRNTeb%2BQEyZFOwuNbMfSEhVodK1RZgbaaONJTbSSfzHB3hSN4H%2Fhjew%2FV%2F2qn2geIorBIGVe8ihORHIvWa9m47FAM1VYbgstMUVFew55MOVOnVfz9%2F3wP9op%2FJdBOQEJ43Iyyhk5bv5IkaaQkmahSo57X7l%2FMZUPXy1JQU6%2F6SK5OBqOjsOztIJI%2FVVafAbGHp7mQ%2BNM7WdgsxJzmRjqbRFV5xZEYb3qkUfRTjeTewHOngd8mFDFv%2B3QCJ101a%2FS7zKV%2FRzq1pebGcywM1t%2FoqCdH3Gh%2F7IfGvgMIrQTiTjdCZWOR%2F5shU74SCxaDbOTGlbbsWMwtODtId1%2BiCgY5XQAHcyDjHD%2Bg3T3ktNbRX7bF7f8ai5iLcllrUsqhNrewG9cmGZj3%2FFhPkTyVr%2FnKpXUeeXa%2FQiF5KpiAf4b0AWLY%2FFHcUqTyjyIrMexuiedMZnTUqo8YnBatBorqKlaZOWnm0%2FsrVNoisJ60CPABKIQ0%2FI0jk%2Fy6J89xswtQCWz6VUSSeWiSckpuUX0EG21Wfgb2zeLmE81Dnrku%2BrT9gXXwQJTRTPsi28z8YXodHl8rDAdx2paTV8uwr5H22Hdk9KnbaHx%2BhkE%2F2EaLaBA2apEQAZxGxEGgg2LoG%2FSX3tLFqFSSiK46HhhFAW7yhI1OWTcMYhRKRZivIAeLnvPC2rCaPur0MWGhd%2BsXcmvqy2%2Bs93uTqsNSyNxZtdcEc%2FJ%2Bz%2B5WOIg%2BoZPG4yDSb9hyEIRcsRsA8ybsXyIJCmarUMDiRUVCgQrTC4oWzFPGuaupZTR34nxdv%2B00eZl%2BMLAyNYPM1gGyB6aC4IYjxv5xIlfmnGLG3l6lxGXE5viAqfh2bQ7lsnjzaZbgn%2B0ko9b4bWbIQ9XKNyOS4oC5tGmapfR3vtg%3D%3D&gtnp=0&gtpp=0&tp1=cf37f022-d980-4854-884d-1e3949811b21&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=uizcpS2vK%2BPE8C3jtYNgThNeVom%2Bc90lAaNmJ8t%2FDFo%3D&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&gtnp=0&gtpp=0&kt=210&&kbc=707&ki=326693501&ktd=0&kld=1003&kp=2&bd=-4%231024%231280%231%230 HTTP/1.1Host: ww01.rotect.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: vsid=919v
Source: global traffic	HTTP traffic detected: GET /__media__/js/min.js?v2.3 HTTP/1.1Host: i4.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/29590/bg1.png HTTP/1.1Host: i4.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/res-arw.png HTTP/1.1Host: i4.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1Host: i4.cdn-image.comConnection: keep-aliveOrigin: http://ww01.rotect.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1Host: i4.cdn-image.comConnection: keep-aliveOrigin: http://ww01.rotect.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-medium/montserrat-medium.woff HTTP/1.1Host: i4.cdn-image.comConnection: keep-aliveOrigin: http://ww01.rotect.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/js/min.js?v2.3 HTTP/1.1Host: i4.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/29590/bg1.png HTTP/1.1Host: i4.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/res-arw.png HTTP/1.1Host: i4.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trf?q=Allied+Medical+Winslow+Az+Driver&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9QjNERUZDNjRCM0EwNDY0RiZ1dD0xNzIyNDk0Mzc1MzcxJnVvPTc5NDM5ODI0NzAxMjczJmx0PTImcz0yJmVzPTJrOE80c041LjJyeUFzUlhaVmhQRDRWdEpMTHZMZkpkaWFjMzJLdW5CeW5acWNHTlVFNzU0TFNrNVpCbF91X0ladk8zRW96MFBvWEVRZy0t%2FRV%3D2%2FRE%3D1725086375%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8v9GQKnSqbyIt5XJpxiXAnzVUCUyllzQWO0olRcqZ1Mxpl8hcj3k6uecA0aoixs6Hd6ZuFeylLYSaV5ljQB7mvLXU8niOntuCp_PYaUOGG1vmtyqwbH_w0cDm-N2qwwYYDZIFc_3sBEEXxkKf9T0GXMOd18WJb3Z3C422QHJUbROA8ND5%2526u%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%2526rlid%253d409fb85eab00133df3acdef586a7d8bb%2FRK%3D2%2FRS%3DaAi_RaFNNNPmV5xsOY2SpL3Aqhk-&o=qfnFVr%2BNqSQeYEVcv%2FZx5kNOsCBOd7Xswx01SVcPREPqDLJbFjmy6578JkfE%2BNCwqkUyPpLTPh1jk4Fli76jlWnLuLJXga13Pb3ji5QsNup5LmwWzNrthxUKOc%2Frf30QY7PQ1zBdnORDUK%2F6bdroQU7SD68WWGrIyNtTSs34TnBXukbcdPtH2c3cLdCLC%2FYIGJ0crgV848XfhaO74NAE9jpQkCjxf3j%2FgkbaVa%2B8LDr4aRNgheCFhqyh61rwQ6fguGbQxZ6IMngLLAP1oBYxBt74ffvDDIdFqhQv%2FdCEtZ3qZTkvX3TsbVAwLYQGOM2cE9iRcWboo4sz1MlPh1iCHd5uK492tU0mD82vNlurwCw15WvIauULU2nDHBGR8RdEgAX97vAyhfk9FqELWL7V32IQ9R1FLMNww2EkSbPP5oVvId5tDyuttq0PfhKhyDl14yMAQ9LeLEqhVPEFYCmZknCm4MUcR46Ilh4dwTfMhquviyVJdDuShoRk1Sv9B2bFJud%2FDNtMkaua3VLMUTZgGcaOvPsKR5i83OsxccdFY6Ud7uQsYjK7Kh6%2B2uHI0Tn2AZ4uZwcOm333uCCgXqDQL4ISLxesm7NuF71vQyxQz5AdFQSLifOjsvOI3%2BXpOY7ZtARHn9YRpySiTSUGm7DqNg%3D%3D&c=212547003995884439602581&n=g6DlMZ2fT1oaWHM798%2BM0Lt5nVuXNLkEvas%2FztbTM2Un67L%2BgBwLnudp8mKckMW029vcqPQ9LK8dTuFk4z%2FAlTosNb6rd9pDTSUFQ42%2FC5509MW1RNMpSrVpoEKX%2F4QYfUqUT6WLjXnETgqEFBiUPvLIsgL46QVAhszcF6DmTswzBX5L4aNcdHwy2W4NpMF%2Fl80SRcZJ4jdD2mpoZwTuPDxPbkAbr5BAUU83GfDXRUQp6CVa%2Fm8yPo5UazDhYWGGz%2F8AQK0x%2FnICjj3%2FdNY7Sp5f9W1Omzy6SzoxNSCDypqBV8LRx0xdNJfkZkfe9EckwxEO%2BS%2BRfuaofPT5oPWO9V2JDCuupSGbScckQDugztax27vVGRXC2rASQrAzG0OsaSp8xdq45g6RtU1cCtdw7yn1Py6aEsOQwQ4rC5h0CANVdjM0LpI2YpbpQ6ubKq%2Fnr5Comk5zU6Z0zkQ%2F4f5x6qcpOUggVSzHI8l2Srg2IWa%2B0MNyDv%2BYJVp8cdfqkuizvnfzlsWAXtJqAA6XIn%2BOcoJZr17u6X2lkLTGdPAwovHz%2BfbWWaqc03uUam2Pw9MwVDIiobW53GGDo1FWmfZajf9LpuLrXIGD%2FP22WdTDzp9s5ibLPIflUah6XU4dBpMIzLSi%2BGf6W8wtrGmGmCY0TZnhazED%2BFjG0O0zCaMD63YgubxezzdHdUkLO35CjmeaIP%2BQ0bPdqg4pFmrEwkxEuyaraMLjW9amVLfP9yyGT%2B1QSTMYpoxxYud%2FFYP%2BQgvshD%2FBhfkzv2MG42AkTTTdw3msNA3%2FVE7d6Ngy37W9y8Pc2IzNE72TN%2FfOOhiywQKEIBUr8j6q18QlK9p%2FNjv6ZJNmUBAs%2F1VkczugdUFEPX47extI1KFLfuI6CoWo7brQpNxQI%2BqYP785pBuV91QRTJDiEEbOokxu8t0HIatN3txPtczsy9lCi
Source: global traffic	HTTP traffic detected: GET /trf?q=Allied+Medical+Winslow+Az+Driver&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9QjNERUZDNjRCM0EwNDY0RiZ1dD0xNzIyNDk0Mzc1MzcxJnVvPTc5NDM5ODI0NzAxMjczJmx0PTImcz0yJmVzPTJrOE80c041LjJyeUFzUlhaVmhQRDRWdEpMTHZMZkpkaWFjMzJLdW5CeW5acWNHTlVFNzU0TFNrNVpCbF91X0ladk8zRW96MFBvWEVRZy0t%2FRV%3D2%2FRE%3D1725086375%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8v9GQKnSqbyIt5XJpxiXAnzVUCUyllzQWO0olRcqZ1Mxpl8hcj3k6uecA0aoixs6Hd6ZuFeylLYSaV5ljQB7mvLXU8niOntuCp_PYaUOGG1vmtyqwbH_w0cDm-N2qwwYYDZIFc_3sBEEXxkKf9T0GXMOd18WJb3Z3C422QHJUbROA8ND5%2526u%253daHR0cHMlM2ElMmYlMmZ3d3cuZXZlcnlqb2Jmb3JtZS5jb20lMmZscG0lM2ZjcmVhdGl2ZSUzZCUyNm1hdGNodHlwZSUzZHAlMjZuZXR3b3JrJTNkcyUyNmRldmljZSUzZGMlMjZwbGFjZW1lbnQlM2QlMjZhY2VpZCUzZCU3YmFjZWlkJTdkJTI2cG9zJTNkJTI2a3clM2RhbGxpZWQlMjUyMGhlYWx0aCUyNTIwam9icyUyNm1zY2xraWQlM2Q0MDlmYjg1ZWFiMDAxMzNkZjNhY2RlZjU4NmE3ZDhiYiUyNm1hdGNodHlwZSUzZHAlMjZ1dG1fc291cmNlJTNkYmluZyUyNnV0bV9tZWRpdW0lM2RjcGMlMjZjYW1wYWlnbiUzZDM1NTgyOTIxOCUyNnZ0Y2lkJTNkMzU1ODI5MjE4JTI2dnRhZ2lkJTNkMTI3MTAzNjAwMDM1MzY3NCUyNnZ0dGlkJTNka3dkLTc5NDQwMDU2MjkwMzE5JTNhbG9jLTE5MCUyNm5ldHdvcmslM2RzJTI2bXNjbGtpZCUzZDQwOWZiODVlYWIwMDEzM2RmM2FjZGVmNTg2YTdkOGJi%2526rlid%253d409fb85eab00133df3acdef586a7d8bb%2FRK%3D2%2FRS%3DaAi_RaFNNNPmV5xsOY2SpL3Aqhk-&o=qfnFVr%2BNqSQeYEVcv%2FZx5kNOsCBOd7Xswx01SVcPREPqDLJbFjmy6578JkfE%2BNCwqkUyPpLTPh1jk4Fli76jlWnLuLJXga13Pb3ji5QsNup5LmwWzNrthxUKOc%2Frf30QY7PQ1zBdnORDUK%2F6bdroQU7SD68WWGrIyNtTSs34TnBXukbcdPtH2c3cLdCLC%2FYIGJ0crgV848XfhaO74NAE9jpQkCjxf3j%2FgkbaVa%2B8LDr4aRNgheCFhqyh61rwQ6fguGbQxZ6IMngLLAP1oBYxBt74ffvDDIdFqhQv%2FdCEtZ3qZTkvX3TsbVAwLYQGOM2cE9iRcWboo4sz1MlPh1iCHd5uK492tU0mD82vNlurwCw15WvIauULU2nDHBGR8RdEgAX97vAyhfk9FqELWL7V32IQ9R1FLMNww2EkSbPP5oVvId5tDyuttq0PfhKhyDl14yMAQ9LeLEqhVPEFYCmZknCm4MUcR46Ilh4dwTfMhquviyVJdDuShoRk1Sv9B2bFJud%2FDNtMkaua3VLMUTZgGcaOvPsKR5i83OsxccdFY6Ud7uQsYjK7Kh6%2B2uHI0Tn2AZ4uZwcOm333uCCgXqDQL4ISLxesm7NuF71vQyxQz5AdFQSLifOjsvOI3%2BXpOY7ZtARHn9YRpySiTSUGm7DqNg%3D%3D&c=212547003995884439602581&n=g6DlMZ2fT1oaWHM798%2BM0Lt5nVuXNLkEvas%2FztbTM2Un67L%2BgBwLnudp8mKckMW029vcqPQ9LK8dTuFk4z%2FAlTosNb6rd9pDTSUFQ42%2FC5509MW1RNMpSrVpoEKX%2F4QYfUqUT6WLjXnETgqEFBiUPvLIsgL46QVAhszcF6DmTswzBX5L4aNcdHwy2W4NpMF%2Fl80SRcZJ4jdD2mpoZwTuPDxPbkAbr5BAUU83GfDXRUQp6CVa%2Fm8yPo5UazDhYWGGz%2F8AQK0x%2FnICjj3%2FdNY7Sp5f9W1Omzy6SzoxNSCDypqBV8LRx0xdNJfkZkfe9EckwxEO%2BS%2BRfuaofPT5oPWO9V2JDCuupSGbScckQDugztax27vVGRXC2rASQrAzG0OsaSp8xdq45g6RtU1cCtdw7yn1Py6aEsOQwQ4rC5h0CANVdjM0LpI2YpbpQ6ubKq%2Fnr5Comk5zU6Z0zkQ%2F4f5x6qcpOUggVSzHI8l2Srg2IWa%2B0MNyDv%2BYJVp8cdfqkuizvnfzlsWAXtJqAA6XIn%2BOcoJZr17u6X2lkLTGdPAwovHz%2BfbWWaqc03uUam2Pw9MwVDIiobW53GGDo1FWmfZajf9LpuLrXIGD%2FP22WdTDzp9s5ibLPIflUah6XU4dBpMIzLSi%2BGf6W8wtrGmGmCY0TZnhazED%2BFjG0O0zCaMD63YgubxezzdHdUkLO35CjmeaIP%2BQ0bPdqg4pFmrEwkxEuyaraMLjW9amVLfP9yyGT%2B1QSTMYpoxxYud%2FFYP%2BQgvshD%2FBhfkzv2MG42AkTTTdw3msNA3%2FVE7d6Ngy37W9y8Pc2IzNE72TN%2FfOOhiywQKEIBUr8j6q18QlK9p%2FNjv6ZJNmUBAs%2F1VkczugdUFEPX47extI1KFLfuI6CoWo7brQpNxQI%2BqYP785pBuV91QRTJDiEEbOokxu8t0HIatN3txPtczsy9lCi
Source: global traffic	HTTP traffic detected: GET /Flatbed_Truck_Driving_Jobs.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc6TEPjii6jYyypXxZ4eYyija1oDOtc2I3nx4b%2BUMzFr2c%2FSLfe32iW2HH9q1ePVrxViaalLTTLGyJVWvW5wwyXnk0jGXhUCnigLLVRCzgQ%2Bqa%2BQ7kdoV3Prt2jVq2JIvbEY2Sy%2BlXVGBWokdZSGlvUcAtSWlTxaaJ6vtQd06Kdk1nLhN0fK4ZddBdusz%2Ba%2B4b5VUu3xTRNTeb%2BQEyZFOwuNbMfSEhVodK1RZgbaaONJTbSSfzHB3hSN4H%2Fhjew%2FV%2F2qn2geIorBIGVe8ihORHIvWa9m47FAM1VYbgstMUVFew55MOVOnVfz9%2F3wP9op%2FJdBOQEJ43Iyyhk5bv5IkaaQkmahSo57X7l%2FMZUPXy1JQU6%2F6SK5OBqOjsOztIJI%2FVVafAbGHp7mQ%2BNM7WdgsxJzmRjqbRFV5xZEYb3qkUfRTjeTewHOngd8mFDFv%2B3QCJ101a%2FS7zKV%2FRzq1pebGcywM1t%2FoqCdH3Gh%2F7IfGvgMIrQTiTjdCZWOR%2F5shU74SCxaDbOTGlbbsWMwtODtId1%2BiCgY5XQAHcyDjHD%2Bg3T3ktNbRX7bF7f8ai5iLcllrUsqhNrewG9cmGZj3%2FFhPkTyVr%2FnKpXUeeXa%2FQiF5KpiAf4b0AWLY%2FFHcUqTyjyIrMexuiedMZnTUqo8YnBatBorqKlaZOWnm0%2FsrVNoisJ60CPABKIQ0%2FI0jk%2Fy6J89xswtQCWz6VUSSeWiSckpuUX0EG21Wfgb2zeLmE81Dnrku%2BrT9gXXwQJTRTPsi28z8YXodHl8rDAdx2paTV8uwr5H22Hdk9KnbaHx%2BhkE%2F2EaLaBA2apEQAZxGxEGgg2LoG%2FSX3tLFqFSSiK46HhhFAW7yhI1OWTcMYhRKRZivIAeLnvPC2rCaPur0MWGhd%2BsXcmvqy2%2Bs93uTqsNSyNxZtdcEc%2FJ%2Bz%2B5WOIg%2BoZPG4yDSb9hyEIRcsRsA8ybsXyIJCmarUMDiRUVCgQrTC4oWzFPGuaupZTR34nxdv%2B00eZl%2BMLAyNYPM1gGyB6aC4IYjxv5xIlfmnGLG3l6lxGXE5viAqfh2bQ7lsnjzaZbgn%2B0ko9b4bWbIQ9XKNyOS4oC5tGmapfR3vtg%3D%3D&gtnp=0&gtpp=0&tp1=cf37f022-d980-4854-884d-1e3949811b21&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=uizcpS2vK%2BPE8C3jtYNgThNeVom%2Bc90lAaNmJ8t%2FDFo%3D&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&gtnp=0&gtpp=0&kt=210&&kbc=707&ki=11028627&ktd=0&kld=1003&kp=3&bd=-4%231024%231280%231%230 HTTP/1.1Host: ww01.rotect.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: vsid=919vr470039
Source: global traffic	HTTP traffic detected: GET /__media__/js/min.js?v2.3 HTTP/1.1Host: i3.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/29590/bg1.png HTTP/1.1Host: i3.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/res-arw.png HTTP/1.1Host: i3.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1Host: i3.cdn-image.comConnection: keep-aliveOrigin: http://ww01.rotect.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-medium/montserrat-medium.woff HTTP/1.1Host: i3.cdn-image.comConnection: keep-aliveOrigin: http://ww01.rotect.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1Host: i3.cdn-image.comConnection: keep-aliveOrigin: http://ww01.rotect.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/js/min.js?v2.3 HTTP/1.1Host: i3.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/29590/bg1.png HTTP/1.1Host: i3.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/res-arw.png HTTP/1.1Host: i3.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Job_Vacancies_Jobs.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc6TEPjii6jYyypXxZ4eYyija1oDOtc2I3nx4b%2BUMzFr2c%2FSLfe32iW2HH9q1ePVrxViaalLTTLGyJVWvW5wwyXnk0jGXhUCnigLLVRCzgQ%2Bqa%2BQ7kdoV3Prt2jVq2JIvbEY2Sy%2BlXVGBWokdZSGlvUcAtSWlTxaaJ6vtQd06Kdk1nLhN0fK4ZddBdusz%2Ba%2B4b5VUu3xTRNTeb%2BQEyZFOwuNbMfSEhVodK1RZgbaaONJTbSSfzHB3hSN4H%2Fhjew%2FV%2F2qn2geIorBIGVe8ihORHIvWa9m47FAM1VYbgstMUVFew55MOVOnVfz9%2F3wP9op%2FJdBOQEJ43Iyyhk5bv5IkaaQkmahSo57X7l%2FMZUPXy1JQU6%2F6SK5OBqOjsOztIJI%2FVVafAbGHp7mQ%2BNM7WdgsxJzmRjqbRFV5xZEYb3qkUfRTjeTewHOngd8mFDFv%2B3QCJ101a%2FS7zKV%2FRzq1pebGcywM1t%2FoqCdH3Gh%2F7IfGvgMIrQTiTjdCZWOR%2F5shU74SCxaDbOTGlbbsWMwtODtId1%2BiCgY5XQAHcyDjHD%2Bg3T3ktNbRX7bF7f8ai5iLcllrUsqhNrewG9cmGZj3%2FFhPkTyVr%2FnKpXUeeXa%2FQiF5KpiAf4b0AWLY%2FFHcUqTyjyIrMexuiedMZnTUqo8YnBatBorqKlaZOWnm0%2FsrVNoisJ60CPABKIQ0%2FI0jk%2Fy6J89xswtQCWz6VUSSeWiSckpuUX0EG21Wfgb2zeLmE81Dnrku%2BrT9gXXwQJTRTPsi28z8YXodHl8rDAdx2paTV8uwr5H22Hdk9KnbaHx%2BhkE%2F2EaLaBA2apEQAZxGxEGgg2LoG%2FSX3tLFqFSSiK46HhhFAW7yhI1OWTcMYhRKRZivIAeLnvPC2rCaPur0MWGhd%2BsXcmvqy2%2Bs93uTqsNSyNxZtdcEc%2FJ%2Bz%2B5WOIg%2BoZPG4yDSb9hyEIRcsRsA8ybsXyIJCmarUMDiRUVCgQrTC4oWzFPGuaupZTR34nxdv%2B00eZl%2BMLAyNYPM1gGyB6aC4IYjxv5xIlfmnGLG3l6lxGXE5viAqfh2bQ7lsnjzaZbgn%2B0ko9b4bWbIQ9XKNyOS4oC5tGmapfR3vtg%3D%3D&gtnp=0&gtpp=0&tp1=cf37f022-d980-4854-884d-1e3949811b21&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=uizcpS2vK%2BPE8C3jtYNgThNeVom%2Bc90lAaNmJ8t%2FDFo%3D&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&gtnp=0&gtpp=0&kt=210&&kbc=707&ki=321217634&ktd=0&kld=1003&kp=4&bd=-4%231024%231280%231%230 HTTP/1.1Host: ww01.rotect.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: vsid=919vr4700399215346
Source: global traffic	HTTP traffic detected: GET /__media__/js/min.js?v2.3 HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/29590/bg1.png HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/res-arw.png HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/js/min.js?v2.3 HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveOrigin: http://ww01.rotect.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveOrigin: http://ww01.rotect.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/fonts/montserrat-medium/montserrat-medium.woff HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveOrigin: http://ww01.rotect.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww01.rotect.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/29590/bg1.png HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__media__/pics/28905/res-arw.png HTTP/1.1Host: i2.cdn-image.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Allied_Medical_Driver.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc6TEPjii6jYyypXxZ4eYyija1oDOtc2I3nx4b%2BUMzFr2c%2FSLfe32iW2HH9q1ePVrxViaalLTTLGyJVWvW5wwyXnk0jGXhUCnigLLVRCzgQ%2Bqa%2BQ7kdoV3Prt2jVq2JIvbEY2Sy%2BlXVGBWokdZSGlvUcAtSWlTxaaJ6vtQd06Kdk1nLhN0fK4ZddBdusz%2Ba%2B4b5VUu3xTRNTeb%2BQEyZFOwuNbMfSEhVodK1RZgbaaONJTbSSfzHB3hSN4H%2Fhjew%2FV%2F2qn2geIorBIGVe8ihORHIvWa9m47FAM1VYbgstMUVFew55MOVOnVfz9%2F3wP9op%2FJdBOQEJ43Iyyhk5bv5IkaaQkmahSo57X7l%2FMZUPXy1JQU6%2F6SK5OBqOjsOztIJI%2FVVafAbGHp7mQ%2BNM7WdgsxJzmRjqbRFV5xZEYb3qkUfRTjeTewHOngd8mFDFv%2B3QCJ101a%2FS7zKV%2FRzq1pebGcywM1t%2FoqCdH3Gh%2F7IfGvgMIrQTiTjdCZWOR%2F5shU74SCxaDbOTGlbbsWMwtODtId1%2BiCgY5XQAHcyDjHD%2Bg3T3ktNbRX7bF7f8ai5iLcllrUsqhNrewG9cmGZj3%2FFhPkTyVr%2FnKpXUeeXa%2FQiF5KpiAf4b0AWLY%2FFHcUqTyjyIrMexuiedMZnTUqo8YnBatBorqKlaZOWnm0%2FsrVNoisJ60CPABKIQ0%2FI0jk%2Fy6J89xswtQCWz6VUSSeWiSckpuUX0EG21Wfgb2zeLmE81Dnrku%2BrT9gXXwQJTRTPsi28z8YXodHl8rDAdx2paTV8uwr5H22Hdk9KnbaHx%2BhkE%2F2EaLaBA2apEQAZxGxEGgg2LoG%2FSX3tLFqFSSiK46HhhFAW7yhI1OWTcMYhRKRZivIAeLnvPC2rCaPur0MWGhd%2BsXcmvqy2%2Bs93uTqsNSyNxZtdcEc%2FJ%2Bz%2B5WOIg%2BoZPG4yDSb9hyEIRcsRsA8ybsXyIJCmarUMDiRUVCgQrTC4oWzFPGuaupZTR34nxdv%2B00eZl%2BMLAyNYPM1gGyB6aC4IYjxv5xIlfmnGLG3l6lxGXE5viAqfh2bQ7lsnjzaZbgn%2B0ko9b4bWbIQ9XKNyOS4oC5tGmapfR3vtg%3D%3D&gtnp=0&gtpp=0&tp1=cf37f022-d980-4854-884d-1e3949811b21&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=uizcpS2vK%2BPE8C3jtYNgThNeVom%2Bc90lAaNmJ8t%2FDFo%3D&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&gtnp=0&gtpp=0&kt=210&&kbc=707&ki=326693500&ktd=0&kld=1003&kp=5&bd=-4%231024%231280%231%230 HTTP/1.1Host: ww01.rotect.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: vsid=919vr4700399215

Source: chromecache_157.2.dr	String found in binary or memory: <a href="http://ww01.rotect.com/trf?q=Allied+Medical+Driver&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9OTQ4MjE2MTIzQUM3NDcwQiZ1dD0xNzIyNDk0Mzk5Mzc0JnVvPTgxMjk1MjYzNTIzOTUxJmx0PTImcz0yJmVzPVB6aXVOaWNCN1o1YjRUV2pJOGYuZm8uUnhTUk9DQWN6N3RKMS5tNUd5TGRaNjNMWXRQVUZVU1BfYXFNTjVWdUx3Q2trSjNvQ25ZcDVtdy0t%2FRV%3D2%2FRE%3D1725086399%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de86qK67X33dOYyvM96W-Qx_DVUCUzX40W-OuiK15imgOf-raj2Mq9p26xIBd-9wQt8N_CL5CgBQzAbD45jGAGwxGb3_JQWgawl-ej3AI_R8pE9okS85-neI0OjqAkLCSRFLDPmrClTKMlL2iKZUeMQphjiwGfxbVXLB84FKyEy4ZCjYyMm%2526u%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%2526rlid%253d16d393109e0310da825df5bbb3bc7844%2FRK%3D2%2FRS%3DxsB2IYBq_ErI92oGoLy1LbHX28M-&o=qfnFVr%2BNqSQeYEVcv%2FZx5kNOsCBOd7Xswx01SVcPREPqDLJbFjmy6578JkfE%2BNCwqkUyPpLTPh1jk4Fli76jlWnLuLJXga13Pb3ji5QsNup5LmwWzNrthxUKOc%2Frf30QY7PQ1zBdnORDUK%2F6bdroQU7SD68WWGrIyNtTSs34TnBXukbcdPtH2c3cLdCLC%2FYIGJ0crgV848XfhaO74NAE9jpQkCjxf3j%2FgkbaVa%2B8LDr4aRNgheCFhqyh61rwQ6fguGbQxZ6IMngLLAP1oBYxBt74ffvDDIdFqhQv%2FdCEtZ3qZTkvX3TsbVAwLYQGOM2cE9iRcWboo4sz1MlPh1iCHd5uK492tU0mD82vNlurwCw15WvIauULU2nDHBGR8RdEgAX97vAyhfk9FqELWL7V32IQ9R1FLMNww2EkSbPP5oVvId5tDyuttq0PfhKhyDl14yMAQ9LeLEqhVPEFYCmZknCm4MUcR46Ilh4dwTfMhquviyVJdDuShoRk1Sv9B2bFJud%2FDNtMkaua3VLMUTZgGcaOvPsKR5i83OsxccdFY6VebyWMDB9l2SvTnuOJ6hF0szxWPYODg24MFQnYFmVRPPJ1TGVr2fh7%2BRIgKhO%2FQEmBnEajrEKb%2BSVWAYq0kbS4VMZv3AIz1xGktRZuwUVA6A%3D%3D&c=212147003998282124152686&n=g6DlMZ2fT1oaWHM798%2BM0F1O8MxUSiQpHX7Vncb7xXI5i%2BmVTlNZ4Od35GYs8tRdroUgpAvOVUjXSp1DzNA1Agj%2FpLb2dLk2l3bHf8QbywqHCAfLr11%2FPWht0X6P00MlwnOC9in%2FEV9Q%2BENn%2Bl9tjtdawMUKgIdkPjylJrx7tIKS5r2%2Bv3YrwpafB3BgVuJT9rBbWg0fsFoN%2F0oWOnI5E3UN9Jzmww%2FmQf%2BrnJ4AgkizGxDijhVP2Bqxuq4gCWdmIh9q5H7CMGhNLsIzd228xpIlv%2FY57pk6beMDbSgrb00%2F%2BwQO%2FShCMX89i9xaElVezJOU19fz0UbLZI7D5hC0qUmdhaC1b5Ruc41p5mVnYv5hzcFPMKo3gHlDMXIZG5S57WG8anAVKeZbSSTnsuubk8Bvmia%2FErveule46HokFv1gO9iwBnkAtoYy114j8Sx2KwJC0%2ByE43q0zszelkHW8%2BBh3V3llL8753SwKBGWhk4WKLWuwqVe3WWPUi%2BQlG%2Ftn2zictHE2G6oR6LRh9NiTkZE5x56jcNiK84fDtt%2B6BFU%2FyCBgAriBJxjojdXfnmMxJ99Hw0xu%2FI%2BSi0CsvyP9Ns%2FXLH7Ceb5Vdor6ihsi7TZwJD%2BAOlykTdR216cRSqbk2ecNVQ5B%2BfhOy5zXLXNkKiZzfhF9yDT9fWv5AvUJGd2QjAioZSAyJPd6IzsvId%2FSfGV7lGz85i9nLnD32UQ5QPoVyGqZlMZ0E0UTHLjmTfleKCYPI5mZHOFkG9EGMhrRZQQy5srvAphQI0PSSz7%2B30FCJ1lWMMERyQ%2FoQtNikhPkqL%2B1fR6dy8tnGY8zuJtb9nDnp5ixI5FSaJr%2FXqPvnIneUwXmPaQeEoTbpwSIhrtFetjbQR4PYcEPYRTB2SJ%2BNRbBjMSExuZ406UiMf52iGeCHzGa5KJi8MO2GIJa9TMiVFycLmwCvZfQFC%2B3IJzUM3vvN9HeGylr%2BJRu0bcsY%2FH
Source: chromecache_157.2.dr	String found in binary or memory: <a href="http://ww01.rotect.com/trf?q=Allied+Medical+Driver&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9OTQ4MjE2MTIzQUM3NDcwQiZ1dD0xNzIyNDk0Mzk5Mzc0JnVvPTgzNTYzMjc4MTAwNzg4Jmx0PTImcz0yJmVzPTJEbXV5RGZCNjF1Y2dJZnZRS1FNcjBwRmJSYVFSMndsNm5RNkthdERDc0EucWdEUUJNQmFicENJUDBYb0RXUlRGRDB6WktxTDc1M1N3WTgt%2FRV%3D2%2FRE%3D1725086399%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8K5yrXk9mPKr0DmlqrI1DajVUCUy_JVOtvCgPTHqIrV8E4aW4VWdkxn7Ll8p9Rc_1eH5TjbV7uFcX0KWNdAig-Ha5bRsX76qyNLLCbccQOIeg43yWhmHJ3Vph2tV9sIT5F-XnWf7o4WYGC7RUqaknr0RdjOtu2H8r02FhNoacb5Jfrte4%2526u%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%2526rlid%253d51c7142f58b21d06e6357284750d6ea7%2FRK%3D2%2FRS%3DgmwUo3Lj8PifVxv3N2ibJ86H8Zs-&o=qfnFVr%2BNqSQeYEVcv%2FZx5kNOsCBOd7Xswx01SVcPREPqDLJbFjmy6578JkfE%2BNCwqkUyPpLTPh1jk4Fli76jlWnLuLJXga13Pb3ji5QsNup5LmwWzNrthxUKOc%2Frf30QY7PQ1zBdnORDUK%2F6bdroQU7SD68WWGrIyNtTSs34TnBXukbcdPtH2c3cLdCLC%2FYIGJ0crgV848XfhaO74NAE9jpQkCjxf3j%2FgkbaVa%2B8LDr4aRNgheCFhqyh61rwQ6fguGbQxZ6IMngLLAP1oBYxBt74ffvDDIdFqhQv%2FdCEtZ3qZTkvX3TsbVAwLYQGOM2cE9iRcWboo4sz1MlPh1iCHd5uK492tU0mD82vNlurwCw15WvIauULU2nDHBGR8RdEgAX97vAyhfk9FqELWL7V32IQ9R1FLMNww2EkSbPP5oVvId5tDyuttq0PfhKhyDl14yMAQ9LeLEqhVPEFYCmZknCm4MUcR46Ilh4dwTfMhquviyVJdDuShoRk1Sv9B2bFJud%2FDNtMkaua3VLMUTZgGcaOvPsKR5i83OsxccdFY6Xhp4Mw%2FitNTHa%2F4NFsGd7i9DxNeoU1%2B2%2FHFH0KS0zzbyE4TUHsdww4RlD2LO2MNJSbrEZ8Fo1jIiKkEFt7yGSLsRWgcXkwsqj0II0QrQTq8g%3D%3D&c=212147003998282124151611&n=g6DlMZ2fT1oaWHM798%2BM0F1O8MxUSiQpHX7Vncb7xXI5i%2BmVTlNZ4Od35GYs8tRdroUgpAvOVUjXSp1DzNA1Agj%2FpLb2dLk2l3bHf8QbywqHCAfLr11%2FPWht0X6P00MlwnOC9in%2FEV9Q%2BENn%2Bl9tjtdawMUKgIdkPjylJrx7tIKS5r2%2Bv3YrwpafB3BgVuJT9rBbWg0fsFoN%2F0oWOnI5E3UN9Jzmww%2FmQf%2BrnJ4AgkizGxDijhVP2Bqxuq4gCWdmIh9q5H7CMGhNLsIzd228xpIlv%2FY57pk6beMDbSgrb00%2F%2BwQO%2FShCMX89i9xaElVeR9sAMDLcVItS27MF5pNxPbRB4W4W1gB54TXxg5pd2yW9B3Ig%2Fdq1%2BMb0K7cB2AmugMJ4YWH5LWNutEKb4Ci6YgpizlgSHb3PADBMUGspPsmBrG%2BT%2B9igags4UunwUOZ0t660H6BceKWOIh1NMT0Vcz5vkdH2JCwqFTWCgtTgBnLhKfdvVpYfgnjyXqETi%2Fh18Sta%2B0UL34cL%2FNuB3tg4HqaHForAAsgVKMqmeqcTDJUiJ%2BNMDV8Htkev1C8KPSIFVPbI%2BsY7e09dWqltps%2FgGKW46cwCslW3H8%2FX2mhh3pJsylAuOako%2F%2F5s71jyejuqo5WODYN3JZwGJnGXwBz2bDVKskkJ7Ifu5BpHgXGFt777KOv997KNv2Du6hXFOfHTQOIFGoOeX%2BYOjpU23ZloXoBPPmr%2Fle8PQIXzdyxB4on5gvuxr7VhJeiSGuIYntpiBewYCZ0PCc982KnlGC2q2184YYyJ66rsT%2FfOtNCAxg2JrazjarVAEwl6VOmN%2B8%2BjqtqoE7viqdx6eU
Source: chromecache_165.2.dr	String found in binary or memory: <a href="http://ww01.rotect.com/trf?q=Allied+Medical+Winslow+Az+Driver&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9QjNERUZDNjRCM0EwNDY0RiZ1dD0xNzIyNDk0Mzc1MzcxJnVvPTc5NDM5ODI0NzAxMjczJmx0PTImcz0yJmVzPTJrOE80c041LjJyeUFzUlhaVmhQRDRWdEpMTHZMZkpkaWFjMzJLdW5CeW5acWNHTlVFNzU0TFNrNVpCbF91X0ladk8zRW96MFBvWEVRZy0t%2FRV%3D2%2FRE%3D1725086375%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8v9GQKnSqbyIt5XJpxiXAnzVUCUyllzQWO0olRcqZ1Mxpl8hcj3k6uecA0aoixs6Hd6ZuFeylLYSaV5ljQB7mvLXU8niOntuCp_PYaUOGG1vmtyqwbH_w0cDm-N2qwwYYDZIFc_3sBEEXxkKf9T0GXMOd18WJb3Z3C422QHJUbROA8ND5%2526u%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%2526rlid%253d409fb85eab00133df3acdef586a7d8bb%2FRK%3D2%2FRS%3DaAi_RaFNNNPmV5xsOY2SpL3Aqhk-&o=qfnFVr%2BNqSQeYEVcv%2FZx5kNOsCBOd7Xswx01SVcPREPqDLJbFjmy6578JkfE%2BNCwqkUyPpLTPh1jk4Fli76jlWnLuLJXga13Pb3ji5QsNup5LmwWzNrthxUKOc%2Frf30QY7PQ1zBdnORDUK%2F6bdroQU7SD68WWGrIyNtTSs34TnBXukbcdPtH2c3cLdCLC%2FYIGJ0crgV848XfhaO74NAE9jpQkCjxf3j%2FgkbaVa%2B8LDr4aRNgheCFhqyh61rwQ6fguGbQxZ6IMngLLAP1oBYxBt74ffvDDIdFqhQv%2FdCEtZ3qZTkvX3TsbVAwLYQGOM2cE9iRcWboo4sz1MlPh1iCHd5uK492tU0mD82vNlurwCw15WvIauULU2nDHBGR8RdEgAX97vAyhfk9FqELWL7V32IQ9R1FLMNww2EkSbPP5oVvId5tDyuttq0PfhKhyDl14yMAQ9LeLEqhVPEFYCmZknCm4MUcR46Ilh4dwTfMhquviyVJdDuShoRk1Sv9B2bFJud%2FDNtMkaua3VLMUTZgGcaOvPsKR5i83OsxccdFY6Ud7uQsYjK7Kh6%2B2uHI0Tn2AZ4uZwcOm333uCCgXqDQL4ISLxesm7NuF71vQyxQz5AdFQSLifOjsvOI3%2BXpOY7ZtARHn9YRpySiTSUGm7DqNg%3D%3D&c=212547003995884439602581&n=g6DlMZ2fT1oaWHM798%2BM0Lt5nVuXNLkEvas%2FztbTM2Un67L%2BgBwLnudp8mKckMW029vcqPQ9LK8dTuFk4z%2FAlTosNb6rd9pDTSUFQ42%2FC5509MW1RNMpSrVpoEKX%2F4QYfUqUT6WLjXnETgqEFBiUPvLIsgL46QVAhszcF6DmTswzBX5L4aNcdHwy2W4NpMF%2Fl80SRcZJ4jdD2mpoZwTuPDxPbkAbr5BAUU83GfDXRUQp6CVa%2Fm8yPo5UazDhYWGGz%2F8AQK0x%2FnICjj3%2FdNY7Sp5f9W1Omzy6SzoxNSCDypqBV8LRx0xdNJfkZkfe9EckwxEO%2BS%2BRfuaofPT5oPWO9V2JDCuupSGbScckQDugztax27vVGRXC2rASQrAzG0OsaSp8xdq45g6RtU1cCtdw7yn1Py6aEsOQwQ4rC5h0CANVdjM0LpI2YpbpQ6ubKq%2Fnr5Comk5zU6Z0zkQ%2F4f5x6qcpOUggVSzHI8l2Srg2IWa%2B0MNyDv%2BYJVp8cdfqkuizvnfzlsWAXtJqAA6XIn%2BOcoJZr17u6X2lkLTGdPAwovHz%2BfbWWaqc03uUam2Pw9MwVDIiobW53GGDo1FWmfZajf9LpuLrXIGD%2FP22WdTDzp9s5ibLPIflUah6XU4dBpMIzLSi%2BGf6W8wtrGmGmCY0TZnhazED%2BFjG0O0zCaMD63YgubxezzdHdUkLO35CjmeaIP%2BQ0bPdqg4pFmrEwkxEuyaraMLjW9amVLfP9yyGT%2B1QSTMYpoxxYud%2FFYP%2BQgvshD%2FBhfkzv2MG42AkTTTdw3msNA3%2FVE7d6Ngy37W9y8Pc2IzNE72TN%2FfOOhiywQKEIBUr8j6q18QlK9p%2FNjv6ZJNmUBAs%2F1VkczugdUFEPX47extI1KFLfuI6CoWo7brQpNxQI
Source: chromecache_165.2.dr	String found in binary or memory: <a href="http://ww01.rotect.com/trf?q=Allied+Medical+Winslow+Az+Driver&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9QjNERUZDNjRCM0EwNDY0RiZ1dD0xNzIyNDk0Mzc1MzcxJnVvPTcyNjM2NTk4MDM0MDA2Jmx0PTImcz0yJmVzPXdHUDZmQ0syaU5pVWFSVmROR1JRWkh0UENPRHVwSGxUQ09HTUVGbEtJTTZkNHVpYm5CUG92ek00cHNsRS5ueXltM002M0hkZTJ6QUw3U2ct%2FRV%3D2%2FRE%3D1725086375%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8KmPaDfJWLL8msemib_DPUTVUCUzVHe_b56-gAQOrzpDYKUQpckkPaZaxhGYkyBrgkR4MbCGaioIMaKOexqe70vHDDVL3j7gEChn-rQUvJKisuGTpHYv2hgnVAxMxcLZvoRZoe1348WRknTbWgrMn4H0co9btlI8i309MPUTAYoOOUd-L%2526u%253daHR0cHMlM2ElMmYlMmZFbXBsb3ltZW50Lm9yZyUyZnMlM2Z1dG1fdGVybSUzZGFsbGllZCUyNTIwaGVhbHRoJTI1MjBqb2JzJTI2dXRtX3NvdXJjZSUzZGJpbmclMjZ1dG1fbWVkaXVtJTNkY3BjJTI2dXRtX2NhbXBhaWduJTNkbWFpbiUyNmtpZCUzZDcyNjM2ODk3NzA5NDAxJTI2cGFydHklM2QzMjElMjZtc2Nsa2lkJTNkNjNjYjg4ZDdiZDA2MTU3N2NmYWNlZTdjOTBhMWZiYjU%2526rlid%253d63cb88d7bd061577cfacee7c90a1fbb5%2FRK%3D2%2FRS%3DPNr6zbpWJMG6S0wAwwdzBp3Upt4-&o=qfnFVr%2BNqSQeYEVcv%2FZx5kNOsCBOd7Xswx01SVcPREPqDLJbFjmy6578JkfE%2BNCwqkUyPpLTPh1jk4Fli76jlWnLuLJXga13Pb3ji5QsNup5LmwWzNrthxUKOc%2Frf30QY7PQ1zBdnORDUK%2F6bdroQU7SD68WWGrIyNtTSs34TnBXukbcdPtH2c3cLdCLC%2FYIGJ0crgV848XfhaO74NAE9jpQkCjxf3j%2FgkbaVa%2B8LDr4aRNgheCFhqyh61rwQ6fguGbQxZ6IMngLLAP1oBYxBt74ffvDDIdFqhQv%2FdCEtZ3qZTkvX3TsbVAwLYQGOM2cE9iRcWboo4sz1MlPh1iCHd5uK492tU0mD82vNlurwCw15WvIauULU2nDHBGR8RdEgAX97vAyhfk9FqELWL7V32IQ9R1FLMNww2EkSbPP5oVvId5tDyuttq0PfhKhyDl14yMAQ9LeLEqhVPEFYCmZknCm4MUcR46Ilh4dwTfMhquviyVJdDuShoRk1Sv9B2bFJud%2FDNtMkaua3VLMUTZgGcaOvPsKR5i83OsxccdFY6Vzyrmg7qtX5ptzKQYpQ%2B%2BX5nqL9rdba5acd1QmjKDuNV%2B7DGHl48ekPbHKH5MyI30woE0VPUZoazdnLod2sLMHNZ%2BlVIryDuiegDM9d0Lhbw%3D%3D&c=212547003995884439601488&n=g6DlMZ2fT1oaWHM798%2BM0Lt5nVuXNLkEvas%2FztbTM2Un67L%2BgBwLnudp8mKckMW029vcqPQ9LK8dTuFk4z%2FAlTosNb6rd9pDTSUFQ42%2FC5509MW1RNMpSrVpoEKX%2F4QYfUqUT6WLjXnETgqEFBiUPvLIsgL46QVAhszcF6DmTswzBX5L4aNcdHwy2W4NpMF%2Fl80SRcZJ4jdD2mpoZwTuPDxPbkAbr5BAUU83GfDXRUQp6CVa%2Fm8yPo5UazDhYWGGz%2F8AQK0x%2FnICjj3%2FdNY7Sp5f9W1Omzy6SzoxNSCDypqBV8LRx0xdNJfkZkfe9EckVLiI741eoQaYbfkI6QmCnYQ19knRq5Z6z4CnssPdRzhQ3mWfDcYPMNoJrFFcgfzQBDE4kmx4Ec1OYQ2NSImrLTwgri7e9YCdWe4InRXopWvUcFbsv4k4nftoMHykm9ldmLjD6nvzgQteHbHp3lZIJX8MWTsInlcIlP7CivrQoSfX7bKIYF79FI6a2s51KzXtPAyP07uVbaFm9ur8swUijl4XKSuJdwHXvdIkgIgIY5LtFoiROGBSCt8SxfvyyRn8AoQbDPm0I6Zi2Kdra63ABtXPy7WwKyoSkbE%2B4OgNBuoIH5kCih%2BLvHBgARdOltoA9toG4wyTkTsHBJso7vo6BxLm3KmKqpw8k8GGNGHM%2FN%2Fcl%2FdIEd9Hw0r50UVAVEusl98tcUSIlDH6teofDWX0xGyergFlfTgADU4aiFcAjM8aa%2BMavG7u1PfKsF4xblsybnjUHA8O7oerrMDC31G4jeuOE7%2BPzWaxRehf8edKJbPGHydxasyusZ92Va9iFIwHGmVEY7YGz5ZaCob9yOqD0JJuePwfpOStfuHeesx%2Ff%2FgOx5BL0pKaz7wZeoI0bJsvu9UN7N3OXo%2BDt1oD3ttHykHF1J8w6TPsAaYPO4UKe0%2BDb8nYCGQnKcuipBJiF%2FD30zklTYtekI6LxLfi6M3%2Fjx1EEvQJ%2FxjwFsidCoabRNZ7BvA2lnHQXFiyiwSdusn%2BfklHkCiwySj%2Brwx6oXbVNcQl0yjafg9z7CraFhkmCiHBKPDB8SYWX4rQyvFOggXqYVI8cO6hnTbEzH7lvAi5GTtAryWKCP%2BRlO7CMwzn9rkDoINsoOp4wrPiUpbWqGVhLrcX1ZUYDp%2FgpfEDyQLC8yj3LgW%2BnZTfDMrnvIPpGT4QzQ9YUGdJ3Poj
Source: chromecache_171.2.dr	String found in binary or memory: <a href="http://ww01.rotect.com/trf?q=Customer+Service+Support&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9OTg3NzI4NDNFMjZBNEIyQiZ1dD0xNzIyNDk0MzYxNDUwJnVvPTc4MjAyOTY4MDQ4NzgxJmx0PTImcz0yJmVzPVNfNXU0WDFqMmFYbkdOd1kuUkpWNWxFek9iSlNBMHAwb1ZLYlRYWGoyRERiMi4udTdEWEpYMHRldEhIc2xiLkdtajg5aWlqYkJ0VGpFbWt4%2FRV%3D2%2FRE%3D1725086361%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8k4YwntxTTSJ3pjCdJcEi0DVUCUylND8Iss8blWsEl4FPkDmdC3ng-dLrXBoA8SwiWe1BVTv3SRqIUTGfg6bUf8uxWk9GX-bhCR5eQuMNS7Gc1Hul4T4RotK4rsKYbESbbZSiya3k5Wm_-mEREK6PpWyTDZl_cKR_tuOa7ekdaPcCCDNR%2526u%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%2526rlid%253d2895040d7f52114f837462a652cb27d7%2FRK%3D2%2FRS%3DnCXp0x1b1QvOi5rZoASWln9SiPg-&o=qfnFVr%2BNqSQeYEVcv%2FZx5kNOsCBOd7Xswx01SVcPREPqDLJbFjmy6578JkfE%2BNCwqkUyPpLTPh1jk4Fli76jlWnLuLJXga13Pb3ji5QsNup5LmwWzNrthxUKOc%2Frf30QY7PQ1zBdnORDUK%2F6bdroQU7SD68WWGrIyNtTSs34TnBXukbcdPtH2c3cLdCLC%2FYIGJ0crgV848XfhaO74NAE9jpQkCjxf3j%2FgkbaVa%2B8LDr4aRNgheCFhqyh61rwQ6fguGbQxZ6IMngLLAP1oBYxBt74ffvDDIdFqhQv%2FdCEtZ3qZTkvX3TsbVAwLYQGOM2cE9iRcWboo4sz1MlPh1iCHd5uK492tU0mD82vNlurwCw15WvIauULU2nDHBGR8RdEgAX97vAyhfk9FqELWL7V32IQ9R1FLMNww2EkSbPP5oVvId5tDyuttq0PfhKhyDl14yMAQ9LeLEqhVPEFYCmZknCm4MUcR46Ilh4dwTfMhquviyVJdDuShoRk1Sv9B2bFJud%2FDNtMkaua3VLMUTZgGcaOvPsKR5i83OsxccdFY6WwHhvR9TP8tV1OwwRL%2FTBjIIFxhjVm3DCVdtlC5i6sZQzriUh0d3U6neITolzkhBTHpk%2FK3RzPLle7mQlaeB1iJ3rYjObnUWc4VgsSXUHMSQ%3D%3D&c=213247003994489844651283&n=3sGO3zkGqxgtRtuoH5j45vKPO2NfcbhpeY4r2k45M1Ysl%2B%2Fu7xuFIQX51%2B%2FA1An%2F19gE5URlfKVyPV5REkhmi3vjTRVSx%2FXX0kjg1iBkHuZ9EleXh3agXUxCHDLKg%2F7C1Uvp2I5KvMqjOm%2F853mjLY1EKBxEtszEWmZ0D%2BwPwAKVsEihToEYxpZnvBDGOLdNJBHd%2FLB5M0tTX3VSj3CMtA%2Bb%2B6r4rUQ%2B5Vc1F44l2LmDzVohkn0B6%2BnW%2BNU%2FsrCvZkjdB67kMqoWCd1TuxGeZ6oneEFucC%2BrcCsDvbOh4x%2FQITGgG4U7vBqcUKmB4ksGxSXGSex4MBrttWF9pe7%2F4P0titBgqHzNtYjTpMpaVOjhnDvXQjSw7AX3zTdWdjBPPsRRRR26xjjC2Rai9jVXkkYsxyzWk6hkZlV2G833zO%2BaMe8aMQllqt6VIINBznRf%2FZRqe%2FWr5RI3X5RvlK1jsUBzscjxGbJgojSl%2Fbsp0dDo0o%2FvY0emC%2FQMwYUjGL1PKGy4eJDYlndG4Bnzou9QoSQi7xxM1Rb%2BhHNJO%2FoW4QX7M5LJCWQsvJ6z%2BIlib4k2TYXcj45y%2BOf9Fg%2BiZWejYl8Ht2Wc7ADnOJRO8LpLPfnZXm5bVZTROqK5joikt123g%2FgfOVvwwQQ5t9YNGcOU1KWXlQaSzQeSXZ4pbwH8CQl4DBV%2FdLBtTqSTGlP3GIXNYbqTuKKNzM0RqDfuCdcD2vqWLFyGORnpq2DQf3s40quPaPv3jsRbekzrF0IjVX9eXZ7v%2Fb0J9qYz2j%2B1yd%2BM3Jz04fe
Source: chromecache_171.2.dr	String found in binary or memory: <a href="http://ww01.rotect.com/trf?q=Customer+Service+Support&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9OTg3NzI4NDNFMjZBNEIyQiZ1dD0xNzIyNDk0MzYxNDUwJnVvPTgzOTc1NjE0MDQwODQ3Jmx0PTImcz0yJmVzPUcyc0YydmZCNXo0OVFWaWE1ZlIyZmJjS2ZnRDRfTzUxYVRmblBCXzZPVV9DcVhfb3BDSzVrd04xakZYM1VnU25tUHR2UUJlX3lxazkxNVkt%2FRV%3D2%2FRE%3D1725086361%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8xAUGWlT1baLGQky_Ado-YzVUCUw7JUMsZHM18bK7VuqMHkOTbfJqGaz7iQucAUC5wN-Oy-kU0508iFIttPnuLJvjlC33VxgMJA_iVHVOUcHLfYqDHUA4pxbWgdqxKcGiEU37mb3CS143_Ic18Hcmk6wHwKm7df64dStQRuu3D1WpmFKg%2526u%253daHR0cHMlM2ElMmYlMmZhc2stY3Jldy5jb20lMmZkZW0lMmZnMWIlMmYlM2Z1dG1fc291cmNlJTNkYmluZyUyNnV0bV9tZWRpdW0lM2RjcGMlMjZ1dG1fY2FtcGFpZ24lM2Q0MjgyMjM1NjglMjZ1dG1fdGVybSUzZEN1c3RvbWVyJTI1MjBTZXJ2aWNlJTI1MjBTdXBwb3J0JTI2dXRtX2NvbnRlbnQlM2QxMzQzNjA0NjA2NzU1NTAwJTI2dXRtX25ldHdvcmslM2RzJTI2bXNjbGtpZCUzZGRhZjc2ZTQ4M2U0YzFjNGM2OTcwMDhlMzEzZDUwNWVm%2526rlid%253ddaf76e483e4c1c4c697008e313d505ef%2FRK%3D2%2FRS%3DsJ3QDmfl6ivYsYPX_cr4_In.I50-&o=qfnFVr%2BNqSQeYEVcv%2FZx5kNOsCBOd7Xswx01SVcPREPqDLJbFjmy6578JkfE%2BNCwqkUyPpLTPh1jk4Fli76jlWnLuLJXga13Pb3ji5QsNup5LmwWzNrthxUKOc%2Frf30QY7PQ1zBdnORDUK%2F6bdroQU7SD68WWGrIyNtTSs34TnBXukbcdPtH2c3cLdCLC%2FYIGJ0crgV848XfhaO74NAE9jpQkCjxf3j%2FgkbaVa%2B8LDr4aRNgheCFhqyh61rwQ6fguGbQxZ6IMngLLAP1oBYxBt74ffvDDIdFqhQv%2FdCEtZ3qZTkvX3TsbVAwLYQGOM2cE9iRcWboo4sz1MlPh1iCHd5uK492tU0mD82vNlurwCw15WvIauULU2nDHBGR8RdEgAX97vAyhfk9FqELWL7V32IQ9R1FLMNww2EkSbPP5oVvId5tDyuttq0PfhKhyDl14yMAQ9LeLEqhVPEFYCmZknCm4MUcR46Ilh4dwTfMhquviyVJdDuShoRk1Sv9B2bFJud%2FDNtMkaua3VLMUTZgGcaOvPsKR5i83OsxccdFY6VF5BKTQtOs8JPgxCCHH1pTQ%2FlqkfpnzeS3ScywjF21Bn82lLFpYWCpHja3a0c%2Ba1vquk4Dyf%2BnWjR0yXdCTHOpSUFi3m3I%2FaaF0jdcyYGfVA%3D%3D&c=213247003994489844652742&n=3sGO3zkGqxgtRtuoH5j45vKPO2NfcbhpeY4r2k45M1Ysl%2B%2Fu7xuFIQX51%2B%2FA1An%2F19gE5URlfKVyPV5REkhmi3vjTRVSx%2FXX0kjg1iBkHuZ9EleXh3agXUxCHDLKg%2F7C1Uvp2I5KvMqjOm%2F853mjLY1EKBxEtszEWmZ0D%2BwPwAKVsEihToEYxpZnvBDGOLdNJBHd%2FLB5M0tTX3VSj3CMtA%2Bb%2B6r4rUQ%2B5Vc1F44l2LmDzVohkn0B6%2BnW%2BNU%2FsrCvZkjdB67kMqoWCd1TuxGeZ6oneEFucC%2BrcCsDvbOh4x%2FQITGgG4U7vBqcUKmB4ksGNkXSFwnVFyvU1B9c6rjoXYANqumEJ7UhlDrlJlI5b%2BtTOi%2FjOxGbx25ETqV01wNTDmCk99w%2BM8B8h8BU99IUmq8rJIs8UFtc9NQojhK5WNeL72QCMRN%2BHuy1yQ%2BoJ0V3INyPP6kHw2%2B5u7U77RQ2GvRRaWyb3lGJtSqCVJ7wmTPZtCjsXYf%2FEnbH5qVuiFVk0sPdiIXkZiGDP2sB3jXUTpPqb3GjAKS6gPV7QYkSXLiEXnEWvGWdqRyUuY2gwVzWkjirnSGi13DOz24LCaUR%2FnhaZppIbsdKPteZ90GeQvCd4VYAtqsrLvDw2u4q3WWalYHyNvtIlScRmn3ZHm12rbp7OhDA0X5cXTzNf9EnwCBnwIgK5BCM4eRF5F8UUs4MgSr%2BPwYd2DaBxmT6%2BOVzV5BQqTSHXAsTyhdcSVa55Zyrf20xirE39lK4rcL6I3Kd%2Br319bZO8hQUDFo5DPE9fbOutcnjQGq%2BMRHmjrOwNrnRd6cN70fs254T%2FMJYB0feU%2FJR1xOkld05sS3WUCqRB8OcEzMMROH9cS9Y2bCnMrN%2B%2B%2FbtCRyXF3NBBKJ7v6D8zaKtkphmBZmABtH5xkHDnXCOiCfalGG4zHo%2F9DHotO14nWv01PQTvAUh8mNNuYi7HuKcSB61OQGu%2Fbn5YLgoQNTi1DY7ReU4%2Biko%2FZf9qtWOjxtFKdoXiS2h%2BDX%2B266x5PXWSagaGYOiMwVYPD8f85r1Pf9VCGUBZQ79TC4H1gecWsquvSRbq5zQ7yVsT2DxAjWeupY%2BK7PLylRC2LCKFxIal881x0lcSZWFcGugdgNxGLA1cLH4x0wbKik
Source: chromecache_150.2.dr	String found in binary or memory: <a href="http://ww01.rotect.com/trf?q=Flatbed+Truck+Driving+Jobs&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9NzdGQ0E1MUMzREExNDUxRiZ1dD0xNzIyNDk0Mzg5MzYxJnVvPTgxMjI2NTQwNjY5MDA1Jmx0PTImcz0yJmVzPUI4dENXUjZnU194UXZMdGw4eWhoNW14VU9qdHFGdjdUeHJhZTdxTTFlOFZPeGRoVjNwLndXbmdWMDEzcVhPREFUWGw0QkFIU2tqTnVlbUkt%2FRV%3D2%2FRE%3D1725086389%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8BLdPRffQKs8obew6e0obSTVUCUxib0614LVuUZKvKL9drLv45qxa3sN_C-83Hy1dlYktRLvlQis60O2KAkdgqaoNgsvvkOwDIJEFPKUCHKujY9Tzw5bd8n7-BP8BD8eAfUw6_89ynSApmeA2wASPTXWHU30yLySHdWIjn0HZTU9wWFbk%2526u%253daHR0cHMlM2ElMmYlMmZ3d3cuam9iczJjYXJlZXJzLmNvbSUyZnNlYXJjaCUyZnJlc3VsdHMlM2ZxJTNkdHJ1Y2tpbmclMjZsJTNkJTI2YzElM2Q0JTI2YzIlM2QwJTI2YzMlM2RmbGF0YmVkJTI1MjB0cnVjayUyNTIwZHJpdmVyJTI2YzQlM2QyMTQwJTI2YzUlM2QxMDM3NyUyNmFkcG9zJTNkJTI2bWF0Y2h0eXBlJTNkZSUyNm5ldHdvcmslM2RzJTI2ZGV2aWNlJTNkYyUyNmRldmljZW1vZGVsJTNkJTI2a3clM2RmbGF0YmVkJTI1MjB0cnVjayUyNTIwZHJpdmVyJTI2cGwlM2QlMjZpZm1vYmlsZSUzZG4lMjZpZnNlYXJjaCUzZHklMjZpZmNvbnRlbnQlM2QlMjZjcmVhdGl2ZSUzZCUyNmdlbyUzZDU5OTgxJTI2aW50JTNkJTI2bXNjbGtpZCUzZDY4MDVjOGRiYWM0MzE1ZDBlNmRiYWU3MDgxZjY0NTQzJTI2dXRtX3NvdXJjZSUzZGJpbmclMjZ1dG1fbWVkaXVtJTNkY3BjJTI2dXRtX2NhbXBhaWduJTNkMjAyMS0wNC0xMiUyNTIwQUklMjUyMC0lMjUyMFRXTCUyNTIwLSUyNTIwR1MlMjUyME5vbi1Db25zb2xpZGF0ZWQlMjZ1dG1fdGVybSUzZGZsYXRiZWQlMjUyMHRydWNrJTI1MjBkcml2ZXIlMjZ1dG1fY29udGVudCUzZFRXTCUyNTIwLSUyNTIwVHJ1Y2tpbmc%2526rlid%253d6805c8dbac4315d0e6dbae7081f64543%2FRK%3D2%2FRS%3D6ExaM04uU1VUYjIxVxY0VUrO37M-&o=qfnFVr%2BNqSQeYEVcv%2FZx5kNOsCBOd7Xswx01SVcPREPqDLJbFjmy6578JkfE%2BNCwqkUyPpLTPh1jk4Fli76jlWnLuLJXga13Pb3ji5QsNup5LmwWzNrthxUKOc%2Frf30QY7PQ1zBdnORDUK%2F6bdroQU7SD68WWGrIyNtTSs34TnBXukbcdPtH2c3cLdCLC%2FYIGJ0crgV848XfhaO74NAE9jpQkCjxf3j%2FgkbaVa%2B8LDr4aRNgheCFhqyh61rwQ6fguGbQxZ6IMngLLAP1oBYxBt74ffvDDIdFqhQv%2FdCEtZ3qZTkvX3TsbVAwLYQGOM2cE9iRcWboo4sz1MlPh1iCHd5uK492tU0mD82vNlurwCw15WvIauULU2nDHBGR8RdEgAX97vAyhfk9FqELWL7V32IQ9R1FLMNww2EkSbPP5oVvId5tDyuttq0PfhKhyDl14yMAQ9LeLEqhVPEFYCmZknCm4MUcR46Ilh4dwTfMhquviyVJdDuShoRk1Sv9B2bFJud%2FDNtMkaua3VLMUTZgGcaOvPsKR5i83OsxccdFY6UJBWYUJUKEjeaSHpVLYwErHfBvBx%2B3o925vi%2B2dDpB5ONsjVjHTUJCTWHfRtLch6dwQKUVG%2BR7hHpZfo1rRIWREmWog2WzEJIU%2BWrE0OUDzw%3D%3D&c=212547003997282508571619&n=lCVAom7XGUnFswjzO6%2BepgShg6Y8BGEeryTl02%2BBx6PG0DwfWlrw0vrT%2FL969LHenQ8uFMe5qbB7%2B8V0dZl2Uvw3opZTwa2AZG27nICHeBmv%2B9q3OeVS6YZbRQGirZ4BcCbw6gW1FmWNlfrm1oEfs1iZZROICQMsEUbxHSQleLQYjN2rN1pvZHOr6tZmuQxi0EEVO%2BHWIav7cbT2xFtLLZKsrcH0DExaUYfSLJQNnrDcGwaEeuGthkG35cYfzl1Cu7Je9lbbgscKzrBL4lyNVB5yAvRZLnYjYaSNUwm1t5V5lfnAE8Vm2qk3gJf4rZjl1SOdcIfSP1nZ7gQRZoutu4DlO6X9uvLLYXtMKaAMXt%2F7SY5bw4vBaDMhlFpLWzk6KkjSXmP%2BhtA1hjnep%2FUFl6In4vMe1lPYoVwn3SsbF6JPmjeeRcl%2BM00BieyNlY7vslTCmfHLvRWYSKsOoIM87F%2FJOKxrzC%2F7E%2FSYlqBPKaYQJgfGm6XJY4lHEIVhcRFsmrvh3xpiJgBUkOTTeC0Gft4oCWK%2Be5ENTypZCGyJ5rRiMI8BlruKteJYWGxSIkdaaojFTUj%2Bd5YpUA64rw7KRaj1vy%2B7QVeAxES%2Fwh%2Fa6qAkhdt15QlmoUrxwdSjkRiZ7uyytq1Jbn%2Ftgh%2Fra%2B8r5xVYuoWzl4kI0JdBKyGkgGyhk2vhL4cP2R737OXbps5Y0vo4C1AH%2FjLDPU
Source: chromecache_150.2.dr	String found in binary or memory: <a href="http://ww01.rotect.com/trf?q=Flatbed+Truck+Driving+Jobs&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9NzdGQ0E1MUMzREExNDUxRiZ1dD0xNzIyNDk0Mzg5MzYxJnVvPTgxMzYzOTE5MzY1MjgxJmx0PTImcz0yJmVzPWlHdk1tbFVfSGRkdmNWcm9fVTNCSHNlQ1ZDbkxaSy5XTWoxNFBzR1NuMjRiOXVsT251S25Xd3VHdjhNR0ZLeGZZT2tFcW1RQUQwd1F0Mjgt%2FRV%3D2%2FRE%3D1725086389%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8-dZHikzjJ0w2V6OzGGrxATVUCUwnbVbpkXiAgJ-hitLNIafc9TmOVj64P_cGnJOM2hQ7asKKpR-cuVYB8dWMoQ5FuIE_KI_RI0gmlg41v5yOhQrtVejWN9oZMvbsyWmr01zfE4yxDxsfbb0a63EiA2lR65m1iZXuinUacPF9TYmjXT9a%2526u%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%2526rlid%253d6e58f0fda54a1081ef90965688ff8989%2FRK%3D2%2FRS%3DB6TlNSj2TSAq.RwnVm5DxSKTZtI-&o=qfnFVr%2BNqSQeYEVcv%2FZx5kNOsCBOd7Xswx01SVcPREPqDLJbFjmy6578JkfE%2BNCwqkUyPpLTPh1jk4Fli76jlWnLuLJXga13Pb3ji5QsNup5LmwWzNrthxUKOc%2Frf30QY7PQ1zBdnORDUK%2F6bdroQU7SD68WWGrIyNtTSs34TnBXukbcdPtH2c3cLdCLC%2FYIGJ0crgV848XfhaO74NAE9jpQkCjxf3j%2FgkbaVa%2B8LDr4aRNgheCFhqyh61rwQ6fguGbQxZ6IMngLLAP1oBYxBt74ffvDDIdFqhQv%2FdCEtZ3qZTkvX3TsbVAwLYQGOM2cE9iRcWboo4sz1MlPh1iCHd5uK492tU0mD82vNlurwCw15WvIauULU2nDHBGR8RdEgAX97vAyhfk9FqELWL7V32IQ9R1FLMNww2EkSbPP5oVvId5tDyuttq0PfhKhyDl14yMAQ9LeLEqhVPEFYCmZknCm4MUcR46Ilh4dwTfMhquviyVJdDuShoRk1Sv9B2bFJud%2FDNtMkaua3VLMUTZgGcaOvPsKR5i83OsxccdFY6U8ZECwHQkyZAgwQFbsN3wIZG4E%2Fz0YpA0wnWc9p%2FJylI1SQfMK2s7HcOPqJk5S6L6CI3revqvyDh3K5999EbhHXTBK8pMWu3eZ5gvFY408Wg%3D%3D&c=212547003997282508572874&n=lCVAom7XGUnFswjzO6%2BepgShg6Y8BGEeryTl02%2BBx6PG0DwfWlrw0vrT%2FL969LHenQ8uFMe5qbB7%2B8V0dZl2Uvw3opZTwa2AZG27nICHeBmv%2B9q3OeVS6YZbRQGirZ4BcCbw6gW1FmWNlfrm1oEfs1iZZROICQMsEUbxHSQleLQYjN2rN1pvZHOr6tZmuQxi0EEVO%2BHWIav7cbT2xFtLLZKsrcH0DExaUYfSLJQNnrDcGwaEeuGthkG35cYfzl1Cu7Je9lbbgscKzrBL4lyNVB5yAvRZLnYjYaSNUwm1t5V5lfnAE8Vm2qk3gJf4rZjlEQMAaDVcvDKDiKSoIeM9TnH9wGLwsyceJ%2B%2FEyunP6S%2FDCyY9A8%2BZuUTf1QgRV5zjfAFqVm7CBO0Nd%2BzK2kNWAckXw%2Fzau1L1ANirOwvWvLkIaBKS8RTvw6rZoykDAU5bXXXClrk%2BuGF6b1wDTnqjWPvUKeJc7AN3jIAPxnw1r%2FAMp4ldG11%2BIc%2F4wV9YCkiXhTQvUpp0sYpqmOUOLe%2Foy4mXTcLMoNy3x1eC1xHbLUF9lbi476pdi2MPPjQ1t90GJqtMa4ryL6RN8S5RqaTJjDlL%2B9S49t7L3ROUBtMTe8VuM3VnWygztmEP0pkXc87mLQ1zdFY99XsgkzZT1YTCXFR7gNNL91EnYyEFR4uEuFFT5fP1ZC1d3NSHDikxSFsp2fVtmuyjScDUC6CNWv%2FghLn%2BU%2BziUFzQO%2FAZ3X18JBvq6TCvnMNessLBaK%2BH9bK5gtLuVyER3To%2FbqdVwE3RcMB0UE628i9J8sWAIyuniGU4rvbleoZqgiUKSTVHah%2FNql2FXTzl97C%2FvhHxm1G7wr1DatSpBcfJ%2BkKqfo%2FY95OQNLWIogTGHTKUz
Source: chromecache_190.2.dr	String found in binary or memory: <a href="http://ww01.rotect.com/trf?q=Job+Vacancies+Jobs&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9RDlENDE4NDY0NkMzNDc5NCZ1dD0xNzIyNDk0MzkzNTE3JnVvPTc5MjMzNzQ0OTkzMTEwJmx0PTImcz0yJmVzPUFER0UxUjBJYnM4MkJDOUM4ME1peHhsd3hUb2U1QnNXVnJFM1ZzVWlZTUdjWXVOUXlyS3NfSkdWdzA0SDhaRjU5dWRFNV85WDQ3QUdhVmst%2FRV%3D2%2FRE%3D1725086393%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8wvGF6qXl69mF2VLGs21OQDVUCUzQu4bpHLRadxL8W_68cjTIDmrOvO9KxQ-rUVhEqH2Bd_U_aqq4qWFeJzUJ5AgC9hT_5cZdr2qJmLyOM1XoBdFQ2FxQUKi-A6JfKT4SXQef5cg2aiE8uyoQy1uN-cwfI8ayqAdvlD7VrRdltr1pF48G%2526u%253daHR0cHMlM2ElMmYlMmZ3d3cuZXZlcnlqb2Jmb3JtZS5jb20lMmZscC1sYyUzZnJsZSUzZGpvYiUyNTIwc2VhcmNoJTI2Y3JlYXRpdmUlM2QlMjZtYXRjaHR5cGUlM2RlJTI2dXRtX3NvdXJjZSUzZGJpbmclMjZuZXR3b3JrJTNkcyUyNmRldmljZSUzZGMlMjZwbGFjZW1lbnQlM2QlMjZhY2VpZCUzZCU3YmFjZWlkJTdkJTI2cG9zJTNkJTI2a3clM2Rqb2IlMjUyMGxpc3RpbmdzJTI2dnRjaWQlM2Q0MzMyNTc1MTYlMjZ2dGFnaWQlM2QxMjY3NzM3ODE2NjEzNTU5JTI2dnR0aWQlM2Rrd2QtNzkyMzQxMTEyMDQ5ODclM2Fsb2MtMTkwJTI2bmV0d29yayUzZHMlMjZtc2Nsa2lkJTNkZTU3ODQ5ZDFjZDNkMWYwMjVlM2MyZjdhZTA4NDMxYzQ%2526rlid%253de57849d1cd3d1f025e3c2f7ae08431c4%2FRK%3D2%2FRS%3Ddz8ChNQGsWfSLvUc5TN1g.xobCk-&o=qfnFVr%2BNqSQeYEVcv%2FZx5kNOsCBOd7Xswx01SVcPREPqDLJbFjmy6578JkfE%2BNCwqkUyPpLTPh1jk4Fli76jlWnLuLJXga13Pb3ji5QsNup5LmwWzNrthxUKOc%2Frf30QY7PQ1zBdnORDUK%2F6bdroQU7SD68WWGrIyNtTSs34TnBXukbcdPtH2c3cLdCLC%2FYIGJ0crgV848XfhaO74NAE9jpQkCjxf3j%2FgkbaVa%2B8LDr4aRNgheCFhqyh61rwQ6fguGbQxZ6IMngLLAP1oBYxBt74ffvDDIdFqhQv%2FdCEtZ3qZTkvX3TsbVAwLYQGOM2cE9iRcWboo4sz1MlPh1iCHd5uK492tU0mD82vNlurwCw15WvIauULU2nDHBGR8RdEgAX97vAyhfk9FqELWL7V32IQ9R1FLMNww2EkSbPP5oVvId5tDyuttq0PfhKhyDl14yMAQ9LeLEqhVPEFYCmZknCm4MUcR46Ilh4dwTfMhquviyVJdDuShoRk1Sv9B2bFJud%2FDNtMkaua3VLMUTZgGcaOvPsKR5i83OsxccdFY6Ukn%2Br62QHmRpNwOjIoBXOfhIXM4A7erowidqiJ2nl7hKhDvmrS%2FQbC6PNJO8%2BQ%2FkE8O%2FR5qJ14LMKakIvL6mf6QShnUAyA2W0rZ7EUXBN6YQ%3D%3D&c=211947003997699151352110&n=hUSY9dxAteggvxcQpKn2E914%2Fgy4EcJLi7K%2BzCSXG3quaEDSMVMSzeYFa%2BoCud2Sh3Fjm4948IUjo1swHDyea9mpw2mra%2BAmfixxU8URy53xOvF3zPzMAydmV8QwDGH%2B3Q7q2G9U%2BkR2hOj4T504vL%2FjWIMkBvpWB01nmvnjYgTjv1oavaBEoFlLSI5%2FrXLFWwxgETvw6YC4t9Suz4dXPOr%2BxCNYLMcnmJlh%2FxUvs2mTAe%2FfgKDLnqdTa8JO3nGuWnllSgCqaZEJIhaLGwgqznRYahu5UQ2vXlII%2FjaDoSzw8hCcVS4AEuLIsrpXozddUJU1YuewGUHDkJo32lVq%2FcceL8I61F%2Fl74q5bLuma7BouW8VOBBSvVqn3ibIYOf5FZcEeZGGxzIhkc6LMubSG80DLWLFGCMQseHDlXKyu0yLonFj%2FpJJpWechwzL9YmpOjX9WM6f1lU79OtKmHuzeBOIY%2B%2FyDkEuxcH%2BbeyWNe1d2YB3C2h2pcHwyqGoFfvVIRmUvbYyghiOdWy65KPZjoC0L12ZcHgGttm7wVpaDhSuVWqWswJClcxA9dQQEuQjEtLJqFpbrotTTZCsH2BId%2Frl3912i4T%2BLCbR7NdDHlW07h%2B%2B%2Fbw5Uo9S2OBKGsv9HpR0LVfPCzm76eBxBNoVd96ACU4Unjt5XIvWFkXSrksWWy3y%2Bg7oPqxAmcGEVUFToV%2F7UYpjDRNjKOs1056d2mADA%2FNPdx7GMFoY%2Bp8z5af%2BoIwuNladTbM%2FCFKfAeo3qcRR6L%2BM1I%2FkP%2FXr5Dyab53nLSoFTmzau1FTdaJ7ZwwSW5v%2B%2FwsLFLqESIyjJeiaYZfglaFziKjgkuPhCypz%2BqZUvYbGpNyTFhuhUHkq6XY2pTKu0ZSKVr5bVWByvd0zyZz9mNDkU4G%2F1kXqsWQTlusMOs3mGsoO0XpcJzw%2BiBwJmf30ekkIQG4TYpIxSaVPLmjcoQ0pRGzBl18fEsVqxn4fIuN2BeVol2%2FUGAo%2Bc5ApB7ss3G
Source: chromecache_190.2.dr	String found in binary or memory: <a href="http://ww01.rotect.com/trf?q=Job+Vacancies+Jobs&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9RDlENDE4NDY0NkMzNDc5NCZ1dD0xNzIyNDk0MzkzNTE3JnVvPTgzNTYzMjc4MTAwNzg2Jmx0PTImcz0yJmVzPVRjY0dYcTYzc0RGcHJMZkw2Rm82dDMxYjd5RFQ2T3pWUWRoWlRzN3QzSzhBWEJfSUVpNjdDZUpzZlJ5M2lZS2E4Y2pnam95bkZmMXNFdnct%2FRV%3D2%2FRE%3D1725086393%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8KbeuR0hxDFpgjLLO6LnXeDVUCUwYVJVNkX6mG4vaICR9RHInNEAM2zdm_ePLH-YwnlrBvJofdQzoH9POOXHfyucA2Ayktxkc9Altz9kyMF4fEQWu8XdzExFtfFqNDO_h3atodlro6oGCmBpTEoMB_QEBG1lwgjU-qG5joHKTtuQboKws%2526u%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%2526rlid%253dc0603f2790381c0578c2598cbd81752c%2FRK%3D2%2FRS%3DqsvovXVeX1IIJk8ieVZvJIWIacI-&o=qfnFVr%2BNqSQeYEVcv%2FZx5kNOsCBOd7Xswx01SVcPREPqDLJbFjmy6578JkfE%2BNCwqkUyPpLTPh1jk4Fli76jlWnLuLJXga13Pb3ji5QsNup5LmwWzNrthxUKOc%2Frf30QY7PQ1zBdnORDUK%2F6bdroQU7SD68WWGrIyNtTSs34TnBXukbcdPtH2c3cLdCLC%2FYIGJ0crgV848XfhaO74NAE9jpQkCjxf3j%2FgkbaVa%2B8LDr4aRNgheCFhqyh61rwQ6fguGbQxZ6IMngLLAP1oBYxBt74ffvDDIdFqhQv%2FdCEtZ3qZTkvX3TsbVAwLYQGOM2cE9iRcWboo4sz1MlPh1iCHd5uK492tU0mD82vNlurwCw15WvIauULU2nDHBGR8RdEgAX97vAyhfk9FqELWL7V32IQ9R1FLMNww2EkSbPP5oVvId5tDyuttq0PfhKhyDl14yMAQ9LeLEqhVPEFYCmZknCm4MUcR46Ilh4dwTfMhquviyVJdDuShoRk1Sv9B2bFJud%2FDNtMkaua3VLMUTZgGcaOvPsKR5i83OsxccdFY6VrL9wsBARq2%2BuISlN%2BROfklfP0KM20MNIyPI3wRu7kCNqIk5qNkf4eKUcDBN4rZDvt2hXPEOCFWRH8urDnVbsyvk7IUzPV%2Fwr%2B8b8kHBa35A%3D%3D&c=211947003997699151351868&n=hUSY9dxAteggvxcQpKn2E914%2Fgy4EcJLi7K%2BzCSXG3quaEDSMVMSzeYFa%2BoCud2Sh3Fjm4948IUjo1swHDyea9mpw2mra%2BAmfixxU8URy53xOvF3zPzMAydmV8QwDGH%2B3Q7q2G9U%2BkR2hOj4T504vL%2FjWIMkBvpWB01nmvnjYgTjv1oavaBEoFlLSI5%2FrXLFWwxgETvw6YC4t9Suz4dXPOr%2BxCNYLMcnmJlh%2FxUvs2mTAe%2FfgKDLnqdTa8JO3nGuWnllSgCqaZEJIhaLGwgqznRYahu5UQ2vXlII%2FjaDoSzw8hCcVS4AEuLIsrpXozdd6y76aILHLWb5rmVbUo%2Frq6mSHYKRbQEc93Eu%2FDprX8OjEmv96xT3C%2B%2FACyzag%2FEL%2FfucMBV8BAiYVNT%2Fcqvrq5F2F3jbiz5R732if57N2bDWMQlKOxOpstpmOpEMELV9D6R8R6q%2FKSswpUjZ8dp9STAdAI9CN334jQnyN23azkDU7E%2BeSb41SA9LXBLQrf81I3LA%2B0hHrUD0i4H8BPtEVuyrtqC4%2B5dQEB2Kihd3wJPqOAzSU3Ycg59PcQKxlBuQEMco4bLlCpzUgmbp57inl4bqaHumDUNyjuB94A6dO14mnIdDkYSgP1Jbg%2BCSzldPJmK6vcx6wKMyJaJ22vGosdYa8AJDO34%2BETybeZSMElJ5tmgyFclYXaxdy%2Bu8ntxYIdlSU135QDXye71lM0Wf80U8gP0By1QT5ZZKXkU6TJ7QJ4ME6bw7AMph%2BTgcD3JypyEfWHtd5uXXq1w8mqy%2FIMR2pTI3y9FL6VGLlIBNF%2ButQ1zYVhXtyhopqbXXpZ6EZ5mMvLT76w0vT%2FIQipMjgWPZS4cS9

Source: global traffic	DNS traffic detected: DNS query: rotect.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: syndicatedsearch.goog
Source: global traffic	DNS traffic detected: DNS query: ww01.rotect.com
Source: global traffic	DNS traffic detected: DNS query: delivery.consentmanager.net
Source: global traffic	DNS traffic detected: DNS query: cdn.consentmanager.net
Source: global traffic	DNS traffic detected: DNS query: i1.cdn-image.com
Source: global traffic	DNS traffic detected: DNS query: a.delivery.consentmanager.net
Source: global traffic	DNS traffic detected: DNS query: afs.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: r.search.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: www.justanswer.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: i4.cdn-image.com
Source: global traffic	DNS traffic detected: DNS query: www.everyjobforme.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: i3.cdn-image.com
Source: global traffic	DNS traffic detected: DNS query: i2.cdn-image.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/973676545:1722493710:qLUOnaAFq2dYDUwc3cK0WRe-w7nNJ5AkZcToKJaEcuM/8ac3d4dbc9d715cb/3dabc1f5c15ee26 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3735sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: 3dabc1f5c15ee26sec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t3qx4/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 01 Aug 2024 06:39:33 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: Fl5V3joaF6k1SY7QFPmgdZ971fobg8X8V68=$ygMwAG6SV/mbRESEServer: cloudflareCF-RAY: 8ac3d4eca8e342cc-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 01 Aug 2024 06:39:38 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: a7THzxL4iXCmHLZlgjIUoHfEfd1RgBAR8ew=$S/CaGyYJh8J3Hk9WServer: cloudflareCF-RAY: 8ac3d506df1c9e02-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 01 Aug 2024 06:39:48 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: xgquvalJo34BgybEmvW+R7XSB7njXwx59bk=$7bve69n25/W9DzlkServer: cloudflareCF-RAY: 8ac3d546ed117c87-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 01 Aug 2024 06:39:51 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: 0yTH0b0I8b4D8VbnmUMK8z1+o5UGDOWKxck=$CJQ7IqCaqxP5IorkServer: cloudflareCF-RAY: 8ac3d55d0fe8436a-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 01 Aug 2024 06:38:47 GMTServer: ApacheContent-Length: 10Keep-Alive: timeout=5, max=128Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 4e 6f 20 66 61 76 69 63 6f 6e Data Ascii: No favicon

Source: chromecache_171.2.dr, chromecache_128.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot
Source: chromecache_171.2.dr, chromecache_128.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix
Source: chromecache_171.2.dr, chromecache_128.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf
Source: chromecache_171.2.dr, chromecache_128.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold
Source: chromecache_171.2.dr, chromecache_128.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf
Source: chromecache_171.2.dr, chromecache_128.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Source: chromecache_171.2.dr, chromecache_128.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2
Source: chromecache_171.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot
Source: chromecache_171.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix
Source: chromecache_171.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.otf
Source: chromecache_171.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.svg#montserrat-medium
Source: chromecache_171.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.ttf
Source: chromecache_171.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff
Source: chromecache_171.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff2
Source: chromecache_171.2.dr, chromecache_128.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot
Source: chromecache_171.2.dr, chromecache_128.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix
Source: chromecache_171.2.dr, chromecache_128.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf
Source: chromecache_171.2.dr, chromecache_128.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular
Source: chromecache_171.2.dr, chromecache_128.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf
Source: chromecache_171.2.dr, chromecache_128.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Source: chromecache_171.2.dr, chromecache_128.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2
Source: chromecache_171.2.dr, chromecache_128.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/js/min.js?v2.3
Source: chromecache_128.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/pics/28903/search.png)
Source: chromecache_128.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/pics/28905/arrrow.png)
Source: chromecache_171.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/pics/28905/res-arw.png)
Source: chromecache_171.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/pics/28905/search.png)
Source: chromecache_171.2.dr, chromecache_128.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/pics/29590/bg1.png)
Source: chromecache_190.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot
Source: chromecache_190.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix
Source: chromecache_190.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf
Source: chromecache_190.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold
Source: chromecache_190.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf
Source: chromecache_190.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Source: chromecache_190.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2
Source: chromecache_190.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot
Source: chromecache_190.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix
Source: chromecache_190.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.otf
Source: chromecache_190.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.svg#montserrat-medium
Source: chromecache_190.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.ttf
Source: chromecache_190.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff
Source: chromecache_190.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff2
Source: chromecache_190.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot
Source: chromecache_190.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix
Source: chromecache_190.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf
Source: chromecache_190.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular
Source: chromecache_190.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf
Source: chromecache_190.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Source: chromecache_190.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2
Source: chromecache_190.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/js/min.js?v2.3
Source: chromecache_190.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/pics/28905/res-arw.png)
Source: chromecache_190.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/pics/28905/search.png)
Source: chromecache_190.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/pics/29590/bg1.png)
Source: chromecache_150.2.dr, chromecache_157.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot
Source: chromecache_150.2.dr, chromecache_157.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix
Source: chromecache_150.2.dr, chromecache_157.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf
Source: chromecache_150.2.dr, chromecache_157.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold
Source: chromecache_150.2.dr, chromecache_157.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf
Source: chromecache_150.2.dr, chromecache_157.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Source: chromecache_150.2.dr, chromecache_157.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2
Source: chromecache_150.2.dr, chromecache_157.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot
Source: chromecache_150.2.dr, chromecache_157.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix
Source: chromecache_150.2.dr, chromecache_157.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.otf
Source: chromecache_150.2.dr, chromecache_157.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.svg#montserrat-medium
Source: chromecache_150.2.dr, chromecache_157.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.ttf
Source: chromecache_150.2.dr, chromecache_157.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff
Source: chromecache_150.2.dr, chromecache_157.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff2
Source: chromecache_150.2.dr, chromecache_157.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot
Source: chromecache_150.2.dr, chromecache_157.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix
Source: chromecache_150.2.dr, chromecache_157.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf
Source: chromecache_150.2.dr, chromecache_157.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular
Source: chromecache_150.2.dr, chromecache_157.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf
Source: chromecache_150.2.dr, chromecache_157.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Source: chromecache_150.2.dr, chromecache_157.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2
Source: chromecache_150.2.dr, chromecache_157.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/js/min.js?v2.3
Source: chromecache_150.2.dr, chromecache_157.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/pics/28905/res-arw.png)
Source: chromecache_150.2.dr, chromecache_157.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/pics/28905/search.png)
Source: chromecache_150.2.dr, chromecache_157.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/pics/29590/bg1.png)
Source: chromecache_165.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot
Source: chromecache_165.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix
Source: chromecache_165.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf
Source: chromecache_165.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold
Source: chromecache_165.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf
Source: chromecache_165.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Source: chromecache_165.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2
Source: chromecache_165.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot
Source: chromecache_165.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix
Source: chromecache_165.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.otf
Source: chromecache_165.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.svg#montserrat-medium
Source: chromecache_165.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.ttf
Source: chromecache_165.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff
Source: chromecache_165.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff2
Source: chromecache_165.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot
Source: chromecache_165.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix
Source: chromecache_165.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf
Source: chromecache_165.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular
Source: chromecache_165.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf
Source: chromecache_165.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Source: chromecache_165.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2
Source: chromecache_165.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/js/min.js?v2.3
Source: chromecache_165.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/pics/28905/res-arw.png)
Source: chromecache_165.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/pics/28905/search.png)
Source: chromecache_165.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/pics/29590/bg1.png)
Source: chromecache_128.2.dr	String found in binary or memory: http://ww01.rotect.com/Allied_Medical_Driver.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2
Source: chromecache_128.2.dr	String found in binary or memory: http://ww01.rotect.com/Allied_Medical_Winslow_Az_Driver.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs
Source: chromecache_128.2.dr	String found in binary or memory: http://ww01.rotect.com/Customer_Service_Support.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BU
Source: chromecache_128.2.dr	String found in binary or memory: http://ww01.rotect.com/Flatbed_Truck_Driving_Jobs.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2
Source: chromecache_128.2.dr	String found in binary or memory: http://ww01.rotect.com/Job_Vacancies_Jobs.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCe
Source: chromecache_190.2.dr, chromecache_171.2.dr, chromecache_165.2.dr, chromecache_150.2.dr, chromecache_128.2.dr, chromecache_157.2.dr	String found in binary or memory: http://ww01.rotect.com/display.cfm
Source: chromecache_157.2.dr	String found in binary or memory: http://ww01.rotect.com/trf?q=Allied
Source: chromecache_171.2.dr	String found in binary or memory: http://ww01.rotect.com/trf?q=Customer
Source: chromecache_150.2.dr	String found in binary or memory: http://ww01.rotect.com/trf?q=Flatbed
Source: chromecache_190.2.dr	String found in binary or memory: http://ww01.rotect.com/trf?q=Job
Source: chromecache_148.2.dr	String found in binary or memory: http://www.domainname.com/page.html
Source: chromecache_190.2.dr, chromecache_171.2.dr, chromecache_165.2.dr, chromecache_150.2.dr, chromecache_128.2.dr, chromecache_157.2.dr	String found in binary or memory: https://cdn.consentmanager.net
Source: chromecache_190.2.dr, chromecache_171.2.dr, chromecache_165.2.dr, chromecache_150.2.dr, chromecache_128.2.dr, chromecache_157.2.dr	String found in binary or memory: https://delivery.consentmanager.net
Source: chromecache_162.2.dr, chromecache_154.2.dr, chromecache_164.2.dr, chromecache_194.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=
Source: chromecache_162.2.dr, chromecache_154.2.dr, chromecache_164.2.dr, chromecache_194.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_162.2.dr, chromecache_154.2.dr, chromecache_164.2.dr, chromecache_194.2.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: chromecache_162.2.dr, chromecache_154.2.dr, chromecache_164.2.dr, chromecache_194.2.dr	String found in binary or memory: https://syndicatedsearch.goog
Source: chromecache_148.2.dr	String found in binary or memory: https://www.bodis.com/takedown-request
Source: chromecache_148.2.dr	String found in binary or memory: https://www.bodis.com/terms/infringement-notification-policy
Source: chromecache_162.2.dr, chromecache_154.2.dr, chromecache_164.2.dr, chromecache_194.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5
Source: chromecache_162.2.dr, chromecache_154.2.dr, chromecache_164.2.dr, chromecache_194.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/16521530460/?gad_source=1&adview_type=3

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.9:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.9:49724 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@32/142@80/21

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1712 --field-trial-handle=1940,i,12065040936513396881,3636851821948398797,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://rotect.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1712 --field-trial-handle=1940,i,12065040936513396881,3636851821948398797,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	5 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	6 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://rotect.com	0%	Avira URL Cloud	safe
http://rotect.com	4%	Virustotal		Browse

Source	Detection	Scanner	Label	Link
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	0%	URL Reputation	safe
https://syndicatedsearch.goog	0%	URL Reputation	safe
https://syndicatedsearch.goog	0%	URL Reputation	safe
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2FFlatbed_Truck_Driving_Jobs.cfm&o=1722494390085&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14&	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.svg#montserrat-medium	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.svg#montserrat-medium	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/pics/29590/bg1.png)	0%	Avira URL Cloud	safe
http://rotect.com/favicon.ico	0%	Avira URL Cloud	safe
http://i4.cdn-image.com/__media__/pics/28905/res-arw.png	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2FCustomer_Service_Support.cfm&o=1722494362047&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14&	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.svg#montserrat-medium	0%	Virustotal		Browse
http://i4.cdn-image.com/__media__/pics/28905/res-arw.png	0%	Virustotal		Browse
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	0%	Virustotal		Browse
http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.svg#montserrat-medium	0%	Virustotal		Browse
http://rotect.com/_fd	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ac3d536ab658cbd&lang=auto	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	0%	Avira URL Cloud	safe
https://syndicatedsearch.goog/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=m940ytxo0x3e&aqid=mS2rZumFD-3hjuwP-r_m-AI&psid=3113057640&pbt=bv&adbx=290&adby=143&adbh=480&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=652824369&csala=4%7C0%7C1089%7C2340%7C119&lle=0&ifv=1&hpt=0	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/pics/29590/bg1.png)	0%	Virustotal		Browse
http://i3.cdn-image.com/__media__/pics/28905/res-arw.png	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/pics/28905/res-arw.png	0%	Virustotal		Browse
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf	0%	Virustotal		Browse
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	0%	Virustotal		Browse
http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	0%	Virustotal		Browse
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf	0%	Avira URL Cloud	safe
http://i4.cdn-image.com/__media__/pics/29590/bg1.png	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix	0%	Avira URL Cloud	safe
http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix	0%	Virustotal		Browse
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ac3d4dbc9d715cb&lang=auto	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8ac3d4dbc9d715cb/1722494372856/3843ca0d68bc68afcb8f9e3fc4e20a9813e3306fe5d9e6f170ab7f6427b561a3/sU3A5Zaxduayo9D	0%	Avira URL Cloud	safe
http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf	0%	Virustotal		Browse
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	0%	Virustotal		Browse
http://i4.cdn-image.com/__media__/pics/29590/bg1.png	0%	Virustotal		Browse
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff	0%	Virustotal		Browse
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf	0%	Virustotal		Browse
http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	0%	Virustotal		Browse
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/pics/28905/arrrow.png)	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.ttf	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold	0%	Virustotal		Browse
http://i1.cdn-image.com/__media__/pics/28905/arrrow.png)	0%	Virustotal		Browse
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff	0%	Avira URL Cloud	safe
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	0%	Avira URL Cloud	safe
http://ww01.rotect.com/Flatbed_Truck_Driving_Jobs.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2	0%	Avira URL Cloud	safe
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff	0%	Virustotal		Browse
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix	0%	Virustotal		Browse
http://i3.cdn-image.com/__media__/pics/29590/bg1.png)	0%	Avira URL Cloud	safe
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5	0%	Virustotal		Browse
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/pics/28905/res-arw.png	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf	0%	Virustotal		Browse
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=1&id=68884&o=1722494340&h=http%3A%2F%2Fww01.rotect.com%2F%3Fdn%3Drotect.com%26pbsubid%3Dcf37f022-d980-4854-884d-1e3949811b21%26pid%3D9POT3387I&&l=en&odw=0&dlt=1&l=en	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.ttf	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/pics/29590/bg1.png	0%	Avira URL Cloud	safe
http://rotect.com/_tr	0%	Avira URL Cloud	safe
http://i4.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix	0%	Avira URL Cloud	safe
http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular	0%	Avira URL Cloud	safe
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff2	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2F&o=1722494342090&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14&	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	0%	Avira URL Cloud	safe
http://ww01.rotect.com/Allied_Medical_Driver.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2	0%	Avira URL Cloud	safe
http://ww01.rotect.com/px.js?ch=1	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1762104049:1722493544:Np3zdzwOpzq4TvaI5wwBswkuEGVUcxd8CUQmfa_Mytk/8ac3d536ab658cbd/af09b333a59d613	0%	Avira URL Cloud	safe
http://ww01.rotect.com/px.js?ch=2	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/pics/29590/bg1.png)	0%	Avira URL Cloud	safe
http://i4.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff	0%	Avira URL Cloud	safe
http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix	0%	Avira URL Cloud	safe
http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular	0%	Avira URL Cloud	safe
https://syndicatedsearch.goog/adsense/domains/caf.js?pac=0	0%	Avira URL Cloud	safe
https://syndicatedsearch.goog/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=vnlpe9pke91z&aqid=mS2rZumFD-3hjuwP-r_m-AI&psid=3113057640&pbt=bs&adbx=290&adby=143&adbh=480&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=652824369&csala=4%7C0%7C1089%7C2340%7C119&lle=0&ifv=1&hpt=0	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf	0%	Avira URL Cloud	safe
http://www.domainname.com/page.html	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold	0%	Avira URL Cloud	safe
http://i4.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.svg#montserrat-medium	0%	Avira URL Cloud	safe
http://ww01.rotect.com/display.cfm	0%	Avira URL Cloud	safe
http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff	0%	Avira URL Cloud	safe
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/973676545:1722493710:qLUOnaAFq2dYDUwc3cK0WRe-w7nNJ5AkZcToKJaEcuM/8ac3d4dbc9d715cb/3dabc1f5c15ee26	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/pics/28905/res-arw.png)	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
static.cloudflareinsights.com	104.16.79.73	true	false	unknown
syndicatedsearch.goog	142.250.185.174	true	false	unknown
i1.cdn-image.com	208.91.196.253	true	false	unknown
ds-global3.l7.search.ystg1.b.yahoo.com	212.82.100.137	true	false	unknown
1376624012.rsc.cdn77.org	156.146.33.138	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
i3.cdn-image.com	208.91.196.253	true	false	unknown
a.delivery.consentmanager.net	87.230.98.78	true	false	unknown
i2.cdn-image.com	208.91.196.253	true	false	unknown
rotect.com	199.59.243.226	true	true	unknown
ww01.rotect.com	199.191.50.153	true	true	unknown
challenges.cloudflare.com	104.18.95.41	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
delivery.consentmanager.net	87.230.98.78	true	false	unknown
googlehosted.l.googleusercontent.com	216.58.206.33	true	false	unknown
i4.cdn-image.com	208.91.196.253	true	false	unknown
cdn.consentmanager.net	unknown	unknown	false	unknown
afs.googleusercontent.com	unknown	unknown	false	unknown
www.justanswer.com	unknown	unknown	false	unknown
www.everyjobforme.com	unknown	unknown	true	unknown
r.search.yahoo.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	false	URL Reputation: safe	unknown
http://rotect.com/favicon.ico	false	Avira URL Cloud: safe	unknown
http://ww01.rotect.com/?dn=rotect.com&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&pid=9POT3387I	false		unknown
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2FFlatbed_Truck_Driving_Jobs.cfm&o=1722494390085&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14&	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/pics/28905/res-arw.png	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2FCustomer_Service_Support.cfm&o=1722494362047&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14&	false	Avira URL Cloud: safe	unknown
http://rotect.com/_fd	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ac3d536ab658cbd&lang=auto	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=m940ytxo0x3e&aqid=mS2rZumFD-3hjuwP-r_m-AI&psid=3113057640&pbt=bv&adbx=290&adby=143&adbh=480&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=652824369&csala=4%7C0%7C1089%7C2340%7C119&lle=0&ifv=1&hpt=0	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/pics/28905/res-arw.png	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/pics/29590/bg1.png	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ac3d4dbc9d715cb&lang=auto	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8ac3d4dbc9d715cb/1722494372856/3843ca0d68bc68afcb8f9e3fc4e20a9813e3306fe5d9e6f170ab7f6427b561a3/sU3A5Zaxduayo9D	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/pics/28905/res-arw.png	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=1&id=68884&o=1722494340&h=http%3A%2F%2Fww01.rotect.com%2F%3Fdn%3Drotect.com%26pbsubid%3Dcf37f022-d980-4854-884d-1e3949811b21%26pid%3D9POT3387I&&l=en&odw=0&dlt=1&l=en	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/pics/29590/bg1.png	false	Avira URL Cloud: safe	unknown
http://rotect.com/_tr	false	Avira URL Cloud: safe	unknown
https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b	false	Avira URL Cloud: safe	unknown
http://rotect.com/legal	false		unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2F&o=1722494342090&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14&	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff	false	Avira URL Cloud: safe	unknown
http://ww01.rotect.com/px.js?ch=1	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1762104049:1722493544:Np3zdzwOpzq4TvaI5wwBswkuEGVUcxd8CUQmfa_Mytk/8ac3d536ab658cbd/af09b333a59d613	false	Avira URL Cloud: safe	unknown
http://ww01.rotect.com/px.js?ch=2	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff	false	Avira URL Cloud: safe	unknown
https://syndicatedsearch.goog/adsense/domains/caf.js?pac=0	false	Avira URL Cloud: safe	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=vnlpe9pke91z&aqid=mS2rZumFD-3hjuwP-r_m-AI&psid=3113057640&pbt=bs&adbx=290&adby=143&adbh=480&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=652824369&csala=4%7C0%7C1089%7C2340%7C119&lle=0&ifv=1&hpt=0	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/973676545:1722493710:qLUOnaAFq2dYDUwc3cK0WRe-w7nNJ5AkZcToKJaEcuM/8ac3d4dbc9d715cb/3dabc1f5c15ee26	false	Avira URL Cloud: safe	unknown
https://www.everyjobforme.com/AlliedHealth/Apply	false		unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff	false	Avira URL Cloud: safe	unknown
http://ww01.rotect.com/favicon.ico	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.svg#montserrat-medium	chromecache_190.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://syndicatedsearch.goog	chromecache_162.2.dr, chromecache_154.2.dr, chromecache_164.2.dr, chromecache_194.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
http://i1.cdn-image.com/__media__/pics/29590/bg1.png)	chromecache_171.2.dr, chromecache_128.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.svg#montserrat-medium	chromecache_171.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	chromecache_171.2.dr, chromecache_128.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	chromecache_190.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	chromecache_190.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf	chromecache_190.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf	chromecache_171.2.dr, chromecache_128.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	chromecache_150.2.dr, chromecache_157.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf	chromecache_165.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf	chromecache_150.2.dr, chromecache_157.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix	chromecache_150.2.dr, chromecache_157.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	chromecache_165.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold	chromecache_171.2.dr, chromecache_128.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/pics/28905/arrrow.png)	chromecache_128.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix	chromecache_190.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.ttf	chromecache_171.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5	chromecache_162.2.dr, chromecache_154.2.dr, chromecache_164.2.dr, chromecache_194.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	chromecache_150.2.dr, chromecache_157.2.dr	false	Avira URL Cloud: safe	unknown
http://ww01.rotect.com/Flatbed_Truck_Driving_Jobs.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2	chromecache_128.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/pics/29590/bg1.png)	chromecache_150.2.dr, chromecache_157.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot	chromecache_150.2.dr, chromecache_157.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot	chromecache_171.2.dr, chromecache_128.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.ttf	chromecache_150.2.dr, chromecache_157.2.dr	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix	chromecache_165.2.dr	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	chromecache_165.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular	chromecache_190.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff2	chromecache_171.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	chromecache_171.2.dr, chromecache_128.2.dr	false	Avira URL Cloud: safe	unknown
http://ww01.rotect.com/Allied_Medical_Driver.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2	chromecache_128.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf	chromecache_150.2.dr, chromecache_157.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	chromecache_150.2.dr, chromecache_157.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/pics/29590/bg1.png)	chromecache_190.2.dr	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix	chromecache_165.2.dr	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular	chromecache_165.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	chromecache_190.2.dr	false	Avira URL Cloud: safe	unknown
http://www.domainname.com/page.html	chromecache_148.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf	chromecache_171.2.dr, chromecache_128.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold	chromecache_190.2.dr	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.svg#montserrat-medium	chromecache_165.2.dr	false	Avira URL Cloud: safe	unknown
http://ww01.rotect.com/display.cfm	chromecache_190.2.dr, chromecache_171.2.dr, chromecache_165.2.dr, chromecache_150.2.dr, chromecache_128.2.dr, chromecache_157.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	chromecache_171.2.dr, chromecache_128.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/pics/28905/res-arw.png)	chromecache_150.2.dr, chromecache_157.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.svg#montserrat-medium	chromecache_150.2.dr, chromecache_157.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix	chromecache_171.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix	chromecache_190.2.dr	false	Avira URL Cloud: safe	unknown
http://ww01.rotect.com/trf?q=Flatbed	chromecache_150.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.otf	chromecache_150.2.dr, chromecache_157.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix	chromecache_171.2.dr, chromecache_128.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/pics/28905/search.png)	chromecache_150.2.dr, chromecache_157.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff2	chromecache_150.2.dr, chromecache_157.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/pics/28905/res-arw.png)	chromecache_171.2.dr	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot	chromecache_165.2.dr	false	Avira URL Cloud: safe	unknown
https://www.bodis.com/terms/infringement-notification-policy	chromecache_148.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.consentmanager.net	chromecache_190.2.dr, chromecache_171.2.dr, chromecache_165.2.dr, chromecache_150.2.dr, chromecache_128.2.dr, chromecache_157.2.dr	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf	chromecache_165.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff2	chromecache_190.2.dr	false	Avira URL Cloud: safe	unknown
http://ww01.rotect.com/trf?q=Job	chromecache_190.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot?#iefix	chromecache_190.2.dr	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.eot	chromecache_165.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular	chromecache_171.2.dr, chromecache_128.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.206	unknown	United States	15169	GOOGLEUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
138.199.37.40	unknown	European Union	51964	ORANGE-BUSINESS-SERVICES-IPSN-ASNFR	false
216.58.206.33	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
199.191.50.153	ww01.rotect.com	Virgin Islands (BRITISH)	40034	CONFLUENCE-NETWORK-INCVG	true
142.250.185.100	unknown	United States	15169	GOOGLEUS	false
104.16.80.73	unknown	United States	13335	CLOUDFLARENETUS	false
87.230.98.78	a.delivery.consentmanager.net	Germany	61157	PLUSSERVER-ASN1DE	false
212.82.100.137	ds-global3.l7.search.ystg1.b.yahoo.com	United Kingdom	34010	YAHOO-IRDGB	false
104.16.79.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
156.146.33.138	1376624012.rsc.cdn77.org	United States	3743	ARCEL-2US	false
199.59.243.226	rotect.com	United States	395082	BODIS-NJUS	true
208.91.196.253	i1.cdn-image.com	Virgin Islands (BRITISH)	40034	CONFLUENCE-NETWORK-INCVG	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.193	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.174	syndicatedsearch.goog	United States	15169	GOOGLEUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
142.250.184.238	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.9

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1485796
Start date and time:	2024-08-01 08:37:56 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 42s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://rotect.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@32/142@80/21
Cookbook Comments:	Browse: http://rotect.com/legal Browse: http://rotect.com/ Browse: http://ww01.rotect.com/Customer_Service_Support.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc6TEPjii6jYyypXxZ4eYyija1oDOtc2I3nx4b%2BUMzFr2c%2FSLfe32iW2HH9q1ePVrxViaalLTTLGyJVWvW5wwyXnk0jGXhUCnigLLVRCzgQ%2Bqa%2BQ7kdoV3Prt2jVq2JIvbEY2Sy%2BlXVGBWokdZSGlvUcAtSWlTxaaJ6vtQd06Kdk1nLhN0fK4ZddBdusz%2Ba%2B4b5VUu3xTRNTeb%2BQEyZFOwuNbMfSEhVodK1RZgbaaONJTbSSfzHB3hSN4H%2Fhjew%2FV%2F2qn2geIorBIGVe8ihORHIvWa9m47FAM1VYbgstMUVFew55MOVOnVfz9%2F3wP9op%2FJdBOQEJ43Iyyhk5bv5IkaaQkmahSo57X7l%2FMZUPXy1JQU6%2F6SK5OBqOjsOztIJI%2FVVafAbGHp7mQ%2BNM7WdgsxJzmRjqbRFV5xZEYb3qkUfRTjeTewHOngd8mFDFv%2B3QCJ101a%2FS7zKV%2FRzq1pebGcywM1t%2FoqCdH3Gh%2F7IfGvgMIrQTiTjdCZWOR%2F5shU74SCxaDbOTGlbbsWMwtODtId1%2BiCgY5XQAHcyDjHD%2Bg3T3ktNbRX7bF7f8ai5iLcllrUsqhNrewG9cmGZj3%2FFhPkTyVr%2FnKpXUeeXa%2FQiF5KpiAf4b0AWLY%2FFHcUqTyjyIrMexuiedMZnTUqo8YnBatBorqKlaZOWnm0%2FsrVNoisJ60CPABKIQ0%2FI0jk%2Fy6J89xswtQCWz6VUSSeWiSckpuUX0EG21Wfgb2zeLmE81Dnrku%2BrT9gXXwQJTRTPsi28z8YXodHl8rDAdx2paTV8uwr5H22Hdk9KnbaHx%2BhkE%2F2EaLaBA2apEQAZxGxEGgg2LoG%2FSX3tLFqFSSiK46HhhFAW7yhI1OWTcMYhRKRZivIAeLnvPC2rCaPur0MWGhd%2BsXcmvqy2%2Bs93uTqsNSyNxZtdcEc%2FJ%2Bz%2B5WOIg%2BoZPG4yDSb9hyEIRcsRsA8ybsXyIJCmarUMDiRUVCgQrTC4oWzFPGuaupZTR34nxdv%2B00eZl%2BMLAyNYPM1gGyB6aC4IYjxv5xIlfmnGLG3l6lxGXE5viAqfh2bQ7lsnjzaZbgn%2B0ko9b4bWbIQ9XKNyOS4oC5tGmapfR3vtg%3D%3D&gtnp=0&gtpp=0&tp1=cf37f022-d980-4854-884d-1e3949811b21&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=uizcpS2vK%2BPE8C3jtYNgThNeVom%2Bc90lAaNmJ8t%2FDFo%3D&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&gtnp=0&gtpp=0&kt=210&&kbc=707&ki=7505256&ktd=0&kld=1003&kp=1&bd=-4%231024%231280%231%230 Browse: http://ww01.rotect.com/Allied_Medical_Winslow_Az_Driver.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc6TEPjii6jYyypXxZ4eYyija1oDOtc2I3nx4b%2BUMzFr2c%2FSLfe32iW2HH9q1ePVrxViaalLTTLGyJVWvW5wwyXnk0jGXhUCnigLLVRCzgQ%2Bqa%2BQ7kdoV3Prt2jVq2JIvbEY2Sy%2BlXVGBWokdZSGlvUcAtSWlTxaaJ6vtQd06Kdk1nLhN0fK4ZddBdusz%2Ba%2B4b5VUu3xTRNTeb%2BQEyZFOwuNbMfSEhVodK1RZgbaaONJTbSSfzHB3hSN4H%2Fhjew%2FV%2F2qn2geIorBIGVe8ihORHIvWa9m47FAM1VYbgstMUVFew55MOVOnVfz9%2F3wP9op%2FJdBOQEJ43Iyyhk5bv5IkaaQkmahSo57X7l%2FMZUPXy1JQU6%2F6SK5OBqOjsOztIJI%2FVVafAbGHp7mQ%2BNM7WdgsxJzmRjqbRFV5xZEYb3qkUfRTjeTewHOngd8mFDFv%2B3QCJ101a%2FS7zKV%2FRzq1pebGcywM1t%2FoqCdH3Gh%2F7IfGvgMIrQTiTjdCZWOR%2F5shU74SCxaDbOTGlbbsWMwtODtId1%2BiCgY5XQAHcyDjHD%2Bg3T3ktNbRX7bF7f8ai5iLcllrUsqhNrewG9cmGZj3%2FFhPkTyVr%2FnKpXUeeXa%2FQiF5KpiAf4b0AWLY%2FFHcUqTyjyIrMexuiedMZnTUqo8YnBatBorqKlaZOWnm0%2FsrVNoisJ60CPABKIQ0%2FI0jk%2Fy6J89xswtQCWz6VUSSeWiSckpuUX0EG21Wfgb2zeLmE81Dnrku%2BrT9gXXwQJTRTPsi28z8YXodHl8rDAdx2paTV8uwr5H22Hdk9KnbaHx%2BhkE%2F2EaLaBA2apEQAZxGxEGgg2LoG%2FSX3tLFqFSSiK46HhhFAW7yhI1OWTcMYhRKRZivIAeLnvPC2rCaPur0MWGhd%2BsXcmvqy2%2Bs93uTqsNSyNxZtdcEc%2FJ%2Bz%2B5WOIg%2BoZPG4yDSb9hyEIRcsRsA8ybsXyIJCmarUMDiRUVCgQrTC4oWzFPGuaupZTR34nxdv%2B00eZl%2BMLAyNYPM1gGyB6aC4IYjxv5xIlfmnGLG3l6lxGXE5viAqfh2bQ7lsnjzaZbgn%2B0ko9b4bWbIQ9XKNyOS4oC5tGmapfR3vtg%3D%3D&gtnp=0&gtpp=0&tp1=cf37f022-d980-4854-884d-1e3949811b21&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=uizcpS2vK%2BPE8C3jtYNgThNeVom%2Bc90lAaNmJ8t%2FDFo%3D&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&gtnp=0&gtpp=0&kt=210&&kbc=707&ki=326693501&ktd=0&kld=1003&kp=2&bd=-4%231024%231280%231%230 Browse: http://ww01.rotect.com/Flatbed_Truck_Driving_Jobs.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc6TEPjii6jYyypXxZ4eYyija1oDOtc2I3nx4b%2BUMzFr2c%2FSLfe32iW2HH9q1ePVrxViaalLTTLGyJVWvW5wwyXnk0jGXhUCnigLLVRCzgQ%2Bqa%2BQ7kdoV3Prt2jVq2JIvbEY2Sy%2BlXVGBWokdZSGlvUcAtSWlTxaaJ6vtQd06Kdk1nLhN0fK4ZddBdusz%2Ba%2B4b5VUu3xTRNTeb%2BQEyZFOwuNbMfSEhVodK1RZgbaaONJTbSSfzHB3hSN4H%2Fhjew%2FV%2F2qn2geIorBIGVe8ihORHIvWa9m47FAM1VYbgstMUVFew55MOVOnVfz9%2F3wP9op%2FJdBOQEJ43Iyyhk5bv5IkaaQkmahSo57X7l%2FMZUPXy1JQU6%2F6SK5OBqOjsOztIJI%2FVVafAbGHp7mQ%2BNM7WdgsxJzmRjqbRFV5xZEYb3qkUfRTjeTewHOngd8mFDFv%2B3QCJ101a%2FS7zKV%2FRzq1pebGcywM1t%2FoqCdH3Gh%2F7IfGvgMIrQTiTjdCZWOR%2F5shU74SCxaDbOTGlbbsWMwtODtId1%2BiCgY5XQAHcyDjHD%2Bg3T3ktNbRX7bF7f8ai5iLcllrUsqhNrewG9cmGZj3%2FFhPkTyVr%2FnKpXUeeXa%2FQiF5KpiAf4b0AWLY%2FFHcUqTyjyIrMexuiedMZnTUqo8YnBatBorqKlaZOWnm0%2FsrVNoisJ60CPABKIQ0%2FI0jk%2Fy6J89xswtQCWz6VUSSeWiSckpuUX0EG21Wfgb2zeLmE81Dnrku%2BrT9gXXwQJTRTPsi28z8YXodHl8rDAdx2paTV8uwr5H22Hdk9KnbaHx%2BhkE%2F2EaLaBA2apEQAZxGxEGgg2LoG%2FSX3tLFqFSSiK46HhhFAW7yhI1OWTcMYhRKRZivIAeLnvPC2rCaPur0MWGhd%2BsXcmvqy2%2Bs93uTqsNSyNxZtdcEc%2FJ%2Bz%2B5WOIg%2BoZPG4yDSb9hyEIRcsRsA8ybsXyIJCmarUMDiRUVCgQrTC4oWzFPGuaupZTR34nxdv%2B00eZl%2BMLAyNYPM1gGyB6aC4IYjxv5xIlfmnGLG3l6lxGXE5viAqfh2bQ7lsnjzaZbgn%2B0ko9b4bWbIQ9XKNyOS4oC5tGmapfR3vtg%3D%3D&gtnp=0&gtpp=0&tp1=cf37f022-d980-4854-884d-1e3949811b21&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=uizcpS2vK%2BPE8C3jtYNgThNeVom%2Bc90lAaNmJ8t%2FDFo%3D&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&gtnp=0&gtpp=0&kt=210&&kbc=707&ki=11028627&ktd=0&kld=1003&kp=3&bd=-4%231024%231280%231%230 Browse: http://ww01.rotect.com/Job_Vacancies_Jobs.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc6TEPjii6jYyypXxZ4eYyija1oDOtc2I3nx4b%2BUMzFr2c%2FSLfe32iW2HH9q1ePVrxViaalLTTLGyJVWvW5wwyXnk0jGXhUCnigLLVRCzgQ%2Bqa%2BQ7kdoV3Prt2jVq2JIvbEY2Sy%2BlXVGBWokdZSGlvUcAtSWlTxaaJ6vtQd06Kdk1nLhN0fK4ZddBdusz%2Ba%2B4b5VUu3xTRNTeb%2BQEyZFOwuNbMfSEhVodK1RZgbaaONJTbSSfzHB3hSN4H%2Fhjew%2FV%2F2qn2geIorBIGVe8ihORHIvWa9m47FAM1VYbgstMUVFew55MOVOnVfz9%2F3wP9op%2FJdBOQEJ43Iyyhk5bv5IkaaQkmahSo57X7l%2FMZUPXy1JQU6%2F6SK5OBqOjsOztIJI%2FVVafAbGHp7mQ%2BNM7WdgsxJzmRjqbRFV5xZEYb3qkUfRTjeTewHOngd8mFDFv%2B3QCJ101a%2FS7zKV%2FRzq1pebGcywM1t%2FoqCdH3Gh%2F7IfGvgMIrQTiTjdCZWOR%2F5shU74SCxaDbOTGlbbsWMwtODtId1%2BiCgY5XQAHcyDjHD%2Bg3T3ktNbRX7bF7f8ai5iLcllrUsqhNrewG9cmGZj3%2FFhPkTyVr%2FnKpXUeeXa%2FQiF5KpiAf4b0AWLY%2FFHcUqTyjyIrMexuiedMZnTUqo8YnBatBorqKlaZOWnm0%2FsrVNoisJ60CPABKIQ0%2FI0jk%2Fy6J89xswtQCWz6VUSSeWiSckpuUX0EG21Wfgb2zeLmE81Dnrku%2BrT9gXXwQJTRTPsi28z8YXodHl8rDAdx2paTV8uwr5H22Hdk9KnbaHx%2BhkE%2F2EaLaBA2apEQAZxGxEGgg2LoG%2FSX3tLFqFSSiK46HhhFAW7yhI1OWTcMYhRKRZivIAeLnvPC2rCaPur0MWGhd%2BsXcmvqy2%2Bs93uTqsNSyNxZtdcEc%2FJ%2Bz%2B5WOIg%2BoZPG4yDSb9hyEIRcsRsA8ybsXyIJCmarUMDiRUVCgQrTC4oWzFPGuaupZTR34nxdv%2B00eZl%2BMLAyNYPM1gGyB6aC4IYjxv5xIlfmnGLG3l6lxGXE5viAqfh2bQ7lsnjzaZbgn%2B0ko9b4bWbIQ9XKNyOS4oC5tGmapfR3vtg%3D%3D&gtnp=0&gtpp=0&tp1=cf37f022-d980-4854-884d-1e3949811b21&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=uizcpS2vK%2BPE8C3jtYNgThNeVom%2Bc90lAaNmJ8t%2FDFo%3D&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&gtnp=0&gtpp=0&kt=210&&kbc=707&ki=321217634&ktd=0&kld=1003&kp=4&bd=-4%231024%231280%231%230 Browse: http://ww01.rotect.com/Allied_Medical_Driver.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc6TEPjii6jYyypXxZ4eYyija1oDOtc2I3nx4b%2BUMzFr2c%2FSLfe32iW2HH9q1ePVrxViaalLTTLGyJVWvW5wwyXnk0jGXhUCnigLLVRCzgQ%2Bqa%2BQ7kdoV3Prt2jVq2JIvbEY2Sy%2BlXVGBWokdZSGlvUcAtSWlTxaaJ6vtQd06Kdk1nLhN0fK4ZddBdusz%2Ba%2B4b5VUu3xTRNTeb%2BQEyZFOwuNbMfSEhVodK1RZgbaaONJTbSSfzHB3hSN4H%2Fhjew%2FV%2F2qn2geIorBIGVe8ihORHIvWa9m47FAM1VYbgstMUVFew55MOVOnVfz9%2F3wP9op%2FJdBOQEJ43Iyyhk5bv5IkaaQkmahSo57X7l%2FMZUPXy1JQU6%2F6SK5OBqOjsOztIJI%2FVVafAbGHp7mQ%2BNM7WdgsxJzmRjqbRFV5xZEYb3qkUfRTjeTewHOngd8mFDFv%2B3QCJ101a%2FS7zKV%2FRzq1pebGcywM1t%2FoqCdH3Gh%2F7IfGvgMIrQTiTjdCZWOR%2F5shU74SCxaDbOTGlbbsWMwtODtId1%2BiCgY5XQAHcyDjHD%2Bg3T3ktNbRX7bF7f8ai5iLcllrUsqhNrewG9cmGZj3%2FFhPkTyVr%2FnKpXUeeXa%2FQiF5KpiAf4b0AWLY%2FFHcUqTyjyIrMexuiedMZnTUqo8YnBatBorqKlaZOWnm0%2FsrVNoisJ60CPABKIQ0%2FI0jk%2Fy6J89xswtQCWz6VUSSeWiSckpuUX0EG21Wfgb2zeLmE81Dnrku%2BrT9gXXwQJTRTPsi28z8YXodHl8rDAdx2paTV8uwr5H22Hdk9KnbaHx%2BhkE%2F2EaLaBA2apEQAZxGxEGgg2LoG%2FSX3tLFqFSSiK46HhhFAW7yhI1OWTcMYhRKRZivIAeLnvPC2rCaPur0MWGhd%2BsXcmvqy2%2Bs93uTqsNSyNxZtdcEc%2FJ%2Bz%2B5WOIg%2BoZPG4yDSb9hyEIRcsRsA8ybsXyIJCmarUMDiRUVCgQrTC4oWzFPGuaupZTR34nxdv%2B00eZl%2BMLAyNYPM1gGyB6aC4IYjxv5xIlfmnGLG3l6lxGXE5viAqfh2bQ7lsnjzaZbgn%2B0ko9b4bWbIQ9XKNyOS4oC5tGmapfR3vtg%3D%3D&gtnp=0&gtpp=0&tp1=cf37f022-d980-4854-884d-1e3949811b21&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=uizcpS2vK%2BPE8C3jtYNgThNeVom%2Bc90lAaNmJ8t%2FDFo%3D&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&gtnp=0&gtpp=0&kt=210&&kbc=707&ki=326693500&ktd=0&kld=1003&kp=5&bd=-4%231024%231280%231%230

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.131, 74.125.71.84, 172.217.16.206, 34.104.35.123, 40.127.169.103, 192.229.221.95, 20.3.187.198, 13.95.31.18, 216.58.206.66, 172.217.18.2, 2.23.209.179, 2.23.209.175, 2.23.209.167, 2.23.209.174, 2.23.209.181, 2.23.209.173, 2.23.209.178, 2.23.209.171, 2.23.209.180, 104.16.42.9, 104.16.43.9, 104.18.4.249, 104.18.5.249, 142.250.186.163
Excluded domains from analysis (whitelisted): www.bing.com, www.justanswer.com.cdn.cloudflare.net, fs.microsoft.com, accounts.google.com, www.everyjobforme.com.cdn.cloudflare.net, slscr.update.microsoft.com, partner.googleadservices.com, clientservices.googleapis.com, www-www.bing.com.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, e86303.dscx.akamaiedge.net, edgedl.me.gvt1.com, ocsp.digicert.com, www.bing.com.edgekey.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 1 05:38:54 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.973417169316479
Encrypted:	false
SSDEEP:	48:8/duT4HHqidAKZdA1P4ehwiZUklqeh2y+3:8I0oOBy
MD5:	5B17192913B0A365A9E1E5F52896F6C3
SHA1:	28B848F1C5E93B6178640B8BFA02C6E7DF3D87E0
SHA-256:	65E0A5F01F56889E024E0A758E83969B0C8F0F796A0E74E8B4A3D884410C3F23
SHA-512:	17D8E1772E445626CD07E996E20D53AB298E6A2FFA67929BABF454AAD039D97D001187CA25656EC28C3D7F97F7515A58005845111EAB0E11B25FB1D38FFEA1B3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......Oz......v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.Y.4....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.4....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.Y.4....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.Y.4.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.Y.4...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 1 05:38:53 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.990126226266844
Encrypted:	false
SSDEEP:	48:8yduT4HHqidAKZdA1+4eh/iZUkAQkqehxy+2:8f0pF9QEy
MD5:	FF404048AF45B71510934B66313BD3DE
SHA1:	3638E728D17B1DD02FA0689F54F736DA9456E9E1
SHA-256:	A05C8E107657F4D47BBFCC0198AFD5599EE3E07D53BEA4E445FA3418777A2907
SHA-512:	F2408E6DF04AD496107A3D3988296BB21F8DC2803AA348317653B3A99CDF4BD3B2007B1A13CC74E23E66903229D925BBE4C0B11A00402907DD1F585C15742878
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....0.;z......v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.Y.4....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.4....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.Y.4....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.Y.4.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.Y.4...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:56:51 2023, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2689
Entropy (8bit):	3.997633535873306
Encrypted:	false
SSDEEP:	48:8KduT4VHqidAKZdA1404eh7sFiZUkmgqeh7sny+BX:8n0GIndy
MD5:	8F9086938FE7325AF44DD2F7CD1ECBAF
SHA1:	C9A90712CFD6032126E86AFABC4A536F6AA96CFA
SHA-256:	F8817E2574F9B7BF590537704C96A8209BEF340DB14ED5E7481A65D7E338A9EC
SHA-512:	B664B3C35041F875DE4AD9A3C67193705DC8B642E95EFB14596CAB0D08DF9DC94F002CFB886B50CEECFDEC5D69ED256235C4165FFE54171926E99CAC0961239D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....<}.i.....v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.Y.4....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.4....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.Y.4....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.Y.4.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.VEW.F...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 1 05:38:53 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.987383353744907
Encrypted:	false
SSDEEP:	48:8eduT4HHqidAKZdA1p4ehDiZUkwqehFy+R:8D0+5vy
MD5:	8A12713AC0F32C244D8C4F5560099C1A
SHA1:	7F3F59E33514133DD40786D8D54CC3A8B0A32545
SHA-256:	366D927432379CC7914CA3511593E86BCEF97E48F1467D215874705AD8185C5F
SHA-512:	FC81077BBC57C4044E5259644924220CC04D4BB8CCE7A4E8AAED763755ED8D7EDB5ABF7C3365A38D17C654BEC95DC222EC4BF8C5D3D5A79C81E8B1B9C16813AC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....a6z......v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.Y.4....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.4....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.Y.4....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.Y.4.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.Y.4...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 1 05:38:53 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9768891883170854
Encrypted:	false
SSDEEP:	48:8XduT4HHqidAKZdA1X4ehBiZUk1W1qehTy+C:8Q0wb9zy
MD5:	456BC2BC169385E4D08CA1028904BCF8
SHA1:	B59B6FACE96CE00903E48F8D0CA112B61BBF160E
SHA-256:	4B6F45AD84C3E964AE582AF9F04F799CAC5D11416C593F9550CBC22BA7BFD44B
SHA-512:	B0839902FD6EC4FA271CEEC6012B5E7638059E77AF638D2A026102223F5171DF3E1971ECF2349D574F11EB460847A40E1DD09E30B57821EC487550927820FCDA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....E{Az......v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.Y.4....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.4....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.Y.4....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.Y.4.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.Y.4...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 1 05:38:53 2024, atime=Wed Sep 27 08:36:55 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9868357351694663
Encrypted:	false
SSDEEP:	48:8+duT4HHqidAKZdA1duTc4ehOuTbbiZUk5OjqehOuTbdy+yT+:8j0tTcJTbxWOvTbdy7T
MD5:	EF3364D3F4CCEAE67E54318E38215CFD
SHA1:	D43EB00A4904E2D45FB6B24259854E00410477BF
SHA-256:	23F96C20FD93F8FDE80116E5E2E2C0AC4309FE9817F5225A2EF3501F2DA702B5
SHA-512:	828064538F18E081EA5A627E26FB3C199FAEAF52D3195300DDCEAB3AB0AA78D0C3490FE252E7EAC9ECAB01F01761DE03734D63B7D3C4F163A36D3779E05CD2D6
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......,z......v'&... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.I..PROGRA~1..t......O.I.Y.4....B...............J.....\...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.4....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.F..Chrome..>......CW.V.Y.4....M......................O..C.h.r.o.m.e.....`.1.....EW.F..APPLIC~1..H......CW.V.Y.4.............................A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.L .CHROME~1.EXE..R......CW.V.Y.4...........................).c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	downloaded
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/js/min.js?v2.3
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
URL:	http://i3.cdn-image.com/__media__/pics/29590/bg1.png
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10741), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	42246
Entropy (8bit):	6.049612249311808
Encrypted:	false
SSDEEP:	768:CiBtrifZVO7Wg3hIBYWVsY7JXv9lUD0lUDLlUDplUDylUDoVT4EIWnYdiGPobcq:C8Cg3aDFv9uD0uDLuDpuDyuDoVTpIDZ0
MD5:	8C882C8FCF6BA28393C05FD50FA59CFE
SHA1:	2711F2213A92E0C177D3488EA5FE3EAB01AA6699
SHA-256:	58D0D0A3F0A5812D2C379497A8B7681EEF062FE5A4D74A6E91C97CD2288D6F30
SHA-512:	1531B32BE2841BC5B0965C4BBEDE53A74C1997D57B0B1234A2E4700876A816DF2FFBAECDD6E90BF1B5222101AED1B37AAA6C4A4A5B6EEA6250D32C3FD4111A5F
Malicious:	false
Reputation:	low
URL:	http://ww01.rotect.com/?dn=rotect.com&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&pid=9POT3387I
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>..<head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net">.. <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17312, version 2.1
Category:	downloaded
Size (bytes):	17312
Entropy (8bit):	7.969945306725023
Encrypted:	false
SSDEEP:	384:gIMoUXEVKzOr+cRe8hGCLzypa78QKS+RATaD:PMoU0VKzoJe80Ms5D
MD5:	BEBE201D813FEAAD85A3E66607D0DA3A
SHA1:	28B049502AFA8E9DB5340C1A92400591B39870E8
SHA-256:	58BB75322BEB862803B0D156E1A1D01FB1E7FDE82EE93C929B08BF5AEA9FC55B
SHA-512:	2C83376EDCB92F471C458F6C5F316DD24639FCBB88AEC93B2C2690A596CC129860D0D46A2FE1FB4D71AF8AE5856EE48F19EBB17DAD38DDE918AF76C3ABF7441B
Malicious:	false
Reputation:	low
URL:	http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Preview:	wOFF......C.......s`........................FFTM...l........i..+GDEF.............'..GPOS................GSUB...p... ... l.t.OS/2.......T...`..=.cmap.......u.......gasp...\............glyf...d..(...G8a.?.head..9p...4...6....hhea..9....!...$...'hmtx..9.........Y.-.loca..<x............maxp..>........ .P.7name..>............post..A.........8Y,.prep..C.........h.............h<......'......d:................................x...[l\......vb{l......7....h.o.+....!Q.p1.O.P.P%.h......UU...UEMpQ.ZA.1.I !.C..@...=...=..:.cB.P5:>.9{....^k......)wJ..x.)..R~.....gO>m~....6.BJ..:..tIY.._...dq../mxe...l\|ic.....Kc..lzj..o...%.;....^.x}.o..l.e...gOV.V=\5]..z_..o..n.o..;..5.5.........5.....n................O./...c.t.R.4.t...K...TCm.H..........]....nT:.:.t....j..A..JwU...$.![y...J+.....u.....).I.H..7I..H....%..}.........nZ..ef/. .?(O.A7)..q...p...f.#xx.M.O.;.j...q7.7..Ds.O.@t.D1Et...0.F....`.f.d...9wIX.F.a...fxl.C..[.0.F.0..D..E.a.c(.8<G.j...,....S.Y..>.t..2s.Y....G

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	dropped
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33926)
Category:	downloaded
Size (bytes):	33929
Entropy (8bit):	5.358945546794763
Encrypted:	false
SSDEEP:	768:TP2yjwVcbMnnZNdxBB5gPi0f8rnaVG4xYEb0Ddem+euROvvMzLXWI+6Ch75BGJ21:gn7rnSG4xYEzRLm
MD5:	F9AF67FC41AF13EBEB43BB7FB4A3EF04
SHA1:	2F47A543758968868C5196E31204D6C8A60485FE
SHA-256:	24F07D59FD81BFE363668BA707EDA0644C3B156F000DA1B110FF362CA8214C57
SHA-512:	17FF23DF7CF94A5AB68EFC0C316F2F9820B6196F4FD1273F8F5E6FF2F303997BF36EC3725B038BA9CCB417F44AD9CAEFFA9DBC32B0D11113400CF89034DAA2E2
Malicious:	false
Reputation:	low
URL:	http://rotect.com/bZehyVOgP.js
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).version={})}(this,(function(exports){"use strict";function __awaiter(e,t,n,i){return new(n\|\|(n=Promise))((function(s,a){function o(e){try{d(i.next(e))}catch(e){a(e)}}function r(e){try{d(i.throw(e))}catch(e){a(e)}}function d(e){var t;e.done?s(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(o,r)}d((i=i.apply(e,t\|\|[])).next())}))}var Blocking;"function"==typeof SuppressedError&&SuppressedError,function(e){e.PENDING="pending",e.NONE="none",e.BLOCKED="blocked",e.ALLOWED="allowed"}(Blocking\|\|(Blocking={}));class Adblock{constructor(e){this.state=Blocking.PENDING,this._mocked=!1,e?(this.state=e,this._mocked=!0):this.state=Blocking.ALLOWED}inject(){return __awaiter(this,void 0,void 0,(function*(){}))}get isBlocked(){return this.state===Blocking.BLOCKED}get isAllowed(){return this.

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 34 x 29, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	346
Entropy (8bit):	6.229840441641423
Encrypted:	false
SSDEEP:	6:6v/lhPwtz4nDLl9W0y37CpH0xVc4kSbOaWdgR38C+ogSM4bXBxqy3ytDdp:6v/7SML/rp627SbVcoXrbXnqzH
MD5:	FF018650CBB4B192CCD337C6C9478D1E
SHA1:	D6409B6DF8F0B929E8D5C7F9F49F4FBABACDC0DC
SHA-256:	C5EA92061AA96E1E5AEBFE0714F3383A02BEF2ED7A584D0493841573B653E8C6
SHA-512:	2C88089E0AC3EA8AA93AD5E643AC01F77A727DFA2E28843ED436ADC2E96E32F0F0BA5EB17F70F4D039B70C4A1E106D2AE24A2BA1D4E5ADAEFB90E4B456E944F1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..."...........N....EPLTEGpL..................................................................W.4.....tRNS.Q...!0....r..>~.._...O#.....IDAT(..... ...A..j..Q7..N...w..4Q.~..+.0443.......&A.?.X..<.b.Q..h.....Fb]0..\..u!....M#.2......~L.H.v.c.7.N....n......@.......7...m...$\.K'..M\..TjG.%G.._...\XjU..cP .{4......IEND.B`.

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25856)
Category:	downloaded
Size (bytes):	110281
Entropy (8bit):	5.381192304780725
Encrypted:	false
SSDEEP:	768:5cZoWRfuJuXcZoYRgZoo1cZoCRvgStdSk6UNxLdbLrT5uTY6Kwqi4Hw8VBmpm079:5y+qRuZtdSk6IxLd7kvI0RgRPBgtVaT8
MD5:	CCFF0260172BA618AFE876356DADCA31
SHA1:	5C5CE9F1845C4B98F46789A9D4C57B4C8420E00E
SHA-256:	1A9EA8C7840FC72D29E2CEC5018658A8FBD65CF1FFDF92D12BB6B98009A36E99
SHA-512:	B4CFCFD30243DDA4EF81043044B205DA0CC421365B50AB549B89908E7EDBFCDB5F701E63C14EB2AF08225455B1A62108A7FFDED468B2654B2FD02352BD38544C
Malicious:	false
Reputation:	low
URL:	https://cdn.consentmanager.net/delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfMjY.js
Preview:	if(!("cmp_config_data" in window)){window.cmp_config_data={};}window.cmp_svg_no=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","viewBox":"0 0 512 256"}, "", function (x){x.child("g", {}, "", true, function (x){x.child("ellipse", {"id":"svg_11","ry":"111.500004","rx":"113","cy":"120.89999","cx":"386","stroke-linecap":"null","stroke-linejoin":"null","stroke-dasharray":"null","stroke-width":"0","stroke":"#000000","fill":"#e5e5e5","class":"cmpsvgsilverfill"}).child("rect", {"id":"svg_13","height":"222","width":"256.999992","y":"9.899994","x":"140.000002","stroke-linecap":"null","stroke-linejoin":"null","stroke-dasharray":"null","stroke-width":"0","stroke":"#000000","fill":"#e5e5e5","class":"cmpsvgsilverfill"}).child("ellipse", {"ry":"111.500004","rx":"113","id":"svg_9","cy":"118.399998","cx":"125","stroke-linecap":"null","stroke-linejoin":"null","stroke-dasharray":"null","stroke-width":"0","stroke":"#000000","fill

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (346), with no line terminators
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	5.00818604439199
Encrypted:	false
SSDEEP:	6:qIZmJNsVwbDRWPWG3mV/R7cjTDEG5OQRoYxHSNHbMFKdCuFxXcvH3eVP4SzpF9yc:+JG0DRWZmX7OPrRNwN7MFMCu/cvOVQSl
MD5:	F84F931C0DD37448E03F0DABF4E4CA9F
SHA1:	9C2C50EDCF576453CCC07BF65668BD23C76E8663
SHA-256:	5C1D5FD46A88611C31ECBB8FFC1142A7E74EC7FB7D72BD3891131C880EF3F584
SHA-512:	AFC3089D932FB030E932BF6414AC05681771051DD51D164F09635CA09CBD8525A52879524B6AA24E972E7766DDF529484CC1EC416DE8B61255435A89BA781F8C
Malicious:	false
Reputation:	low
URL:	http://ww01.rotect.com/px.js?ch=2
Preview:	var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 34 x 29, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	6.229840441641423
Encrypted:	false
SSDEEP:	6:6v/lhPwtz4nDLl9W0y37CpH0xVc4kSbOaWdgR38C+ogSM4bXBxqy3ytDdp:6v/7SML/rp627SbVcoXrbXnqzH
MD5:	FF018650CBB4B192CCD337C6C9478D1E
SHA1:	D6409B6DF8F0B929E8D5C7F9F49F4FBABACDC0DC
SHA-256:	C5EA92061AA96E1E5AEBFE0714F3383A02BEF2ED7A584D0493841573B653E8C6
SHA-512:	2C88089E0AC3EA8AA93AD5E643AC01F77A727DFA2E28843ED436ADC2E96E32F0F0BA5EB17F70F4D039B70C4A1E106D2AE24A2BA1D4E5ADAEFB90E4B456E944F1
Malicious:	false
Reputation:	low
URL:	http://i4.cdn-image.com/__media__/pics/28905/res-arw.png
Preview:	.PNG........IHDR..."...........N....EPLTEGpL..................................................................W.4.....tRNS.Q...!0....r..>~.._...O#.....IDAT(..... ...A..j..Q7..N...w..4Q.~..+.0443.......&A.?.X..<.b.Q..h.....Fb]0..\..u!....M#.2......~L.H.v.c.7.N....n......@.......7...m...$\.K'..M\..TjG.%G.._...\XjU..cP .{4......IEND.B`.

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	downloaded
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
Reputation:	low
URL:	https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (13127)
Category:	downloaded
Size (bytes):	13749
Entropy (8bit):	5.292505675393976
Encrypted:	false
SSDEEP:	96:2E/yk2iwlb5lphMzwronSc90IMvm0yEM6vfNYrW1idHMwDNw9WDEG8MwD3w9WDWK:2E12ikpgn9+m0yEMcfWrqXG1STZ7MaO0
MD5:	65BBC66FCB6B25735F739858F6F61385
SHA1:	7124A75CB5F3621AA9A9DA5B1A68D592E052A3BD
SHA-256:	58B97E33C6E1F1230353EFB0460A8231759AA0C8BFC81B46914C0C5A7E344E06
SHA-512:	0E84853DCE171171BEC17251A322C51DB209569718ED91D978D1A4024BB34C8370B868A134078349FED7ABAED5DF7A36E64FB28E20E03C6B289DB41FB99748FE
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol306%2Cpid-bodis-gcontrol426%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol202&client=dp-bodis30_3ph&r=m&hl=en&rpbu=http%3A%2F%2Frotect.com%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2898040491288658&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266&format=r3&nocache=9401722494359241&num=0&output=afd_ads&domain_name=rotect.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1722494359242&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=816&frm=0&uio=-&cont=rs&drt=0&jsid=caf&nfp=1&jsv=652824369&rurl=http%3A%2F%2Frotect.com%2F
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	dropped
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	dropped
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	downloaded
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
URL:	http://i3.cdn-image.com/__media__/js/min.js?v2.3
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
URL:	http://i4.cdn-image.com/__media__/pics/29590/bg1.png
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	443763
Entropy (8bit):	5.372207704344212
Encrypted:	false
SSDEEP:	6144:PpK9KwI51nTb7W9/juAwiiogfk8BzPdcXNVYoB4sE7oJsGjH2Pb//sFrq+8ucIJc:fxz1kNVYV7oJsGRFrBfo
MD5:	68B6EA7B911811A1686E48E0DE64449E
SHA1:	0159EE6A502E6D29E990CF504978092705747971
SHA-256:	58B307B138B72EFDF43623AA8EB732848EDA7727B5156D13BABFEC43F7D0DF6A
SHA-512:	60C5F7883EEEC0FBB9AD51D0BEFB15C7406C85B3AC32C752BDD87345F305687323F2B0E7E91C86ED6A18E2E6C2C4244317B75653D8EFAF89717D444B1E2E43A4
Malicious:	false
Reputation:	low
Preview:	window.cmpccsversionbuild="2024-7-16.20.6";if(!("rpl" in String.prototype)){Object.defineProperty(String.prototype,"rpl",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("cmp_unq" in window)){window.cmp_unq=function(a){return a.filter(function(c,d,b){return b&&b.indexOf(c)===d})}}if(!("replaceAll" in String.prototype)){Object.defineProperty(String.prototype,"replaceAll",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("fnd" in Array.prototype)){Object.defineProperty(Array.prototype,"fnd",{value:function(b){var c=this;b=String(b);for(var a=0;a<c.length;a++){if(String(c[a])==b){return a}}return -1},enumerable:false})}window.cmp_fnd=function(a,c){var d=a;c=String(c);for(var b=0;b<d.length;b++){if(String(d[b])==c){return b}}return -1};window.cmpccsversion=20220717;(function(){var b="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",a=/^(?:[A-Za-z\d+\/]{4})*?(?:[A-Za-z\d+\/]{2}(?:==)?\|[A-Za-z\d+\/]{3}=?)?$/

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 34 x 29, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	346
Entropy (8bit):	6.229840441641423
Encrypted:	false
SSDEEP:	6:6v/lhPwtz4nDLl9W0y37CpH0xVc4kSbOaWdgR38C+ogSM4bXBxqy3ytDdp:6v/7SML/rp627SbVcoXrbXnqzH
MD5:	FF018650CBB4B192CCD337C6C9478D1E
SHA1:	D6409B6DF8F0B929E8D5C7F9F49F4FBABACDC0DC
SHA-256:	C5EA92061AA96E1E5AEBFE0714F3383A02BEF2ED7A584D0493841573B653E8C6
SHA-512:	2C88089E0AC3EA8AA93AD5E643AC01F77A727DFA2E28843ED436ADC2E96E32F0F0BA5EB17F70F4D039B70C4A1E106D2AE24A2BA1D4E5ADAEFB90E4B456E944F1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..."...........N....EPLTEGpL..................................................................W.4.....tRNS.Q...!0....r..>~.._...O#.....IDAT(..... ...A..j..Q7..N...w..4Q.~..+.0443.......&A.?.X..<.b.Q..h.....Fb]0..\..u!....M#.2......~L.H.v.c.7.N....n......@.......7...m...$\.K'..M\..TjG.%G.._...\XjU..cP .{4......IEND.B`.

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	dropped
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
Reputation:	low
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 26 x 49, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.035372245524404
Encrypted:	false
SSDEEP:	3:yionv//thPl1KuIHxl/k4E08up:6v/lhPauIH7Tp
MD5:	7AA9FA4308884B536FFA721EC211A3BF
SHA1:	3F2FEFDDD07CC0EA4E5610F2950E963739E91702
SHA-256:	CD046D8E43962E97F25C62807143B3717A896EE6799FD9435B640BB901D5166E
SHA-512:	227736B634C51E933D84CD0656791FD091204FF0E677090FBCE922A372328BCBFB416D4C96676B6BEF50E154B0D7C0174073652D20EDA359C136D418FED62439
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......1.....KC.l....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	8131
Entropy (8bit):	4.6417718993676536
Encrypted:	false
SSDEEP:	96:BcJo/fDs0t4RGAjHLpj4bZwfkxKpylAydpg+XKxqnKYM8Tvu6KQrAv2gCvfncyTV:BcJ+HqRGgpAZwsxxA0fK3Uu3Qm2bvLb
MD5:	869C4A10BC717E37A1B2D61034F8BFC4
SHA1:	584C922FF58C4A000F251D1D55486CDBF347976C
SHA-256:	97D2094AB604D8079FE53BB5F595036EF8755894171E1E3146F3DC61356E8816
SHA-512:	E88606643B423DB20627EF5D10B4E237DDEECE592D2A5FDB35C18663CB2465B1751E6A65295F02C13BCA71A45F4A9A3A6589D7E95DCC6CD8AAB313D748B98695
Malicious:	false
Reputation:	low
URL:	http://rotect.com/legal
Preview:	<!DOCTYPE html>.<html xmlns="http://www.w3.org/1999/xhtml" lang="en">.<head>. <meta http-equiv="Content-Type" content="text/html; charset=utf-8">. <title>Legal</title>. <style>. body {. font-family: Helvetica, trebuchet ms, arial, sans-serif;. margin: 0;. }.. .hic {. height: 70px;. position: relative;. width: 1000px;. margin: 0 auto;. border-bottom: 1px solid #000;. }.. .hicl {. position: absolute;. left: 20px;. top: 20px;. font-weight: 300;. font-size: 26px;. color: #000;. font-family: helvetica, arial, sans-serif;. }.. .c {. position: relative;. width: 1000px;. margin: 10px auto 0;. overflow: hidden;. }.. .cu {. font-size: 11px;. margin: 0 0 30px;. }.. h2 {. font-size: 16p

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44174)
Category:	downloaded
Size (bytes):	44175
Entropy (8bit):	5.377319969401598
Encrypted:	false
SSDEEP:	768:UYwCFhglt116xuLcDX91tOwj4dPdmdXpdmkb18DurysSrhVGAGI89+v5YAbYhoUz:ULt11/LcDN16amwGVGAK
MD5:	BE3098870E0BB50A40341B9B2B42753B
SHA1:	0759A117A43C8D5FCDCBC63EC9E1BAFB81F5C460
SHA-256:	25B1F543C4682618E2FFF0C607D70A896ECFC080CE500C41CE00B7FFAD0EC411
SHA-512:	112FDBB12458B051AA2F70A7DA82B2237A599FD2F820A53E406CE9DF1B6A965EF79C2F4875EAB498ED2FF4BEE184B46E857FBB520950E1A39D59F8FDC7A66F00
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/8c81cb09042c/api.js?onload=UYbeL2&render=explicit
Preview:	"use strict";(function(){function Rt(e,n,r,o,c,u,y){try{var _=e[u](y),d=_.value}catch(p){r(p);return}_.done?n(d):Promise.resolve(d).then(o,c)}function It(e){return function(){var n=this,r=arguments;return new Promise(function(o,c){var u=e.apply(n,r);function y(d){Rt(u,o,c,y,_,"next",d)}function _(d){Rt(u,o,c,y,_,"throw",d)}y(void 0)})}}function F(e,n){return n!=null&&typeof Symbol!="undefined"&&n[Symbol.hasInstance]?!!n[Symbol.hasInstance](e):F(e,n)}function Ie(e,n,r){return n in e?Object.defineProperty(e,n,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[n]=r,e}function Oe(e){for(var n=1;n<arguments.length;n++){var r=arguments[n]!=null?arguments[n]:{},o=Object.keys(r);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(r).filter(function(c){return Object.getOwnPropertyDescriptor(r,c).enumerable}))),o.forEach(function(c){Ie(e,c,r[c])})}return e}function gr(e,n){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10769), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	39068
Entropy (8bit):	5.912168156256332
Encrypted:	false
SSDEEP:	768:CiBtrifZVO7Wg3hIBYRY91Oko24DlwTZyDuMBTmz5R0I90RO/XcdiGP6bcq:C8Cg3a9rovDlwIDuMBK4RSCZP6bcq
MD5:	5BBD725991416B668FF2B53C058BBB15
SHA1:	80DABC2F9AB180673B3DF3AAA545A27602F027C1
SHA-256:	D12F5911782177717C7E5AD67996F0C744C3383B52E4B19D75A7E306C6408192
SHA-512:	A8ECD234584C7EB9F3D2D3CF1162AB9F740AD3706F3E397FEB95B9A6E4DEB0B7EBBABFBDD9334C6DCC6DB4504719E66360E995BEF3F4514A0ACBA63F186A9FF5
Malicious:	false
Reputation:	low
URL:	http://ww01.rotect.com/Flatbed_Truck_Driving_Jobs.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc6TEPjii6jYyypXxZ4eYyija1oDOtc2I3nx4b%2BUMzFr2c%2FSLfe32iW2HH9q1ePVrxViaalLTTLGyJVWvW5wwyXnk0jGXhUCnigLLVRCzgQ%2Bqa%2BQ7kdoV3Prt2jVq2JIvbEY2Sy%2BlXVGBWokdZSGlvUcAtSWlTxaaJ6vtQd06Kdk1nLhN0fK4ZddBdusz%2Ba%2B4b5VUu3xTRNTeb%2BQEyZFOwuNbMfSEhVodK1RZgbaaONJTbSSfzHB3hSN4H%2Fhjew%2FV%2F2qn2geIorBIGVe8ihORHIvWa9m47FAM1VYbgstMUVFew55MOVOnVfz9%2F3wP9op%2FJdBOQEJ43Iyyhk5bv5IkaaQkmahSo57X7l%2FMZUPXy1JQU6%2F6SK5OBqOjsOztIJI%2FVVafAbGHp7mQ%2BNM7WdgsxJzmRjqbRFV5xZEYb3qkUfRTjeTewHOngd8mFDFv%2B3QCJ101a%2FS7zKV%2FRzq1pebGcywM1t%2FoqCdH3Gh%2F7IfGvgMIrQTiTjdCZWOR%2F5shU74SCxaDbOTGlbbsWMwtODtId1%2BiCgY5XQAHcyDjHD%2Bg3T3ktNbRX7bF7f8ai5iLcllrUsqhNrewG9cmGZj3%2FFhPkTyVr%2FnKpXUeeXa%2FQiF5KpiAf4b0AWLY%2FFHcUqTyjyIrMexuiedMZnTUqo8YnBatBorqKlaZOWnm0%2FsrVNoisJ60CPABKIQ0%2FI0jk%2Fy6J89xswtQCWz6VUSSeWiSckpuUX0EG21Wfgb2zeLmE81Dnrku%2BrT9gXXwQJTRTPsi28z8YXodHl8rDAdx2paTV8uwr5H22Hdk9KnbaHx%2BhkE%2F2EaLaBA2apEQAZxGxEGgg2LoG%2FSX3tLFqFSSiK46HhhFAW7yhI1OWTcMYhRKRZivIAeLnvPC2rCaPur0MWGhd%2BsXcmvqy2%2Bs93uTqsNSyNxZtdcEc%2FJ%2Bz%2B5WOIg%2BoZPG4yDSb9hyEIRcsRsA8ybsXyIJCmarUMDiRUVCgQrTC4oWzFPGuaupZTR34nxdv%2B00eZl%2BMLAyNYPM1gGyB6aC4IYjxv5xIlfmnGLG3l6lxGXE5viAqfh2bQ7lsnjzaZbgn%2B0ko9b4bWbIQ9XKNyOS4oC5tGmapfR3vtg%3D%3D&gtnp=0&gtpp=0&tp1=cf37f022-d980-4854-884d-1e3949811b21&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=uizcpS2vK%2BPE8C3jtYNgThNeVom%2Bc90lAaNmJ8t%2FDFo%3D&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&gtnp=0&gtpp=0&kt=210&&kbc=707&ki=11028627&ktd=0&kld=1003&kp=3&bd=-4%231024%231280%231%230
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>..<head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net">.. <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 33316, version 1.0
Category:	downloaded
Size (bytes):	33316
Entropy (8bit):	7.982608626186682
Encrypted:	false
SSDEEP:	768:KCJR7w4XrSWY4xX0FasJv6BSivTSweHDwy0TADXWxdhSZn++l:K27w+rSWY+0oaC0ivGHDwfMLWPhL+l
MD5:	0A550368742E4B4063C90C6F73EAA16A
SHA1:	74A970F23B23EC1208B39DB0515579906F2B8D89
SHA-256:	D73F9ECEDF37C51DAC037842250D8AD1FB6CC64BDFB16B6902CAA6782866C06A
SHA-512:	20E8682427700FA55B4B8F085F15CE836B5783EBB8956853FD833E321028AE85E86246B5558D14248DE7A31FAF3AACD24DAC6030645954930A009BF1CCE7068F
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff
Preview:	wOFF.......$......&.........................FFTM.............9.GDEF.......M...h.!..GPOS..........6..%dGSUB..,........$W`:COS/2...\|...S...`a.cmap..............ubcvt ..0\...<...<.Y..fpgm..0........eS./.gasp..2L............glyf..2T..F.........head..x....6...6....hhea..y.... ...$...Qhmtx..y<...J.....7V.loca..{...........maxp..}P... ... ....name..}p........gq..post.............J.prep...x........Q>..webf.............\-..........hR.......F.....S..x.%.=.@P...y>.]a.J5.$...`.&..MNuI@..Z2.(]eAM.{..F=Y0....].......O...K.>m..#...x..}.l...\.m./......b.q.!.I...mjH.eX.M[&.0].i3(MQ6b....a.e...tP.x"7.x....^..........u......Y.g..9...?...B.......s.s......<.T...zW-i}.m.r...?..Z..?..W.n..U......./..Se{.........Z.......~.l..=u..{.k..6<.X.s{...o..>......^U.8._...R\|..%..u.x.....Z................_.%5..0tA..F.../.I\|...:..U...W...u...o.N=.sW......q.<~...=..>5..?....n..[...o}....7.Q...Yf..I.qU..O..I..8s..JJ.;.uP..g.~.o......:.O.:._.^+.q.I....,.,.w4P.#..5y.EQ.o...u

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 33316, version 1.0
Category:	downloaded
Size (bytes):	33316
Entropy (8bit):	7.982608626186682
Encrypted:	false
SSDEEP:	768:KCJR7w4XrSWY4xX0FasJv6BSivTSweHDwy0TADXWxdhSZn++l:K27w+rSWY+0oaC0ivGHDwfMLWPhL+l
MD5:	0A550368742E4B4063C90C6F73EAA16A
SHA1:	74A970F23B23EC1208B39DB0515579906F2B8D89
SHA-256:	D73F9ECEDF37C51DAC037842250D8AD1FB6CC64BDFB16B6902CAA6782866C06A
SHA-512:	20E8682427700FA55B4B8F085F15CE836B5783EBB8956853FD833E321028AE85E86246B5558D14248DE7A31FAF3AACD24DAC6030645954930A009BF1CCE7068F
Malicious:	false
Reputation:	low
URL:	http://i4.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff
Preview:	wOFF.......$......&.........................FFTM.............9.GDEF.......M...h.!..GPOS..........6..%dGSUB..,........$W`:COS/2...\|...S...`a.cmap..............ubcvt ..0\...<...<.Y..fpgm..0........eS./.gasp..2L............glyf..2T..F.........head..x....6...6....hhea..y.... ...$...Qhmtx..y<...J.....7V.loca..{...........maxp..}P... ... ....name..}p........gq..post.............J.prep...x........Q>..webf.............\-..........hR.......F.....S..x.%.=.@P...y>.]a.J5.$...`.&..MNuI@..Z2.(]eAM.{..F=Y0....].......O...K.>m..#...x..}.l...\.m./......b.q.!.I...mjH.eX.M[&.0].i3(MQ6b....a.e...tP.x"7.x....^..........u......Y.g..9...?...B.......s.s......<.T...zW-i}.m.r...?..Z..?..W.n..U......./..Se{.........Z.......~.l..=u..{.k..6<.X.s{...o..>......^U.8._...R\|..%..u.x.....Z................_.%5..0tA..F.../.I\|...:..U...W...u...o.N=.sW......q.<~...=..>5..?....n..[...o}....7.Q...Yf..I.qU..O..I..8s..JJ.;.uP..g.~.o......:.O.:._.^+.q.I....,.,.w4P.#..5y.EQ.o...u

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 34 x 29, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	6.229840441641423
Encrypted:	false
SSDEEP:	6:6v/lhPwtz4nDLl9W0y37CpH0xVc4kSbOaWdgR38C+ogSM4bXBxqy3ytDdp:6v/7SML/rp627SbVcoXrbXnqzH
MD5:	FF018650CBB4B192CCD337C6C9478D1E
SHA1:	D6409B6DF8F0B929E8D5C7F9F49F4FBABACDC0DC
SHA-256:	C5EA92061AA96E1E5AEBFE0714F3383A02BEF2ED7A584D0493841573B653E8C6
SHA-512:	2C88089E0AC3EA8AA93AD5E643AC01F77A727DFA2E28843ED436ADC2E96E32F0F0BA5EB17F70F4D039B70C4A1E106D2AE24A2BA1D4E5ADAEFB90E4B456E944F1
Malicious:	false
Reputation:	low
URL:	http://i2.cdn-image.com/__media__/pics/28905/res-arw.png
Preview:	.PNG........IHDR..."...........N....EPLTEGpL..................................................................W.4.....tRNS.Q...!0....r..>~.._...O#.....IDAT(..... ...A..j..Q7..N...w..4Q.~..+.0443.......&A.?.X..<.b.Q..h.....Fb]0..\..u!....M#.2......~L.H.v.c.7.N....n......@.......7...m...$\.K'..M\..TjG.%G.._...\XjU..cP .{4......IEND.B`.

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2250)
Category:	downloaded
Size (bytes):	200607
Entropy (8bit):	5.672226959845608
Encrypted:	false
SSDEEP:	3072:YirVJCp2NAR2CdnEdHX38XqXGeQr+1tqFWap:YoC/vnEdVX5a+1AFlp
MD5:	9E70811B8617A1A10960037427085FC7
SHA1:	4082BBB77ED26252763185493233479B3437B584
SHA-256:	DF6F5CBDF13A45ADCDB01BE3429806C2CCEBA8357EC345F251C86E0CB67058DA
SHA-512:	9F64AC20CBFC1E746DD77CDE43540E54A23A2EB7411110397F2F9765E8B89E9E8D11217051EFAA3AE302EBB5BE8DCB20385627A9A580FC5B765FD83ACD954EDA
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/adsense/domains/caf.js?pac=0
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"14817037442938954297",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301431,17301433,17301436,17301511,17301515,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog"}};var n;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (346), with no line terminators
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	5.00818604439199
Encrypted:	false
SSDEEP:	6:qIZmJNsVwbDRWPWG3mV/R7cjTDEG5OQRoYxHSNHbMFKdCuFxXcvH3eVP4SzpF9yc:+JG0DRWZmX7OPrRNwN7MFMCu/cvOVQSl
MD5:	F84F931C0DD37448E03F0DABF4E4CA9F
SHA1:	9C2C50EDCF576453CCC07BF65668BD23C76E8663
SHA-256:	5C1D5FD46A88611C31ECBB8FFC1142A7E74EC7FB7D72BD3891131C880EF3F584
SHA-512:	AFC3089D932FB030E932BF6414AC05681771051DD51D164F09635CA09CBD8525A52879524B6AA24E972E7766DDF529484CC1EC416DE8B61255435A89BA781F8C
Malicious:	false
Reputation:	low
URL:	http://ww01.rotect.com/px.js?ch=1
Preview:	var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
URL:	http://i2.cdn-image.com/__media__/pics/29590/bg1.png
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10769), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	38593
Entropy (8bit):	5.904031120122514
Encrypted:	false
SSDEEP:	768:CiBtrifZVO7Wg3hIBYTY91Okozcs8bq3XRbmM5OL3bNfi6Q6PiQmzQdiGP6bcq:C8Cg3U9rozrWq3BKM5OzboUiQZZP6bcq
MD5:	6E31DCC49B5D64D6CFC5938509215A2F
SHA1:	0E4E39161A2A7C3E251A24F9585AE4B790D7CF5F
SHA-256:	C8F9700C030642C66E17A3824266E291AA127E21FDA27E1F258A6928A3CB4F58
SHA-512:	3903D14A655C6AF183025EA8EF691952A8491672B71F3A5038826CB5D443198D80D4B947EA46D2B59BE98B84AE65ABC8EF069CF846A2F8133E2BF49046290D26
Malicious:	false
Reputation:	low
URL:	http://ww01.rotect.com/Allied_Medical_Driver.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc6TEPjii6jYyypXxZ4eYyija1oDOtc2I3nx4b%2BUMzFr2c%2FSLfe32iW2HH9q1ePVrxViaalLTTLGyJVWvW5wwyXnk0jGXhUCnigLLVRCzgQ%2Bqa%2BQ7kdoV3Prt2jVq2JIvbEY2Sy%2BlXVGBWokdZSGlvUcAtSWlTxaaJ6vtQd06Kdk1nLhN0fK4ZddBdusz%2Ba%2B4b5VUu3xTRNTeb%2BQEyZFOwuNbMfSEhVodK1RZgbaaONJTbSSfzHB3hSN4H%2Fhjew%2FV%2F2qn2geIorBIGVe8ihORHIvWa9m47FAM1VYbgstMUVFew55MOVOnVfz9%2F3wP9op%2FJdBOQEJ43Iyyhk5bv5IkaaQkmahSo57X7l%2FMZUPXy1JQU6%2F6SK5OBqOjsOztIJI%2FVVafAbGHp7mQ%2BNM7WdgsxJzmRjqbRFV5xZEYb3qkUfRTjeTewHOngd8mFDFv%2B3QCJ101a%2FS7zKV%2FRzq1pebGcywM1t%2FoqCdH3Gh%2F7IfGvgMIrQTiTjdCZWOR%2F5shU74SCxaDbOTGlbbsWMwtODtId1%2BiCgY5XQAHcyDjHD%2Bg3T3ktNbRX7bF7f8ai5iLcllrUsqhNrewG9cmGZj3%2FFhPkTyVr%2FnKpXUeeXa%2FQiF5KpiAf4b0AWLY%2FFHcUqTyjyIrMexuiedMZnTUqo8YnBatBorqKlaZOWnm0%2FsrVNoisJ60CPABKIQ0%2FI0jk%2Fy6J89xswtQCWz6VUSSeWiSckpuUX0EG21Wfgb2zeLmE81Dnrku%2BrT9gXXwQJTRTPsi28z8YXodHl8rDAdx2paTV8uwr5H22Hdk9KnbaHx%2BhkE%2F2EaLaBA2apEQAZxGxEGgg2LoG%2FSX3tLFqFSSiK46HhhFAW7yhI1OWTcMYhRKRZivIAeLnvPC2rCaPur0MWGhd%2BsXcmvqy2%2Bs93uTqsNSyNxZtdcEc%2FJ%2Bz%2B5WOIg%2BoZPG4yDSb9hyEIRcsRsA8ybsXyIJCmarUMDiRUVCgQrTC4oWzFPGuaupZTR34nxdv%2B00eZl%2BMLAyNYPM1gGyB6aC4IYjxv5xIlfmnGLG3l6lxGXE5viAqfh2bQ7lsnjzaZbgn%2B0ko9b4bWbIQ9XKNyOS4oC5tGmapfR3vtg%3D%3D&gtnp=0&gtpp=0&tp1=cf37f022-d980-4854-884d-1e3949811b21&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=uizcpS2vK%2BPE8C3jtYNgThNeVom%2Bc90lAaNmJ8t%2FDFo%3D&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&gtnp=0&gtpp=0&kt=210&&kbc=707&ki=326693500&ktd=0&kld=1003&kp=5&bd=-4%231024%231280%231%230
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>..<head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net">.. <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25856)
Category:	dropped
Size (bytes):	110281
Entropy (8bit):	5.381192304780725
Encrypted:	false
SSDEEP:	768:5cZoWRfuJuXcZoYRgZoo1cZoCRvgStdSk6UNxLdbLrT5uTY6Kwqi4Hw8VBmpm079:5y+qRuZtdSk6IxLd7kvI0RgRPBgtVaT8
MD5:	CCFF0260172BA618AFE876356DADCA31
SHA1:	5C5CE9F1845C4B98F46789A9D4C57B4C8420E00E
SHA-256:	1A9EA8C7840FC72D29E2CEC5018658A8FBD65CF1FFDF92D12BB6B98009A36E99
SHA-512:	B4CFCFD30243DDA4EF81043044B205DA0CC421365B50AB549B89908E7EDBFCDB5F701E63C14EB2AF08225455B1A62108A7FFDED468B2654B2FD02352BD38544C
Malicious:	false
Reputation:	low
Preview:	if(!("cmp_config_data" in window)){window.cmp_config_data={};}window.cmp_svg_no=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","viewBox":"0 0 512 256"}, "", function (x){x.child("g", {}, "", true, function (x){x.child("ellipse", {"id":"svg_11","ry":"111.500004","rx":"113","cy":"120.89999","cx":"386","stroke-linecap":"null","stroke-linejoin":"null","stroke-dasharray":"null","stroke-width":"0","stroke":"#000000","fill":"#e5e5e5","class":"cmpsvgsilverfill"}).child("rect", {"id":"svg_13","height":"222","width":"256.999992","y":"9.899994","x":"140.000002","stroke-linecap":"null","stroke-linejoin":"null","stroke-dasharray":"null","stroke-width":"0","stroke":"#000000","fill":"#e5e5e5","class":"cmpsvgsilverfill"}).child("ellipse", {"ry":"111.500004","rx":"113","id":"svg_9","cy":"118.399998","cx":"125","stroke-linecap":"null","stroke-linejoin":"null","stroke-dasharray":"null","stroke-width":"0","stroke":"#000000","fill

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 27, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	283
Entropy (8bit):	5.627839973207706
Encrypted:	false
SSDEEP:	6:6v/lhP6VILzlMbNqG1DB/9w2ZCGErnTyBmgHaTeBJ5cdTp:6v/7uILJMndKPGEbTdg6sG9
MD5:	80D42C82A6C37DA90210FD60A2F36128
SHA1:	554BA7C84D2A27ECF3B1F29D03E62101936B54D8
SHA-256:	A1626E2D9160A0890A0A8D6E3AF9E7095D68A24F9FB5AC8A166000C9A2581E10
SHA-512:	8ECB032C38176996EE637009833F3399F773B325E4F574FBBD26F93CDB82892C4143C5816543052B3A5123B89EF4B1AACA0407315AAB879968085E61A20786B6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............(.....HPLTEGpL......................................................................z......tRNS.t..@....fU...2'...dg.......kIDAT..}.... ..P...{..O5...$....v....a.W..J.....I.ih^JF5P.z..H.Lz..F./..h.:.....{t.....i.....;.h...E.....B.6....IEND.B`.

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 26 x 49, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.035372245524404
Encrypted:	false
SSDEEP:	3:yionv//thPl1KuIHxl/k4E08up:6v/lhPauIH7Tp
MD5:	7AA9FA4308884B536FFA721EC211A3BF
SHA1:	3F2FEFDDD07CC0EA4E5610F2950E963739E91702
SHA-256:	CD046D8E43962E97F25C62807143B3717A896EE6799FD9435B640BB901D5166E
SHA-512:	227736B634C51E933D84CD0656791FD091204FF0E677090FBCE922A372328BCBFB416D4C96676B6BEF50E154B0D7C0174073652D20EDA359C136D418FED62439
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8ac3d4dbc9d715cb/1722494372855/pbsCeFj9PGT6Yu-
Preview:	.PNG........IHDR.......1.....KC.l....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 32x32, 32 bits/pixel, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.7373764806345275
Encrypted:	false
SSDEEP:	48:ZfWU4cywDq/zVUcRnsqLNBiYA0fEu0zdcg:ZqcywDChUc9LNBbdEQg
MD5:	E2B72024E66269CFAB7E8F660204F606
SHA1:	DCD15D89FE0CBEB014E05ACFE842CDA6EB99C51F
SHA-256:	B9615906ECB4ACF1C17798400170F9E0D84D5A3324A4D2A128FC2E75D4000543
SHA-512:	803C36E1979EBB8B896FDE07FD3AA0A8AF3A8139AF02430C6768670A8C9786B72CC06B9FEFB9AEF0458B4D9BCE3AE0A9388C1DFB57C8582411651469A2C6F0BC
Malicious:	false
Reputation:	low
Preview:	...... .... .....&......... .h.......(... ...@..... .................................................................................................................................................................................................................................................................................................................................................[.....................................................................................\|......p..........................p.Q..Q...........................................................................\|..Q..Q..Q..Q..Q...f.......P......`.[..Q..Q...\|......................................................................Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q...................................................................?.Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q...............................................................?.Q..Q..Q..Q..

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2250)
Category:	downloaded
Size (bytes):	200582
Entropy (8bit):	5.672273489447305
Encrypted:	false
SSDEEP:	3072:tirVJCp2NAR2CdnEdHX38XqXGeQr+1tqFWap:toC/vnEdVX5a+1AFlp
MD5:	5F29E329F2D88FC8E25A43DD15FD2513
SHA1:	0EAD13084ECD09E04055A04A95BA8E81927D45E6
SHA-256:	4323A992992F0BEC34E1F892F5F8EE0491DB264957A1CB4161D39B577F3C45B8
SHA-512:	88926671931492F330A174BE221ADC2BA81F12E0BE02233A128237522C5928B7DD316D69DF5BF6010BD3AE0FC0FF271D3215CCBCF3D7C53A5E8CEE1FCD7845BD
Malicious:	false
Reputation:	low
URL:	https://www.google.com/adsense/domains/caf.js?abp=1&bodis=true
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"14817037442938954297",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301439,17301442,17301511,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog"}};var n;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 34 x 29, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	346
Entropy (8bit):	6.229840441641423
Encrypted:	false
SSDEEP:	6:6v/lhPwtz4nDLl9W0y37CpH0xVc4kSbOaWdgR38C+ogSM4bXBxqy3ytDdp:6v/7SML/rp627SbVcoXrbXnqzH
MD5:	FF018650CBB4B192CCD337C6C9478D1E
SHA1:	D6409B6DF8F0B929E8D5C7F9F49F4FBABACDC0DC
SHA-256:	C5EA92061AA96E1E5AEBFE0714F3383A02BEF2ED7A584D0493841573B653E8C6
SHA-512:	2C88089E0AC3EA8AA93AD5E643AC01F77A727DFA2E28843ED436ADC2E96E32F0F0BA5EB17F70F4D039B70C4A1E106D2AE24A2BA1D4E5ADAEFB90E4B456E944F1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..."...........N....EPLTEGpL..................................................................W.4.....tRNS.Q...!0....r..>~.._...O#.....IDAT(..... ...A..j..Q7..N...w..4Q.~..+.0443.......&A.?.X..<.b.Q..h.....Fb]0..\..u!....M#.2......~L.H.v.c.7.N....n......@.......7...m...$\.K'..M\..TjG.%G.._...\XjU..cP .{4......IEND.B`.

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2250)
Category:	dropped
Size (bytes):	200598
Entropy (8bit):	5.672222296396893
Encrypted:	false
SSDEEP:	3072:TirVJCp2NAR2CdnEdHX38XqXGeQr+1tqFWap:ToC/vnEdVX5a+1AFlp
MD5:	3EE86B11703DE61AC81A8F3659AF7D8B
SHA1:	E0B330C5617A211AB95643DBED48FE2A88478982
SHA-256:	3EC80A967F34DB9278C69B1EF3F29198844C8CD95B177BDE3C7F0F07E78E1460
SHA-512:	61A0C95EC6DDD7B18B3DCB1EB389A853034DDC6DC8655BA3DFF78B4A9F9330033D1F37F70F8D84A8C49A3D1599935D8F04053A9773E33DD3FAE926AC0009499A
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"14817037442938954297",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301439,17301442,17301511,17301515,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog"}};var n;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10769), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	38496
Entropy (8bit):	5.899338677972587
Encrypted:	false
SSDEEP:	768:CiBtrifZVO7Wg3hIBY8YeMOkr04CnaUBtII33SxAcQdiGP6bcq:C8Cg3te4rHcNtIi0L2ZP6bcq
MD5:	7B96DC4D9A9D983D66CBEAC4C68EEFE6
SHA1:	531A5E91C2B661D8C3319B68AAF9AC3315AD3FB3
SHA-256:	6B23154D815C26AF456BD2AA9603A4D3ECAFE654B46CA12B94A9DBB16AD410A4
SHA-512:	6BA1C523C51B280BCAD5605E6FD3E1BDCEE270FDDF8275399A7D7D453B5BE3150A65F9CC49CD06058F0667E7FD553C3D747220217D212FA98E6A3A3535ED034B
Malicious:	false
Reputation:	low
URL:	http://ww01.rotect.com/Allied_Medical_Winslow_Az_Driver.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc6TEPjii6jYyypXxZ4eYyija1oDOtc2I3nx4b%2BUMzFr2c%2FSLfe32iW2HH9q1ePVrxViaalLTTLGyJVWvW5wwyXnk0jGXhUCnigLLVRCzgQ%2Bqa%2BQ7kdoV3Prt2jVq2JIvbEY2Sy%2BlXVGBWokdZSGlvUcAtSWlTxaaJ6vtQd06Kdk1nLhN0fK4ZddBdusz%2Ba%2B4b5VUu3xTRNTeb%2BQEyZFOwuNbMfSEhVodK1RZgbaaONJTbSSfzHB3hSN4H%2Fhjew%2FV%2F2qn2geIorBIGVe8ihORHIvWa9m47FAM1VYbgstMUVFew55MOVOnVfz9%2F3wP9op%2FJdBOQEJ43Iyyhk5bv5IkaaQkmahSo57X7l%2FMZUPXy1JQU6%2F6SK5OBqOjsOztIJI%2FVVafAbGHp7mQ%2BNM7WdgsxJzmRjqbRFV5xZEYb3qkUfRTjeTewHOngd8mFDFv%2B3QCJ101a%2FS7zKV%2FRzq1pebGcywM1t%2FoqCdH3Gh%2F7IfGvgMIrQTiTjdCZWOR%2F5shU74SCxaDbOTGlbbsWMwtODtId1%2BiCgY5XQAHcyDjHD%2Bg3T3ktNbRX7bF7f8ai5iLcllrUsqhNrewG9cmGZj3%2FFhPkTyVr%2FnKpXUeeXa%2FQiF5KpiAf4b0AWLY%2FFHcUqTyjyIrMexuiedMZnTUqo8YnBatBorqKlaZOWnm0%2FsrVNoisJ60CPABKIQ0%2FI0jk%2Fy6J89xswtQCWz6VUSSeWiSckpuUX0EG21Wfgb2zeLmE81Dnrku%2BrT9gXXwQJTRTPsi28z8YXodHl8rDAdx2paTV8uwr5H22Hdk9KnbaHx%2BhkE%2F2EaLaBA2apEQAZxGxEGgg2LoG%2FSX3tLFqFSSiK46HhhFAW7yhI1OWTcMYhRKRZivIAeLnvPC2rCaPur0MWGhd%2BsXcmvqy2%2Bs93uTqsNSyNxZtdcEc%2FJ%2Bz%2B5WOIg%2BoZPG4yDSb9hyEIRcsRsA8ybsXyIJCmarUMDiRUVCgQrTC4oWzFPGuaupZTR34nxdv%2B00eZl%2BMLAyNYPM1gGyB6aC4IYjxv5xIlfmnGLG3l6lxGXE5viAqfh2bQ7lsnjzaZbgn%2B0ko9b4bWbIQ9XKNyOS4oC5tGmapfR3vtg%3D%3D&gtnp=0&gtpp=0&tp1=cf37f022-d980-4854-884d-1e3949811b21&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=uizcpS2vK%2BPE8C3jtYNgThNeVom%2Bc90lAaNmJ8t%2FDFo%3D&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&gtnp=0&gtpp=0&kt=210&&kbc=707&ki=326693501&ktd=0&kld=1003&kp=2&bd=-4%231024%231280%231%230
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>..<head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net">.. <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	10
Entropy (8bit):	3.1219280948873624
Encrypted:	false
SSDEEP:	3:I6MdLn:Nwn
MD5:	6608DD3E21CA3BEABD4BDFA625A0B221
SHA1:	E926D0F8694A4BC4013308AFACA7AF51E4C9FD9F
SHA-256:	C75EB01138771BFB2A5517AEAE882356733782767C4560CC9601C34D2591CA75
SHA-512:	FB9A38C874CD26E779EAA5ACFFFCCD3835620A41ADBFE9B086C6A213BF0596F4F98823487F9C79B8F02F649B8B2E4D3232FFCB78106147B3FF671ED7809BBD51
Malicious:	false
Reputation:	low
URL:	http://ww01.rotect.com/favicon.ico
Preview:	No favicon

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	downloaded
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
URL:	http://i4.cdn-image.com/__media__/js/min.js?v2.3
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17264, version 2.1
Category:	downloaded
Size (bytes):	17264
Entropy (8bit):	7.968311258079736
Encrypted:	false
SSDEEP:	384:JCniidHsnwUHgJANwPtNdi0ONd4Ijgub4WuGgpX+RGVzN:wi8sn7g/W4Ijgub4BGgpwGVR
MD5:	A43B107861B42CE1335E41E43D4E4D00
SHA1:	99BDB1CEC4A68EBE29249C46FEFEFB6880D009E5
SHA-256:	A6542DC92D71EB412BAC89D8FB06C70F15BE74A64B1B4EF1633288B78F4F2FF2
SHA-512:	151D1D3865B24940962476CD6824232EEABFAED92A90439ED5D467D1C7156F7B03BDE91D0303D15648BA13441B8750060066BEDBDEFA0EB930C43A16CBBCFDF9
Malicious:	false
Reputation:	low
URL:	http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Preview:	wOFF......Cp......q@........................FFTM..CT........j..7GDEF..7..........'..GPOS..7.........)MsMGSUB..7.... ... l.t.OS/2.......V...`..]@cmap.......u.......gasp..7\|............glyf...x..)...G.....head...l...6...6...hhea.......!...$...phmtx...@........W\6.loca...l...........:maxp........... .P.8name..2.........N.=post..5h........8',.prep...d........h..........B.L.._.<...........'......d:.....j..............x.c`d``>.........X...".....].?...x.c`d``dg0e`g..& f.B...0........x.c`f.`.........................@9 ..............E........O...a>..[...$.$..H)00..>.....x.m.[HTQ...........d..f^.a.).".0#].0M... .."%a&Q.7)H..>DD.E..K.......D....q.I:.X....}.........SA...M?c.^D.q.\....h.V.P.2...D..FD>.Q......4..:r..5.A..P.Q./!..T.5..R....4.....Ze....j...o...m.1..Z.}..$.q...5=..3C.......r..>.......qe!S.a..%.t..r..7#.^#..{4.......@\....*....q.1T.0.d..w..r.q.k.\G..q[#w8....Y7..r.d........(..\|"8N.k....G3.........Wv.v.I7&M..9.9/.&..s.....8YL0.Q.x.v..1}.z/.3.2.....dm.t.k..M...

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	dropped
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10769), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	38567
Entropy (8bit):	5.903081434695814
Encrypted:	false
SSDEEP:	768:CiBtrifZVO7Wg3hIBYCAYXjOkSIq3sMAqYzRxxrRxrXKSkVCWRdiGP6bcq:C8Cg3MX1SzcQYzRxxrRxWIcZP6bcq
MD5:	5408038D8043DE9817B084A3FFF46BB5
SHA1:	8EFE72AF3E2945BB8EE2E2AEFA72D2EEC3E12283
SHA-256:	DACEE693F797773FBDC74BDAB3E2373D549281E116A0CDD68EBB6171C9C71701
SHA-512:	901410E02889AD12B66951A857798FA663678D0A63B245332A3BF509B4B288CCA697DB53BFC7BE60647D466ACBEF7E50BB8705078D4FC3D1159085D8320B6A9B
Malicious:	false
Reputation:	low
URL:	http://ww01.rotect.com/Customer_Service_Support.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc6TEPjii6jYyypXxZ4eYyija1oDOtc2I3nx4b%2BUMzFr2c%2FSLfe32iW2HH9q1ePVrxViaalLTTLGyJVWvW5wwyXnk0jGXhUCnigLLVRCzgQ%2Bqa%2BQ7kdoV3Prt2jVq2JIvbEY2Sy%2BlXVGBWokdZSGlvUcAtSWlTxaaJ6vtQd06Kdk1nLhN0fK4ZddBdusz%2Ba%2B4b5VUu3xTRNTeb%2BQEyZFOwuNbMfSEhVodK1RZgbaaONJTbSSfzHB3hSN4H%2Fhjew%2FV%2F2qn2geIorBIGVe8ihORHIvWa9m47FAM1VYbgstMUVFew55MOVOnVfz9%2F3wP9op%2FJdBOQEJ43Iyyhk5bv5IkaaQkmahSo57X7l%2FMZUPXy1JQU6%2F6SK5OBqOjsOztIJI%2FVVafAbGHp7mQ%2BNM7WdgsxJzmRjqbRFV5xZEYb3qkUfRTjeTewHOngd8mFDFv%2B3QCJ101a%2FS7zKV%2FRzq1pebGcywM1t%2FoqCdH3Gh%2F7IfGvgMIrQTiTjdCZWOR%2F5shU74SCxaDbOTGlbbsWMwtODtId1%2BiCgY5XQAHcyDjHD%2Bg3T3ktNbRX7bF7f8ai5iLcllrUsqhNrewG9cmGZj3%2FFhPkTyVr%2FnKpXUeeXa%2FQiF5KpiAf4b0AWLY%2FFHcUqTyjyIrMexuiedMZnTUqo8YnBatBorqKlaZOWnm0%2FsrVNoisJ60CPABKIQ0%2FI0jk%2Fy6J89xswtQCWz6VUSSeWiSckpuUX0EG21Wfgb2zeLmE81Dnrku%2BrT9gXXwQJTRTPsi28z8YXodHl8rDAdx2paTV8uwr5H22Hdk9KnbaHx%2BhkE%2F2EaLaBA2apEQAZxGxEGgg2LoG%2FSX3tLFqFSSiK46HhhFAW7yhI1OWTcMYhRKRZivIAeLnvPC2rCaPur0MWGhd%2BsXcmvqy2%2Bs93uTqsNSyNxZtdcEc%2FJ%2Bz%2B5WOIg%2BoZPG4yDSb9hyEIRcsRsA8ybsXyIJCmarUMDiRUVCgQrTC4oWzFPGuaupZTR34nxdv%2B00eZl%2BMLAyNYPM1gGyB6aC4IYjxv5xIlfmnGLG3l6lxGXE5viAqfh2bQ7lsnjzaZbgn%2B0ko9b4bWbIQ9XKNyOS4oC5tGmapfR3vtg%3D%3D&gtnp=0&gtpp=0&tp1=cf37f022-d980-4854-884d-1e3949811b21&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=uizcpS2vK%2BPE8C3jtYNgThNeVom%2Bc90lAaNmJ8t%2FDFo%3D&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&gtnp=0&gtpp=0&kt=210&&kbc=707&ki=7505256&ktd=0&kld=1003&kp=1&bd=-4%231024%231280%231%230
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>..<head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net">.. <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17312, version 2.1
Category:	downloaded
Size (bytes):	17312
Entropy (8bit):	7.969945306725023
Encrypted:	false
SSDEEP:	384:gIMoUXEVKzOr+cRe8hGCLzypa78QKS+RATaD:PMoU0VKzoJe80Ms5D
MD5:	BEBE201D813FEAAD85A3E66607D0DA3A
SHA1:	28B049502AFA8E9DB5340C1A92400591B39870E8
SHA-256:	58BB75322BEB862803B0D156E1A1D01FB1E7FDE82EE93C929B08BF5AEA9FC55B
SHA-512:	2C83376EDCB92F471C458F6C5F316DD24639FCBB88AEC93B2C2690A596CC129860D0D46A2FE1FB4D71AF8AE5856EE48F19EBB17DAD38DDE918AF76C3ABF7441B
Malicious:	false
Reputation:	low
URL:	http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Preview:	wOFF......C.......s`........................FFTM...l........i..+GDEF.............'..GPOS................GSUB...p... ... l.t.OS/2.......T...`..=.cmap.......u.......gasp...\............glyf...d..(...G8a.?.head..9p...4...6....hhea..9....!...$...'hmtx..9.........Y.-.loca..<x............maxp..>........ .P.7name..>............post..A.........8Y,.prep..C.........h.............h<......'......d:................................x...[l\......vb{l......7....h.o.+....!Q.p1.O.P.P%.h......UU...UEMpQ.ZA.1.I !.C..@...=...=..:.cB.P5:>.9{....^k......)wJ..x.)..R~.....gO>m~....6.BJ..:..tIY.._...dq../mxe...l\|ic.....Kc..lzj..o...%.;....^.x}.o..l.e...gOV.V=\5]..z_..o..n.o..;..5.5.........5.....n................O./...c.t.R.4.t...K...TCm.H..........]....nT:.:.t....j..A..JwU...$.![y...J+.....u.....).I.H..7I..H....%..}.........nZ..ef/. .?(O.A7)..q...p...f.#xx.M.O.;.j...q7.7..Ds.O.@t.D1Et...0.F....`.f.d...9wIX.F.a...fxl.C..[.0.F.0..D..E.a.c(.8<G.j...,....S.Y..>.t..2s.Y....G

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33926)
Category:	dropped
Size (bytes):	33929
Entropy (8bit):	5.358945546794763
Encrypted:	false
SSDEEP:	768:TP2yjwVcbMnnZNdxBB5gPi0f8rnaVG4xYEb0Ddem+euROvvMzLXWI+6Ch75BGJ21:gn7rnSG4xYEzRLm
MD5:	F9AF67FC41AF13EBEB43BB7FB4A3EF04
SHA1:	2F47A543758968868C5196E31204D6C8A60485FE
SHA-256:	24F07D59FD81BFE363668BA707EDA0644C3B156F000DA1B110FF362CA8214C57
SHA-512:	17FF23DF7CF94A5AB68EFC0C316F2F9820B6196F4FD1273F8F5E6FF2F303997BF36EC3725B038BA9CCB417F44AD9CAEFFA9DBC32B0D11113400CF89034DAA2E2
Malicious:	false
Reputation:	low
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).version={})}(this,(function(exports){"use strict";function __awaiter(e,t,n,i){return new(n\|\|(n=Promise))((function(s,a){function o(e){try{d(i.next(e))}catch(e){a(e)}}function r(e){try{d(i.throw(e))}catch(e){a(e)}}function d(e){var t;e.done?s(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(o,r)}d((i=i.apply(e,t\|\|[])).next())}))}var Blocking;"function"==typeof SuppressedError&&SuppressedError,function(e){e.PENDING="pending",e.NONE="none",e.BLOCKED="blocked",e.ALLOWED="allowed"}(Blocking\|\|(Blocking={}));class Adblock{constructor(e){this.state=Blocking.PENDING,this._mocked=!1,e?(this.state=e,this._mocked=!0):this.state=Blocking.ALLOWED}inject(){return __awaiter(this,void 0,void 0,(function*(){}))}get isBlocked(){return this.state===Blocking.BLOCKED}get isAllowed(){return this.

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 32x32, 32 bits/pixel, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.7373764806345275
Encrypted:	false
SSDEEP:	48:ZfWU4cywDq/zVUcRnsqLNBiYA0fEu0zdcg:ZqcywDChUc9LNBbdEQg
MD5:	E2B72024E66269CFAB7E8F660204F606
SHA1:	DCD15D89FE0CBEB014E05ACFE842CDA6EB99C51F
SHA-256:	B9615906ECB4ACF1C17798400170F9E0D84D5A3324A4D2A128FC2E75D4000543
SHA-512:	803C36E1979EBB8B896FDE07FD3AA0A8AF3A8139AF02430C6768670A8C9786B72CC06B9FEFB9AEF0458B4D9BCE3AE0A9388C1DFB57C8582411651469A2C6F0BC
Malicious:	false
Reputation:	low
URL:	https://www.justanswer.com/favicon.ico
Preview:	...... .... .....&......... .h.......(... ...@..... .................................................................................................................................................................................................................................................................................................................................................[.....................................................................................\|......p..........................p.Q..Q...........................................................................\|..Q..Q..Q..Q..Q...f.......P......`.[..Q..Q...\|......................................................................Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q...................................................................?.Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q..Q...............................................................?.Q..Q..Q..Q..

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17312, version 2.1
Category:	downloaded
Size (bytes):	17312
Entropy (8bit):	7.969945306725023
Encrypted:	false
SSDEEP:	384:gIMoUXEVKzOr+cRe8hGCLzypa78QKS+RATaD:PMoU0VKzoJe80Ms5D
MD5:	BEBE201D813FEAAD85A3E66607D0DA3A
SHA1:	28B049502AFA8E9DB5340C1A92400591B39870E8
SHA-256:	58BB75322BEB862803B0D156E1A1D01FB1E7FDE82EE93C929B08BF5AEA9FC55B
SHA-512:	2C83376EDCB92F471C458F6C5F316DD24639FCBB88AEC93B2C2690A596CC129860D0D46A2FE1FB4D71AF8AE5856EE48F19EBB17DAD38DDE918AF76C3ABF7441B
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Preview:	wOFF......C.......s`........................FFTM...l........i..+GDEF.............'..GPOS................GSUB...p... ... l.t.OS/2.......T...`..=.cmap.......u.......gasp...\............glyf...d..(...G8a.?.head..9p...4...6....hhea..9....!...$...'hmtx..9.........Y.-.loca..<x............maxp..>........ .P.7name..>............post..A.........8Y,.prep..C.........h.............h<......'......d:................................x...[l\......vb{l......7....h.o.+....!Q.p1.O.P.P%.h......UU...UEMpQ.ZA.1.I !.C..@...=...=..:.cB.P5:>.9{....^k......)wJ..x.)..R~.....gO>m~....6.BJ..:..tIY.._...dq../mxe...l\|ic.....Kc..lzj..o...%.;....^.x}.o..l.e...gOV.V=\5]..z_..o..n.o..;..5.5.........5.....n................O./...c.t.R.4.t...K...TCm.H..........]....nT:.:.t....j..A..JwU...$.![y...J+.....u.....).I.H..7I..H....%..}.........nZ..ef/. .?(O.A7)..q...p...f.#xx.M.O.;.j...q7.7..Ds.O.@t.D1Et...0.F....`.f.d...9wIX.F.a...fxl.C..[.0.F.0..D..E.a.c(.8<G.j...,....S.Y..>.t..2s.Y....G

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	444
Entropy (8bit):	5.154450625500841
Encrypted:	false
SSDEEP:	12:t6jknGEIT2cDPhJ9noU/vmOGbCgqIrRuq/PB4M:tCknmaWhXoU/v9el/p
MD5:	FE7DD8C3C629CC6E9CD6D3E4D3CBE905
SHA1:	59EF3B8E4A17169A4CB45FBA65BF0D2BF49C8A18
SHA-256:	5455D8D4B8AE5150039FF7A83A6679D4338A435945985FA9F8D0ECBEA9AE2F6E
SHA-512:	1C663E07978D95C838AED54421A9C725D7311B8C002F436B30555AFFB26C25F6EBECFF6AF5C54EF112370A36A5F5AADF611304BFFE76A59FB3D206E943CF153F
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:cc="http://creativecommons.org/ns#" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:svg="http://www.w3.org/2000/svg" xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24" version="1.1" id="svg136">. <path d="M0 0h24v24H0z" fill="none" id="path132"/>. <path d="M 2.01,21 23,12 2.01,3 v 0 l 5.5614285,9.357143 z" id="path134"/>.</svg>.

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (346), with no line terminators
Category:	dropped
Size (bytes):	346
Entropy (8bit):	5.00818604439199
Encrypted:	false
SSDEEP:	6:qIZmJNsVwbDRWPWG3mV/R7cjTDEG5OQRoYxHSNHbMFKdCuFxXcvH3eVP4SzpF9yc:+JG0DRWZmX7OPrRNwN7MFMCu/cvOVQSl
MD5:	F84F931C0DD37448E03F0DABF4E4CA9F
SHA1:	9C2C50EDCF576453CCC07BF65668BD23C76E8663
SHA-256:	5C1D5FD46A88611C31ECBB8FFC1142A7E74EC7FB7D72BD3891131C880EF3F584
SHA-512:	AFC3089D932FB030E932BF6414AC05681771051DD51D164F09635CA09CBD8525A52879524B6AA24E972E7766DDF529484CC1EC416DE8B61255435A89BA781F8C
Malicious:	false
Reputation:	low
Preview:	var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 34 x 29, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	346
Entropy (8bit):	6.229840441641423
Encrypted:	false
SSDEEP:	6:6v/lhPwtz4nDLl9W0y37CpH0xVc4kSbOaWdgR38C+ogSM4bXBxqy3ytDdp:6v/7SML/rp627SbVcoXrbXnqzH
MD5:	FF018650CBB4B192CCD337C6C9478D1E
SHA1:	D6409B6DF8F0B929E8D5C7F9F49F4FBABACDC0DC
SHA-256:	C5EA92061AA96E1E5AEBFE0714F3383A02BEF2ED7A584D0493841573B653E8C6
SHA-512:	2C88089E0AC3EA8AA93AD5E643AC01F77A727DFA2E28843ED436ADC2E96E32F0F0BA5EB17F70F4D039B70C4A1E106D2AE24A2BA1D4E5ADAEFB90E4B456E944F1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..."...........N....EPLTEGpL..................................................................W.4.....tRNS.Q...!0....r..>~.._...O#.....IDAT(..... ...A..j..Q7..N...w..4Q.~..+.0443.......&A.?.X..<.b.Q..h.....Fb]0..\..u!....M#.2......~L.H.v.c.7.N....n......@.......7...m...$\.K'..M\..TjG.%G.._...\XjU..cP .{4......IEND.B`.

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3 x 98, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlu/l71kxl/k4E08up:6v/lhP6k7Tp
MD5:	EA60CF086A76B05999F4773720C42B0C
SHA1:	AA092D7E1423E5DA58B3787719F45FF36BB08AE5
SHA-256:	4A43E4AB827B0E0CFCEE099548B56048415FE32EFF7B133908F87D1B70715090
SHA-512:	F4CC92AB80C2E92A85EB648BBFD4BB53DA4C85837E910421D70B6AD6BA0C23549FAC749E8942F221A93BE30DFB87E9EB9E1E38ABD3946A383B6A6CE269F73FAA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......b.............IDAT.....$.....IEND.B`.

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17264, version 2.1
Category:	downloaded
Size (bytes):	17264
Entropy (8bit):	7.968311258079736
Encrypted:	false
SSDEEP:	384:JCniidHsnwUHgJANwPtNdi0ONd4Ijgub4WuGgpX+RGVzN:wi8sn7g/W4Ijgub4BGgpwGVR
MD5:	A43B107861B42CE1335E41E43D4E4D00
SHA1:	99BDB1CEC4A68EBE29249C46FEFEFB6880D009E5
SHA-256:	A6542DC92D71EB412BAC89D8FB06C70F15BE74A64B1B4EF1633288B78F4F2FF2
SHA-512:	151D1D3865B24940962476CD6824232EEABFAED92A90439ED5D467D1C7156F7B03BDE91D0303D15648BA13441B8750060066BEDBDEFA0EB930C43A16CBBCFDF9
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Preview:	wOFF......Cp......q@........................FFTM..CT........j..7GDEF..7..........'..GPOS..7.........)MsMGSUB..7.... ... l.t.OS/2.......V...`..]@cmap.......u.......gasp..7\|............glyf...x..)...G.....head...l...6...6...hhea.......!...$...phmtx...@........W\6.loca...l...........:maxp........... .P.8name..2.........N.=post..5h........8',.prep...d........h..........B.L.._.<...........'......d:.....j..............x.c`d``>.........X...".....].?...x.c`d``dg0e`g..& f.B...0........x.c`f.`.........................@9 ..............E........O...a>..[...$.$..H)00..>.....x.m.[HTQ...........d..f^.a.).".0#].0M... .."%a&Q.7)H..>DD.E..K.......D....q.I:.X....}.........SA...M?c.^D.q.\....h.V.P.2...D..FD>.Q......4..:r..5.A..P.Q./!..T.5..R....4.....Ze....j...o...m.1..Z.}..$.q...5=..3C.......r..>.......qe!S.a..%.t..r..7#.^#..{4.......@\....*....q.1T.0.d..w..r.q.k.\G..q[#w8....Y7..r.d........(..\|"8N.k....G3.........Wv.v.I7&M..9.9/.&..s.....8YL0.Q.x.v..1}.z/.3.2.....dm.t.k..M...

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (374), with no line terminators
Category:	dropped
Size (bytes):	374
Entropy (8bit):	5.473936337423982
Encrypted:	false
SSDEEP:	6:xWzPKWmrooYubftj44V2H6luPm27M+d4CSRFHooYubPhWTX2H6luPm2Aen:xWcroMbfG4lv27H43RloMbPhWTvv27n
MD5:	AC80C913E53EDCAED5E5885C1C75A4DA
SHA1:	99071EDB16544ADCAA1B09C69A24DE1E5B8FF16F
SHA-256:	79844CBF6C419E6405F9AE6F1C30B3811BE886C2193DF68CB67DDD53AB1A4850
SHA-512:	62FFE17403707C100D8DC0C3F050DBF7319B878DDE2FEDBE3499E74D72BB0D2CE02591988573CA55BC29A3EDEC7FF74EC8ED21671F363CBB4F072ED0FBEAA349
Malicious:	false
Reputation:	low
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=f4b02234b960243f:T=1722494362:RT=1722494362:S=ALNI_MaviaQkVlKV51-uPBC4JR8-e6F5NQ","_expires_":1756190362,"_path_":"/","_domain_":"rotect.com","_version_":1},{"_value_":"UID=00000e8230be6047:T=1722494362:RT=1722494362:S=ALNI_MbZZJDszc5NPWWfata3YB9cCEKPsA","_expires_":1756190362,"_path_":"/","_domain_":"rotect.com","_version_":2}]});

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	443763
Entropy (8bit):	5.372207704344212
Encrypted:	false
SSDEEP:	6144:PpK9KwI51nTb7W9/juAwiiogfk8BzPdcXNVYoB4sE7oJsGjH2Pb//sFrq+8ucIJc:fxz1kNVYV7oJsGRFrBfo
MD5:	68B6EA7B911811A1686E48E0DE64449E
SHA1:	0159EE6A502E6D29E990CF504978092705747971
SHA-256:	58B307B138B72EFDF43623AA8EB732848EDA7727B5156D13BABFEC43F7D0DF6A
SHA-512:	60C5F7883EEEC0FBB9AD51D0BEFB15C7406C85B3AC32C752BDD87345F305687323F2B0E7E91C86ED6A18E2E6C2C4244317B75653D8EFAF89717D444B1E2E43A4
Malicious:	false
Reputation:	low
URL:	https://cdn.consentmanager.net/delivery/js/cmp_en.min.js
Preview:	window.cmpccsversionbuild="2024-7-16.20.6";if(!("rpl" in String.prototype)){Object.defineProperty(String.prototype,"rpl",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("cmp_unq" in window)){window.cmp_unq=function(a){return a.filter(function(c,d,b){return b&&b.indexOf(c)===d})}}if(!("replaceAll" in String.prototype)){Object.defineProperty(String.prototype,"replaceAll",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("fnd" in Array.prototype)){Object.defineProperty(Array.prototype,"fnd",{value:function(b){var c=this;b=String(b);for(var a=0;a<c.length;a++){if(String(c[a])==b){return a}}return -1},enumerable:false})}window.cmp_fnd=function(a,c){var d=a;c=String(c);for(var b=0;b<d.length;b++){if(String(d[b])==c){return b}}return -1};window.cmpccsversion=20220717;(function(){var b="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",a=/^(?:[A-Za-z\d+\/]{4})*?(?:[A-Za-z\d+\/]{2}(?:==)?\|[A-Za-z\d+\/]{3}=?)?$/

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 34 x 29, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	6.229840441641423
Encrypted:	false
SSDEEP:	6:6v/lhPwtz4nDLl9W0y37CpH0xVc4kSbOaWdgR38C+ogSM4bXBxqy3ytDdp:6v/7SML/rp627SbVcoXrbXnqzH
MD5:	FF018650CBB4B192CCD337C6C9478D1E
SHA1:	D6409B6DF8F0B929E8D5C7F9F49F4FBABACDC0DC
SHA-256:	C5EA92061AA96E1E5AEBFE0714F3383A02BEF2ED7A584D0493841573B653E8C6
SHA-512:	2C88089E0AC3EA8AA93AD5E643AC01F77A727DFA2E28843ED436ADC2E96E32F0F0BA5EB17F70F4D039B70C4A1E106D2AE24A2BA1D4E5ADAEFB90E4B456E944F1
Malicious:	false
Reputation:	low
URL:	http://i3.cdn-image.com/__media__/pics/28905/res-arw.png
Preview:	.PNG........IHDR..."...........N....EPLTEGpL..................................................................W.4.....tRNS.Q...!0....r..>~.._...O#.....IDAT(..... ...A..j..Q7..N...w..4Q.~..+.0443.......&A.?.X..<.b.Q..h.....Fb]0..\..u!....M#.2......~L.H.v.c.7.N....n......@.......7...m...$\.K'..M\..TjG.%G.._...\XjU..cP .{4......IEND.B`.

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17264, version 2.1
Category:	downloaded
Size (bytes):	17264
Entropy (8bit):	7.968311258079736
Encrypted:	false
SSDEEP:	384:JCniidHsnwUHgJANwPtNdi0ONd4Ijgub4WuGgpX+RGVzN:wi8sn7g/W4Ijgub4BGgpwGVR
MD5:	A43B107861B42CE1335E41E43D4E4D00
SHA1:	99BDB1CEC4A68EBE29249C46FEFEFB6880D009E5
SHA-256:	A6542DC92D71EB412BAC89D8FB06C70F15BE74A64B1B4EF1633288B78F4F2FF2
SHA-512:	151D1D3865B24940962476CD6824232EEABFAED92A90439ED5D467D1C7156F7B03BDE91D0303D15648BA13441B8750060066BEDBDEFA0EB930C43A16CBBCFDF9
Malicious:	false
Reputation:	low
URL:	http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Preview:	wOFF......Cp......q@........................FFTM..CT........j..7GDEF..7..........'..GPOS..7.........)MsMGSUB..7.... ... l.t.OS/2.......V...`..]@cmap.......u.......gasp..7\|............glyf...x..)...G.....head...l...6...6...hhea.......!...$...phmtx...@........W\6.loca...l...........:maxp........... .P.8name..2.........N.=post..5h........8',.prep...d........h..........B.L.._.<...........'......d:.....j..............x.c`d``>.........X...".....].?...x.c`d``dg0e`g..& f.B...0........x.c`f.`.........................@9 ..............E........O...a>..[...$.$..H)00..>.....x.m.[HTQ...........d..f^.a.).".0#].0M... .."%a&Q.7)H..>DD.E..K.......D....q.I:.X....}.........SA...M?c.^D.q.\....h.V.P.2...D..FD>.Q......4..:r..5.A..P.Q./!..T.5..R....4.....Ze....j...o...m.1..Z.}..$.q...5=..3C.......r..>.......qe!S.a..%.t..r..7#.^#..{4.......@\....*....q.1T.0.d..w..r.q.k.\G..q[#w8....Y7..r.d........(..\|"8N.k....G3.........Wv.v.I7&M..9.9/.&..s.....8YL0.Q.x.v..1}.z/.3.2.....dm.t.k..M...

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17264, version 2.1
Category:	downloaded
Size (bytes):	17264
Entropy (8bit):	7.968311258079736
Encrypted:	false
SSDEEP:	384:JCniidHsnwUHgJANwPtNdi0ONd4Ijgub4WuGgpX+RGVzN:wi8sn7g/W4Ijgub4BGgpwGVR
MD5:	A43B107861B42CE1335E41E43D4E4D00
SHA1:	99BDB1CEC4A68EBE29249C46FEFEFB6880D009E5
SHA-256:	A6542DC92D71EB412BAC89D8FB06C70F15BE74A64B1B4EF1633288B78F4F2FF2
SHA-512:	151D1D3865B24940962476CD6824232EEABFAED92A90439ED5D467D1C7156F7B03BDE91D0303D15648BA13441B8750060066BEDBDEFA0EB930C43A16CBBCFDF9
Malicious:	false
Reputation:	low
URL:	http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Preview:	wOFF......Cp......q@........................FFTM..CT........j..7GDEF..7..........'..GPOS..7.........)MsMGSUB..7.... ... l.t.OS/2.......V...`..]@cmap.......u.......gasp..7\|............glyf...x..)...G.....head...l...6...6...hhea.......!...$...phmtx...@........W\6.loca...l...........:maxp........... .P.8name..2.........N.=post..5h........8',.prep...d........h..........B.L.._.<...........'......d:.....j..............x.c`d``>.........X...".....].?...x.c`d``dg0e`g..& f.B...0........x.c`f.`.........................@9 ..............E........O...a>..[...$.$..H)00..>.....x.m.[HTQ...........d..f^.a.).".0#].0M... .."%a&Q.7)H..>DD.E..K.......D....q.I:.X....}.........SA...M?c.^D.q.\....h.V.P.2...D..FD>.Q......4..:r..5.A..P.Q./!..T.5..R....4.....Ze....j...o...m.1..Z.}..$.q...5=..3C.......r..>.......qe!S.a..%.t..r..7#.^#..{4.......@\....*....q.1T.0.d..w..r.q.k.\G..q[#w8....Y7..r.d........(..\|"8N.k....G3.........Wv.v.I7&M..9.9/.&..s.....8YL0.Q.x.v..1}.z/.3.2.....dm.t.k..M...

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 33316, version 1.0
Category:	downloaded
Size (bytes):	33316
Entropy (8bit):	7.982608626186682
Encrypted:	false
SSDEEP:	768:KCJR7w4XrSWY4xX0FasJv6BSivTSweHDwy0TADXWxdhSZn++l:K27w+rSWY+0oaC0ivGHDwfMLWPhL+l
MD5:	0A550368742E4B4063C90C6F73EAA16A
SHA1:	74A970F23B23EC1208B39DB0515579906F2B8D89
SHA-256:	D73F9ECEDF37C51DAC037842250D8AD1FB6CC64BDFB16B6902CAA6782866C06A
SHA-512:	20E8682427700FA55B4B8F085F15CE836B5783EBB8956853FD833E321028AE85E86246B5558D14248DE7A31FAF3AACD24DAC6030645954930A009BF1CCE7068F
Malicious:	false
Reputation:	low
URL:	http://i3.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff
Preview:	wOFF.......$......&.........................FFTM.............9.GDEF.......M...h.!..GPOS..........6..%dGSUB..,........$W`:COS/2...\|...S...`a.cmap..............ubcvt ..0\...<...<.Y..fpgm..0........eS./.gasp..2L............glyf..2T..F.........head..x....6...6....hhea..y.... ...$...Qhmtx..y<...J.....7V.loca..{...........maxp..}P... ... ....name..}p........gq..post.............J.prep...x........Q>..webf.............\-..........hR.......F.....S..x.%.=.@P...y>.]a.J5.$...`.&..MNuI@..Z2.(]eAM.{..F=Y0....].......O...K.>m..#...x..}.l...\.m./......b.q.!.I...mjH.eX.M[&.0].i3(MQ6b....a.e...tP.x"7.x....^..........u......Y.g..9...?...B.......s.s......<.T...zW-i}.m.r...?..Z..?..W.n..U......./..Se{.........Z.......~.l..=u..{.k..6<.X.s{...o..>......^U.8._...R\|..%..u.x.....Z................_.%5..0tA..F.../.I\|...:..U...W...u...o.N=.sW......q.<~...=..>5..?....n..[...o}....7.Q...Yf..I.qU..O..I..8s..JJ.;.uP..g.~.o......:.O.:._.^+.q.I....,.,.w4P.#..5y.EQ.o...u

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	downloaded
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
URL:	http://i2.cdn-image.com/__media__/js/min.js?v2.3
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10769), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	38522
Entropy (8bit):	5.903882646632894
Encrypted:	false
SSDEEP:	768:CiBtrifZVO7Wg3hIBYvYYwiOkdC0lGovAy2jTHbY/pdiGP6bcq:C8Cg335wydf8o2E/LZP6bcq
MD5:	DA6FEB12E44BCD349F11959379497161
SHA1:	988055373EE2CCCBAF22F46C42276DF4E3FA0ECB
SHA-256:	2FED76EBF870562482EE8B737BDAAD7FA600E6ACA3CBF2CB64FEEF59AC520C31
SHA-512:	6EC15EDF12B05F35A300026CBAF80BEC3B9DDEFC9B002C7387F6A6433D3F78D800E9CB8C418C15738F432F17341BE0D01C93914AA09CA80EA79355A3633EA910
Malicious:	false
Reputation:	low
URL:	http://ww01.rotect.com/Job_Vacancies_Jobs.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc6TEPjii6jYyypXxZ4eYyija1oDOtc2I3nx4b%2BUMzFr2c%2FSLfe32iW2HH9q1ePVrxViaalLTTLGyJVWvW5wwyXnk0jGXhUCnigLLVRCzgQ%2Bqa%2BQ7kdoV3Prt2jVq2JIvbEY2Sy%2BlXVGBWokdZSGlvUcAtSWlTxaaJ6vtQd06Kdk1nLhN0fK4ZddBdusz%2Ba%2B4b5VUu3xTRNTeb%2BQEyZFOwuNbMfSEhVodK1RZgbaaONJTbSSfzHB3hSN4H%2Fhjew%2FV%2F2qn2geIorBIGVe8ihORHIvWa9m47FAM1VYbgstMUVFew55MOVOnVfz9%2F3wP9op%2FJdBOQEJ43Iyyhk5bv5IkaaQkmahSo57X7l%2FMZUPXy1JQU6%2F6SK5OBqOjsOztIJI%2FVVafAbGHp7mQ%2BNM7WdgsxJzmRjqbRFV5xZEYb3qkUfRTjeTewHOngd8mFDFv%2B3QCJ101a%2FS7zKV%2FRzq1pebGcywM1t%2FoqCdH3Gh%2F7IfGvgMIrQTiTjdCZWOR%2F5shU74SCxaDbOTGlbbsWMwtODtId1%2BiCgY5XQAHcyDjHD%2Bg3T3ktNbRX7bF7f8ai5iLcllrUsqhNrewG9cmGZj3%2FFhPkTyVr%2FnKpXUeeXa%2FQiF5KpiAf4b0AWLY%2FFHcUqTyjyIrMexuiedMZnTUqo8YnBatBorqKlaZOWnm0%2FsrVNoisJ60CPABKIQ0%2FI0jk%2Fy6J89xswtQCWz6VUSSeWiSckpuUX0EG21Wfgb2zeLmE81Dnrku%2BrT9gXXwQJTRTPsi28z8YXodHl8rDAdx2paTV8uwr5H22Hdk9KnbaHx%2BhkE%2F2EaLaBA2apEQAZxGxEGgg2LoG%2FSX3tLFqFSSiK46HhhFAW7yhI1OWTcMYhRKRZivIAeLnvPC2rCaPur0MWGhd%2BsXcmvqy2%2Bs93uTqsNSyNxZtdcEc%2FJ%2Bz%2B5WOIg%2BoZPG4yDSb9hyEIRcsRsA8ybsXyIJCmarUMDiRUVCgQrTC4oWzFPGuaupZTR34nxdv%2B00eZl%2BMLAyNYPM1gGyB6aC4IYjxv5xIlfmnGLG3l6lxGXE5viAqfh2bQ7lsnjzaZbgn%2B0ko9b4bWbIQ9XKNyOS4oC5tGmapfR3vtg%3D%3D&gtnp=0&gtpp=0&tp1=cf37f022-d980-4854-884d-1e3949811b21&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=uizcpS2vK%2BPE8C3jtYNgThNeVom%2Bc90lAaNmJ8t%2FDFo%3D&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&gtnp=0&gtpp=0&kt=210&&kbc=707&ki=321217634&ktd=0&kld=1003&kp=4&bd=-4%231024%231280%231%230
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>..<head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net">.. <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 34 x 29, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	6.229840441641423
Encrypted:	false
SSDEEP:	6:6v/lhPwtz4nDLl9W0y37CpH0xVc4kSbOaWdgR38C+ogSM4bXBxqy3ytDdp:6v/7SML/rp627SbVcoXrbXnqzH
MD5:	FF018650CBB4B192CCD337C6C9478D1E
SHA1:	D6409B6DF8F0B929E8D5C7F9F49F4FBABACDC0DC
SHA-256:	C5EA92061AA96E1E5AEBFE0714F3383A02BEF2ED7A584D0493841573B653E8C6
SHA-512:	2C88089E0AC3EA8AA93AD5E643AC01F77A727DFA2E28843ED436ADC2E96E32F0F0BA5EB17F70F4D039B70C4A1E106D2AE24A2BA1D4E5ADAEFB90E4B456E944F1
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/pics/28905/res-arw.png
Preview:	.PNG........IHDR..."...........N....EPLTEGpL..................................................................W.4.....tRNS.Q...!0....r..>~.._...O#.....IDAT(..... ...A..j..Q7..N...w..4Q.~..+.0443.......&A.?.X..<.b.Q..h.....Fb]0..\..u!....M#.2......~L.H.v.c.7.N....n......@.......7...m...$\.K'..M\..TjG.%G.._...\XjU..cP .{4......IEND.B`.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (374), with no line terminators
Category:	downloaded
Size (bytes):	374
Entropy (8bit):	5.517485089161617
Encrypted:	false
SSDEEP:	6:xWzPTgOmMHSjeSe3hM3QDBXPV2HqJPm27M+d4CuZQSjeSe3NjRWCJ2HqJPm2Aen:xWn8MHDX36AdfZE27H4vZQDX3bv9E27n
MD5:	CFD9EAAAAEB9F8761E9F422FEE789D29
SHA1:	409F1B213C9D998313E1A85D05D63BD33101D8B8
SHA-256:	FF9EF5D0DE93162C813242B91E53008DCAE79AB97A5A1E3504879560A9864552
SHA-512:	D50A72F6C5F7A27C3F97D90BCF393D137E10BB287BD74ECBE7C88FD9AABDCC47BB7246DF0EE2733761B22002F677C4DCD01377D2F5AE70E4999A20D678B56288
Malicious:	false
Reputation:	low
URL:	https://partner.googleadservices.com/gampad/cookie.js?domain=rotect.com&client=partner-dp-bodis30_3ph&product=SAS&callback=__sasCookie
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=46e899ebb71f7b61:T=1722494361:RT=1722494361:S=ALNI_Mb5XzFUNBfZRjNKVj9nGqktdtTQHw","_expires_":1756190361,"_path_":"/","_domain_":"rotect.com","_version_":1},{"_value_":"UID=00000e823062cb4f:T=1722494361:RT=1722494361:S=ALNI_MaRHzT7NRD7orKPQVkeAJg0E43V4g","_expires_":1756190361,"_path_":"/","_domain_":"rotect.com","_version_":2}]});

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2250)
Category:	dropped
Size (bytes):	200591
Entropy (8bit):	5.672278175783673
Encrypted:	false
SSDEEP:	3072:qirVJCp2NAR2CdnEdHX38XqXGeQr+1tqFWap:qoC/vnEdVX5a+1AFlp
MD5:	B68E24FF793EF92841420DE564CD731C
SHA1:	B846DDBC4453BEBA690375D8148996133621E348
SHA-256:	C01932DCB77BD210419C44F8C5DE9860A9FE3C831EDFAC00808DF9CF180B6CC0
SHA-512:	0E5A7E8B619E9CBF928DAF4C730098936EE482A0FDC9526A4DF4E2A79E9EBE81615325D28C5AB7576D73FC802F67D5F9835C8D7DCD119B003A9F835021D78169
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"14817037442938954297",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301431,17301433,17301436,17301511,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog"}};var n;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=type

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44174)
Category:	dropped
Size (bytes):	44175
Entropy (8bit):	5.377319969401598
Encrypted:	false
SSDEEP:	768:UYwCFhglt116xuLcDX91tOwj4dPdmdXpdmkb18DurysSrhVGAGI89+v5YAbYhoUz:ULt11/LcDN16amwGVGAK
MD5:	BE3098870E0BB50A40341B9B2B42753B
SHA1:	0759A117A43C8D5FCDCBC63EC9E1BAFB81F5C460
SHA-256:	25B1F543C4682618E2FFF0C607D70A896ECFC080CE500C41CE00B7FFAD0EC411
SHA-512:	112FDBB12458B051AA2F70A7DA82B2237A599FD2F820A53E406CE9DF1B6A965EF79C2F4875EAB498ED2FF4BEE184B46E857FBB520950E1A39D59F8FDC7A66F00
Malicious:	false
Reputation:	low
Preview:	"use strict";(function(){function Rt(e,n,r,o,c,u,y){try{var _=e[u](y),d=_.value}catch(p){r(p);return}_.done?n(d):Promise.resolve(d).then(o,c)}function It(e){return function(){var n=this,r=arguments;return new Promise(function(o,c){var u=e.apply(n,r);function y(d){Rt(u,o,c,y,_,"next",d)}function _(d){Rt(u,o,c,y,_,"throw",d)}y(void 0)})}}function F(e,n){return n!=null&&typeof Symbol!="undefined"&&n[Symbol.hasInstance]?!!n[Symbol.hasInstance](e):F(e,n)}function Ie(e,n,r){return n in e?Object.defineProperty(e,n,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[n]=r,e}function Oe(e){for(var n=1;n<arguments.length;n++){var r=arguments[n]!=null?arguments[n]:{},o=Object.keys(r);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(r).filter(function(c){return Object.getOwnPropertyDescriptor(r,c).enumerable}))),o.forEach(function(c){Ie(e,c,r[c])})}return e}function gr(e,n){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33926)
Category:	dropped
Size (bytes):	33929
Entropy (8bit):	5.358945546794763
Encrypted:	false
SSDEEP:	768:TP2yjwVcbMnnZNdxBB5gPi0f8rnaVG4xYEb0Ddem+euROvvMzLXWI+6Ch75BGJ21:gn7rnSG4xYEzRLm
MD5:	F9AF67FC41AF13EBEB43BB7FB4A3EF04
SHA1:	2F47A543758968868C5196E31204D6C8A60485FE
SHA-256:	24F07D59FD81BFE363668BA707EDA0644C3B156F000DA1B110FF362CA8214C57
SHA-512:	17FF23DF7CF94A5AB68EFC0C316F2F9820B6196F4FD1273F8F5E6FF2F303997BF36EC3725B038BA9CCB417F44AD9CAEFFA9DBC32B0D11113400CF89034DAA2E2
Malicious:	false
Reputation:	low
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).version={})}(this,(function(exports){"use strict";function __awaiter(e,t,n,i){return new(n\|\|(n=Promise))((function(s,a){function o(e){try{d(i.next(e))}catch(e){a(e)}}function r(e){try{d(i.throw(e))}catch(e){a(e)}}function d(e){var t;e.done?s(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(o,r)}d((i=i.apply(e,t\|\|[])).next())}))}var Blocking;"function"==typeof SuppressedError&&SuppressedError,function(e){e.PENDING="pending",e.NONE="none",e.BLOCKED="blocked",e.ALLOWED="allowed"}(Blocking\|\|(Blocking={}));class Adblock{constructor(e){this.state=Blocking.PENDING,this._mocked=!1,e?(this.state=e,this._mocked=!0):this.state=Blocking.ALLOWED}inject(){return __awaiter(this,void 0,void 0,(function*(){}))}get isBlocked(){return this.state===Blocking.BLOCKED}get isAllowed(){return this.

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.044104743214503
Encrypted:	false
SSDEEP:	6:t6+O4mc4slhohC/vmI4SmK0xhFELE47zF:t6+9noU/vmRI0xQTF
MD5:	D47125B2BA92BE53DCFF07BA322CE1DE
SHA1:	E4A70C8A133BACF1699FDFA4C10E24ED5B3E0C28
SHA-256:	5A0687EA8C9AA404A7724490F046E30023EC6B5AA81D01AE4F225889A64174F6
SHA-512:	78A1BF7547B1C28F600163689161955BC56A621ACE3228C9169143BE933CCF789FC6106BBF729F2E9483BCAA03271529D3913088094C7FB906B44673E13F1F92
Malicious:	false
Reputation:	low
Preview:	<svg fill='#02198b' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (33926)
Category:	downloaded
Size (bytes):	33929
Entropy (8bit):	5.358945546794763
Encrypted:	false
SSDEEP:	768:TP2yjwVcbMnnZNdxBB5gPi0f8rnaVG4xYEb0Ddem+euROvvMzLXWI+6Ch75BGJ21:gn7rnSG4xYEzRLm
MD5:	F9AF67FC41AF13EBEB43BB7FB4A3EF04
SHA1:	2F47A543758968868C5196E31204D6C8A60485FE
SHA-256:	24F07D59FD81BFE363668BA707EDA0644C3B156F000DA1B110FF362CA8214C57
SHA-512:	17FF23DF7CF94A5AB68EFC0C316F2F9820B6196F4FD1273F8F5E6FF2F303997BF36EC3725B038BA9CCB417F44AD9CAEFFA9DBC32B0D11113400CF89034DAA2E2
Malicious:	false
Reputation:	low
URL:	http://rotect.com/bEZCJCfIn.js
Preview:	!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).version={})}(this,(function(exports){"use strict";function __awaiter(e,t,n,i){return new(n\|\|(n=Promise))((function(s,a){function o(e){try{d(i.next(e))}catch(e){a(e)}}function r(e){try{d(i.throw(e))}catch(e){a(e)}}function d(e){var t;e.done?s(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(o,r)}d((i=i.apply(e,t\|\|[])).next())}))}var Blocking;"function"==typeof SuppressedError&&SuppressedError,function(e){e.PENDING="pending",e.NONE="none",e.BLOCKED="blocked",e.ALLOWED="allowed"}(Blocking\|\|(Blocking={}));class Adblock{constructor(e){this.state=Blocking.PENDING,this._mocked=!1,e?(this.state=e,this._mocked=!0):this.state=Blocking.ALLOWED}inject(){return __awaiter(this,void 0,void 0,(function*(){}))}get isBlocked(){return this.state===Blocking.BLOCKED}get isAllowed(){return this.

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 27, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	283
Entropy (8bit):	5.627839973207706
Encrypted:	false
SSDEEP:	6:6v/lhP6VILzlMbNqG1DB/9w2ZCGErnTyBmgHaTeBJ5cdTp:6v/7uILJMndKPGEbTdg6sG9
MD5:	80D42C82A6C37DA90210FD60A2F36128
SHA1:	554BA7C84D2A27ECF3B1F29D03E62101936B54D8
SHA-256:	A1626E2D9160A0890A0A8D6E3AF9E7095D68A24F9FB5AC8A166000C9A2581E10
SHA-512:	8ECB032C38176996EE637009833F3399F773B325E4F574FBBD26F93CDB82892C4143C5816543052B3A5123B89EF4B1AACA0407315AAB879968085E61A20786B6
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/pics/28905/arrrow.png
Preview:	.PNG........IHDR..............(.....HPLTEGpL......................................................................z......tRNS.t..@....fU...2'...dg.......kIDAT..}.... ..P...{..O5...$....v....a.W..J.....I.ih^JF5P.z..H.Lz..F./..h.:.....{t.....i.....;.h...E.....B.6....IEND.B`.

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 3 x 98, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.035372245524405
Encrypted:	false
SSDEEP:	3:yionv//thPlu/l71kxl/k4E08up:6v/lhP6k7Tp
MD5:	EA60CF086A76B05999F4773720C42B0C
SHA1:	AA092D7E1423E5DA58B3787719F45FF36BB08AE5
SHA-256:	4A43E4AB827B0E0CFCEE099548B56048415FE32EFF7B133908F87D1B70715090
SHA-512:	F4CC92AB80C2E92A85EB648BBFD4BB53DA4C85837E910421D70B6AD6BA0C23549FAC749E8942F221A93BE30DFB87E9EB9E1E38ABD3946A383B6A6CE269F73FAA
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/8ac3d536ab658cbd/1722494387396/SKwrBXNtsNLA2jL
Preview:	.PNG........IHDR.......b.............IDAT.....$.....IEND.B`.

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17312, version 2.1
Category:	downloaded
Size (bytes):	17312
Entropy (8bit):	7.969945306725023
Encrypted:	false
SSDEEP:	384:gIMoUXEVKzOr+cRe8hGCLzypa78QKS+RATaD:PMoU0VKzoJe80Ms5D
MD5:	BEBE201D813FEAAD85A3E66607D0DA3A
SHA1:	28B049502AFA8E9DB5340C1A92400591B39870E8
SHA-256:	58BB75322BEB862803B0D156E1A1D01FB1E7FDE82EE93C929B08BF5AEA9FC55B
SHA-512:	2C83376EDCB92F471C458F6C5F316DD24639FCBB88AEC93B2C2690A596CC129860D0D46A2FE1FB4D71AF8AE5856EE48F19EBB17DAD38DDE918AF76C3ABF7441B
Malicious:	false
Reputation:	low
URL:	http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Preview:	wOFF......C.......s`........................FFTM...l........i..+GDEF.............'..GPOS................GSUB...p... ... l.t.OS/2.......T...`..=.cmap.......u.......gasp...\............glyf...d..(...G8a.?.head..9p...4...6....hhea..9....!...$...'hmtx..9.........Y.-.loca..<x............maxp..>........ .P.7name..>............post..A.........8Y,.prep..C.........h.............h<......'......d:................................x...[l\......vb{l......7....h.o.+....!Q.p1.O.P.P%.h......UU...UEMpQ.ZA.1.I !.C..@...=...=..:.cB.P5:>.9{....^k......)wJ..x.)..R~.....gO>m~....6.BJ..:..tIY.._...dq../mxe...l\|ic.....Kc..lzj..o...%.;....^.x}.o..l.e...gOV.V=\5]..z_..o..n.o..;..5.5.........5.....n................O./...c.t.R.4.t...K...TCm.H..........]....nT:.:.t....j..A..JwU...$.![y...J+.....u.....).I.H..7I..H....%..}.........nZ..ef/. .?(O.A7)..q...p...f.#xx.M.O.;.j...q7.7..Ds.O.@t.D1Et...0.F....`.f.d...9wIX.F.a...fxl.C..[.0.F.0..D..E.a.c(.8<G.j...,....S.Y..>.t..2s.Y....G

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	5.044104743214503
Encrypted:	false
SSDEEP:	6:t6+O4mc4slhohC/vmI4SmK0xhFELE47zF:t6+9noU/vmRI0xQTF
MD5:	D47125B2BA92BE53DCFF07BA322CE1DE
SHA1:	E4A70C8A133BACF1699FDFA4C10E24ED5B3E0C28
SHA-256:	5A0687EA8C9AA404A7724490F046E30023EC6B5AA81D01AE4F225889A64174F6
SHA-512:	78A1BF7547B1C28F600163689161955BC56A621ACE3228C9169143BE933CCF789FC6106BBF729F2E9483BCAA03271529D3913088094C7FB906B44673E13F1F92
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b
Preview:	<svg fill='#02198b' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44174)
Category:	downloaded
Size (bytes):	44175
Entropy (8bit):	5.377319969401598
Encrypted:	false
SSDEEP:	768:UYwCFhglt116xuLcDX91tOwj4dPdmdXpdmkb18DurysSrhVGAGI89+v5YAbYhoUz:ULt11/LcDN16amwGVGAK
MD5:	BE3098870E0BB50A40341B9B2B42753B
SHA1:	0759A117A43C8D5FCDCBC63EC9E1BAFB81F5C460
SHA-256:	25B1F543C4682618E2FFF0C607D70A896ECFC080CE500C41CE00B7FFAD0EC411
SHA-512:	112FDBB12458B051AA2F70A7DA82B2237A599FD2F820A53E406CE9DF1B6A965EF79C2F4875EAB498ED2FF4BEE184B46E857FBB520950E1A39D59F8FDC7A66F00
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/turnstile/v0/b/8c81cb09042c/api.js?onload=UYbeL2&render=explicit
Preview:	"use strict";(function(){function Rt(e,n,r,o,c,u,y){try{var _=e[u](y),d=_.value}catch(p){r(p);return}_.done?n(d):Promise.resolve(d).then(o,c)}function It(e){return function(){var n=this,r=arguments;return new Promise(function(o,c){var u=e.apply(n,r);function y(d){Rt(u,o,c,y,_,"next",d)}function _(d){Rt(u,o,c,y,_,"throw",d)}y(void 0)})}}function F(e,n){return n!=null&&typeof Symbol!="undefined"&&n[Symbol.hasInstance]?!!n[Symbol.hasInstance](e):F(e,n)}function Ie(e,n,r){return n in e?Object.defineProperty(e,n,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[n]=r,e}function Oe(e){for(var n=1;n<arguments.length;n++){var r=arguments[n]!=null?arguments[n]:{},o=Object.keys(r);typeof Object.getOwnPropertySymbols=="function"&&(o=o.concat(Object.getOwnPropertySymbols(r).filter(function(c){return Object.getOwnPropertyDescriptor(r,c).enumerable}))),o.forEach(function(c){Ie(e,c,r[c])})}return e}function gr(e,n){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertyS

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	444
Entropy (8bit):	5.154450625500841
Encrypted:	false
SSDEEP:	12:t6jknGEIT2cDPhJ9noU/vmOGbCgqIrRuq/PB4M:tCknmaWhXoU/v9el/p
MD5:	FE7DD8C3C629CC6E9CD6D3E4D3CBE905
SHA1:	59EF3B8E4A17169A4CB45FBA65BF0D2BF49C8A18
SHA-256:	5455D8D4B8AE5150039FF7A83A6679D4338A435945985FA9F8D0ECBEA9AE2F6E
SHA-512:	1C663E07978D95C838AED54421A9C725D7311B8C002F436B30555AFFB26C25F6EBECFF6AF5C54EF112370A36A5F5AADF611304BFFE76A59FB3D206E943CF153F
Malicious:	false
Reputation:	low
Preview:	<svg fill='#ffffff' xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:cc="http://creativecommons.org/ns#" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:svg="http://www.w3.org/2000/svg" xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24" version="1.1" id="svg136">. <path d="M0 0h24v24H0z" fill="none" id="path132"/>. <path d="M 2.01,21 23,12 2.01,3 v 0 l 5.5614285,9.357143 z" id="path134"/>.</svg>.

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (346), with no line terminators
Category:	dropped
Size (bytes):	346
Entropy (8bit):	5.00818604439199
Encrypted:	false
SSDEEP:	6:qIZmJNsVwbDRWPWG3mV/R7cjTDEG5OQRoYxHSNHbMFKdCuFxXcvH3eVP4SzpF9yc:+JG0DRWZmX7OPrRNwN7MFMCu/cvOVQSl
MD5:	F84F931C0DD37448E03F0DABF4E4CA9F
SHA1:	9C2C50EDCF576453CCC07BF65668BD23C76E8663
SHA-256:	5C1D5FD46A88611C31ECBB8FFC1142A7E74EC7FB7D72BD3891131C880EF3F584
SHA-512:	AFC3089D932FB030E932BF6414AC05681771051DD51D164F09635CA09CBD8525A52879524B6AA24E972E7766DDF529484CC1EC416DE8B61255435A89BA781F8C
Malicious:	false
Reputation:	low
Preview:	var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 33316, version 1.0
Category:	downloaded
Size (bytes):	33316
Entropy (8bit):	7.982608626186682
Encrypted:	false
SSDEEP:	768:KCJR7w4XrSWY4xX0FasJv6BSivTSweHDwy0TADXWxdhSZn++l:K27w+rSWY+0oaC0ivGHDwfMLWPhL+l
MD5:	0A550368742E4B4063C90C6F73EAA16A
SHA1:	74A970F23B23EC1208B39DB0515579906F2B8D89
SHA-256:	D73F9ECEDF37C51DAC037842250D8AD1FB6CC64BDFB16B6902CAA6782866C06A
SHA-512:	20E8682427700FA55B4B8F085F15CE836B5783EBB8956853FD833E321028AE85E86246B5558D14248DE7A31FAF3AACD24DAC6030645954930A009BF1CCE7068F
Malicious:	false
Reputation:	low
URL:	http://i2.cdn-image.com/__media__/fonts/montserrat-medium/montserrat-medium.woff
Preview:	wOFF.......$......&.........................FFTM.............9.GDEF.......M...h.!..GPOS..........6..%dGSUB..,........$W`:COS/2...\|...S...`a.cmap..............ubcvt ..0\...<...<.Y..fpgm..0........eS./.gasp..2L............glyf..2T..F.........head..x....6...6....hhea..y.... ...$...Qhmtx..y<...J.....7V.loca..{...........maxp..}P... ... ....name..}p........gq..post.............J.prep...x........Q>..webf.............\-..........hR.......F.....S..x.%.=.@P...y>.]a.J5.$...`.&..MNuI@..Z2.(]eAM.{..F=Y0....].......O...K.>m..#...x..}.l...\.m./......b.q.!.I...mjH.eX.M[&.0].i3(MQ6b....a.e...tP.x"7.x....^..........u......Y.g..9...?...B.......s.s......<.T...zW-i}.m.r...?..Z..?..W.n..U......./..Se{.........Z.......~.l..=u..{.k..6<.X.s{...o..>......^U.8._...R\|..%..u.x.....Z................_.%5..0tA..F.../.I\|...:..U...W...u...o.N=.sW......q.<~...=..>5..?....n..[...o}....7.Q...Yf..I.qU..O..I..8s..JJ.;.uP..g.~.o......:.O.:._.^+.q.I....,.,.w4P.#..5y.EQ.o...u

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/pics/29590/bg1.png
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Timestamp	Protocol	SID	Signature	Source Port	Dest Port	Source IP	Dest IP
2024-08-01T08:39:25.329151+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	49770	142.250.185.206	192.168.2.9
2024-08-01T08:39:31.231954+0200	TCP	2045203	ET PHISHING W3LL STORE Phish Kit Landing Page 2023-04-26	49785	443	192.168.2.9	104.18.94.41
2024-08-01T08:39:45.757359+0200	TCP	2045203	ET PHISHING W3LL STORE Phish Kit Landing Page 2023-04-26	49825	443	192.168.2.9	104.18.95.41
2024-08-01T08:39:30.759145+0200	TCP	2045203	ET PHISHING W3LL STORE Phish Kit Landing Page 2023-04-26	49784	443	192.168.2.9	104.16.42.9
2024-08-01T08:39:33.927941+0200	TCP	2045203	ET PHISHING W3LL STORE Phish Kit Landing Page 2023-04-26	49793	443	192.168.2.9	104.18.95.41
2024-08-01T08:39:38.113661+0200	TCP	2045203	ET PHISHING W3LL STORE Phish Kit Landing Page 2023-04-26	49804	443	192.168.2.9	104.18.95.41
2024-08-01T08:38:56.350732+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	49716	142.250.186.164	192.168.2.9
2024-08-01T08:39:23.592791+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	49765	142.250.184.238	192.168.2.9
2024-08-01T08:39:21.462231+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	49756	142.250.185.100	192.168.2.9
2024-08-01T08:39:45.640102+0200	TCP	2045203	ET PHISHING W3LL STORE Phish Kit Landing Page 2023-04-26	49824	443	192.168.2.9	104.18.4.249
2024-08-01T08:39:20.182273+0200	TCP	2012510	ET SHELLCODE UTF-8/16 Encoded Shellcode	443	49755	142.250.186.164	192.168.2.9
2024-08-01T08:39:48.366443+0200	TCP	2045203	ET PHISHING W3LL STORE Phish Kit Landing Page 2023-04-26	49832	443	192.168.2.9	104.18.95.41
2024-08-01T08:39:51.901086+0200	TCP	2045203	ET PHISHING W3LL STORE Phish Kit Landing Page 2023-04-26	49850	443	192.168.2.9	104.18.95.41

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 1, 2024 08:38:42.953725100 CEST	49677	443	192.168.2.9	20.189.173.11
Aug 1, 2024 08:38:45.359791040 CEST	49677	443	192.168.2.9	20.189.173.11
Aug 1, 2024 08:38:45.493313074 CEST	49676	443	192.168.2.9	23.206.229.209
Aug 1, 2024 08:38:45.496530056 CEST	49675	443	192.168.2.9	23.206.229.209
Aug 1, 2024 08:38:45.740087032 CEST	49674	443	192.168.2.9	23.206.229.209
Aug 1, 2024 08:38:50.187890053 CEST	49677	443	192.168.2.9	20.189.173.11
Aug 1, 2024 08:38:51.391048908 CEST	49673	443	192.168.2.9	204.79.197.203
Aug 1, 2024 08:38:54.200383902 CEST	49711	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:54.200751066 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:54.205538034 CEST	80	49711	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.205746889 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.205845118 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:54.205849886 CEST	49711	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:54.206136942 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:54.211003065 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.698668003 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.698702097 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.698837042 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:54.740226030 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:54.745196104 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.749280930 CEST	49714	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:54.749375105 CEST	443	49714	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:54.749488115 CEST	49714	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:54.749825954 CEST	49714	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:54.749861002 CEST	443	49714	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:54.846787930 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.846821070 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.846935987 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:54.847235918 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.847279072 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.847340107 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:54.847342014 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.847359896 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.847440004 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:54.847502947 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.847522974 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.847539902 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.847557068 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.847570896 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:54.847603083 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:54.847718000 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.847734928 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.847776890 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:54.852468014 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.852529049 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.852612972 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:54.939850092 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.939872026 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.939883947 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.939898014 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.939924002 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.939939022 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.939977884 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:54.940038919 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:54.940226078 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.940253019 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.940268993 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.940310955 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:54.940826893 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.940851927 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.940865040 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.940872908 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:54.940933943 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:54.941032887 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.941046953 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.941060066 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.941087008 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:54.941513062 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:54.941561937 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:54.958014011 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:54.963234901 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.070063114 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.070089102 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.070101976 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.070177078 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.070179939 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:55.070233107 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.070240021 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:55.096878052 CEST	49676	443	192.168.2.9	23.206.229.209
Aug 1, 2024 08:38:55.096898079 CEST	49675	443	192.168.2.9	23.206.229.209
Aug 1, 2024 08:38:55.112894058 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:55.154946089 CEST	49715	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:55.160024881 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.160115004 CEST	49715	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:55.160357952 CEST	49715	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:55.165232897 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.203383923 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:55.203438044 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:55.203530073 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:55.203775883 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:55.203792095 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:55.214760065 CEST	49717	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:55.222665071 CEST	80	49717	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.222759008 CEST	49717	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:55.223114967 CEST	49717	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:55.228863001 CEST	80	49717	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.346910000 CEST	49674	443	192.168.2.9	23.206.229.209
Aug 1, 2024 08:38:55.388627052 CEST	443	49714	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:55.402627945 CEST	49714	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:55.402662992 CEST	443	49714	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:55.405369043 CEST	443	49714	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:55.405455112 CEST	49714	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:55.407927990 CEST	49714	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:55.408130884 CEST	443	49714	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:55.456310034 CEST	49714	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:55.456322908 CEST	443	49714	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:55.510513067 CEST	49714	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:55.621243954 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.621263981 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.621273994 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.621324062 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.621329069 CEST	49715	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:55.621336937 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.621372938 CEST	49715	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:55.621486902 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.621498108 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.621509075 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.621517897 CEST	49715	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:55.621520996 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.621535063 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.621545076 CEST	49715	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:55.621567965 CEST	49715	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:55.626214981 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.626291037 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.626302958 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.626328945 CEST	49715	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:55.674875021 CEST	49715	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:55.703958035 CEST	80	49717	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.704289913 CEST	80	49717	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.704332113 CEST	49717	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:55.708726883 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.708785057 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.708798885 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.708822966 CEST	49715	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:55.708946943 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.708981037 CEST	49715	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:55.708995104 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.709007978 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.709038019 CEST	49715	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:55.709074020 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.709528923 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.709561110 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.709568024 CEST	49715	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:55.709577084 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.709606886 CEST	49715	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:55.709636927 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.709728956 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.709764004 CEST	49715	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:55.710437059 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.710448980 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.710463047 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.710481882 CEST	49715	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:55.710568905 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.710583925 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.710611105 CEST	49715	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:55.711258888 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:55.711297035 CEST	49715	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:55.880300999 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:55.882103920 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:55.882168055 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:55.885206938 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:55.885283947 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:55.896338940 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:55.896564007 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:55.896610975 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:55.940524101 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:55.940525055 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:55.940567017 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:55.987369061 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.164541960 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.164592028 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.164618969 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.164642096 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.164639950 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.164674997 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.164694071 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.164704084 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.164737940 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.164745092 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.170475960 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.170528889 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.170562029 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.176836967 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.176891088 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.176923990 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.183567047 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.183619976 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.183651924 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.211971045 CEST	49719	443	192.168.2.9	142.250.185.174
Aug 1, 2024 08:38:56.212008953 CEST	443	49719	142.250.185.174	192.168.2.9
Aug 1, 2024 08:38:56.212068081 CEST	49719	443	192.168.2.9	142.250.185.174
Aug 1, 2024 08:38:56.212753057 CEST	49719	443	192.168.2.9	142.250.185.174
Aug 1, 2024 08:38:56.212766886 CEST	443	49719	142.250.185.174	192.168.2.9
Aug 1, 2024 08:38:56.237385035 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.257102013 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.257268906 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.257325888 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.257363081 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.259849072 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.259921074 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.259923935 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.259948015 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.259996891 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.266175032 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.272459030 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.272527933 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.272545099 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.278687000 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.278740883 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.278755903 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.285079002 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.285159111 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.285172939 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.291026115 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.291080952 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.291095018 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.296859026 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.296911955 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.296930075 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.302822113 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.302891016 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.302906036 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.308866978 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.308895111 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.308918953 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.308934927 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.308999062 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.314526081 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.314570904 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.314614058 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.314626932 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.350811958 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.350872040 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.350903034 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.350994110 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.351043940 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.351057053 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.351247072 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.351300955 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.351311922 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.351416111 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.351464987 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.351476908 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.352469921 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.352525949 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.352536917 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.356281996 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.356357098 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.356369019 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.361418962 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.361475945 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.361488104 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.367038965 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.367099047 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.367113113 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.372390985 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.372453928 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.372467041 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.378191948 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.378264904 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.378278017 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.383105993 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.383171082 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.383186102 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.429395914 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.621548891 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.621618986 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.621653080 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.621678114 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.621685982 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.621725082 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.621759892 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.621782064 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.621804953 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.621825933 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.621834040 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.621881962 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.622009993 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.622061014 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.622087955 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.622098923 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.622108936 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.622145891 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.622153044 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.622160912 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.622227907 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.622421026 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.622469902 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.622504950 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.622514009 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.622525930 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.622560024 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.622565985 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.622572899 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.622618914 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.622904062 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.622957945 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.622992039 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.623001099 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.623034954 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.623065948 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.623068094 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.623075962 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.623119116 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.623126030 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.623161077 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.623191118 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.623198986 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.623210907 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.623236895 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.623255968 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.623265028 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.623311996 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.626583099 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.626667976 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.626696110 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.626708984 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.626724005 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.626760960 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.626760960 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.626769066 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.626817942 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.627432108 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.627644062 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.627712011 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.627718925 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.628314018 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.628359079 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.628365040 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.628513098 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.628554106 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.628560066 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.629224062 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.629267931 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.629275084 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.629391909 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.629436970 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.629442930 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.629530907 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.629569054 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.629575014 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.630155087 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.630278111 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.630372047 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.630378008 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.630414963 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.630475998 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.630534887 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.633187056 CEST	49716	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:38:56.633214951 CEST	443	49716	142.250.186.164	192.168.2.9
Aug 1, 2024 08:38:56.856420040 CEST	443	49719	142.250.185.174	192.168.2.9
Aug 1, 2024 08:38:56.881786108 CEST	49719	443	192.168.2.9	142.250.185.174
Aug 1, 2024 08:38:56.881836891 CEST	443	49719	142.250.185.174	192.168.2.9
Aug 1, 2024 08:38:56.883137941 CEST	443	49719	142.250.185.174	192.168.2.9
Aug 1, 2024 08:38:56.883229971 CEST	49719	443	192.168.2.9	142.250.185.174
Aug 1, 2024 08:38:56.995126963 CEST	49719	443	192.168.2.9	142.250.185.174
Aug 1, 2024 08:38:56.995323896 CEST	443	49719	142.250.185.174	192.168.2.9
Aug 1, 2024 08:38:56.997143030 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:56.997220039 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:57.002155066 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:57.002171040 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:57.002197027 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:57.002211094 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:57.002270937 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:57.002284050 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:57.006932020 CEST	49720	443	192.168.2.9	142.250.186.100
Aug 1, 2024 08:38:57.006972075 CEST	443	49720	142.250.186.100	192.168.2.9
Aug 1, 2024 08:38:57.007380962 CEST	49720	443	192.168.2.9	142.250.186.100
Aug 1, 2024 08:38:57.007899046 CEST	49720	443	192.168.2.9	142.250.186.100
Aug 1, 2024 08:38:57.007940054 CEST	443	49720	142.250.186.100	192.168.2.9
Aug 1, 2024 08:38:57.035551071 CEST	49719	443	192.168.2.9	142.250.185.174
Aug 1, 2024 08:38:57.035568953 CEST	443	49719	142.250.185.174	192.168.2.9
Aug 1, 2024 08:38:57.043241024 CEST	443	49704	23.206.229.209	192.168.2.9
Aug 1, 2024 08:38:57.043598890 CEST	49704	443	192.168.2.9	23.206.229.209
Aug 1, 2024 08:38:57.082454920 CEST	49719	443	192.168.2.9	142.250.185.174
Aug 1, 2024 08:38:57.177325010 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:57.223119974 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:57.251969099 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:57.252000093 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:57.256983995 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:57.257004023 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:57.257016897 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:57.358406067 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:57.409770966 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:57.521867990 CEST	49721	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:57.522710085 CEST	49722	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:57.526946068 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:57.527090073 CEST	49721	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:57.527601957 CEST	49721	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:57.527719975 CEST	80	49722	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:57.527781010 CEST	49722	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:57.532470942 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:57.647106886 CEST	443	49720	142.250.186.100	192.168.2.9
Aug 1, 2024 08:38:57.647758961 CEST	49720	443	192.168.2.9	142.250.186.100
Aug 1, 2024 08:38:57.647773981 CEST	443	49720	142.250.186.100	192.168.2.9
Aug 1, 2024 08:38:57.648852110 CEST	443	49720	142.250.186.100	192.168.2.9
Aug 1, 2024 08:38:57.649005890 CEST	49720	443	192.168.2.9	142.250.186.100
Aug 1, 2024 08:38:57.649635077 CEST	49720	443	192.168.2.9	142.250.186.100
Aug 1, 2024 08:38:57.649708986 CEST	443	49720	142.250.186.100	192.168.2.9
Aug 1, 2024 08:38:57.689819098 CEST	49720	443	192.168.2.9	142.250.186.100
Aug 1, 2024 08:38:57.689831972 CEST	443	49720	142.250.186.100	192.168.2.9
Aug 1, 2024 08:38:57.713349104 CEST	49723	443	192.168.2.9	184.28.90.27
Aug 1, 2024 08:38:57.713403940 CEST	443	49723	184.28.90.27	192.168.2.9
Aug 1, 2024 08:38:57.713466883 CEST	49723	443	192.168.2.9	184.28.90.27
Aug 1, 2024 08:38:57.717612982 CEST	49723	443	192.168.2.9	184.28.90.27
Aug 1, 2024 08:38:57.717633963 CEST	443	49723	184.28.90.27	192.168.2.9
Aug 1, 2024 08:38:57.738327980 CEST	49720	443	192.168.2.9	142.250.186.100
Aug 1, 2024 08:38:57.760210037 CEST	49715	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:57.761573076 CEST	49717	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:57.765201092 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:57.766835928 CEST	80	49717	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:57.861602068 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:57.861660957 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:57.861721992 CEST	49715	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:57.866251945 CEST	80	49717	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:57.866301060 CEST	80	49717	199.59.243.226	192.168.2.9
Aug 1, 2024 08:38:57.866349936 CEST	49717	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:38:58.360423088 CEST	443	49723	184.28.90.27	192.168.2.9
Aug 1, 2024 08:38:58.360502958 CEST	49723	443	192.168.2.9	184.28.90.27
Aug 1, 2024 08:38:58.365590096 CEST	49723	443	192.168.2.9	184.28.90.27
Aug 1, 2024 08:38:58.365605116 CEST	443	49723	184.28.90.27	192.168.2.9
Aug 1, 2024 08:38:58.365933895 CEST	443	49723	184.28.90.27	192.168.2.9
Aug 1, 2024 08:38:58.410779953 CEST	49723	443	192.168.2.9	184.28.90.27
Aug 1, 2024 08:38:58.456526041 CEST	443	49723	184.28.90.27	192.168.2.9
Aug 1, 2024 08:38:58.631161928 CEST	443	49723	184.28.90.27	192.168.2.9
Aug 1, 2024 08:38:58.631354094 CEST	443	49723	184.28.90.27	192.168.2.9
Aug 1, 2024 08:38:58.631418943 CEST	49723	443	192.168.2.9	184.28.90.27
Aug 1, 2024 08:38:58.631647110 CEST	49723	443	192.168.2.9	184.28.90.27
Aug 1, 2024 08:38:58.631670952 CEST	443	49723	184.28.90.27	192.168.2.9
Aug 1, 2024 08:38:58.631705046 CEST	49723	443	192.168.2.9	184.28.90.27
Aug 1, 2024 08:38:58.631712914 CEST	443	49723	184.28.90.27	192.168.2.9
Aug 1, 2024 08:38:58.883511066 CEST	49724	443	192.168.2.9	184.28.90.27
Aug 1, 2024 08:38:58.883570910 CEST	443	49724	184.28.90.27	192.168.2.9
Aug 1, 2024 08:38:58.883657932 CEST	49724	443	192.168.2.9	184.28.90.27
Aug 1, 2024 08:38:58.884387970 CEST	49724	443	192.168.2.9	184.28.90.27
Aug 1, 2024 08:38:58.884407997 CEST	443	49724	184.28.90.27	192.168.2.9
Aug 1, 2024 08:38:59.192717075 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.192785978 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.192826033 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.192861080 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.192879915 CEST	49721	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.192898035 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.192935944 CEST	49721	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.192941904 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.192986012 CEST	49721	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.192992926 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.193027973 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.193063974 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.193067074 CEST	49721	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.193119049 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.193188906 CEST	49721	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.198056936 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.198156118 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.198191881 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.198223114 CEST	49721	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.242012024 CEST	49722	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.246948004 CEST	80	49722	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.251497030 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.252760887 CEST	49721	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.255412102 CEST	49726	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:38:59.255470037 CEST	443	49726	87.230.98.78	192.168.2.9
Aug 1, 2024 08:38:59.255615950 CEST	49726	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:38:59.256405115 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.256470919 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.256532907 CEST	49726	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:38:59.256551027 CEST	443	49726	87.230.98.78	192.168.2.9
Aug 1, 2024 08:38:59.257538080 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:38:59.257575989 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:38:59.258212090 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:38:59.258321047 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.258570910 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:38:59.258586884 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:38:59.263226986 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.283603907 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.283660889 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.283695936 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.283732891 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.283776045 CEST	49721	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.283785105 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.283816099 CEST	49721	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.284157991 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.284207106 CEST	49721	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.284231901 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.284267902 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.284302950 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.284346104 CEST	49721	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.284713984 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.284749031 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.284780979 CEST	49721	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.284805059 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.284837961 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.284854889 CEST	49721	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.284878016 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.284921885 CEST	49721	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.285582066 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.285634995 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.285676956 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.285692930 CEST	49721	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.285733938 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.285768032 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.285815954 CEST	49721	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.286456108 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.286511898 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.286524057 CEST	49721	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.286565065 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.286601067 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.286642075 CEST	49721	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.288738012 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.288789988 CEST	49721	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.324811935 CEST	49729	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:38:59.329863071 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.329935074 CEST	49729	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:38:59.332746029 CEST	49729	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:38:59.337914944 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.341587067 CEST	80	49722	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.378868103 CEST	49730	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.384089947 CEST	80	49730	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.384193897 CEST	49730	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.384638071 CEST	49730	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.390064955 CEST	80	49730	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.393109083 CEST	49722	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.521697044 CEST	443	49724	184.28.90.27	192.168.2.9
Aug 1, 2024 08:38:59.521779060 CEST	49724	443	192.168.2.9	184.28.90.27
Aug 1, 2024 08:38:59.525371075 CEST	49724	443	192.168.2.9	184.28.90.27
Aug 1, 2024 08:38:59.525388002 CEST	443	49724	184.28.90.27	192.168.2.9
Aug 1, 2024 08:38:59.525679111 CEST	443	49724	184.28.90.27	192.168.2.9
Aug 1, 2024 08:38:59.527838945 CEST	49724	443	192.168.2.9	184.28.90.27
Aug 1, 2024 08:38:59.568546057 CEST	443	49724	184.28.90.27	192.168.2.9
Aug 1, 2024 08:38:59.714016914 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.744733095 CEST	49731	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:38:59.744772911 CEST	443	49731	87.230.98.78	192.168.2.9
Aug 1, 2024 08:38:59.744837046 CEST	49731	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:38:59.745285034 CEST	49731	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:38:59.745305061 CEST	443	49731	87.230.98.78	192.168.2.9
Aug 1, 2024 08:38:59.768774986 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.784269094 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.784863949 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.784918070 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.784928083 CEST	49729	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:38:59.784954071 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.784991026 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.785010099 CEST	49729	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:38:59.785079002 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.785114050 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.785125017 CEST	49729	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:38:59.785198927 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.785239935 CEST	49729	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:38:59.798978090 CEST	49677	443	192.168.2.9	20.189.173.11
Aug 1, 2024 08:38:59.836644888 CEST	443	49724	184.28.90.27	192.168.2.9
Aug 1, 2024 08:38:59.850678921 CEST	49729	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:38:59.851794004 CEST	49732	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:38:59.856837034 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.857939959 CEST	80	49732	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.858010054 CEST	49732	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:38:59.858244896 CEST	49732	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:38:59.864187002 CEST	80	49732	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.872108936 CEST	80	49730	199.191.50.153	192.168.2.9
Aug 1, 2024 08:38:59.879967928 CEST	49724	443	192.168.2.9	184.28.90.27
Aug 1, 2024 08:38:59.880001068 CEST	443	49724	184.28.90.27	192.168.2.9
Aug 1, 2024 08:38:59.889560938 CEST	49724	443	192.168.2.9	184.28.90.27
Aug 1, 2024 08:38:59.889580011 CEST	443	49724	184.28.90.27	192.168.2.9
Aug 1, 2024 08:38:59.889645100 CEST	49724	443	192.168.2.9	184.28.90.27
Aug 1, 2024 08:38:59.890054941 CEST	443	49724	184.28.90.27	192.168.2.9
Aug 1, 2024 08:38:59.890153885 CEST	443	49724	184.28.90.27	192.168.2.9
Aug 1, 2024 08:38:59.890201092 CEST	49724	443	192.168.2.9	184.28.90.27
Aug 1, 2024 08:38:59.916924953 CEST	49730	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:38:59.925890923 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:38:59.926412106 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:38:59.926446915 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:38:59.927696943 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:38:59.927758932 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:38:59.947984934 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.948048115 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.948084116 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.948102951 CEST	49729	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:38:59.948137999 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.948170900 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.948182106 CEST	49729	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:38:59.948208094 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.948246956 CEST	49729	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:38:59.948682070 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.948736906 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.948771000 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.948780060 CEST	49729	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:38:59.948807955 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.948851109 CEST	49729	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:38:59.949759960 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.949793100 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.949827909 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.949848890 CEST	49729	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:38:59.950705051 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.950753927 CEST	49729	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:38:59.950759888 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.950793982 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.950829029 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:38:59.950841904 CEST	49729	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:00.003156900 CEST	49729	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:00.201562881 CEST	443	49726	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:00.201989889 CEST	49726	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:00.202032089 CEST	443	49726	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:00.203560114 CEST	443	49726	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:00.203634024 CEST	49726	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:00.308995962 CEST	80	49732	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:00.359460115 CEST	49732	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:00.409037113 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.409225941 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.426342964 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.426382065 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.426541090 CEST	49726	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:00.426889896 CEST	443	49726	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:00.440438032 CEST	80	49732	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:00.470179081 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.470196009 CEST	49726	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:00.470237970 CEST	443	49726	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:00.482382059 CEST	49732	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:00.518728018 CEST	49726	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:00.521496058 CEST	49730	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:00.527306080 CEST	80	49730	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:00.531490088 CEST	49735	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:00.531997919 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:00.537193060 CEST	80	49735	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:00.537272930 CEST	49735	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:00.537647963 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:00.537714005 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:00.594337940 CEST	49735	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:00.594748974 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:00.600210905 CEST	80	49735	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:00.600538015 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:00.623085976 CEST	80	49730	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:00.635124922 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.635189056 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.635210037 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.635230064 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.635247946 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.635273933 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.635292053 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.635293007 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.635314941 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.635341883 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.635350943 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.635370016 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.660073996 CEST	443	49731	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:00.663291931 CEST	49730	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:00.670031071 CEST	49731	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:00.670048952 CEST	443	49731	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:00.671861887 CEST	443	49731	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:00.671926022 CEST	49731	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:00.673762083 CEST	49731	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:00.673863888 CEST	443	49731	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:00.674005985 CEST	49731	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:00.674017906 CEST	443	49731	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:00.682782888 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.714323997 CEST	49731	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:00.720191956 CEST	49737	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:00.720328093 CEST	49738	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:00.720541954 CEST	49739	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:00.725210905 CEST	80	49737	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:00.725281954 CEST	49737	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:00.725564003 CEST	80	49738	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:00.725617886 CEST	49738	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:00.725696087 CEST	80	49739	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:00.725744009 CEST	49739	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:00.729341984 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.729351997 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.729394913 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.729409933 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.729415894 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.729444981 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.729468107 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.729481936 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.750969887 CEST	49739	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:00.751286030 CEST	49738	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:00.751341105 CEST	49737	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:00.755774021 CEST	80	49739	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:00.756170034 CEST	80	49738	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:00.756181002 CEST	80	49737	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:00.760685921 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.760704041 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.760756016 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.760786057 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.760803938 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.760819912 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.802321911 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.802344084 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.802428961 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.802453041 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.802480936 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.802505970 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.834409952 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.834428072 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.834503889 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.834528923 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.834623098 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.858234882 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.858254910 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.858310938 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.858333111 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.858357906 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.858509064 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.858980894 CEST	443	49731	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:00.859069109 CEST	443	49731	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:00.861884117 CEST	49731	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:00.882642031 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.882663965 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.882735014 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.882757902 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.882785082 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.885253906 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.900914907 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.900934935 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.901015043 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.901036978 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.901092052 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.914551020 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.914567947 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.914640903 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.914666891 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.914717913 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.927757025 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.927778006 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.927870989 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.927895069 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.927985907 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.938733101 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.938750029 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.938796997 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.938817978 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.938827991 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.939157963 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.951184034 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.951205969 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.951267958 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.951283932 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.951318026 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.951344013 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.952882051 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.957212925 CEST	49731	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:00.957232952 CEST	443	49731	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:00.963155031 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.963172913 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.963231087 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.963247061 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.963280916 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.963298082 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.975509882 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.975532055 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.975579977 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.975604057 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.975624084 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.976537943 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.984333992 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.984350920 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.984400988 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.984419107 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.984464884 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.986238956 CEST	80	49735	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:00.986299992 CEST	80	49735	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:00.986314058 CEST	80	49735	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:00.986351967 CEST	49735	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:00.986371994 CEST	80	49735	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:00.986407042 CEST	49735	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:00.986424923 CEST	80	49735	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:00.986437082 CEST	80	49735	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:00.986505985 CEST	49735	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:00.986566067 CEST	80	49735	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:00.986577988 CEST	80	49735	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:00.986593008 CEST	80	49735	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:00.986605883 CEST	80	49735	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:00.986609936 CEST	49735	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:00.986638069 CEST	49735	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:00.992574930 CEST	80	49735	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:00.992625952 CEST	80	49735	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:00.992716074 CEST	49735	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:00.993160963 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.993177891 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.993211031 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.993228912 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:00.993264914 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:00.993299007 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.002871037 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.002887964 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.003000975 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.003020048 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.003088951 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.003858089 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.004110098 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.004123926 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.004137039 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.004174948 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:01.004213095 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:01.004225016 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.004237890 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.004273891 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:01.004606009 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.004658937 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.004672050 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.004708052 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:01.004760981 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.005269051 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:01.009097099 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.009165049 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.009177923 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.009203911 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:01.012403011 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.012430906 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.012494087 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.012511015 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.012523890 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.012639999 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.023320913 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.023344040 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.023384094 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.023401022 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.023427010 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.023447037 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.034082890 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.034102917 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.034166098 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.034185886 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.034212112 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.034233093 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.046087027 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.046104908 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.046144962 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.046169996 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.046185970 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.046216965 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.046324968 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.056529999 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.056550026 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.056607008 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.056632996 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.056648016 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.056668043 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.060055017 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:01.068201065 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.068228960 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.068270922 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.068298101 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.068310976 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.068340063 CEST	49740	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:01.068361998 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.068370104 CEST	443	49740	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:01.068423033 CEST	49740	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:01.070499897 CEST	49740	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:01.070512056 CEST	443	49740	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:01.072818041 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.074088097 CEST	80	49735	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.074120045 CEST	80	49735	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.074134111 CEST	80	49735	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.074146032 CEST	80	49735	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.074167013 CEST	49735	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:01.074196100 CEST	49735	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:01.078718901 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.078744888 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.078799963 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.078825951 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.078922033 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.087948084 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.087966919 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.088033915 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.088068008 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.088126898 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.094913960 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.095065117 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.095077038 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.095089912 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.095123053 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:01.095154047 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:01.096168041 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.096185923 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.096231937 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.096259117 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.096278906 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.096494913 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.115870953 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.115891933 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.115964890 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.115967989 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.115993977 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.116019011 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.116024017 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.116046906 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.116071939 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.172691107 CEST	80	49737	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.174664021 CEST	80	49739	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.174724102 CEST	80	49739	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.174736023 CEST	80	49739	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.174779892 CEST	49739	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:01.174956083 CEST	80	49739	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.174968958 CEST	80	49739	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.174979925 CEST	80	49739	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.174995899 CEST	49739	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:01.175025940 CEST	49739	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:01.175137043 CEST	80	49739	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.175313950 CEST	80	49739	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.175328016 CEST	80	49739	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.175359011 CEST	49739	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:01.182518959 CEST	80	49738	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.182611942 CEST	80	49738	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.182632923 CEST	80	49738	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.182650089 CEST	80	49738	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.182663918 CEST	80	49738	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.182687044 CEST	49738	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:01.182734013 CEST	49738	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:01.182735920 CEST	80	49738	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.182784081 CEST	49738	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:01.182904959 CEST	80	49738	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.182955980 CEST	80	49738	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.182969093 CEST	80	49738	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.182996035 CEST	49738	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:01.183070898 CEST	80	49738	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.183106899 CEST	49738	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:01.184916973 CEST	49727	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:01.184952021 CEST	443	49727	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:01.187561035 CEST	80	49738	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.187617064 CEST	80	49738	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.187716007 CEST	49738	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:01.220464945 CEST	49739	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:01.220470905 CEST	49737	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:01.271179914 CEST	80	49738	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.271193027 CEST	80	49738	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.271235943 CEST	49738	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:01.271637917 CEST	80	49738	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.271702051 CEST	80	49738	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.271718025 CEST	80	49738	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:01.271764994 CEST	49738	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:01.320838928 CEST	49738	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:01.625078917 CEST	49741	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:01.625111103 CEST	443	49741	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:01.625240088 CEST	49741	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:01.625441074 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:01.625545025 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:01.625715017 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:01.626121044 CEST	49741	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:01.626136065 CEST	443	49741	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:01.626250029 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:01.626283884 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:01.688802004 CEST	443	49740	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:01.689095020 CEST	49740	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:01.689110041 CEST	443	49740	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:01.689497948 CEST	443	49740	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:01.689902067 CEST	49740	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:01.689977884 CEST	443	49740	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:01.690727949 CEST	49740	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:01.736506939 CEST	443	49740	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:01.995491982 CEST	443	49740	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:01.995521069 CEST	443	49740	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:01.995578051 CEST	49740	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:01.995598078 CEST	443	49740	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:01.995628119 CEST	443	49740	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:01.995675087 CEST	49740	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:01.997134924 CEST	49740	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:01.997153044 CEST	443	49740	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:02.001629114 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:02.001669884 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:02.001734018 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:02.001983881 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:02.002000093 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:02.004487991 CEST	49744	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:02.004527092 CEST	443	49744	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:02.004590988 CEST	49744	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:02.004770994 CEST	49744	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:02.004785061 CEST	443	49744	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:02.242149115 CEST	443	49741	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:02.242387056 CEST	49741	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:02.242404938 CEST	443	49741	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:02.243709087 CEST	443	49741	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:02.243765116 CEST	49741	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:02.244277000 CEST	49741	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:02.244277000 CEST	49741	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:02.244290113 CEST	443	49741	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:02.244343042 CEST	443	49741	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:02.264616966 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.281114101 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.281196117 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.282668114 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.282737970 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.287388086 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.287487984 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.287520885 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.295582056 CEST	49741	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:02.295597076 CEST	443	49741	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:02.328541040 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.342600107 CEST	49741	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:02.342609882 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.342669964 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.390598059 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.551182985 CEST	443	49741	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:02.551235914 CEST	443	49741	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:02.551273108 CEST	443	49741	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:02.551284075 CEST	49741	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:02.551305056 CEST	443	49741	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:02.551337004 CEST	49741	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:02.551342964 CEST	443	49741	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:02.551383972 CEST	49741	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:02.553154945 CEST	49741	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:02.553174973 CEST	443	49741	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:02.579981089 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.580019951 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.580030918 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.580049992 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.580060005 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.580064058 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.580077887 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.580131054 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.580162048 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.580188036 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.625916004 CEST	443	49744	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:02.626174927 CEST	49744	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:02.626199961 CEST	443	49744	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:02.627276897 CEST	443	49744	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:02.627340078 CEST	49744	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:02.628117085 CEST	49744	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:02.628185034 CEST	443	49744	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:02.628488064 CEST	49744	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:02.628499985 CEST	443	49744	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:02.641630888 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:02.641871929 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:02.641901016 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:02.642254114 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:02.642621040 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:02.642699957 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:02.642751932 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:02.658232927 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.658267975 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.658314943 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.658317089 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.658344984 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.658355951 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.658369064 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.658376932 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.658416033 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.676306009 CEST	49744	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:02.688512087 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:02.689661026 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.689697027 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.689750910 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.689765930 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.689809084 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.689825058 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.730462074 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.730496883 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.730539083 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.730557919 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.730587959 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.730604887 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.756155014 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.756230116 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.756242037 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.756261110 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.756306887 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.756433964 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.777353048 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.777379990 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.777429104 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.777441025 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.777470112 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.777482986 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.802335024 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.802362919 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.802411079 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.802421093 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.802459955 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.802478075 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.821341991 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.821352959 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.821422100 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.821430922 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.821470022 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.837416887 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.837471962 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.837507010 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.837519884 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.837541103 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.837562084 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.850210905 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.850244045 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.850301981 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.850311041 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.850338936 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.850359917 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.860469103 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.860507011 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.860543013 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.860553026 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.860582113 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.860610962 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.872102022 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.872133017 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.872191906 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.872220039 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.872236013 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.872281075 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.883224964 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.883250952 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.883301020 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.883325100 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.883338928 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.883359909 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.892117023 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.892138958 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.892184973 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.892196894 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.892225027 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.892275095 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.906418085 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.906454086 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.906488895 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.906516075 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.906533957 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.906564951 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.925554037 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.925575018 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.925668955 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.925678968 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.925770044 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.946240902 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.946263075 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.946316004 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.946343899 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.946374893 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.946418047 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.970197916 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.970218897 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.970300913 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.970334053 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.970366001 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.970401049 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.970881939 CEST	443	49744	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:02.974931955 CEST	443	49744	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:02.974994898 CEST	49744	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:02.975028038 CEST	443	49744	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:02.975096941 CEST	49744	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:02.975569963 CEST	49744	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:02.975590944 CEST	443	49744	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:02.989207029 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.989233971 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.989293098 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.989310980 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:02.989342928 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:02.989363909 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.005578041 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.005595922 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.005659103 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.005680084 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.005736113 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.005995035 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:03.006062031 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:03.006103992 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:03.006125927 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:03.006145954 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:03.006185055 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:03.006203890 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:03.020775080 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.020793915 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.020859003 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.020879984 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.020939112 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.035048008 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.035075903 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.035129070 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.035154104 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.035185099 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.035206079 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.049557924 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.049576044 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.049633026 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.049660921 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.049685955 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.049706936 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.073323011 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.073339939 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.073400974 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.073421955 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.073488951 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.087945938 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:03.087996006 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:03.088040113 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:03.088057041 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:03.088084936 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:03.088334084 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:03.097331047 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.097348928 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.097409010 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.097426891 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.097517014 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.097655058 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.097671032 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.097717047 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.097731113 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.097759008 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.097778082 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.098733902 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.098750114 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.098762989 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:03.098798037 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.098807096 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:03.098810911 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.098839045 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.098841906 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:03.098841906 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.098860025 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:03.098895073 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:03.098895073 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.098917961 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.098937035 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.098941088 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:03.098962069 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.099004984 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.099473000 CEST	49742	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.099514961 CEST	443	49742	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.108071089 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:03.108088970 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:03.108155966 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:03.108175039 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:03.108269930 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:03.140805960 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:03.140825033 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:03.140880108 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:03.140906096 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:03.140933990 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:03.140957117 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:03.163927078 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:03.163947105 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:03.164047003 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:03.164112091 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:03.164170027 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:03.183007956 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:03.183053970 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:03.183100939 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:03.183141947 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:03.183185101 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:03.183207989 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:03.183284998 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:03.183346987 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:03.183480978 CEST	49743	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:03.183518887 CEST	443	49743	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:03.191582918 CEST	49745	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.191704988 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.191791058 CEST	49745	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.192086935 CEST	49745	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.192110062 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.217889071 CEST	49746	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:03.217931986 CEST	443	49746	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:03.218010902 CEST	49746	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:03.218225956 CEST	49746	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:03.218240023 CEST	443	49746	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:03.838192940 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.838509083 CEST	49745	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.838531017 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.838902950 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.839397907 CEST	49745	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.839473009 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.839540958 CEST	49745	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.863675117 CEST	443	49746	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:03.864073992 CEST	49746	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:03.864090919 CEST	443	49746	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:03.864458084 CEST	443	49746	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:03.864923000 CEST	49746	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:03.864995956 CEST	443	49746	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:03.865087986 CEST	49746	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:03.880543947 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:03.890469074 CEST	49745	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:03.905857086 CEST	49746	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:03.905899048 CEST	443	49746	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:04.151160955 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.151185989 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.151194096 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.151225090 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.151240110 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.151247025 CEST	49745	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:04.151253939 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.151290894 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.151312113 CEST	49745	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:04.151312113 CEST	49745	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:04.151340961 CEST	49745	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:04.172904015 CEST	443	49746	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:04.172990084 CEST	443	49746	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:04.173044920 CEST	49746	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:04.173405886 CEST	49746	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:04.173427105 CEST	443	49746	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:04.178622961 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:04.179843903 CEST	49747	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:04.179883003 CEST	443	49747	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:04.180206060 CEST	49747	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:04.180511951 CEST	49747	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:04.180524111 CEST	443	49747	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:04.183826923 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:04.237917900 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.237941980 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.238018990 CEST	49745	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:04.238050938 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.238095999 CEST	49745	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:04.263684988 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.263706923 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.263778925 CEST	49745	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:04.263797045 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.263840914 CEST	49745	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:04.277499914 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:04.306483030 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.306510925 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.306583881 CEST	49745	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:04.306593895 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.306648970 CEST	49745	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:04.317234039 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:04.333822966 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.333847046 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.333901882 CEST	49745	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:04.333911896 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.333940983 CEST	49745	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:04.356837034 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.356861115 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.356915951 CEST	49745	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:04.356925011 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.356955051 CEST	49745	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:04.356971025 CEST	49745	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:04.378357887 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.378391981 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.378443003 CEST	49745	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:04.378451109 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.378473043 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.378504038 CEST	49745	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:04.378525972 CEST	49745	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:04.381855011 CEST	49745	443	192.168.2.9	138.199.37.40
Aug 1, 2024 08:39:04.381869078 CEST	443	49745	138.199.37.40	192.168.2.9
Aug 1, 2024 08:39:04.597553968 CEST	80	49711	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:04.597577095 CEST	80	49711	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:04.597934008 CEST	49711	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:04.797574043 CEST	443	49747	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:04.797812939 CEST	49747	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:04.797832966 CEST	443	49747	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:04.798197031 CEST	443	49747	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:04.798597097 CEST	49747	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:04.798661947 CEST	443	49747	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:04.798787117 CEST	49747	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:04.840507030 CEST	443	49747	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:05.105109930 CEST	443	49747	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:05.105207920 CEST	443	49747	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:05.105309010 CEST	49747	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:05.106163979 CEST	49747	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:05.106184959 CEST	443	49747	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:05.285366058 CEST	443	49714	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:05.285430908 CEST	443	49714	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:05.285536051 CEST	49714	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:07.083590031 CEST	49714	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:07.083635092 CEST	443	49714	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:07.131752968 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:07.136822939 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:07.238233089 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:07.238262892 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:07.238275051 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:07.238296032 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:07.238329887 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:07.238358974 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:07.238468885 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:07.238492966 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:07.238507986 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:07.238523006 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:07.238529921 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:07.238554955 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:07.330636024 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:07.378950119 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:07.468075991 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:07.473462105 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:07.556885958 CEST	443	49720	142.250.186.100	192.168.2.9
Aug 1, 2024 08:39:07.557050943 CEST	443	49720	142.250.186.100	192.168.2.9
Aug 1, 2024 08:39:07.557157040 CEST	49720	443	192.168.2.9	142.250.186.100
Aug 1, 2024 08:39:07.587821960 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:07.587855101 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:07.587953091 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:07.599988937 CEST	49720	443	192.168.2.9	142.250.186.100
Aug 1, 2024 08:39:07.600012064 CEST	443	49720	142.250.186.100	192.168.2.9
Aug 1, 2024 08:39:07.600066900 CEST	49717	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:07.605032921 CEST	80	49717	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:07.669647932 CEST	49704	443	192.168.2.9	23.206.229.209
Aug 1, 2024 08:39:07.669765949 CEST	49704	443	192.168.2.9	23.206.229.209
Aug 1, 2024 08:39:07.670357943 CEST	49750	443	192.168.2.9	23.206.229.209
Aug 1, 2024 08:39:07.670402050 CEST	443	49750	23.206.229.209	192.168.2.9
Aug 1, 2024 08:39:07.670521021 CEST	49750	443	192.168.2.9	23.206.229.209
Aug 1, 2024 08:39:07.673386097 CEST	49750	443	192.168.2.9	23.206.229.209
Aug 1, 2024 08:39:07.673397064 CEST	443	49750	23.206.229.209	192.168.2.9
Aug 1, 2024 08:39:07.674747944 CEST	443	49704	23.206.229.209	192.168.2.9
Aug 1, 2024 08:39:07.674777031 CEST	443	49704	23.206.229.209	192.168.2.9
Aug 1, 2024 08:39:07.704369068 CEST	80	49717	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:07.704384089 CEST	80	49717	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:07.704468012 CEST	49717	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:07.861787081 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:07.861876011 CEST	49715	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:07.911890030 CEST	49715	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:07.916757107 CEST	80	49715	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:08.277036905 CEST	443	49750	23.206.229.209	192.168.2.9
Aug 1, 2024 08:39:08.277131081 CEST	49750	443	192.168.2.9	23.206.229.209
Aug 1, 2024 08:39:15.188021898 CEST	443	49726	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:15.188097000 CEST	443	49726	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:15.188160896 CEST	49726	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:16.097193956 CEST	49726	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:16.097223997 CEST	443	49726	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:17.587980032 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:17.590528011 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:17.704318047 CEST	80	49717	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:17.704426050 CEST	49717	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.129858971 CEST	49717	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.130232096 CEST	49712	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.130958080 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.134799957 CEST	80	49717	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.135386944 CEST	80	49712	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.135802984 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.135859966 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.347029924 CEST	49711	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.347095966 CEST	49711	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.347651958 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.352045059 CEST	80	49711	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.352140903 CEST	80	49711	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.352538109 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.634118080 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.634135008 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.634191990 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.655929089 CEST	49752	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:18.655962944 CEST	443	49752	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:18.656028032 CEST	49752	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:18.656282902 CEST	49752	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:18.656296968 CEST	443	49752	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:18.679034948 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.689518929 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.785514116 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.785552025 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.785563946 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.785609961 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.785610914 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.785624981 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.785638094 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.785653114 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.785670996 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.785702944 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.785798073 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.785813093 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.785830975 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.785847902 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.785868883 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.786319017 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.786402941 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.786497116 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.797879934 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.838826895 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.872203112 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.872222900 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.872236967 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.872283936 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.872297049 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.872311115 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.872339964 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.872565985 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.872616053 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.872792959 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.872817039 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.872829914 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.872842073 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.872864008 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.872891903 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.873481989 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.873742104 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.873754025 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.873765945 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.873780966 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.873810053 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.873868942 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.874264002 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.874305010 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.898739100 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.905622959 CEST	49753	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.908116102 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.914577007 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:18.914642096 CEST	49753	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.914895058 CEST	49753	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:18.920732021 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.003660917 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.003720999 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.003735065 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.003933907 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:19.003962040 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.003978014 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.004024982 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.004034996 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:19.004065990 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:19.047801018 CEST	49754	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:19.052762032 CEST	80	49754	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.052826881 CEST	49754	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:19.052959919 CEST	49754	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:19.057867050 CEST	80	49754	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.060883999 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:19.060921907 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:19.061011076 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:19.061235905 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:19.061249971 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:19.296236038 CEST	443	49752	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:19.296602964 CEST	49752	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:19.296627045 CEST	443	49752	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:19.297709942 CEST	443	49752	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:19.298069000 CEST	49752	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:19.298248053 CEST	443	49752	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:19.347503901 CEST	49752	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:19.379707098 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.379731894 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.379744053 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.379811049 CEST	49753	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:19.379864931 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.379877090 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.379889011 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.379900932 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.379926920 CEST	49753	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:19.380098104 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.380110025 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.380122900 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.380137920 CEST	49753	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:19.380156994 CEST	49753	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:19.384968042 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.384989023 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.385040045 CEST	49753	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:19.470237017 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.470254898 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.470268011 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.470330000 CEST	49753	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:19.470493078 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.470506907 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.470519066 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.470537901 CEST	49753	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:19.470573902 CEST	49753	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:19.470773935 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.470787048 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.470798016 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.470813036 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.470849037 CEST	49753	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:19.471398115 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.471509933 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.471522093 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.471565962 CEST	49753	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:19.471590996 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.471604109 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.471626043 CEST	49753	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:19.472398043 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.472455978 CEST	49753	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:19.473176003 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.520423889 CEST	49753	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:19.524765015 CEST	80	49754	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.524789095 CEST	80	49754	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:19.524910927 CEST	49754	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:19.719177961 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:19.719499111 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:19.719513893 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:19.719851017 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:19.720263958 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:19.720329046 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:19.720418930 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:19.760510921 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.001276970 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.001409054 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.001516104 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.001564980 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.001580954 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.001627922 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.001635075 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.007030964 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.007088900 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.007103920 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.008469105 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.008512020 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.008518934 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.013252974 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.013313055 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.013323069 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.019471884 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.019526005 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.019540071 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.064815044 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.091849089 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.092058897 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.092120886 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.092137098 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.096272945 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.096368074 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.096431017 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.096441031 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.096914053 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.102447987 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.113782883 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.113841057 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.113852024 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.118169069 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.118262053 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.118269920 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.121761084 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.121815920 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.121822119 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.127090931 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.127150059 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.127156019 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.133213043 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.133265018 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.133270979 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.138992071 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.139043093 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.139049053 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.144829988 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.144905090 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.144911051 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.150635004 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.150686979 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.150693893 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.150814056 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.150868893 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.150875092 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.182358980 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.182455063 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.182511091 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.182523966 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.182569027 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.182574034 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.182651997 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.182708979 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.182714939 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.183224916 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.183290958 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.183296919 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.196516037 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.196604013 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.196620941 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.201123953 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.201181889 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.201195002 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.209139109 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.209204912 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.209218979 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.209862947 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.209930897 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.209937096 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.210549116 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.210597992 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.210603952 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.216116905 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.216186047 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.216192961 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.220917940 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.220989943 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.220998049 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.226224899 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.226326942 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.226336956 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.231666088 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.231722116 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.231729031 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.236390114 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.236449957 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.236457109 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.242789984 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.242903948 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.242928028 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.250746012 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.250806093 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.250817060 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.255563021 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.255625010 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.255631924 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.255726099 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.255778074 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.255785942 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.256313086 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.256381035 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.256386042 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.260124922 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.260180950 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.260189056 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.263813019 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.263880968 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.263889074 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.267667055 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.267720938 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.267726898 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.270144939 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.270193100 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.270199060 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.273164034 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.273222923 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.273228884 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.274529934 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.274609089 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.274615049 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.277404070 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.277477980 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.277482986 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.279504061 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.279565096 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.279571056 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.287379980 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.287445068 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.287451982 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.287549019 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.287628889 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.287678003 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.287683964 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.287719965 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.291584969 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.291738987 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.291790962 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.291805029 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.294258118 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.294338942 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.294343948 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.294471025 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.294523954 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.294528961 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.295593977 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.295689106 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.295689106 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.295717001 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.295778036 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.297930956 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.304635048 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.304688931 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.304696083 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.309000969 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.309068918 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.309076071 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.310681105 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.310734987 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.310740948 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.310904980 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.310956001 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.310960054 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.313007116 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.313062906 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.313069105 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.314399004 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.314483881 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.314488888 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.317071915 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.317127943 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.317133904 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.317261934 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.317310095 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.317315102 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.321962118 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.322020054 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.322026014 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.322144985 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.322223902 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.322241068 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.322248936 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.322428942 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.327261925 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.327505112 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.327558994 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.327564955 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.333317041 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.333380938 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.333396912 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.333565950 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.333621025 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.333626986 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.341192007 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.341248035 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.341253996 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.341375113 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.341418982 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.341424942 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.346455097 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.346504927 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.346512079 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.346668005 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.346762896 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.346784115 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.346790075 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.346882105 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.346899986 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.347064972 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.347120047 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.347126007 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.349678993 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.349740028 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.349745035 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.349956989 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.349966049 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.350030899 CEST	443	49755	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:20.350086927 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.350125074 CEST	49755	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:20.363127947 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:20.363219023 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:20.363302946 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:20.363495111 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:20.363533020 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:20.398416042 CEST	49758	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:20.398457050 CEST	443	49758	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:20.398853064 CEST	49758	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:20.399091005 CEST	49758	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:20.399104118 CEST	443	49758	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:21.002031088 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.002326965 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.002391100 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.004445076 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.004520893 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.004858971 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.004940987 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.005044937 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.005064011 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.031900883 CEST	443	49758	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:21.032258034 CEST	49758	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:21.032279015 CEST	443	49758	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:21.033364058 CEST	443	49758	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:21.033473015 CEST	49758	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:21.033780098 CEST	49758	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:21.033860922 CEST	443	49758	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:21.034086943 CEST	49758	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:21.034095049 CEST	443	49758	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:21.046303034 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.076709986 CEST	49758	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:21.168261051 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:21.173185110 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:21.173214912 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:21.173224926 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:21.288325071 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.288366079 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.288448095 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.288476944 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.288564920 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.288786888 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.288834095 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.288856030 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.288913965 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.294239998 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.294291973 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.294385910 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.294399977 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.300712109 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.302539110 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.302553892 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.306994915 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.307236910 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.307252884 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.348351002 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.375205994 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.379700899 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.379734039 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.379786015 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.379806042 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.379858971 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.383969069 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.388331890 CEST	443	49758	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:21.388391018 CEST	443	49758	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:21.388426065 CEST	443	49758	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:21.388458967 CEST	443	49758	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:21.388497114 CEST	443	49758	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:21.388504028 CEST	49758	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:21.388525963 CEST	443	49758	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:21.388539076 CEST	49758	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:21.388927937 CEST	49758	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:21.390702009 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.390775919 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.390829086 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.390846968 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.390896082 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.412647963 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.412756920 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.412798882 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.412801027 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.412826061 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.412885904 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.412955999 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.413036108 CEST	443	49758	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:21.413147926 CEST	443	49758	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:21.413207054 CEST	49758	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:21.413217068 CEST	443	49758	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:21.413309097 CEST	443	49758	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:21.413336992 CEST	443	49758	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:21.413377047 CEST	49758	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:21.413386106 CEST	443	49758	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:21.413455963 CEST	49758	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:21.413463116 CEST	443	49758	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:21.413707018 CEST	49758	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:21.413748980 CEST	443	49758	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:21.413826942 CEST	49758	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:21.415637970 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.415679932 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.415693045 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.415720940 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.415772915 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.422261953 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.427894115 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.427930117 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.427987099 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.428003073 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.428054094 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.432940960 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.438951015 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.438991070 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.439043999 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.439084053 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.439101934 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.439146996 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.439519882 CEST	49760	443	192.168.2.9	216.58.206.33
Aug 1, 2024 08:39:21.439563990 CEST	443	49760	216.58.206.33	192.168.2.9
Aug 1, 2024 08:39:21.439757109 CEST	49760	443	192.168.2.9	216.58.206.33
Aug 1, 2024 08:39:21.439824104 CEST	49761	443	192.168.2.9	216.58.206.33
Aug 1, 2024 08:39:21.439862967 CEST	443	49761	216.58.206.33	192.168.2.9
Aug 1, 2024 08:39:21.439943075 CEST	49761	443	192.168.2.9	216.58.206.33
Aug 1, 2024 08:39:21.440246105 CEST	49760	443	192.168.2.9	216.58.206.33
Aug 1, 2024 08:39:21.440265894 CEST	443	49760	216.58.206.33	192.168.2.9
Aug 1, 2024 08:39:21.440411091 CEST	49761	443	192.168.2.9	216.58.206.33
Aug 1, 2024 08:39:21.440439939 CEST	443	49761	216.58.206.33	192.168.2.9
Aug 1, 2024 08:39:21.462256908 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.462323904 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.462342978 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.462361097 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.462413073 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.462419987 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.468007088 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.468060017 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.468069077 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.470518112 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.470587015 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.470602036 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.476486921 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.476579905 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.476596117 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.482194901 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.482251883 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.482266903 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.489655972 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.489751101 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.489767075 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.495477915 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.495547056 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.495563984 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.499313116 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.499393940 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.499408960 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.504251957 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.504316092 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.504336119 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.514261961 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.514323950 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.514355898 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.515065908 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.515182018 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.515201092 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.519706964 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.519773006 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.519789934 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.524943113 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.525007010 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.525028944 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.528857946 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.529083967 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.529100895 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.532946110 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.533169985 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.533186913 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.537182093 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.537235975 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.537251949 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.541177988 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.541249037 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.541265965 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.545025110 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.546504021 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.546519041 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.548732996 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.549725056 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.549741030 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.552797079 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.552855015 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.552870035 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.556442976 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.556516886 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.556535006 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.559372902 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.559395075 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.559416056 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.559432983 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.559482098 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.561417103 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.564222097 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.564249992 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.564277887 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.564295053 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.564347029 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.565841913 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.568131924 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.568156004 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.568187952 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.568202972 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.568247080 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.570532084 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.572912931 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.572938919 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.572968960 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.572984934 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.573038101 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.575274944 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.577532053 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.577598095 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.577604055 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.577615976 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.577660084 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.579777002 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.582346916 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.582395077 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.582417011 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.582437992 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.582504988 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.585150957 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.586807013 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.586844921 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.586873055 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.586889029 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.586946964 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.590040922 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.594077110 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.594130039 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.594147921 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.597069979 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.597096920 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.597150087 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.597182035 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.597233057 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.599111080 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.600404978 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.600446939 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.600497961 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.600513935 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.600563049 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.601211071 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.603152037 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.603198051 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.603213072 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.605827093 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.605853081 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.605902910 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.605920076 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.606023073 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.607646942 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.610866070 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.610919952 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.610923052 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.610945940 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.611120939 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.612603903 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.614501953 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.614531040 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.614578962 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.614597082 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.614658117 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.616645098 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.619069099 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.619101048 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.619134903 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.619152069 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.619252920 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.621073008 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.623749971 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.623779058 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.623817921 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.623833895 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.623894930 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.625452042 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.627398968 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.627433062 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.627464056 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.627480030 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.627837896 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.629761934 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.631692886 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.631795883 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.631865025 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.631880999 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.631901979 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:21.631931067 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.631961107 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.632057905 CEST	49756	443	192.168.2.9	142.250.185.100
Aug 1, 2024 08:39:21.632110119 CEST	443	49756	142.250.185.100	192.168.2.9
Aug 1, 2024 08:39:22.170105934 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.170191050 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.170239925 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:22.170399904 CEST	443	49761	216.58.206.33	192.168.2.9
Aug 1, 2024 08:39:22.170463085 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.170517921 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.170531988 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.170579910 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:22.170607090 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.170694113 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:22.170811892 CEST	49761	443	192.168.2.9	216.58.206.33
Aug 1, 2024 08:39:22.170845032 CEST	443	49761	216.58.206.33	192.168.2.9
Aug 1, 2024 08:39:22.171109915 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.171158075 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.171169996 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.171209097 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:22.171252012 CEST	443	49761	216.58.206.33	192.168.2.9
Aug 1, 2024 08:39:22.171271086 CEST	443	49761	216.58.206.33	192.168.2.9
Aug 1, 2024 08:39:22.171305895 CEST	49761	443	192.168.2.9	216.58.206.33
Aug 1, 2024 08:39:22.171307087 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.171315908 CEST	443	49761	216.58.206.33	192.168.2.9
Aug 1, 2024 08:39:22.171319008 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.171334982 CEST	49761	443	192.168.2.9	216.58.206.33
Aug 1, 2024 08:39:22.171360970 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:22.171430111 CEST	49761	443	192.168.2.9	216.58.206.33
Aug 1, 2024 08:39:22.171823978 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.171873093 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:22.171984911 CEST	443	49761	216.58.206.33	192.168.2.9
Aug 1, 2024 08:39:22.177642107 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.177678108 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.177840948 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:22.185520887 CEST	443	49760	216.58.206.33	192.168.2.9
Aug 1, 2024 08:39:22.192255020 CEST	49760	443	192.168.2.9	216.58.206.33
Aug 1, 2024 08:39:22.192271948 CEST	443	49760	216.58.206.33	192.168.2.9
Aug 1, 2024 08:39:22.192677021 CEST	443	49760	216.58.206.33	192.168.2.9
Aug 1, 2024 08:39:22.192694902 CEST	443	49760	216.58.206.33	192.168.2.9
Aug 1, 2024 08:39:22.192744970 CEST	49760	443	192.168.2.9	216.58.206.33
Aug 1, 2024 08:39:22.192764044 CEST	443	49760	216.58.206.33	192.168.2.9
Aug 1, 2024 08:39:22.192796946 CEST	49760	443	192.168.2.9	216.58.206.33
Aug 1, 2024 08:39:22.192893028 CEST	49760	443	192.168.2.9	216.58.206.33
Aug 1, 2024 08:39:22.193391085 CEST	443	49760	216.58.206.33	192.168.2.9
Aug 1, 2024 08:39:22.194683075 CEST	49761	443	192.168.2.9	216.58.206.33
Aug 1, 2024 08:39:22.194900036 CEST	443	49761	216.58.206.33	192.168.2.9
Aug 1, 2024 08:39:22.195255041 CEST	49760	443	192.168.2.9	216.58.206.33
Aug 1, 2024 08:39:22.195328951 CEST	443	49760	216.58.206.33	192.168.2.9
Aug 1, 2024 08:39:22.195730925 CEST	49761	443	192.168.2.9	216.58.206.33
Aug 1, 2024 08:39:22.195740938 CEST	443	49761	216.58.206.33	192.168.2.9
Aug 1, 2024 08:39:22.196129084 CEST	49760	443	192.168.2.9	216.58.206.33
Aug 1, 2024 08:39:22.196135998 CEST	443	49760	216.58.206.33	192.168.2.9
Aug 1, 2024 08:39:22.229068041 CEST	49762	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:22.229131937 CEST	443	49762	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:22.229214907 CEST	49762	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:22.229516983 CEST	49762	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:22.229547977 CEST	443	49762	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:22.230225086 CEST	49763	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:22.230273008 CEST	443	49763	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:22.230504990 CEST	49763	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:22.230725050 CEST	49763	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:22.230741024 CEST	443	49763	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:22.236711025 CEST	49761	443	192.168.2.9	216.58.206.33
Aug 1, 2024 08:39:22.236713886 CEST	49760	443	192.168.2.9	216.58.206.33
Aug 1, 2024 08:39:22.238087893 CEST	49764	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:22.238104105 CEST	443	49764	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:22.238202095 CEST	49764	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:22.238502979 CEST	49764	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:22.238518000 CEST	443	49764	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:22.258866072 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.258893013 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.258904934 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.258974075 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:22.259013891 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.259027958 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.259052038 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:22.259430885 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.259502888 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.259516954 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.259524107 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:22.259556055 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:22.259594917 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.259690046 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.259744883 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:22.260102034 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.260164976 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.260176897 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.260238886 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:22.260270119 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.260287046 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.260324955 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:22.264163971 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.264220953 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:22.264223099 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.264239073 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.264266968 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.264302969 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.264307976 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:22.264321089 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.264332056 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:22.264348984 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:22.264386892 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:22.299166918 CEST	49732	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:22.304173946 CEST	80	49732	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.411317110 CEST	80	49732	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.414940119 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:22.421005964 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.456857920 CEST	49732	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:22.466047049 CEST	443	49761	216.58.206.33	192.168.2.9
Aug 1, 2024 08:39:22.466137886 CEST	443	49761	216.58.206.33	192.168.2.9
Aug 1, 2024 08:39:22.466296911 CEST	49761	443	192.168.2.9	216.58.206.33
Aug 1, 2024 08:39:22.468379974 CEST	49761	443	192.168.2.9	216.58.206.33
Aug 1, 2024 08:39:22.468452930 CEST	443	49761	216.58.206.33	192.168.2.9
Aug 1, 2024 08:39:22.473301888 CEST	443	49760	216.58.206.33	192.168.2.9
Aug 1, 2024 08:39:22.473426104 CEST	443	49760	216.58.206.33	192.168.2.9
Aug 1, 2024 08:39:22.473505974 CEST	49760	443	192.168.2.9	216.58.206.33
Aug 1, 2024 08:39:22.477555037 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:22.477655888 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:22.477766037 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:22.478523016 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:22.478553057 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:22.479048014 CEST	49760	443	192.168.2.9	216.58.206.33
Aug 1, 2024 08:39:22.479063034 CEST	443	49760	216.58.206.33	192.168.2.9
Aug 1, 2024 08:39:22.507778883 CEST	49739	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:22.516071081 CEST	80	49739	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.521610975 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.521673918 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.521688938 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.521821022 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.521835089 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.521843910 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:22.521847010 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.521862030 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.521884918 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:22.521884918 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:22.522022009 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.522032976 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.522047043 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.522075891 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:22.522119999 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:22.522253036 CEST	49766	443	192.168.2.9	142.250.185.193
Aug 1, 2024 08:39:22.522298098 CEST	443	49766	142.250.185.193	192.168.2.9
Aug 1, 2024 08:39:22.522422075 CEST	49766	443	192.168.2.9	142.250.185.193
Aug 1, 2024 08:39:22.522592068 CEST	49767	443	192.168.2.9	142.250.185.193
Aug 1, 2024 08:39:22.522686958 CEST	443	49767	142.250.185.193	192.168.2.9
Aug 1, 2024 08:39:22.522829056 CEST	49767	443	192.168.2.9	142.250.185.193
Aug 1, 2024 08:39:22.522842884 CEST	49766	443	192.168.2.9	142.250.185.193
Aug 1, 2024 08:39:22.522876024 CEST	443	49766	142.250.185.193	192.168.2.9
Aug 1, 2024 08:39:22.523245096 CEST	49767	443	192.168.2.9	142.250.185.193
Aug 1, 2024 08:39:22.523282051 CEST	443	49767	142.250.185.193	192.168.2.9
Aug 1, 2024 08:39:22.527750969 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.527825117 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.527837038 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.527880907 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:22.527975082 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.527987003 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.528001070 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.528067112 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:22.528067112 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:22.528105974 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.528117895 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.528167963 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:22.528280020 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.528291941 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.528305054 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.528318882 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.528331041 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.528343916 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.528366089 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:22.528366089 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:22.528420925 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:22.528548956 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.528559923 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.528595924 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:22.611509085 CEST	80	49739	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.611654043 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.612586021 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.612597942 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:22.612715960 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:22.655893087 CEST	49739	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:22.909163952 CEST	443	49762	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:22.912323952 CEST	49762	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:22.912338018 CEST	443	49762	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:22.912859917 CEST	443	49762	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:22.913428068 CEST	49762	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:22.913516998 CEST	443	49762	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:22.918512106 CEST	443	49764	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:22.930314064 CEST	49764	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:22.930322886 CEST	443	49764	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:22.930957079 CEST	443	49764	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:22.931395054 CEST	49764	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:22.931513071 CEST	443	49764	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:22.931730032 CEST	49764	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:22.931762934 CEST	443	49764	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:22.937959909 CEST	443	49763	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:22.938206911 CEST	49763	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:22.938218117 CEST	443	49763	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:22.939325094 CEST	443	49763	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:22.939713001 CEST	49763	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:22.939888954 CEST	443	49763	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:22.956459999 CEST	49762	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:22.988434076 CEST	49763	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:23.124790907 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.125106096 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.125190973 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.126661062 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.126740932 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.127060890 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.127162933 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.127193928 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.129244089 CEST	443	49764	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:23.129267931 CEST	443	49764	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:23.129314899 CEST	443	49764	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:23.129340887 CEST	443	49764	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:23.129340887 CEST	49764	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:23.129352093 CEST	443	49764	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:23.129440069 CEST	49764	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:23.129450083 CEST	443	49764	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:23.129467010 CEST	443	49764	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:23.129508018 CEST	49764	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:23.129542112 CEST	49764	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:23.130215883 CEST	49764	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:23.130234957 CEST	443	49764	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:23.139332056 CEST	49768	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:23.139360905 CEST	443	49768	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:23.139861107 CEST	49768	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:23.139955044 CEST	49768	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:23.139962912 CEST	443	49768	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:23.172507048 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.175295115 CEST	49769	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:23.175381899 CEST	443	49769	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:23.175463915 CEST	49769	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:23.175776005 CEST	49769	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:23.175815105 CEST	443	49769	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:23.180438042 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.180469990 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.227443933 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.256078959 CEST	443	49767	142.250.185.193	192.168.2.9
Aug 1, 2024 08:39:23.256108999 CEST	443	49766	142.250.185.193	192.168.2.9
Aug 1, 2024 08:39:23.256602049 CEST	49766	443	192.168.2.9	142.250.185.193
Aug 1, 2024 08:39:23.256618023 CEST	443	49766	142.250.185.193	192.168.2.9
Aug 1, 2024 08:39:23.256686926 CEST	49767	443	192.168.2.9	142.250.185.193
Aug 1, 2024 08:39:23.256721020 CEST	443	49767	142.250.185.193	192.168.2.9
Aug 1, 2024 08:39:23.256997108 CEST	443	49766	142.250.185.193	192.168.2.9
Aug 1, 2024 08:39:23.257010937 CEST	443	49766	142.250.185.193	192.168.2.9
Aug 1, 2024 08:39:23.257074118 CEST	49766	443	192.168.2.9	142.250.185.193
Aug 1, 2024 08:39:23.257078886 CEST	443	49766	142.250.185.193	192.168.2.9
Aug 1, 2024 08:39:23.257150888 CEST	443	49767	142.250.185.193	192.168.2.9
Aug 1, 2024 08:39:23.257164955 CEST	443	49767	142.250.185.193	192.168.2.9
Aug 1, 2024 08:39:23.257222891 CEST	49767	443	192.168.2.9	142.250.185.193
Aug 1, 2024 08:39:23.257251024 CEST	443	49767	142.250.185.193	192.168.2.9
Aug 1, 2024 08:39:23.257297039 CEST	49766	443	192.168.2.9	142.250.185.193
Aug 1, 2024 08:39:23.257303953 CEST	49767	443	192.168.2.9	142.250.185.193
Aug 1, 2024 08:39:23.257761002 CEST	443	49766	142.250.185.193	192.168.2.9
Aug 1, 2024 08:39:23.257900000 CEST	443	49767	142.250.185.193	192.168.2.9
Aug 1, 2024 08:39:23.258049965 CEST	49767	443	192.168.2.9	142.250.185.193
Aug 1, 2024 08:39:23.258138895 CEST	443	49767	142.250.185.193	192.168.2.9
Aug 1, 2024 08:39:23.258234024 CEST	49767	443	192.168.2.9	142.250.185.193
Aug 1, 2024 08:39:23.258249044 CEST	443	49767	142.250.185.193	192.168.2.9
Aug 1, 2024 08:39:23.258435965 CEST	49766	443	192.168.2.9	142.250.185.193
Aug 1, 2024 08:39:23.258502007 CEST	443	49766	142.250.185.193	192.168.2.9
Aug 1, 2024 08:39:23.258714914 CEST	49766	443	192.168.2.9	142.250.185.193
Aug 1, 2024 08:39:23.258730888 CEST	443	49766	142.250.185.193	192.168.2.9
Aug 1, 2024 08:39:23.307437897 CEST	49767	443	192.168.2.9	142.250.185.193
Aug 1, 2024 08:39:23.307737112 CEST	49766	443	192.168.2.9	142.250.185.193
Aug 1, 2024 08:39:23.411040068 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.411109924 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.411148071 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.411183119 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.411190033 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.411217928 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.411247969 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.412046909 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.412111044 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.412127018 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.412170887 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.412255049 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.412267923 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.418622017 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.418701887 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.418715954 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.424904108 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.424964905 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.424978018 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.464442968 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.504266977 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.504791975 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.504863024 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.504875898 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.504895926 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.504940987 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.507181883 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.508833885 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.508928061 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.508930922 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.508960009 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.509010077 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.514746904 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.521106005 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.521182060 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.521248102 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.521265984 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.522491932 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.527584076 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.527818918 CEST	443	49766	142.250.185.193	192.168.2.9
Aug 1, 2024 08:39:23.527893066 CEST	443	49766	142.250.185.193	192.168.2.9
Aug 1, 2024 08:39:23.530502081 CEST	49766	443	192.168.2.9	142.250.185.193
Aug 1, 2024 08:39:23.542171001 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.542279959 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.542354107 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.542422056 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.542442083 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.542460918 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.543507099 CEST	443	49767	142.250.185.193	192.168.2.9
Aug 1, 2024 08:39:23.543574095 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.545260906 CEST	443	49767	142.250.185.193	192.168.2.9
Aug 1, 2024 08:39:23.546242952 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.546315908 CEST	49767	443	192.168.2.9	142.250.185.193
Aug 1, 2024 08:39:23.552635908 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.552948952 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.553037882 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.553052902 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.554500103 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.560672998 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.560805082 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.562508106 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.562529087 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.592818975 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.594188929 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.594198942 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.594214916 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.594296932 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.594341993 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.594479084 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.594546080 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.594619036 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.594633102 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.594794035 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.594846010 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.594858885 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.594916105 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.595442057 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.600539923 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.600681067 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.600694895 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.606060982 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.606501102 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.606514931 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.618757010 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.622508049 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.622528076 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.624147892 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.624237061 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.624249935 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.624459982 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.624515057 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.624526978 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.627603054 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.630533934 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.630548954 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.633363962 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.633443117 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.633456945 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.638628006 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.642525911 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.642539978 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.675744057 CEST	49767	443	192.168.2.9	142.250.185.193
Aug 1, 2024 08:39:23.675790071 CEST	443	49767	142.250.185.193	192.168.2.9
Aug 1, 2024 08:39:23.677093029 CEST	49766	443	192.168.2.9	142.250.185.193
Aug 1, 2024 08:39:23.677117109 CEST	443	49766	142.250.185.193	192.168.2.9
Aug 1, 2024 08:39:23.686888933 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.686918020 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.686953068 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.686963081 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.686970949 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.687025070 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.687197924 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.687251091 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.687299013 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.687314987 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.687572002 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.689892054 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.689961910 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.690037012 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.690052032 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.690150976 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.690176010 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.690205097 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.690236092 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.690282106 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.690294027 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.690501928 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.690522909 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.690541029 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.690550089 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.690563917 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.690583944 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.690859079 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.690924883 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.690937042 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.704794884 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.704840899 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.704864025 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.704905033 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.704922915 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.704953909 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.704956055 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.704981089 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.705002069 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.705014944 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.705082893 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.706825018 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.706882954 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.706913948 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.706940889 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.706954956 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.707024097 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.708252907 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.708298922 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.708323956 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.708364010 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.708378077 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.708421946 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.708436966 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.708451033 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.708498955 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.708703041 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.708756924 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.708813906 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.708827972 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.709007978 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.709598064 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.709702015 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.709804058 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.709815979 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.712014914 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.712099075 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.712105989 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.712120056 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.712555885 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.712568045 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.714226961 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.714327097 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.714340925 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.716526031 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.716594934 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.716625929 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.716640949 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.716689110 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.718956947 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.721075058 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.721152067 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.721167088 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.721189976 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.721292973 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.723612070 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.725862980 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.725950003 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.725950956 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.725965023 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.726022005 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.728079081 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.730344057 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.730413914 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.730427980 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.730442047 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.730489016 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.765853882 CEST	443	49768	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:23.766144991 CEST	49768	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:23.766159058 CEST	443	49768	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:23.766519070 CEST	443	49768	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:23.766860962 CEST	49768	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:23.766926050 CEST	443	49768	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:23.767237902 CEST	49768	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:23.767285109 CEST	443	49768	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:23.774760962 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.774940014 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.775006056 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.775016069 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.775029898 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.775065899 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.775105953 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.775264978 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.775309086 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.775317907 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.775402069 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.775475025 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.775520086 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.775526047 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.775576115 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.775580883 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.776036024 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.776122093 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.776129007 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.776135921 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.776191950 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.776196957 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.776952982 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.777026892 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.777082920 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.777089119 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.777211905 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.777242899 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.777249098 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.777293921 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.777299881 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.777416945 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.777498960 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.777554989 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.777578115 CEST	443	49765	142.250.184.238	192.168.2.9
Aug 1, 2024 08:39:23.777584076 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.777616978 CEST	49765	443	192.168.2.9	142.250.184.238
Aug 1, 2024 08:39:23.797018051 CEST	443	49769	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:23.797477961 CEST	49769	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:23.797507048 CEST	443	49769	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:23.797965050 CEST	443	49769	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:23.798641920 CEST	49769	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:23.798749924 CEST	443	49769	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:23.798806906 CEST	49769	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:23.840506077 CEST	443	49769	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:23.847433090 CEST	49769	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:23.885979891 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:23.901726961 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:23.901741028 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:23.901750088 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:23.902445078 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:23.902510881 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:23.902523994 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:23.937200069 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:23.937331915 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:23.942295074 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:23.942306042 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:23.942317009 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:24.036721945 CEST	443	49768	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:24.036745071 CEST	443	49768	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:24.036808014 CEST	49768	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:24.036823034 CEST	443	49768	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:24.036844969 CEST	443	49768	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:24.038054943 CEST	49768	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:24.038054943 CEST	49768	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:24.038064003 CEST	443	49768	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:24.038899899 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:24.069330931 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:24.069379091 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:24.069453001 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:24.069806099 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:24.069820881 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:24.080049038 CEST	49754	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:24.085011959 CEST	80	49754	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:24.086869001 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:24.105397940 CEST	443	49769	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:24.105479002 CEST	443	49769	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:24.105551004 CEST	49769	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:24.107765913 CEST	49769	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:24.107804060 CEST	443	49769	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:24.182463884 CEST	80	49754	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:24.182507992 CEST	80	49754	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:24.182584047 CEST	49754	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:24.207256079 CEST	49771	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:24.207298994 CEST	443	49771	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:24.207425117 CEST	49771	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:24.208755016 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:24.208786964 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:24.208870888 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:24.210733891 CEST	49771	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:24.210747957 CEST	443	49771	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:24.230670929 CEST	49772	443	192.168.2.9	212.82.100.137
Aug 1, 2024 08:39:24.230724096 CEST	443	49772	212.82.100.137	192.168.2.9
Aug 1, 2024 08:39:24.230797052 CEST	49772	443	192.168.2.9	212.82.100.137
Aug 1, 2024 08:39:24.230998039 CEST	49772	443	192.168.2.9	212.82.100.137
Aug 1, 2024 08:39:24.231009007 CEST	443	49772	212.82.100.137	192.168.2.9
Aug 1, 2024 08:39:24.719916105 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:24.722271919 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:24.722285986 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:24.726035118 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:24.726145029 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:24.726938009 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:24.727021933 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:24.727399111 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:24.727406979 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:24.768773079 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:24.845325947 CEST	443	49771	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:24.845626116 CEST	49771	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:24.845640898 CEST	443	49771	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:24.845987082 CEST	443	49771	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:24.846823931 CEST	49771	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:24.846882105 CEST	443	49771	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:24.847564936 CEST	49771	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:24.888557911 CEST	443	49771	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:25.000854969 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.000987053 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.001034021 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.001053095 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.001174927 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.001230001 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.001238108 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.006931067 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.006984949 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.006994009 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.007826090 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.007875919 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.007884979 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.014775991 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.014823914 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.014834881 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.016123056 CEST	443	49772	212.82.100.137	192.168.2.9
Aug 1, 2024 08:39:25.016860008 CEST	49772	443	192.168.2.9	212.82.100.137
Aug 1, 2024 08:39:25.016871929 CEST	443	49772	212.82.100.137	192.168.2.9
Aug 1, 2024 08:39:25.017273903 CEST	443	49772	212.82.100.137	192.168.2.9
Aug 1, 2024 08:39:25.017323017 CEST	49772	443	192.168.2.9	212.82.100.137
Aug 1, 2024 08:39:25.018059969 CEST	443	49772	212.82.100.137	192.168.2.9
Aug 1, 2024 08:39:25.018104076 CEST	49772	443	192.168.2.9	212.82.100.137
Aug 1, 2024 08:39:25.018908978 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.018955946 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.018964052 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.020889997 CEST	49772	443	192.168.2.9	212.82.100.137
Aug 1, 2024 08:39:25.020967960 CEST	443	49772	212.82.100.137	192.168.2.9
Aug 1, 2024 08:39:25.021125078 CEST	49772	443	192.168.2.9	212.82.100.137
Aug 1, 2024 08:39:25.021131992 CEST	443	49772	212.82.100.137	192.168.2.9
Aug 1, 2024 08:39:25.058947086 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.063682079 CEST	49772	443	192.168.2.9	212.82.100.137
Aug 1, 2024 08:39:25.087042093 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.089591980 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.089643002 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.089654922 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.095745087 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.095796108 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.095803976 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.102031946 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.102083921 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.102099895 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.152817965 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.152832031 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.194081068 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.327456951 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.327686071 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.327735901 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.327750921 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.327833891 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.327924013 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.327933073 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.327955008 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.328015089 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.328043938 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.328210115 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.328260899 CEST	443	49771	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:25.328268051 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.328293085 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.328314066 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.328336000 CEST	443	49771	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:25.328366995 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.328391075 CEST	49771	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:25.328478098 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.328711033 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.328752041 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.328762054 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.328860998 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.328919888 CEST	443	49772	212.82.100.137	192.168.2.9
Aug 1, 2024 08:39:25.328933954 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.328947067 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.328958988 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.328963995 CEST	49772	443	192.168.2.9	212.82.100.137
Aug 1, 2024 08:39:25.328969002 CEST	443	49772	212.82.100.137	192.168.2.9
Aug 1, 2024 08:39:25.328999043 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.329046965 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.329056025 CEST	443	49772	212.82.100.137	192.168.2.9
Aug 1, 2024 08:39:25.329108000 CEST	49772	443	192.168.2.9	212.82.100.137
Aug 1, 2024 08:39:25.329183102 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.329224110 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.329237938 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.329305887 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.329353094 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.329360962 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.329756975 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.329804897 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.329813957 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.333283901 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.333333969 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.333342075 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.333437920 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.333482027 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.333488941 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.333973885 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.334023952 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.334031105 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.334331036 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.334381104 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.334388018 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.334494114 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.334542036 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.334549904 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.336524963 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.336582899 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.336591005 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.336672068 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.336729050 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.336735964 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.337410927 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.337460995 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.337472916 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.337568045 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.337619066 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.337629080 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.337740898 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.337788105 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.337795019 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.337882996 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.337928057 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.337937117 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.338442087 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.338486910 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.338494062 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.338608980 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.338655949 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.338664055 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.339219093 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.339265108 CEST	49771	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:25.339284897 CEST	443	49771	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:25.339320898 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.339328051 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.339596033 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.339648962 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.339656115 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.339997053 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.340044022 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.340053082 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.340641022 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.340687037 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.340696096 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.340903044 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.340946913 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.340954065 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.341064930 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.341111898 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.341120005 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.341700077 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.341744900 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.341752052 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.341974020 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.342021942 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.342030048 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.342375040 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.342421055 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.342427969 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.342797995 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.342850924 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.342858076 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.343358994 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.343406916 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.343415022 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.343708038 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.343754053 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.343760967 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.344153881 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.344197035 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.344204903 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.344620943 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.344676971 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.344683886 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.345057011 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.345112085 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.345119953 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.345217943 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.345268011 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.345276117 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.345516920 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.345570087 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.345577955 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.345664024 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.345709085 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.345724106 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.345976114 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.346024036 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.346031904 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.346127987 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.346173048 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.346179962 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.346281052 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.346329927 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.346338987 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.346436977 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.346487045 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.346493959 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.346688032 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.346735954 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.346744061 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.346839905 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.346884012 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.346892118 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.347052097 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.347105980 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.347112894 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.347204924 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.347249985 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.347263098 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.347357988 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.347404003 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.347412109 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.347511053 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.347543955 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.347551107 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.347560883 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.347656012 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.347703934 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.347712040 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.347805977 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.347851992 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.347858906 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.347960949 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.347979069 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.348020077 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.348026037 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.348165035 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.348208904 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.348217964 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.348315954 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.348359108 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.348366022 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.348464966 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.348511934 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.348519087 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.348539114 CEST	49772	443	192.168.2.9	212.82.100.137
Aug 1, 2024 08:39:25.348555088 CEST	443	49772	212.82.100.137	192.168.2.9
Aug 1, 2024 08:39:25.348644972 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.348687887 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.348695040 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.348786116 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.348886967 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.348895073 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.349140882 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.349185944 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.349193096 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.349292994 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.349302053 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.349342108 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.349349022 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.349445105 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.349489927 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.349497080 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.349641085 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.349689007 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.349695921 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.349834919 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:25.349886894 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.352026939 CEST	49770	443	192.168.2.9	142.250.185.206
Aug 1, 2024 08:39:25.352032900 CEST	443	49770	142.250.185.206	192.168.2.9
Aug 1, 2024 08:39:26.022892952 CEST	49719	443	192.168.2.9	142.250.185.174
Aug 1, 2024 08:39:26.068504095 CEST	443	49719	142.250.185.174	192.168.2.9
Aug 1, 2024 08:39:26.219867945 CEST	443	49719	142.250.185.174	192.168.2.9
Aug 1, 2024 08:39:26.220525026 CEST	443	49719	142.250.185.174	192.168.2.9
Aug 1, 2024 08:39:26.220598936 CEST	49719	443	192.168.2.9	142.250.185.174
Aug 1, 2024 08:39:26.220673084 CEST	49719	443	192.168.2.9	142.250.185.174
Aug 1, 2024 08:39:26.220673084 CEST	49719	443	192.168.2.9	142.250.185.174
Aug 1, 2024 08:39:26.220710039 CEST	443	49719	142.250.185.174	192.168.2.9
Aug 1, 2024 08:39:26.220839977 CEST	49719	443	192.168.2.9	142.250.185.174
Aug 1, 2024 08:39:26.916011095 CEST	49776	443	192.168.2.9	142.250.185.174
Aug 1, 2024 08:39:26.916055918 CEST	443	49776	142.250.185.174	192.168.2.9
Aug 1, 2024 08:39:26.916405916 CEST	49776	443	192.168.2.9	142.250.185.174
Aug 1, 2024 08:39:26.916657925 CEST	49776	443	192.168.2.9	142.250.185.174
Aug 1, 2024 08:39:26.916671991 CEST	443	49776	142.250.185.174	192.168.2.9
Aug 1, 2024 08:39:26.979391098 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:26.984455109 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:26.984476089 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:26.985069990 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:26.985126972 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:27.190440893 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:27.237339973 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:27.430597067 CEST	443	49750	23.206.229.209	192.168.2.9
Aug 1, 2024 08:39:27.430660963 CEST	49750	443	192.168.2.9	23.206.229.209
Aug 1, 2024 08:39:27.562118053 CEST	443	49776	142.250.185.174	192.168.2.9
Aug 1, 2024 08:39:27.562427998 CEST	49776	443	192.168.2.9	142.250.185.174
Aug 1, 2024 08:39:27.562448978 CEST	443	49776	142.250.185.174	192.168.2.9
Aug 1, 2024 08:39:27.562869072 CEST	443	49776	142.250.185.174	192.168.2.9
Aug 1, 2024 08:39:27.563287973 CEST	49776	443	192.168.2.9	142.250.185.174
Aug 1, 2024 08:39:27.563360929 CEST	443	49776	142.250.185.174	192.168.2.9
Aug 1, 2024 08:39:27.563429117 CEST	49776	443	192.168.2.9	142.250.185.174
Aug 1, 2024 08:39:27.604501963 CEST	443	49776	142.250.185.174	192.168.2.9
Aug 1, 2024 08:39:27.852807045 CEST	443	49776	142.250.185.174	192.168.2.9
Aug 1, 2024 08:39:27.852888107 CEST	443	49776	142.250.185.174	192.168.2.9
Aug 1, 2024 08:39:27.853121042 CEST	49776	443	192.168.2.9	142.250.185.174
Aug 1, 2024 08:39:27.853543997 CEST	49776	443	192.168.2.9	142.250.185.174
Aug 1, 2024 08:39:27.853555918 CEST	443	49776	142.250.185.174	192.168.2.9
Aug 1, 2024 08:39:27.853595018 CEST	49776	443	192.168.2.9	142.250.185.174
Aug 1, 2024 08:39:27.853615046 CEST	49776	443	192.168.2.9	142.250.185.174
Aug 1, 2024 08:39:29.211860895 CEST	443	49752	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:29.212007999 CEST	443	49752	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:29.212089062 CEST	49752	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:29.370315075 CEST	49752	443	192.168.2.9	142.250.186.164
Aug 1, 2024 08:39:29.370348930 CEST	443	49752	142.250.186.164	192.168.2.9
Aug 1, 2024 08:39:29.379265070 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:29.379509926 CEST	49753	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:29.381302118 CEST	49753	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:29.386117935 CEST	80	49753	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:29.391768932 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:29.391814947 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:29.391875982 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:29.392220020 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:29.392237902 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:29.883025885 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:29.883275032 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:29.883294106 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:29.884763002 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:29.884824991 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:29.885875940 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:29.885957956 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:29.886049032 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:29.926249981 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:29.926263094 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:29.970415115 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:30.050564051 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.050674915 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.050723076 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.050755978 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:30.050775051 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.050823927 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.050843954 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:30.050851107 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.050942898 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:30.050950050 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.051101923 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.051151991 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.051158905 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:30.051168919 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.051229954 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:30.051237106 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.097579002 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:30.097589016 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.141482115 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.141551971 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.141577959 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:30.141590118 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.141652107 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.141715050 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.141729116 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:30.141737938 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.141769886 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:30.141940117 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.141988039 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.142039061 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.142052889 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:30.142060995 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.142093897 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:30.142817974 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.142908096 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.142952919 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.142973900 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:30.142982960 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.143049955 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.143053055 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:30.143717051 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.143774986 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.143793106 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:30.143801928 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.143817902 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:30.143867016 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.143912077 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.143959999 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:30.143966913 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.144009113 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:30.144015074 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.144082069 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.144736052 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:30.177268028 CEST	49781	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:30.177290916 CEST	443	49781	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.377196074 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:30.377238989 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:30.377340078 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:30.377782106 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:30.377811909 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:30.381360054 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:30.381402969 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:30.381556988 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:30.381728888 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:30.381747961 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.081403017 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.093972921 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:31.094011068 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.095648050 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.095721960 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:31.099407911 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.100689888 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:31.100822926 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:31.100934982 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.102690935 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.102706909 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.103765965 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.103830099 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.106518030 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.106590033 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.107249022 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.107264996 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.143016100 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:31.143054962 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.159015894 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.191447020 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:31.220829010 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.220979929 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.221069098 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:31.221100092 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.221213102 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.221293926 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:31.221307993 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.221461058 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.221534014 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:31.221548080 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.221669912 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.221801043 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:31.221810102 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.222157001 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.222256899 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.222316027 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:31.222328901 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.222472906 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:31.226083994 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.231975079 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.232052088 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.232088089 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.232122898 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.232137918 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.232248068 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.232255936 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.232712030 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.232780933 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.232789040 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.233458996 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.233539104 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.233546972 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.234392881 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.234463930 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.234472036 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.269424915 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.269455910 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.269537926 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.269963026 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.269979000 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.273134947 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:31.288506031 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.288516998 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.308104992 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.308293104 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.308357954 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:31.308393955 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.308521032 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.308621883 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.308645010 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:31.308657885 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.308715105 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:31.308737040 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.308936119 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.309006929 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:31.309016943 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.309197903 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.309298992 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.309330940 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:31.309344053 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.309478998 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.309525967 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:31.309536934 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.309573889 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:31.310111046 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.310307026 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.310359955 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:31.310376883 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.311364889 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.311417103 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:31.311431885 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.311559916 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.311734915 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.311762094 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:31.311789036 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:31.312000990 CEST	49786	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:31.312019110 CEST	443	49786	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:31.324357033 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.324403048 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.324420929 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.324434042 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.324491978 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.324500084 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.324691057 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.324723959 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.324749947 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.324763060 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.324830055 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.325397968 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.325464010 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.325542927 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.325597048 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.325604916 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.325648069 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.326277971 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.326416016 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.326473951 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.326483011 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.327121973 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.327152014 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.327189922 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.327200890 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.327215910 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.327291965 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.327950001 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.328015089 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.328033924 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.329288006 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.329320908 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.329380989 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.329410076 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.329418898 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.329418898 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.329432964 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.329474926 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.329572916 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.378853083 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.416697979 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.416909933 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.416939974 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.416961908 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.416973114 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.417021990 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.417121887 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.417129040 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.417181015 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.417263985 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.417356014 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.417363882 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.417424917 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.417432070 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.417613983 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.417664051 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.417664051 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.417675018 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.417757034 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.417757034 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.417758942 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.417795897 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.417839050 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.417854071 CEST	443	49785	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.417865992 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.418138027 CEST	49785	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.424688101 CEST	49789	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.424748898 CEST	443	49789	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.424835920 CEST	49789	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.425087929 CEST	49789	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.425117970 CEST	443	49789	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.724009037 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.724275112 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.724287033 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.724636078 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.725028992 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.725097895 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.725106001 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.768532038 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.768719912 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.844935894 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.845033884 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.845086098 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.845115900 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.845118046 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.845129967 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.845206022 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.845227003 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.845238924 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.845266104 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.845283031 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.845294952 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.845314026 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.845340967 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.845563889 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.845571041 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.849724054 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.849788904 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.849797010 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.878453970 CEST	443	49789	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.878961086 CEST	49789	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.879014015 CEST	443	49789	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.879395008 CEST	443	49789	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.879769087 CEST	49789	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.879856110 CEST	443	49789	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.879900932 CEST	49789	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.896383047 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.920512915 CEST	443	49789	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.927822113 CEST	49789	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.931915998 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.932038069 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.932074070 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.932096004 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.932105064 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.932115078 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.932166100 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.932173014 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.932200909 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.932233095 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.932248116 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.932257891 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.932270050 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.932317019 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.932358980 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.932377100 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.933311939 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.933365107 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.933403015 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.934303045 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.934335947 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.934359074 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.934379101 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.934382915 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.934395075 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.934448004 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.934458017 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.934576035 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.934623003 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.934629917 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.934737921 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.934766054 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.934814930 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.934848070 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.935163975 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:31.935187101 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:31.988941908 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.018692970 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.018754959 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.018785000 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.018842936 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.018855095 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.018932104 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.019146919 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.019155979 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.019212008 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.019234896 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.019268036 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.019268036 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.019268036 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.019289970 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.019592047 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.019627094 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.019644022 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.019699097 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.019867897 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.019905090 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.019937992 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.019946098 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.019963980 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.020040989 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.020558119 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.020617962 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.020780087 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.020869970 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.021370888 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.021476984 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.021559954 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.021600008 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.021636963 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.021636963 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.021645069 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.022135019 CEST	443	49789	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.022222996 CEST	443	49789	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.022345066 CEST	49789	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.022810936 CEST	49789	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.022852898 CEST	443	49789	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.026513100 CEST	49790	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.026550055 CEST	443	49790	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.026628971 CEST	49790	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.026865005 CEST	49790	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.026875973 CEST	443	49790	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.065964937 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.110989094 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.111047983 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.111088991 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.111105919 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.111128092 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.111175060 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.111226082 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.111304045 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.111311913 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.111354113 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.111406088 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.111414909 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.111453056 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.111515999 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.111629963 CEST	49788	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.111649990 CEST	443	49788	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.115417957 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.115458012 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.115593910 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.115981102 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.115994930 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.296926975 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.296976089 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.297415972 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.297754049 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.297766924 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.508059025 CEST	443	49790	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.508626938 CEST	49790	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.508646011 CEST	443	49790	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.508971930 CEST	443	49790	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.509577036 CEST	49790	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.509639978 CEST	443	49790	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.509953976 CEST	49790	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.552509069 CEST	443	49790	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.597429037 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.629143953 CEST	443	49790	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.629232883 CEST	443	49790	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.629349947 CEST	49790	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.644855976 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.666512012 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.666521072 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.667532921 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.668179989 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.668365955 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.668374062 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.668627024 CEST	49790	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.668656111 CEST	443	49790	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.708504915 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.716655970 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.768589020 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.768656969 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.768697023 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.768735886 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.768740892 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.768753052 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.768780947 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.768815994 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.768867970 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.768876076 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.768963099 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.769027948 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.769036055 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.769382954 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.769454002 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.769484043 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.769495964 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.769603968 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.773329973 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.786938906 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.787239075 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.787255049 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.787606955 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.788009882 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.788074970 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.788177967 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.788230896 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.788253069 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.816770077 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.855854034 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.855993986 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.856039047 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.856054068 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.856064081 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.856100082 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.856105089 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.856225014 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.856266022 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.856273890 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.856364965 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.856419086 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.856426001 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.856976986 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.857058048 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.857064009 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.857144117 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.857232094 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.857265949 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.857273102 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.857331038 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.857336998 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.857989073 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.858067989 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.858098030 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.858108997 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.858222008 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.858261108 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.858268023 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.858311892 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.858335018 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.858855009 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.858900070 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.858908892 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.859004974 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.859051943 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.859057903 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.908978939 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.938357115 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.938407898 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.938456059 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.938468933 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.938488960 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.938524008 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.938524008 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.938533068 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.938582897 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.938594103 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.938601017 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.938637018 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.938724041 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.938870907 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.938896894 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.938904047 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.938913107 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.938999891 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:32.942599058 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.942753077 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.942832947 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.942847013 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.942876101 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.942925930 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.942965984 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.943017960 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.943161011 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:32.943248987 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.943322897 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.943336010 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.943556070 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.943615913 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.943625927 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.943641901 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.943710089 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.943717003 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.944041967 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.944104910 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.944112062 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.944242954 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.944340944 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.944348097 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.944946051 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.944997072 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.945003986 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.945091009 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.945099115 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.945122957 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.945214033 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.945447922 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.945535898 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.945543051 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.945584059 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.945934057 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.946037054 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.946085930 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.946145058 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.946214914 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.946269989 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.947040081 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:32.947099924 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:32.987225056 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.029355049 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.029417992 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.029464006 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.029498100 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.029517889 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.029573917 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.029588938 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.029594898 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.029633999 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.029695988 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:33.029700041 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.029804945 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:33.029810905 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:33.029834032 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:33.029848099 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:33.030006886 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:33.030092955 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:33.030234098 CEST	49791	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:33.030251026 CEST	443	49791	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:33.030268908 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.030294895 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.030316114 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.030323982 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.030369043 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.030378103 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.030427933 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.030466080 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.030471087 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.031164885 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.031187057 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.031218052 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.031235933 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.031367064 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.031367064 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.031375885 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.031407118 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.031407118 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.031414032 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.031467915 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.031594992 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.033664942 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.033705950 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.033723116 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.076006889 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.076091051 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.076119900 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.121123075 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.121164083 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.121195078 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.121225119 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.121268988 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.121275902 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.121445894 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.121495008 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.121505022 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.121686935 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.121839046 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.121845007 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.121876001 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.122016907 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.122023106 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.122057915 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.122066975 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.122323036 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.122369051 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.122375965 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.122447968 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.122545004 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.122592926 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.122735023 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.122783899 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.123277903 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.123325109 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.123456001 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.123502016 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.124072075 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.124104023 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.124115944 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.124123096 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.124140978 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.124159098 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.124320984 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.124376059 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.124974012 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.125030041 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.125272036 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.125355005 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.212209940 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.212285995 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.212285042 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.212311983 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.212331057 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.212344885 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.212346077 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.212357044 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.212383032 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.212601900 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.212635040 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.212641001 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.212650061 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.212667942 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.212734938 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.212863922 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.213875055 CEST	49792	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.213902950 CEST	443	49792	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.300291061 CEST	49793	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:33.300395966 CEST	443	49793	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:33.300878048 CEST	49793	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:33.301779985 CEST	49793	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:33.301817894 CEST	443	49793	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:33.791033983 CEST	443	49793	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:33.791337967 CEST	49793	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:33.791390896 CEST	443	49793	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:33.792527914 CEST	443	49793	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:33.792874098 CEST	49793	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:33.793004036 CEST	49793	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:33.793064117 CEST	443	49793	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:33.841948032 CEST	49793	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:33.907386065 CEST	49794	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.907432079 CEST	443	49794	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.907496929 CEST	49794	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.907727957 CEST	49794	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:33.907742023 CEST	443	49794	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:33.928035021 CEST	443	49793	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:33.928209066 CEST	443	49793	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:33.928277969 CEST	49793	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:33.928710938 CEST	49793	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:33.928744078 CEST	443	49793	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:34.039113045 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:34.039167881 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:34.182317972 CEST	80	49754	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:34.182385921 CEST	49754	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:34.417378902 CEST	443	49794	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:34.417690039 CEST	49794	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:34.417711020 CEST	443	49794	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:34.418848038 CEST	443	49794	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:34.419188023 CEST	49794	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:34.419322968 CEST	49794	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:34.419327974 CEST	443	49794	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:34.419380903 CEST	443	49794	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:34.472970963 CEST	49794	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:34.698278904 CEST	443	49794	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:34.698493004 CEST	443	49794	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:34.698554993 CEST	49794	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:34.699467897 CEST	49794	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:34.699490070 CEST	443	49794	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:34.705318928 CEST	49754	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:34.705358982 CEST	49751	80	192.168.2.9	199.59.243.226
Aug 1, 2024 08:39:34.705732107 CEST	49795	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:34.705763102 CEST	443	49795	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:34.705842972 CEST	49795	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:34.706052065 CEST	49795	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:34.706063032 CEST	443	49795	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:34.709408045 CEST	49796	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:34.709479094 CEST	443	49796	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:34.709665060 CEST	49796	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:34.709891081 CEST	49796	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:34.709914923 CEST	443	49796	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:34.710602999 CEST	80	49754	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:34.710619926 CEST	80	49751	199.59.243.226	192.168.2.9
Aug 1, 2024 08:39:35.153238058 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:35.158288956 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:35.158310890 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:35.158327103 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:35.167897940 CEST	443	49795	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:35.168191910 CEST	49795	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:35.168210983 CEST	443	49795	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:35.169430971 CEST	443	49795	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:35.170028925 CEST	49795	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:35.170182943 CEST	49795	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:35.170188904 CEST	443	49795	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:35.170238972 CEST	443	49795	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:35.199558020 CEST	443	49796	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:35.199928045 CEST	49796	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:35.199971914 CEST	443	49796	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:35.201209068 CEST	443	49796	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:35.202018023 CEST	49796	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:35.202179909 CEST	49796	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:35.202244043 CEST	443	49796	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:35.224137068 CEST	49795	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:35.248807907 CEST	49796	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:35.299592018 CEST	443	49795	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:35.299823046 CEST	443	49795	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:35.299875975 CEST	49795	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:35.299894094 CEST	443	49795	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:35.299978018 CEST	443	49795	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:35.300025940 CEST	49795	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:35.300709009 CEST	49795	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:35.300725937 CEST	443	49795	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:35.794913054 CEST	49797	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:35.794955969 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:35.795020103 CEST	49797	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:35.795397043 CEST	49797	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:35.795411110 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:36.304295063 CEST	443	49796	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:36.304464102 CEST	443	49796	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:36.304536104 CEST	49796	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:36.305339098 CEST	49796	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:36.305373907 CEST	443	49796	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:36.311003923 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311027050 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311043978 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311059952 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311078072 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311086893 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:36.311094999 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311110020 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311135054 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:36.311155081 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311172009 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311187029 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311192989 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:36.311213017 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311223984 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:36.311230898 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311245918 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311259985 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311276913 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311283112 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:36.311300993 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:36.311357975 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311402082 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:36.311522007 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311537981 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311553955 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311569929 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311574936 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:36.311585903 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311605930 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311609030 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:36.311620951 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311636925 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311640978 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:36.311654091 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311670065 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311676025 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:36.311686039 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311702013 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.311712027 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:36.311737061 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:36.312165976 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.312182903 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.312200069 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.312216043 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.312222004 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:36.312232971 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.312247992 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.312266111 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.312289953 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:36.312329054 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:36.312362909 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:36.369779110 CEST	49798	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:36.369820118 CEST	443	49798	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:36.369874954 CEST	49798	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:36.370425940 CEST	49798	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:36.370439053 CEST	443	49798	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:36.576523066 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:36.576683044 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:36.606046915 CEST	49799	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:36.611102104 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:36.611167908 CEST	49799	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:36.611399889 CEST	49799	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:36.617641926 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.035326958 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.036221027 CEST	49797	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:37.036232948 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.036719084 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.038223028 CEST	49797	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:37.038307905 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.038683891 CEST	49797	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:37.038759947 CEST	49797	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:37.038784981 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.038929939 CEST	49797	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:37.038937092 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.039068937 CEST	49797	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:37.039103985 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.039138079 CEST	49797	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:37.060919046 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.060980082 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.061038971 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.061064959 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.061079979 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.061089039 CEST	49799	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.061095953 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.061127901 CEST	49799	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.061142921 CEST	49799	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.061206102 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.061271906 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.061286926 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.061331987 CEST	49799	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.080499887 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.191056013 CEST	443	49798	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:37.242593050 CEST	49798	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:37.278948069 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.279645920 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.279712915 CEST	49797	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:37.279727936 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.279808998 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.279855967 CEST	49797	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:37.279863119 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.280627966 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.280718088 CEST	49797	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:37.280726910 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.281542063 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.281608105 CEST	49797	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:37.281616926 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.282918930 CEST	49798	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:37.282938004 CEST	443	49798	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:37.283694029 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.283752918 CEST	49797	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:37.283768892 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.284251928 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.284312963 CEST	49797	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:37.284321070 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.284564018 CEST	443	49798	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:37.286962032 CEST	49798	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:37.287074089 CEST	443	49798	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:37.289052010 CEST	49798	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:37.289088964 CEST	443	49798	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:37.329776049 CEST	49797	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:37.368721008 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.369493008 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.369565010 CEST	49797	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:37.369580030 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.369658947 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.369709969 CEST	49797	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:37.369719028 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.369816065 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.369908094 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.369978905 CEST	49797	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:37.369987011 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.370069981 CEST	49797	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:37.370071888 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.370150089 CEST	49797	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:37.386697054 CEST	49800	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.388001919 CEST	49797	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:37.388025045 CEST	443	49797	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:37.389563084 CEST	49799	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.391705036 CEST	80	49800	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.391810894 CEST	49800	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.391988039 CEST	49801	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.392438889 CEST	49802	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.393472910 CEST	49803	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.393763065 CEST	49800	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.394531965 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.399035931 CEST	80	49801	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.399199963 CEST	49801	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.399347067 CEST	49801	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.400319099 CEST	80	49802	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.400394917 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.400404930 CEST	49802	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.400409937 CEST	80	49800	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.400463104 CEST	49803	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.400522947 CEST	49802	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.400605917 CEST	49803	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.404232979 CEST	80	49801	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.405385971 CEST	80	49802	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.405447006 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.476475000 CEST	443	49798	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:37.476516008 CEST	443	49798	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:37.476571083 CEST	49798	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:37.476597071 CEST	443	49798	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:37.476634979 CEST	443	49798	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:37.476691008 CEST	49798	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:37.479000092 CEST	49798	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:37.479029894 CEST	443	49798	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:37.489607096 CEST	49804	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:37.489649057 CEST	443	49804	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:37.489723921 CEST	49804	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:37.489979029 CEST	49804	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:37.489996910 CEST	443	49804	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:37.495702028 CEST	49805	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.496174097 CEST	49806	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:37.496206045 CEST	443	49806	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:37.496263981 CEST	49806	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:37.496534109 CEST	49806	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:37.496551037 CEST	443	49806	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:37.500581980 CEST	80	49805	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.500639915 CEST	49805	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.500755072 CEST	49805	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.508915901 CEST	80	49805	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.512176991 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.512408972 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.512437105 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.512455940 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.512485027 CEST	49799	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.512523890 CEST	49799	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.512526035 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.513411045 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.513468981 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.513484955 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.513484955 CEST	49799	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.513518095 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.513535023 CEST	49799	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.513988018 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.514039040 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.514044046 CEST	49799	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.514058113 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.514146090 CEST	49799	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.514919043 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.514935017 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.514951944 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.514978886 CEST	49799	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.515019894 CEST	80	49799	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.515078068 CEST	49799	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.525357008 CEST	49807	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.533706903 CEST	80	49807	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.533778906 CEST	49807	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.533955097 CEST	49807	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.538908005 CEST	80	49807	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.842140913 CEST	443	49763	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:37.842259884 CEST	443	49763	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:37.842381954 CEST	49763	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:37.865801096 CEST	80	49800	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.869755030 CEST	49763	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:37.869777918 CEST	443	49763	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:37.870160103 CEST	49808	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.873564005 CEST	80	49802	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.873584986 CEST	80	49802	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.873601913 CEST	80	49802	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.873617887 CEST	80	49802	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.873635054 CEST	80	49802	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.873650074 CEST	80	49802	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.873667955 CEST	80	49802	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.873667955 CEST	49802	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.873686075 CEST	80	49802	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.873692036 CEST	49802	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.873692036 CEST	49802	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.873702049 CEST	80	49802	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.873718977 CEST	80	49802	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.873742104 CEST	49802	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.873776913 CEST	49802	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.877070904 CEST	80	49808	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.877137899 CEST	49808	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.877276897 CEST	49808	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.880274057 CEST	80	49802	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.880290985 CEST	80	49802	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.880369902 CEST	49802	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.882409096 CEST	80	49808	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.887901068 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.887919903 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.887974977 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.888026953 CEST	49803	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.888051987 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.888067961 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.888108969 CEST	49803	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.888139963 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.888164043 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.888190985 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.888205051 CEST	49803	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.888206005 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.888230085 CEST	49803	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.888283014 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.888344049 CEST	49803	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.893063068 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.893079042 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.893098116 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.893143892 CEST	49803	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.896119118 CEST	80	49801	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.896147013 CEST	80	49801	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.896162033 CEST	80	49801	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.896205902 CEST	49801	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.896235943 CEST	80	49801	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.896254063 CEST	80	49801	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.896279097 CEST	49801	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.896286964 CEST	80	49801	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.896332979 CEST	49801	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.896368980 CEST	80	49801	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.896384954 CEST	80	49801	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.896440983 CEST	49801	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.899049997 CEST	80	49801	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.899373055 CEST	80	49801	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.899471998 CEST	49801	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.901144981 CEST	80	49801	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.901175976 CEST	80	49801	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.901190996 CEST	80	49801	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.901241064 CEST	49801	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.907309055 CEST	49800	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.933145046 CEST	49803	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.948878050 CEST	49801	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.949501991 CEST	80	49805	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.949533939 CEST	80	49805	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.949551105 CEST	80	49805	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.949567080 CEST	80	49805	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.949589014 CEST	49805	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.949634075 CEST	49805	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.949659109 CEST	80	49805	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.949743986 CEST	80	49805	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.949795008 CEST	49805	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.949846983 CEST	80	49805	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.949966908 CEST	80	49805	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.949981928 CEST	80	49805	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.949997902 CEST	80	49805	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.950016022 CEST	49805	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.950045109 CEST	49805	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.954437971 CEST	443	49804	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:37.954933882 CEST	49804	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:37.954947948 CEST	443	49804	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:37.955399990 CEST	443	49804	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:37.960411072 CEST	80	49802	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.960441113 CEST	80	49802	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.960457087 CEST	80	49802	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.960519075 CEST	49802	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.960541010 CEST	80	49802	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.966250896 CEST	49802	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.978744984 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.978811026 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.978828907 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.978874922 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.978899956 CEST	49803	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.978935957 CEST	49803	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.978943110 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.979144096 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.979190111 CEST	49803	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.979202032 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.979218960 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.979258060 CEST	49803	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.979326010 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.979342937 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.979388952 CEST	49803	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.980071068 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.980125904 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.980140924 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.980186939 CEST	49803	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.980253935 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.980269909 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.980297089 CEST	49803	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.980870962 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:37.980911970 CEST	49803	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:37.980973005 CEST	80	49803	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:38.000825882 CEST	49804	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:38.000988960 CEST	443	49804	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:38.001204014 CEST	49804	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:38.003058910 CEST	80	49807	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:38.003128052 CEST	80	49807	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:38.003145933 CEST	80	49807	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:38.003190994 CEST	49807	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:38.003247023 CEST	80	49807	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:38.003262997 CEST	80	49807	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:38.003323078 CEST	49807	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:38.003402948 CEST	80	49807	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:38.003418922 CEST	80	49807	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:38.003436089 CEST	80	49807	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:38.003452063 CEST	80	49807	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:38.003465891 CEST	49807	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:38.003469944 CEST	80	49807	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:38.003479004 CEST	49807	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:38.003509998 CEST	49807	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:38.003635883 CEST	80	49801	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:38.003699064 CEST	80	49801	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:38.003715992 CEST	80	49801	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:38.003767014 CEST	49801	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:38.003793001 CEST	80	49801	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:38.004069090 CEST	49801	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:38.015259981 CEST	80	49807	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:38.026899099 CEST	49803	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:38.044503927 CEST	443	49804	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:38.060360909 CEST	49807	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:38.083174944 CEST	49809	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:38.083218098 CEST	443	49809	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:38.083287001 CEST	49809	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:38.083486080 CEST	49809	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:38.083498955 CEST	443	49809	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:38.089942932 CEST	80	49807	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:38.090046883 CEST	80	49807	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:38.090063095 CEST	80	49807	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:38.090112925 CEST	49807	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:38.090154886 CEST	80	49807	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:38.090207100 CEST	49807	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:38.090610981 CEST	443	49762	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:38.090724945 CEST	443	49762	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:38.090840101 CEST	49762	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:38.094050884 CEST	49762	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:38.094074965 CEST	443	49762	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:38.113727093 CEST	443	49804	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:38.113881111 CEST	443	49804	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:38.113936901 CEST	49804	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:38.115231037 CEST	49804	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:38.115242958 CEST	443	49804	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:38.146512985 CEST	443	49806	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:38.147830963 CEST	49806	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:38.147847891 CEST	443	49806	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:38.148380041 CEST	443	49806	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:38.150332928 CEST	49806	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:38.150404930 CEST	443	49806	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:38.150569916 CEST	49806	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:38.150599957 CEST	443	49806	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:38.194315910 CEST	49806	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:38.340096951 CEST	443	49806	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:38.340158939 CEST	443	49806	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:38.340221882 CEST	49806	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:38.340240955 CEST	443	49806	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:38.340312958 CEST	443	49806	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:38.340374947 CEST	49806	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:38.341169119 CEST	49806	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:38.341187954 CEST	443	49806	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:38.360769987 CEST	80	49808	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:38.404558897 CEST	49808	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:38.631388903 CEST	80	49808	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:38.631465912 CEST	49808	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:38.743098021 CEST	443	49809	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:38.743412971 CEST	49809	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:38.743427038 CEST	443	49809	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:38.743876934 CEST	443	49809	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:38.744200945 CEST	49809	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:38.744276047 CEST	443	49809	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:38.744340897 CEST	49809	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:38.784527063 CEST	443	49809	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:39.055339098 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:39.060446024 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:39.060491085 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:39.060542107 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:39.060556889 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:39.060607910 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:39.060621977 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:39.062118053 CEST	443	49809	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:39.062206984 CEST	443	49809	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:39.062254906 CEST	49809	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:39.062654018 CEST	49809	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:39.062670946 CEST	443	49809	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:39.073697090 CEST	49810	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:39.073723078 CEST	443	49810	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:39.073859930 CEST	49810	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:39.074069023 CEST	49810	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:39.074081898 CEST	443	49810	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:39.355382919 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:39.355408907 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:39.355463028 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:39.459336042 CEST	49811	443	192.168.2.9	212.82.100.137
Aug 1, 2024 08:39:39.459386110 CEST	443	49811	212.82.100.137	192.168.2.9
Aug 1, 2024 08:39:39.459516048 CEST	49811	443	192.168.2.9	212.82.100.137
Aug 1, 2024 08:39:39.459788084 CEST	49811	443	192.168.2.9	212.82.100.137
Aug 1, 2024 08:39:39.459800005 CEST	443	49811	212.82.100.137	192.168.2.9
Aug 1, 2024 08:39:39.535228968 CEST	49705	80	192.168.2.9	199.232.210.172
Aug 1, 2024 08:39:39.541719913 CEST	80	49705	199.232.210.172	192.168.2.9
Aug 1, 2024 08:39:39.541776896 CEST	49705	80	192.168.2.9	199.232.210.172
Aug 1, 2024 08:39:39.699852943 CEST	443	49810	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:39.700162888 CEST	49810	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:39.700196981 CEST	443	49810	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:39.701443911 CEST	443	49810	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:39.701814890 CEST	49810	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:39.701945066 CEST	49810	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:39.702011108 CEST	443	49810	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:39.754688978 CEST	49810	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:40.006262064 CEST	443	49810	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:40.006432056 CEST	443	49810	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:40.006586075 CEST	49810	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:40.007220030 CEST	49810	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:40.007246017 CEST	443	49810	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:40.203865051 CEST	443	49811	212.82.100.137	192.168.2.9
Aug 1, 2024 08:39:40.204245090 CEST	49811	443	192.168.2.9	212.82.100.137
Aug 1, 2024 08:39:40.204284906 CEST	443	49811	212.82.100.137	192.168.2.9
Aug 1, 2024 08:39:40.205377102 CEST	443	49811	212.82.100.137	192.168.2.9
Aug 1, 2024 08:39:40.206820011 CEST	49811	443	192.168.2.9	212.82.100.137
Aug 1, 2024 08:39:40.206895113 CEST	443	49811	212.82.100.137	192.168.2.9
Aug 1, 2024 08:39:40.207060099 CEST	49811	443	192.168.2.9	212.82.100.137
Aug 1, 2024 08:39:40.207087994 CEST	443	49811	212.82.100.137	192.168.2.9
Aug 1, 2024 08:39:40.420861959 CEST	443	49811	212.82.100.137	192.168.2.9
Aug 1, 2024 08:39:40.421044111 CEST	443	49811	212.82.100.137	192.168.2.9
Aug 1, 2024 08:39:40.421124935 CEST	49811	443	192.168.2.9	212.82.100.137
Aug 1, 2024 08:39:40.423015118 CEST	49811	443	192.168.2.9	212.82.100.137
Aug 1, 2024 08:39:40.423051119 CEST	443	49811	212.82.100.137	192.168.2.9
Aug 1, 2024 08:39:42.069750071 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:42.074886084 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:42.074918032 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:42.074928999 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:42.074938059 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:42.309966087 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:42.364381075 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:43.537493944 CEST	49817	443	192.168.2.9	104.16.79.73
Aug 1, 2024 08:39:43.537527084 CEST	443	49817	104.16.79.73	192.168.2.9
Aug 1, 2024 08:39:43.537776947 CEST	49817	443	192.168.2.9	104.16.79.73
Aug 1, 2024 08:39:43.538038015 CEST	49817	443	192.168.2.9	104.16.79.73
Aug 1, 2024 08:39:43.538053989 CEST	443	49817	104.16.79.73	192.168.2.9
Aug 1, 2024 08:39:44.009959936 CEST	443	49817	104.16.79.73	192.168.2.9
Aug 1, 2024 08:39:44.017159939 CEST	49817	443	192.168.2.9	104.16.79.73
Aug 1, 2024 08:39:44.017184973 CEST	443	49817	104.16.79.73	192.168.2.9
Aug 1, 2024 08:39:44.019507885 CEST	443	49817	104.16.79.73	192.168.2.9
Aug 1, 2024 08:39:44.019587040 CEST	49817	443	192.168.2.9	104.16.79.73
Aug 1, 2024 08:39:44.091412067 CEST	49817	443	192.168.2.9	104.16.79.73
Aug 1, 2024 08:39:44.091685057 CEST	443	49817	104.16.79.73	192.168.2.9
Aug 1, 2024 08:39:44.092030048 CEST	49817	443	192.168.2.9	104.16.79.73
Aug 1, 2024 08:39:44.092047930 CEST	443	49817	104.16.79.73	192.168.2.9
Aug 1, 2024 08:39:44.145473003 CEST	49817	443	192.168.2.9	104.16.79.73
Aug 1, 2024 08:39:44.227189064 CEST	443	49817	104.16.79.73	192.168.2.9
Aug 1, 2024 08:39:44.227283955 CEST	443	49817	104.16.79.73	192.168.2.9
Aug 1, 2024 08:39:44.227365971 CEST	443	49817	104.16.79.73	192.168.2.9
Aug 1, 2024 08:39:44.227406025 CEST	443	49817	104.16.79.73	192.168.2.9
Aug 1, 2024 08:39:44.227422953 CEST	49817	443	192.168.2.9	104.16.79.73
Aug 1, 2024 08:39:44.227444887 CEST	443	49817	104.16.79.73	192.168.2.9
Aug 1, 2024 08:39:44.227453947 CEST	49817	443	192.168.2.9	104.16.79.73
Aug 1, 2024 08:39:44.227540016 CEST	443	49817	104.16.79.73	192.168.2.9
Aug 1, 2024 08:39:44.227607012 CEST	443	49817	104.16.79.73	192.168.2.9
Aug 1, 2024 08:39:44.227643013 CEST	49817	443	192.168.2.9	104.16.79.73
Aug 1, 2024 08:39:44.227649927 CEST	443	49817	104.16.79.73	192.168.2.9
Aug 1, 2024 08:39:44.227722883 CEST	443	49817	104.16.79.73	192.168.2.9
Aug 1, 2024 08:39:44.227816105 CEST	49817	443	192.168.2.9	104.16.79.73
Aug 1, 2024 08:39:44.227824926 CEST	443	49817	104.16.79.73	192.168.2.9
Aug 1, 2024 08:39:44.227904081 CEST	443	49817	104.16.79.73	192.168.2.9
Aug 1, 2024 08:39:44.227946043 CEST	49817	443	192.168.2.9	104.16.79.73
Aug 1, 2024 08:39:44.227952957 CEST	443	49817	104.16.79.73	192.168.2.9
Aug 1, 2024 08:39:44.228019953 CEST	49817	443	192.168.2.9	104.16.79.73
Aug 1, 2024 08:39:44.299643040 CEST	49721	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:44.304599047 CEST	80	49721	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:44.313853025 CEST	443	49817	104.16.79.73	192.168.2.9
Aug 1, 2024 08:39:44.314016104 CEST	443	49817	104.16.79.73	192.168.2.9
Aug 1, 2024 08:39:44.314097881 CEST	443	49817	104.16.79.73	192.168.2.9
Aug 1, 2024 08:39:44.314163923 CEST	49817	443	192.168.2.9	104.16.79.73
Aug 1, 2024 08:39:44.314187050 CEST	443	49817	104.16.79.73	192.168.2.9
Aug 1, 2024 08:39:44.314261913 CEST	443	49817	104.16.79.73	192.168.2.9
Aug 1, 2024 08:39:44.314299107 CEST	49817	443	192.168.2.9	104.16.79.73
Aug 1, 2024 08:39:44.314462900 CEST	49817	443	192.168.2.9	104.16.79.73
Aug 1, 2024 08:39:44.315407991 CEST	49817	443	192.168.2.9	104.16.79.73
Aug 1, 2024 08:39:44.315429926 CEST	443	49817	104.16.79.73	192.168.2.9
Aug 1, 2024 08:39:44.329875946 CEST	49819	443	192.168.2.9	104.16.80.73
Aug 1, 2024 08:39:44.329910040 CEST	443	49819	104.16.80.73	192.168.2.9
Aug 1, 2024 08:39:44.330003023 CEST	49819	443	192.168.2.9	104.16.80.73
Aug 1, 2024 08:39:44.330540895 CEST	49819	443	192.168.2.9	104.16.80.73
Aug 1, 2024 08:39:44.330555916 CEST	443	49819	104.16.80.73	192.168.2.9
Aug 1, 2024 08:39:44.347001076 CEST	49722	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:44.352062941 CEST	80	49722	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:44.423907042 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:44.423935890 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:44.424015999 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:44.424467087 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:44.424479008 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:44.825536013 CEST	443	49819	104.16.80.73	192.168.2.9
Aug 1, 2024 08:39:44.825865984 CEST	49819	443	192.168.2.9	104.16.80.73
Aug 1, 2024 08:39:44.825886011 CEST	443	49819	104.16.80.73	192.168.2.9
Aug 1, 2024 08:39:44.827373028 CEST	443	49819	104.16.80.73	192.168.2.9
Aug 1, 2024 08:39:44.827435970 CEST	49819	443	192.168.2.9	104.16.80.73
Aug 1, 2024 08:39:44.827891111 CEST	49819	443	192.168.2.9	104.16.80.73
Aug 1, 2024 08:39:44.827966928 CEST	443	49819	104.16.80.73	192.168.2.9
Aug 1, 2024 08:39:44.828025103 CEST	49819	443	192.168.2.9	104.16.80.73
Aug 1, 2024 08:39:44.872502089 CEST	443	49819	104.16.80.73	192.168.2.9
Aug 1, 2024 08:39:44.878782988 CEST	49819	443	192.168.2.9	104.16.80.73
Aug 1, 2024 08:39:44.878792048 CEST	443	49819	104.16.80.73	192.168.2.9
Aug 1, 2024 08:39:44.891218901 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:44.891529083 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:44.891546965 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:44.892616987 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:44.892748117 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:44.897821903 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:44.897916079 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:44.899100065 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:44.899110079 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:44.924460888 CEST	49819	443	192.168.2.9	104.16.80.73
Aug 1, 2024 08:39:44.941582918 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:44.957066059 CEST	49729	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:44.977582932 CEST	80	49729	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:44.996469021 CEST	443	49819	104.16.80.73	192.168.2.9
Aug 1, 2024 08:39:44.996632099 CEST	443	49819	104.16.80.73	192.168.2.9
Aug 1, 2024 08:39:44.996718884 CEST	443	49819	104.16.80.73	192.168.2.9
Aug 1, 2024 08:39:44.996731043 CEST	49819	443	192.168.2.9	104.16.80.73
Aug 1, 2024 08:39:44.996754885 CEST	443	49819	104.16.80.73	192.168.2.9
Aug 1, 2024 08:39:44.996869087 CEST	443	49819	104.16.80.73	192.168.2.9
Aug 1, 2024 08:39:44.996896982 CEST	49819	443	192.168.2.9	104.16.80.73
Aug 1, 2024 08:39:44.996906042 CEST	443	49819	104.16.80.73	192.168.2.9
Aug 1, 2024 08:39:44.997071028 CEST	49819	443	192.168.2.9	104.16.80.73
Aug 1, 2024 08:39:44.997077942 CEST	443	49819	104.16.80.73	192.168.2.9
Aug 1, 2024 08:39:44.997123957 CEST	443	49819	104.16.80.73	192.168.2.9
Aug 1, 2024 08:39:44.997247934 CEST	49819	443	192.168.2.9	104.16.80.73
Aug 1, 2024 08:39:44.997256994 CEST	443	49819	104.16.80.73	192.168.2.9
Aug 1, 2024 08:39:44.997334957 CEST	443	49819	104.16.80.73	192.168.2.9
Aug 1, 2024 08:39:44.997420073 CEST	49819	443	192.168.2.9	104.16.80.73
Aug 1, 2024 08:39:44.997427940 CEST	443	49819	104.16.80.73	192.168.2.9
Aug 1, 2024 08:39:45.019428015 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.019490957 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.019526005 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.019579887 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:45.019598961 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.019638062 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:45.019639015 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.019649029 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.019691944 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:45.019699097 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.019748926 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.019879103 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:45.019886017 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.020196915 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.020248890 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:45.020253897 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.024365902 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.024435043 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:45.024441957 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.037724018 CEST	49819	443	192.168.2.9	104.16.80.73
Aug 1, 2024 08:39:45.037739992 CEST	443	49819	104.16.80.73	192.168.2.9
Aug 1, 2024 08:39:45.066310883 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:45.081672907 CEST	49819	443	192.168.2.9	104.16.80.73
Aug 1, 2024 08:39:45.088498116 CEST	443	49819	104.16.80.73	192.168.2.9
Aug 1, 2024 08:39:45.088648081 CEST	443	49819	104.16.80.73	192.168.2.9
Aug 1, 2024 08:39:45.088753939 CEST	443	49819	104.16.80.73	192.168.2.9
Aug 1, 2024 08:39:45.088859081 CEST	49819	443	192.168.2.9	104.16.80.73
Aug 1, 2024 08:39:45.088874102 CEST	443	49819	104.16.80.73	192.168.2.9
Aug 1, 2024 08:39:45.088908911 CEST	443	49819	104.16.80.73	192.168.2.9
Aug 1, 2024 08:39:45.088939905 CEST	49819	443	192.168.2.9	104.16.80.73
Aug 1, 2024 08:39:45.088967085 CEST	49819	443	192.168.2.9	104.16.80.73
Aug 1, 2024 08:39:45.089457035 CEST	49819	443	192.168.2.9	104.16.80.73
Aug 1, 2024 08:39:45.089477062 CEST	443	49819	104.16.80.73	192.168.2.9
Aug 1, 2024 08:39:45.107888937 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.107996941 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.108047009 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.108048916 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:45.108064890 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.108103991 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:45.108109951 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.108314037 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.108356953 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:45.108357906 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.108367920 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.108411074 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:45.108856916 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.108932972 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.109041929 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.109085083 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:45.109091997 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.109128952 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:45.109133005 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.109860897 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.109888077 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.109935999 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:45.109942913 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.109986067 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:45.109992981 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.110027075 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.110069036 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:45.110074997 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.110863924 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.110929012 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:45.110937119 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.110948086 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.110997915 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:45.111167908 CEST	49821	443	192.168.2.9	104.18.94.41
Aug 1, 2024 08:39:45.111183882 CEST	443	49821	104.18.94.41	192.168.2.9
Aug 1, 2024 08:39:45.140544891 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.140578985 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.140707016 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.140908957 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.140923023 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.611160994 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.611529112 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.611602068 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.615483999 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.615559101 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.615947008 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.616076946 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.616092920 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.637762070 CEST	49730	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:45.642622948 CEST	80	49730	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:45.656512022 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.658777952 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.658793926 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.705044031 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.757396936 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.757689953 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.757761002 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.757823944 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.757849932 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.757904053 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.757910967 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.758014917 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.758085966 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.758140087 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.758147001 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.758228064 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.758325100 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.758332014 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.758372068 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.758377075 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.795346022 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.795392990 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.795461893 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.795692921 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.795707941 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.798273087 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.798289061 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.844324112 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.844404936 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.844424009 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.844589949 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.844652891 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.844660997 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.844732046 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.844818115 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.844855070 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.844863892 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.844878912 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.844923973 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.844938040 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.845058918 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.845084906 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.845139980 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.845148087 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.845268965 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.845299959 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.845357895 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.845366955 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.845423937 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.845941067 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.846128941 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.846148014 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.846190929 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.846190929 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.846201897 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.846235991 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.846904039 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.846963882 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.847038984 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.847047091 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.847090960 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.888159990 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.931010962 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.931077003 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.931099892 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.931184053 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.931245089 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.931252003 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.931353092 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.931395054 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.931427956 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.931436062 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.931454897 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.931550980 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.931601048 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.931610107 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.931708097 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.931715965 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.931746006 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.931762934 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.931783915 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.931864023 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.931900978 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.931906939 CEST	443	49825	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.931976080 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.931989908 CEST	49825	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.937479973 CEST	49828	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.937511921 CEST	443	49828	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:45.937572956 CEST	49828	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.937844038 CEST	49828	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:45.937855959 CEST	443	49828	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.081182957 CEST	49735	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:46.086178064 CEST	80	49735	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:46.175297022 CEST	49737	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:46.180275917 CEST	80	49737	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:46.255239010 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.264914989 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.264930964 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.265305996 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.272738934 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.272816896 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.275749922 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.279246092 CEST	49738	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:46.284116983 CEST	80	49738	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:46.316507101 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.393008947 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.393129110 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.393218994 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.393218994 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.393246889 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.393405914 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.393460989 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.393474102 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.393520117 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.393526077 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.393656015 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.393707037 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.393712044 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.393817902 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.393871069 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.393876076 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.397706985 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.397780895 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.397787094 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.422588110 CEST	443	49828	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.423002958 CEST	49828	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.423022985 CEST	443	49828	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.424316883 CEST	443	49828	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.425239086 CEST	49828	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.425328970 CEST	443	49828	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.425419092 CEST	49828	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.440181971 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.472503901 CEST	443	49828	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.479729891 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.479933023 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.479999065 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.480010033 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.480103016 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.480156898 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.480161905 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.480258942 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.480304003 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.480309010 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.480411053 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.480467081 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.480472088 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.480732918 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.480783939 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.480788946 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.480892897 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.480943918 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.480948925 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.481041908 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.481084108 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.481087923 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.481612921 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.481678963 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.481683969 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.481775999 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.481858969 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.481909990 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.481915951 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.481950045 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.482419014 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.482656956 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.482709885 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.482716084 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.484674931 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.484720945 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.484725952 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.534883976 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.565201998 CEST	443	49828	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.565434933 CEST	443	49828	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.565629959 CEST	49828	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.566262007 CEST	49828	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.566282034 CEST	443	49828	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.566330910 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.566407919 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.566447020 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.566489935 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.566502094 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.566540003 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.566669941 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.566716909 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.566843987 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.566890001 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.566895008 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.567073107 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.567114115 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.567117929 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.567174911 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.567217112 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.567271948 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.567500114 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.567544937 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.567718983 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.567771912 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.567900896 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.567959070 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.568018913 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.568074942 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.568284035 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.568337917 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.568464041 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.568514109 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.568757057 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.568809986 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.568814039 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.568823099 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.568854094 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.569312096 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.569360018 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.569458961 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.569509983 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.653337955 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.653426886 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.653435946 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.653449059 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.653474092 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.653506041 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.653717995 CEST	49827	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.653734922 CEST	443	49827	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.744332075 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.744366884 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.744446993 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.744663954 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.744677067 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.841841936 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.841892004 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:46.841981888 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.842211008 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:46.842228889 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.228040934 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.228365898 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.228390932 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.229665995 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.230336905 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.230477095 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.230515003 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.273237944 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.328408003 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.328675032 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.328696012 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.329030037 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.329703093 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.329766989 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.329993010 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.330141068 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.330168009 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.351846933 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.351994991 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.352047920 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.352066040 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.352180958 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.352220058 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.352227926 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.352440119 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.352495909 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.352504969 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.352638960 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.352758884 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.352777958 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.352786064 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.352933884 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.352978945 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.352986097 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.353020906 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.442318916 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.442568064 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.442626953 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.442648888 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.442790985 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.442888021 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.442889929 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.442935944 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.443023920 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.443037033 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.443198919 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.443253040 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.443260908 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.443387032 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.443434000 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.443442106 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.444082022 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.444185972 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.444245100 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.444257021 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.444288015 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.444303989 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.444458008 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.444595098 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.444602966 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.445071936 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.445127010 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.445133924 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.445245981 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.445300102 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.445307970 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.446007013 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.446047068 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.446089029 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.446094036 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.446109056 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.446140051 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.481898069 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.481949091 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.481980085 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.482027054 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.482037067 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.482047081 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.482089043 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.482090950 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.482098103 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.482146025 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.482151985 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.482213974 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.482217073 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.482285023 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.482335091 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.482340097 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.482378960 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.486833096 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.487377882 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.487385988 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.533561945 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.533634901 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.533804893 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.533894062 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.533931971 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.533968925 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.533977985 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.533984900 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.534018993 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.534028053 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.534090996 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.534127951 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.534132004 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.534138918 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.534167051 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.534423113 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.534476995 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.534482002 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.534519911 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.534571886 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.534603119 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.534611940 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.534616947 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.534643888 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.534657955 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.534989119 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.535033941 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.535042048 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.535058022 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.535087109 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.535106897 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.535487890 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.535531044 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.535536051 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.535551071 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.535581112 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.535599947 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.535856962 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.535898924 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.535934925 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.535983086 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.536159992 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.536207914 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.574678898 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.574738979 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.574769020 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.574814081 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.574889898 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.574918032 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.574970961 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.574979067 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.575037003 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.575048923 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.575052977 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.575171947 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.575181007 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.575186014 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.575229883 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.575695038 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.575725079 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.575795889 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.575804949 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.575902939 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.575942039 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.575946093 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.575951099 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.576000929 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.576601028 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.576750040 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.576793909 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.576818943 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.576824903 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.576886892 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.576925039 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.577532053 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.577544928 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.577615976 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.577620983 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.577709913 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.577714920 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.626907110 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.626966953 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.627000093 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.627023935 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.627055883 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.627063036 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.627109051 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.627434969 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.627440929 CEST	443	49830	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.627454996 CEST	49830	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.667275906 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.667366982 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.667428970 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.667460918 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.667474031 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.667493105 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.667514086 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.667521000 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.667550087 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.667747974 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.667826891 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.667831898 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.667838097 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.667881966 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.667948961 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.667994976 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.668143988 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.668194056 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.668303967 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.668350935 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.668967962 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.669019938 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.669730902 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.669781923 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.670752048 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.670811892 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.671196938 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.671272039 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.671401024 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.671432972 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.671452045 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.671456099 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.671489954 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.671511889 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.671617031 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.671679020 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.759846926 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.759918928 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.759928942 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.759989977 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.760116100 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.760163069 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.760305882 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.760343075 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.760354042 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.760359049 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.760381937 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.760502100 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.760726929 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.760946989 CEST	49831	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.760962009 CEST	443	49831	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.764095068 CEST	49832	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.764117002 CEST	443	49832	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:47.764230013 CEST	49832	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.764473915 CEST	49832	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:47.764492035 CEST	443	49832	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:48.075881004 CEST	49833	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:48.075923920 CEST	443	49833	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:48.076075077 CEST	49833	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:48.076291084 CEST	49833	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:48.076302052 CEST	443	49833	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:48.220808983 CEST	443	49832	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:48.221158981 CEST	49832	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:48.221177101 CEST	443	49832	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:48.221508026 CEST	443	49832	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:48.222322941 CEST	49832	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:48.222382069 CEST	443	49832	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:48.222594976 CEST	49832	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:48.267627001 CEST	49832	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:48.267640114 CEST	443	49832	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:48.366465092 CEST	443	49832	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:48.366547108 CEST	443	49832	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:48.366641998 CEST	49832	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:48.367127895 CEST	49832	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:48.367141962 CEST	443	49832	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:48.554672956 CEST	443	49833	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:48.557570934 CEST	49833	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:48.557586908 CEST	443	49833	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:48.557934999 CEST	443	49833	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:48.558681011 CEST	49833	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:48.558813095 CEST	443	49833	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:48.558924913 CEST	49833	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:48.600502968 CEST	443	49833	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:48.884088039 CEST	443	49833	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:48.884171009 CEST	443	49833	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:48.884222031 CEST	49833	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:48.884236097 CEST	443	49833	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:48.884277105 CEST	443	49833	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:48.884313107 CEST	49833	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:48.885452986 CEST	49833	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:48.885468960 CEST	443	49833	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:49.122251987 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:49.127365112 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:49.127412081 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:49.127999067 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:49.606247902 CEST	49835	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:49.606288910 CEST	443	49835	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:49.606786966 CEST	49835	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:49.607161045 CEST	49835	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:49.607176065 CEST	443	49835	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.071398973 CEST	443	49835	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.071880102 CEST	49835	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:50.071907997 CEST	443	49835	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.072241068 CEST	443	49835	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.072690964 CEST	49835	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:50.072757959 CEST	443	49835	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.072849035 CEST	49835	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:50.120506048 CEST	443	49835	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.160886049 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.160922050 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.160934925 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.160979033 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:50.161060095 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.161072969 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.161113024 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:50.161283970 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.161329031 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:50.161333084 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.161345959 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.161379099 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:50.161467075 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.161479950 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.161516905 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:50.162064075 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.162130117 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.162142038 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.162185907 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:50.163147926 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.163204908 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.163204908 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:50.163218975 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.163268089 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:50.163343906 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.163356066 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.163389921 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:50.163482904 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.163503885 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.163563967 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:50.163599968 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.163609982 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.163620949 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.163657904 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:50.164623022 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.164670944 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.164680958 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:50.164683104 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.164716959 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:50.164794922 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.164805889 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.164849997 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:50.165334940 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.165347099 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.165357113 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.165391922 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:50.165416002 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.165429115 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.165446997 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:50.165858030 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.165913105 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.165965080 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:50.193308115 CEST	49836	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:50.193409920 CEST	443	49836	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:50.193614960 CEST	49836	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:50.194005966 CEST	49837	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:50.194053888 CEST	443	49837	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:50.194183111 CEST	49837	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:50.194305897 CEST	49836	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:50.194340944 CEST	443	49836	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:50.194480896 CEST	49837	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:50.194494009 CEST	443	49837	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:50.210553885 CEST	49838	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:50.210597992 CEST	443	49838	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:50.210676908 CEST	49838	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:50.210902929 CEST	49838	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:50.210926056 CEST	443	49838	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:50.216833115 CEST	443	49835	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.216902971 CEST	443	49835	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.216959000 CEST	49835	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:50.218708038 CEST	49835	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:50.218727112 CEST	443	49835	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.228311062 CEST	49839	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:50.233237982 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:50.233367920 CEST	49839	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:50.233925104 CEST	49839	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:50.238738060 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:50.242662907 CEST	49840	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:50.242690086 CEST	443	49840	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.242846012 CEST	49840	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:50.243091106 CEST	49840	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:50.243103027 CEST	443	49840	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.248934031 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:50.296808958 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:50.392623901 CEST	49841	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:50.392659903 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.392848969 CEST	49841	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:50.393148899 CEST	49841	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:50.393163919 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.711255074 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:50.711361885 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:50.711374044 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:50.711431026 CEST	49839	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:50.711483002 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:50.711494923 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:50.711508989 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:50.711520910 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:50.711524010 CEST	49839	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:50.711540937 CEST	49839	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:50.713882923 CEST	443	49840	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.717946053 CEST	49840	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:50.717964888 CEST	443	49840	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.718489885 CEST	443	49840	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.722017050 CEST	49840	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:50.722093105 CEST	443	49840	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.722445011 CEST	49840	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:50.764502048 CEST	443	49840	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.766644001 CEST	49839	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:50.798211098 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:50.834919930 CEST	443	49837	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:50.836041927 CEST	443	49836	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:50.845191956 CEST	49839	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:50.865894079 CEST	443	49840	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.865983963 CEST	443	49840	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.866063118 CEST	49840	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:50.869795084 CEST	443	49838	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:50.882381916 CEST	49837	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:50.882388115 CEST	49836	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:50.892508984 CEST	49836	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:50.892524958 CEST	443	49836	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:50.893062115 CEST	443	49836	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:50.893141031 CEST	49837	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:50.893151045 CEST	443	49837	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:50.893435955 CEST	49838	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:50.893451929 CEST	443	49838	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:50.893594980 CEST	443	49837	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:50.893932104 CEST	443	49838	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:50.896831989 CEST	49836	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:50.896960974 CEST	443	49836	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:50.897651911 CEST	49837	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:50.897723913 CEST	443	49837	156.146.33.138	192.168.2.9
Aug 1, 2024 08:39:50.900284052 CEST	49838	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:50.900428057 CEST	443	49838	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:50.901853085 CEST	49838	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:50.901907921 CEST	443	49838	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:50.905719995 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.907553911 CEST	49842	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:50.915132999 CEST	49841	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:50.915146112 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.915255070 CEST	49839	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:50.915803909 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.916063070 CEST	80	49842	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:50.916130066 CEST	49842	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:50.916342020 CEST	49841	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:50.916508913 CEST	49841	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:50.916522026 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.916568041 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.916575909 CEST	49841	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:50.916589022 CEST	49841	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:50.916691065 CEST	49842	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:50.916696072 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.916941881 CEST	49841	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:50.916956902 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:50.920207977 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:50.921768904 CEST	80	49842	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:50.941340923 CEST	49837	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:39:50.941368103 CEST	49836	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:50.963577986 CEST	49840	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:50.963620901 CEST	443	49840	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.012252092 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.012443066 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.012465000 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.012490034 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.012494087 CEST	49839	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.012532949 CEST	49839	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.012576103 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.012593031 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.012649059 CEST	49839	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.012861013 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.012928009 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.012943983 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.012967110 CEST	49839	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.013050079 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.013062954 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.013087034 CEST	49839	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.014024973 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.014090061 CEST	49839	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.015005112 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.015017986 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.015032053 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.015091896 CEST	49839	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.015120029 CEST	80	49839	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.015160084 CEST	49839	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.073774099 CEST	49843	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.075289011 CEST	49844	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.075737953 CEST	49845	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.078751087 CEST	80	49843	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.078866959 CEST	49843	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.079355955 CEST	49843	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.080111027 CEST	80	49844	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.080188990 CEST	49844	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.080579996 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.080743074 CEST	49845	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.080776930 CEST	49845	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.080796957 CEST	49844	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.086565018 CEST	80	49843	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.087714911 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.087724924 CEST	80	49844	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.164592028 CEST	49846	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.164741993 CEST	49847	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.167438030 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.167561054 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.167649031 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.167730093 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.167751074 CEST	49841	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:51.167766094 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.167809963 CEST	49841	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:51.167886019 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.167948961 CEST	49841	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:51.167957067 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.168035030 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.168113947 CEST	49841	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:51.168118000 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.168145895 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.168214083 CEST	49841	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:51.168229103 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.169651985 CEST	80	49846	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.169712067 CEST	80	49847	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.169774055 CEST	49847	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.169795036 CEST	49846	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.169961929 CEST	49846	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.170010090 CEST	49847	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.171967983 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.172023058 CEST	49841	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:51.172030926 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.172519922 CEST	443	49838	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:51.172549009 CEST	443	49838	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:51.172610998 CEST	49838	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:51.172624111 CEST	443	49838	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:51.172660112 CEST	443	49838	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:51.172714949 CEST	49838	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:51.173280954 CEST	49838	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:51.173300028 CEST	443	49838	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:51.178595066 CEST	80	49846	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.178606987 CEST	80	49847	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.182940960 CEST	49848	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:51.182971954 CEST	443	49848	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:51.183026075 CEST	49848	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:51.183698893 CEST	49848	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:51.183712959 CEST	443	49848	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:51.211963892 CEST	49841	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:51.212632895 CEST	49849	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:51.212724924 CEST	443	49849	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:51.212831020 CEST	49849	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:51.213095903 CEST	49849	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:51.213128090 CEST	443	49849	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:51.259355068 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.259520054 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.259602070 CEST	49841	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:51.259608030 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.259635925 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.259716988 CEST	49841	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:51.259726048 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.259843111 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.259912014 CEST	49841	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:51.259919882 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.260090113 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.260154009 CEST	49841	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:51.260243893 CEST	49841	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:51.260257006 CEST	443	49841	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.263024092 CEST	49850	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:51.263062000 CEST	443	49850	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.263149977 CEST	49850	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:51.263362885 CEST	49850	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:51.263376951 CEST	443	49850	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.373249054 CEST	80	49842	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.398098946 CEST	49851	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.403242111 CEST	80	49851	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.403311968 CEST	49851	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.403461933 CEST	49851	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.408399105 CEST	80	49851	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.426965952 CEST	49842	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.529953003 CEST	80	49843	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.529980898 CEST	80	49843	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.529999018 CEST	80	49843	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.530014038 CEST	80	49843	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.530030966 CEST	80	49843	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.530051947 CEST	49843	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.530051947 CEST	49843	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.530841112 CEST	80	49843	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.530858040 CEST	80	49843	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.530900002 CEST	49843	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.530975103 CEST	80	49843	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.530993938 CEST	80	49843	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.531011105 CEST	80	49843	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.531028986 CEST	49843	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.531083107 CEST	49843	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.531485081 CEST	80	49844	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.531646013 CEST	80	49844	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.531661034 CEST	80	49844	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.531692028 CEST	49844	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.531821966 CEST	80	49844	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.531837940 CEST	80	49844	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.531853914 CEST	80	49844	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.531867981 CEST	49844	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.531872034 CEST	80	49844	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.531893015 CEST	49844	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.532073021 CEST	80	49844	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.532093048 CEST	80	49844	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.532114983 CEST	49844	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.537774086 CEST	80	49844	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.537851095 CEST	49844	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.537956953 CEST	80	49843	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.537972927 CEST	80	49843	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.537987947 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.538007021 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.538043022 CEST	49843	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.538106918 CEST	49845	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.538115025 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.538130999 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.538146973 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.538162947 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.538177967 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.538192987 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.538208961 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.538211107 CEST	49845	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.538211107 CEST	49845	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.538223982 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.538244963 CEST	49845	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.538326979 CEST	49845	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.539515018 CEST	80	49844	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.539691925 CEST	80	49844	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.539772034 CEST	49844	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.543004036 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.543329954 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.543345928 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.543409109 CEST	49845	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.585266113 CEST	49845	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.616226912 CEST	80	49843	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.616256952 CEST	80	49843	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.616274118 CEST	80	49843	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.616292000 CEST	80	49843	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.616312027 CEST	49843	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.616367102 CEST	49843	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.617173910 CEST	80	49844	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.617192984 CEST	80	49844	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.617211103 CEST	80	49844	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.617227077 CEST	80	49844	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.617279053 CEST	49844	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.617312908 CEST	49844	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.623281002 CEST	80	49847	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.623379946 CEST	80	49847	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.623395920 CEST	80	49847	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.623442888 CEST	49847	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.623959064 CEST	80	49847	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.624006987 CEST	49847	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.624099970 CEST	80	49847	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.624118090 CEST	80	49847	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.624133110 CEST	80	49847	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.624180079 CEST	49847	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.624396086 CEST	80	49847	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.624411106 CEST	80	49847	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.624444962 CEST	49847	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.624543905 CEST	80	49847	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.624581099 CEST	49847	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.624933958 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.624948025 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.624960899 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.625037909 CEST	49845	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.625072956 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.625118017 CEST	49845	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.625665903 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.625842094 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.625857115 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.625870943 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.625911951 CEST	49845	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.625960112 CEST	49845	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.625972986 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.625986099 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.626002073 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.626097918 CEST	49845	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.626110077 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.626123905 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.626173019 CEST	49845	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.627063036 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.627082109 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.627099991 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.627135038 CEST	49845	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.627165079 CEST	49845	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.627165079 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.627182007 CEST	80	49845	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.627243042 CEST	49845	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.629194975 CEST	80	49847	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.655051947 CEST	80	49846	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.655081034 CEST	80	49846	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.655103922 CEST	80	49846	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.655124903 CEST	80	49846	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.655141115 CEST	80	49846	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.655157089 CEST	80	49846	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.655160904 CEST	49846	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.655178070 CEST	80	49846	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.655217886 CEST	49846	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.655355930 CEST	49846	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.673893929 CEST	49847	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.704173088 CEST	49846	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.709578037 CEST	80	49847	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.709603071 CEST	80	49847	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.709615946 CEST	80	49847	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.709657907 CEST	80	49847	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.709688902 CEST	49847	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.709728956 CEST	49847	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.730818033 CEST	443	49850	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.746105909 CEST	80	49846	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.751106024 CEST	49850	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:51.751128912 CEST	443	49850	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.752352953 CEST	443	49850	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.791208982 CEST	49846	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:51.792222023 CEST	49850	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:51.792463064 CEST	443	49850	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.793977022 CEST	49850	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:51.832340956 CEST	443	49848	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:51.832539082 CEST	49848	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:51.832551003 CEST	443	49848	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:51.832921982 CEST	443	49848	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:51.833415985 CEST	49848	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:51.833475113 CEST	443	49848	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:51.833655119 CEST	49848	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:51.833688021 CEST	443	49848	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:51.840503931 CEST	443	49850	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.869539022 CEST	443	49849	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:51.869894028 CEST	49849	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:51.869937897 CEST	443	49849	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:51.870323896 CEST	443	49849	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:51.870616913 CEST	49849	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:51.870697975 CEST	443	49849	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:51.870847940 CEST	49849	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:51.874357939 CEST	80	49851	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:51.901132107 CEST	443	49850	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.901206970 CEST	443	49850	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.901294947 CEST	49850	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:51.901922941 CEST	49850	443	192.168.2.9	104.18.95.41
Aug 1, 2024 08:39:51.901942968 CEST	443	49850	104.18.95.41	192.168.2.9
Aug 1, 2024 08:39:51.916505098 CEST	443	49849	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:51.927962065 CEST	49851	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:52.003988981 CEST	80	49851	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:52.048573971 CEST	49851	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:52.105465889 CEST	443	49848	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:52.105493069 CEST	443	49848	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:52.105566978 CEST	49848	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:52.105591059 CEST	443	49848	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:52.105602980 CEST	443	49848	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:52.105643034 CEST	49848	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:52.108247995 CEST	49848	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:52.108266115 CEST	443	49848	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:52.178538084 CEST	443	49849	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:52.178632021 CEST	443	49849	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:52.178781033 CEST	49849	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:52.179950953 CEST	49849	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:52.179984093 CEST	443	49849	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:52.196175098 CEST	49852	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:52.196223974 CEST	443	49852	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:52.196330070 CEST	49852	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:52.197050095 CEST	49852	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:52.197076082 CEST	443	49852	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:52.818571091 CEST	443	49852	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:52.818866014 CEST	49852	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:52.818917990 CEST	443	49852	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:52.819305897 CEST	443	49852	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:52.820703030 CEST	49852	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:52.820786953 CEST	443	49852	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:52.820907116 CEST	49852	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:52.868503094 CEST	443	49852	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:53.276606083 CEST	443	49852	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:53.276702881 CEST	443	49852	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:53.277086020 CEST	49852	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:53.278459072 CEST	49852	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:53.278500080 CEST	443	49852	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:53.306869030 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:53.315635920 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:53.315660000 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:53.315676928 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.215235949 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.215327978 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.215351105 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.215368986 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.215380907 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:54.215387106 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.215413094 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:54.215429068 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.215483904 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:54.215559959 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.215578079 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.215596914 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.215636969 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:54.215667009 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.215683937 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.215728998 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:54.216095924 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.216113091 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.216161013 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:54.218553066 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.218611956 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.218615055 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:54.218631029 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.218673944 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:54.218904018 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.218919992 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.218936920 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.218952894 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.218970060 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.218975067 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:54.218988895 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.219016075 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:54.219041109 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:54.219063997 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.219127893 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.219150066 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.219181061 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:54.219260931 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.219289064 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.219305038 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:54.219305992 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.219322920 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.219345093 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:54.219496965 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.219512939 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.219556093 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:54.219933033 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.219949961 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.219973087 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:54.260718107 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:54.272701979 CEST	49854	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:54.272733927 CEST	443	49854	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:54.272804976 CEST	49854	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:54.273081064 CEST	49854	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:54.273096085 CEST	443	49854	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:54.287163973 CEST	49855	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.293098927 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.293248892 CEST	49855	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.293654919 CEST	49855	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.307646990 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:54.309775114 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.349455118 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:54.777643919 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.777683020 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.777702093 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.777718067 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.777750969 CEST	49855	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.777775049 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.777776957 CEST	49855	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.777792931 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.777810097 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.777849913 CEST	49855	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.777988911 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.778060913 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.778074026 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.778100014 CEST	49855	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.778131962 CEST	49855	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.796966076 CEST	49856	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.798183918 CEST	49855	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.802539110 CEST	80	49856	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.802659035 CEST	49856	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.803705931 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.803985119 CEST	49856	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.809902906 CEST	80	49856	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.890413046 CEST	49857	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.895378113 CEST	80	49857	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.895438910 CEST	49857	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.895791054 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.895864010 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.895886898 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.895935059 CEST	49855	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.896051884 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.896095037 CEST	49855	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.896126032 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.896142960 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.896188974 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.896229982 CEST	49855	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.896431923 CEST	49857	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.896744013 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.896770000 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.896800995 CEST	49855	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.896938086 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.896992922 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.897007942 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.897033930 CEST	49855	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.897074938 CEST	49855	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.897459030 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.897485971 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.897501945 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.897546053 CEST	49855	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.898204088 CEST	49858	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.898675919 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.898730993 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.898731947 CEST	49855	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.898749113 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.898821115 CEST	49855	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.898886919 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.898910999 CEST	80	49855	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.898952961 CEST	49855	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.899010897 CEST	49859	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.900566101 CEST	49860	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.901134968 CEST	80	49857	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.902975082 CEST	80	49858	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.903042078 CEST	49858	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.903477907 CEST	49858	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.905565977 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.905601978 CEST	80	49860	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.905663013 CEST	49859	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.905687094 CEST	49860	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.905899048 CEST	49860	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.905961990 CEST	49859	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.908222914 CEST	80	49858	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.910836935 CEST	80	49860	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.910851955 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.922097921 CEST	443	49854	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:54.922333956 CEST	49854	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:54.922344923 CEST	443	49854	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:54.922724009 CEST	443	49854	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:54.923151970 CEST	49854	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:54.923227072 CEST	443	49854	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:54.923295975 CEST	49854	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:54.923327923 CEST	443	49854	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:54.947552919 CEST	49861	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.953037024 CEST	80	49861	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:54.953150034 CEST	49861	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.953294992 CEST	49861	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:54.959265947 CEST	80	49861	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.198945045 CEST	443	49854	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:55.198977947 CEST	443	49854	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:55.199033022 CEST	49854	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:55.199052095 CEST	443	49854	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:55.199065924 CEST	443	49854	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:55.199107885 CEST	49854	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:55.200421095 CEST	49854	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:55.200438976 CEST	443	49854	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:55.209067106 CEST	49862	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:55.209117889 CEST	443	49862	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:55.209253073 CEST	49862	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:55.209501982 CEST	49862	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:55.209523916 CEST	443	49862	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:55.250557899 CEST	80	49856	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.295665979 CEST	49856	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.350104094 CEST	80	49858	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.350138903 CEST	80	49858	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.350200891 CEST	49858	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.350260973 CEST	80	49858	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.350276947 CEST	80	49858	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.350292921 CEST	80	49858	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.350332975 CEST	49858	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.350513935 CEST	80	49858	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.350564003 CEST	49858	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.351186991 CEST	80	49857	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.351213932 CEST	80	49857	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.351227999 CEST	80	49857	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.351267099 CEST	49857	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.351303101 CEST	80	49857	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.351320028 CEST	80	49857	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.351361990 CEST	49857	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.351387978 CEST	80	49857	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.351433992 CEST	49857	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.351469994 CEST	80	49857	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.351485014 CEST	80	49857	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.351500988 CEST	80	49857	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.351525068 CEST	49857	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.351655960 CEST	80	49858	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.351670027 CEST	80	49858	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.351697922 CEST	80	49858	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.351716042 CEST	49858	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.351743937 CEST	80	49858	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.351937056 CEST	49858	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.355079889 CEST	80	49858	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.355146885 CEST	80	49858	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.355164051 CEST	80	49858	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.355217934 CEST	49858	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.370407104 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.370488882 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.370507002 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.370544910 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.370560884 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.370577097 CEST	49859	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.370580912 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.370625973 CEST	49859	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.370625973 CEST	49859	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.370724916 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.370779037 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.370804071 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.370830059 CEST	49859	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.370872021 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.370934010 CEST	49859	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.372191906 CEST	80	49860	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.372256041 CEST	80	49860	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.372272968 CEST	80	49860	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.372320890 CEST	49860	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.372344971 CEST	80	49860	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.372361898 CEST	80	49860	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.372390032 CEST	49860	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.372720957 CEST	80	49860	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.372771978 CEST	49860	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.372782946 CEST	80	49860	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.372844934 CEST	80	49860	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.372860909 CEST	80	49860	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.372905016 CEST	49860	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.372920990 CEST	80	49860	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.373085976 CEST	49860	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.375449896 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.375468016 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.375545025 CEST	49859	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.377104044 CEST	80	49860	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.391408920 CEST	49857	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.417666912 CEST	49860	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.420072079 CEST	80	49861	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.420134068 CEST	80	49861	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.420171022 CEST	80	49861	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.420212984 CEST	80	49861	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.420227051 CEST	49861	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.420268059 CEST	49861	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.420309067 CEST	80	49861	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.420326948 CEST	80	49861	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.420345068 CEST	80	49861	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.420392036 CEST	49861	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.420579910 CEST	80	49861	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.420645952 CEST	49861	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.420664072 CEST	80	49861	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.420679092 CEST	80	49861	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.420727015 CEST	49861	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.425195932 CEST	80	49861	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.425247908 CEST	80	49861	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.425262928 CEST	80	49861	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.425353050 CEST	49861	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.437268019 CEST	80	49858	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.437295914 CEST	80	49858	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.437319040 CEST	80	49858	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.437359095 CEST	49858	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.437386990 CEST	80	49858	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.437975883 CEST	49858	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.460901022 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.460947037 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.461054087 CEST	49859	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.461078882 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.461113930 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.461132050 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.461184025 CEST	49859	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.461216927 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.461260080 CEST	49859	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.461647034 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.461694002 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.461718082 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.461776018 CEST	49859	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.461834908 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.461850882 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.461882114 CEST	49859	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.462496042 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.462552071 CEST	49859	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.462568998 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.462584972 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.462677002 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.462692022 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.462724924 CEST	49859	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.462754011 CEST	49859	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.462816954 CEST	80	49860	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.462832928 CEST	80	49860	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.462851048 CEST	80	49860	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.462891102 CEST	49860	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.462933064 CEST	80	49860	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.462976933 CEST	49860	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.463373899 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.463462114 CEST	80	49859	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.466485023 CEST	49859	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.510970116 CEST	80	49861	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.511087894 CEST	80	49861	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.511104107 CEST	80	49861	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.511121035 CEST	80	49861	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.511200905 CEST	49861	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.511248112 CEST	49861	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.712146997 CEST	49857	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.717199087 CEST	80	49857	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.809376955 CEST	80	49857	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.836752892 CEST	443	49862	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:55.859402895 CEST	49857	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:55.867141008 CEST	49862	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:55.867156982 CEST	443	49862	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:55.867593050 CEST	443	49862	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:55.868352890 CEST	49862	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:55.868417978 CEST	443	49862	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:55.868789911 CEST	49862	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:55.868818045 CEST	443	49862	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:55.872349024 CEST	49863	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:55.872392893 CEST	443	49863	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:55.872503042 CEST	49863	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:55.872936964 CEST	49863	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:55.872948885 CEST	443	49863	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:55.941191912 CEST	80	49857	208.91.196.253	192.168.2.9
Aug 1, 2024 08:39:55.988544941 CEST	49857	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:39:56.055473089 CEST	443	49862	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:56.055497885 CEST	443	49862	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:56.055565119 CEST	49862	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:56.055578947 CEST	443	49862	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:56.055640936 CEST	443	49862	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:56.055681944 CEST	49862	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:56.251266003 CEST	49862	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:56.251293898 CEST	443	49862	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:56.526087999 CEST	443	49863	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:56.526422024 CEST	49863	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:56.526437044 CEST	443	49863	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:56.526807070 CEST	443	49863	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:56.527321100 CEST	49863	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:56.527381897 CEST	443	49863	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:56.527539968 CEST	49863	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:56.568541050 CEST	443	49863	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:56.569221020 CEST	49863	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:56.836474895 CEST	443	49863	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:56.836574078 CEST	443	49863	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:56.836664915 CEST	49863	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:56.837079048 CEST	49863	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:56.837105989 CEST	443	49863	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:56.885463953 CEST	49864	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:56.885502100 CEST	443	49864	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:56.885581970 CEST	49864	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:56.886174917 CEST	49864	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:56.886182070 CEST	443	49864	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:57.051182985 CEST	49865	443	192.168.2.9	142.250.186.100
Aug 1, 2024 08:39:57.051223993 CEST	443	49865	142.250.186.100	192.168.2.9
Aug 1, 2024 08:39:57.051294088 CEST	49865	443	192.168.2.9	142.250.186.100
Aug 1, 2024 08:39:57.051640987 CEST	49865	443	192.168.2.9	142.250.186.100
Aug 1, 2024 08:39:57.051650047 CEST	443	49865	142.250.186.100	192.168.2.9
Aug 1, 2024 08:39:57.524302006 CEST	443	49864	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:57.524774075 CEST	49864	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:57.524797916 CEST	443	49864	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:57.525242090 CEST	443	49864	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:57.525566101 CEST	49864	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:57.525667906 CEST	443	49864	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:57.525847912 CEST	49864	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:57.572499990 CEST	443	49864	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:57.713773966 CEST	443	49865	142.250.186.100	192.168.2.9
Aug 1, 2024 08:39:57.714081049 CEST	49865	443	192.168.2.9	142.250.186.100
Aug 1, 2024 08:39:57.714096069 CEST	443	49865	142.250.186.100	192.168.2.9
Aug 1, 2024 08:39:57.715111017 CEST	443	49865	142.250.186.100	192.168.2.9
Aug 1, 2024 08:39:57.715521097 CEST	49865	443	192.168.2.9	142.250.186.100
Aug 1, 2024 08:39:57.715584040 CEST	443	49865	142.250.186.100	192.168.2.9
Aug 1, 2024 08:39:57.761703968 CEST	49865	443	192.168.2.9	142.250.186.100
Aug 1, 2024 08:39:57.833180904 CEST	443	49864	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:57.833276033 CEST	443	49864	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:57.833384991 CEST	49864	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:57.955816031 CEST	49864	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:39:57.955838919 CEST	443	49864	87.230.98.78	192.168.2.9
Aug 1, 2024 08:39:59.140036106 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:39:59.145165920 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:59.145185947 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:39:59.145196915 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.110132933 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.110157967 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.110172033 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.110186100 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.110199928 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.110312939 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:40:00.110316992 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.110312939 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:40:00.110332012 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.110369921 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:40:00.110408068 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.110421896 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.110435963 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.110461950 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:40:00.110475063 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:40:00.110683918 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.110697985 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.110711098 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.110739946 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:40:00.112374067 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.112387896 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.112400055 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.112426043 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:40:00.112446070 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:40:00.112596035 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.112670898 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.112684965 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.112716913 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:40:00.112751007 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.112766027 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.112790108 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:40:00.112895966 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.112907887 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.112921000 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.112932920 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:40:00.112961054 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:40:00.113202095 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.113508940 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.113522053 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.113553047 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:40:00.113570929 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.113610983 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:40:00.113637924 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.113652945 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.113748074 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.113791943 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:40:00.113804102 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.113843918 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:40:00.114176989 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.114257097 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.114269972 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.114311934 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:40:00.114348888 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.114386082 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:40:00.198410034 CEST	80	49725	199.191.50.153	192.168.2.9
Aug 1, 2024 08:40:00.248940945 CEST	49725	80	192.168.2.9	199.191.50.153
Aug 1, 2024 08:40:00.355587006 CEST	49866	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:00.355627060 CEST	443	49866	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:00.355707884 CEST	49866	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:00.358329058 CEST	49866	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:00.358339071 CEST	443	49866	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:00.988076925 CEST	443	49866	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:00.990458012 CEST	49866	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:00.990485907 CEST	443	49866	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:00.990880013 CEST	443	49866	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:00.991580009 CEST	49866	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:00.991693020 CEST	443	49866	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:00.991738081 CEST	49866	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:00.991831064 CEST	443	49866	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:01.034504890 CEST	49866	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:01.261729002 CEST	443	49866	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:01.261931896 CEST	443	49866	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:01.262008905 CEST	443	49866	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:01.262067080 CEST	49866	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:01.262067080 CEST	49866	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:01.263608932 CEST	49866	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:01.263636112 CEST	443	49866	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:01.277281046 CEST	49867	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:01.277333975 CEST	443	49867	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:01.277492046 CEST	49867	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:01.277867079 CEST	49867	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:01.277885914 CEST	443	49867	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:01.328093052 CEST	49868	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:01.328140974 CEST	443	49868	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:01.328504086 CEST	49868	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:01.328768015 CEST	49868	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:01.328794956 CEST	443	49868	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:02.423679113 CEST	443	49867	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:02.424998999 CEST	443	49868	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:02.434735060 CEST	49868	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:02.434760094 CEST	443	49868	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:02.434919119 CEST	49867	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:02.434933901 CEST	443	49867	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:02.435360909 CEST	443	49867	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:02.435914040 CEST	49867	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:02.435945988 CEST	443	49868	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:02.435980082 CEST	443	49867	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:02.436747074 CEST	49868	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:02.436909914 CEST	49867	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:02.436927080 CEST	443	49868	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:02.436939955 CEST	443	49867	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:02.436966896 CEST	49868	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:02.484504938 CEST	443	49868	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:02.487545967 CEST	49868	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:02.620765924 CEST	443	49867	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:02.620794058 CEST	443	49867	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:02.620871067 CEST	49867	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:02.620876074 CEST	443	49867	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:02.620937109 CEST	49867	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:02.623059988 CEST	443	49868	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:02.623231888 CEST	443	49868	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:02.623316050 CEST	49868	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:02.639934063 CEST	49868	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:02.639957905 CEST	443	49868	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:02.640479088 CEST	49867	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:02.640503883 CEST	443	49867	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:02.718745947 CEST	49869	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:02.718794107 CEST	443	49869	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:02.718894958 CEST	49869	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:02.719131947 CEST	49869	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:02.719146013 CEST	443	49869	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:03.348668098 CEST	443	49869	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:03.348925114 CEST	49869	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:03.348943949 CEST	443	49869	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:03.349323034 CEST	443	49869	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:03.350027084 CEST	49869	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:03.350100040 CEST	443	49869	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:03.350441933 CEST	49869	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:03.392503977 CEST	443	49869	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:03.664726019 CEST	443	49869	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:03.664824963 CEST	443	49869	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:03.665108919 CEST	49869	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:03.665827990 CEST	49869	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:03.665846109 CEST	443	49869	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:05.742288113 CEST	443	49837	156.146.33.138	192.168.2.9
Aug 1, 2024 08:40:05.742484093 CEST	443	49837	156.146.33.138	192.168.2.9
Aug 1, 2024 08:40:05.742543936 CEST	49837	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:40:06.016972065 CEST	443	49836	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:06.017066002 CEST	443	49836	87.230.98.78	192.168.2.9
Aug 1, 2024 08:40:06.017191887 CEST	49836	443	192.168.2.9	87.230.98.78
Aug 1, 2024 08:40:07.424937010 CEST	49732	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:40:07.430093050 CEST	80	49732	208.91.196.253	192.168.2.9
Aug 1, 2024 08:40:07.487641096 CEST	49837	443	192.168.2.9	156.146.33.138
Aug 1, 2024 08:40:07.487684011 CEST	443	49837	156.146.33.138	192.168.2.9
Aug 1, 2024 08:40:07.612051964 CEST	49739	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:40:07.617175102 CEST	80	49739	208.91.196.253	192.168.2.9
Aug 1, 2024 08:40:07.627904892 CEST	49736	80	192.168.2.9	208.91.196.253
Aug 1, 2024 08:40:07.633049965 CEST	80	49736	208.91.196.253	192.168.2.9
Aug 1, 2024 08:40:07.634892941 CEST	443	49865	142.250.186.100	192.168.2.9
Aug 1, 2024 08:40:07.634967089 CEST	443	49865	142.250.186.100	192.168.2.9
Aug 1, 2024 08:40:07.635057926 CEST	49865	443	192.168.2.9	142.250.186.100
Aug 1, 2024 08:40:09.084398031 CEST	49865	443	192.168.2.9	142.250.186.100
Aug 1, 2024 08:40:09.084433079 CEST	443	49865	142.250.186.100	192.168.2.9

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 1, 2024 08:38:52.887080908 CEST	53	52172	1.1.1.1	192.168.2.9
Aug 1, 2024 08:38:52.887821913 CEST	53	64049	1.1.1.1	192.168.2.9
Aug 1, 2024 08:38:53.859683037 CEST	53	60144	1.1.1.1	192.168.2.9
Aug 1, 2024 08:38:53.992616892 CEST	55634	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:38:53.992777109 CEST	58763	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:38:54.180579901 CEST	53	58763	1.1.1.1	192.168.2.9
Aug 1, 2024 08:38:54.199728012 CEST	53	55634	1.1.1.1	192.168.2.9
Aug 1, 2024 08:38:54.737124920 CEST	53432	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:38:54.737330914 CEST	52436	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:38:54.745153904 CEST	53	53432	1.1.1.1	192.168.2.9
Aug 1, 2024 08:38:54.746005058 CEST	53	52436	1.1.1.1	192.168.2.9
Aug 1, 2024 08:38:54.963294983 CEST	60361	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:38:54.966831923 CEST	57745	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:38:55.065198898 CEST	53	57745	1.1.1.1	192.168.2.9
Aug 1, 2024 08:38:55.151778936 CEST	53	60361	1.1.1.1	192.168.2.9
Aug 1, 2024 08:38:56.202370882 CEST	61859	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:38:56.202949047 CEST	49487	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:38:56.210231066 CEST	53	49487	1.1.1.1	192.168.2.9
Aug 1, 2024 08:38:56.210458040 CEST	53	61859	1.1.1.1	192.168.2.9
Aug 1, 2024 08:38:56.995738029 CEST	49481	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:38:56.996112108 CEST	56110	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:38:57.003151894 CEST	53	49481	1.1.1.1	192.168.2.9
Aug 1, 2024 08:38:57.003223896 CEST	53	56110	1.1.1.1	192.168.2.9
Aug 1, 2024 08:38:57.267838001 CEST	60234	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:38:57.268351078 CEST	61147	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:38:57.456927061 CEST	53	61147	1.1.1.1	192.168.2.9
Aug 1, 2024 08:38:57.474817038 CEST	53	60234	1.1.1.1	192.168.2.9
Aug 1, 2024 08:38:59.244627953 CEST	59882	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:38:59.245253086 CEST	64165	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:38:59.246896029 CEST	51609	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:38:59.247365952 CEST	50366	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:38:59.251882076 CEST	53	59882	1.1.1.1	192.168.2.9
Aug 1, 2024 08:38:59.252728939 CEST	53	64165	1.1.1.1	192.168.2.9
Aug 1, 2024 08:38:59.254291058 CEST	53	51609	1.1.1.1	192.168.2.9
Aug 1, 2024 08:38:59.255394936 CEST	53	50366	1.1.1.1	192.168.2.9
Aug 1, 2024 08:38:59.291692972 CEST	55895	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:38:59.292186022 CEST	52219	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:38:59.310504913 CEST	53	55895	1.1.1.1	192.168.2.9
Aug 1, 2024 08:38:59.324142933 CEST	53	52219	1.1.1.1	192.168.2.9
Aug 1, 2024 08:38:59.355274916 CEST	51016	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:38:59.355811119 CEST	55384	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:38:59.363318920 CEST	53	51016	1.1.1.1	192.168.2.9
Aug 1, 2024 08:38:59.564743042 CEST	53	55384	1.1.1.1	192.168.2.9
Aug 1, 2024 08:38:59.732738972 CEST	63603	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:38:59.733498096 CEST	53092	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:38:59.740118980 CEST	53	63603	1.1.1.1	192.168.2.9
Aug 1, 2024 08:38:59.743910074 CEST	53	53092	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:00.684345007 CEST	55547	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:00.684509993 CEST	61677	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:00.702791929 CEST	53	61677	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:00.719506025 CEST	53	55547	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:01.615456104 CEST	49586	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:01.615580082 CEST	61998	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:01.616117001 CEST	55399	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:01.616363049 CEST	59978	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:01.623862982 CEST	53	61998	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:01.624310017 CEST	53	55399	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:01.624377966 CEST	53	49586	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:01.624528885 CEST	53	59978	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:11.038934946 CEST	53	57483	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:19.834578037 CEST	29769	19017	192.168.2.9	192.168.2.1
Aug 1, 2024 08:39:20.354475975 CEST	49634	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:20.354794025 CEST	57036	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:20.361829996 CEST	53	57036	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:20.362689972 CEST	53	49634	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:20.389004946 CEST	57289	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:20.389178991 CEST	56350	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:20.397566080 CEST	53	57289	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:20.398016930 CEST	53	56350	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:21.429160118 CEST	50841	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:21.429425955 CEST	59849	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:21.437974930 CEST	53	50841	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:21.438936949 CEST	53	59849	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:22.508896112 CEST	63633	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:22.509150028 CEST	50851	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:22.521583080 CEST	53	50851	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:22.521595955 CEST	53	63633	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:24.057205915 CEST	59367	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:24.057396889 CEST	49238	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:24.067687988 CEST	53	49238	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:24.068387032 CEST	53	59367	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:24.219279051 CEST	54013	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:24.219423056 CEST	58598	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:24.226718903 CEST	53	58598	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:24.226952076 CEST	53	54013	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:26.338788033 CEST	65254	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:26.339138985 CEST	53633	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:26.364525080 CEST	53	53633	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:27.193826914 CEST	55602	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:27.195303917 CEST	60035	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:27.203022003 CEST	53	60035	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:29.370712996 CEST	57536	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:29.374464035 CEST	61110	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:29.381850958 CEST	58618	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:29.382020950 CEST	51024	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:29.388739109 CEST	53	58618	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:29.389303923 CEST	53	51024	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:29.400845051 CEST	53	61110	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:30.369391918 CEST	53376	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:30.369726896 CEST	61408	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:30.372786045 CEST	57743	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:30.372965097 CEST	64681	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:30.376197100 CEST	53	53376	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:30.376494884 CEST	53	61408	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:30.380270958 CEST	53	57743	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:30.380973101 CEST	53	64681	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:30.629456043 CEST	53	49532	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:33.648525000 CEST	20290	29007	192.168.2.9	192.168.2.1
Aug 1, 2024 08:39:36.353908062 CEST	58557	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:36.354288101 CEST	65303	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:36.592006922 CEST	53	58557	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:36.605436087 CEST	53	65303	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:37.479779005 CEST	64081	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:37.479955912 CEST	61976	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:37.486939907 CEST	53	64081	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:37.498357058 CEST	53	61976	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:40.261611938 CEST	138	138	192.168.2.9	192.168.2.255
Aug 1, 2024 08:39:41.420850992 CEST	55161	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:41.421046972 CEST	51815	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:41.471452951 CEST	53	51815	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:42.312691927 CEST	61300	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:42.312966108 CEST	51323	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:42.333899975 CEST	53	51323	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:43.529387951 CEST	49286	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:43.529536009 CEST	58247	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:43.536218882 CEST	53	49286	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:43.537071943 CEST	53	58247	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:44.320436954 CEST	65278	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:44.322290897 CEST	50414	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:44.327208042 CEST	53	65278	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:44.329385996 CEST	53	50414	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:44.399424076 CEST	56855	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:44.399728060 CEST	52896	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:44.412512064 CEST	61757	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:44.412739038 CEST	58924	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:44.421327114 CEST	53	58924	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:44.423245907 CEST	53	61757	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:44.453134060 CEST	53	52896	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:45.131843090 CEST	61447	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:45.132069111 CEST	63138	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:45.139044046 CEST	53	61447	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:45.140111923 CEST	53	63138	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:47.447271109 CEST	20346	29769	192.168.2.9	192.168.2.1
Aug 1, 2024 08:39:50.201822042 CEST	55514	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:50.202090979 CEST	59862	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:50.220568895 CEST	53	55514	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:50.229659081 CEST	53	59862	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:51.123513937 CEST	52680	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:51.123713017 CEST	61583	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:51.154968023 CEST	53	52680	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:51.164202929 CEST	53	61583	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:52.431127071 CEST	53	57037	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:52.644891977 CEST	18006	22113	192.168.2.9	192.168.2.1
Aug 1, 2024 08:39:53.339265108 CEST	53	56073	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:54.271754026 CEST	50510	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:54.272033930 CEST	58659	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:54.281130075 CEST	53	50510	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:54.292956114 CEST	53	58659	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:54.866189003 CEST	64667	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:54.866324902 CEST	59586	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:39:54.873725891 CEST	53	59586	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:54.889627934 CEST	53	64667	1.1.1.1	192.168.2.9
Aug 1, 2024 08:39:58.066895962 CEST	18725	12870	192.168.2.9	192.168.2.1
Aug 1, 2024 08:40:00.331711054 CEST	50221	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:40:00.331851959 CEST	49512	53	192.168.2.9	1.1.1.1
Aug 1, 2024 08:40:00.339359045 CEST	53	50221	1.1.1.1	192.168.2.9
Aug 1, 2024 08:40:00.339572906 CEST	53	49512	1.1.1.1	192.168.2.9

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Aug 1, 2024 08:38:59.564821005 CEST	192.168.2.9	1.1.1.1	c221	(Port unreachable)	Destination Unreachable
Aug 1, 2024 08:39:29.400922060 CEST	192.168.2.9	1.1.1.1	c257	(Port unreachable)	Destination Unreachable
Aug 1, 2024 08:39:37.498430967 CEST	192.168.2.9	1.1.1.1	c232	(Port unreachable)	Destination Unreachable
Aug 1, 2024 08:39:41.471517086 CEST	192.168.2.9	1.1.1.1	c25d	(Port unreachable)	Destination Unreachable
Aug 1, 2024 08:39:50.229736090 CEST	192.168.2.9	1.1.1.1	c232	(Port unreachable)	Destination Unreachable
Aug 1, 2024 08:39:54.293030024 CEST	192.168.2.9	1.1.1.1	c232	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 1, 2024 08:38:53.992616892 CEST	192.168.2.9	1.1.1.1	0x5965	Standard query (0)	rotect.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:53.992777109 CEST	192.168.2.9	1.1.1.1	0xb017	Standard query (0)	rotect.com	65	IN (0x0001)	false
Aug 1, 2024 08:38:54.737124920 CEST	192.168.2.9	1.1.1.1	0x6fb2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:54.737330914 CEST	192.168.2.9	1.1.1.1	0x1c03	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 1, 2024 08:38:54.963294983 CEST	192.168.2.9	1.1.1.1	0x6e35	Standard query (0)	rotect.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:54.966831923 CEST	192.168.2.9	1.1.1.1	0xd31e	Standard query (0)	rotect.com	65	IN (0x0001)	false
Aug 1, 2024 08:38:56.202370882 CEST	192.168.2.9	1.1.1.1	0x3034	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:56.202949047 CEST	192.168.2.9	1.1.1.1	0x7d23	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Aug 1, 2024 08:38:56.995738029 CEST	192.168.2.9	1.1.1.1	0x5527	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:56.996112108 CEST	192.168.2.9	1.1.1.1	0xb4e4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 1, 2024 08:38:57.267838001 CEST	192.168.2.9	1.1.1.1	0xea9f	Standard query (0)	ww01.rotect.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:57.268351078 CEST	192.168.2.9	1.1.1.1	0x4a6a	Standard query (0)	ww01.rotect.com	65	IN (0x0001)	false
Aug 1, 2024 08:38:59.244627953 CEST	192.168.2.9	1.1.1.1	0xcb1e	Standard query (0)	delivery.consentmanager.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:59.245253086 CEST	192.168.2.9	1.1.1.1	0x2808	Standard query (0)	delivery.consentmanager.net	65	IN (0x0001)	false
Aug 1, 2024 08:38:59.246896029 CEST	192.168.2.9	1.1.1.1	0x2c6b	Standard query (0)	cdn.consentmanager.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:59.247365952 CEST	192.168.2.9	1.1.1.1	0x115e	Standard query (0)	cdn.consentmanager.net	65	IN (0x0001)	false
Aug 1, 2024 08:38:59.291692972 CEST	192.168.2.9	1.1.1.1	0x8850	Standard query (0)	i1.cdn-image.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:59.292186022 CEST	192.168.2.9	1.1.1.1	0xc583	Standard query (0)	i1.cdn-image.com	65	IN (0x0001)	false
Aug 1, 2024 08:38:59.355274916 CEST	192.168.2.9	1.1.1.1	0xe0f0	Standard query (0)	ww01.rotect.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:59.355811119 CEST	192.168.2.9	1.1.1.1	0xbb2d	Standard query (0)	ww01.rotect.com	65	IN (0x0001)	false
Aug 1, 2024 08:38:59.732738972 CEST	192.168.2.9	1.1.1.1	0xd89a	Standard query (0)	a.delivery.consentmanager.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:59.733498096 CEST	192.168.2.9	1.1.1.1	0x56ad	Standard query (0)	a.delivery.consentmanager.net	65	IN (0x0001)	false
Aug 1, 2024 08:39:00.684345007 CEST	192.168.2.9	1.1.1.1	0x5bbe	Standard query (0)	i1.cdn-image.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:00.684509993 CEST	192.168.2.9	1.1.1.1	0x73fe	Standard query (0)	i1.cdn-image.com	65	IN (0x0001)	false
Aug 1, 2024 08:39:01.615456104 CEST	192.168.2.9	1.1.1.1	0x407e	Standard query (0)	a.delivery.consentmanager.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:01.615580082 CEST	192.168.2.9	1.1.1.1	0x7706	Standard query (0)	a.delivery.consentmanager.net	65	IN (0x0001)	false
Aug 1, 2024 08:39:01.616117001 CEST	192.168.2.9	1.1.1.1	0xc4c6	Standard query (0)	cdn.consentmanager.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:01.616363049 CEST	192.168.2.9	1.1.1.1	0x528	Standard query (0)	cdn.consentmanager.net	65	IN (0x0001)	false
Aug 1, 2024 08:39:20.354475975 CEST	192.168.2.9	1.1.1.1	0xecaf	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:20.354794025 CEST	192.168.2.9	1.1.1.1	0x2bb8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 1, 2024 08:39:20.389004946 CEST	192.168.2.9	1.1.1.1	0x3335	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:20.389178991 CEST	192.168.2.9	1.1.1.1	0x1285	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Aug 1, 2024 08:39:21.429160118 CEST	192.168.2.9	1.1.1.1	0x7af1	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:21.429425955 CEST	192.168.2.9	1.1.1.1	0x5f48	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Aug 1, 2024 08:39:22.508896112 CEST	192.168.2.9	1.1.1.1	0xa088	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:22.509150028 CEST	192.168.2.9	1.1.1.1	0xb19b	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Aug 1, 2024 08:39:24.057205915 CEST	192.168.2.9	1.1.1.1	0x8297	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:24.057396889 CEST	192.168.2.9	1.1.1.1	0x8c56	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Aug 1, 2024 08:39:24.219279051 CEST	192.168.2.9	1.1.1.1	0x65d6	Standard query (0)	r.search.yahoo.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:24.219423056 CEST	192.168.2.9	1.1.1.1	0x12a7	Standard query (0)	r.search.yahoo.com	65	IN (0x0001)	false
Aug 1, 2024 08:39:26.338788033 CEST	192.168.2.9	1.1.1.1	0x2800	Standard query (0)	www.justanswer.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:26.339138985 CEST	192.168.2.9	1.1.1.1	0x366d	Standard query (0)	www.justanswer.com	65	IN (0x0001)	false
Aug 1, 2024 08:39:27.193826914 CEST	192.168.2.9	1.1.1.1	0x3a90	Standard query (0)	www.justanswer.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:27.195303917 CEST	192.168.2.9	1.1.1.1	0x7eb6	Standard query (0)	www.justanswer.com	65	IN (0x0001)	false
Aug 1, 2024 08:39:29.370712996 CEST	192.168.2.9	1.1.1.1	0xdcd9	Standard query (0)	www.justanswer.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:29.374464035 CEST	192.168.2.9	1.1.1.1	0xc1d3	Standard query (0)	www.justanswer.com	65	IN (0x0001)	false
Aug 1, 2024 08:39:29.381850958 CEST	192.168.2.9	1.1.1.1	0xfc3f	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:29.382020950 CEST	192.168.2.9	1.1.1.1	0xdadf	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Aug 1, 2024 08:39:30.369391918 CEST	192.168.2.9	1.1.1.1	0x64b7	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:30.369726896 CEST	192.168.2.9	1.1.1.1	0x7ebb	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Aug 1, 2024 08:39:30.372786045 CEST	192.168.2.9	1.1.1.1	0x6a62	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:30.372965097 CEST	192.168.2.9	1.1.1.1	0x410b	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Aug 1, 2024 08:39:36.353908062 CEST	192.168.2.9	1.1.1.1	0x7867	Standard query (0)	i4.cdn-image.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:36.354288101 CEST	192.168.2.9	1.1.1.1	0xf1c3	Standard query (0)	i4.cdn-image.com	65	IN (0x0001)	false
Aug 1, 2024 08:39:37.479779005 CEST	192.168.2.9	1.1.1.1	0xc8d8	Standard query (0)	i4.cdn-image.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:37.479955912 CEST	192.168.2.9	1.1.1.1	0xb901	Standard query (0)	i4.cdn-image.com	65	IN (0x0001)	false
Aug 1, 2024 08:39:41.420850992 CEST	192.168.2.9	1.1.1.1	0xfd8c	Standard query (0)	www.everyjobforme.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:41.421046972 CEST	192.168.2.9	1.1.1.1	0xa368	Standard query (0)	www.everyjobforme.com	65	IN (0x0001)	false
Aug 1, 2024 08:39:42.312691927 CEST	192.168.2.9	1.1.1.1	0x4697	Standard query (0)	www.everyjobforme.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:42.312966108 CEST	192.168.2.9	1.1.1.1	0x2bbe	Standard query (0)	www.everyjobforme.com	65	IN (0x0001)	false
Aug 1, 2024 08:39:43.529387951 CEST	192.168.2.9	1.1.1.1	0x3d67	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:43.529536009 CEST	192.168.2.9	1.1.1.1	0x6bff	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Aug 1, 2024 08:39:44.320436954 CEST	192.168.2.9	1.1.1.1	0x8ce6	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:44.322290897 CEST	192.168.2.9	1.1.1.1	0xc262	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Aug 1, 2024 08:39:44.399424076 CEST	192.168.2.9	1.1.1.1	0x582f	Standard query (0)	www.everyjobforme.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:44.399728060 CEST	192.168.2.9	1.1.1.1	0x1843	Standard query (0)	www.everyjobforme.com	65	IN (0x0001)	false
Aug 1, 2024 08:39:44.412512064 CEST	192.168.2.9	1.1.1.1	0x4216	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:44.412739038 CEST	192.168.2.9	1.1.1.1	0x74a8	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Aug 1, 2024 08:39:45.131843090 CEST	192.168.2.9	1.1.1.1	0x51b3	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:45.132069111 CEST	192.168.2.9	1.1.1.1	0x74f1	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Aug 1, 2024 08:39:50.201822042 CEST	192.168.2.9	1.1.1.1	0xb678	Standard query (0)	i3.cdn-image.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:50.202090979 CEST	192.168.2.9	1.1.1.1	0xa0cb	Standard query (0)	i3.cdn-image.com	65	IN (0x0001)	false
Aug 1, 2024 08:39:51.123513937 CEST	192.168.2.9	1.1.1.1	0x79ff	Standard query (0)	i3.cdn-image.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:51.123713017 CEST	192.168.2.9	1.1.1.1	0xd46e	Standard query (0)	i3.cdn-image.com	65	IN (0x0001)	false
Aug 1, 2024 08:39:54.271754026 CEST	192.168.2.9	1.1.1.1	0x64b2	Standard query (0)	i2.cdn-image.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:54.272033930 CEST	192.168.2.9	1.1.1.1	0x4fee	Standard query (0)	i2.cdn-image.com	65	IN (0x0001)	false
Aug 1, 2024 08:39:54.866189003 CEST	192.168.2.9	1.1.1.1	0xa7b3	Standard query (0)	i2.cdn-image.com	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:54.866324902 CEST	192.168.2.9	1.1.1.1	0x5b25	Standard query (0)	i2.cdn-image.com	65	IN (0x0001)	false
Aug 1, 2024 08:40:00.331711054 CEST	192.168.2.9	1.1.1.1	0x8f2b	Standard query (0)	cdn.consentmanager.net	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:40:00.331851959 CEST	192.168.2.9	1.1.1.1	0x2cb2	Standard query (0)	cdn.consentmanager.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 1, 2024 08:38:54.199728012 CEST	1.1.1.1	192.168.2.9	0x5965	No error (0)	rotect.com		199.59.243.226	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:54.745153904 CEST	1.1.1.1	192.168.2.9	0x6fb2	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:54.746005058 CEST	1.1.1.1	192.168.2.9	0x1c03	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 1, 2024 08:38:55.151778936 CEST	1.1.1.1	192.168.2.9	0x6e35	No error (0)	rotect.com		199.59.243.226	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:56.210458040 CEST	1.1.1.1	192.168.2.9	0x3034	No error (0)	syndicatedsearch.goog		142.250.185.174	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:57.003151894 CEST	1.1.1.1	192.168.2.9	0x5527	No error (0)	www.google.com		142.250.186.100	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:57.003223896 CEST	1.1.1.1	192.168.2.9	0xb4e4	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 1, 2024 08:38:57.474817038 CEST	1.1.1.1	192.168.2.9	0xea9f	No error (0)	ww01.rotect.com		199.191.50.153	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:59.251882076 CEST	1.1.1.1	192.168.2.9	0xcb1e	No error (0)	delivery.consentmanager.net		87.230.98.78	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:59.254291058 CEST	1.1.1.1	192.168.2.9	0x2c6b	No error (0)	cdn.consentmanager.net	1376624012.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:38:59.254291058 CEST	1.1.1.1	192.168.2.9	0x2c6b	No error (0)	1376624012.rsc.cdn77.org		156.146.33.138	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:59.254291058 CEST	1.1.1.1	192.168.2.9	0x2c6b	No error (0)	1376624012.rsc.cdn77.org		138.199.37.38	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:59.254291058 CEST	1.1.1.1	192.168.2.9	0x2c6b	No error (0)	1376624012.rsc.cdn77.org		195.181.175.40	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:59.254291058 CEST	1.1.1.1	192.168.2.9	0x2c6b	No error (0)	1376624012.rsc.cdn77.org		156.146.33.15	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:59.254291058 CEST	1.1.1.1	192.168.2.9	0x2c6b	No error (0)	1376624012.rsc.cdn77.org		138.199.37.25	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:59.254291058 CEST	1.1.1.1	192.168.2.9	0x2c6b	No error (0)	1376624012.rsc.cdn77.org		212.102.56.178	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:59.254291058 CEST	1.1.1.1	192.168.2.9	0x2c6b	No error (0)	1376624012.rsc.cdn77.org		138.199.37.41	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:59.254291058 CEST	1.1.1.1	192.168.2.9	0x2c6b	No error (0)	1376624012.rsc.cdn77.org		195.181.170.19	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:59.255394936 CEST	1.1.1.1	192.168.2.9	0x115e	No error (0)	cdn.consentmanager.net	1376624012.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:38:59.310504913 CEST	1.1.1.1	192.168.2.9	0x8850	No error (0)	i1.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:59.363318920 CEST	1.1.1.1	192.168.2.9	0xe0f0	No error (0)	ww01.rotect.com		199.191.50.153	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:38:59.740118980 CEST	1.1.1.1	192.168.2.9	0xd89a	No error (0)	a.delivery.consentmanager.net		87.230.98.78	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:00.719506025 CEST	1.1.1.1	192.168.2.9	0x5bbe	No error (0)	i1.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:01.624310017 CEST	1.1.1.1	192.168.2.9	0xc4c6	No error (0)	cdn.consentmanager.net	1376624012.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:39:01.624310017 CEST	1.1.1.1	192.168.2.9	0xc4c6	No error (0)	1376624012.rsc.cdn77.org		138.199.37.40	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:01.624310017 CEST	1.1.1.1	192.168.2.9	0xc4c6	No error (0)	1376624012.rsc.cdn77.org		156.146.33.14	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:01.624310017 CEST	1.1.1.1	192.168.2.9	0xc4c6	No error (0)	1376624012.rsc.cdn77.org		195.181.175.41	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:01.624310017 CEST	1.1.1.1	192.168.2.9	0xc4c6	No error (0)	1376624012.rsc.cdn77.org		195.181.170.19	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:01.624310017 CEST	1.1.1.1	192.168.2.9	0xc4c6	No error (0)	1376624012.rsc.cdn77.org		212.102.56.178	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:01.624310017 CEST	1.1.1.1	192.168.2.9	0xc4c6	No error (0)	1376624012.rsc.cdn77.org		156.146.33.138	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:01.624310017 CEST	1.1.1.1	192.168.2.9	0xc4c6	No error (0)	1376624012.rsc.cdn77.org		138.199.37.25	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:01.624310017 CEST	1.1.1.1	192.168.2.9	0xc4c6	No error (0)	1376624012.rsc.cdn77.org		138.199.37.38	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:01.624377966 CEST	1.1.1.1	192.168.2.9	0x407e	No error (0)	a.delivery.consentmanager.net		87.230.98.78	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:01.624528885 CEST	1.1.1.1	192.168.2.9	0x528	No error (0)	cdn.consentmanager.net	1376624012.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:39:06.216155052 CEST	1.1.1.1	192.168.2.9	0x6588	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:39:06.216155052 CEST	1.1.1.1	192.168.2.9	0x6588	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:19.911710024 CEST	1.1.1.1	192.168.2.9	0x2cf7	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:39:19.911710024 CEST	1.1.1.1	192.168.2.9	0x2cf7	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:20.361829996 CEST	1.1.1.1	192.168.2.9	0x2bb8	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 1, 2024 08:39:20.362689972 CEST	1.1.1.1	192.168.2.9	0xecaf	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:20.397566080 CEST	1.1.1.1	192.168.2.9	0x3335	No error (0)	syndicatedsearch.goog		142.250.184.238	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:21.437974930 CEST	1.1.1.1	192.168.2.9	0x7af1	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:39:21.437974930 CEST	1.1.1.1	192.168.2.9	0x7af1	No error (0)	googlehosted.l.googleusercontent.com		216.58.206.33	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:21.438936949 CEST	1.1.1.1	192.168.2.9	0x5f48	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:39:22.521583080 CEST	1.1.1.1	192.168.2.9	0xb19b	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:39:22.521595955 CEST	1.1.1.1	192.168.2.9	0xa088	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:39:22.521595955 CEST	1.1.1.1	192.168.2.9	0xa088	No error (0)	googlehosted.l.googleusercontent.com		142.250.185.193	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:24.068387032 CEST	1.1.1.1	192.168.2.9	0x8297	No error (0)	syndicatedsearch.goog		142.250.185.206	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:24.226718903 CEST	1.1.1.1	192.168.2.9	0x12a7	No error (0)	r.search.yahoo.com	ds-global3.l7.search.ystg1.b.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:39:24.226952076 CEST	1.1.1.1	192.168.2.9	0x65d6	No error (0)	r.search.yahoo.com	ds-global3.l7.search.ystg1.b.yahoo.com		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:39:24.226952076 CEST	1.1.1.1	192.168.2.9	0x65d6	No error (0)	ds-global3.l7.search.ystg1.b.yahoo.com		212.82.100.137	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:26.364525080 CEST	1.1.1.1	192.168.2.9	0x366d	No error (0)	www.justanswer.com	www.justanswer.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:39:26.365468025 CEST	1.1.1.1	192.168.2.9	0x2800	No error (0)	www.justanswer.com	www.justanswer.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:39:27.203022003 CEST	1.1.1.1	192.168.2.9	0x7eb6	No error (0)	www.justanswer.com	www.justanswer.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:39:27.219705105 CEST	1.1.1.1	192.168.2.9	0x3a90	No error (0)	www.justanswer.com	www.justanswer.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:39:29.378515005 CEST	1.1.1.1	192.168.2.9	0xdcd9	No error (0)	www.justanswer.com	www.justanswer.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:39:29.388739109 CEST	1.1.1.1	192.168.2.9	0xfc3f	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:29.388739109 CEST	1.1.1.1	192.168.2.9	0xfc3f	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:29.389303923 CEST	1.1.1.1	192.168.2.9	0xdadf	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Aug 1, 2024 08:39:29.400845051 CEST	1.1.1.1	192.168.2.9	0xc1d3	No error (0)	www.justanswer.com	www.justanswer.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:39:30.376197100 CEST	1.1.1.1	192.168.2.9	0x64b7	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:30.376197100 CEST	1.1.1.1	192.168.2.9	0x64b7	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:30.376494884 CEST	1.1.1.1	192.168.2.9	0x7ebb	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Aug 1, 2024 08:39:30.380270958 CEST	1.1.1.1	192.168.2.9	0x6a62	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:30.380270958 CEST	1.1.1.1	192.168.2.9	0x6a62	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:30.380973101 CEST	1.1.1.1	192.168.2.9	0x410b	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Aug 1, 2024 08:39:36.592006922 CEST	1.1.1.1	192.168.2.9	0x7867	No error (0)	i4.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:37.486939907 CEST	1.1.1.1	192.168.2.9	0xc8d8	No error (0)	i4.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:41.440752029 CEST	1.1.1.1	192.168.2.9	0xfd8c	No error (0)	www.everyjobforme.com	www.everyjobforme.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:39:41.471452951 CEST	1.1.1.1	192.168.2.9	0xa368	No error (0)	www.everyjobforme.com	www.everyjobforme.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:39:42.332026005 CEST	1.1.1.1	192.168.2.9	0x4697	No error (0)	www.everyjobforme.com	www.everyjobforme.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:39:42.333899975 CEST	1.1.1.1	192.168.2.9	0x2bbe	No error (0)	www.everyjobforme.com	www.everyjobforme.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:39:43.536218882 CEST	1.1.1.1	192.168.2.9	0x3d67	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:43.536218882 CEST	1.1.1.1	192.168.2.9	0x3d67	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:43.537071943 CEST	1.1.1.1	192.168.2.9	0x6bff	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Aug 1, 2024 08:39:44.327208042 CEST	1.1.1.1	192.168.2.9	0x8ce6	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:44.327208042 CEST	1.1.1.1	192.168.2.9	0x8ce6	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:44.329385996 CEST	1.1.1.1	192.168.2.9	0xc262	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Aug 1, 2024 08:39:44.421327114 CEST	1.1.1.1	192.168.2.9	0x74a8	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Aug 1, 2024 08:39:44.423245907 CEST	1.1.1.1	192.168.2.9	0x4216	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:44.423245907 CEST	1.1.1.1	192.168.2.9	0x4216	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:44.450915098 CEST	1.1.1.1	192.168.2.9	0x582f	No error (0)	www.everyjobforme.com	www.everyjobforme.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:39:44.453134060 CEST	1.1.1.1	192.168.2.9	0x1843	No error (0)	www.everyjobforme.com	www.everyjobforme.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:39:45.139044046 CEST	1.1.1.1	192.168.2.9	0x51b3	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:45.139044046 CEST	1.1.1.1	192.168.2.9	0x51b3	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:45.140111923 CEST	1.1.1.1	192.168.2.9	0x74f1	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Aug 1, 2024 08:39:45.684504986 CEST	1.1.1.1	192.168.2.9	0x74ca	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:39:45.684504986 CEST	1.1.1.1	192.168.2.9	0x74ca	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:50.220568895 CEST	1.1.1.1	192.168.2.9	0xb678	No error (0)	i3.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:51.154968023 CEST	1.1.1.1	192.168.2.9	0x79ff	No error (0)	i3.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:54.281130075 CEST	1.1.1.1	192.168.2.9	0x64b2	No error (0)	i2.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:39:54.889627934 CEST	1.1.1.1	192.168.2.9	0xa7b3	No error (0)	i2.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:40:00.339359045 CEST	1.1.1.1	192.168.2.9	0x8f2b	No error (0)	cdn.consentmanager.net	1376624012.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:40:00.339359045 CEST	1.1.1.1	192.168.2.9	0x8f2b	No error (0)	1376624012.rsc.cdn77.org		212.102.56.178	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:40:00.339359045 CEST	1.1.1.1	192.168.2.9	0x8f2b	No error (0)	1376624012.rsc.cdn77.org		156.146.33.138	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:40:00.339359045 CEST	1.1.1.1	192.168.2.9	0x8f2b	No error (0)	1376624012.rsc.cdn77.org		156.146.33.15	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:40:00.339359045 CEST	1.1.1.1	192.168.2.9	0x8f2b	No error (0)	1376624012.rsc.cdn77.org		138.199.37.35	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:40:00.339359045 CEST	1.1.1.1	192.168.2.9	0x8f2b	No error (0)	1376624012.rsc.cdn77.org		138.199.37.37	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:40:00.339359045 CEST	1.1.1.1	192.168.2.9	0x8f2b	No error (0)	1376624012.rsc.cdn77.org		195.181.170.18	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:40:00.339359045 CEST	1.1.1.1	192.168.2.9	0x8f2b	No error (0)	1376624012.rsc.cdn77.org		138.199.37.41	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:40:00.339359045 CEST	1.1.1.1	192.168.2.9	0x8f2b	No error (0)	1376624012.rsc.cdn77.org		195.181.175.41	A (IP address)	IN (0x0001)	false
Aug 1, 2024 08:40:00.339572906 CEST	1.1.1.1	192.168.2.9	0x2cb2	No error (0)	cdn.consentmanager.net	1376624012.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:40:05.983906984 CEST	1.1.1.1	192.168.2.9	0x7cf6	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 1, 2024 08:40:05.983906984 CEST	1.1.1.1	192.168.2.9	0x7cf6	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

rotect.com

www.google.com

syndicatedsearch.goog

ww01.rotect.com

cdn.consentmanager.net

a.delivery.consentmanager.net

r.search.yahoo.com

i1.cdn-image.com

i4.cdn-image.com

i3.cdn-image.com

i2.cdn-image.com

fs.microsoft.com

https:

afs.googleusercontent.com

challenges.cloudflare.com

static.cloudflareinsights.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.9	49712	199.59.243.226	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:38:54.206136942 CEST	425	OUT	GET / HTTP/1.1 Host: rotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:38:54.698668003 CEST	1236	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:38:54 GMT content-type: text/html; charset=utf-8 content-length: 1030 x-request-id: cf37f022-d980-4854-884d-1e3949811b21 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_Xo4hRf01dT6lohvqxst0RwyiJPG4+qjChNf8fCHwMOiN696Z0tMTEtxzPOjTNCdPuj04rpzzIW2NchZSR1BqYg== set-cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; expires=Thu, 01 Aug 2024 06:53:54 GMT; path=/ Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 58 6f 34 68 52 66 30 31 64 54 36 6c 6f 68 76 71 78 73 74 30 52 77 79 69 4a 50 47 34 2b 71 6a 43 68 4e 66 38 66 43 48 77 4d 4f 69 4e 36 39 36 5a 30 74 4d 54 45 74 78 7a 50 4f 6a 54 4e 43 64 50 75 6a 30 34 72 70 7a 7a 49 57 32 4e 63 68 5a 53 52 31 42 71 59 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_Xo4hRf01dT6lohvqxst0RwyiJPG4+qjChNf8fCHwMOiN696Z0tMTEtxzPOjTNCdPuj04rpzzIW2NchZSR1BqYg==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"> <link rel="pr
Aug 1, 2024 08:38:54.698702097 CEST	464	IN	Data Raw: 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 64 69 76 20 69 64 3d 22 74 61 72 67 65 Data Ascii: econnect" href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiY2YzN2YwMjItZDk4MC00ODU0LTg4NGQtMWUzOTQ5ODExYjIxIiwicGFnZV90aW1lIjoxNzIyNDk0MzM0LCJwYWdlX3VybCI6I
Aug 1, 2024 08:38:54.740226030 CEST	366	OUT	GET /bZehyVOgP.js HTTP/1.1 Host: rotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21
Aug 1, 2024 08:38:54.846787930 CEST	1236	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:38:54 GMT content-type: application/javascript; charset=utf-8 content-length: 33929 x-request-id: fa8a4860-eae2-4300-ad33-d704e63c1993 set-cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; expires=Thu, 01 Aug 2024 06:53:54 GMT Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 74 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 74 29 3a 74 28 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 76 65 72 73 69 6f 6e 3d 7b 7d 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 61 77 61 69 74 65 72 28 65 2c 74 2c 6e 2c 69 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 6e 7c 7c 28 6e 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 73 2c 61 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 74 72 79 7b 64 28 69 2e 6e [TRUNCATED] Data Ascii: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).version={})}(this,(function(exports){"use strict";function __awaiter(e,t,n,i){return new(n\|\|(n=Promise))((function(s,a){function o(e){try{d(i.next(e))}catch(e){a(e)}}function r(e){try{d(i.throw(e))}catch(e){a(e)}}function d(e){var t;e.done?s(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(o,r)}d((i=i.apply(e,t\|\|[])).next())}))}var Blocking;"function"==typeof SuppressedError&&SuppressedError,function(e){e.PENDING="pending",e.NONE="none",e.BLOCKED="blocked",e.ALLOWED="allowed"}(Blocking\|\|(Blocking={}));class Adblock{constructor(e){this.state=Blocking.PENDING,this._mocked=!1,e?(this.state=e,this._mocked=!0):this.state=Blocking.ALLOWED}inject(){return __awaiter(this,void 0,void 0,(function*(){}))}get isBlocked(){return this.
Aug 1, 2024 08:38:54.846821070 CEST	224	IN	Data Raw: 73 74 61 74 65 3d 3d 3d 42 6c 6f 63 6b 69 6e 67 2e 42 4c 4f 43 4b 45 44 7d 67 65 74 20 69 73 41 6c 6c 6f 77 65 64 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 61 74 65 3d 3d 3d 42 6c 6f 63 6b 69 6e 67 2e 41 4c 4c 4f 57 45 44 7d 74 6f 43 6f Data Ascii: state===Blocking.BLOCKED}get isAllowed(){return this.state===Blocking.ALLOWED}toContext(){return{user_has_ad_blocker:null,is_ad_blocked:null}}}const OBFUSCATING_BASE_64_PREFIX="UxFdVMwNFNwN0wzODEybV",encode=e=>OBFUSCATING_BA
Aug 1, 2024 08:38:54.847235918 CEST	1236	IN	Data Raw: 53 45 5f 36 34 5f 50 52 45 46 49 58 2b 62 74 6f 61 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 29 29 29 3b 66 75 6e 63 74 69 6f 6e 20 64 65 63 6f 64 65 Data Ascii: SE_64_PREFIX+btoa(unescape(encodeURIComponent(JSON.stringify(e))));function decode$1(e){return JSON.parse(decodeURIComponent(escape(atob(e.replace(OBFUSCATING_BASE_64_PREFIX,"")))))}var version="0.3.8";const APP_ENV="production",TRACKING_DOMAI
Aug 1, 2024 08:38:54.847279072 CEST	1236	IN	Data Raw: 65 74 75 72 6e 20 66 65 74 63 68 28 22 2f 5f 7a 63 22 2c 7b 6d 65 74 68 6f 64 3a 22 50 4f 53 54 22 2c 62 6f 64 79 3a 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 73 69 67 6e 61 74 75 72 65 3a 65 6e 63 6f 64 65 28 74 29 7d 29 2c 68 65 61 64 65 Data Ascii: eturn fetch("/_zc",{method:"POST",body:JSON.stringify({signature:encode(t)}),headers:{Accept:"application/json","Content-Type":"application/json"}}).then((e=>__awaiter(void 0,void 0,void 0,(function*(){try{return decode$1(yield e.text())}catch
Aug 1, 2024 08:38:54.847342014 CEST	1236	IN	Data Raw: 65 73 2d 62 6f 78 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 5c 6e 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 33 70 78 3b 5c 6e 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 Data Ascii: es-box {\n display: block;\n width: 100%;\n padding: 3px;\n text-align: center;\n text-decoration: none;\n color: #8EABC0;\n}\n\n#sales-box a {\n display: block;\n width: 100%;\n text-decoration: inherit;\n color: #8EABC0;\n cursor:
Aug 1, 2024 08:38:54.847359896 CEST	1236	IN	Data Raw: 3b 5c 6e 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 70 6b 2d 61 6e 69 6d 2d 32 20 30 2e 36 73 20 69 6e 66 69 6e 69 74 65 3b 5c 6e 7d 5c 6e 5c 6e 2e 70 6b 2d 6c 6f 61 64 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 34 29 20 7b 5c 6e 20 20 6c 65 Data Ascii: ;\n animation: pk-anim-2 0.6s infinite;\n}\n\n.pk-loader div:nth-child(4) {\n left: 56px;\n animation: pk-anim-1 0.6s infinite;\n animation-direction: reverse;\n}\n\n.pk-loader-text {\n position: fixed;\n font-size: 12px;\n right: 20px;
Aug 1, 2024 08:38:54.847502947 CEST	1236	IN	Data Raw: 74 61 22 29 3b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 29 2c 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6f 6e 74 65 6e 74 22 2c 60 53 65 65 20 72 65 6c 65 76 61 6e 74 20 63 Data Ascii: ta");t.setAttribute("name","description"),t.setAttribute("content",`See relevant content for ${e}`),document.getElementsByTagName("head")[0].appendChild(t)},this.domNode=document.querySelector(e)}get domIsReady(){return this._domIsReady}set do
Aug 1, 2024 08:38:54.847522974 CEST	1236	IN	Data Raw: 78 73 22 3e 5c 6e 20 20 20 20 20 20 20 20 50 61 67 65 20 6c 6f 61 64 69 6e 67 20 69 6e 20 24 7b 74 7d 20 73 65 63 6f 6e 64 73 2c 20 70 6c 65 61 73 65 20 77 61 69 74 2e 2e 2e 5c 6e 20 20 20 20 20 20 3c 2f 64 69 76 3e 5c 6e 20 20 20 20 60 29 7d 61 Data Ascii: xs">\n Page loading in ${t} seconds, please wait...\n </div>\n `)}adBlockMessage(){this.message("\n <h1>Ad block detected</h1>\n Please disable your ad blocker and reload the page.\n ")}errorParkingUnavailable(){thi
Aug 1, 2024 08:38:54.847539902 CEST	1236	IN	Data Raw: 28 74 68 69 73 2e 64 6f 6d 4e 6f 64 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 65 29 2c 74 68 69 73 2e 64 6f 6d 49 73 52 65 61 64 79 3d 21 30 29 3a 28 74 68 69 73 2e 64 6f 6d 49 73 52 65 61 64 79 3d 21 31 2c 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 Data Ascii: (this.domNode.innerHTML=e),this.domIsReady=!0):(this.domIsReady=!1,console.error("An error occurred when trying to render this page. DOM node not found."))}prerender(e){this.injectMetaDescription(e.domain),this.injectHTML(e.html)}template(e){v
Aug 1, 2024 08:38:54.847557068 CEST	1236	IN	Data Raw: 20 74 68 65 20 70 61 67 65 2e 22 3b 63 61 73 65 22 64 69 73 61 62 6c 65 64 5f 6d 72 22 3a 72 65 74 75 72 6e 60 3c 68 31 3e 49 6e 76 61 6c 69 64 20 55 52 4c 3c 2f 68 31 3e 20 52 65 66 65 72 72 61 6c 20 74 72 61 66 66 69 63 20 66 6f 72 20 24 7b 74 Data Ascii: the page.";case"disabled_mr":return`<h1>Invalid URL</h1> Referral traffic for ${this.domain} does not meet requirements.`;default:return`<h1>No sponsors</h1> ${this.domain} currently does not have any sponsors for you.`}}get trackingType(){sw
Aug 1, 2024 08:38:54.958014011 CEST	449	OUT	POST /_fd HTTP/1.1 Host: rotect.com Connection: keep-alive Content-Length: 0 Accept: application/json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Origin: http://rotect.com Referer: http://rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21
Aug 1, 2024 08:38:55.070063114 CEST	1236	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:38:54 GMT content-type: application/json; charset=utf-8 content-length: 5125 x-request-id: bbb5d197-043b-4980-b725-78f7d69f5f39 set-cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; expires=Thu, 01 Aug 2024 06:53:55 GMT Data Raw: 55 78 46 64 56 4d 77 4e 46 4e 77 4e 30 77 7a 4f 44 45 79 62 56 65 79 4a 69 62 47 39 6a 61 33 4d 69 4f 6c 74 37 49 6d 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 36 49 6e 4a 7a 49 69 77 69 62 6e 56 74 59 6d 56 79 49 6a 6f 7a 4c 43 4a 30 65 58 42 6c 49 6a 6f 69 63 6d 56 73 59 58 52 6c 5a 48 4e 6c 59 58 4a 6a 61 43 49 73 49 6e 56 70 54 33 42 30 61 57 31 70 65 6d 55 69 4f 6d 5a 68 62 48 4e 6c 66 53 78 37 49 6d 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 36 49 6d 46 6b 4c 54 45 69 4c 43 4a 75 64 57 31 69 5a 58 49 69 4f 6a 4d 73 49 6e 52 35 63 47 55 69 4f 69 4a 68 5a 48 4d 69 4c 43 4a 31 61 55 39 77 64 47 6c 74 61 58 70 6c 49 6a 70 6d 59 57 78 7a 5a 58 31 64 4c 43 4a 6a 59 57 35 75 62 33 52 51 59 58 4a 72 49 6a 6f 69 49 69 77 69 59 32 46 75 57 6d 56 79 62 30 4e 73 61 57 4e 72 49 6a 70 30 63 6e 56 6c 4c 43 4a 6b 62 32 31 68 61 57 35 4f 59 57 31 6c 49 6a 6f 69 63 6d 39 30 5a 57 4e 30 4c 6d 4e 76 62 53 49 73 49 6d 5a 6b 58 33 4e 6c 63 6e 5a 6c 63 69 49 36 49 6d 6c 77 4c 54 45 77 4c 54 49 77 4d 53 30 78 4e 69 30 31 4d [TRUNCATED] Data Ascii: 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
Aug 1, 2024 08:38:56.997143030 CEST	452	OUT	POST /_zc HTTP/1.1 Host: rotect.com Connection: keep-alive Content-Length: 5597 Accept: application/json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Origin: http://rotect.com Referer: http://rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21
Aug 1, 2024 08:38:57.177325010 CEST	662	IN	HTTP/1.1 200 OK server: openresty date: Thu, 01 Aug 2024 06:38:56 GMT content-type: text/html; charset=UTF-8 content-encoding: gzip content-length: 179 cache-control: no-cache x-version: 2.120.3 expires: Thu, 01 Jan 1970 00:00:01 GMT cache-control: no-store, must-revalidate cache-control: post-check=0, pre-check=0 pragma: no-cache set-cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; expires=Thu, 01 Aug 2024 06:53:57 GMT; Max-Age=900; path=/; httponly Data Raw: 1f 8b 08 00 00 00 00 00 04 03 1d cc bd 0e 82 30 14 40 e1 57 2a a0 26 0e 2e 08 94 36 dc 12 15 0b 65 a3 62 e4 42 41 13 30 05 9e de 9f ed 2c df b9 ce 51 2d c1 8a 48 58 41 ec 9a 06 e1 a2 e5 7d e1 4b 99 47 ab 76 37 98 22 1f b4 bb 1f 34 95 7e 19 0b aa 72 33 d6 05 37 0c 2d de 7a d9 55 df 56 de 09 d3 7e eb 68 6a 47 36 44 4e 59 48 53 b8 a6 63 ed 13 61 35 08 3d 73 61 85 09 5a 20 02 09 49 33 de 27 d9 63 29 69 38 a9 36 dc aa 4c cd 90 75 1e 04 7e f3 ff d2 9f 7d bd eb 7c 1e 93 23 c7 2a 3f 37 fa c2 76 7a 90 a3 8e c9 e1 03 2c 36 fd 18 b5 00 00 00 Data Ascii: 0@W&.6ebBA0,Q-HXA}KGv7"4~r37-zUV~hjG6DNYHSca5=saZ I3'c)i86Lu~}\|#?7vz,6
Aug 1, 2024 08:38:57.251969099 CEST	452	OUT	POST /_tr HTTP/1.1 Host: rotect.com Connection: keep-alive Content-Length: 1549 Accept: application/json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Origin: http://rotect.com Referer: http://rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21
Aug 1, 2024 08:38:57.358406067 CEST	281	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:38:56 GMT content-type: application/json; charset=utf-8 content-length: 2 x-request-id: 1038dc75-da3c-4c19-8f77-4df22ca3222c set-cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; expires=Thu, 01 Aug 2024 06:53:57 GMT Data Raw: 6f 6b Data Ascii: ok
Aug 1, 2024 08:39:07.131752968 CEST	664	OUT	GET /legal HTTP/1.1 Host: rotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; __cmpcccx68884=aBQCr8c8AAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Aug 1, 2024 08:39:07.238233089 CEST	1236	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:06 GMT content-type: text/html; charset=utf-8 content-length: 8131 x-request-id: 0103465f-c746-46d3-ae4f-01c51b7bf16a set-cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; expires=Thu, 01 Aug 2024 06:54:07 GMT Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4c 65 67 61 6c 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 48 65 6c 76 65 74 69 63 61 2c 20 74 72 65 62 75 63 68 65 74 20 6d 73 2c 20 61 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 2e 68 69 63 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a [TRUNCATED] Data Ascii: <!DOCTYPE html><html xmlns="http://www.w3.org/1999/xhtml" lang="en"><head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <title>Legal</title> <style> body { font-family: Helvetica, trebuchet ms, arial, sans-serif; margin: 0; } .hic { height: 70px; position: relative; width: 1000px; margin: 0 auto; border-bottom: 1px solid #000; } .hicl { position: absolute; left: 20px; top: 20px; font-weight: 300; font-size: 26px; color: #000; font-family: helvetica, arial, sans-serif; } .c { position: relative; width: 1000px; margin: 10px auto 0; overflow: hidden; } .cu { font-size: 11px; margin: 0 0 30px; }
Aug 1, 2024 08:39:07.468075991 CEST	603	OUT	GET /favicon.ico HTTP/1.1 Host: rotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://rotect.com/legal Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; __cmpcccx68884=aBQCr8c8AAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Aug 1, 2024 08:39:07.587821960 CEST	1236	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:07 GMT content-type: text/html; charset=utf-8 content-length: 1094 x-request-id: aeb4dd39-14e0-42ef-af23-33ffed93f828 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_kQvKRSrFeUK0eWOPQF4JGMZecgfjr1UtK9jLGh6oxO2Voc+wmccsGowWCFnTESnj8IJJRhLbv4PQvWV/ennAmw== set-cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; expires=Thu, 01 Aug 2024 06:54:07 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 6b 51 76 4b 52 53 72 46 65 55 4b 30 65 57 4f 50 51 46 34 4a 47 4d 5a 65 63 67 66 6a 72 31 55 74 4b 39 6a 4c 47 68 36 6f 78 4f 32 56 6f 63 2b 77 6d 63 63 73 47 6f 77 57 43 46 6e 54 45 53 6e 6a 38 49 4a 4a 52 68 4c 62 76 34 50 51 76 57 56 2f 65 6e 6e 41 6d 77 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_kQvKRSrFeUK0eWOPQF4JGMZecgfjr1UtK9jLGh6oxO2Voc+wmccsGowWCFnTESnj8IJJRhLbv4PQvWV/ennAmw==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"> <link rel="preconnect

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.9	49715	199.59.243.226	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:38:55.160357952 CEST	337	OUT	GET /bZehyVOgP.js HTTP/1.1 Host: rotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21
Aug 1, 2024 08:38:55.621243954 CEST	1236	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:38:54 GMT content-type: application/javascript; charset=utf-8 content-length: 33929 x-request-id: a507a18b-c076-422f-bf22-bcc9a049070d set-cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; expires=Thu, 01 Aug 2024 06:53:55 GMT Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 74 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 74 29 3a 74 28 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 76 65 72 73 69 6f 6e 3d 7b 7d 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 61 77 61 69 74 65 72 28 65 2c 74 2c 6e 2c 69 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 6e 7c 7c 28 6e 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 73 2c 61 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 74 72 79 7b 64 28 69 2e 6e [TRUNCATED] Data Ascii: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).version={})}(this,(function(exports){"use strict";function __awaiter(e,t,n,i){return new(n\|\|(n=Promise))((function(s,a){function o(e){try{d(i.next(e))}catch(e){a(e)}}function r(e){try{d(i.throw(e))}catch(e){a(e)}}function d(e){var t;e.done?s(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(o,r)}d((i=i.apply(e,t\|\|[])).next())}))}var Blocking;"function"==typeof SuppressedError&&SuppressedError,function(e){e.PENDING="pending",e.NONE="none",e.BLOCKED="blocked",e.ALLOWED="allowed"}(Blocking\|\|(Blocking={}));class Adblock{constructor(e){this.state=Blocking.PENDING,this._mocked=!1,e?(this.state=e,this._mocked=!0):this.state=Blocking.ALLOWED}inject(){return __awaiter(this,void 0,void 0,(function*(){}))}get isBlocked(){return this.
Aug 1, 2024 08:38:55.621263981 CEST	1236	IN	Data Raw: 73 74 61 74 65 3d 3d 3d 42 6c 6f 63 6b 69 6e 67 2e 42 4c 4f 43 4b 45 44 7d 67 65 74 20 69 73 41 6c 6c 6f 77 65 64 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 61 74 65 3d 3d 3d 42 6c 6f 63 6b 69 6e 67 2e 41 4c 4c 4f 57 45 44 7d 74 6f 43 6f Data Ascii: state===Blocking.BLOCKED}get isAllowed(){return this.state===Blocking.ALLOWED}toContext(){return{user_has_ad_blocker:null,is_ad_blocked:null}}}const OBFUSCATING_BASE_64_PREFIX="UxFdVMwNFNwN0wzODEybV",encode=e=>OBFUSCATING_BASE_64_PREFIX+btoa(u
Aug 1, 2024 08:38:55.621273994 CEST	448	IN	Data Raw: 64 73 22 2c 65 2e 41 44 5f 42 4c 4f 43 4b 45 44 3d 22 61 64 5f 62 6c 6f 63 6b 65 64 22 2c 65 2e 50 52 45 46 45 52 52 45 44 3d 22 70 72 65 66 65 72 72 65 64 22 7d 28 5a 65 72 6f 43 6c 69 63 6b 52 65 61 73 6f 6e 73 7c 7c 28 5a 65 72 6f 43 6c 69 63 Data Ascii: ds",e.AD_BLOCKED="ad_blocked",e.PREFERRED="preferred"}(ZeroClickReasons\|\|(ZeroClickReasons={}));const getZeroClick=e=>__awaiter(void 0,void 0,void 0,(function*(){const t=Object.assign(Object.assign({},e),{type:"zc_fetch"});return fetch("/_zc",
Aug 1, 2024 08:38:55.621324062 CEST	1236	IN	Data Raw: 65 6c 64 20 65 2e 74 65 78 74 28 29 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 7b 7d 7d 7d 29 29 29 29 7d 29 29 2c 77 61 69 74 65 72 3d 28 65 2c 74 29 3d 3e 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 6e 3d 3e 7b 74 28 65 29 2c 65 3c 3d 30 26 Data Ascii: eld e.text())}catch(e){return{}}}))))})),waiter=(e,t)=>new Promise((n=>{t(e),e<=0&&n();let i=e;const s=()=>{i>0?(i-=1,t(i),setTimeout(s,1e3)):n()};s()})),decode=()=>JSON.parse(atob(window.park\|\|""));var PAGE_STYLES='* {\n font-smoothing: anti
Aug 1, 2024 08:38:55.621336937 CEST	1236	IN	Data Raw: 23 38 45 41 42 43 30 3b 5c 6e 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 5c 6e 7d 5c 6e 5c 6e 2f 2a 20 53 61 6c 65 73 20 42 6f 78 20 2d 20 48 69 67 68 6c 69 67 68 74 65 64 20 53 74 61 74 65 20 2a 2f 5c 6e 5c 6e 23 73 61 6c 65 73 2d 62 Data Ascii: #8EABC0;\n cursor: pointer;\n}\n\n/* Sales Box - Highlighted State */\n\n#sales-box.is-highlighted {\n position: relative;\n z-index: 1;\n background: #032438 linear-gradient(to top, #044368 0%, #000 100%);\n box-shadow: 0 0 15px 0 #000;\
Aug 1, 2024 08:38:55.621486902 CEST	1236	IN	Data Raw: 70 78 3b 5c 6e 20 20 72 69 67 68 74 3a 20 32 30 70 78 3b 5c 6e 20 20 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 5c 6e 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6c 69 67 68 74 65 72 3b 5c 6e 7d 5c 6e 5c 6e 2f 2a 20 55 74 69 6c 69 74 69 65 73 20 2a Data Ascii: px;\n right: 20px;\n bottom: 20px;\n font-weight: lighter;\n}\n\n/* Utilities */\n\n.pk-message-title {\n font-size: 2em;\n font-weight: bold;\n}\n\n.pk-page-ready {\n opacity: 1 !important;\n visibility: visible !important;\n}\n\n@medi
Aug 1, 2024 08:38:55.621498108 CEST	1236	IN	Data Raw: 2e 5f 64 6f 6d 49 73 52 65 61 64 79 7d 73 65 74 20 64 6f 6d 49 73 52 65 61 64 79 28 65 29 7b 74 68 69 73 2e 5f 64 6f 6d 49 73 52 65 61 64 79 3d 65 2c 65 26 26 74 68 69 73 2e 69 6e 6a 65 63 74 53 74 79 6c 65 73 28 50 41 47 45 5f 53 54 59 4c 45 53 Data Ascii: ._domIsReady}set domIsReady(e){this._domIsReady=e,e&&this.injectStyles(PAGE_STYLES)}message(e,t=""){if(this.injectHTML(MESSAGE_TEMPLATE),this.domNode){const t=this.domNode.querySelector(MESSAGE_SELECTOR);t&&(t.innerHTML=e)}t&&this.injectMetaDe
Aug 1, 2024 08:38:55.621509075 CEST	1236	IN	Data Raw: 6e 67 55 6e 61 76 61 69 6c 61 62 6c 65 28 29 7b 74 68 69 73 2e 6d 65 73 73 61 67 65 28 22 5c 6e 20 20 20 20 20 20 3c 68 31 3e 41 6e 20 45 72 72 6f 72 20 4f 63 63 75 72 72 65 64 3c 2f 68 31 3e 5c 6e 20 20 20 20 20 20 3c 70 3e 50 61 72 6b 69 6e 67 Data Ascii: ngUnavailable(){this.message("\n <h1>An Error Occurred</h1>\n <p>Parking is currently unavailable. We'll be right back.</p>\n ")}errorParkingServicesDisabled(){this.message("\n <h1>An Error Occurred</h1>\n <p>Services fo
Aug 1, 2024 08:38:55.621520996 CEST	1236	IN	Data Raw: 68 74 6d 6c 29 7d 74 65 6d 70 6c 61 74 65 28 65 29 7b 76 61 72 20 74 3b 74 68 69 73 2e 64 6f 6d 49 73 52 65 61 64 79 7c 7c 74 68 69 73 2e 70 72 65 72 65 6e 64 65 72 28 65 29 2c 74 68 69 73 2e 69 6e 6a 65 63 74 53 74 79 6c 65 73 28 65 2e 73 74 79 Data Ascii: html)}template(e){var t;this.domIsReady\|\|this.prerender(e),this.injectStyles(e.stylesheet),this.imprint(e.imprint),this.salesBanner(e.salesBanner),this.injectJS(e.javascript),null===(t=e.scripts)\|\|void 0===t\|\|t.forEach((e=>{this.injectScript(e
Aug 1, 2024 08:38:55.621535063 CEST	1236	IN	Data Raw: 74 20 74 72 61 63 6b 69 6e 67 54 79 70 65 28 29 7b 73 77 69 74 63 68 28 74 68 69 73 2e 72 65 61 73 6f 6e 29 7b 63 61 73 65 22 61 64 62 6c 6f 63 6b 65 72 22 3a 72 65 74 75 72 6e 22 61 64 5f 62 6c 6f 63 6b 65 64 5f 6d 65 73 73 61 67 65 22 3b 63 61 Data Ascii: t trackingType(){switch(this.reason){case"adblocker":return"ad_blocked_message";case"disabled_mr":return"invalid_referral";case"disabled_rc":return"revenue_cap_reached";default:return"no_sponsors_message"}}toContext(){return{cannotPark:this.re
Aug 1, 2024 08:38:55.626214981 CEST	1236	IN	Data Raw: 20 20 20 3c 70 3e 50 61 72 6b 69 6e 67 20 69 73 20 63 75 72 72 65 6e 74 6c 79 20 75 6e 61 76 61 69 6c 61 62 6c 65 2e 20 57 65 27 6c 6c 20 62 65 20 72 69 67 68 74 20 62 61 63 6b 2e 3c 2f 70 3e 5c 6e 20 20 20 20 20 20 22 3b 64 65 66 61 75 6c 74 3a Data Ascii: <p>Parking is currently unavailable. We'll be right back.</p>\n ";default:return"\n <h1>An Error Occurred</h1>\n <p>Services for this domain name have been disabled.</p>\n "}}get trackingType(){switch(this.reas
Aug 1, 2024 08:38:57.760210037 CEST	328	OUT	GET /_zc HTTP/1.1 Host: rotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21
Aug 1, 2024 08:38:57.861602068 CEST	1236	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:38:57 GMT content-type: text/html; charset=utf-8 content-length: 1034 x-request-id: 33bff059-d4ba-46ff-9f47-b417952fb056 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_r6Lhn44xTFFnRbr2ic4038RlxbAnLtVa0nueGp+PfcUrEuQv+V3zSXs0i9iSB15rbpVRepcJszf9muWEYjKBOw== set-cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; expires=Thu, 01 Aug 2024 06:53:57 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 72 36 4c 68 6e 34 34 78 54 46 46 6e 52 62 72 32 69 63 34 30 33 38 52 6c 78 62 41 6e 4c 74 56 61 30 6e 75 65 47 70 2b 50 66 63 55 72 45 75 51 76 2b 56 33 7a 53 58 73 30 69 39 69 53 42 31 35 72 62 70 56 52 65 70 63 4a 73 7a 66 39 6d 75 57 45 59 6a 4b 42 4f 77 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_r6Lhn44xTFFnRbr2ic4038RlxbAnLtVa0nueGp+PfcUrEuQv+V3zSXs0i9iSB15rbpVRepcJszf9muWEYjKBOw==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"> <link rel="preconnect

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.9	49717	199.59.243.226	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:38:55.223114967 CEST	328	OUT	GET /_fd HTTP/1.1 Host: rotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21
Aug 1, 2024 08:38:55.703958035 CEST	1236	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:38:55 GMT content-type: text/html; charset=utf-8 content-length: 1034 x-request-id: bd8a1155-b83f-4ef4-a41d-7a207fdc250b cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_c46t1DQWs1pxe5MIH7HOstzh4yZ7Hr9AVQ5g/RCgfJsBhFM3CBrRxM6IveqrC82dxRFZRrmD0eAUHyFlBacATw== set-cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; expires=Thu, 01 Aug 2024 06:53:55 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 63 34 36 74 31 44 51 57 73 31 70 78 65 35 4d 49 48 37 48 4f 73 74 7a 68 34 79 5a 37 48 72 39 41 56 51 35 67 2f 52 43 67 66 4a 73 42 68 46 4d 33 43 42 72 52 78 4d 36 49 76 65 71 72 43 38 32 64 78 52 46 5a 52 72 6d 44 30 65 41 55 48 79 46 6c 42 61 63 41 54 77 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_c46t1DQWs1pxe5MIH7HOstzh4yZ7Hr9AVQ5g/RCgfJsBhFM3CBrRxM6IveqrC82dxRFZRrmD0eAUHyFlBacATw==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"> <link rel="preconnect
Aug 1, 2024 08:38:55.704289913 CEST	460	IN	Data Raw: 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 64 69 76 20 69 64 3d 22 74 61 72 67 65 74 22 20 73 74 79 6c 65 Data Ascii: " href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiY2YzN2YwMjItZDk4MC00ODU0LTg4NGQtMWUzOTQ5ODExYjIxIiwicGFnZV90aW1lIjoxNzIyNDk0MzM1LCJwYWdlX3VybCI6Imh0dHA6L
Aug 1, 2024 08:38:57.761573076 CEST	328	OUT	GET /_tr HTTP/1.1 Host: rotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21
Aug 1, 2024 08:38:57.866251945 CEST	1236	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:38:57 GMT content-type: text/html; charset=utf-8 content-length: 1034 x-request-id: 43d62253-f774-440d-b0df-820cc1da0485 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_y1zpjrPqjusJ0c+HP3kD6YuBnpYl9LsQ+FHg07gcPlSmmtQb3RfhfzkYKtBvx0Vnu/LZtku+mSjHsE2uXuAahQ== set-cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; expires=Thu, 01 Aug 2024 06:53:57 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 79 31 7a 70 6a 72 50 71 6a 75 73 4a 30 63 2b 48 50 33 6b 44 36 59 75 42 6e 70 59 6c 39 4c 73 51 2b 46 48 67 30 37 67 63 50 6c 53 6d 6d 74 51 62 33 52 66 68 66 7a 6b 59 4b 74 42 76 78 30 56 6e 75 2f 4c 5a 74 6b 75 2b 6d 53 6a 48 73 45 32 75 58 75 41 61 68 51 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_y1zpjrPqjusJ0c+HP3kD6YuBnpYl9LsQ+FHg07gcPlSmmtQb3RfhfzkYKtBvx0Vnu/LZtku+mSjHsE2uXuAahQ==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"> <link rel="preconnect
Aug 1, 2024 08:38:57.866301060 CEST	460	IN	Data Raw: 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 64 69 76 20 69 64 3d 22 74 61 72 67 65 74 22 20 73 74 79 6c 65 Data Ascii: " href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiY2YzN2YwMjItZDk4MC00ODU0LTg4NGQtMWUzOTQ5ODExYjIxIiwicGFnZV90aW1lIjoxNzIyNDk0MzM3LCJwYWdlX3VybCI6Imh0dHA6L
Aug 1, 2024 08:39:07.600066900 CEST	508	OUT	GET /favicon.ico HTTP/1.1 Host: rotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; __cmpcccx68884=aBQCr8c8AAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Aug 1, 2024 08:39:07.704369068 CEST	1236	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:07 GMT content-type: text/html; charset=utf-8 content-length: 1046 x-request-id: c0ef82d6-f6ff-4349-b424-f53d4e06216c cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_kQvKRSrFeUK0eWOPQF4JGMZecgfjr1UtK9jLGh6oxO2Voc+wmccsGowWCFnTESnj8IJJRhLbv4PQvWV/ennAmw== set-cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; expires=Thu, 01 Aug 2024 06:54:07 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 6b 51 76 4b 52 53 72 46 65 55 4b 30 65 57 4f 50 51 46 34 4a 47 4d 5a 65 63 67 66 6a 72 31 55 74 4b 39 6a 4c 47 68 36 6f 78 4f 32 56 6f 63 2b 77 6d 63 63 73 47 6f 77 57 43 46 6e 54 45 53 6e 6a 38 49 4a 4a 52 68 4c 62 76 34 50 51 76 57 56 2f 65 6e 6e 41 6d 77 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_kQvKRSrFeUK0eWOPQF4JGMZecgfjr1UtK9jLGh6oxO2Voc+wmccsGowWCFnTESnj8IJJRhLbv4PQvWV/ennAmw==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"> <link rel="preconnect
Aug 1, 2024 08:39:07.704384089 CEST	472	IN	Data Raw: 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 64 69 76 20 69 64 3d 22 74 61 72 67 65 74 22 20 73 74 79 6c 65 Data Ascii: " href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiY2YzN2YwMjItZDk4MC00ODU0LTg4NGQtMWUzOTQ5ODExYjIxIiwicGFnZV90aW1lIjoxNzIyNDk0MzQ3LCJwYWdlX3VybCI6Imh0dHA6L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.9	49721	199.191.50.153	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:38:57.527601957 CEST	532	OUT	GET /?dn=rotect.com&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&pid=9POT3387I HTTP/1.1 Host: ww01.rotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:38:59.192717075 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:38:41 GMT Server: Apache Set-Cookie: vsid=919vr47003992153469591; expires=Tue, 31-Jul-2029 06:38:41 GMT; Max-Age=157680000; path=/; domain=ww01.rotect.com; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_ZGLxPnXnBrdd2nPoniBjJAkXYETuFQWeOUNCKQLjVClLYDFp1VDs1zctBniezB8kCB78jTuMQhcc71QyPRZUnA== Keep-Alive: timeout=5, max=125 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 61 35 30 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 [TRUNCATED] Data Ascii: a506<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn"
Aug 1, 2024 08:38:59.192785978 CEST	1236	IN	Data Raw: 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 6e 3d 22 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 7d 69 66 28 21 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 Data Ascii: in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI",
Aug 1, 2024 08:38:59.192826033 CEST	1236	IN	Data Raw: 78 4f 66 28 22 63 6d 70 6c 61 6e 67 3d 22 29 2b 38 2c 32 29 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7d 65 6c 73 65 7b 69 66 28 22 63 6d 70 5f 73 65 74 6c 61 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 65 Data Ascii: xOf("cmplang=")+8,2).toUpperCase())}else{if("cmp_setlang" in window&&window.cmp_setlang!=""){c.push(window.cmp_setlang.toUpperCase())}else{if(a.length>0){for(var d=0;d<a.length;d++){c.push(a[d])}}}}}if("language" in navigator){c.push(navigator
Aug 1, 2024 08:38:59.192861080 CEST	1236	IN	Data Raw: 6e 20 77 7d 76 61 72 20 6b 3d 28 22 63 6d 70 5f 70 72 6f 74 6f 22 20 69 6e 20 68 29 3f 68 2e 63 6d 70 5f 70 72 6f 74 6f 3a 22 68 74 74 70 73 3a 22 3b 69 66 28 6b 21 3d 22 68 74 74 70 3a 22 26 26 6b 21 3d 22 68 74 74 70 73 3a 22 29 7b 6b 3d 22 68 Data Ascii: n w}var k=("cmp_proto" in h)?h.cmp_proto:"https:";if(k!="http:"&&k!="https:"){k="https:"}var g=("cmp_ref" in h)?h.cmp_ref:location.href;var j=u.createElement("script");j.setAttribute("data-cmp-ab","1");var c=x("cmpdesign","cmp_design" in h?h.c
Aug 1, 2024 08:38:59.192898035 CEST	1236	IN	Data Raw: 3d 76 28 22 68 65 61 64 22 29 7d 69 66 28 74 2e 6c 65 6e 67 74 68 3e 30 29 7b 74 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 7d 7d 7d 76 61 72 20 6d 3d 22 6a 73 22 3b 76 61 72 20 70 3d 78 28 22 63 6d 70 64 65 62 75 67 75 6e 6d 69 6e 69 Data Ascii: =v("head")}if(t.length>0){t[0].appendChild(j)}}}var m="js";var p=x("cmpdebugunminimized","cmpdebugunminimized" in h?h.cmpdebugunminimized:0)>0?"":".min";var a=x("cmpdebugcoverage","cmp_debugcoverage" in h?h.cmp_debugcoverage:"");if(a=="1"){m="
Aug 1, 2024 08:38:59.192941904 CEST	1120	IN	Data Raw: 2c 31 30 2c 62 29 7d 7d 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 72 63 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3b 76 61 72 20 66 3d 22 22 3b 76 61 72 20 64 3d 30 3b 77 68 69 6c 65 28 62 Data Ascii: ,10,b)}}};window.cmp_rc=function(h){var b=document.cookie;var f="";var d=0;while(b!=""&&d<100){d++;while(b.substr(0,1)==" "){b=b.substr(1,b.length)}var g=b.substring(0,b.indexOf("="));if(b.indexOf(";")!=-1){var c=b.substring(b.indexOf("=")+1,b
Aug 1, 2024 08:38:59.192992926 CEST	1236	IN	Data Raw: 22 74 63 66 63 61 22 2c 22 75 73 6e 61 74 22 2c 22 75 73 63 61 22 2c 22 75 73 76 61 22 2c 22 75 73 63 6f 22 2c 22 75 73 75 74 22 2c 22 75 73 63 74 22 5d 2c 63 6d 70 49 64 3a 33 31 7d 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 70 70 73 74 75 62 3d Data Ascii: "tcfca","usnat","usca","usva","usco","usut","usct"],cmpId:31}};window.cmp_gppstub=function(){var a=arguments;__gpp.q=__gpp.q\|\|[];if(!a.length){return __gpp.q}var g=a[0];var f=a.length>1?a[1]:null;var e=a.length>2?a[2]:null;if(g==="ping"){retur
Aug 1, 2024 08:38:59.193027973 CEST	1236	IN	Data Raw: 2c 62 2e 70 61 72 61 6d 65 74 65 72 2c 66 75 6e 63 74 69 6f 6e 28 68 2c 67 29 7b 76 61 72 20 65 3d 7b 5f 5f 63 6d 70 52 65 74 75 72 6e 3a 7b 72 65 74 75 72 6e 56 61 6c 75 65 3a 68 2c 73 75 63 63 65 73 73 3a 67 2c 63 61 6c 6c 49 64 3a 62 2e 63 61 Data Ascii: ,b.parameter,function(h,g){var e={__cmpReturn:{returnValue:h,success:g,callId:b.callId}};d.source.postMessage(a?JSON.stringify(e):e,"*")})}if(typeof(c)==="object"&&c!==null&&"__uspapiCall" in c){var b=c.__uspapiCall;window.__uspapi(b.command,b
Aug 1, 2024 08:38:59.193063974 CEST	1236	IN	Data Raw: 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 28 61 20 69 6e 20 77 69 6e 64 6f 77 29 7c 7c 28 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 Data Ascii: Stub=function(a){if(!(a in window)\|\|(typeof(window[a])!=="function"&&typeof(window[a])!=="object"&&(typeof(window[a])==="undefined"\|\|window[a]!==null))){window[a]=window.cmp_gppstub;window[a].msgHandler=window.cmp_msghandler;window.addEventLis
Aug 1, 2024 08:38:59.193119049 CEST	672	IN	Data Raw: 6d 65 6e 74 28 22 69 6d 67 22 29 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 72 63 3d 22 68 74 74 70 3a 2f 2f Data Ascii: ment("img");imglog.style.height="0px";imglog.style.width="0px";imglog.src="http://ww01.rotect.com/sk-logabpstatus.php?a=d0pjdzM2VGc5Z2FqRURML2tXVjcxM01QcmdzdmpzdDI0aCthRGpMNkp5c1QyeXZUb3l6YjAydlhmQjZ6NWphVFlEWVpLQ2R6STkvSS9YbkdndU1Cam54azI5Yzl
Aug 1, 2024 08:38:59.198056936 CEST	1236	IN	Data Raw: 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 Data Ascii: ial-scale=1, maximum-scale=1"><style type="text/css">@font-face {font-family: "montserrat-regular";src: url("http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot");src: url("http://i1.cdn-image.com/__media__/fo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.9	49722	199.191.50.153	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:38:59.242012024 CEST	422	OUT	GET /px.js?ch=1 HTTP/1.1 Host: ww01.rotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww01.rotect.com/?dn=rotect.com&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&pid=9POT3387I Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=919vr47003992153469591
Aug 1, 2024 08:38:59.341587067 CEST	628	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:38:42 GMT Server: Apache Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=125 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 76 61 72 20 61 62 70 3d 61 62 70 7c 7c 66 61 6c 73 65 3b 76 61 72 20 73 63 72 69 70 74 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 76 61 72 20 73 63 72 69 70 74 3d 73 63 72 69 70 74 73 5b 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 66 28 73 63 72 69 70 74 29 7b 76 61 72 20 71 75 65 72 79 3d 73 63 72 69 70 74 2e 73 72 63 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 2e 73 70 6c 69 74 28 22 26 22 29 3b 76 61 72 20 70 61 72 61 6d 73 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 71 75 65 72 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 70 61 72 61 6d 3d 71 75 65 72 79 5b 69 5d 2e 73 70 6c 69 74 28 22 3d 22 29 3b 70 61 72 61 6d 73 5b 70 61 72 61 6d 5b 30 5d 5d 3d 70 61 72 61 6d 5b 31 5d 7d 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 31 29 61 62 70 3d 74 72 75 65 3b 65 6c 73 65 20 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 32 29 61 62 70 3d 61 62 70 26 [TRUNCATED] Data Ascii: var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};
Aug 1, 2024 08:39:44.347001076 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.9	49725	199.191.50.153	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:38:59.258321047 CEST	422	OUT	GET /px.js?ch=2 HTTP/1.1 Host: ww01.rotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww01.rotect.com/?dn=rotect.com&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&pid=9POT3387I Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=919vr47003992153469591
Aug 1, 2024 08:38:59.714016914 CEST	628	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:38:43 GMT Server: Apache Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=123 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 76 61 72 20 61 62 70 3d 61 62 70 7c 7c 66 61 6c 73 65 3b 76 61 72 20 73 63 72 69 70 74 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 76 61 72 20 73 63 72 69 70 74 3d 73 63 72 69 70 74 73 5b 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 66 28 73 63 72 69 70 74 29 7b 76 61 72 20 71 75 65 72 79 3d 73 63 72 69 70 74 2e 73 72 63 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 2e 73 70 6c 69 74 28 22 26 22 29 3b 76 61 72 20 70 61 72 61 6d 73 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 71 75 65 72 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 70 61 72 61 6d 3d 71 75 65 72 79 5b 69 5d 2e 73 70 6c 69 74 28 22 3d 22 29 3b 70 61 72 61 6d 73 5b 70 61 72 61 6d 5b 30 5d 5d 3d 70 61 72 61 6d 5b 31 5d 7d 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 31 29 61 62 70 3d 74 72 75 65 3b 65 6c 73 65 20 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 32 29 61 62 70 3d 61 62 70 26 [TRUNCATED] Data Ascii: var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};
Aug 1, 2024 08:39:04.178622961 CEST	667	OUT	GET /favicon.ico HTTP/1.1 Host: ww01.rotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww01.rotect.com/?dn=rotect.com&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&pid=9POT3387I Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=919vr47003992153469591; __cmpcc=1; __cmpcccx68884=aBQCr8c8AAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Aug 1, 2024 08:39:04.277499914 CEST	210	IN	HTTP/1.1 404 Not Found Date: Thu, 01 Aug 2024 06:38:47 GMT Server: Apache Content-Length: 10 Keep-Alive: timeout=5, max=128 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 4e 6f 20 66 61 76 69 63 6f 6e Data Ascii: No favicon
Aug 1, 2024 08:39:21.168261051 CEST	3195	OUT	GET /Customer_Service_Support.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2 [TRUNCATED] Host: ww01.rotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=919vr47003992153469591; __cmpcc=1; __cmpcccx68884=aBQCr8c8AAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Aug 1, 2024 08:39:22.170105934 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:04 GMT Server: Apache X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_O71VVNiqi2NyEsh04swvzhbCpiefKWZEEyRUvwRb+WAnvIXtLxGojTumSOjkLyrbp5FZ150wQbn2z4EI64IwcA== Keep-Alive: timeout=5, max=116 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 39 36 61 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 [TRUNCATED] Data Ascii: 96a7<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){win
Aug 1, 2024 08:39:22.170191050 CEST	224	IN	Data Raw: 64 6f 77 2e 63 6d 70 5f 63 6f 64 65 73 72 63 3d 22 31 22 7d 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 65 74 73 75 70 70 6f 72 74 65 64 4c 61 6e 67 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 5b 22 44 45 22 2c 22 45 4e 22 2c 22 46 52 22 2c Data Ascii: dow.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR","ZH","TR","UK","AR","B
Aug 1, 2024 08:39:22.170463085 CEST	1236	IN	Data Raw: 53 22 5d 3b 69 66 28 22 63 6d 70 5f 63 75 73 74 6f 6d 6c 61 6e 67 75 61 67 65 73 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 75 73 74 6f 6d 6c 61 6e 67 75 61 67 65 73 2e 6c Data Ascii: S"];if("cmp_customlanguages" in window){for(var a=0;a<window.cmp_customlanguages.length;a++){b.push(window.cmp_customlanguages[a].l.toUpperCase())}}return b};window.cmp_getRTLLangs=function(){var a=["AR"];if("cmp_customlanguages" in window){fo
Aug 1, 2024 08:39:22.170517921 CEST	1236	IN	Data Raw: 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 69 66 28 67 2e 69 6e 64 65 78 4f 66 28 62 29 21 3d 2d 31 29 7b 68 3d 62 3b 62 72 65 61 6b 7d 69 66 28 62 2e 69 6e 64 65 78 4f 66 28 22 2d 22 29 21 3d 2d 31 29 7b 62 3d 62 2e 73 75 62 73 74 72 28 30 2c 32 Data Ascii: toUpperCase();if(g.indexOf(b)!=-1){h=b;break}if(b.indexOf("-")!=-1){b=b.substr(0,2)}if(g.indexOf(b)!=-1){h=b;break}}if(h==""&&typeof(cmp_getlang.defaultlang)=="string"&&cmp_getlang.defaultlang!==""){return cmp_getlang.defaultlang}else{if(h==""
Aug 1, 2024 08:39:22.170531988 CEST	1236	IN	Data Raw: 20 69 6e 20 68 3f 68 2e 63 6d 70 5f 67 70 70 6b 65 79 3a 22 22 29 3b 76 61 72 20 6e 3d 78 28 22 63 6d 70 61 74 74 22 2c 22 63 6d 70 5f 61 74 74 22 20 69 6e 20 68 3f 68 2e 63 6d 70 5f 61 74 74 3a 22 22 29 3b 6a 2e 73 72 63 3d 6b 2b 22 2f 2f 22 2b Data Ascii: in h?h.cmp_gppkey:"");var n=x("cmpatt","cmp_att" in h?h.cmp_att:"");j.src=k+"//"+h.cmp_host+"/delivery/cmp.php?"+("cmp_id" in h&&h.cmp_id>0?"id="+h.cmp_id:"")+("cmp_cdid" in h?"&cdid="+h.cmp_cdid:"")+"&h="+encodeURIComponent(g)+(c!=""?"&cmpde
Aug 1, 2024 08:39:22.170607090 CEST	672	IN	Data Raw: 61 73 63 72 69 70 74 22 3b 6a 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6d 70 2d 61 62 22 2c 22 31 22 29 3b 6a 2e 61 73 79 6e 63 3d 74 72 75 65 3b 69 66 28 75 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 26 26 75 2e 63 75 72 72 Data Ascii: ascript";j.setAttribute("data-cmp-ab","1");j.async=true;if(u.currentScript&&u.currentScript.parentElement){u.currentScript.parentElement.appendChild(j)}else{if(u.body){u.body.appendChild(j)}else{var t=v("body");if(t.length==0){t=v("div")}if(t.
Aug 1, 2024 08:39:22.171109915 CEST	1236	IN	Data Raw: 65 3d 62 3b 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 49 6e 74 65 6e 74 69 6f 6e 61 6c 6c 79 20 68 69 64 64 65 6e 2c 20 70 6c 65 61 73 65 20 69 67 6e 6f 72 65 22 29 3b 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 Data Ascii: e=b;a.setAttribute("title","Intentionally hidden, please ignore");a.setAttribute("role","none");a.setAttribute("tabindex","-1");document.body.appendChild(a)}else{window.setTimeout(window.cmp_addFrame,10,b)}}};window.cmp_rc=function(h){var b=do
Aug 1, 2024 08:39:22.171158075 CEST	1236	IN	Data Raw: 7b 72 65 74 75 72 6e 7b 67 70 70 56 65 72 73 69 6f 6e 3a 22 31 2e 30 22 2c 63 6d 70 53 74 61 74 75 73 3a 22 73 74 75 62 22 2c 63 6d 70 44 69 73 70 6c 61 79 53 74 61 74 75 73 3a 22 68 69 64 64 65 6e 22 2c 73 75 70 70 6f 72 74 65 64 41 50 49 73 3a Data Ascii: {return{gppVersion:"1.0",cmpStatus:"stub",cmpDisplayStatus:"hidden",supportedAPIs:["tcfca","usnat","usca","usva","usco","usut","usct"],cmpId:31}};window.cmp_gppstub=function(){var a=arguments;__gpp.q=__gpp.q\|\|[];if(!a.length){return __gpp.q}va
Aug 1, 2024 08:39:22.171169996 CEST	1236	IN	Data Raw: 63 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 63 21 3d 3d 6e 75 6c 6c 26 26 22 5f 5f 63 6d 70 43 61 6c 6c 22 20 69 6e 20 63 29 7b 76 61 72 20 62 3d 63 2e 5f 5f 63 6d 70 43 61 6c 6c 3b 77 69 6e 64 6f 77 2e 5f 5f 63 6d 70 28 62 2e 63 6f 6d 6d 61 6e Data Ascii: c)==="object"&&c!==null&&"__cmpCall" in c){var b=c.__cmpCall;window.__cmp(b.command,b.parameter,function(h,g){var e={__cmpReturn:{returnValue:h,success:g,callId:b.callId}};d.source.postMessage(a?JSON.stringify(e):e,"*")})}if(typeof(c)==="objec
Aug 1, 2024 08:39:22.171307087 CEST	1236	IN	Data Raw: 3b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 77 69 6e 64 6f 77 2e 63 6d 70 5f 6d 73 67 68 61 6e 64 6c 65 72 2c 66 61 6c 73 65 29 7d 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 65 74 47 70 Data Ascii: ;window.addEventListener("message",window.cmp_msghandler,false)}};window.cmp_setGppStub=function(a){if(!(a in window)\|\|(typeof(window[a])!=="function"&&typeof(window[a])!=="object"&&(typeof(window[a])==="undefined"\|\|window[a]!==null))){window[
Aug 1, 2024 08:39:22.171319008 CEST	1236	IN	Data Raw: 69 70 74 22 3e 66 75 6e 63 74 69 6f 6e 20 68 61 6e 64 6c 65 41 42 50 44 65 74 65 63 74 28 29 7b 74 72 79 7b 69 66 28 21 61 62 70 29 20 72 65 74 75 72 6e 3b 76 61 72 20 69 6d 67 6c 6f 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c Data Ascii: ipt">function handleABPDetect(){try{if(!abp) return;var imglog = document.createElement("img");imglog.style.height="0px";imglog.style.width="0px";imglog.src="http://ww01.rotect.com/sk-logabpstatus.php?a=SnZ0KzdsUGFiVlMvalZuZWhabW10b25ZOW5RMnor
Aug 1, 2024 08:39:23.885979891 CEST	6718	OUT	GET /trf?q=Customer+Service+Support&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9OTg3NzI4NDNFMjZBNEIyQiZ1dD0xNzIyNDk0MzYxNDUwJnVvPTc4MjAyOTY4MDQ4NzgxJmx0PTImcz0yJmVzPVNfNXU0WDFqMmFYbkdOd1kuUkpWNWxFek9iSlNBMHAwb1ZLYlRYWGoyRERiMi4udTdEWEpYMHRldEhIc2xiLkdtajg5aWlqYkJ0VGpFbWt4%2FRV%3D2%2FRE%3D1725086361%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8k4YwntxTTSJ3pjCdJcEi0DVUCUylND8Iss8blWsEl4FPkDmdC3ng-dLrXBoA8SwiWe1BVTv3SRqIUTGfg6bUf8uxWk9GX-bhCR5eQuMNS7Gc1Hul4T4RotK4rsKYbESbbZSiya3k5Wm_-mEREK6PpWyTDZl_cKR_tuOa7ekdaPcCCDNR%2526u%253daHR0cHMlM2ElMmYlMmZ3d3cuanVzdGFuc3dlci5jb20lMmZzaXAlMmZlbGVjdHJvbmljcyUzZnIlM2RwcGMlN2NtcyU3YzEyJTdjVVMlMjUyMC0lMjUyMEdlbmVyYWwlMjUyMC0lMjUyMFNRUiUyNTIwLSUyNTIwU2V0NSUyNTIwLSUyNTIwU2VhcmNoJTI1MjAtJTI1MjBBbGwlMjUyMERldmljZSUyNTIwLSUyNTIwRXhhY3QlN2NHZW5lcmFsJTI1MjAtJTI1MjBFeHBlcnQlMjUyMC0lMjUyMFNRUiUyNTIwLVNldDUlN2MlMjZKUEtXJTNkc2VydmljZSUyNTIwY3VzdG9tZXIlMjUyMHN1cHBvcnQlMjZKUERDJTNkUyUyNkpQU1QlM2QlMjZKUEFEJTNkJTI2SlBNVCUzZGUlMjZKUE5XJTNkcyUyNkpQQUYlM2R0e [TRUNCATED] Host: ww01.rotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://ww01.rotect.com/Customer_Service_Support.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElK [TRUNCATED] Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=919vr47003992153469591; __cmpcc=1; __gsas=ID=46e899ebb71f7b61:T=1722494361:RT=1722494361:S=ALNI_Mb5XzFUNBfZRjNKVj9nGqktdtTQHw; __cmpcccx68884=aBQCr8gEAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Aug 1, 2024 08:39:24.208755016 CEST	1236	IN	HTTP/1.1 302 Found Date: Thu, 01 Aug 2024 06:39:07 GMT Server: Apache Location: https://r.search.yahoo.com/rdclk/dWU9OTg3NzI4NDNFMjZBNEIyQiZ1dD0xNzIyNDk0MzYxNDUwJnVvPTc4MjAyOTY4MDQ4NzgxJmx0PTImcz0yJmVzPVNfNXU0WDFqMmFYbkdOd1kuUkpWNWxFek9iSlNBMHAwb1ZLYlRYWGoyRERiMi4udTdEWEpYMHRldEhIc2xiLkdtajg5aWlqYkJ0VGpFbWt4/RV=2/RE=1725086361/RO=14/RU=https%3a%2f%2fwww.bing.com%2faclick%3fld%3de8k4YwntxTTSJ3pjCdJcEi0DVUCUylND8Iss8blWsEl4FPkDmdC3ng-dLrXBoA8SwiWe1BVTv3SRqIUTGfg6bUf8uxWk9GX-bhCR5eQuMNS7Gc1Hul4T4RotK4rsKYbESbbZSiya3k5Wm_-mEREK6PpWyTDZl_cKR_tuOa7ekdaPcCCDNR%26u%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 [TRUNCATED] Data Raw: Data Ascii:
Aug 1, 2024 08:39:26.979391098 CEST	4173	OUT	GET /trf?q=Customer+Service+Support&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9OTg3NzI4NDNFMjZBNEIyQiZ1dD0xNzIyNDk0MzYxNDUwJnVvPTc4MjAyOTY4MDQ4NzgxJmx0PTImcz0yJmVzPVNfNXU0WDFqMmFYbkdOd1kuUkpWNWxFek9iSlNBMHAwb1ZLYlRYWGoyRERiMi4udTdEWEpYMHRldEhIc2xiLkdtajg5aWlqYkJ0VGpFbWt4%2FRV%3D2%2FRE%3D1725086361%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8k4YwntxTTSJ3pjCdJcEi0DVUCUylND8Iss8blWsEl4FPkDmdC3ng-dLrXBoA8SwiWe1BVTv3SRqIUTGfg6bUf8uxWk9GX-bhCR5eQuMNS7Gc1Hul4T4RotK4rsKYbESbbZSiya3k5Wm_-mEREK6PpWyTDZl_cKR_tuOa7ekdaPcCCDNR%2526u%253daHR0cHMlM2ElMmYlMmZ3d3cuanVzdGFuc3dlci5jb20lMmZzaXAlMmZlbGVjdHJvbmljcyUzZnIlM2RwcGMlN2NtcyU3YzEyJTdjVVMlMjUyMC0lMjUyMEdlbmVyYWwlMjUyMC0lMjUyMFNRUiUyNTIwLSUyNTIwU2V0NSUyNTIwLSUyNTIwU2VhcmNoJTI1MjAtJTI1MjBBbGwlMjUyMERldmljZSUyNTIwLSUyNTIwRXhhY3QlN2NHZW5lcmFsJTI1MjAtJTI1MjBFeHBlcnQlMjUyMC0lMjUyMFNRUiUyNTIwLVNldDUlN2MlMjZKUEtXJTNkc2VydmljZSUyNTIwY3VzdG9tZXIlMjUyMHN1cHBvcnQlMjZKUERDJTNkUyUyNkpQU1QlM2QlMjZKUEFEJTNkJTI2SlBNVCUzZGUlMjZKUE5XJTNkcyUyNkpQQUYlM2R0e [TRUNCATED] Host: ww01.rotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=919vr47003992153469591; __cmpcc=1; __gsas=ID=46e899ebb71f7b61:T=1722494361:RT=1722494361:S=ALNI_Mb5XzFUNBfZRjNKVj9nGqktdtTQHw; __cmpcccx68884=aBQCr8gEAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Aug 1, 2024 08:39:27.190440893 CEST	222	IN	HTTP/1.1 302 Found Date: Thu, 01 Aug 2024 06:39:10 GMT Server: Apache Location: //www.justanswer.com Content-Length: 0 Keep-Alive: timeout=5, max=124 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Aug 1, 2024 08:39:35.153238058 CEST	3297	OUT	GET /Allied_Medical_Winslow_Az_Driver.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRj [TRUNCATED] Host: ww01.rotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=919vr47003992153469591; __cmpcc=1; __gsas=ID=46e899ebb71f7b61:T=1722494361:RT=1722494361:S=ALNI_Mb5XzFUNBfZRjNKVj9nGqktdtTQHw; __cmpcccx68884=aBQCr8gEAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Aug 1, 2024 08:39:36.311003923 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:18 GMT Server: Apache X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_Aac4rwg+j1TWjdwM1pZVrh7YVNjC3TQOyJRElM26bwGQJngicdr0NdomdeB5iV/Cczh9gMququxyK0TdjrkkTg== Keep-Alive: timeout=5, max=126 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 39 36 36 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 [TRUNCATED] Data Ascii: 9660<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){win
Aug 1, 2024 08:39:36.576523066 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:18 GMT Server: Apache X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_Aac4rwg+j1TWjdwM1pZVrh7YVNjC3TQOyJRElM26bwGQJngicdr0NdomdeB5iV/Cczh9gMququxyK0TdjrkkTg== Keep-Alive: timeout=5, max=126 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 39 36 36 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 [TRUNCATED] Data Ascii: 9660<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){win
Aug 1, 2024 08:39:39.055339098 CEST	6668	OUT	GET /trf?q=Allied+Medical+Winslow+Az+Driver&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9QjNERUZDNjRCM0EwNDY0RiZ1dD0xNzIyNDk0Mzc1MzcxJnVvPTc5NDM5ODI0NzAxMjczJmx0PTImcz0yJmVzPTJrOE80c041LjJyeUFzUlhaVmhQRDRWdEpMTHZMZkpkaWFjMzJLdW5CeW5acWNHTlVFNzU0TFNrNVpCbF91X0ladk8zRW96MFBvWEVRZy0t%2FRV%3D2%2FRE%3D1725086375%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8v9GQKnSqbyIt5XJpxiXAnzVUCUyllzQWO0olRcqZ1Mxpl8hcj3k6uecA0aoixs6Hd6ZuFeylLYSaV5ljQB7mvLXU8niOntuCp_PYaUOGG1vmtyqwbH_w0cDm-N2qwwYYDZIFc_3sBEEXxkKf9T0GXMOd18WJb3Z3C422QHJUbROA8ND5%2526u%253daHR0cHMlM2ElMmYlMmZ3d3cuZXZlcnlqb2Jmb3JtZS5jb20lMmZscG0lM2ZjcmVhdGl2ZSUzZCUyNm1hdGNodHlwZSUzZHAlMjZuZXR3b3JrJTNkcyUyNmRldmljZSUzZGMlMjZwbGFjZW1lbnQlM2QlMjZhY2VpZCUzZCU3YmFjZWlkJTdkJTI2cG9zJTNkJTI2a3clM2RhbGxpZWQlMjUyMGhlYWx0aCUyNTIwam9icyUyNm1zY2xraWQlM2Q0MDlmYjg1ZWFiMDAxMzNkZjNhY2RlZjU4NmE3ZDhiYiUyNm1hdGNodHlwZSUzZHAlMjZ1dG1fc291cmNlJTNkYmluZyUyNnV0bV9tZWRpdW0lM2RjcGMlMjZjYW1wYWlnbiUzZDM1NTgyOTIxOCUyNnZ0Y2lkJTNkMzU1ODI5MjE4JTI2dnRhZ2lkJTNkMTI3M [TRUNCATED] Host: ww01.rotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://ww01.rotect.com/Allied_Medical_Winslow_Az_Driver.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkD [TRUNCATED] Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=919vr47003992153469591; __cmpcc=1; __gsas=ID=46e899ebb71f7b61:T=1722494361:RT=1722494361:S=ALNI_Mb5XzFUNBfZRjNKVj9nGqktdtTQHw; __cmpcccx68884=aBQCr8iZAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Aug 1, 2024 08:39:39.355382919 CEST	1236	IN	HTTP/1.1 302 Found Date: Thu, 01 Aug 2024 06:39:22 GMT Server: Apache Location: https://r.search.yahoo.com/rdclk/dWU9QjNERUZDNjRCM0EwNDY0RiZ1dD0xNzIyNDk0Mzc1MzcxJnVvPTc5NDM5ODI0NzAxMjczJmx0PTImcz0yJmVzPTJrOE80c041LjJyeUFzUlhaVmhQRDRWdEpMTHZMZkpkaWFjMzJLdW5CeW5acWNHTlVFNzU0TFNrNVpCbF91X0ladk8zRW96MFBvWEVRZy0t/RV=2/RE=1725086375/RO=14/RU=https%3a%2f%2fwww.bing.com%2faclick%3fld%3de8v9GQKnSqbyIt5XJpxiXAnzVUCUyllzQWO0olRcqZ1Mxpl8hcj3k6uecA0aoixs6Hd6ZuFeylLYSaV5ljQB7mvLXU8niOntuCp_PYaUOGG1vmtyqwbH_w0cDm-N2qwwYYDZIFc_3sBEEXxkKf9T0GXMOd18WJb3Z3C422QHJUbROA8ND5%26u%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 [TRUNCATED] Data Raw: Data Ascii:
Aug 1, 2024 08:39:42.069750071 CEST	4113	OUT	GET /trf?q=Allied+Medical+Winslow+Az+Driver&&r=https%3A%2F%2Fr.search.yahoo.com%2Frdclk%2FdWU9QjNERUZDNjRCM0EwNDY0RiZ1dD0xNzIyNDk0Mzc1MzcxJnVvPTc5NDM5ODI0NzAxMjczJmx0PTImcz0yJmVzPTJrOE80c041LjJyeUFzUlhaVmhQRDRWdEpMTHZMZkpkaWFjMzJLdW5CeW5acWNHTlVFNzU0TFNrNVpCbF91X0ladk8zRW96MFBvWEVRZy0t%2FRV%3D2%2FRE%3D1725086375%2FRO%3D14%2FRU%3Dhttps%253a%252f%252fwww.bing.com%252faclick%253fld%253de8v9GQKnSqbyIt5XJpxiXAnzVUCUyllzQWO0olRcqZ1Mxpl8hcj3k6uecA0aoixs6Hd6ZuFeylLYSaV5ljQB7mvLXU8niOntuCp_PYaUOGG1vmtyqwbH_w0cDm-N2qwwYYDZIFc_3sBEEXxkKf9T0GXMOd18WJb3Z3C422QHJUbROA8ND5%2526u%253daHR0cHMlM2ElMmYlMmZ3d3cuZXZlcnlqb2Jmb3JtZS5jb20lMmZscG0lM2ZjcmVhdGl2ZSUzZCUyNm1hdGNodHlwZSUzZHAlMjZuZXR3b3JrJTNkcyUyNmRldmljZSUzZGMlMjZwbGFjZW1lbnQlM2QlMjZhY2VpZCUzZCU3YmFjZWlkJTdkJTI2cG9zJTNkJTI2a3clM2RhbGxpZWQlMjUyMGhlYWx0aCUyNTIwam9icyUyNm1zY2xraWQlM2Q0MDlmYjg1ZWFiMDAxMzNkZjNhY2RlZjU4NmE3ZDhiYiUyNm1hdGNodHlwZSUzZHAlMjZ1dG1fc291cmNlJTNkYmluZyUyNnV0bV9tZWRpdW0lM2RjcGMlMjZjYW1wYWlnbiUzZDM1NTgyOTIxOCUyNnZ0Y2lkJTNkMzU1ODI5MjE4JTI2dnRhZ2lkJTNkMTI3M [TRUNCATED] Host: ww01.rotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=919vr47003992153469591; __cmpcc=1; __gsas=ID=46e899ebb71f7b61:T=1722494361:RT=1722494361:S=ALNI_Mb5XzFUNBfZRjNKVj9nGqktdtTQHw; __cmpcccx68884=aBQCr8iZAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Aug 1, 2024 08:39:42.309966087 CEST	244	IN	HTTP/1.1 302 Found Date: Thu, 01 Aug 2024 06:39:25 GMT Server: Apache Location: //www.everyjobforme.com/AlliedHealth/Apply Content-Length: 0 Keep-Alive: timeout=5, max=128 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Aug 1, 2024 08:39:49.122251987 CEST	3290	OUT	GET /Flatbed_Truck_Driving_Jobs.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXI [TRUNCATED] Host: ww01.rotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=919vr47003992153469591; __cmpcc=1; __gsas=ID=46e899ebb71f7b61:T=1722494361:RT=1722494361:S=ALNI_Mb5XzFUNBfZRjNKVj9nGqktdtTQHw; __cmpcccx68884=aBQCr8iZAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Aug 1, 2024 08:39:50.160886049 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:32 GMT Server: Apache X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_EEI6f/809mPjleh8OVL0XgVum1J1tphMNo+kClG1kPj6utSgIr390B6FwyQCtEbmMlXYJxzO8YpJAL+MyhctAQ== Keep-Alive: timeout=5, max=119 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 39 38 39 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 [TRUNCATED] Data Ascii: 989c<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){win
Aug 1, 2024 08:39:53.306869030 CEST	3283	OUT	GET /Job_Vacancies_Jobs.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc [TRUNCATED] Host: ww01.rotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=919vr47003992153469591; __cmpcc=1; __gsas=ID=46e899ebb71f7b61:T=1722494361:RT=1722494361:S=ALNI_Mb5XzFUNBfZRjNKVj9nGqktdtTQHw; __cmpcccx68884=aBQCr8kcAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Aug 1, 2024 08:39:54.215235949 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:36 GMT Server: Apache X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_oBbGGCxfMMr+3aPrAnijvK4AxZEqGmxp+z3EBLZC1tGKVllf5vEsmgDwpPo22fBwe4NI546GqXqxu4UgSR6w7g== Keep-Alive: timeout=5, max=128 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 39 36 37 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 [TRUNCATED] Data Ascii: 967a<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){win
Aug 1, 2024 08:39:59.140036106 CEST	3286	OUT	GET /Allied_Medical_Driver.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uIL [TRUNCATED] Host: ww01.rotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=919vr47003992153469591; __cmpcc=1; __gsas=ID=46e899ebb71f7b61:T=1722494361:RT=1722494361:S=ALNI_Mb5XzFUNBfZRjNKVj9nGqktdtTQHw; __cmpcccx68884=aBQCr8lKAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Aug 1, 2024 08:40:00.110132933 CEST	1236	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:42 GMT Server: Apache X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_G0qngCic7qksZbD1ZpNEzDsLNCNE7SDcM/z9OzAuOyxmtb0JMSnWk6VP5ypwjBGpHKi7fjeXNdj7XH2YgAaNFA== Keep-Alive: timeout=5, max=127 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 39 36 63 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 [TRUNCATED] Data Ascii: 96c1<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){win

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.9	49729	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:38:59.332746029 CEST	327	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:38:59.784269094 CEST	341	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:38:43 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Thu, 16 Feb 2023 20:41:55 GMT Connection: keep-alive ETag: "63ee9513-20f3" Expires: Thu, 15 Aug 2024 06:38:43 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Aug 1, 2024 08:38:59.784863949 CEST	1236	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n
Aug 1, 2024 08:38:59.784918070 CEST	1236	IN	Data Raw: 28 29 3b 6f 3c 31 65 33 26 26 28 6f 2b 3d 31 39 30 30 29 3b 76 61 72 20 72 3d 6e 2e 67 65 74 44 61 79 28 29 2c 69 3d 6e 2e 67 65 74 4d 6f 6e 74 68 28 29 2c 6e 3d 6e 2e 67 65 74 44 61 74 65 28 29 3b 6e 3c 31 30 26 26 28 6e 3d 22 30 22 2b 6e 29 3b Data Ascii: ();o<1e3&&(o+=1900);var r=n.getDay(),i=n.getMonth(),n=n.getDate();n<10&&(n="0"+n);o=t[r]+", "+e[i]+" "+n+", "+o;document.write(o)}function checkUTFChar(t){for(var e=!0,n=0;n<128;++n){var o=n.toString(16);if(1==o.length&&(o="0"+o),o="%"+o,(o=un
Aug 1, 2024 08:38:59.784954071 CEST	1236	IN	Data Raw: 65 28 62 72 5f 64 61 74 61 2e 67 65 74 4d 6f 75 73 65 50 6f 73 69 74 69 6f 6e 44 61 74 61 28 29 29 3a 22 61 64 63 6c 6b 22 3d 3d 74 7c 7c 22 73 72 63 71 72 79 22 3d 3d 74 3f 22 26 62 64 3d 22 2b 65 73 63 61 70 65 28 62 72 5f 64 61 74 61 2e 67 65 Data Ascii: e(br_data.getMousePositionData()):"adclk"==t\|\|"srcqry"==t?"&bd="+escape(br_data.getSearchBoxRelatedData()):"&bd="+escape(br_data.getURLBrowserData())}catch(t){}return e}var brdata=function(){this.fd="#",this.cookieSupport=-1,this.isinframe=-1,
Aug 1, 2024 08:38:59.784991026 CEST	1236	IN	Data Raw: 65 50 6f 73 69 74 69 6f 6e 44 61 74 61 28 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 66 69 72 6d 54 6f 4f 70 74 4f 75 74 28 29 7b 76 61 72 20 74 3b 6f 70 74 4f 75 74 3d 63 6f 6e 66 69 72 6d 28 22 59 6f 75 20 77 69 6c 6c 20 6e 6f 74 20 62 65 Data Ascii: ePositionData()}};function confirmToOptOut(){var t;optOut=confirm("You will not be able to see any ads or websearches."),optOut&&((t=new Date).setTime(t.getTime()+31536e6),t="; expires="+t.toGMTString(),document.cookie="dnsoptout=1"+t+"; path=
Aug 1, 2024 08:38:59.785079002 CEST	1236	IN	Data Raw: 69 65 6e 74 57 69 64 74 68 26 26 28 65 3d 74 68 69 73 2e 5f 54 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 57 69 64 74 68 29 7d 63 61 74 63 68 28 74 29 7b 65 3d 30 7d 72 65 74 75 72 6e 20 65 7d 2c 5f 77 74 3a 66 75 6e 63 Data Ascii: ientWidth&&(e=this._Top.document.body.clientWidth)}catch(t){e=0}return e},_wt:function(){return this._Top?null!=this._Top.window.screenTop?this._Top.window.screenTop:this._Top.window.screenY:0},_wl:function(){return this._Top?null!=this._Top.w
Aug 1, 2024 08:38:59.785114050 CEST	1236	IN	Data Raw: 72 7c 7c 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 3d 74 29 7d 2c 4d 61 69 6e 28 29 7d 2c 5f 6e 70 57 2e 50 61 72 61 6d 73 3d 7b 64 55 72 6c 3a 75 72 6c 7d 2c 5f 6e 70 57 2e 49 6e 69 74 28 5f 6e 70 57 29 29 2c 5f 6e 70 57 7d 7d 3b 66 75 6e Data Ascii: r\|\|(window.location=t)},Main()},_npW.Params={dUrl:url},_npW.Init(_npW)),_npW}};function renderFACP(t){if("ex"==t)return!1;if(1!=showPop\|\|"undefined"==typeof __pp\|\|void 0===__pp.FACP\|\|0!=__pp.FACP.pd)return!1;try{if(t\|\|((t=window.event\|\|window.
Aug 1, 2024 08:38:59.785198927 CEST	1019	IN	Data Raw: 67 74 68 26 26 30 3d 3d 5f 5f 70 70 2e 6b 70 2e 70 64 26 26 28 5f 5f 70 70 2e 6b 70 2e 70 64 3d 21 30 2c 22 65 78 22 3d 3d 74 26 26 28 5f 5f 70 70 2e 6b 70 2e 75 3d 5f 5f 70 70 2e 6b 70 2e 75 2b 22 26 5f 6f 6e 78 5f 3d 31 22 29 2c 5f 73 6b 50 55 Data Ascii: gth&&0==__pp.kp.pd&&(__pp.kp.pd=!0,"ex"==t&&(__pp.kp.u=__pp.kp.u+"&_onx_=1"),_skPU.doPU(__pp.kp.u,__pp.kp.w,__pp.kp.h,__pp.kp.p,"ex"==t)),shldp("ld"))}catch(t){}("ex"==t?shmsc:"ld"==t?shldp:shdsp)(t)}catch(t){}}function shmsc(t){if("undefined"
Aug 1, 2024 08:38:59.850678921 CEST	392	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:38:59.947984934 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:38:43 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Thu, 15 Aug 2024 06:38:43 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 30 f2 00 2c c1 00 2c 37 03 90 81 f9 8f 29 b2 13 3b 91 25 a0 9b ae dd a1 ab d6 7a bc 0f e7 7c b7 4e fd b0 ab 8a 28 f1 09 c8 13 96 00 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c [TRUNCATED] Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0P%@a@a0@a0P0P(P(P((@a@a0@a0P0P(P(P((@a@a0@aPeaLt[=ul=HhOnNc=e{l[,lu_cnk,n;~'^a$sbV&aqcm3Ts*l#zXtH+8c/BH1>CXHay/AIl2g}s/Q8{.;R91oeGo-V:;u$5'.lW:Q\v_:z4',l]2z4'e,~O]%>\|v_2U}8u=hL4$7aj;eMhL\>',/]I,{}a91\|Jz
Aug 1, 2024 08:38:59.948048115 CEST	553	IN	Data Raw: b1 73 e2 d5 85 ed aa 5b 43 07 31 c7 b0 d3 f6 53 17 56 dd 8c e8 20 e6 18 96 72 88 08 4b e8 20 e6 18 96 f8 01 7c 65 61 db 1a 97 d0 8b 98 d7 b0 f2 73 62 f8 8c 1a 3f 6a d3 c2 07 f0 95 33 ce 55 85 55 39 23 1e fd 63 98 c5 54 ba 3f 16 93 15 b6 b5 82 34 Data Ascii: s[C1SV rK \|easb?j3UU9#cT?4JYA)O(W.:+FOQX3DWsn]{d^Va4\>gDbvU1aEjass+e9<lNTX3KVaV\|
Aug 1, 2024 08:38:59.948084116 CEST	1236	IN	Data Raw: aa 23 f1 d3 39 cc 88 bf f8 cd 54 39 f7 ad 6d 9e fd f0 c2 9a 9b 11 1d c3 1c c4 32 76 4f 98 11 1d c3 1c c4 12 b7 4f 98 11 1d c3 bc 88 25 ce 89 e1 5b de 6b 98 17 b1 c4 39 31 7c c9 1b 12 13 ac ed a0 b3 85 b5 f7 1d 6f 48 74 5f 9f 33 27 86 19 d1 90 68 Data Ascii: #9T9m2vOO%[k91\|oHt_3'hLL?*l!m9hgDwx"#Q8pvg{-nr34/=0isbz9_X?vq:1qN:\|%n0#Si^NfA(G\|cN,S
Aug 1, 2024 08:38:59.948137999 CEST	1236	IN	Data Raw: 76 8a 3a 8a b0 91 14 a6 30 85 29 4c 61 0a 53 58 5d fc bd c4 32 36 b6 92 c2 3e e4 6f fe 96 b1 b4 95 14 f6 21 3f 9a f2 b3 29 85 29 4c 61 0a 9b 2b 0f ce 9e 9c cb 17 b6 f2 af 71 76 95 e8 32 31 cb 97 45 7c f2 af 4a 57 98 c2 92 fa 7a 5d 8b f8 b9 22 1a Data Ascii: v:0)LaSX]26>o!?))La+qv21E\|JWz]"s21_iE-Lc.:\uil!BV6/LT}RKpc.:\u}a7 Vk10}}\m-ony(N7!Xs5!,}(.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.9	49730	199.191.50.153	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:38:59.384638071 CEST	315	OUT	GET /px.js?ch=1 HTTP/1.1 Host: ww01.rotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=919vr47003992153469591
Aug 1, 2024 08:38:59.872108936 CEST	628	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:38:43 GMT Server: Apache Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=124 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 76 61 72 20 61 62 70 3d 61 62 70 7c 7c 66 61 6c 73 65 3b 76 61 72 20 73 63 72 69 70 74 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 76 61 72 20 73 63 72 69 70 74 3d 73 63 72 69 70 74 73 5b 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 66 28 73 63 72 69 70 74 29 7b 76 61 72 20 71 75 65 72 79 3d 73 63 72 69 70 74 2e 73 72 63 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 2e 73 70 6c 69 74 28 22 26 22 29 3b 76 61 72 20 70 61 72 61 6d 73 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 71 75 65 72 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 70 61 72 61 6d 3d 71 75 65 72 79 5b 69 5d 2e 73 70 6c 69 74 28 22 3d 22 29 3b 70 61 72 61 6d 73 5b 70 61 72 61 6d 5b 30 5d 5d 3d 70 61 72 61 6d 5b 31 5d 7d 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 31 29 61 62 70 3d 74 72 75 65 3b 65 6c 73 65 20 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 32 29 61 62 70 3d 61 62 70 26 [TRUNCATED] Data Ascii: var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};
Aug 1, 2024 08:39:00.521496058 CEST	315	OUT	GET /px.js?ch=2 HTTP/1.1 Host: ww01.rotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=919vr47003992153469591
Aug 1, 2024 08:39:00.623085976 CEST	628	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:38:44 GMT Server: Apache Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=122 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 76 61 72 20 61 62 70 3d 61 62 70 7c 7c 66 61 6c 73 65 3b 76 61 72 20 73 63 72 69 70 74 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 76 61 72 20 73 63 72 69 70 74 3d 73 63 72 69 70 74 73 5b 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 66 28 73 63 72 69 70 74 29 7b 76 61 72 20 71 75 65 72 79 3d 73 63 72 69 70 74 2e 73 72 63 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 2e 73 70 6c 69 74 28 22 26 22 29 3b 76 61 72 20 70 61 72 61 6d 73 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 71 75 65 72 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 70 61 72 61 6d 3d 71 75 65 72 79 5b 69 5d 2e 73 70 6c 69 74 28 22 3d 22 29 3b 70 61 72 61 6d 73 5b 70 61 72 61 6d 5b 30 5d 5d 3d 70 61 72 61 6d 5b 31 5d 7d 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 31 29 61 62 70 3d 74 72 75 65 3b 65 6c 73 65 20 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 32 29 61 62 70 3d 61 62 70 26 [TRUNCATED] Data Ascii: var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};
Aug 1, 2024 08:39:45.637762070 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.9	49732	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:38:59.858244896 CEST	395	OUT	GET /__media__/pics/28905/arrrow.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:00.308995962 CEST	326	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:38:43 GMT Content-Type: image/png Content-Length: 283 Last-Modified: Tue, 04 Jan 2022 14:44:27 GMT Connection: keep-alive ETag: "61d45d4b-11b" Expires: Thu, 15 Aug 2024 06:38:43 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Aug 1, 2024 08:39:00.440438032 CEST	283	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 1b 08 03 00 00 00 ad 28 94 ae 00 00 00 48 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR(HPLTEGpLztRNSt@fU2'dgkIDAT} P{O5$vaWJIih^JF5PzHLzF/h:{t
Aug 1, 2024 08:39:22.299166918 CEST	396	OUT	GET /__media__/pics/28905/res-arw.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:22.411317110 CEST	672	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:05 GMT Content-Type: image/png Content-Length: 346 Last-Modified: Tue, 04 Jan 2022 14:44:28 GMT Connection: keep-alive ETag: "61d45d4c-15a" Expires: Thu, 15 Aug 2024 06:39:05 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 1d 08 03 00 00 00 f8 b5 4e 88 00 00 00 45 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 57 d4 34 b7 00 00 00 16 74 52 4e 53 00 51 a8 e4 9d fa 21 30 f4 13 ba 01 72 90 da 3e 7e 03 c7 5f 0a 88 8d 4f 23 a5 00 00 00 ae 49 44 41 54 28 cf 85 93 e1 12 83 20 0c 83 11 41 d4 82 0a 6a de ff 51 37 b7 dd 4e a4 94 ef 77 ae 85 34 51 e7 7e a8 06 2b c6 30 34 34 33 80 b9 8b 92 c4 e1 a2 df 26 41 a3 3f 1a 58 bd 92 3c e6 62 f1 b5 51 e6 af c1 68 1c a7 a0 c1 e2 46 62 5d 30 c8 e0 5c c8 c7 80 75 21 a0 e0 e1 02 4d 23 18 32 17 e8 04 cb dd 05 7e 4c ee 82 a9 48 ac 76 e2 63 b2 37 07 4e 90 f6 a8 a8 6e 0c ec e3 14 9a db 40 fc ad 7f 1b ca 84 cd c5 37 a9 88 ef 6d 03 1f 99 24 5c ef 4b 27 c7 e9 4d 5c 1a a1 54 6a 47 ab 25 47 df ec 9a 5f fc a1 a2 5c 58 6a 55 fa 05 63 50 20 91 7b 34 90 ee 00 00 00 00 [TRUNCATED] Data Ascii: PNGIHDR"NEPLTEGpLW4tRNSQ!0r>~_O#IDAT( AjQ7Nw4Q~+0443&A?X<bQhFb]0\u!M#2~LHvc7Nn@7m$\K'M\TjG%G_\XjUcP {4IENDB`
Aug 1, 2024 08:40:07.424937010 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.9	49735	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:00.594337940 CEST	387	OUT	GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive Origin: http://ww01.rotect.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:00.986238956 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:38:44 GMT Content-Type: application/font-woff Content-Length: 17312 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-43a0" Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 a0 00 10 00 00 00 00 73 60 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 6c 00 00 00 1c 00 00 00 1c 69 99 f4 2b 47 44 45 46 00 00 01 88 00 00 00 1e 00 00 00 1e 00 27 01 0d 47 50 4f 53 00 00 01 a8 00 00 0c c5 00 00 16 c0 c0 0d d5 ee 47 53 55 42 00 00 0e 70 00 00 00 20 00 00 00 20 6c 91 74 8f 4f 53 2f 32 00 00 0e 90 00 00 00 54 00 00 00 60 a6 e9 3d 09 63 6d 61 70 00 00 0e e4 00 00 02 75 00 00 03 86 c7 ce be ea 67 61 73 70 00 00 11 5c 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 11 64 00 00 28 0b 00 00 47 38 61 9a 3f 94 68 65 61 64 00 00 39 70 00 00 00 34 00 00 00 36 09 88 d5 e9 68 68 65 61 00 00 39 a4 00 00 00 21 00 00 00 24 07 97 04 27 68 6d 74 78 00 00 39 c8 00 00 02 ad 00 00 04 1a 59 f7 2d 9c 6c 6f 63 61 00 00 3c 78 00 00 02 09 00 00 02 10 b1 e6 c4 00 6d 61 78 70 00 00 3e 84 00 00 00 1f 00 00 00 20 01 50 00 37 6e 61 6d 65 00 00 3e a4 00 00 02 df 00 00 06 99 17 bc cd 9c 70 6f 73 74 00 00 41 84 00 00 02 11 00 00 [TRUNCATED] Data Ascii: wOFFCs`FFTMli+GDEF'GPOSGSUBp ltOS/2T`=cmapugasp\glyfd(G8a?head9p46hhea9!$'hmtx9Y-loca<xmaxp> P7name>postA8Y,prepChh<'d:x[l\vb{l7ho+.!Qp1OPP%hUUUEMpQZA1I !C@==:cBP5:>9{^k)wJx)R~gO>m~6BJ:tIY_dq/mxel\|icKclzjo%;^x}olegOVV=\5]z_ono;555nO/ctR4tKTCmH]nT::tjAJwU$![yJ+u)IH7IH%}nZef/ ?(OA7)qpf#xxMO;jq77DsO@tD1Et0F`fd9wIXFafxlC[0F0
Aug 1, 2024 08:39:00.986299992 CEST	1236	IN	Data Raw: 44 dd ee 45 e9 61 dc 63 28 f3 38 3c 47 b9 6a d1 ec 05 2c 04 99 99 84 53 82 59 a7 e4 3e ac 74 b8 ef 32 73 9a 59 a7 e0 96 83 47 12 0e f3 70 58 94 61 f7 8a 84 dc e7 d0 f4 39 14 0a fc 77 01 85 96 51 e8 02 0a 45 51 28 86 42 19 70 bc 03 8e 14 56 c3 28 Data Ascii: DEac(8<Gj,SY>t2sYGpXa9wQEQ(BpV(G9X`-J!G4Bap["8&`KfY3k00d'8<YQuk{"333J/<y6A>4sDCs9jfV4s%>
Aug 1, 2024 08:39:00.986314058 CEST	1236	IN	Data Raw: c1 69 10 bc 67 55 37 6b 7c c1 66 8e 63 f7 57 c3 fb 12 68 cc 1e 71 1a ee 09 50 ed 83 7b 1a ee df 06 5d 0f e8 e6 ed 2a dc 0f c2 59 e5 3f c3 ca 27 d1 3c 85 6f fa 43 a9 d3 3e a3 8d 48 f2 f6 e4 84 ad b4 46 83 04 08 92 76 77 37 79 9b d7 fd 63 58 f7 66 Data Ascii: igU7k\|fcWhqP{]*Y?'<oC>HFvw7ycXfF~]mw(7(8CaW`kub-X&r6ZEkI/c#+p~oxjyu,.yB2KPa~M#cN-GE_T1Gha^l6
Aug 1, 2024 08:39:00.986371994 CEST	1236	IN	Data Raw: e0 5c a7 bb ca 01 ee 4f f0 74 84 be 92 3c 22 82 7c 5c bd cc 9b 61 64 0d 6b fe 0c 4c 26 6d 67 9c b5 e7 ad 79 a2 f0 aa dd 63 a2 a0 3a 41 cc f9 ec fb 39 d3 9b 35 11 75 4d 5a 09 97 d5 42 c0 3d 46 0f 1a b1 3d e8 ff 67 2d 49 84 6e 44 c5 0f f4 0d 91 39 Data Ascii: \Ot<"\|\adkL&mgyc:A95uMZB=F=g-InD9N--SO7S"SDkQ{g:/^-k>{I.sfmg$BTiv\NuK//?[A-?-G\|\|zW\|\|_^qv>I!(&e^H
Aug 1, 2024 08:39:00.986424923 CEST	1174	IN	Data Raw: bb fc 6b fd bb fd eb 03 a6 c9 5b 02 66 05 74 07 4c 09 38 10 34 47 f8 77 ad a2 76 0c 1c 5d b5 f5 00 fe b7 75 d5 d6 13 f8 df d6 55 65 88 87 e7 c2 6c 97 49 11 f9 1e f1 a8 b8 70 8e 1b 6e d4 ea cc 0a a5 51 0f 89 26 b3 d1 20 57 28 65 5a 9d 3c 18 7c 5c Data Ascii: k[ftL84Gwv]uUelIpnQ& W(eZ<\|\drDwQi%smna72-k@@o7.;pF<p8^&GT\bh84`J]\|.j-e)\|&z}ek.>O4:\|@
Aug 1, 2024 08:39:00.986437082 CEST	1236	IN	Data Raw: 99 85 22 1f 42 52 62 23 26 75 c4 4f d1 07 97 c8 94 d9 0d e9 a9 53 92 13 57 57 15 45 af bb be ae 8f 0d 41 c8 06 ef d0 bb a6 ea cc e4 ea 34 86 33 07 f5 e6 07 b4 31 4c ee ed 9a 43 a4 f7 1c a6 41 06 07 3d 82 71 76 75 c2 b9 99 b6 1e ce 8a 73 5d a9 85 Data Ascii: "BRb#&uOSWWEA431LCA=qvus]Z/i0S9(gGg%n]m "B \>pSY}GK5%g}W0(DXq",7#!])'DoAm2nDF.\==4Q3;\|Fv
Aug 1, 2024 08:39:00.986566067 CEST	1236	IN	Data Raw: a7 85 c5 37 3e d3 b1 e2 be a6 f0 8c 70 ef a0 69 2f cf 8b 8b b9 4f dc bf 40 a4 73 3c d3 5b 8e ee 9d 86 fa e9 d5 bd 7f 44 bf 9d 68 bd 4a 12 37 6f c6 31 13 6d 3f 91 93 a2 bc 86 51 21 45 cb 89 36 82 bd 83 69 63 71 ef 69 e1 e7 33 bd 1b 1b 2c b0 5e 58 Data Ascii: 7>pi/O@s<[DhJ7o1m?Q!E6icqi3,^XvYXmfEppoggx(t/HMo'Wl;c?H+,(P76iCJ%4A==p#Du&-!%*'0tw\|p5=
Aug 1, 2024 08:39:00.986577988 CEST	448	IN	Data Raw: 70 07 e3 29 0d 95 fc 30 49 c8 a9 7f d4 13 9d 56 d4 21 34 5b c1 44 a9 80 0f 3b a6 a4 ae 4f cc b6 d4 05 a9 63 6b 62 83 d3 96 3e 57 97 94 b7 2d 66 66 74 70 52 75 7d 74 d4 f4 2c a5 36 34 d0 c7 5b fb c0 f4 cc e6 38 ad dc 37 d4 d3 4b 2d fa 60 38 8b 3e Data Ascii: p)0IV!4[D;Ockb>W-fftpRu}t,64[87K-`8>;W sj9T.D9Qp\|{.=J8tn);/]8*$P{o=on{AS b>'{3gNM_i8<o
Aug 1, 2024 08:39:00.986593008 CEST	1236	IN	Data Raw: 44 dc dd 04 44 97 82 ae 9c e2 8e 86 f8 01 68 bc 06 63 a1 b0 fc c0 0f 7e 81 8f a8 36 41 82 31 51 27 9e 40 d5 2e 4a 1d b3 11 30 43 c5 2f 75 99 98 ac 5e a3 f5 87 25 b2 b2 8c b0 95 70 24 7a e4 e8 d0 8a a2 2c ad 26 ac ac 3c 93 ea 24 42 ba 83 31 1f cb Data Ascii: DDhc~6A1Q'@.J0C/u^%p$z,&<$B1k4Fo98wap^u8mH,)i8\30tM75,*;jdME8]G{>qf1nUp<7#m9&hCYtFg#"&uBT=z{g
Aug 1, 2024 08:39:00.986605883 CEST	1236	IN	Data Raw: d8 99 09 7c b8 4f a4 9a 09 cd 5b 69 22 2e b5 94 e0 81 b8 06 c4 b3 50 3c 9c 87 ea be 9a 8c 14 aa d9 ab 7c 7b 82 c6 06 e1 e3 65 a9 a2 a7 51 ab cd 1a 4d 95 58 be 63 31 7d 2a 89 b1 eb 4e b8 ce a0 94 69 62 81 be c2 1e aa 33 dd 2d ec f5 d6 53 a2 ea 70 Data Ascii: \|O[i".P<\|{eQMXc1}*Nib3-SpR+mArEK$MvbY^`x^E)KYcc0s$!0U]2X)){]D1WOk2:5xf[[G]bg=h$#n
Aug 1, 2024 08:39:00.992574930 CEST	1236	IN	Data Raw: 8c 6a 59 fa 39 d1 9c 0e 52 eb 0e 3d 4b b2 20 94 25 c6 e8 d9 58 66 84 29 59 da c8 71 71 bd 3e 23 b4 fe a9 4d c9 35 89 9e 81 c5 29 29 9b 57 a7 c7 ac 68 93 ab e1 42 5a 91 71 52 a9 10 0f bf 6f 4c f2 4b f7 8e 0d 8a 0e 32 8c 9b 96 e1 dd 94 d6 d0 b6 ba Data Ascii: jY9R=K %Xf)Yqq>#M5))WhBZqRoLK2_eu!^BZtEk\Axp{aO{:&$_.w\|=PvCC&-jTh(E\|{=8nF+ks2)iu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.9	49736	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:00.594748974 CEST	393	OUT	GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive Origin: http://ww01.rotect.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:01.003858089 CEST	278	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:38:44 GMT Content-Type: application/font-woff Content-Length: 17264 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-4370" Access-Control-Allow-Origin: * Accept-Ranges: bytes
Aug 1, 2024 08:39:01.004110098 CEST	1236	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 70 00 10 00 00 00 00 71 40 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 43 54 00 00 00 1c 00 00 00 1c 6a aa b6 37 47 44 45 46 00 00 37 84 00 00 00 1e 00 00 00 1e 00 27 Data Ascii: wOFFCpq@FFTMCTj7GDEF7'GPOS7)MsMGSUB7 ltOS/2V`]@cmapugasp7\|glyfx)Gheadl66hhea!$
Aug 1, 2024 08:39:01.004123926 CEST	1236	IN	Data Raw: 27 75 10 61 ed e5 79 7b d1 aa 23 ec b5 07 f0 c1 f7 17 31 5c be e6 00 00 78 9c ad 92 57 4c 55 41 10 86 bf bd 5c ae 8a 05 41 44 44 c5 c3 51 40 ac 28 22 82 0d 15 0b 76 11 b1 a1 82 2d c6 5e 12 51 23 24 f6 82 15 b0 c4 96 60 2f 88 1a 1b d8 22 1a 35 21 Data Ascii: 'uay{#1\xWLUA\ADDQ@("v-^Q#$`/"5!`x0A("Lfu#HTV(pMy5I$)E[$:p%F8(--47StWBp-[-Mw]uOKoc>9)ST42`&"EzPQhZCMEu
Aug 1, 2024 08:39:01.004137039 CEST	1236	IN	Data Raw: 5d 62 59 70 6d 60 5b 50 14 2b bb ea a2 a8 20 c5 dd 5f 5d 5d b1 e0 ae 7c bb a8 e8 92 97 ef dc fb de 4c 26 13 58 bf 3f 65 26 33 b9 f7 dc 73 ce 3d ed 9e 73 ee 70 84 2b 19 be c9 7d 4a ce 72 ae dc 44 8e f3 d6 2b 79 2d ef a5 33 98 12 7d 14 b2 69 db 83 Data Ascii: ]bYpm`[P+ _]]\|L&X?e&3s=sp+}JrD+y-3}i*>zHWg xNzeM3?(\|xasS9r\+Y~r>gA={sGHcw$p.\01Qua
Aug 1, 2024 08:39:01.004225016 CEST	1236	IN	Data Raw: 5f 6f 77 0f 3d 45 2a 5a 38 66 0b 93 11 a7 5c f2 36 4a 04 c3 ca 0b f1 91 d3 1d 63 36 41 67 f0 62 84 ca 14 b6 e7 2b ef 6c 2c 9d b3 f3 db 9d 73 4a 4f 74 35 d5 59 ea 9a 3b 4b 4b 3b 4b c9 db 3d 0f 66 64 2d 69 58 b1 a2 61 49 56 c6 83 43 c3 a9 7d 69 69 Data Ascii: _ow=E*Z8f\6Jc6Agb+l,sJOt5Y;KK;K=fd-iXaIVC}ii}@9fNDyhe'rA%.D1%S:`(6-!s(Mupn18w<5JK=1@lJ.%a-%.BAhi?^tEl4Gb /Di
Aug 1, 2024 08:39:01.004237890 CEST	896	IN	Data Raw: 2e 83 5b 5f 2b 2a 69 dd bb 07 2e 3f 19 23 5c bb 46 4e f5 fe 9c b1 45 ff 0b db 8f 70 94 d9 7c c4 35 08 5f c9 14 41 64 44 40 0c b1 24 4c b2 69 28 c2 00 39 39 97 e6 6f b5 3c b2 a6 a4 67 51 72 6e e6 c1 8a a9 19 f7 75 e5 6e 88 cf 9c da 43 5a 23 67 c6 Data Ascii: .[_+*i.?#\FNEp\|5_AdD@$Li(99o<gQrnunCZ#gZN,ZXP:uJ!"Lg9wZH>4cf2;B(YX,m^Xf62O^y2SCyW.]@1(k.pB7C=t7?'
Aug 1, 2024 08:39:01.004606009 CEST	1236	IN	Data Raw: 14 42 fc 7d f7 95 ce 4c ad 6a c8 8b 4b 1a f8 eb 40 ed 74 e1 ed d6 a6 2d ad 1d a2 bd c0 93 2a 49 25 5f d2 88 d4 9b da 7a 4f 76 66 50 e2 9f 28 1c b2 d7 2c 16 df f6 a4 86 05 96 15 29 35 34 98 21 5f 0a ef 25 24 f5 75 09 2f 42 c8 9e 72 8a 63 2e 42 f9 Data Ascii: B}LjK@t-*I%_zOvfP(,)54!_%$u/Brc.Br.z)))D>E2y=L^TTbJr`sju49o#iar\wlm%XW^8}qqD29@Nu6^nHI,%"SI]]W
Aug 1, 2024 08:39:01.004658937 CEST	1236	IN	Data Raw: 18 86 b8 f2 7a e4 27 3e 2a b5 72 29 5d a7 ed 3c ed f2 e2 c6 b7 d7 be 2c 7f 73 cd fb eb 5f e0 5f 7a f9 ee d3 17 4c b2 3a 98 21 bc 02 d9 c2 93 75 32 53 dd aa 55 a2 5d 6d 1c fe 9a 7b 81 c5 79 34 9a 43 a9 e2 f1 b7 b1 a5 a5 05 9e 82 42 e1 05 21 85 3e Data Ascii: z'>*r)]<,s__zL:!u2SU]m{y4CB!>u(S0$F!viw-m4-3/e^sR+6fwKfBz\Ftv2#s'VzxwUG&WNp04!1 j%JCB7cG>T\|d9=
Aug 1, 2024 08:39:01.004672050 CEST	448	IN	Data Raw: 98 5f c9 60 78 8e c6 45 af a2 71 ad 13 3a 39 5d 2b da cb cb db 47 63 44 16 6c 4c 4a e2 1c e0 2d 63 f0 fc 47 c3 d3 50 c9 d1 32 6f 8c de 59 2f 73 82 fc 86 5f f3 44 35 94 c4 45 fa b7 4d 0e 2a e5 9d 68 be 1a 17 9d 52 14 17 bd 8e 43 9f 20 ae d1 cb d6 Data Ascii: _`xEq:9]+GcDlLJ-cGP2oY/s_D5EMhRC FzZCHFCVr_3-/;8]Vq1J:lEdu^IgpY{TFxjy=[fH%^{!-f[b2(GX[Q0b
Aug 1, 2024 08:39:01.004760981 CEST	1236	IN	Data Raw: 1e 4b 1b c5 46 e7 a0 0f 4f 23 56 a3 69 91 f0 43 0d 23 9f b2 fc ae 4a cc b6 a2 06 b3 e2 55 a8 41 ad 65 26 1a cd b1 df f4 eb 2f d1 0a 16 0c 0b ff b0 fe f2 cb fa 35 9b 40 d7 0d d1 b4 8a 05 ba a4 eb af 74 9f b8 cb b6 67 5f a0 7d 18 47 a1 8e 54 44 78 Data Ascii: KFO#ViC#JUAe&/5@tg_}GTDxg0R"0.&$n(v2+T"(pqtwBOs5<N!eNe#ZJ6t m3g6W1uZWtZLs&7Za: bn9?Jv9mM\I';My2
Aug 1, 2024 08:39:01.009097099 CEST	1236	IN	Data Raw: 4a e3 53 cd 01 5a 93 29 f9 95 67 57 ee df 78 7e 53 a8 f0 cb 8c 19 4b ab ab 39 1b 3f 48 2a da 59 2f 96 33 19 5b 89 35 3b 5b 56 c7 d2 ec 85 d1 d6 74 4c a5 f6 9a cd 96 f2 52 bd f6 1b c7 98 9e 38 55 6d 61 1b 6e 57 88 63 e9 96 69 ca 62 a7 fa ed 08 2c Data Ascii: JSZ)gWx~SK9?HY/3[5;[VtLR8UmanWcib,_FUDpkNp>p8~(yqB&6x1x9rFrG\|YQ2c^9?t}[{SrW>]^:6G&2ZODx(^0<:,z
Aug 1, 2024 08:39:22.414940119 CEST	391	OUT	GET /__media__/fonts/montserrat-medium/montserrat-medium.woff HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive Origin: http://ww01.rotect.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:22.521610975 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:06 GMT Content-Type: application/font-woff Content-Length: 33316 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-8224" Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 77 4f 46 46 00 01 00 00 00 00 82 24 00 13 00 00 00 01 26 88 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 a8 00 00 00 1c 00 00 00 1c 86 39 f0 ac 47 44 45 46 00 00 01 c4 00 00 00 4d 00 00 00 68 06 21 07 01 47 50 4f 53 00 00 02 14 00 00 2a cb 00 00 82 36 c5 fa 25 64 47 53 55 42 00 00 2c e0 00 00 01 9a 00 00 03 24 57 60 3a 43 4f 53 2f 32 00 00 2e 7c 00 00 00 53 00 00 00 60 61 e5 ae a1 63 6d 61 70 00 00 2e d0 00 00 01 89 00 00 01 e2 17 09 75 62 63 76 74 20 00 00 30 5c 00 00 00 3c 00 00 00 3c 0e 59 11 ef 66 70 67 6d 00 00 30 98 00 00 01 b1 00 00 02 65 53 b4 2f a7 67 61 73 70 00 00 32 4c 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 32 54 00 00 46 90 00 00 8b a8 1f 92 91 ac 68 65 61 64 00 00 78 e4 00 00 00 36 00 00 00 36 15 9e 06 99 68 68 65 61 00 00 79 1c 00 00 00 20 00 00 00 24 0f ac 07 51 68 6d 74 78 00 00 79 3c 00 00 02 4a 00 00 03 a4 2e 37 56 bc 6c 6f 63 61 00 00 7b 88 00 00 01 c8 00 00 01 d4 ce bd f0 aa 6d 61 78 70 00 00 7d 50 00 00 00 20 00 00 [TRUNCATED] Data Ascii: wOFF$&FFTM9GDEFMh!GPOS6%dGSUB,$W`:COS/2.\|S`acmap.ubcvt 0\<<Yfpgm0eS/gasp2Lglyf2TFheadx66hheay $Qhmtxy<J.7Vloca{maxp}P name}pgqpostJprepxQ>webf\-hRFSx%=@Py>]aJ5$`&MNuI@Z2(]eAM{F=Y0]OK>m#x}l\m/bq!ImjHeXM[&0]i3(MQ6baetPx"7x^uYg9?Bss<TzW-i}mr?Z?WnU/Se{Z~l=u{k6<Xs{o>^U8_R\|%uxZ_%50tAF/I\|:UWuoN=sWq<~=>5?n[o}7QYfIqUOI8sJJ;uPg~o:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.9	49739	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:00.750969887 CEST	293	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:01.174664021 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:38:44 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Thu, 16 Feb 2023 20:41:01 GMT Connection: keep-alive ETag: "63ee94dd-20f3" Expires: Thu, 15 Aug 2024 06:38:44 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 2a 2f 0d 0a 76 61 72 20 73 68 6f 77 50 6f 70 3d 31 3b 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 53 65 61 72 63 68 54 65 78 74 28 74 29 7b 74 2e 76 61 6c 75 65 3d 22 22 2c 74 2e 73 65 6c 65 63 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 72 65 70 6c 61 63 65 53 74 72 69 6e 67 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 65 2c 6e 2c 22 67 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 75 62 6d 69 74 53 65 61 72 63 68 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2b 3d 67 65 6e 65 72 61 74 65 42 72 6f 77 4c 6f 67 55 52 4c 28 22 73 72 63 71 72 79 22 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 74 5d 2c 30 3d 3d 64 2e 65 6c 65 6d 65 6e 74 73 2e 71 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 7c 7c 22 45 6e 74 65 72 20 4b 65 79 77 6f 72 64 [TRUNCATED] Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function change
Aug 1, 2024 08:39:01.174724102 CEST	1236	IN	Data Raw: 53 74 61 74 75 73 28 74 29 7b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 61 64 64 62 6f 6f 6b 6d 61 72 6b 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 41 73 48 6f 6d 65 50 61 67 65 28 74 2c 65 29 7b 72 65 Data Ascii: Status(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate(){var t=new Array("Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"),e=new Array("January","February","March","April
Aug 1, 2024 08:39:01.174736023 CEST	1236	IN	Data Raw: 43 6c 69 63 6b 55 52 4c 28 6c 69 6e 6b 73 5b 69 5d 2c 22 6f 6c 6f 64 22 29 2c 6c 69 6e 6b 73 5b 69 5d 2e 69 6e 6e 65 72 48 54 4d 4c 3d 74 65 6d 70 44 61 74 61 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 6f 64 69 66 79 4b Data Ascii: ClickURL(links[i],"olod"),links[i].innerHTML=tempData)}catch(t){}}function modifyKeywordClickURL(t,e){return t.href=t.href+generateBrowLogURL(e),"undefined"!=typeof prctu&&0<prctu.length&&(t.href=prctu+getEscapedString(t.href)),!0}function gen
Aug 1, 2024 08:39:01.174956083 CEST	1236	IN	Data Raw: 73 2e 67 65 74 4c 6f 63 61 6c 54 69 6d 65 5a 6f 6e 65 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2b 74 68 69 73 2e 66 64 2b 74 68 69 73 2e 67 65 74 53 63 72 65 65 6e 48 65 69 67 68 74 28 29 2b 74 68 69 73 2e 66 64 2b 74 68 69 73 2e 67 65 74 53 63 72 Data Ascii: s.getLocalTimeZone().toString()+this.fd+this.getScreenHeight()+this.fd+this.getScreenWidth()+this.fd+(this.isCookieSupported()?1:0).toString()+this.fd+this.getABPStatus()),this.browserdata},this.getMousePositionData=function(){return this.fd+m
Aug 1, 2024 08:39:01.174968958 CEST	1236	IN	Data Raw: 5f 54 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 7d 63 61 74 63 68 28 74 29 7b 65 3d 30 7d 72 65 74 75 72 6e 20 65 7d 2c 5f 77 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 30 3b 74 72 79 Data Ascii: _Top.document.body.clientHeight)}catch(t){e=0}return e},_ww:function(){var e=0;try{"number"==typeof this._Top.window.innerWidth?e=this._Top.window.innerWidth:this._Top.document.documentElement&&this._Top.document.documentElement.clientWidth?e=
Aug 1, 2024 08:39:01.174979925 CEST	1	IN	Data Raw: 75 Data Ascii: u
Aug 1, 2024 08:39:01.175137043 CEST	1236	IN	Data Raw: 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 65 77 65 62 6b 69 74 22 29 26 26 28 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 62 6c 75 72 28 29 2c 74 68 69 73 2e 5f 54 6f 70 2e Data Ascii: serAgent.toLowerCase().indexOf("applewebkit")&&(this._Top.window.blur(),this._Top.window.focus()),_npW.Init=function(e){with(e)Params=e.Params,Main=function(){void 0===window.mozPaintCount\|\|(t=window.open("about:blank"))&&t.close();var t=Param
Aug 1, 2024 08:39:01.175313950 CEST	1236	IN	Data Raw: 6f 77 50 6f 70 26 26 28 73 68 6f 77 50 6f 70 3d 30 29 2c 21 31 3b 31 21 3d 73 68 6f 77 50 6f 70 7c 7c 72 65 6e 64 65 72 46 41 43 50 28 74 29 7c 7c 73 68 70 70 28 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 68 70 70 28 Data Ascii: owPop&&(showPop=0),!1;1!=showPop\|\|renderFACP(t)\|\|shpp(t)}catch(t){}}function shpp(t){if("undefined"!=typeof __pp&&1==showPop&&!renderFACP(t))try{if(t\|\|((t=window.event\|\|window.Event).cancelBubble=!0),t.button&&2==t.button)return;try{var e=!1;i
Aug 1, 2024 08:39:01.175328016 CEST	123	IN	Data Raw: 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 42 72 6f 77 73 65 72 44 65 74 61 69 6c 73 28 29 7b 72 65 6c 70 6c 61 63 65 41 6c 6c 41 4c 69 6e Data Ascii: vigator.userAgent)}catch(t){}return t}function setBrowserDetails(){relplaceAllALinks&&relplaceAllALinks(/(\/trf\|\.cfm)\?/)}
Aug 1, 2024 08:39:22.507778883 CEST	301	OUT	GET /__media__/pics/28905/res-arw.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:22.611509085 CEST	672	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:06 GMT Content-Type: image/png Content-Length: 346 Last-Modified: Tue, 04 Jan 2022 14:44:28 GMT Connection: keep-alive ETag: "61d45d4c-15a" Expires: Thu, 15 Aug 2024 06:39:06 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 1d 08 03 00 00 00 f8 b5 4e 88 00 00 00 45 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 57 d4 34 b7 00 00 00 16 74 52 4e 53 00 51 a8 e4 9d fa 21 30 f4 13 ba 01 72 90 da 3e 7e 03 c7 5f 0a 88 8d 4f 23 a5 00 00 00 ae 49 44 41 54 28 cf 85 93 e1 12 83 20 0c 83 11 41 d4 82 0a 6a de ff 51 37 b7 dd 4e a4 94 ef 77 ae 85 34 51 e7 7e a8 06 2b c6 30 34 34 33 80 b9 8b 92 c4 e1 a2 df 26 41 a3 3f 1a 58 bd 92 3c e6 62 f1 b5 51 e6 af c1 68 1c a7 a0 c1 e2 46 62 5d 30 c8 e0 5c c8 c7 80 75 21 a0 e0 e1 02 4d 23 18 32 17 e8 04 cb dd 05 7e 4c ee 82 a9 48 ac 76 e2 63 b2 37 07 4e 90 f6 a8 a8 6e 0c ec e3 14 9a db 40 fc ad 7f 1b ca 84 cd c5 37 a9 88 ef 6d 03 1f 99 24 5c ef 4b 27 c7 e9 4d 5c 1a a1 54 6a 47 ab 25 47 df ec 9a 5f fc a1 a2 5c 58 6a 55 fa 05 63 50 20 91 7b 34 90 ee 00 00 00 00 [TRUNCATED] Data Ascii: PNGIHDR"NEPLTEGpLW4tRNSQ!0r>~_O#IDAT( AjQ7Nw4Q~+0443&A?X<bQhFb]0\u!M#2~LHvc7Nn@7m$\K'M\TjG%G_\XjUcP {4IENDB`
Aug 1, 2024 08:40:07.612051964 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.9	49738	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:00.751286030 CEST	297	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:01.182518959 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:38:44 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Thu, 15 Aug 2024 06:38:44 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 30 f2 00 2c c1 00 2c 37 03 90 81 f9 8f 29 b2 13 3b 91 25 a0 9b ae dd a1 ab d6 7a bc 0f e7 7c b7 4e fd b0 ab 8a 28 f1 09 c8 13 96 00 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c [TRUNCATED] Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0P%@a@a0@a0P0P(P(P((@a@a0@a0P0P(P(P((@a@a0@aPeaLt[=ul=HhOnNc=e{l[,lu_cnk,n;~'^a$sbV&aqcm3Ts*l#zXtH+8c/BH1>CXHay/AIl2g}s/Q8{.;R91oeGo-V:;u$5'.lW:Q\v_:z4',l]2z4'e,~O]%>\|v_2U}8u=hL4$7aj;eMhL\>',/]I,{}a91\|Jz
Aug 1, 2024 08:39:01.182611942 CEST	553	IN	Data Raw: b1 73 e2 d5 85 ed aa 5b 43 07 31 c7 b0 d3 f6 53 17 56 dd 8c e8 20 e6 18 96 72 88 08 4b e8 20 e6 18 96 f8 01 7c 65 61 db 1a 97 d0 8b 98 d7 b0 f2 73 62 f8 8c 1a 3f 6a d3 c2 07 f0 95 33 ce 55 85 55 39 23 1e fd 63 98 c5 54 ba 3f 16 93 15 b6 b5 82 34 Data Ascii: s[C1SV rK \|easb?j3UU9#cT?4JYA)O(W.:+FOQX3DWsn]{d^Va4\>gDbvU1aEjass+e9<lNTX3KVaV\|
Aug 1, 2024 08:39:01.182632923 CEST	1236	IN	Data Raw: aa 23 f1 d3 39 cc 88 bf f8 cd 54 39 f7 ad 6d 9e fd f0 c2 9a 9b 11 1d c3 1c c4 32 76 4f 98 11 1d c3 1c c4 12 b7 4f 98 11 1d c3 bc 88 25 ce 89 e1 5b de 6b 98 17 b1 c4 39 31 7c c9 1b 12 13 ac ed a0 b3 85 b5 f7 1d 6f 48 74 5f 9f 33 27 86 19 d1 90 68 Data Ascii: #9T9m2vOO%[k91\|oHt_3'hLL?*l!m9hgDwx"#Q8pvg{-nr34/=0isbz9_X?vq:1qN:\|%n0#Si^NfA(G\|cN,S
Aug 1, 2024 08:39:01.182650089 CEST	1236	IN	Data Raw: 76 8a 3a 8a b0 91 14 a6 30 85 29 4c 61 0a 53 58 5d fc bd c4 32 36 b6 92 c2 3e e4 6f fe 96 b1 b4 95 14 f6 21 3f 9a f2 b3 29 85 29 4c 61 0a 9b 2b 0f ce 9e 9c cb 17 b6 f2 af 71 76 95 e8 32 31 cb 97 45 7c f2 af 4a 57 98 c2 92 fa 7a 5d 8b f8 b9 22 1a Data Ascii: v:0)LaSX]26>o!?))La+qv21E\|JWz]"s21_iE-Lc.:\uil!BV6/LT}RKpc.:\u}a7 Vk10}}\m-ony(N7!Xs5!,}(.
Aug 1, 2024 08:39:01.182663918 CEST	1236	IN	Data Raw: 93 3c 64 22 44 e2 75 9f 9f d4 09 cb 7e fd d6 19 0b 93 eb 44 60 01 27 f1 aa 8f 4f 4c 80 e5 91 0e d9 52 d9 e4 3a 11 32 11 22 f1 32 8d 28 39 7f f1 66 75 a4 8a 6c ee 3c 0f c2 40 d8 65 1a 31 37 9b d9 38 1d d3 eb 44 14 62 28 c3 ae d2 88 0f b4 0a 5e db Data Ascii: <d"Du~D`'OLR:2"2(9ful<@e178Db(^knX]B{ST1Sb<NDG+OKbyJ(P]%4wzl7dhawh@#^D }c3Ny=u"fPLmyG
Aug 1, 2024 08:39:01.182735920 CEST	672	IN	Data Raw: 59 70 01 99 78 5c 23 ea b6 00 c9 f3 f2 79 6c be 15 89 4d 4b 8c ca 56 9c b2 a2 ea e7 7b 8d ad 13 d1 0d 43 47 ec a4 46 14 53 44 99 4b d2 7b 45 97 a7 4e fc fc 6f f1 23 c3 d0 52 00 22 11 32 f1 b8 46 b4 36 7d 69 69 91 3b dc ec d7 4b 99 ec 57 78 64 bb Data Ascii: Ypx\#ylMKV{CGFSDK{ENo#R"2F6}ii;KWxd9ta7z9JQ;YoOtT;m6f\`m~qg(S/iD.5HOI"t"D"daXp6RkH$M<mb{:),nb9{#oT1
Aug 1, 2024 08:39:01.182904959 CEST	1236	IN	Data Raw: 3e 65 e5 c9 bd c9 8e cf 7c 56 11 08 00 62 c7 b4 4d d4 95 01 7a 6d b3 98 cb f9 bc 48 8c fe ec 4a 4b 21 17 9e c8 9e 79 e6 f2 df 10 3a 11 12 11 8d e7 c3 1a 51 ec 3d 7c ac fb 6f d2 26 ed 6e 0a 0b df ff 2c 5d c2 16 37 40 ec 16 0b 64 07 64 00 9d 08 c0 Data Ascii: >e\|VbMzmHJK!y:Q=\|o&n,]7@ddPZv~T",P=zwk/vF#+pv,3aq%laub6TKq5a)1{Nuck6qDLQ98V;DT"fnn
Aug 1, 2024 08:39:01.182955980 CEST	1236	IN	Data Raw: 24 89 8a 30 b3 4d 4c 2d b1 2a d5 67 75 c0 d1 3d 4a d1 32 fb 8c 5f 2b a7 bd a8 b0 29 f8 88 5f 25 64 15 61 c4 9b e3 59 97 e7 d8 b2 25 62 46 d8 76 10 c4 94 3e 49 2d 02 42 e4 91 9f 03 b2 65 58 fc 5e 6a 2e c6 83 3f e1 17 13 c8 4a ca 0e bf 6e e9 e3 10 Data Ascii: $0ML-*gu=J2_+)_%daY%bFv>I-BeX^j.?JnuvvOJ_`1DT].])Ya-@?#Ov'Q>$1vCR5I%SaIK,\|hDw(&yL'u~Qd,K;Y%(LIc\|!M0
Aug 1, 2024 08:39:01.182969093 CEST	1236	IN	Data Raw: d6 5d 7b a9 93 cb 4f 20 ac e5 eb 3b 41 8c 89 7b 09 b5 84 42 90 65 4a d1 54 0c 2b 99 ef e3 0a 62 a3 9b 61 2a f8 65 69 89 39 e9 e5 4e d0 06 a3 ef 81 a8 55 3b 62 ac 10 67 54 fd 17 83 f1 14 c2 b6 e3 34 71 af 17 0f a2 2d 9f a2 c2 f7 6f 72 4e 9e a3 eb Data Ascii: ]{O ;A{BeJT+ba*ei9NU;bgT4q-orN8G7!_eulF0\fCY,XqN!EQuXbf2\|+^es01eB&\|(55fLhs8uU(Y;('3lVT$5,UDnH)
Aug 1, 2024 08:39:01.183070898 CEST	1236	IN	Data Raw: 27 84 6d 3f 46 d8 fe b8 25 46 4d 0a 75 9f 58 5e d4 75 b9 b2 c3 0c 6f 5a fa a3 72 1f ab e5 3c 32 4b 4c e5 4e 4e d6 81 86 79 a6 c5 35 bc 4c 4b 9f 0d be 93 40 b9 f5 c1 38 10 0e ee 9a 27 6e 3f 46 d8 c1 94 58 72 24 b7 91 10 ad c9 26 50 76 d8 75 89 e8 Data Ascii: 'm?F%FMuX^uoZr<2KLNNy5LK@8'n?FXr$&Pvu#Z0DOuc^ou0D#c?7(F5Vst8zb<`5@=lCzSxBh{6tdYgPT'<B#H#N]Cg1ao[
Aug 1, 2024 08:39:01.187561035 CEST	1236	IN	Data Raw: e3 a8 5e 38 48 30 5b a2 a9 a1 2d 67 19 65 48 6e 0d 2d 1d ae 5d 7f 34 04 20 47 f8 d2 4b 1a 18 ef b8 29 fd 19 93 2a ac a5 18 f1 60 b8 f9 f1 b9 79 02 61 8d 27 81 73 1d d9 d3 95 de b6 4f ee 1d 6f 6d 8a 31 6f d3 e8 2c d3 90 f7 7b 35 9c 47 b7 9c bd f0 Data Ascii: ^8H0[-geHn-]4 GK)`ya'sOom1o,{5GOj vDP-PZ8aBf}#~4ZS2dOm~rEXI-BEehZqO?;r8zOrwXRj(Km%=3iP((Pykl6CcaCv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.9	49737	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:00.751341105 CEST	300	OUT	GET /__media__/pics/28905/arrrow.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:01.172691107 CEST	609	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:38:44 GMT Content-Type: image/png Content-Length: 283 Last-Modified: Tue, 04 Jan 2022 14:44:27 GMT Connection: keep-alive ETag: "61d45d4b-11b" Expires: Thu, 15 Aug 2024 06:38:44 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 1b 08 03 00 00 00 ad 28 94 ae 00 00 00 48 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 05 7a f2 f8 00 00 00 17 74 52 4e 53 00 74 db fa 40 1b e0 0e 05 66 55 f4 bd ec 32 27 d1 b0 ca 82 a6 64 67 ff c5 fb 8e 00 00 00 6b 49 44 41 54 18 d3 7d d1 c9 0e 80 20 0c 04 50 c4 a5 e0 86 7b ff ff 4f 35 f4 e0 c8 24 f6 f8 c2 d2 76 9c 93 18 c5 61 89 57 ed 12 4a d4 a7 a6 b9 94 0f 49 97 69 68 5e 4a 46 35 50 eb 8d 7a a0 85 48 b6 4c 7a 02 8d 46 d5 2f 85 d5 68 07 3a 8c a0 89 e0 8b 7b 74 86 de a1 bf 18 ca 9e 69 2e 9a 9d f6 c3 3b bc 68 cf 9c 05 e7 45 99 de f1 b5 0e ae 42 db 93 36 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR(HPLTEGpLztRNSt@fU2'dgkIDAT} P{O5$vaWJIih^JF5PzHLzF/h:{ti.;hEB6IENDB`
Aug 1, 2024 08:39:46.175297022 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.9	49711	199.59.243.226	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:04.597553968 CEST	233	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>
Aug 1, 2024 08:39:18.347029924 CEST	659	OUT	GET / HTTP/1.1 Host: rotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; __cmpcccx68884=aBQCr8c8AAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.9	49751	199.59.243.226	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:18.347651958 CEST	659	OUT	GET / HTTP/1.1 Host: rotect.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; __cmpcccx68884=aBQCr8c8AAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Aug 1, 2024 08:39:18.634118080 CEST	1236	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:18 GMT content-type: text/html; charset=utf-8 content-length: 1030 x-request-id: c6f57740-c503-4e8c-9afc-c3957b274e30 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_Xo4hRf01dT6lohvqxst0RwyiJPG4+qjChNf8fCHwMOiN696Z0tMTEtxzPOjTNCdPuj04rpzzIW2NchZSR1BqYg== set-cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; expires=Thu, 01 Aug 2024 06:54:18 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 58 6f 34 68 52 66 30 31 64 54 36 6c 6f 68 76 71 78 73 74 30 52 77 79 69 4a 50 47 34 2b 71 6a 43 68 4e 66 38 66 43 48 77 4d 4f 69 4e 36 39 36 5a 30 74 4d 54 45 74 78 7a 50 4f 6a 54 4e 43 64 50 75 6a 30 34 72 70 7a 7a 49 57 32 4e 63 68 5a 53 52 31 42 71 59 67 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_Xo4hRf01dT6lohvqxst0RwyiJPG4+qjChNf8fCHwMOiN696Z0tMTEtxzPOjTNCdPuj04rpzzIW2NchZSR1BqYg==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"> <link rel="preconnect
Aug 1, 2024 08:39:18.634135008 CEST	456	IN	Data Raw: 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 64 69 76 20 69 64 3d 22 74 61 72 67 65 74 22 20 73 74 79 6c 65 Data Ascii: " href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiY2YzN2YwMjItZDk4MC00ODU0LTg4NGQtMWUzOTQ5ODExYjIxIiwicGFnZV90aW1lIjoxNzIyNDk0MzU4LCJwYWdlX3VybCI6Imh0dHA6L
Aug 1, 2024 08:39:18.679034948 CEST	538	OUT	GET /bEZCJCfIn.js HTTP/1.1 Host: rotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; __cmpcccx68884=aBQCr8c8AAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Aug 1, 2024 08:39:18.785514116 CEST	1236	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:18 GMT content-type: application/javascript; charset=utf-8 content-length: 33929 x-request-id: d4311c00-05eb-4087-b108-289291b7e036 set-cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; expires=Thu, 01 Aug 2024 06:54:18 GMT Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 74 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 74 29 3a 74 28 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 76 65 72 73 69 6f 6e 3d 7b 7d 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 61 77 61 69 74 65 72 28 65 2c 74 2c 6e 2c 69 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 6e 7c 7c 28 6e 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 73 2c 61 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 74 72 79 7b 64 28 69 2e 6e [TRUNCATED] Data Ascii: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).version={})}(this,(function(exports){"use strict";function __awaiter(e,t,n,i){return new(n\|\|(n=Promise))((function(s,a){function o(e){try{d(i.next(e))}catch(e){a(e)}}function r(e){try{d(i.throw(e))}catch(e){a(e)}}function d(e){var t;e.done?s(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(o,r)}d((i=i.apply(e,t\|\|[])).next())}))}var Blocking;"function"==typeof SuppressedError&&SuppressedError,function(e){e.PENDING="pending",e.NONE="none",e.BLOCKED="blocked",e.ALLOWED="allowed"}(Blocking\|\|(Blocking={}));class Adblock{constructor(e){this.state=Blocking.PENDING,this._mocked=!1,e?(this.state=e,this._mocked=!0):this.state=Blocking.ALLOWED}inject(){return __awaiter(this,void 0,void 0,(function*(){}))}get isBlocked(){return this.
Aug 1, 2024 08:39:18.785552025 CEST	1236	IN	Data Raw: 73 74 61 74 65 3d 3d 3d 42 6c 6f 63 6b 69 6e 67 2e 42 4c 4f 43 4b 45 44 7d 67 65 74 20 69 73 41 6c 6c 6f 77 65 64 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 61 74 65 3d 3d 3d 42 6c 6f 63 6b 69 6e 67 2e 41 4c 4c 4f 57 45 44 7d 74 6f 43 6f Data Ascii: state===Blocking.BLOCKED}get isAllowed(){return this.state===Blocking.ALLOWED}toContext(){return{user_has_ad_blocker:null,is_ad_blocked:null}}}const OBFUSCATING_BASE_64_PREFIX="UxFdVMwNFNwN0wzODEybV",encode=e=>OBFUSCATING_BASE_64_PREFIX+btoa(u
Aug 1, 2024 08:39:18.785563946 CEST	1236	IN	Data Raw: 64 73 22 2c 65 2e 41 44 5f 42 4c 4f 43 4b 45 44 3d 22 61 64 5f 62 6c 6f 63 6b 65 64 22 2c 65 2e 50 52 45 46 45 52 52 45 44 3d 22 70 72 65 66 65 72 72 65 64 22 7d 28 5a 65 72 6f 43 6c 69 63 6b 52 65 61 73 6f 6e 73 7c 7c 28 5a 65 72 6f 43 6c 69 63 Data Ascii: ds",e.AD_BLOCKED="ad_blocked",e.PREFERRED="preferred"}(ZeroClickReasons\|\|(ZeroClickReasons={}));const getZeroClick=e=>__awaiter(void 0,void 0,void 0,(function*(){const t=Object.assign(Object.assign({},e),{type:"zc_fetch"});return fetch("/_zc",
Aug 1, 2024 08:39:18.785610914 CEST	1236	IN	Data Raw: 6b 73 20 6f 72 20 52 65 6c 61 74 65 64 20 53 65 61 72 63 68 20 2a 2f 5c 6e 5c 6e 23 70 6b 2d 73 74 61 74 75 73 2d 6d 65 73 73 61 67 65 20 7b 5c 6e 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 5c 6e 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 5c Data Ascii: ks or Related Search /\n\n#pk-status-message {\n height: 100vh;\n width: 100%;\n display: flex;\n flex-direction: column;\n align-items: center;\n justify-content: center;\n}\n\n/ Sales Box - Default State */\n\n#sales-box {\n display
Aug 1, 2024 08:39:18.785624981 CEST	1236	IN	Data Raw: 6e 5c 6e 2e 70 6b 2d 6c 6f 61 64 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 31 29 20 7b 5c 6e 20 20 6c 65 66 74 3a 20 38 70 78 3b 5c 6e 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 70 6b 2d 61 6e 69 6d 2d 31 20 30 2e 36 73 20 69 6e 66 69 6e 69 Data Ascii: n\n.pk-loader div:nth-child(1) {\n left: 8px;\n animation: pk-anim-1 0.6s infinite;\n}\n\n.pk-loader div:nth-child(2) {\n left: 8px;\n animation: pk-anim-2 0.6s infinite;\n}\n\n.pk-loader div:nth-child(3) {\n left: 32px;\n animation: pk-
Aug 1, 2024 08:39:18.785638094 CEST	1236	IN	Data Raw: 74 6f 72 28 65 29 7b 74 68 69 73 2e 5f 64 6f 6d 49 73 52 65 61 64 79 3d 21 31 2c 74 68 69 73 2e 72 65 76 65 61 6c 50 61 67 65 3d 28 29 3d 3e 7b 74 68 69 73 2e 64 6f 6d 4e 6f 64 65 26 26 74 68 69 73 2e 64 6f 6d 4e 6f 64 65 2e 63 6c 61 73 73 4c 69 Data Ascii: tor(e){this._domIsReady=!1,this.revealPage=()=>{this.domNode&&this.domNode.classList.add(PAGE_READY_CLASS)},this.injectMetaDescription=e=>{if(!e\|\|0===e.length)return;window.document.title=e;const t=document.createElement("meta");t.setAttribute
Aug 1, 2024 08:39:18.785653114 CEST	1236	IN	Data Raw: 26 28 74 3d 60 3c 73 70 61 6e 20 69 64 3d 22 72 65 64 69 72 65 63 74 22 3e 24 7b 65 7d 3c 2f 73 70 61 6e 3e 60 29 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 28 60 5c 6e 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 6b 2d 6c 6f 61 64 65 72 Data Ascii: &(t=`<span id="redirect">${e}</span>`),this.message(`\n <div class="pk-loader">\n <div></div>\n <div></div>\n <div></div>\n <div></div>\n </div>\n <div class="pk-loader-text hidden-xs">\n Page
Aug 1, 2024 08:39:18.785798073 CEST	1236	IN	Data Raw: 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 7d 69 6e 6a 65 63 74 53 63 72 69 70 74 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 Data Ascii: head.appendChild(t)}injectScript(e){if(!e)return;const t=document.createElement("script");t.type="text/javascript",t.src=e,document.body.appendChild(t)}injectJS(js){js&&0!==js.length&&eval(js)}injectHTML(e){this.domNode?(e&&(this.domNode.inner
Aug 1, 2024 08:39:18.785813093 CEST	1236	IN	Data Raw: 22 64 69 73 61 62 6c 65 64 5f 72 63 22 3a 6e 3d 65 2e 63 61 6e 6e 6f 74 50 61 72 6b 7d 69 66 28 6e 29 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 44 69 73 61 62 6c 65 64 3b 72 65 74 75 72 6e 20 74 2e 72 65 61 73 6f 6e 3d 6e 2c 74 2e 64 6f 6d 61 69 6e Data Ascii: "disabled_rc":n=e.cannotPark}if(n){const t=new Disabled;return t.reason=n,t.domain=e.domainName,t}}get message(){switch(this.reason){case"adblocker":return"<h1>Ad block detected</h1> Please disable your ad blocker and reload the page.";case"di
Aug 1, 2024 08:39:18.785830975 CEST	1236	IN	Data Raw: 67 65 74 20 6d 65 73 73 61 67 65 28 29 7b 73 77 69 74 63 68 28 74 68 69 73 2e 72 65 61 73 6f 6e 29 7b 63 61 73 65 22 64 69 73 61 62 6c 65 64 5f 66 72 22 3a 63 61 73 65 22 64 69 73 61 62 6c 65 64 5f 72 63 22 3a 63 61 73 65 22 6e 6f 5f 73 70 6f 6e Data Ascii: get message(){switch(this.reason){case"disabled_fr":case"disabled_rc":case"no_sponsors":return`\n <h1 data-nosnippet>No Sponsors</h1>\n <p data-nosnippet>${this.domain} currently does not have any sponsors for you.</p>`;case"
Aug 1, 2024 08:39:18.898739100 CEST	621	OUT	POST /_fd HTTP/1.1 Host: rotect.com Connection: keep-alive Content-Length: 0 Accept: application/json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Origin: http://rotect.com Referer: http://rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; __cmpcccx68884=aBQCr8c8AAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Aug 1, 2024 08:39:19.003660917 CEST	1236	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:18 GMT content-type: application/json; charset=utf-8 content-length: 5125 x-request-id: 9bb0f491-958c-45a6-8618-8cc9faeb2152 set-cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; expires=Thu, 01 Aug 2024 06:54:18 GMT Data Raw: 55 78 46 64 56 4d 77 4e 46 4e 77 4e 30 77 7a 4f 44 45 79 62 56 65 79 4a 69 62 47 39 6a 61 33 4d 69 4f 6c 74 37 49 6d 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 36 49 6e 4a 7a 49 69 77 69 62 6e 56 74 59 6d 56 79 49 6a 6f 7a 4c 43 4a 30 65 58 42 6c 49 6a 6f 69 63 6d 56 73 59 58 52 6c 5a 48 4e 6c 59 58 4a 6a 61 43 49 73 49 6e 56 70 54 33 42 30 61 57 31 70 65 6d 55 69 4f 6d 5a 68 62 48 4e 6c 66 53 78 37 49 6d 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 36 49 6d 46 6b 4c 54 45 69 4c 43 4a 75 64 57 31 69 5a 58 49 69 4f 6a 4d 73 49 6e 52 35 63 47 55 69 4f 69 4a 68 5a 48 4d 69 4c 43 4a 31 61 55 39 77 64 47 6c 74 61 58 70 6c 49 6a 70 6d 59 57 78 7a 5a 58 31 64 4c 43 4a 6a 59 57 35 75 62 33 52 51 59 58 4a 72 49 6a 6f 69 49 69 77 69 59 32 46 75 57 6d 56 79 62 30 4e 73 61 57 4e 72 49 6a 70 30 63 6e 56 6c 4c 43 4a 6b 62 32 31 68 61 57 35 4f 59 57 31 6c 49 6a 6f 69 63 6d 39 30 5a 57 4e 30 4c 6d 4e 76 62 53 49 73 49 6d 5a 6b 58 33 4e 6c 63 6e 5a 6c 63 69 49 36 49 6d 6c 77 4c 54 45 77 4c 54 49 77 4d 53 30 78 4e 69 30 31 4d [TRUNCATED] Data Ascii: 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
Aug 1, 2024 08:39:23.937200069 CEST	716	OUT	POST /_tr HTTP/1.1 Host: rotect.com Connection: keep-alive Content-Length: 1773 Accept: application/json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Origin: http://rotect.com Referer: http://rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; __gsas=ID=46e899ebb71f7b61:T=1722494361:RT=1722494361:S=ALNI_Mb5XzFUNBfZRjNKVj9nGqktdtTQHw; __cmpcccx68884=aBQCr8gEAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Aug 1, 2024 08:39:24.038899899 CEST	281	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:23 GMT content-type: application/json; charset=utf-8 content-length: 2 x-request-id: fbe383b7-7fd1-4bdd-92f2-0c8963d0072d set-cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; expires=Thu, 01 Aug 2024 06:54:23 GMT Data Raw: 6f 6b Data Ascii: ok

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.9	49753	199.59.243.226	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:18.914895058 CEST	509	OUT	GET /bEZCJCfIn.js HTTP/1.1 Host: rotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; __cmpcccx68884=aBQCr8c8AAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Aug 1, 2024 08:39:19.379707098 CEST	1236	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:19 GMT content-type: application/javascript; charset=utf-8 content-length: 33929 x-request-id: 7c6eeafe-f2b7-4578-836c-d345e30ced9b set-cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; expires=Thu, 01 Aug 2024 06:54:19 GMT Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 74 28 65 78 70 6f 72 74 73 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 74 29 3a 74 28 28 65 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 65 7c 7c 73 65 6c 66 29 2e 76 65 72 73 69 6f 6e 3d 7b 7d 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 61 77 61 69 74 65 72 28 65 2c 74 2c 6e 2c 69 29 7b 72 65 74 75 72 6e 20 6e 65 77 28 6e 7c 7c 28 6e 3d 50 72 6f 6d 69 73 65 29 29 28 28 66 75 6e 63 74 69 6f 6e 28 73 2c 61 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 74 72 79 7b 64 28 69 2e 6e [TRUNCATED] Data Ascii: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?t(exports):"function"==typeof define&&define.amd?define(["exports"],t):t((e="undefined"!=typeof globalThis?globalThis:e\|\|self).version={})}(this,(function(exports){"use strict";function __awaiter(e,t,n,i){return new(n\|\|(n=Promise))((function(s,a){function o(e){try{d(i.next(e))}catch(e){a(e)}}function r(e){try{d(i.throw(e))}catch(e){a(e)}}function d(e){var t;e.done?s(e.value):(t=e.value,t instanceof n?t:new n((function(e){e(t)}))).then(o,r)}d((i=i.apply(e,t\|\|[])).next())}))}var Blocking;"function"==typeof SuppressedError&&SuppressedError,function(e){e.PENDING="pending",e.NONE="none",e.BLOCKED="blocked",e.ALLOWED="allowed"}(Blocking\|\|(Blocking={}));class Adblock{constructor(e){this.state=Blocking.PENDING,this._mocked=!1,e?(this.state=e,this._mocked=!0):this.state=Blocking.ALLOWED}inject(){return __awaiter(this,void 0,void 0,(function*(){}))}get isBlocked(){return this.
Aug 1, 2024 08:39:19.379731894 CEST	1236	IN	Data Raw: 73 74 61 74 65 3d 3d 3d 42 6c 6f 63 6b 69 6e 67 2e 42 4c 4f 43 4b 45 44 7d 67 65 74 20 69 73 41 6c 6c 6f 77 65 64 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 74 61 74 65 3d 3d 3d 42 6c 6f 63 6b 69 6e 67 2e 41 4c 4c 4f 57 45 44 7d 74 6f 43 6f Data Ascii: state===Blocking.BLOCKED}get isAllowed(){return this.state===Blocking.ALLOWED}toContext(){return{user_has_ad_blocker:null,is_ad_blocked:null}}}const OBFUSCATING_BASE_64_PREFIX="UxFdVMwNFNwN0wzODEybV",encode=e=>OBFUSCATING_BASE_64_PREFIX+btoa(u
Aug 1, 2024 08:39:19.379744053 CEST	1236	IN	Data Raw: 64 73 22 2c 65 2e 41 44 5f 42 4c 4f 43 4b 45 44 3d 22 61 64 5f 62 6c 6f 63 6b 65 64 22 2c 65 2e 50 52 45 46 45 52 52 45 44 3d 22 70 72 65 66 65 72 72 65 64 22 7d 28 5a 65 72 6f 43 6c 69 63 6b 52 65 61 73 6f 6e 73 7c 7c 28 5a 65 72 6f 43 6c 69 63 Data Ascii: ds",e.AD_BLOCKED="ad_blocked",e.PREFERRED="preferred"}(ZeroClickReasons\|\|(ZeroClickReasons={}));const getZeroClick=e=>__awaiter(void 0,void 0,void 0,(function*(){const t=Object.assign(Object.assign({},e),{type:"zc_fetch"});return fetch("/_zc",
Aug 1, 2024 08:39:19.379864931 CEST	1236	IN	Data Raw: 6b 73 20 6f 72 20 52 65 6c 61 74 65 64 20 53 65 61 72 63 68 20 2a 2f 5c 6e 5c 6e 23 70 6b 2d 73 74 61 74 75 73 2d 6d 65 73 73 61 67 65 20 7b 5c 6e 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 5c 6e 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 5c Data Ascii: ks or Related Search /\n\n#pk-status-message {\n height: 100vh;\n width: 100%;\n display: flex;\n flex-direction: column;\n align-items: center;\n justify-content: center;\n}\n\n/ Sales Box - Default State */\n\n#sales-box {\n display
Aug 1, 2024 08:39:19.379877090 CEST	1236	IN	Data Raw: 6e 5c 6e 2e 70 6b 2d 6c 6f 61 64 65 72 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 31 29 20 7b 5c 6e 20 20 6c 65 66 74 3a 20 38 70 78 3b 5c 6e 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 70 6b 2d 61 6e 69 6d 2d 31 20 30 2e 36 73 20 69 6e 66 69 6e 69 Data Ascii: n\n.pk-loader div:nth-child(1) {\n left: 8px;\n animation: pk-anim-1 0.6s infinite;\n}\n\n.pk-loader div:nth-child(2) {\n left: 8px;\n animation: pk-anim-2 0.6s infinite;\n}\n\n.pk-loader div:nth-child(3) {\n left: 32px;\n animation: pk-
Aug 1, 2024 08:39:19.379889011 CEST	1236	IN	Data Raw: 74 6f 72 28 65 29 7b 74 68 69 73 2e 5f 64 6f 6d 49 73 52 65 61 64 79 3d 21 31 2c 74 68 69 73 2e 72 65 76 65 61 6c 50 61 67 65 3d 28 29 3d 3e 7b 74 68 69 73 2e 64 6f 6d 4e 6f 64 65 26 26 74 68 69 73 2e 64 6f 6d 4e 6f 64 65 2e 63 6c 61 73 73 4c 69 Data Ascii: tor(e){this._domIsReady=!1,this.revealPage=()=>{this.domNode&&this.domNode.classList.add(PAGE_READY_CLASS)},this.injectMetaDescription=e=>{if(!e\|\|0===e.length)return;window.document.title=e;const t=document.createElement("meta");t.setAttribute
Aug 1, 2024 08:39:19.379900932 CEST	1236	IN	Data Raw: 26 28 74 3d 60 3c 73 70 61 6e 20 69 64 3d 22 72 65 64 69 72 65 63 74 22 3e 24 7b 65 7d 3c 2f 73 70 61 6e 3e 60 29 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 28 60 5c 6e 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 6b 2d 6c 6f 61 64 65 72 Data Ascii: &(t=`<span id="redirect">${e}</span>`),this.message(`\n <div class="pk-loader">\n <div></div>\n <div></div>\n <div></div>\n <div></div>\n </div>\n <div class="pk-loader-text hidden-xs">\n Page
Aug 1, 2024 08:39:19.380098104 CEST	1236	IN	Data Raw: 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 7d 69 6e 6a 65 63 74 53 63 72 69 70 74 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 Data Ascii: head.appendChild(t)}injectScript(e){if(!e)return;const t=document.createElement("script");t.type="text/javascript",t.src=e,document.body.appendChild(t)}injectJS(js){js&&0!==js.length&&eval(js)}injectHTML(e){this.domNode?(e&&(this.domNode.inner
Aug 1, 2024 08:39:19.380110025 CEST	1236	IN	Data Raw: 22 64 69 73 61 62 6c 65 64 5f 72 63 22 3a 6e 3d 65 2e 63 61 6e 6e 6f 74 50 61 72 6b 7d 69 66 28 6e 29 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 44 69 73 61 62 6c 65 64 3b 72 65 74 75 72 6e 20 74 2e 72 65 61 73 6f 6e 3d 6e 2c 74 2e 64 6f 6d 61 69 6e Data Ascii: "disabled_rc":n=e.cannotPark}if(n){const t=new Disabled;return t.reason=n,t.domain=e.domainName,t}}get message(){switch(this.reason){case"adblocker":return"<h1>Ad block detected</h1> Please disable your ad blocker and reload the page.";case"di
Aug 1, 2024 08:39:19.380122900 CEST	1236	IN	Data Raw: 67 65 74 20 6d 65 73 73 61 67 65 28 29 7b 73 77 69 74 63 68 28 74 68 69 73 2e 72 65 61 73 6f 6e 29 7b 63 61 73 65 22 64 69 73 61 62 6c 65 64 5f 66 72 22 3a 63 61 73 65 22 64 69 73 61 62 6c 65 64 5f 72 63 22 3a 63 61 73 65 22 6e 6f 5f 73 70 6f 6e Data Ascii: get message(){switch(this.reason){case"disabled_fr":case"disabled_rc":case"no_sponsors":return`\n <h1 data-nosnippet>No Sponsors</h1>\n <p data-nosnippet>${this.domain} currently does not have any sponsors for you.</p>`;case"
Aug 1, 2024 08:39:19.384968042 CEST	1236	IN	Data Raw: 61 73 63 72 69 70 74 3d 65 2e 69 6e 6c 69 6e 65 4a 73 2c 6e 2e 73 74 79 6c 65 73 68 65 65 74 3d 65 2e 73 74 79 6c 65 73 2c 6e 2e 69 6d 70 72 69 6e 74 3d 65 2e 69 6d 70 72 69 6e 74 54 65 78 74 3b 63 6f 6e 73 74 20 69 3d 75 6e 70 61 63 6b 50 48 50 Data Ascii: ascript=e.inlineJs,n.stylesheet=e.styles,n.imprint=e.imprintText;const i=unpackPHPArrayObject(e,"salesSettings"),s=(null==i?void 0:i.status)&&"NOT_FOR_SALE"!==(null==i?void 0:i.status);if(s){const{status:e,location:t,message:s,link:a,type:o}=i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.9	49754	199.59.243.226	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:19.052959919 CEST	500	OUT	GET /_fd HTTP/1.1 Host: rotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; __cmpcccx68884=aBQCr8c8AAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Aug 1, 2024 08:39:19.524765015 CEST	1236	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:18 GMT content-type: text/html; charset=utf-8 content-length: 1034 x-request-id: d4b40466-2221-4b0c-9856-1facf55ecac3 cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_c46t1DQWs1pxe5MIH7HOstzh4yZ7Hr9AVQ5g/RCgfJsBhFM3CBrRxM6IveqrC82dxRFZRrmD0eAUHyFlBacATw== set-cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; expires=Thu, 01 Aug 2024 06:54:19 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 63 34 36 74 31 44 51 57 73 31 70 78 65 35 4d 49 48 37 48 4f 73 74 7a 68 34 79 5a 37 48 72 39 41 56 51 35 67 2f 52 43 67 66 4a 73 42 68 46 4d 33 43 42 72 52 78 4d 36 49 76 65 71 72 43 38 32 64 78 52 46 5a 52 72 6d 44 30 65 41 55 48 79 46 6c 42 61 63 41 54 77 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_c46t1DQWs1pxe5MIH7HOstzh4yZ7Hr9AVQ5g/RCgfJsBhFM3CBrRxM6IveqrC82dxRFZRrmD0eAUHyFlBacATw==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"> <link rel="preconnect
Aug 1, 2024 08:39:19.524789095 CEST	460	IN	Data Raw: 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 64 69 76 20 69 64 3d 22 74 61 72 67 65 74 22 20 73 74 79 6c 65 Data Ascii: " href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiY2YzN2YwMjItZDk4MC00ODU0LTg4NGQtMWUzOTQ5ODExYjIxIiwicGFnZV90aW1lIjoxNzIyNDk0MzU5LCJwYWdlX3VybCI6Imh0dHA6L
Aug 1, 2024 08:39:24.080049038 CEST	592	OUT	GET /_tr HTTP/1.1 Host: rotect.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; __gsas=ID=46e899ebb71f7b61:T=1722494361:RT=1722494361:S=ALNI_Mb5XzFUNBfZRjNKVj9nGqktdtTQHw; __cmpcccx68884=aBQCr8gEAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAtsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyhg
Aug 1, 2024 08:39:24.182463884 CEST	1236	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:23 GMT content-type: text/html; charset=utf-8 content-length: 1034 x-request-id: 98ef8de4-bdb0-4213-85e8-dd64e04fe24a cache-control: no-store, max-age=0 accept-ch: sec-ch-prefers-color-scheme critical-ch: sec-ch-prefers-color-scheme vary: sec-ch-prefers-color-scheme x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_y1zpjrPqjusJ0c+HP3kD6YuBnpYl9LsQ+FHg07gcPlSmmtQb3RfhfzkYKtBvx0Vnu/LZtku+mSjHsE2uXuAahQ== set-cookie: parking_session=cf37f022-d980-4854-884d-1e3949811b21; expires=Thu, 01 Aug 2024 06:54:24 GMT Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 64 61 74 61 2d 61 64 62 6c 6f 63 6b 6b 65 79 3d 22 4d 46 77 77 44 51 59 4a 4b 6f 5a 49 68 76 63 4e 41 51 45 42 42 51 41 44 53 77 41 77 53 41 4a 42 41 4e 44 72 70 32 6c 7a 37 41 4f 6d 41 44 61 4e 38 74 41 35 30 4c 73 57 63 6a 4c 46 79 51 46 63 62 2f 50 32 54 78 63 35 38 6f 59 4f 65 49 4c 62 33 76 42 77 37 4a 36 66 34 70 61 6d 6b 41 51 56 53 51 75 71 59 73 4b 78 33 59 7a 64 55 48 43 76 62 56 5a 76 46 55 73 43 41 77 45 41 41 51 3d 3d 5f 79 31 7a 70 6a 72 50 71 6a 75 73 4a 30 63 2b 48 50 33 6b 44 36 59 75 42 6e 70 59 6c 39 4c 73 51 2b 46 48 67 30 37 67 63 50 6c 53 6d 6d 74 51 62 33 52 66 68 66 7a 6b 59 4b 74 42 76 78 30 56 6e 75 2f 4c 5a 74 6b 75 2b 6d 53 6a 48 73 45 32 75 58 75 41 61 68 51 3d 3d 22 20 6c 61 6e 67 3d 22 65 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 32 42 32 42 32 42 3b 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d [TRUNCATED] Data Ascii: <!doctype html><html data-adblockkey="MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_y1zpjrPqjusJ0c+HP3kD6YuBnpYl9LsQ+FHg07gcPlSmmtQb3RfhfzkYKtBvx0Vnu/LZtku+mSjHsE2uXuAahQ==" lang="en" style="background: #2B2B2B;"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="icon" href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAIAAACQd1PeAAAADElEQVQI12P4//8/AAX+Av7czFnnAAAAAElFTkSuQmCC"> <link rel="preconnect
Aug 1, 2024 08:39:24.182507992 CEST	460	IN	Data Raw: 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 64 69 76 20 69 64 3d 22 74 61 72 67 65 74 22 20 73 74 79 6c 65 Data Ascii: " href="https://www.google.com" crossorigin></head><body><div id="target" style="opacity: 0"></div><script>window.park = "eyJ1dWlkIjoiY2YzN2YwMjItZDk4MC00ODU0LTg4NGQtMWUzOTQ5ODExYjIxIiwicGFnZV90aW1lIjoxNzIyNDk0MzY0LCJwYWdlX3VybCI6Imh0dHA6L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.9	49799	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:36.611399889 CEST	327	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i4.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:37.060919046 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:20 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Thu, 16 Feb 2023 20:42:04 GMT Connection: keep-alive ETag: "63ee951c-20f3" Expires: Thu, 15 Aug 2024 06:39:20 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 2a 2f 0d 0a 76 61 72 20 73 68 6f 77 50 6f 70 3d 31 3b 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 53 65 61 72 63 68 54 65 78 74 28 74 29 7b 74 2e 76 61 6c 75 65 3d 22 22 2c 74 2e 73 65 6c 65 63 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 72 65 70 6c 61 63 65 53 74 72 69 6e 67 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 65 2c 6e 2c 22 67 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 75 62 6d 69 74 53 65 61 72 63 68 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2b 3d 67 65 6e 65 72 61 74 65 42 72 6f 77 4c 6f 67 55 52 4c 28 22 73 72 63 71 72 79 22 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 74 5d 2c 30 3d 3d 64 2e 65 6c 65 6d 65 6e 74 73 2e 71 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 7c 7c 22 45 6e 74 65 72 20 4b 65 79 77 6f 72 64 [TRUNCATED] Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function change
Aug 1, 2024 08:39:37.060980082 CEST	565	IN	Data Raw: 53 74 61 74 75 73 28 74 29 7b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 61 64 64 62 6f 6f 6b 6d 61 72 6b 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 41 73 48 6f 6d 65 50 61 67 65 28 74 2c 65 29 7b 72 65 Data Ascii: Status(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate(){var t=new Array("Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"),e=new Array("January","February","March","April
Aug 1, 2024 08:39:37.061038971 CEST	1236	IN	Data Raw: 30 22 2b 6f 29 2c 6f 3d 22 25 22 2b 6f 2c 28 6f 3d 75 6e 65 73 63 61 70 65 28 6f 29 29 3d 3d 74 29 7b 65 3d 21 31 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 56 61 6c 69 64 55 52 4c 43 68 61 72 73 Data Ascii: 0"+o),o="%"+o,(o=unescape(o))==t){e=!1;break}}return e}function checkValidURLChars(t){var e,n;if(""==t)return!1;if(t.match(/[#&]/))return!0;for(n=t.length,intCur=0;intCur<n&&(chrValue=t.charAt(intCur),1!=(e=checkUTFChar(chrValue)));intCur++);r
Aug 1, 2024 08:39:37.061064959 CEST	1236	IN	Data Raw: 2c 74 68 69 73 2e 69 73 69 6e 66 72 61 6d 65 3d 2d 31 2c 74 68 69 73 2e 62 72 6f 77 73 65 72 64 61 74 61 3d 22 22 2c 74 68 69 73 2e 67 65 74 41 42 50 53 74 61 74 75 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 Data Ascii: ,this.isinframe=-1,this.browserdata="",this.getABPStatus=function(){return void 0!==window.abp&&window.abp?1:0},this.getLocalTimeZone=function(){return(new Date).getTimezoneOffset()/60*-1},this.getScreenHeight=function(){return screen.height},
Aug 1, 2024 08:39:37.061079979 CEST	1236	IN	Data Raw: 70 74 6f 75 74 3d 31 22 2b 74 2b 22 3b 20 70 61 74 68 3d 2f 22 2c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 29 7d 76 61 72 20 6d 58 3d 30 2c 6d 59 3d 30 2c 62 72 5f 64 61 74 61 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: ptout=1"+t+"; path=/",window.location.reload())}var mX=0,mY=0,br_data=!1;function mPos(t){try{mX=window.Event?t.pageX:event.clientX+(document.documentElement.scrollLeft\|\|document.body.scrollLeft),mY=window.Event?t.pageY:event.clientY+(document
Aug 1, 2024 08:39:37.061095953 CEST	672	IN	Data Raw: 70 3f 6e 75 6c 6c 21 3d 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 4c 65 66 74 3f 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 4c 65 66 74 3a 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 73 Data Ascii: p?null!=this._Top.window.screenLeft?this._Top.window.screenLeft:this._Top.window.screenX:0},doPU:function(url,pw,ph,npf,dr){if(!this._Top&&(this._Top=self,top!=self))try{top.document.location.toString()&&(this._Top=top)}catch(e){}var _npSU=dr?
Aug 1, 2024 08:39:37.061206102 CEST	1236	IN	Data Raw: 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 65 77 65 62 6b 69 74 22 29 26 26 28 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 62 6c 75 72 28 29 2c 74 68 69 73 2e 5f 54 6f 70 2e Data Ascii: serAgent.toLowerCase().indexOf("applewebkit")&&(this._Top.window.blur(),this._Top.window.focus()),_npW.Init=function(e){with(e)Params=e.Params,Main=function(){void 0===window.mozPaintCount\|\|(t=window.open("about:blank"))&&t.close();var t=Param
Aug 1, 2024 08:39:37.061271906 CEST	1236	IN	Data Raw: 6f 77 50 6f 70 26 26 28 73 68 6f 77 50 6f 70 3d 30 29 2c 21 31 3b 31 21 3d 73 68 6f 77 50 6f 70 7c 7c 72 65 6e 64 65 72 46 41 43 50 28 74 29 7c 7c 73 68 70 70 28 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 68 70 70 28 Data Ascii: owPop&&(showPop=0),!1;1!=showPop\|\|renderFACP(t)\|\|shpp(t)}catch(t){}}function shpp(t){if("undefined"!=typeof __pp&&1==showPop&&!renderFACP(t))try{if(t\|\|((t=window.event\|\|window.Event).cancelBubble=!0),t.button&&2==t.button)return;try{var e=!1;i
Aug 1, 2024 08:39:37.061286926 CEST	123	IN	Data Raw: 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 42 72 6f 77 73 65 72 44 65 74 61 69 6c 73 28 29 7b 72 65 6c 70 6c 61 63 65 41 6c 6c 41 4c 69 6e Data Ascii: vigator.userAgent)}catch(t){}return t}function setBrowserDetails(){relplaceAllALinks&&relplaceAllALinks(/(\/trf\|\.cfm)\?/)}
Aug 1, 2024 08:39:37.389563084 CEST	392	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i4.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:37.512176991 CEST	329	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:21 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Thu, 15 Aug 2024 06:39:21 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Aug 1, 2024 08:39:37.512408972 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((
Aug 1, 2024 08:39:37.512437105 CEST	1236	IN	Data Raw: a2 c2 14 56 7e 4e ec 57 58 1b 33 a2 c2 14 56 7e 4e ec 57 d8 4e 61 28 ec aa 39 b1 57 61 8d cc 88 7e 5b 5f 46 2b 13 4f bf 39 31 ac 98 c2 14 96 b8 5f fa 14 b6 6b 66 c5 16 f2 28 60 d5 cc 7e 39 94 29 6c d9 cc 82 f9 3b 1d 65 b4 b3 61 be 96 28 ac 9d ef Data Ascii: V~NWX3V~NWNa(9Wa~[_F+O91_kf(`~9)l;ea(\|kvsbX.),q\,+ZwqM8]K`q4#z 0'smsmS+*eb91'jj=\|Jt8'O"W.L.:\u$~8Ur#9T9m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.9	49800	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:37.393763065 CEST	396	OUT	GET /__media__/pics/28905/res-arw.png HTTP/1.1 Host: i4.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:37.865801096 CEST	672	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:21 GMT Content-Type: image/png Content-Length: 346 Last-Modified: Tue, 04 Jan 2022 14:44:28 GMT Connection: keep-alive ETag: "61d45d4c-15a" Expires: Thu, 15 Aug 2024 06:39:21 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 1d 08 03 00 00 00 f8 b5 4e 88 00 00 00 45 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 57 d4 34 b7 00 00 00 16 74 52 4e 53 00 51 a8 e4 9d fa 21 30 f4 13 ba 01 72 90 da 3e 7e 03 c7 5f 0a 88 8d 4f 23 a5 00 00 00 ae 49 44 41 54 28 cf 85 93 e1 12 83 20 0c 83 11 41 d4 82 0a 6a de ff 51 37 b7 dd 4e a4 94 ef 77 ae 85 34 51 e7 7e a8 06 2b c6 30 34 34 33 80 b9 8b 92 c4 e1 a2 df 26 41 a3 3f 1a 58 bd 92 3c e6 62 f1 b5 51 e6 af c1 68 1c a7 a0 c1 e2 46 62 5d 30 c8 e0 5c c8 c7 80 75 21 a0 e0 e1 02 4d 23 18 32 17 e8 04 cb dd 05 7e 4c ee 82 a9 48 ac 76 e2 63 b2 37 07 4e 90 f6 a8 a8 6e 0c ec e3 14 9a db 40 fc ad 7f 1b ca 84 cd c5 37 a9 88 ef 6d 03 1f 99 24 5c ef 4b 27 c7 e9 4d 5c 1a a1 54 6a 47 ab 25 47 df ec 9a 5f fc a1 a2 5c 58 6a 55 fa 05 63 50 20 91 7b 34 90 ee 00 00 00 00 [TRUNCATED] Data Ascii: PNGIHDR"NEPLTEGpLW4tRNSQ!0r>~_O#IDAT( AjQ7Nw4Q~+0443&A?X<bQhFb]0\u!M#2~LHvc7Nn@7m$\K'M\TjG%G_\XjUcP {4IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.9	49801	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:37.399347067 CEST	387	OUT	GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1 Host: i4.cdn-image.com Connection: keep-alive Origin: http://ww01.rotect.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:37.896119118 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:21 GMT Content-Type: application/font-woff Content-Length: 17312 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-43a0" Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 a0 00 10 00 00 00 00 73 60 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 6c 00 00 00 1c 00 00 00 1c 69 99 f4 2b 47 44 45 46 00 00 01 88 00 00 00 1e 00 00 00 1e 00 27 01 0d 47 50 4f 53 00 00 01 a8 00 00 0c c5 00 00 16 c0 c0 0d d5 ee 47 53 55 42 00 00 0e 70 00 00 00 20 00 00 00 20 6c 91 74 8f 4f 53 2f 32 00 00 0e 90 00 00 00 54 00 00 00 60 a6 e9 3d 09 63 6d 61 70 00 00 0e e4 00 00 02 75 00 00 03 86 c7 ce be ea 67 61 73 70 00 00 11 5c 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 11 64 00 00 28 0b 00 00 47 38 61 9a 3f 94 68 65 61 64 00 00 39 70 00 00 00 34 00 00 00 36 09 88 d5 e9 68 68 65 61 00 00 39 a4 00 00 00 21 00 00 00 24 07 97 04 27 68 6d 74 78 00 00 39 c8 00 00 02 ad 00 00 04 1a 59 f7 2d 9c 6c 6f 63 61 00 00 3c 78 00 00 02 09 00 00 02 10 b1 e6 c4 00 6d 61 78 70 00 00 3e 84 00 00 00 1f 00 00 00 20 01 50 00 37 6e 61 6d 65 00 00 3e a4 00 00 02 df 00 00 06 99 17 bc cd 9c 70 6f 73 74 00 00 41 84 00 00 02 11 00 00 [TRUNCATED] Data Ascii: wOFFCs`FFTMli+GDEF'GPOSGSUBp ltOS/2T`=cmapugasp\glyfd(G8a?head9p46hhea9!$'hmtx9Y-loca<xmaxp> P7name>postA8Y,prepChh<'d:x[l\vb{l7ho+.!Qp1OPP%hUUUEMpQZA1I !C@==:cBP5:>9{^k)wJx)R~gO>m~6BJ:tIY_dq/mxel\|icKclzjo%;^x}olegOVV=\5]z_ono;555nO/ctR4tKTCmH]nT::tjAJwU$![yJ+u)IH7IH%}nZef/ ?(OA7)qpf#xxMO;jq77DsO@tD1Et0F`fd9wIXFafxlC[0F0
Aug 1, 2024 08:39:37.896147013 CEST	1236	IN	Data Raw: 44 dd ee 45 e9 61 dc 63 28 f3 38 3c 47 b9 6a d1 ec 05 2c 04 99 99 84 53 82 59 a7 e4 3e ac 74 b8 ef 32 73 9a 59 a7 e0 96 83 47 12 0e f3 70 58 94 61 f7 8a 84 dc e7 d0 f4 39 14 0a fc 77 01 85 96 51 e8 02 0a 45 51 28 86 42 19 70 bc 03 8e 14 56 c3 28 Data Ascii: DEac(8<Gj,SY>t2sYGpXa9wQEQ(BpV(G9X`-J!G4Bap["8&`KfY3k00d'8<YQuk{"333J/<y6A>4sDCs9jfV4s%>
Aug 1, 2024 08:39:37.896162033 CEST	1236	IN	Data Raw: c1 69 10 bc 67 55 37 6b 7c c1 66 8e 63 f7 57 c3 fb 12 68 cc 1e 71 1a ee 09 50 ed 83 7b 1a ee df 06 5d 0f e8 e6 ed 2a dc 0f c2 59 e5 3f c3 ca 27 d1 3c 85 6f fa 43 a9 d3 3e a3 8d 48 f2 f6 e4 84 ad b4 46 83 04 08 92 76 77 37 79 9b d7 fd 63 58 f7 66 Data Ascii: igU7k\|fcWhqP{]*Y?'<oC>HFvw7ycXfF~]mw(7(8CaW`kub-X&r6ZEkI/c#+p~oxjyu,.yB2KPa~M#cN-GE_T1Gha^l6
Aug 1, 2024 08:39:37.896235943 CEST	1236	IN	Data Raw: e0 5c a7 bb ca 01 ee 4f f0 74 84 be 92 3c 22 82 7c 5c bd cc 9b 61 64 0d 6b fe 0c 4c 26 6d 67 9c b5 e7 ad 79 a2 f0 aa dd 63 a2 a0 3a 41 cc f9 ec fb 39 d3 9b 35 11 75 4d 5a 09 97 d5 42 c0 3d 46 0f 1a b1 3d e8 ff 67 2d 49 84 6e 44 c5 0f f4 0d 91 39 Data Ascii: \Ot<"\|\adkL&mgyc:A95uMZB=F=g-InD9N--SO7S"SDkQ{g:/^-k>{I.sfmg$BTiv\NuK//?[A-?-G\|\|zW\|\|_^qv>I!(&e^H
Aug 1, 2024 08:39:37.896254063 CEST	1174	IN	Data Raw: bb fc 6b fd bb fd eb 03 a6 c9 5b 02 66 05 74 07 4c 09 38 10 34 47 f8 77 ad a2 76 0c 1c 5d b5 f5 00 fe b7 75 d5 d6 13 f8 df d6 55 65 88 87 e7 c2 6c 97 49 11 f9 1e f1 a8 b8 70 8e 1b 6e d4 ea cc 0a a5 51 0f 89 26 b3 d1 20 57 28 65 5a 9d 3c 18 7c 5c Data Ascii: k[ftL84Gwv]uUelIpnQ& W(eZ<\|\drDwQi%smna72-k@@o7.;pF<p8^&GT\bh84`J]\|.j-e)\|&z}ek.>O4:\|@
Aug 1, 2024 08:39:37.896286964 CEST	1236	IN	Data Raw: 99 85 22 1f 42 52 62 23 26 75 c4 4f d1 07 97 c8 94 d9 0d e9 a9 53 92 13 57 57 15 45 af bb be ae 8f 0d 41 c8 06 ef d0 bb a6 ea cc e4 ea 34 86 33 07 f5 e6 07 b4 31 4c ee ed 9a 43 a4 f7 1c a6 41 06 07 3d 82 71 76 75 c2 b9 99 b6 1e ce 8a 73 5d a9 85 Data Ascii: "BRb#&uOSWWEA431LCA=qvus]Z/i0S9(gGg%n]m "B \>pSY}GK5%g}W0(DXq",7#!])'DoAm2nDF.\==4Q3;\|Fv
Aug 1, 2024 08:39:37.896368980 CEST	1236	IN	Data Raw: a7 85 c5 37 3e d3 b1 e2 be a6 f0 8c 70 ef a0 69 2f cf 8b 8b b9 4f dc bf 40 a4 73 3c d3 5b 8e ee 9d 86 fa e9 d5 bd 7f 44 bf 9d 68 bd 4a 12 37 6f c6 31 13 6d 3f 91 93 a2 bc 86 51 21 45 cb 89 36 82 bd 83 69 63 71 ef 69 e1 e7 33 bd 1b 1b 2c b0 5e 58 Data Ascii: 7>pi/O@s<[DhJ7o1m?Q!E6icqi3,^XvYXmfEppoggx(t/HMo'Wl;c?H+,(P76iCJ%4A==p#Du&-!%*'0tw\|p5=
Aug 1, 2024 08:39:37.896384954 CEST	448	IN	Data Raw: 70 07 e3 29 0d 95 fc 30 49 c8 a9 7f d4 13 9d 56 d4 21 34 5b c1 44 a9 80 0f 3b a6 a4 ae 4f cc b6 d4 05 a9 63 6b 62 83 d3 96 3e 57 97 94 b7 2d 66 66 74 70 52 75 7d 74 d4 f4 2c a5 36 34 d0 c7 5b fb c0 f4 cc e6 38 ad dc 37 d4 d3 4b 2d fa 60 38 8b 3e Data Ascii: p)0IV!4[D;Ockb>W-fftpRu}t,64[87K-`8>;W sj9T.D9Qp\|{.=J8tn);/]8*$P{o=on{AS b>'{3gNM_i8<o
Aug 1, 2024 08:39:37.899049997 CEST	1236	IN	Data Raw: 44 dc dd 04 44 97 82 ae 9c e2 8e 86 f8 01 68 bc 06 63 a1 b0 fc c0 0f 7e 81 8f a8 36 41 82 31 51 27 9e 40 d5 2e 4a 1d b3 11 30 43 c5 2f 75 99 98 ac 5e a3 f5 87 25 b2 b2 8c b0 95 70 24 7a e4 e8 d0 8a a2 2c ad 26 ac ac 3c 93 ea 24 42 ba 83 31 1f cb Data Ascii: DDhc~6A1Q'@.J0C/u^%p$z,&<$B1k4Fo98wap^u8mH,)i8\30tM75,*;jdME8]G{>qf1nUp<7#m9&hCYtFg#"&uBT=z{g
Aug 1, 2024 08:39:37.899373055 CEST	224	IN	Data Raw: d8 99 09 7c b8 4f a4 9a 09 cd 5b 69 22 2e b5 94 e0 81 b8 06 c4 b3 50 3c 9c 87 ea be 9a 8c 14 aa d9 ab 7c 7b 82 c6 06 e1 e3 65 a9 a2 a7 51 ab cd 1a 4d 95 58 be 63 31 7d 2a 89 b1 eb 4e b8 ce a0 94 69 62 81 be c2 1e aa 33 dd 2d ec f5 d6 53 a2 ea 70 Data Ascii: \|O[i".P<\|{eQMXc1}*Nib3-SpR+mArEK$MvbY^`x^E)KYcc0s$!0U]2X)){]D1WOk2:5xf[[G]bg
Aug 1, 2024 08:39:37.901144981 CEST	1236	IN	Data Raw: 3d b3 c1 0d 68 b1 24 9d 98 d3 89 d1 e4 23 6e e1 8b bf 92 5a 87 1f 06 e7 d6 87 f9 0d c8 ad f3 62 0e 9b bf c0 72 d8 6e 03 b2 d8 3c 1a 49 e7 4c f6 e8 5d db 0e f5 65 b3 e1 13 9a 5a e8 83 71 71 48 18 66 a5 33 0c 39 aa 64 3f 8c 7f 30 dd b4 c3 38 ca 60 Data Ascii: =h$#nZbrn<IL]eZqqHf39d?08`x:ig0V^n]aqr5`R+5tV1Y=dz\|"O,4'&8px;\g6K8atI<R@P!Xry\HwwS@5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.9	49802	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:37.400522947 CEST	393	OUT	GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1 Host: i4.cdn-image.com Connection: keep-alive Origin: http://ww01.rotect.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:37.873564005 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:21 GMT Content-Type: application/font-woff Content-Length: 17264 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-4370" Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 70 00 10 00 00 00 00 71 40 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 43 54 00 00 00 1c 00 00 00 1c 6a aa b6 37 47 44 45 46 00 00 37 84 00 00 00 1e 00 00 00 1e 00 27 01 0d 47 50 4f 53 00 00 37 c4 00 00 0b 8e 00 00 13 c6 29 4d 73 4d 47 53 55 42 00 00 37 a4 00 00 00 20 00 00 00 20 6c 91 74 8f 4f 53 2f 32 00 00 01 e8 00 00 00 56 00 00 00 60 a5 bd 5d 40 63 6d 61 70 00 00 04 ec 00 00 02 75 00 00 03 86 c7 ce be ea 67 61 73 70 00 00 37 7c 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 09 78 00 00 29 05 00 00 47 f8 1b fa 03 ac 68 65 61 64 00 00 01 6c 00 00 00 36 00 00 00 36 fa 9a cf bf 68 68 65 61 00 00 01 a4 00 00 00 21 00 00 00 24 07 c7 04 70 68 6d 74 78 00 00 02 40 00 00 02 aa 00 00 04 1a 57 5c 36 b8 6c 6f 63 61 00 00 07 6c 00 00 02 0a 00 00 02 10 c1 de d4 3a 6d 61 78 70 00 00 01 c8 00 00 00 1f 00 00 00 20 01 50 00 38 6e 61 6d 65 00 00 32 80 00 00 02 e7 00 00 06 b4 4e ce 98 3d 70 6f 73 74 00 00 35 68 00 00 02 11 00 00 [TRUNCATED] Data Ascii: wOFFCpq@FFTMCTj7GDEF7'GPOS7)MsMGSUB7 ltOS/2V`]@cmapugasp7\|glyfx)Gheadl66hhea!$phmtx@W\6local:maxp P8name2N=post5h8',prepdhBL_<'d:jxc`d``>X"]?xc`d``dg0e`g& fB0xc`f`@9 EOa>[$$H)00>xm[HTQdf^a)"0#]0M "%a&Q7)H>DDEKDqI:X}SAM?c^Dq\hVP2DFD>Q4:r5APQ/!T5R4Zejom1Z}$q5=.3Cr>qe!Sa%tr7#^#{4@\*q1T0dwrqk\Gq[#w8Y7rd(\|"8NkG3WvvI7&M99/&s
Aug 1, 2024 08:39:37.873584986 CEST	1236	IN	Data Raw: 98 bc 13 08 38 59 4c 30 8b 51 04 78 86 76 1d c2 31 7d c8 7a 2f 0e 33 a3 32 c9 e4 19 07 10 64 6d c4 74 c2 6b 12 d4 4d be 7f 05 75 3a 47 de 96 f9 dc bf 72 ed 48 2e da 0c 1c fe 69 92 60 f2 bb cd 80 be 4c 37 c6 83 ec 35 fe eb c5 73 55 39 63 66 90 2e Data Ascii: 8YL0Qxv1}z/32dmtkMu:GrH.i`L75sU9cf.''6yYyNoX._a_/rqf.0&rov_=#0<}2QNQ4e:@ZocRy&U0NWi61/>JPW[PP,S8/q'4TD
Aug 1, 2024 08:39:37.873601913 CEST	1236	IN	Data Raw: 17 0f f8 24 bf c6 37 f8 01 3f 13 e2 42 5a 28 09 35 e1 44 18 09 53 c1 17 6d 31 25 ae 8b 0d f1 5c bc 0e c5 42 b9 50 39 d4 09 7d 0d dd 86 63 e1 6c b8 12 ae 87 27 11 3a b2 18 29 47 ba 11 3f fa 30 5a 8d 7e 8a 5e 4b a6 b4 22 d5 a4 a6 d4 91 86 d2 4c 9e Data Ascii: $7?BZ(5DSm1%\BP9}cl':)G?0Z~^K"LG$*SP6\|=77X#i{Iikc-`jCkjW}e;NI9O]\p}[o{okzc"x\|`TU;%
Aug 1, 2024 08:39:37.873617887 CEST	1236	IN	Data Raw: 91 71 b8 96 8a ca 84 5a 29 0f 02 04 a3 41 3d d5 27 8a a0 8d e6 72 38 f0 fb b6 de 5d 7f 9f 9f 58 d3 92 3e bd 6e 5a 58 c8 43 a4 aa bb e9 65 7e 71 c5 bc 15 c5 ad 69 c9 f3 b2 dc 1b 5e 42 58 a1 88 97 12 61 4d 42 c0 d2 fe 68 8d 6a 23 e8 79 a8 b4 54 57 Data Ascii: qZ)A='r8]X>nZXCe~qi^BXaMBhj#yTW[k{?mHZiSk X'UgW7-4_;-T[Hm<l QD<$hVHl/RUiiEe[sygdU
Aug 1, 2024 08:39:37.873635054 CEST	1236	IN	Data Raw: f0 38 cc 14 de 13 96 41 62 df 9b 23 fc f5 11 fd 25 c3 5d 89 33 32 11 9d e7 2d f6 ff f3 38 91 9b 80 ff c7 3d f3 07 4a 1b 06 d3 97 ac 27 cf 9f 3f 61 bd 91 f3 6f 84 5a 0c 27 d0 c1 6a 04 7f f8 d2 06 f3 0b 71 0f e8 70 c0 19 7a 20 f3 ad f7 08 4b ac 56 Data Ascii: 8Ab#%]32-8=J'?aoZ'jqpz KVKA ,ys82.\my!lul=O*c1%.I-5?z}aaC-."}w4kq\|0zpEK\|[c{ZC0.}><&<
Aug 1, 2024 08:39:37.873650074 CEST	1236	IN	Data Raw: 98 21 5f 0a ef 25 24 f5 75 09 2f 42 c8 9e 72 8a 63 2e 42 f9 80 fc 84 72 e7 2e 7a 19 29 00 d4 e0 d4 d5 91 29 91 91 29 44 b1 86 3e 45 32 79 19 de 3d 1c cd 9d c3 f1 4c 5e 54 cc f4 88 54 d9 62 e8 4a 0b 72 c4 a0 c9 0f f1 60 b3 a7 90 98 a1 73 c8 92 6a Data Ascii: !_%$u/Brc.Br.z)))D>E2y=L^TTbJr`sju49o#iar\wlm%XW^8}qqD29@Nu6^nHI,%"SI]]WRVX;o5;a/E)EI\|}p`Sg_=\|
Aug 1, 2024 08:39:37.873667955 CEST	1236	IN	Data Raw: 79 34 9a 43 a9 e2 f1 b7 b1 a5 a5 05 9e 82 42 e1 05 21 85 3e b2 1c 86 15 75 88 fa 28 03 8e 53 88 a9 c5 30 24 c6 8b 46 ff f4 90 c2 b2 8e d2 21 c0 88 87 00 e4 a1 d9 76 0e d0 69 77 2d 6d 34 e4 c7 86 14 2d c8 ea 33 a6 bc db 99 95 17 1b bb b4 a3 bf 2f Data Ascii: y4CB!>u(S0$F!viw-m4-3/e^sR+6fwKfBz\Ftv2#s'VzxwUG&WNp04!1 j%JCB7cG>T\|d9=~<y<Ke8~/@'OkZxpCx
Aug 1, 2024 08:39:37.873686075 CEST	1236	IN	Data Raw: 2a e5 9d 68 be 1a 17 9d 52 14 17 bd 8e 43 9f 20 ae d1 cb d6 f0 e2 fc 46 ad e2 ec 7a 9d 16 e1 b5 5a 43 48 c8 46 ea 89 43 9d 56 f8 72 8c 5f b6 ad 33 11 2d 84 2f 3b f1 c9 a5 85 10 38 5d cb 56 fe da 9f 13 07 71 d2 2a b1 31 d9 83 cb 97 ed 09 0a 4a 98 Data Ascii: hRC FzZCHFCVr_3-/;8]Vq1J:lEdu^IgpY{TFxjy=[fH%^{!-f[b2(GX[Q0b[;U0+L?B!qPyjh*COmW'8:V4BQ
Aug 1, 2024 08:39:37.873702049 CEST	1236	IN	Data Raw: 66 83 21 ab 46 18 2a ae b8 b7 da ba 78 b6 88 d6 8f a6 a2 bf f4 0b 64 75 b3 f7 38 c4 0a b6 96 2c aa 75 85 80 ab 59 d3 32 0b ea db da 5a 0f 95 f8 52 ec 4a 4a d6 2f 6e 0b 0e 98 a4 44 cc be ce ce 4b 05 5a b7 c6 98 39 08 71 42 9f e9 ea 14 2a 8f 2e 98 Data Ascii: f!Fxdu8,uY2ZRJJ/nDKZ9qB.b,9[99U]{S&!b,WC'$JCEm:+fw;U\WxG#QoVLi]5Kn$ccS=Sw*:3b{
Aug 1, 2024 08:39:37.873718977 CEST	834	IN	Data Raw: da 53 84 7b a5 44 a9 3d 2f d8 c1 ec 25 8b 51 d0 de 30 db 7b 9b 18 85 5a 1c c7 b0 e4 09 9a 4e 70 8e 45 60 3c 83 65 44 63 79 83 e5 ea 55 a3 72 d5 b4 41 5a 2f a3 8d 2d 9e 5a 0d ff b5 3d 5f ff bb 7d ef be bb ef ef db 66 d7 d7 cf 91 12 d7 6f 41 d4 5b Data Ascii: S{D=/%Q0{ZNpE`<eDcyUrAZ/-Z=_}foA[?"."F[3A7f/oU3"Z(M]azxlrGcSNOsXfLq,9`o+cn<PQ=-'~joz7l
Aug 1, 2024 08:39:37.880274057 CEST	1236	IN	Data Raw: 93 79 5e e9 5a 8d d9 6f a6 d4 e7 02 37 70 ec 4b 6c ac ce 76 85 b1 d8 5f 1a 5b e2 91 e9 38 76 f8 18 f7 24 47 6b 67 b4 bb cf 69 ac ab 67 86 38 94 d0 f5 a1 80 ad ef ed 88 81 6a 0c 2e 8b 9c 71 aa 71 c0 8d c2 b9 01 f9 0c 37 6f 47 ec c6 ae 7d da 19 df Data Ascii: y^Zo7pKlv_[8v$Gkgig8j.qq7oG}Mge7]Z{IIsCXoRm4o^O_#=kUab5:ZxQgf>Q.vE3xctyD\|\<=m`4//

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.9	49803	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:37.400605917 CEST	391	OUT	GET /__media__/fonts/montserrat-medium/montserrat-medium.woff HTTP/1.1 Host: i4.cdn-image.com Connection: keep-alive Origin: http://ww01.rotect.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:37.887901068 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:21 GMT Content-Type: application/font-woff Content-Length: 33316 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-8224" Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 77 4f 46 46 00 01 00 00 00 00 82 24 00 13 00 00 00 01 26 88 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 a8 00 00 00 1c 00 00 00 1c 86 39 f0 ac 47 44 45 46 00 00 01 c4 00 00 00 4d 00 00 00 68 06 21 07 01 47 50 4f 53 00 00 02 14 00 00 2a cb 00 00 82 36 c5 fa 25 64 47 53 55 42 00 00 2c e0 00 00 01 9a 00 00 03 24 57 60 3a 43 4f 53 2f 32 00 00 2e 7c 00 00 00 53 00 00 00 60 61 e5 ae a1 63 6d 61 70 00 00 2e d0 00 00 01 89 00 00 01 e2 17 09 75 62 63 76 74 20 00 00 30 5c 00 00 00 3c 00 00 00 3c 0e 59 11 ef 66 70 67 6d 00 00 30 98 00 00 01 b1 00 00 02 65 53 b4 2f a7 67 61 73 70 00 00 32 4c 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 32 54 00 00 46 90 00 00 8b a8 1f 92 91 ac 68 65 61 64 00 00 78 e4 00 00 00 36 00 00 00 36 15 9e 06 99 68 68 65 61 00 00 79 1c 00 00 00 20 00 00 00 24 0f ac 07 51 68 6d 74 78 00 00 79 3c 00 00 02 4a 00 00 03 a4 2e 37 56 bc 6c 6f 63 61 00 00 7b 88 00 00 01 c8 00 00 01 d4 ce bd f0 aa 6d 61 78 70 00 00 7d 50 00 00 00 20 00 00 [TRUNCATED] Data Ascii: wOFF$&FFTM9GDEFMh!GPOS6%dGSUB,$W`:COS/2.\|S`acmap.ubcvt 0\<<Yfpgm0eS/gasp2Lglyf2TFheadx66hheay $Qhmtxy<J.7Vloca{maxp}P name}pgqpostJprepxQ>webf\-hRFSx%=@Py>]aJ5$`&MNuI@Z2(]eAM{F=Y0]OK>m#x}l\m/bq!ImjHeXM[&0]i3(MQ6baetPx"7x^uYg9?Bss<TzW-i}mr?Z?WnU/Se{Z~l=u{k6<Xs{o>^U8_R\|%uxZ_%50tAF/I\|:UWuoN=sWq<~=>5?n[o}7QYfIqUOI8sJJ;uPg~o:
Aug 1, 2024 08:39:37.887919903 CEST	502	IN	Data Raw: 4f ab 3a d5 8a 5f cd 5e 2b 0a 71 cf 49 fc 0a eb d1 2c b5 2c e7 77 34 50 cf 23 00 b3 35 79 f7 45 51 c7 6f f2 b7 a9 eb e3 a8 75 70 ab e4 67 18 10 dc da 55 ad 7d 1a e7 d1 6f 49 bc a1 d9 96 50 ef 63 05 d7 eb 55 54 df c1 35 de 49 1c 1d 77 eb 83 f3 a6 Data Ascii: O:_^+qI,,w4P#5yEQoupgU}oIPcUT5IwZ5P~Ww&f#G_~gWRZ e>~wlT>mpgevGO?Y{3{]O-t}mw&YwRzClO^u`o7jN~6sd4{gU^,'n1
Aug 1, 2024 08:39:37.887974977 CEST	1236	IN	Data Raw: c1 6b 36 83 46 36 03 77 8d a0 47 99 15 36 a3 57 aa d1 73 d2 1f 87 d0 13 37 f4 49 8c c7 66 55 89 71 19 e3 7e 12 dc 7e 1c b4 f2 2e 78 54 25 30 d7 8a 52 1c 55 97 b7 d6 1f dd 59 b7 00 d5 b9 d4 08 3a f0 47 c1 46 9c 8d 7a 5c 26 75 8b 5a be 25 d4 be 8f Data Ascii: k6F6wG6Ws7IfUq~~.xT%0RUY:GFz\&uZ%}"%e;[K+)R-}Drvyap>&a"7eGSG`7.NpF;-v2vNp^M{h\C>;[d8y\|2MK~fygb)AW
Aug 1, 2024 08:39:37.888051987 CEST	1236	IN	Data Raw: 0d de f2 2f 28 7d 0c a5 e6 47 0e 52 1b 7e ad f8 27 28 e1 20 39 fd 34 a0 1b 73 da 14 66 bc 21 c0 34 e8 af 17 74 3c 0e 2a 74 28 e3 4d 89 34 40 c9 a0 00 47 b7 69 f9 fc 02 37 bc ff 92 1d 9b 71 3d e9 ca ae ac 6f fa 9d 93 76 9f d6 33 b8 77 0a 2d 1b 47 Data Ascii: /(}GR~'( 94sf!4t<t(M4@Gi7q=ov3w-G;a{+w"(AKF"gs}8E=N.#afq<(>Y#!V`cD*wYTY__4{u=NiQ2WA)5z,}J
Aug 1, 2024 08:39:37.888067961 CEST	1236	IN	Data Raw: 9e 45 cd f7 01 b3 47 70 f7 5b d0 be 2f a0 b4 eb d0 c0 47 54 7e 2d fd cf 55 bf ae fe 14 14 f1 03 8c d3 f3 fa 75 48 a1 c2 49 ae 80 bb 8c 41 f7 ee d1 1d e0 36 2d fa a4 1e 62 14 82 a3 5b c0 c9 a7 a8 53 54 43 96 1b 87 54 d2 05 29 b2 1b ef 7a 06 7c 63 Data Ascii: EGp[/GT~-UuHIA6-b[STCT)z\|cZ{T>.f3(c(^w(C_a+D=?6NC\}A7U*ZNttYm./]kcEIJLZ>
Aug 1, 2024 08:39:37.888139963 CEST	672	IN	Data Raw: d2 8b f0 1b de b0 5e 17 87 75 99 a4 7c 2e 96 d8 66 bc 3f aa 37 e2 4a 3b f5 c4 98 de 27 91 a7 b4 5d 5f 03 9d 8d 5a 9d 6a 5c 9f 01 9e c4 bb d6 2c 5e 32 7d 1a 12 79 13 9e 04 e7 14 bf 9b c4 d8 e1 ec 30 7d 48 47 18 4f 37 41 7d a6 00 7b 3e 3e e3 2c 5b Data Ascii: ^u\|.f?7J;']_Zj\,^2}y0}HGO7A}{>>,[JqA#o!M}y~{'$-B=^ZvL~yD@1[T$,'a#h0Fk?[zW9Wc&pyMz=*J;
Aug 1, 2024 08:39:37.888164043 CEST	1236	IN	Data Raw: 2d f4 63 9b 44 46 a0 07 87 d0 1f 2d ba 91 6d 1c 61 8c 86 48 e1 27 51 97 8b f8 3c c1 08 7e d3 8f 07 21 67 49 b4 e5 31 f4 63 bd b1 42 30 0f af 10 ed 3f 82 16 5d a1 85 ba 03 fb bb b4 98 74 5a bb 7a 07 66 a4 53 c0 b0 69 e7 71 3c 7f 49 ec ec fa 04 f0 Data Ascii: -cDF-maH'Q<~!gI1cB0?]tZzfSiq<I2}dCV~(-\|Ax6T-On.NV9:z7$Ji(#c-B>Ii(tYg}'o,Lo]y`@&)J_f8#Y-S67{
Aug 1, 2024 08:39:37.888190985 CEST	224	IN	Data Raw: ae 6d 3a 65 bd 1d 3f 7a b8 c9 b7 25 67 f7 2d cf 66 41 91 79 30 53 be 4f 1b 53 8e e1 9f a9 76 1d af 6e e3 29 56 1d 9f bb ce 1d ef fa a6 d8 48 99 cb 19 16 4a 65 74 c2 34 57 a5 d9 48 fe d8 aa 0e 40 a3 68 54 bb c0 43 0f d0 72 78 50 a4 6d 37 67 db b3 Data Ascii: m:e?z%g-fAy0SOSvn)VHJet4WH@hTCrxPm7g+v06+brcX~4NOhuP\| czb%\|!#;IW#dv?=2'Rv^}\|nYi]Vj=V\kolgNk*}8$Ul\|fl
Aug 1, 2024 08:39:37.888206005 CEST	1236	IN	Data Raw: db 04 b4 a0 36 9b 5d 64 b6 01 35 70 0f 18 72 7d 06 7f 3e 8c da 6e b5 bc 51 6c ee d2 63 23 c0 52 25 e8 6b 48 66 5a d0 50 0f 73 ab 3a 31 6a 22 d8 85 72 36 1a 6a 32 16 1b f6 ea 34 a9 e8 0e b4 ba 72 a1 2f c8 99 bd b4 8d 75 5a 1e 14 a6 9d c2 5f 91 a2 Data Ascii: 6]d5pr}>nQlc#R%kHfZPs:1j"r6j24r/uZ_svno(D0dPA5o.aWbp#P;SJ)$kwziBkVBJ-:a\\|D},O_c"4{m8KvFJmg(Wrg
Aug 1, 2024 08:39:37.888283014 CEST	1236	IN	Data Raw: f8 1e 75 46 7d a0 2d 51 ef ed 77 5f 3a 76 b8 7a 9a bb 8e 36 63 41 88 81 01 75 da ae fa 16 4d f3 86 cc be 15 df 25 a9 a4 2e 60 ed f8 1c f1 6d 62 a1 4c 2e 1e ad 2a 1d cc 7b aa cb c5 63 97 5b f4 c1 3c 92 6f b3 b5 0c 8d db 88 d1 11 93 39 48 cb 11 d7 Data Ascii: uF}-Qw_:vz6cAuM%.`mbL.*{c[<o9H(%Y9#Vt1?}`2jG\ F^5l5}Njo<.c%}!m>[r69i'cdbO7Eispb'n^=oC[:E&WCZ?J?-9(s
Aug 1, 2024 08:39:37.893063068 CEST	1236	IN	Data Raw: c9 ea 01 93 47 6f f5 3e 3b a3 f2 5f da bc e8 1a e6 dd 0d 59 cf 89 63 22 e7 ac 05 eb 8e b7 42 ac cc ee 1b 19 4f 17 27 e7 bf 65 a5 f6 09 9c 19 34 ff 00 61 4b ab 53 6f fb 19 a8 26 0b 5e d6 51 c9 11 9f 8b c9 24 ad be 07 f3 71 5f 20 bf b1 2e 85 4e 02 Data Ascii: Go>;_Yc"BO'e4aKSo&^Q$q_ .NiY$+pu}gyiCaDa#n@ol\|yQFsv(o=\|p>M!jQEv^rO=yc2c>A:YoAQ}5oi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.9	49805	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:37.500755072 CEST	293	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i4.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:37.949501991 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:21 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Thu, 16 Feb 2023 20:41:01 GMT Connection: keep-alive ETag: "63ee94dd-20f3" Expires: Thu, 15 Aug 2024 06:39:21 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 2a 2f 0d 0a 76 61 72 20 73 68 6f 77 50 6f 70 3d 31 3b 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 53 65 61 72 63 68 54 65 78 74 28 74 29 7b 74 2e 76 61 6c 75 65 3d 22 22 2c 74 2e 73 65 6c 65 63 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 72 65 70 6c 61 63 65 53 74 72 69 6e 67 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 65 2c 6e 2c 22 67 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 75 62 6d 69 74 53 65 61 72 63 68 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2b 3d 67 65 6e 65 72 61 74 65 42 72 6f 77 4c 6f 67 55 52 4c 28 22 73 72 63 71 72 79 22 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 74 5d 2c 30 3d 3d 64 2e 65 6c 65 6d 65 6e 74 73 2e 71 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 7c 7c 22 45 6e 74 65 72 20 4b 65 79 77 6f 72 64 [TRUNCATED] Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function change
Aug 1, 2024 08:39:37.949533939 CEST	565	IN	Data Raw: 53 74 61 74 75 73 28 74 29 7b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 61 64 64 62 6f 6f 6b 6d 61 72 6b 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 41 73 48 6f 6d 65 50 61 67 65 28 74 2c 65 29 7b 72 65 Data Ascii: Status(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate(){var t=new Array("Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"),e=new Array("January","February","March","April
Aug 1, 2024 08:39:37.949551105 CEST	1236	IN	Data Raw: 30 22 2b 6f 29 2c 6f 3d 22 25 22 2b 6f 2c 28 6f 3d 75 6e 65 73 63 61 70 65 28 6f 29 29 3d 3d 74 29 7b 65 3d 21 31 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 56 61 6c 69 64 55 52 4c 43 68 61 72 73 Data Ascii: 0"+o),o="%"+o,(o=unescape(o))==t){e=!1;break}}return e}function checkValidURLChars(t){var e,n;if(""==t)return!1;if(t.match(/[#&]/))return!0;for(n=t.length,intCur=0;intCur<n&&(chrValue=t.charAt(intCur),1!=(e=checkUTFChar(chrValue)));intCur++);r
Aug 1, 2024 08:39:37.949567080 CEST	224	IN	Data Raw: 2c 74 68 69 73 2e 69 73 69 6e 66 72 61 6d 65 3d 2d 31 2c 74 68 69 73 2e 62 72 6f 77 73 65 72 64 61 74 61 3d 22 22 2c 74 68 69 73 2e 67 65 74 41 42 50 53 74 61 74 75 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 Data Ascii: ,this.isinframe=-1,this.browserdata="",this.getABPStatus=function(){return void 0!==window.abp&&window.abp?1:0},this.getLocalTimeZone=function(){return(new Date).getTimezoneOffset()/60*-1},this.getScreenHeight=function(){ret
Aug 1, 2024 08:39:37.949659109 CEST	1236	IN	Data Raw: 75 72 6e 20 73 63 72 65 65 6e 2e 68 65 69 67 68 74 7d 2c 74 68 69 73 2e 67 65 74 53 63 72 65 65 6e 57 69 64 74 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 63 72 65 65 6e 2e 77 69 64 74 68 7d 2c 74 68 69 73 2e 63 61 6c 6c 65 64 Data Ascii: urn screen.height},this.getScreenWidth=function(){return screen.width},this.calledInExternalFrame=function(){return"n"},this.isCookieSupported=function(){var t;return-1==this.cookieSupport&&(t=navigator.cookieEnabled\|\|!1,void 0!==navigator.coo
Aug 1, 2024 08:39:37.949743986 CEST	224	IN	Data Raw: 74 2e 63 6c 69 65 6e 74 59 2b 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 54 6f 70 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 54 6f 70 29 7d 63 61 74 63 68 28 74 29 7b 7d Data Ascii: t.clientY+(document.documentElement.scrollTop\|\|document.body.scrollTop)}catch(t){}return!0}document.onmousemove=mPos;var _skPU={_Top:null,_wh:function(){var e=0;try{"number"==typeof this._Top.window.innerHeight?e=this._Top.w
Aug 1, 2024 08:39:37.949846983 CEST	1236	IN	Data Raw: 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 3a 74 68 69 73 2e 5f 54 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 74 68 69 73 2e 5f 54 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 Data Ascii: indow.innerHeight:this._Top.document.documentElement&&this._Top.document.documentElement.clientHeight?e=this._Top.document.documentElement.clientHeight:this._Top.document.body&&this._Top.document.body.clientHeight&&(e=this._Top.document.body.c
Aug 1, 2024 08:39:37.949966908 CEST	1236	IN	Data Raw: 6e 70 66 3d 6e 70 66 7c 7c 22 74 6f 6f 6c 62 61 72 3d 30 2c 73 63 72 6f 6c 6c 62 61 72 73 3d 31 2c 6c 6f 63 61 74 69 6f 6e 3d 31 2c 73 74 61 74 75 73 62 61 72 3d 30 2c 6d 65 6e 75 62 61 72 3d 30 2c 72 65 73 69 7a 61 62 6c 65 3d 31 22 3b 76 61 72 Data Ascii: npf=npf\|\|"toolbar=0,scrollbars=1,location=1,statusbar=0,menubar=0,resizable=1";var _npW=this._Top.window.open(_npSU,_npID,npf+",top="+pxTop+",left="+pxLeft+",width="+pw+",height="+ph);return _npW&&(_npW.blur(),-1<navigator.userAgent.toLowerCas
Aug 1, 2024 08:39:37.949981928 CEST	1236	IN	Data Raw: 6b 22 2c 70 70 63 74 72 6c 29 3a 64 6f 63 75 6d 65 6e 74 2e 6f 6e 63 6c 69 63 6b 3d 70 70 63 74 72 6c 7d 66 75 6e 63 74 69 6f 6e 20 70 70 63 74 72 6c 28 74 29 7b 74 72 79 7b 76 61 72 20 65 3d 28 74 3d 74 7c 7c 28 77 69 6e 64 6f 77 2e 65 76 65 6e Data Ascii: k",ppctrl):document.onclick=ppctrl}function ppctrl(t){try{var e=(t=t\|\|(window.event\|\|window.Event)).srcElement\|\|t.target;if(e.tagName&&"INPUT"==e.tagName)return e.attributes.type&&"text"!=e.attributes.type.value&&void 0!==showPop&&(showPop=0),
Aug 1, 2024 08:39:37.949997902 CEST	347	IN	Data Raw: 5f 70 70 2e 6c 64 26 26 76 6f 69 64 20 30 21 3d 3d 5f 5f 70 70 2e 6c 64 2e 75 26 26 5f 5f 70 70 2e 6c 64 2e 75 26 26 30 3c 5f 5f 70 70 2e 6c 64 2e 75 2e 6c 65 6e 67 74 68 26 26 30 3d 3d 5f 5f 70 70 2e 6c 64 2e 70 64 3f 28 5f 5f 70 70 2e 6c 64 2e Data Ascii: _pp.ld&&void 0!==__pp.ld.u&&__pp.ld.u&&0<__pp.ld.u.length&&0==__pp.ld.pd?(__pp.ld.pd=!0,_skPU.doPU(__pp.ld.u,__pp.ld.w,__pp.ld.h,__pp.ld.p,"ld"==t),!0):!1}catch(t){return!1}}function isIE(){var t=!1;try{t=/msie\|MSIE/.test(navigator.userAgent)}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.9	49807	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:37.533955097 CEST	297	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i4.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:38.003058910 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:21 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Thu, 15 Aug 2024 06:39:21 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 30 f2 00 2c c1 00 2c 37 03 90 81 f9 8f 29 b2 13 3b 91 25 a0 9b ae dd a1 ab d6 7a bc 0f e7 7c b7 4e fd b0 ab 8a 28 f1 09 c8 13 96 00 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c [TRUNCATED] Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0P%@a@a0@a0P0P(P(P((@a@a0@a0P0P(P(P((@a@a0@aPeaLt[=ul=HhOnNc=e{l[,lu_cnk,n;~'^a$sbV&aqcm3Ts*l#zXtH+8c/BH1>CXHay/AIl2g}s/Q8{.;R91oeGo-V:;u$5'.lW:Q\v_:z4',l]2z4'e,~O]%>\|v_2U}8u=hL4$7aj;eMhL\>',/]I,{}a91\|Jz
Aug 1, 2024 08:39:38.003128052 CEST	1236	IN	Data Raw: b1 73 e2 d5 85 ed aa 5b 43 07 31 c7 b0 d3 f6 53 17 56 dd 8c e8 20 e6 18 96 72 88 08 4b e8 20 e6 18 96 f8 01 7c 65 61 db 1a 97 d0 8b 98 d7 b0 f2 73 62 f8 8c 1a 3f 6a d3 c2 07 f0 95 33 ce 55 85 55 39 23 1e fd 63 98 c5 54 ba 3f 16 93 15 b6 b5 82 34 Data Ascii: s[C1SV rK \|easb?j3UU9#cT?4JYA)O(W.:+FOQX3DWsn]{d^Va4\>gDbvU1aEjass+e9<lNTX3KVaV\|
Aug 1, 2024 08:39:38.003145933 CEST	1236	IN	Data Raw: 25 2e ef 57 dd a0 c2 fa 1c c0 aa e8 eb 95 1b c5 d4 5b fa 3a 36 49 9f c6 4e 1c c7 e2 da be 36 5d 2d 64 90 a8 9a 5d f2 ed da c6 e2 aa 17 e6 75 3d 7d 75 9d 7f 66 3b cf b2 a2 7d d2 e7 62 71 d3 a3 b0 1e ad de d5 d4 97 a3 98 43 58 c1 c6 de 5f 79 c4 e0 Data Ascii: %.W[:6IN6]-d]u=}uf;}bqCX_y:RHn\nv[U+,UnCX9r}K5G.ek8}`]~y/GXTW=)l`c~yq,%+,~Oaxpz[5$%4
Aug 1, 2024 08:39:38.003247023 CEST	1236	IN	Data Raw: 10 0f 13 06 c6 10 88 d7 f8 3a 4a d8 8a 06 12 02 e1 82 0f 92 73 94 30 94 63 08 c4 a9 02 ec 34 61 e8 40 23 10 49 20 9e a0 e6 0c 61 28 c7 10 88 c3 05 d8 2b 84 a1 1c 43 20 f8 1c 32 27 09 43 39 86 40 01 76 2f 61 60 0c 01 be ee 25 0c e5 18 02 05 d8 ad Data Ascii: :Js0c4a@#I a(+C 2'C9@v/a`%10HE10t7(!~/CZwho[JeGc`G}"(l]P!Pu]6Q!P +1J#fKH>g
Aug 1, 2024 08:39:38.003262997 CEST	1236	IN	Data Raw: 21 87 bd da 0a 73 37 85 3d e4 60 30 84 2d 19 3d e1 b2 c3 be 73 8c 65 41 0e 43 20 87 35 1a d1 1d 5f d6 11 df c5 12 16 bd 8c cc 4b 06 64 32 9d 08 c2 40 d8 e9 4f 49 cc d3 f4 5c 4e 7f 3d 7e fd 53 11 66 c7 15 45 47 ac e6 d2 89 20 0c 84 9d d6 88 89 2d Data Ascii: !s7=`0-=seAC 5_Kd2@OI\N=~SfEG -e71NqEa\eUtb!&,4Bnv"lr)YcIb&Y7/5aQ.rd"}5[tDNkR^@&v.;x&3Z5"SsR"Q}
Aug 1, 2024 08:39:38.003402948 CEST	1236	IN	Data Raw: 08 00 62 c7 b4 4d d4 95 01 7a 6d b3 98 cb f9 bc 48 8c fe ec 4a 4b 21 17 9e c8 9e 79 e6 f2 df 10 3a 11 12 11 8d e7 c3 1a 51 ec 3d 7c ac fb 6f d2 26 ed 6e 0a 0b df ff 2c 5d c2 16 37 40 ec 16 0b 64 07 64 00 9d 08 c0 50 8b 1d d7 88 a6 5a 12 76 93 bb Data Ascii: bMzmHJK!y:Q=\|o&n,]7@ddPZv~T",P=zwk/vF#+pv,3aq%laub6TKq5a)1{Nuck6qDLQ98V;DT"fnn.v u
Aug 1, 2024 08:39:38.003418922 CEST	1236	IN	Data Raw: 67 75 c0 d1 3d 4a d1 32 fb 8c 5f 2b a7 bd a8 b0 29 f8 88 5f 25 64 15 61 c4 9b e3 59 97 e7 d8 b2 25 62 46 d8 76 10 c4 94 3e 49 2d 02 42 e4 91 9f 03 b2 65 58 fc 5e 6a 2e c6 83 3f e1 17 13 c8 4a ca 0e bf 6e e9 e3 10 b6 75 11 76 fc c7 76 98 81 fd bd Data Ascii: gu=J2_+)_%daY%bFv>I-BeX^j.?JnuvvOJ_`1DT].])Ya-@?#Ov'Q>$1vCR5I%SaIK,\|hDw(&yL'u~Qd,K;Y%(LIc\|!M0&pCq
Aug 1, 2024 08:39:38.003436089 CEST	1236	IN	Data Raw: 3b 41 8c 89 7b 09 b5 84 42 90 65 4a d1 54 0c 2b 99 ef e3 0a 62 a3 9b 61 2a f8 65 69 89 39 e9 e5 4e d0 06 a3 ef 81 a8 55 3b 62 ac 10 67 54 fd 17 83 f1 14 c2 b6 e3 34 71 af 17 0f a2 2d 9f a2 c2 f7 6f 72 4e 9e a3 eb 38 47 37 21 5f 8f 11 65 98 75 6c Data Ascii: ;A{BeJT+ba*ei9NU;bgT4q-orN8G7!_eulF0\fCY,XqN!EQuXbf2\|+^es01eB&\|(55fLhs8uU(Y;('3lVT$5,UDnH)j=nK;
Aug 1, 2024 08:39:38.003452063 CEST	1236	IN	Data Raw: 0a 75 9f 58 5e d4 75 b9 b2 c3 0c 6f 5a fa a3 72 1f ab e5 3c 32 4b 4c e5 4e 4e d6 81 86 79 a6 c5 35 bc 4c 4b 9f 0d be 93 40 b9 f5 c1 38 10 0e ee 9a 27 6e 3f 46 d8 c1 94 58 72 24 b7 91 10 ad c9 26 50 76 d8 75 89 e8 23 9a a3 d8 9f df 5a 08 1b 84 30 Data Ascii: uX^uoZr<2KLNNy5LK@8'n?FXr$&Pvu#Z0DOuc^ou0D#c?7(F5Vst8zb<`5@=lCzSxBh{6tdYgPT'<B#H#N]Cg1ao[/g4y
Aug 1, 2024 08:39:38.003469944 CEST	1236	IN	Data Raw: 67 19 65 48 6e 0d 2d 1d ae 5d 7f 34 04 20 47 f8 d2 4b 1a 18 ef b8 29 fd 19 93 2a ac a5 18 f1 60 b8 f9 f1 b9 79 02 61 8d 27 81 73 1d d9 d3 95 de b6 4f ee 1d 6f 6d 8a 31 6f d3 e8 2c d3 90 f7 7b 35 9c 47 b7 9c bd f0 d6 89 14 96 16 4f 84 6a 13 20 85 Data Ascii: geHn-]4 GK)`ya'sOom1o,{5GOj vDP-PZ8aBf}#~4ZS2dOm~rEXI-BEehZqO?;r8zOrwXRj(Km%=3iP((Pykl6CcaCv^Ite.
Aug 1, 2024 08:39:38.015259981 CEST	1109	IN	Data Raw: 9e e6 70 89 89 a7 d7 ce 5c 65 11 1d 6e ac 6b 18 66 04 ab df 45 c5 54 59 37 53 f8 f9 62 f5 1c 4e 5b f9 2f 8d 11 3b e5 06 2a 6d 59 34 98 f6 a8 1b 03 a7 ec c1 05 25 68 f4 23 f1 b4 4a 1c 13 c4 a4 09 10 4e b9 20 33 4d 14 e1 d8 e2 4d d0 14 67 ae 35 e6 Data Ascii: p\enkfETY7SbN[/;*mY4%h#JN 3MMg5(pOjqw oq3,f[bOQdOBvGshW4r+buJlC)Vt[^ozTZzn8-B9^-U0\|O!0amt_d(bzfKL&rBJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.9	49808	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:37.877276897 CEST	301	OUT	GET /__media__/pics/28905/res-arw.png HTTP/1.1 Host: i4.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:38.360769987 CEST	672	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:21 GMT Content-Type: image/png Content-Length: 346 Last-Modified: Tue, 04 Jan 2022 14:44:28 GMT Connection: keep-alive ETag: "61d45d4c-15a" Expires: Thu, 15 Aug 2024 06:39:21 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 1d 08 03 00 00 00 f8 b5 4e 88 00 00 00 45 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 57 d4 34 b7 00 00 00 16 74 52 4e 53 00 51 a8 e4 9d fa 21 30 f4 13 ba 01 72 90 da 3e 7e 03 c7 5f 0a 88 8d 4f 23 a5 00 00 00 ae 49 44 41 54 28 cf 85 93 e1 12 83 20 0c 83 11 41 d4 82 0a 6a de ff 51 37 b7 dd 4e a4 94 ef 77 ae 85 34 51 e7 7e a8 06 2b c6 30 34 34 33 80 b9 8b 92 c4 e1 a2 df 26 41 a3 3f 1a 58 bd 92 3c e6 62 f1 b5 51 e6 af c1 68 1c a7 a0 c1 e2 46 62 5d 30 c8 e0 5c c8 c7 80 75 21 a0 e0 e1 02 4d 23 18 32 17 e8 04 cb dd 05 7e 4c ee 82 a9 48 ac 76 e2 63 b2 37 07 4e 90 f6 a8 a8 6e 0c ec e3 14 9a db 40 fc ad 7f 1b ca 84 cd c5 37 a9 88 ef 6d 03 1f 99 24 5c ef 4b 27 c7 e9 4d 5c 1a a1 54 6a 47 ab 25 47 df ec 9a 5f fc a1 a2 5c 58 6a 55 fa 05 63 50 20 91 7b 34 90 ee 00 00 00 00 [TRUNCATED] Data Ascii: PNGIHDR"NEPLTEGpLW4tRNSQ!0r>~_O#IDAT( AjQ7Nw4Q~+0443&A?X<bQhFb]0\u!M#2~LHvc7Nn@7m$\K'M\TjG%G_\XjUcP {4IENDB`
Aug 1, 2024 08:39:38.631388903 CEST	672	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:21 GMT Content-Type: image/png Content-Length: 346 Last-Modified: Tue, 04 Jan 2022 14:44:28 GMT Connection: keep-alive ETag: "61d45d4c-15a" Expires: Thu, 15 Aug 2024 06:39:21 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 1d 08 03 00 00 00 f8 b5 4e 88 00 00 00 45 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 57 d4 34 b7 00 00 00 16 74 52 4e 53 00 51 a8 e4 9d fa 21 30 f4 13 ba 01 72 90 da 3e 7e 03 c7 5f 0a 88 8d 4f 23 a5 00 00 00 ae 49 44 41 54 28 cf 85 93 e1 12 83 20 0c 83 11 41 d4 82 0a 6a de ff 51 37 b7 dd 4e a4 94 ef 77 ae 85 34 51 e7 7e a8 06 2b c6 30 34 34 33 80 b9 8b 92 c4 e1 a2 df 26 41 a3 3f 1a 58 bd 92 3c e6 62 f1 b5 51 e6 af c1 68 1c a7 a0 c1 e2 46 62 5d 30 c8 e0 5c c8 c7 80 75 21 a0 e0 e1 02 4d 23 18 32 17 e8 04 cb dd 05 7e 4c ee 82 a9 48 ac 76 e2 63 b2 37 07 4e 90 f6 a8 a8 6e 0c ec e3 14 9a db 40 fc ad 7f 1b ca 84 cd c5 37 a9 88 ef 6d 03 1f 99 24 5c ef 4b 27 c7 e9 4d 5c 1a a1 54 6a 47 ab 25 47 df ec 9a 5f fc a1 a2 5c 58 6a 55 fa 05 63 50 20 91 7b 34 90 ee 00 00 00 00 [TRUNCATED] Data Ascii: PNGIHDR"NEPLTEGpLW4tRNSQ!0r>~_O#IDAT( AjQ7Nw4Q~+0443&A?X<bQhFb]0\u!M#2~LHvc7Nn@7m$\K'M\TjG%G_\XjUcP {4IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.9	49839	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:50.233925104 CEST	327	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:50.711255074 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:34 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Thu, 16 Feb 2023 20:41:01 GMT Connection: keep-alive ETag: "63ee94dd-20f3" Expires: Thu, 15 Aug 2024 06:39:34 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 2a 2f 0d 0a 76 61 72 20 73 68 6f 77 50 6f 70 3d 31 3b 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 53 65 61 72 63 68 54 65 78 74 28 74 29 7b 74 2e 76 61 6c 75 65 3d 22 22 2c 74 2e 73 65 6c 65 63 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 72 65 70 6c 61 63 65 53 74 72 69 6e 67 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 65 2c 6e 2c 22 67 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 75 62 6d 69 74 53 65 61 72 63 68 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2b 3d 67 65 6e 65 72 61 74 65 42 72 6f 77 4c 6f 67 55 52 4c 28 22 73 72 63 71 72 79 22 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 74 5d 2c 30 3d 3d 64 2e 65 6c 65 6d 65 6e 74 73 2e 71 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 7c 7c 22 45 6e 74 65 72 20 4b 65 79 77 6f 72 64 [TRUNCATED] Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function change
Aug 1, 2024 08:39:50.711361885 CEST	1236	IN	Data Raw: 53 74 61 74 75 73 28 74 29 7b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 61 64 64 62 6f 6f 6b 6d 61 72 6b 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 41 73 48 6f 6d 65 50 61 67 65 28 74 2c 65 29 7b 72 65 Data Ascii: Status(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate(){var t=new Array("Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"),e=new Array("January","February","March","April
Aug 1, 2024 08:39:50.711374044 CEST	1236	IN	Data Raw: 43 6c 69 63 6b 55 52 4c 28 6c 69 6e 6b 73 5b 69 5d 2c 22 6f 6c 6f 64 22 29 2c 6c 69 6e 6b 73 5b 69 5d 2e 69 6e 6e 65 72 48 54 4d 4c 3d 74 65 6d 70 44 61 74 61 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 6f 64 69 66 79 4b Data Ascii: ClickURL(links[i],"olod"),links[i].innerHTML=tempData)}catch(t){}}function modifyKeywordClickURL(t,e){return t.href=t.href+generateBrowLogURL(e),"undefined"!=typeof prctu&&0<prctu.length&&(t.href=prctu+getEscapedString(t.href)),!0}function gen
Aug 1, 2024 08:39:50.711483002 CEST	1236	IN	Data Raw: 73 2e 67 65 74 4c 6f 63 61 6c 54 69 6d 65 5a 6f 6e 65 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2b 74 68 69 73 2e 66 64 2b 74 68 69 73 2e 67 65 74 53 63 72 65 65 6e 48 65 69 67 68 74 28 29 2b 74 68 69 73 2e 66 64 2b 74 68 69 73 2e 67 65 74 53 63 72 Data Ascii: s.getLocalTimeZone().toString()+this.fd+this.getScreenHeight()+this.fd+this.getScreenWidth()+this.fd+(this.isCookieSupported()?1:0).toString()+this.fd+this.getABPStatus()),this.browserdata},this.getMousePositionData=function(){return this.fd+m
Aug 1, 2024 08:39:50.711494923 CEST	1236	IN	Data Raw: 5f 54 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 7d 63 61 74 63 68 28 74 29 7b 65 3d 30 7d 72 65 74 75 72 6e 20 65 7d 2c 5f 77 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 30 3b 74 72 79 Data Ascii: _Top.document.body.clientHeight)}catch(t){e=0}return e},_ww:function(){var e=0;try{"number"==typeof this._Top.window.innerWidth?e=this._Top.window.innerWidth:this._Top.document.documentElement&&this._Top.document.documentElement.clientWidth?e=
Aug 1, 2024 08:39:50.711508989 CEST	1236	IN	Data Raw: 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 65 77 65 62 6b 69 74 22 29 26 26 28 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 62 6c 75 72 28 29 2c 74 68 69 73 2e 5f 54 6f 70 Data Ascii: userAgent.toLowerCase().indexOf("applewebkit")&&(this._Top.window.blur(),this._Top.window.focus()),_npW.Init=function(e){with(e)Params=e.Params,Main=function(){void 0===window.mozPaintCount\|\|(t=window.open("about:blank"))&&t.close();var t=Para
Aug 1, 2024 08:39:50.711520910 CEST	225	IN	Data Raw: 68 6f 77 50 6f 70 26 26 28 73 68 6f 77 50 6f 70 3d 30 29 2c 21 31 3b 31 21 3d 73 68 6f 77 50 6f 70 7c 7c 72 65 6e 64 65 72 46 41 43 50 28 74 29 7c 7c 73 68 70 70 28 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 68 70 70 Data Ascii: howPop&&(showPop=0),!1;1!=showPop\|\|renderFACP(t)\|\|shpp(t)}catch(t){}}function shpp(t){if("undefined"!=typeof __pp&&1==showPop&&!renderFACP(t))try{if(t\|\|((t=window.event\|\|window.Event).cancelBubble=!0),t.button&&2==t.button)re
Aug 1, 2024 08:39:50.798211098 CEST	1135	IN	Data Raw: 74 75 72 6e 3b 74 72 79 7b 76 61 72 20 65 3d 21 31 3b 69 73 49 45 28 29 26 26 28 65 3d 73 68 64 73 70 28 74 29 29 2c 65 7c 7c 22 6c 64 22 3d 3d 74 7c 7c 28 76 6f 69 64 20 30 21 3d 3d 5f 5f 70 70 2e 6b 70 26 26 76 6f 69 64 20 30 21 3d 3d 5f 5f 70 Data Ascii: turn;try{var e=!1;isIE()&&(e=shdsp(t)),e\|\|"ld"==t\|\|(void 0!==__pp.kp&&void 0!==__pp.kp.u&&__pp.kp.u&&0<__pp.kp.u.length&&0==__pp.kp.pd&&(__pp.kp.pd=!0,"ex"==t&&(__pp.kp.u=__pp.kp.u+"&_onx_=1"),_skPU.doPU(__pp.kp.u,__pp.kp.w,__pp.kp.h,__pp.kp.p
Aug 1, 2024 08:39:50.915255070 CEST	392	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:51.012252092 CEST	329	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:34 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Thu, 15 Aug 2024 06:39:34 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Aug 1, 2024 08:39:51.012443066 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((
Aug 1, 2024 08:39:51.012465000 CEST	1236	IN	Data Raw: a2 c2 14 56 7e 4e ec 57 58 1b 33 a2 c2 14 56 7e 4e ec 57 d8 4e 61 28 ec aa 39 b1 57 61 8d cc 88 7e 5b 5f 46 2b 13 4f bf 39 31 ac 98 c2 14 96 b8 5f fa 14 b6 6b 66 c5 16 f2 28 60 d5 cc 7e 39 94 29 6c d9 cc 82 f9 3b 1d 65 b4 b3 61 be 96 28 ac 9d ef Data Ascii: V~NWX3V~NWNa(9Wa~[_F+O91_kf(`~9)l;ea(\|kvsbX.),q\,+ZwqM8]K`q4#z 0'smsmS+*eb91'jj=\|Jt8'O"W.L.:\u$~8Ur#9T9m
Aug 1, 2024 08:39:51.012490034 CEST	1236	IN	Data Raw: d1 d8 e2 4c 61 4d 5d cf bf e3 07 f6 e5 2c 5b de 48 6f 2f ef a3 dd eb 79 07 31 c7 b0 09 2e ef a3 dd eb 79 07 31 c7 b0 09 2e ef a3 dd eb 79 07 31 c7 b0 09 2e ef 43 5f 5e c4 bc 86 25 36 16 0d 5f cf 3b 88 39 86 e5 5f de c7 93 65 f8 4d 1a 85 d8 4a ff Data Ascii: LaM],[Ho/y1.y1.y1.C_^%6_;9_eMJ^,5P)Up00wS~30.2U"S0)"u;g)LaSP{~'S00)LaS0)LaSX8{qV0))LaBv:0)LaSX]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.9	49842	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:50.916691065 CEST	396	OUT	GET /__media__/pics/28905/res-arw.png HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:51.373249054 CEST	672	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:34 GMT Content-Type: image/png Content-Length: 346 Last-Modified: Tue, 04 Jan 2022 14:44:28 GMT Connection: keep-alive ETag: "61d45d4c-15a" Expires: Thu, 15 Aug 2024 06:39:34 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 1d 08 03 00 00 00 f8 b5 4e 88 00 00 00 45 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 57 d4 34 b7 00 00 00 16 74 52 4e 53 00 51 a8 e4 9d fa 21 30 f4 13 ba 01 72 90 da 3e 7e 03 c7 5f 0a 88 8d 4f 23 a5 00 00 00 ae 49 44 41 54 28 cf 85 93 e1 12 83 20 0c 83 11 41 d4 82 0a 6a de ff 51 37 b7 dd 4e a4 94 ef 77 ae 85 34 51 e7 7e a8 06 2b c6 30 34 34 33 80 b9 8b 92 c4 e1 a2 df 26 41 a3 3f 1a 58 bd 92 3c e6 62 f1 b5 51 e6 af c1 68 1c a7 a0 c1 e2 46 62 5d 30 c8 e0 5c c8 c7 80 75 21 a0 e0 e1 02 4d 23 18 32 17 e8 04 cb dd 05 7e 4c ee 82 a9 48 ac 76 e2 63 b2 37 07 4e 90 f6 a8 a8 6e 0c ec e3 14 9a db 40 fc ad 7f 1b ca 84 cd c5 37 a9 88 ef 6d 03 1f 99 24 5c ef 4b 27 c7 e9 4d 5c 1a a1 54 6a 47 ab 25 47 df ec 9a 5f fc a1 a2 5c 58 6a 55 fa 05 63 50 20 91 7b 34 90 ee 00 00 00 00 [TRUNCATED] Data Ascii: PNGIHDR"NEPLTEGpLW4tRNSQ!0r>~_O#IDAT( AjQ7Nw4Q~+0443&A?X<bQhFb]0\u!M#2~LHvc7Nn@7m$\K'M\TjG%G_\XjUcP {4IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.9	49843	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:51.079355955 CEST	387	OUT	GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive Origin: http://ww01.rotect.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:51.529953003 CEST	278	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:35 GMT Content-Type: application/font-woff Content-Length: 17312 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-43a0" Access-Control-Allow-Origin: * Accept-Ranges: bytes
Aug 1, 2024 08:39:51.529980898 CEST	1236	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 a0 00 10 00 00 00 00 73 60 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 6c 00 00 00 1c 00 00 00 1c 69 99 f4 2b 47 44 45 46 00 00 01 88 00 00 00 1e 00 00 00 1e 00 27 Data Ascii: wOFFCs`FFTMli+GDEF'GPOSGSUBp ltOS/2T`=cmapugasp\glyfd(G8a?head9p46hhea9!$
Aug 1, 2024 08:39:51.529999018 CEST	1236	IN	Data Raw: e1 9b 59 ab 7e 9e 0c c0 69 90 ef 07 dd 3c 96 a2 60 5e c6 5a 06 6b 45 ac e5 88 9b 6a e2 a6 1c 0b ab c4 cd 37 e4 1d c6 4d ca 2d e2 48 23 fa fa d0 aa 9e d1 01 56 b5 85 99 ad 5c 9e 42 06 fb 2a d8 33 60 5f 04 7b 18 ec 29 b0 c7 c0 1e c5 73 5e bd 3e 00 Data Ascii: Y~i<`^ZkEj7M-H#V\B*3`_{)s^>\ry<9:<G0)mh[Jx+&K<F26<aq,Sf,oY-N[y0/<:9:YV'V~t`%V>
Aug 1, 2024 08:39:51.530014038 CEST	1236	IN	Data Raw: f9 28 3c 43 28 18 e6 72 98 6b 2a 7c 92 95 32 ba 3a 96 cb 7b 78 ca e1 69 01 4f 51 5b 2f 67 f0 b2 84 17 07 bd 73 76 c7 cd 69 c7 97 e4 37 07 ab 15 56 95 2c 96 8c 95 22 56 f2 da dd 8d a1 b9 89 61 d3 5b 45 60 67 ce 18 59 46 e7 35 1f f7 6a 6d fe a7 8e Data Ascii: (<C(rk\|2:{xiOQ[/gsvi7V,"Va[E`gYF5jm ;Qqa{>ynhciF0::I$UvI2&hwKs`!\|.v+Cx'Q1i#~Qun?'r3TNWeMcru:~'>V7dRfkuks!
Aug 1, 2024 08:39:51.530030966 CEST	1236	IN	Data Raw: 6c 61 74 6e 00 08 00 04 00 00 00 00 ff ff 00 00 00 00 00 00 78 9c 63 60 66 0a 66 da c3 c0 ca c0 c0 d4 c5 14 c1 c0 c0 e0 0d a1 19 e3 18 8c 18 8d 80 a2 0c ac 40 39 20 c5 d2 c0 c0 a0 ef c0 a0 e0 c5 00 05 05 95 45 c5 40 8a f7 37 13 f3 89 ff 40 35 cc Data Ascii: latnxc`ff@9 E@7@5'~ 9&)@JExWLUA\ADDQ@("v-^Q#$`/"5!`x0A("Lfu#HTV(pMy5I$)E[$:p%F8(--47
Aug 1, 2024 08:39:51.530841112 CEST	1236	IN	Data Raw: 3a 17 b9 17 ae db 64 4c d4 c2 d7 96 bf ee dc a7 0a 5e 71 7a c9 ae a4 40 bf 31 1d 4a 55 53 93 b0 66 dc 54 63 81 b1 78 a9 26 a2 28 2c 75 7c 6b e3 82 c9 11 69 91 93 a7 54 95 34 5a f2 42 f4 06 4b 86 a9 71 fa f3 fa 98 e2 8c 38 33 ec 0a 31 26 44 68 82 Data Ascii: :dL^qz@1JUSfTcx&(,u\|kiT4ZBKq831&Dh@{IC$uP{3?+WT//?Azowgr/~8>M@l4Gyveoe{'~Pj2YgV2E.\|\Xkjb-Z'45FA
Aug 1, 2024 08:39:51.530858040 CEST	1236	IN	Data Raw: c7 b5 85 da 8c d1 e6 33 ab 5a a7 86 24 8d 1e b3 6a a5 b1 d2 60 a8 36 2c af cc da 71 e9 f7 c2 77 17 0b f3 35 d1 1f 41 e9 57 ff 7c 64 41 a7 5e 93 bf f6 a5 cd 01 63 c6 44 0a 2f 24 fc 29 3b bb 61 42 2e 47 6c bf 20 71 5f a3 fc cb b8 91 1c a7 d2 a9 64 Data Ascii: 3Z$j`6,qw5AW\|dA^cD/$);aB.Gl q_d0@&dd=nvwS~wl9/O(27`FHEoG,XWVq8qE-99%Seui7,88-X(V5pl_cP'.~yQE00n+h^"<C7.^xk
Aug 1, 2024 08:39:51.530975103 CEST	1236	IN	Data Raw: 7a 14 3c 0f af f3 a2 3f c7 13 28 8a d5 43 bb b6 3c b4 65 57 31 cf 9f 3b 37 59 e4 49 8e 6d 25 d9 61 7b 87 e2 50 d2 f8 9d 14 6e ac a2 76 36 81 07 98 c8 5f 60 b1 b9 46 67 86 89 bb b6 1d e2 61 51 36 95 d7 28 94 33 0f a2 c1 d8 39 98 72 c5 c8 1c 65 0a Data Ascii: z<?(C<eW1;7YIm%a{Pnv6_`FgaQ6(39reNtT2F-gco^T{SW(nOd'LYGSxxpv]J,]2qnDi>)NWTsD">nvkE5?u}%E)'*jwvO\
Aug 1, 2024 08:39:51.530993938 CEST	1236	IN	Data Raw: 62 04 38 b2 b2 43 f8 f3 aa 95 40 f9 1e 6e 6b 07 33 da 80 00 9c a3 53 07 61 14 85 16 d6 07 0d a4 3a 0d 12 a3 f1 04 97 80 ef 29 00 66 79 4c 78 78 96 b9 4b a9 d7 2b bb cc 64 05 e8 de 32 fa f9 1a df 57 2d df f5 7a e4 f2 a8 3f ed 62 31 cc 02 ee 15 de Data Ascii: b8C@nk3Sa:)fyLxxK+d2W-z?b1Dd{3D#OPfDDhc~6A1Q'@.J0C/u^%p$z,&<$B1k4Fo98wap^u8mH,)i8\30t
Aug 1, 2024 08:39:51.531011105 CEST	1236	IN	Data Raw: 51 99 50 db ba c9 7c f2 23 e3 10 6a 32 2b 4f d0 3f b5 4e ab 5e b6 12 2a 3b 1b d7 fb ac 4f f0 27 61 d5 4b ef 9e 24 9f 58 43 e0 a5 fa 78 9c 97 c6 dd e4 be 82 2e 6a 45 ec 9a 98 c6 cc 3b f8 f5 c5 b0 6e 36 05 47 ab 51 d4 e7 8a 0b 17 d7 8d b1 ac e2 c7 Data Ascii: QP\|#j2+O?N^;O'aK$XCx.jE;n6GQyBlZZ w-1(\|O[i".P<\|{eQMXc1}Nib3-SpR+mArEK$MvbY^`x^E
Aug 1, 2024 08:39:51.537956953 CEST	1236	IN	Data Raw: 4c 95 dd 9f 4b f0 0e da 77 de 19 a2 b3 7d e9 07 1d e8 b0 e5 83 e0 17 39 f9 5b 22 d6 8d 70 fd 23 c4 4c 9b 58 39 1a 45 55 ae af 7a e4 4f 55 ad af 82 04 df e0 8a fb 6b 96 cc e2 e1 ae 8b 25 4b b9 21 94 d8 4b 81 eb 8e 1e ae e8 ed 2d 87 f4 8f 33 cb ca Data Ascii: LKw}9["p#LX9EUzOUk%K!K-3J`cve-I[FnSjY9R=K %Xf)Yqq>#M5))WhBZqRoLK2_eu!^BZtEk\Axp{a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.9	49845	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:51.080776930 CEST	391	OUT	GET /__media__/fonts/montserrat-medium/montserrat-medium.woff HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive Origin: http://ww01.rotect.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:51.537987947 CEST	278	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:35 GMT Content-Type: application/font-woff Content-Length: 33316 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-8224" Access-Control-Allow-Origin: * Accept-Ranges: bytes
Aug 1, 2024 08:39:51.538007021 CEST	1236	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 82 24 00 13 00 00 00 01 26 88 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 a8 00 00 00 1c 00 00 00 1c 86 39 f0 ac 47 44 45 46 00 00 01 c4 00 00 00 4d 00 00 00 68 06 21 Data Ascii: wOFF$&FFTM9GDEFMh!GPOS*6%dGSUB,$W`:COS/2.\|S`acmap.ubcvt 0\<<Yfpgm0eS/gasp2Lglyf2TF
Aug 1, 2024 08:39:51.538115025 CEST	1236	IN	Data Raw: 65 ea 0f 01 f9 ea db 80 22 75 14 b0 5c bd 0e 58 a2 c6 01 85 b8 d2 a0 96 02 c2 84 72 3e 53 82 f3 85 e0 72 45 80 72 b5 02 b0 05 e7 4a d4 06 d4 43 60 25 60 03 f8 5f 29 8e 57 01 aa 88 dd cd 6a 35 a0 18 7c b7 4c ad c1 73 e5 c0 47 05 60 39 fa ba 52 dd Data Ascii: e"u\Xr>SrErJC`%`_)Wj5\|LsG`9RpO5@mk&R=WO/?,Q/65K7#UCOjPU#725lPQ5@PB`8_qB*k6F6wG6Ws
Aug 1, 2024 08:39:51.538130999 CEST	1236	IN	Data Raw: b2 52 6a 65 45 d4 ca 9c 80 56 56 42 ad cc 09 68 65 25 d4 ca 8a a8 95 95 50 2b 5b ae fe 1f a0 08 6d d8 c9 36 3c c0 36 ac a3 9e 5a 16 d0 53 d7 51 4f 75 d8 9e 46 b6 a7 9c ed 69 64 7b ca d9 9e 4d 94 a7 1a a8 a7 96 52 4f dd 42 3d 75 33 f5 d4 62 ea a9 Data Ascii: RjeEVVBhe%P+[m6<6ZSQOuFid{MROB=u3bSG=K)C[V:vub"VE5k5bX!kZ#VN5kkjxyk#[o/(}GR~'(
Aug 1, 2024 08:39:51.538146973 CEST	1236	IN	Data Raw: f1 93 16 96 5b bb 67 10 1e f5 a0 dd 82 a9 bf 0b 3b b1 ff be 85 0a 3c 5d 81 f2 1e b5 25 cd b7 ad 52 8f d3 5b fc b8 ed 19 b1 e5 48 3b 1e e2 88 7a 02 90 cf 9e ae 65 8f ff 5f ce 96 65 c0 cc 13 ea 19 f5 3c f4 52 b1 2c fc 67 f5 8e 3a af de 07 74 a9 2b Data Ascii: [g;<]%R[H;ze_e<R,g:t+y"J^_/wBx~I:n;4(zK6,U{~:6B8;388l"q8=- OwlT!EP_zoa,Uj1JoFEGp[/G
Aug 1, 2024 08:39:51.538162947 CEST	896	IN	Data Raw: 3e 53 68 24 39 e0 a1 30 45 07 10 cf 62 40 3a 77 a3 cd dc f9 d4 7b 7f 50 d6 49 d8 51 5d 99 d2 8c 8b 2e 86 25 f3 22 a3 8d 23 fa 36 c6 d6 05 1b d1 33 89 51 34 e0 d5 b7 df b5 f1 9b 92 51 ff d7 03 fd 56 6d ed df 85 56 d6 2c 34 da 94 3e e7 b5 7b 88 57 Data Ascii: >Sh$90Eb@:w{PIQ].%"#63Q4QVmV,4>{W/5alex"~6:v2oRg~2g2fr_2cd3#VO}&Zb10>yVZ}En7X1vHBoY^u\|.f?
Aug 1, 2024 08:39:51.538177967 CEST	1236	IN	Data Raw: 2d f4 63 9b 44 46 a0 07 87 d0 1f 2d ba 91 6d 1c 61 8c 86 48 e1 27 51 97 8b f8 3c c1 08 7e d3 8f 07 21 67 49 b4 e5 31 f4 63 bd b1 42 30 0f af 10 ed 3f 82 16 5d a1 85 ba 03 fb bb b4 98 74 5a bb 7a 07 66 a4 53 c0 b0 69 e7 71 3c 7f 49 ec ec fa 04 f0 Data Ascii: -cDF-maH'Q<~!gI1cB0?]tZzfSiq<I2}dCV~(-\|Ax6T-On.NV9:z7$Ji(#c-B>Ii(tYg}'o,Lo]y`@&)J_f8#Y-S67{
Aug 1, 2024 08:39:51.538192987 CEST	1236	IN	Data Raw: ae 6d 3a 65 bd 1d 3f 7a b8 c9 b7 25 67 f7 2d cf 66 41 91 79 30 53 be 4f 1b 53 8e e1 9f a9 76 1d af 6e e3 29 56 1d 9f bb ce 1d ef fa a6 d8 48 99 cb 19 16 4a 65 74 c2 34 57 a5 d9 48 fe d8 aa 0e 40 a3 68 54 bb c0 43 0f d0 72 78 50 a4 6d 37 67 db b3 Data Ascii: m:e?z%g-fAy0SOSvn)VHJet4WH@hTCrxPm7g+v06+brcX~4NOhuP\| czb%\|!#;IW#dv?=2'Rv^}\|nYi]Vj=V\kolgNk*}8$Ul\|fl6]d5pr}>
Aug 1, 2024 08:39:51.538208961 CEST	448	IN	Data Raw: 61 48 a5 c1 85 6c d9 f2 de d6 7b b0 c6 82 a9 bf 0b 35 ac ab 3f 26 f6 f0 99 dc 32 e8 b6 a9 07 d0 1f e6 b3 86 1c a1 86 ed 88 72 1c 8b c7 2b 0f 78 8f 30 7b 2c 7f e5 63 42 7d 91 ff 53 72 11 ef df 63 a2 a5 a0 bd c4 ec 6c d7 c9 b8 a2 e6 99 78 5e a1 9a Data Ascii: aHl{5?&2r+x0{,cB}Srclx^6%+ppcTz7kvSo-MoIN@%>^YE:wD;L{f-3<q;6?D1{Xx~BSbHaf/288G#_mb=DuF}-Qw_:vz
Aug 1, 2024 08:39:51.538223982 CEST	1236	IN	Data Raw: 12 57 d7 43 5a 3f 4a 3f fa 2d 93 39 ce 28 c0 73 fa 18 e3 3c 39 16 f4 8d 80 ff f7 7d 3b d6 eb 94 bf 56 e9 bc 3c 03 74 d6 a7 2f 7a 5e 9b 71 c6 45 c6 8c 66 62 cf 9a d5 f7 0f e3 4d 87 73 1a ad 41 8f 4b 62 e1 2b a5 b9 7a b7 f5 83 47 ed 8c 13 5b 2c ef Data Ascii: WCZ?J?-9(s<9};V<t/z^qEfbMsAKb+zG[,>OId)!APW`vzy=QZ&D[%9f$G"Eks4*eKd_%g$=hv8^a}v30O8~5_Nm\Nm$7"
Aug 1, 2024 08:39:51.543004036 CEST	1236	IN	Data Raw: 59 e9 16 08 6f f5 dc 41 ae 51 7d 35 0b 87 6f 0f d8 69 b3 e9 2c 61 db 0f cc f7 52 ed 5c d3 c8 b5 ff 9a 7f 2c bc c5 ec ae 7c c6 9a 4d ce aa 87 19 cb da f4 42 6c 24 28 af 8b 39 c9 31 ae 1f 77 4b 32 05 99 29 12 d2 97 d1 27 06 0f 12 f3 d4 80 ab b7 99 Data Ascii: YoAQ}5oi,aR\,\|MBl$(91wK2)'?g[5nn#23>hPl['iy=I:r+''.]nyN+gpfCFf\0r2y'fU`]k4`O,z(6XW6V8j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.9	49844	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:51.080796957 CEST	393	OUT	GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive Origin: http://ww01.rotect.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:51.531485081 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:35 GMT Content-Type: application/font-woff Content-Length: 17264 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-4370" Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 70 00 10 00 00 00 00 71 40 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 43 54 00 00 00 1c 00 00 00 1c 6a aa b6 37 47 44 45 46 00 00 37 84 00 00 00 1e 00 00 00 1e 00 27 01 0d 47 50 4f 53 00 00 37 c4 00 00 0b 8e 00 00 13 c6 29 4d 73 4d 47 53 55 42 00 00 37 a4 00 00 00 20 00 00 00 20 6c 91 74 8f 4f 53 2f 32 00 00 01 e8 00 00 00 56 00 00 00 60 a5 bd 5d 40 63 6d 61 70 00 00 04 ec 00 00 02 75 00 00 03 86 c7 ce be ea 67 61 73 70 00 00 37 7c 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 09 78 00 00 29 05 00 00 47 f8 1b fa 03 ac 68 65 61 64 00 00 01 6c 00 00 00 36 00 00 00 36 fa 9a cf bf 68 68 65 61 00 00 01 a4 00 00 00 21 00 00 00 24 07 c7 04 70 68 6d 74 78 00 00 02 40 00 00 02 aa 00 00 04 1a 57 5c 36 b8 6c 6f 63 61 00 00 07 6c 00 00 02 0a 00 00 02 10 c1 de d4 3a 6d 61 78 70 00 00 01 c8 00 00 00 1f 00 00 00 20 01 50 00 38 6e 61 6d 65 00 00 32 80 00 00 02 e7 00 00 06 b4 4e ce 98 3d 70 6f 73 74 00 00 35 68 00 00 02 11 00 00 [TRUNCATED] Data Ascii: wOFFCpq@FFTMCTj7GDEF7'GPOS7)MsMGSUB7 ltOS/2V`]@cmapugasp7\|glyfx)Gheadl66hhea!$phmtx@W\6local:maxp P8name2N=post5h8',prepdhBL_<'d:jxc`d``>X"]?xc`d``dg0e`g& fB0xc`f`@9 EOa>[$$H)00>xm[HTQdf^a)"0#]0M "%a&Q7)H>DDEKDqI:X}SAM?c^Dq\hVP2DFD>Q4:r5APQ/!T5R4Zejom1Z}$q5=.3Cr>qe!Sa%tr7#^#{4@\*q1T0dwrqk\Gq[#w8Y7rd(\|"8NkG3WvvI7&M99/&s
Aug 1, 2024 08:39:51.531646013 CEST	1236	IN	Data Raw: 98 bc 13 08 38 59 4c 30 8b 51 04 78 86 76 1d c2 31 7d c8 7a 2f 0e 33 a3 32 c9 e4 19 07 10 64 6d c4 74 c2 6b 12 d4 4d be 7f 05 75 3a 47 de 96 f9 dc bf 72 ed 48 2e da 0c 1c fe 69 92 60 f2 bb cd 80 be 4c 37 c6 83 ec 35 fe eb c5 73 55 39 63 66 90 2e Data Ascii: 8YL0Qxv1}z/32dmtkMu:GrH.i`L75sU9cf.''6yYyNoX._a_/rqf.0&rov_=#0<}2QNQ4e:@ZocRy&U0NWi61/>JPW[PP,S8/q'4TD
Aug 1, 2024 08:39:51.531661034 CEST	1236	IN	Data Raw: 17 0f f8 24 bf c6 37 f8 01 3f 13 e2 42 5a 28 09 35 e1 44 18 09 53 c1 17 6d 31 25 ae 8b 0d f1 5c bc 0e c5 42 b9 50 39 d4 09 7d 0d dd 86 63 e1 6c b8 12 ae 87 27 11 3a b2 18 29 47 ba 11 3f fa 30 5a 8d 7e 8a 5e 4b a6 b4 22 d5 a4 a6 d4 91 86 d2 4c 9e Data Ascii: $7?BZ(5DSm1%\BP9}cl':)G?0Z~^K"LG$*SP6\|=77X#i{Iikc-`jCkjW}e;NI9O]\p}[o{okzc"x\|`TU;%
Aug 1, 2024 08:39:51.531821966 CEST	1236	IN	Data Raw: 91 71 b8 96 8a ca 84 5a 29 0f 02 04 a3 41 3d d5 27 8a a0 8d e6 72 38 f0 fb b6 de 5d 7f 9f 9f 58 d3 92 3e bd 6e 5a 58 c8 43 a4 aa bb e9 65 7e 71 c5 bc 15 c5 ad 69 c9 f3 b2 dc 1b 5e 42 58 a1 88 97 12 61 4d 42 c0 d2 fe 68 8d 6a 23 e8 79 a8 b4 54 57 Data Ascii: qZ)A='r8]X>nZXCe~qi^BXaMBhj#yTW[k{?mHZiSk X'UgW7-4_;-T[Hm<l QD<$hVHl/RUiiEe[sygdU
Aug 1, 2024 08:39:51.531837940 CEST	1174	IN	Data Raw: f0 38 cc 14 de 13 96 41 62 df 9b 23 fc f5 11 fd 25 c3 5d 89 33 32 11 9d e7 2d f6 ff f3 38 91 9b 80 ff c7 3d f3 07 4a 1b 06 d3 97 ac 27 cf 9f 3f 61 bd 91 f3 6f 84 5a 0c 27 d0 c1 6a 04 7f f8 d2 06 f3 0b 71 0f e8 70 c0 19 7a 20 f3 ad f7 08 4b ac 56 Data Ascii: 8Ab#%]32-8=J'?aoZ'jqpz KVKA ,ys82.\my!lul=O*c1%.I-5?z}aaC-."}w4kq\|0zpEK\|[c{ZC0.}><&<
Aug 1, 2024 08:39:51.531853914 CEST	1236	IN	Data Raw: 14 42 fc 7d f7 95 ce 4c ad 6a c8 8b 4b 1a f8 eb 40 ed 74 e1 ed d6 a6 2d ad 1d a2 bd c0 93 2a 49 25 5f d2 88 d4 9b da 7a 4f 76 66 50 e2 9f 28 1c b2 d7 2c 16 df f6 a4 86 05 96 15 29 35 34 98 21 5f 0a ef 25 24 f5 75 09 2f 42 c8 9e 72 8a 63 2e 42 f9 Data Ascii: B}LjK@t-*I%_zOvfP(,)54!_%$u/Brc.Br.z)))D>E2y=L^TTbJr`sju49o#iar\wlm%XW^8}qqD29@Nu6^nHI,%"SI]]W
Aug 1, 2024 08:39:51.531872034 CEST	1236	IN	Data Raw: 18 86 b8 f2 7a e4 27 3e 2a b5 72 29 5d a7 ed 3c ed f2 e2 c6 b7 d7 be 2c 7f 73 cd fb eb 5f e0 5f 7a f9 ee d3 17 4c b2 3a 98 21 bc 02 d9 c2 93 75 32 53 dd aa 55 a2 5d 6d 1c fe 9a 7b 81 c5 79 34 9a 43 a9 e2 f1 b7 b1 a5 a5 05 9e 82 42 e1 05 21 85 3e Data Ascii: z'>*r)]<,s__zL:!u2SU]m{y4CB!>u(S0$F!viw-m4-3/e^sR+6fwKfBz\Ftv2#s'VzxwUG&WNp04!1 j%JCB7cG>T\|d9=
Aug 1, 2024 08:39:51.532073021 CEST	1236	IN	Data Raw: 98 5f c9 60 78 8e c6 45 af a2 71 ad 13 3a 39 5d 2b da cb cb db 47 63 44 16 6c 4c 4a e2 1c e0 2d 63 f0 fc 47 c3 d3 50 c9 d1 32 6f 8c de 59 2f 73 82 fc 86 5f f3 44 35 94 c4 45 fa b7 4d 0e 2a e5 9d 68 be 1a 17 9d 52 14 17 bd 8e 43 9f 20 ae d1 cb d6 Data Ascii: _`xEq:9]+GcDlLJ-cGP2oY/s_D5EMhRC FzZCHFCVr_3-/;8]Vq1J:lEdu^IgpY{TFxjy=[fH%^{!-f[b2(GX[Q0b
Aug 1, 2024 08:39:51.532093048 CEST	672	IN	Data Raw: 26 c3 a6 92 85 b8 8e 68 c0 ba ea 8c 8c ea cc a1 a7 44 74 be 94 02 5d db be f0 3b 48 00 da 8c 48 b4 eb 23 d5 c0 e0 30 27 8c 12 55 b4 38 e8 8a b8 c8 65 0c 9b 10 da 14 e5 ca ef 10 16 43 63 66 83 21 ab 46 18 2a ae b8 b7 da ba 78 b6 88 d6 8f a6 a2 bf Data Ascii: &hDt];HH#0'U8eCcf!Fxdu8,uY2ZRJJ/nDKZ9qB.b,9[99U]{S&!b,WC'$JCEm:+fw;U\WxG
Aug 1, 2024 08:39:51.537774086 CEST	1236	IN	Data Raw: 4f 44 1d e3 78 28 08 08 8d 9f 9d 95 5e 30 b8 3c 3a 2c 7a 76 86 29 7d f0 b5 d6 cc 5d 9e aa e2 d6 84 ed 72 37 79 d7 96 90 55 25 8b 0f 4f 68 d9 a0 5b 9a bf f8 30 bc da 7e 34 11 4c 2e c2 23 ed 87 e2 84 8f 40 94 6b b1 ee 4c e5 cd 47 94 36 ef db 54 9f Data Ascii: ODx(^0<:,zv)}]r7yU%Oh[0~4L.#@kLG6Tqg*o25VfEshq<OyGp'DsH0E]z;2a\"yW%TQuo@fER/c\Ehb?vC&=A'?Na
Aug 1, 2024 08:39:51.539515018 CEST	1236	IN	Data Raw: 37 b1 dd 5e b6 c5 4d 11 2c df e3 c5 32 3d e4 0a cb ee 0c da b2 3a c0 79 0d 47 73 67 f0 04 4b 3b ea 64 0a db f9 3c 13 f4 f3 55 89 13 e3 35 c9 21 86 60 65 66 82 2e d5 57 93 14 5f 11 1b c4 70 6a 25 5f c0 e3 7c 17 dd a9 31 75 09 98 ee 14 47 7c 61 8f Data Ascii: 7^M,2=:yGsgK;d<U5!`ef.W_pj%_\|1uG\|aC8[{D3TDm6s7"v\k2'nfP}5qYb9?xb~Pg?UsxBm{yn.{}EN]'kWS@l1zy^Zo7pKl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.9	49846	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:51.169961929 CEST	293	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:51.655051947 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:35 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Thu, 16 Feb 2023 21:03:44 GMT Connection: keep-alive ETag: "63ee9a30-20f3" Expires: Thu, 15 Aug 2024 06:39:35 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 2a 2f 0d 0a 76 61 72 20 73 68 6f 77 50 6f 70 3d 31 3b 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 53 65 61 72 63 68 54 65 78 74 28 74 29 7b 74 2e 76 61 6c 75 65 3d 22 22 2c 74 2e 73 65 6c 65 63 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 72 65 70 6c 61 63 65 53 74 72 69 6e 67 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 65 2c 6e 2c 22 67 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 75 62 6d 69 74 53 65 61 72 63 68 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2b 3d 67 65 6e 65 72 61 74 65 42 72 6f 77 4c 6f 67 55 52 4c 28 22 73 72 63 71 72 79 22 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 74 5d 2c 30 3d 3d 64 2e 65 6c 65 6d 65 6e 74 73 2e 71 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 7c 7c 22 45 6e 74 65 72 20 4b 65 79 77 6f 72 64 [TRUNCATED] Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function change
Aug 1, 2024 08:39:51.655081034 CEST	1236	IN	Data Raw: 53 74 61 74 75 73 28 74 29 7b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 61 64 64 62 6f 6f 6b 6d 61 72 6b 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 41 73 48 6f 6d 65 50 61 67 65 28 74 2c 65 29 7b 72 65 Data Ascii: Status(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate(){var t=new Array("Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"),e=new Array("January","February","March","April
Aug 1, 2024 08:39:51.655103922 CEST	1236	IN	Data Raw: 43 6c 69 63 6b 55 52 4c 28 6c 69 6e 6b 73 5b 69 5d 2c 22 6f 6c 6f 64 22 29 2c 6c 69 6e 6b 73 5b 69 5d 2e 69 6e 6e 65 72 48 54 4d 4c 3d 74 65 6d 70 44 61 74 61 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 6f 64 69 66 79 4b Data Ascii: ClickURL(links[i],"olod"),links[i].innerHTML=tempData)}catch(t){}}function modifyKeywordClickURL(t,e){return t.href=t.href+generateBrowLogURL(e),"undefined"!=typeof prctu&&0<prctu.length&&(t.href=prctu+getEscapedString(t.href)),!0}function gen
Aug 1, 2024 08:39:51.655124903 CEST	1236	IN	Data Raw: 73 2e 67 65 74 4c 6f 63 61 6c 54 69 6d 65 5a 6f 6e 65 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2b 74 68 69 73 2e 66 64 2b 74 68 69 73 2e 67 65 74 53 63 72 65 65 6e 48 65 69 67 68 74 28 29 2b 74 68 69 73 2e 66 64 2b 74 68 69 73 2e 67 65 74 53 63 72 Data Ascii: s.getLocalTimeZone().toString()+this.fd+this.getScreenHeight()+this.fd+this.getScreenWidth()+this.fd+(this.isCookieSupported()?1:0).toString()+this.fd+this.getABPStatus()),this.browserdata},this.getMousePositionData=function(){return this.fd+m
Aug 1, 2024 08:39:51.655141115 CEST	1236	IN	Data Raw: 5f 54 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 7d 63 61 74 63 68 28 74 29 7b 65 3d 30 7d 72 65 74 75 72 6e 20 65 7d 2c 5f 77 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 30 3b 74 72 79 Data Ascii: _Top.document.body.clientHeight)}catch(t){e=0}return e},_ww:function(){var e=0;try{"number"==typeof this._Top.window.innerWidth?e=this._Top.window.innerWidth:this._Top.document.documentElement&&this._Top.document.documentElement.clientWidth?e=
Aug 1, 2024 08:39:51.655157089 CEST	1236	IN	Data Raw: 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 65 77 65 62 6b 69 74 22 29 26 26 28 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 62 6c 75 72 28 29 2c 74 68 69 73 2e 5f 54 6f 70 Data Ascii: userAgent.toLowerCase().indexOf("applewebkit")&&(this._Top.window.blur(),this._Top.window.focus()),_npW.Init=function(e){with(e)Params=e.Params,Main=function(){void 0===window.mozPaintCount\|\|(t=window.open("about:blank"))&&t.close();var t=Para
Aug 1, 2024 08:39:51.655178070 CEST	1117	IN	Data Raw: 68 6f 77 50 6f 70 26 26 28 73 68 6f 77 50 6f 70 3d 30 29 2c 21 31 3b 31 21 3d 73 68 6f 77 50 6f 70 7c 7c 72 65 6e 64 65 72 46 41 43 50 28 74 29 7c 7c 73 68 70 70 28 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 68 70 70 Data Ascii: howPop&&(showPop=0),!1;1!=showPop\|\|renderFACP(t)\|\|shpp(t)}catch(t){}}function shpp(t){if("undefined"!=typeof __pp&&1==showPop&&!renderFACP(t))try{if(t\|\|((t=window.event\|\|window.Event).cancelBubble=!0),t.button&&2==t.button)return;try{var e=!1;
Aug 1, 2024 08:39:51.746105909 CEST	243	IN	Data Raw: 6c 64 2e 75 2c 5f 5f 70 70 2e 6c 64 2e 77 2c 5f 5f 70 70 2e 6c 64 2e 68 2c 5f 5f 70 70 2e 6c 64 2e 70 2c 22 6c 64 22 3d 3d 74 29 2c 21 30 29 3a 21 31 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 73 49 Data Ascii: ld.u,__pp.ld.w,__pp.ld.h,__pp.ld.p,"ld"==t),!0):!1}catch(t){return!1}}function isIE(){var t=!1;try{t=/msie\|MSIE/.test(navigator.userAgent)}catch(t){}return t}function setBrowserDetails(){relplaceAllALinks&&relplaceAllALinks(/(\/trf\|\.cfm)\?/)}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.9	49847	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:51.170010090 CEST	297	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:51.623281002 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:35 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Thu, 15 Aug 2024 06:39:35 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 30 f2 00 2c c1 00 2c 37 03 90 81 f9 8f 29 b2 13 3b 91 25 a0 9b ae dd a1 ab d6 7a bc 0f e7 7c b7 4e fd b0 ab 8a 28 f1 09 c8 13 96 00 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c [TRUNCATED] Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0P%@a@a0@a0P0P(P(P((@a@a0@a0P0P(P(P((@a@a0@aPeaLt[=ul=HhOnNc=e{l[,lu_cnk,n;~'^a$sbV&aqcm3Ts*l#zXtH+8c/BH1>CXHay/AIl2g}s/Q8{.;R91oeGo-V:;u$5'.lW:Q\v_:z4',l]2z4'e,~O]%>\|v_2U}8u=hL4$7aj;eMhL\>',/]I,{}a91\|Jz
Aug 1, 2024 08:39:51.623379946 CEST	1236	IN	Data Raw: b1 73 e2 d5 85 ed aa 5b 43 07 31 c7 b0 d3 f6 53 17 56 dd 8c e8 20 e6 18 96 72 88 08 4b e8 20 e6 18 96 f8 01 7c 65 61 db 1a 97 d0 8b 98 d7 b0 f2 73 62 f8 8c 1a 3f 6a d3 c2 07 f0 95 33 ce 55 85 55 39 23 1e fd 63 98 c5 54 ba 3f 16 93 15 b6 b5 82 34 Data Ascii: s[C1SV rK \|easb?j3UU9#cT?4JYA)O(W.:+FOQX3DWsn]{d^Va4\>gDbvU1aEjass+e9<lNTX3KVaV\|
Aug 1, 2024 08:39:51.623395920 CEST	1236	IN	Data Raw: 25 2e ef 57 dd a0 c2 fa 1c c0 aa e8 eb 95 1b c5 d4 5b fa 3a 36 49 9f c6 4e 1c c7 e2 da be 36 5d 2d 64 90 a8 9a 5d f2 ed da c6 e2 aa 17 e6 75 3d 7d 75 9d 7f 66 3b cf b2 a2 7d d2 e7 62 71 d3 a3 b0 1e ad de d5 d4 97 a3 98 43 58 c1 c6 de 5f 79 c4 e0 Data Ascii: %.W[:6IN6]-d]u=}uf;}bqCX_y:RHn\nv[U+,UnCX9r}K5G.ek8}`]~y/GXTW=)l`c~yq,%+,~Oaxpz[5$%4
Aug 1, 2024 08:39:51.623959064 CEST	1236	IN	Data Raw: 10 0f 13 06 c6 10 88 d7 f8 3a 4a d8 8a 06 12 02 e1 82 0f 92 73 94 30 94 63 08 c4 a9 02 ec 34 61 e8 40 23 10 49 20 9e a0 e6 0c 61 28 c7 10 88 c3 05 d8 2b 84 a1 1c 43 20 f8 1c 32 27 09 43 39 86 40 01 76 2f 61 60 0c 01 be ee 25 0c e5 18 02 05 d8 ad Data Ascii: :Js0c4a@#I a(+C 2'C9@v/a`%10HE10t7(!~/CZwho[JeGc`G}"(l]P!Pu]6Q!P +1J#fKH>g
Aug 1, 2024 08:39:51.624099970 CEST	1225	IN	Data Raw: 21 87 bd da 0a 73 37 85 3d e4 60 30 84 2d 19 3d e1 b2 c3 be 73 8c 65 41 0e 43 20 87 35 1a d1 1d 5f d6 11 df c5 12 16 bd 8c cc 4b 06 64 32 9d 08 c2 40 d8 e9 4f 49 cc d3 f4 5c 4e 7f 3d 7e fd 53 11 66 c7 15 45 47 ac e6 d2 89 20 0c 84 9d d6 88 89 2d Data Ascii: !s7=`0-=seAC 5_Kd2@OI\N=~SfEG -e71NqEa\eUtb!&,4Bnv"lr)YcIb&Y7/5aQ.rd"}5[tDNkR^@&v.;x&3Z5"SsR"Q}
Aug 1, 2024 08:39:51.624118090 CEST	1236	IN	Data Raw: 3e 65 e5 c9 bd c9 8e cf 7c 56 11 08 00 62 c7 b4 4d d4 95 01 7a 6d b3 98 cb f9 bc 48 8c fe ec 4a 4b 21 17 9e c8 9e 79 e6 f2 df 10 3a 11 12 11 8d e7 c3 1a 51 ec 3d 7c ac fb 6f d2 26 ed 6e 0a 0b df ff 2c 5d c2 16 37 40 ec 16 0b 64 07 64 00 9d 08 c0 Data Ascii: >e\|VbMzmHJK!y:Q=\|o&n,]7@ddPZv~T",P=zwk/vF#+pv,3aq%laub6TKq5a)1{Nuck6qDLQ98V;DT"fnn
Aug 1, 2024 08:39:51.624133110 CEST	1236	IN	Data Raw: 24 89 8a 30 b3 4d 4c 2d b1 2a d5 67 75 c0 d1 3d 4a d1 32 fb 8c 5f 2b a7 bd a8 b0 29 f8 88 5f 25 64 15 61 c4 9b e3 59 97 e7 d8 b2 25 62 46 d8 76 10 c4 94 3e 49 2d 02 42 e4 91 9f 03 b2 65 58 fc 5e 6a 2e c6 83 3f e1 17 13 c8 4a ca 0e bf 6e e9 e3 10 Data Ascii: $0ML-*gu=J2_+)_%daY%bFv>I-BeX^j.?JnuvvOJ_`1DT].])Ya-@?#Ov'Q>$1vCR5I%SaIK,\|hDw(&yL'u~Qd,K;Y%(LIc\|!M0
Aug 1, 2024 08:39:51.624396086 CEST	1236	IN	Data Raw: d6 5d 7b a9 93 cb 4f 20 ac e5 eb 3b 41 8c 89 7b 09 b5 84 42 90 65 4a d1 54 0c 2b 99 ef e3 0a 62 a3 9b 61 2a f8 65 69 89 39 e9 e5 4e d0 06 a3 ef 81 a8 55 3b 62 ac 10 67 54 fd 17 83 f1 14 c2 b6 e3 34 71 af 17 0f a2 2d 9f a2 c2 f7 6f 72 4e 9e a3 eb Data Ascii: ]{O ;A{BeJT+ba*ei9NU;bgT4q-orN8G7!_eulF0\fCY,XqN!EQuXbf2\|+^es01eB&\|(55fLhs8uU(Y;('3lVT$5,UDnH)
Aug 1, 2024 08:39:51.624411106 CEST	1236	IN	Data Raw: 27 84 6d 3f 46 d8 fe b8 25 46 4d 0a 75 9f 58 5e d4 75 b9 b2 c3 0c 6f 5a fa a3 72 1f ab e5 3c 32 4b 4c e5 4e 4e d6 81 86 79 a6 c5 35 bc 4c 4b 9f 0d be 93 40 b9 f5 c1 38 10 0e ee 9a 27 6e 3f 46 d8 c1 94 58 72 24 b7 91 10 ad c9 26 50 76 d8 75 89 e8 Data Ascii: 'm?F%FMuX^uoZr<2KLNNy5LK@8'n?FXr$&Pvu#Z0DOuc^ou0D#c?7(F5Vst8zb<`5@=lCzSxBh{6tdYgPT'<B#H#N]Cg1ao[
Aug 1, 2024 08:39:51.624543905 CEST	1236	IN	Data Raw: e3 a8 5e 38 48 30 5b a2 a9 a1 2d 67 19 65 48 6e 0d 2d 1d ae 5d 7f 34 04 20 47 f8 d2 4b 1a 18 ef b8 29 fd 19 93 2a ac a5 18 f1 60 b8 f9 f1 b9 79 02 61 8d 27 81 73 1d d9 d3 95 de b6 4f ee 1d 6f 6d 8a 31 6f d3 e8 2c d3 90 f7 7b 35 9c 47 b7 9c bd f0 Data Ascii: ^8H0[-geHn-]4 GK)`ya'sOom1o,{5GOj vDP-PZ8aBf}#~4ZS2dOm~rEXI-BEehZqO?;r8zOrwXRj(Km%=3iP((Pykl6CcaCv
Aug 1, 2024 08:39:51.629194975 CEST	1120	IN	Data Raw: d2 54 21 71 61 31 ad f3 76 06 65 9e e6 70 89 89 a7 d7 ce 5c 65 11 1d 6e ac 6b 18 66 04 ab df 45 c5 54 59 37 53 f8 f9 62 f5 1c 4e 5b f9 2f 8d 11 3b e5 06 2a 6d 59 34 98 f6 a8 1b 03 a7 ec c1 05 25 68 f4 23 f1 b4 4a 1c 13 c4 a4 09 10 4e b9 20 33 4d Data Ascii: T!qa1vep\enkfETY7SbN[/;*mY4%h#JN 3MMg5(pOjqw oq3,f[bOQdOBvGshW4r+buJlC)Vt[^ozTZzn8-B9^-U0\|O!0amt_d(bzfKL&rBJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.9	49851	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:51.403461933 CEST	301	OUT	GET /__media__/pics/28905/res-arw.png HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:51.874357939 CEST	326	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:35 GMT Content-Type: image/png Content-Length: 346 Last-Modified: Tue, 04 Jan 2022 14:44:28 GMT Connection: keep-alive ETag: "61d45d4c-15a" Expires: Thu, 15 Aug 2024 06:39:35 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Aug 1, 2024 08:39:52.003988981 CEST	346	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 1d 08 03 00 00 00 f8 b5 4e 88 00 00 00 45 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR"NEPLTEGpLW4tRNSQ!0r>~_O#IDAT( AjQ7Nw4Q~+0443&A?X<bQhFb]0\u!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.9	49855	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:54.293654919 CEST	327	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:54.777643919 CEST	341	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:38 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Thu, 16 Feb 2023 20:41:55 GMT Connection: keep-alive ETag: "63ee9513-20f3" Expires: Thu, 15 Aug 2024 06:39:38 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Aug 1, 2024 08:39:54.777683020 CEST	1236	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n
Aug 1, 2024 08:39:54.777702093 CEST	1236	IN	Data Raw: 28 29 3b 6f 3c 31 65 33 26 26 28 6f 2b 3d 31 39 30 30 29 3b 76 61 72 20 72 3d 6e 2e 67 65 74 44 61 79 28 29 2c 69 3d 6e 2e 67 65 74 4d 6f 6e 74 68 28 29 2c 6e 3d 6e 2e 67 65 74 44 61 74 65 28 29 3b 6e 3c 31 30 26 26 28 6e 3d 22 30 22 2b 6e 29 3b Data Ascii: ();o<1e3&&(o+=1900);var r=n.getDay(),i=n.getMonth(),n=n.getDate();n<10&&(n="0"+n);o=t[r]+", "+e[i]+" "+n+", "+o;document.write(o)}function checkUTFChar(t){for(var e=!0,n=0;n<128;++n){var o=n.toString(16);if(1==o.length&&(o="0"+o),o="%"+o,(o=un
Aug 1, 2024 08:39:54.777718067 CEST	1236	IN	Data Raw: 65 28 62 72 5f 64 61 74 61 2e 67 65 74 4d 6f 75 73 65 50 6f 73 69 74 69 6f 6e 44 61 74 61 28 29 29 3a 22 61 64 63 6c 6b 22 3d 3d 74 7c 7c 22 73 72 63 71 72 79 22 3d 3d 74 3f 22 26 62 64 3d 22 2b 65 73 63 61 70 65 28 62 72 5f 64 61 74 61 2e 67 65 Data Ascii: e(br_data.getMousePositionData()):"adclk"==t\|\|"srcqry"==t?"&bd="+escape(br_data.getSearchBoxRelatedData()):"&bd="+escape(br_data.getURLBrowserData())}catch(t){}return e}var brdata=function(){this.fd="#",this.cookieSupport=-1,this.isinframe=-1,
Aug 1, 2024 08:39:54.777775049 CEST	672	IN	Data Raw: 65 50 6f 73 69 74 69 6f 6e 44 61 74 61 28 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 66 69 72 6d 54 6f 4f 70 74 4f 75 74 28 29 7b 76 61 72 20 74 3b 6f 70 74 4f 75 74 3d 63 6f 6e 66 69 72 6d 28 22 59 6f 75 20 77 69 6c 6c 20 6e 6f 74 20 62 65 Data Ascii: ePositionData()}};function confirmToOptOut(){var t;optOut=confirm("You will not be able to see any ads or websearches."),optOut&&((t=new Date).setTime(t.getTime()+31536e6),t="; expires="+t.toGMTString(),document.cookie="dnsoptout=1"+t+"; path=
Aug 1, 2024 08:39:54.777792931 CEST	1236	IN	Data Raw: 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 3a 74 68 69 73 2e 5f 54 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 74 68 69 73 2e 5f 54 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 Data Ascii: indow.innerHeight:this._Top.document.documentElement&&this._Top.document.documentElement.clientHeight?e=this._Top.document.documentElement.clientHeight:this._Top.document.body&&this._Top.document.body.clientHeight&&(e=this._Top.document.body.c
Aug 1, 2024 08:39:54.777810097 CEST	224	IN	Data Raw: 6e 70 66 3d 6e 70 66 7c 7c 22 74 6f 6f 6c 62 61 72 3d 30 2c 73 63 72 6f 6c 6c 62 61 72 73 3d 31 2c 6c 6f 63 61 74 69 6f 6e 3d 31 2c 73 74 61 74 75 73 62 61 72 3d 30 2c 6d 65 6e 75 62 61 72 3d 30 2c 72 65 73 69 7a 61 62 6c 65 3d 31 22 3b 76 61 72 Data Ascii: npf=npf\|\|"toolbar=0,scrollbars=1,location=1,statusbar=0,menubar=0,resizable=1";var _npW=this._Top.window.open(_npSU,_npID,npf+",top="+pxTop+",left="+pxLeft+",width="+pw+",height="+ph);return _npW&&(_npW.blur(),-1<navigator.u
Aug 1, 2024 08:39:54.777988911 CEST	1236	IN	Data Raw: 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 65 77 65 62 6b 69 74 22 29 26 26 28 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 62 6c 75 72 28 29 2c 74 68 69 73 2e 5f 54 6f 70 2e Data Ascii: serAgent.toLowerCase().indexOf("applewebkit")&&(this._Top.window.blur(),this._Top.window.focus()),_npW.Init=function(e){with(e)Params=e.Params,Main=function(){void 0===window.mozPaintCount\|\|(t=window.open("about:blank"))&&t.close();var t=Param
Aug 1, 2024 08:39:54.778060913 CEST	1236	IN	Data Raw: 6f 77 50 6f 70 26 26 28 73 68 6f 77 50 6f 70 3d 30 29 2c 21 31 3b 31 21 3d 73 68 6f 77 50 6f 70 7c 7c 72 65 6e 64 65 72 46 41 43 50 28 74 29 7c 7c 73 68 70 70 28 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 68 70 70 28 Data Ascii: owPop&&(showPop=0),!1;1!=showPop\|\|renderFACP(t)\|\|shpp(t)}catch(t){}}function shpp(t){if("undefined"!=typeof __pp&&1==showPop&&!renderFACP(t))try{if(t\|\|((t=window.event\|\|window.Event).cancelBubble=!0),t.button&&2==t.button)return;try{var e=!1;i
Aug 1, 2024 08:39:54.778074026 CEST	123	IN	Data Raw: 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 42 72 6f 77 73 65 72 44 65 74 61 69 6c 73 28 29 7b 72 65 6c 70 6c 61 63 65 41 6c 6c 41 4c 69 6e Data Ascii: vigator.userAgent)}catch(t){}return t}function setBrowserDetails(){relplaceAllALinks&&relplaceAllALinks(/(\/trf\|\.cfm)\?/)}
Aug 1, 2024 08:39:54.798183918 CEST	392	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:54.895791054 CEST	329	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:38 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Thu, 15 Aug 2024 06:39:38 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Aug 1, 2024 08:39:54.895864010 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.9	49856	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:54.803985119 CEST	396	OUT	GET /__media__/pics/28905/res-arw.png HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:55.250557899 CEST	672	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:38 GMT Content-Type: image/png Content-Length: 346 Last-Modified: Tue, 04 Jan 2022 14:44:28 GMT Connection: keep-alive ETag: "61d45d4c-15a" Expires: Thu, 15 Aug 2024 06:39:38 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 1d 08 03 00 00 00 f8 b5 4e 88 00 00 00 45 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 57 d4 34 b7 00 00 00 16 74 52 4e 53 00 51 a8 e4 9d fa 21 30 f4 13 ba 01 72 90 da 3e 7e 03 c7 5f 0a 88 8d 4f 23 a5 00 00 00 ae 49 44 41 54 28 cf 85 93 e1 12 83 20 0c 83 11 41 d4 82 0a 6a de ff 51 37 b7 dd 4e a4 94 ef 77 ae 85 34 51 e7 7e a8 06 2b c6 30 34 34 33 80 b9 8b 92 c4 e1 a2 df 26 41 a3 3f 1a 58 bd 92 3c e6 62 f1 b5 51 e6 af c1 68 1c a7 a0 c1 e2 46 62 5d 30 c8 e0 5c c8 c7 80 75 21 a0 e0 e1 02 4d 23 18 32 17 e8 04 cb dd 05 7e 4c ee 82 a9 48 ac 76 e2 63 b2 37 07 4e 90 f6 a8 a8 6e 0c ec e3 14 9a db 40 fc ad 7f 1b ca 84 cd c5 37 a9 88 ef 6d 03 1f 99 24 5c ef 4b 27 c7 e9 4d 5c 1a a1 54 6a 47 ab 25 47 df ec 9a 5f fc a1 a2 5c 58 6a 55 fa 05 63 50 20 91 7b 34 90 ee 00 00 00 00 [TRUNCATED] Data Ascii: PNGIHDR"NEPLTEGpLW4tRNSQ!0r>~_O#IDAT( AjQ7Nw4Q~+0443&A?X<bQhFb]0\u!M#2~LHvc7Nn@7m$\K'M\TjG%G_\XjUcP {4IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.9	49857	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:54.896431923 CEST	293	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:55.351186991 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:38 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Thu, 16 Feb 2023 20:41:15 GMT Connection: keep-alive ETag: "63ee94eb-20f3" Expires: Thu, 15 Aug 2024 06:39:38 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 2a 2f 0d 0a 76 61 72 20 73 68 6f 77 50 6f 70 3d 31 3b 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 53 65 61 72 63 68 54 65 78 74 28 74 29 7b 74 2e 76 61 6c 75 65 3d 22 22 2c 74 2e 73 65 6c 65 63 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 72 65 70 6c 61 63 65 53 74 72 69 6e 67 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 65 2c 6e 2c 22 67 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 75 62 6d 69 74 53 65 61 72 63 68 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2b 3d 67 65 6e 65 72 61 74 65 42 72 6f 77 4c 6f 67 55 52 4c 28 22 73 72 63 71 72 79 22 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 74 5d 2c 30 3d 3d 64 2e 65 6c 65 6d 65 6e 74 73 2e 71 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 7c 7c 22 45 6e 74 65 72 20 4b 65 79 77 6f 72 64 [TRUNCATED] Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function change
Aug 1, 2024 08:39:55.351213932 CEST	224	IN	Data Raw: 53 74 61 74 75 73 28 74 29 7b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 61 64 64 62 6f 6f 6b 6d 61 72 6b 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 41 73 48 6f 6d 65 50 61 67 65 28 74 2c 65 29 7b 72 65 Data Ascii: Status(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate(){var t=new Array("Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"),e=new Array("January","Febru
Aug 1, 2024 08:39:55.351227999 CEST	1236	IN	Data Raw: 61 72 79 22 2c 22 4d 61 72 63 68 22 2c 22 41 70 72 69 6c 22 2c 22 4d 61 79 22 2c 22 4a 75 6e 65 22 2c 22 4a 75 6c 79 22 2c 22 41 75 67 75 73 74 22 2c 22 53 65 70 74 65 6d 62 65 72 22 2c 22 4f 63 74 6f 62 65 72 22 2c 22 4e 6f 76 65 6d 62 65 72 22 Data Ascii: ary","March","April","May","June","July","August","September","October","November","December"),n=new Date,o=n.getYear();o<1e3&&(o+=1900);var r=n.getDay(),i=n.getMonth(),n=n.getDate();n<10&&(n="0"+n);o=t[r]+", "+e[i]+" "+n+", "+o;document.write
Aug 1, 2024 08:39:55.351303101 CEST	1236	IN	Data Raw: 66 29 29 2c 21 30 7d 66 75 6e 63 74 69 6f 6e 20 67 65 6e 65 72 61 74 65 42 72 6f 77 4c 6f 67 55 52 4c 28 74 29 7b 76 61 72 20 65 3d 22 22 3b 74 72 79 7b 76 6f 69 64 20 30 21 3d 3d 62 72 5f 64 61 74 61 26 26 62 72 5f 64 61 74 61 7c 7c 28 62 72 5f Data Ascii: f)),!0}function generateBrowLogURL(t){var e="";try{void 0!==br_data&&br_data\|\|(br_data=new brdata),e="kwclk"==t?escape(br_data.getMousePositionData()):"adclk"==t\|\|"srcqry"==t?"&bd="+escape(br_data.getSearchBoxRelatedData()):"&bd="+escape(br_da
Aug 1, 2024 08:39:55.351320028 CEST	1236	IN	Data Raw: 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 64 2b 6d 58 2b 74 68 69 73 2e 66 64 2b 6d 59 7d 2c 74 68 69 73 2e 67 65 74 53 65 61 72 63 68 42 6f 78 52 65 6c 61 74 65 64 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 Data Ascii: (){return this.fd+mX+this.fd+mY},this.getSearchBoxRelatedData=function(){return this.getURLBrowserData()+this.getMousePositionData()}};function confirmToOptOut(){var t;optOut=confirm("You will not be able to see any ads or websearches."),optOu
Aug 1, 2024 08:39:55.351387978 CEST	1013	IN	Data Raw: 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 3f 65 3d 74 68 69 73 2e 5f 54 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 57 69 64 74 68 3a 74 68 69 73 2e 5f 54 6f 70 2e 64 6f 63 75 6d 65 Data Ascii: ment.clientWidth?e=this._Top.document.documentElement.clientWidth:this._Top.document.body&&this._Top.document.body.clientWidth&&(e=this._Top.document.body.clientWidth)}catch(t){e=0}return e},_wt:function(){return this._Top?null!=this._Top.wind
Aug 1, 2024 08:39:55.351469994 CEST	1236	IN	Data Raw: 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 65 77 65 62 6b 69 74 22 29 26 26 28 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 62 6c 75 72 28 29 2c 74 68 69 73 2e 5f 54 6f 70 2e Data Ascii: serAgent.toLowerCase().indexOf("applewebkit")&&(this._Top.window.blur(),this._Top.window.focus()),_npW.Init=function(e){with(e)Params=e.Params,Main=function(){void 0===window.mozPaintCount\|\|(t=window.open("about:blank"))&&t.close();var t=Param
Aug 1, 2024 08:39:55.351485014 CEST	1236	IN	Data Raw: 6f 77 50 6f 70 26 26 28 73 68 6f 77 50 6f 70 3d 30 29 2c 21 31 3b 31 21 3d 73 68 6f 77 50 6f 70 7c 7c 72 65 6e 64 65 72 46 41 43 50 28 74 29 7c 7c 73 68 70 70 28 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 68 70 70 28 Data Ascii: owPop&&(showPop=0),!1;1!=showPop\|\|renderFACP(t)\|\|shpp(t)}catch(t){}}function shpp(t){if("undefined"!=typeof __pp&&1==showPop&&!renderFACP(t))try{if(t\|\|((t=window.event\|\|window.Event).cancelBubble=!0),t.button&&2==t.button)return;try{var e=!1;i
Aug 1, 2024 08:39:55.351500988 CEST	123	IN	Data Raw: 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 42 72 6f 77 73 65 72 44 65 74 61 69 6c 73 28 29 7b 72 65 6c 70 6c 61 63 65 41 6c 6c 41 4c 69 6e Data Ascii: vigator.userAgent)}catch(t){}return t}function setBrowserDetails(){relplaceAllALinks&&relplaceAllALinks(/(\/trf\|\.cfm)\?/)}
Aug 1, 2024 08:39:55.712146997 CEST	301	OUT	GET /__media__/pics/28905/res-arw.png HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:55.809376955 CEST	326	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:39 GMT Content-Type: image/png Content-Length: 346 Last-Modified: Tue, 04 Jan 2022 14:44:28 GMT Connection: keep-alive ETag: "61d45d4c-15a" Expires: Thu, 15 Aug 2024 06:39:39 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Aug 1, 2024 08:39:55.941191912 CEST	346	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 00 1d 08 03 00 00 00 f8 b5 4e 88 00 00 00 45 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR"NEPLTEGpLW4tRNSQ!0r>~_O#IDAT( AjQ7Nw4Q~+0443&A?X<bQhFb]0\u!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.9	49858	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:54.903477907 CEST	387	OUT	GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive Origin: http://ww01.rotect.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:55.350104094 CEST	278	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:38 GMT Content-Type: application/font-woff Content-Length: 17312 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-43a0" Access-Control-Allow-Origin: * Accept-Ranges: bytes
Aug 1, 2024 08:39:55.350138903 CEST	1236	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 a0 00 10 00 00 00 00 73 60 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 6c 00 00 00 1c 00 00 00 1c 69 99 f4 2b 47 44 45 46 00 00 01 88 00 00 00 1e 00 00 00 1e 00 27 Data Ascii: wOFFCs`FFTMli+GDEF'GPOSGSUBp ltOS/2T`=cmapugasp\glyfd(G8a?head9p46hhea9!$
Aug 1, 2024 08:39:55.350260973 CEST	1236	IN	Data Raw: e1 9b 59 ab 7e 9e 0c c0 69 90 ef 07 dd 3c 96 a2 60 5e c6 5a 06 6b 45 ac e5 88 9b 6a e2 a6 1c 0b ab c4 cd 37 e4 1d c6 4d ca 2d e2 48 23 fa fa d0 aa 9e d1 01 56 b5 85 99 ad 5c 9e 42 06 fb 2a d8 33 60 5f 04 7b 18 ec 29 b0 c7 c0 1e c5 73 5e bd 3e 00 Data Ascii: Y~i<`^ZkEj7M-H#V\B*3`_{)s^>\ry<9:<G0)mh[Jx+&K<F26<aq,Sf,oY-N[y0/<:9:YV'V~t`%V>
Aug 1, 2024 08:39:55.350276947 CEST	1236	IN	Data Raw: f9 28 3c 43 28 18 e6 72 98 6b 2a 7c 92 95 32 ba 3a 96 cb 7b 78 ca e1 69 01 4f 51 5b 2f 67 f0 b2 84 17 07 bd 73 76 c7 cd 69 c7 97 e4 37 07 ab 15 56 95 2c 96 8c 95 22 56 f2 da dd 8d a1 b9 89 61 d3 5b 45 60 67 ce 18 59 46 e7 35 1f f7 6a 6d fe a7 8e Data Ascii: (<C(rk\|2:{xiOQ[/gsvi7V,"Va[E`gYF5jm ;Qqa{>ynhciF0::I$UvI2&hwKs`!\|.v+Cx'Q1i#~Qun?'r3TNWeMcru:~'>V7dRfkuks!
Aug 1, 2024 08:39:55.350292921 CEST	1236	IN	Data Raw: 6c 61 74 6e 00 08 00 04 00 00 00 00 ff ff 00 00 00 00 00 00 78 9c 63 60 66 0a 66 da c3 c0 ca c0 c0 d4 c5 14 c1 c0 c0 e0 0d a1 19 e3 18 8c 18 8d 80 a2 0c ac 40 39 20 c5 d2 c0 c0 a0 ef c0 a0 e0 c5 00 05 05 95 45 c5 40 8a f7 37 13 f3 89 ff 40 35 cc Data Ascii: latnxc`ff@9 E@7@5'~ 9&)@JExWLUA\ADDQ@("v-^Q#$`/"5!`x0A("Lfu#HTV(pMy5I$)E[$:p%F8(--47
Aug 1, 2024 08:39:55.350513935 CEST	896	IN	Data Raw: 3a 17 b9 17 ae db 64 4c d4 c2 d7 96 bf ee dc a7 0a 5e 71 7a c9 ae a4 40 bf 31 1d 4a 55 53 93 b0 66 dc 54 63 81 b1 78 a9 26 a2 28 2c 75 7c 6b e3 82 c9 11 69 91 93 a7 54 95 34 5a f2 42 f4 06 4b 86 a9 71 fa f3 fa 98 e2 8c 38 33 ec 0a 31 26 44 68 82 Data Ascii: :dL^qz@1JUSfTcx&(,u\|kiT4ZBKq831&Dh@{IC$uP{3?+WT//?Azowgr/~8>M@l4Gyveoe{'~Pj2YgV2E.\|\Xkjb-Z'45FA
Aug 1, 2024 08:39:55.351655960 CEST	1236	IN	Data Raw: 99 85 22 1f 42 52 62 23 26 75 c4 4f d1 07 97 c8 94 d9 0d e9 a9 53 92 13 57 57 15 45 af bb be ae 8f 0d 41 c8 06 ef d0 bb a6 ea cc e4 ea 34 86 33 07 f5 e6 07 b4 31 4c ee ed 9a 43 a4 f7 1c a6 41 06 07 3d 82 71 76 75 c2 b9 99 b6 1e ce 8a 73 5d a9 85 Data Ascii: "BRb#&uOSWWEA431LCA=qvus]Z/i0S9(gGg%n]m "B \>pSY}GK5%g}W0(DXq",7#!])'DoAm2nDF.\==4Q3;\|Fv
Aug 1, 2024 08:39:55.351670027 CEST	224	IN	Data Raw: a7 85 c5 37 3e d3 b1 e2 be a6 f0 8c 70 ef a0 69 2f cf 8b 8b b9 4f dc bf 40 a4 73 3c d3 5b 8e ee 9d 86 fa e9 d5 bd 7f 44 bf 9d 68 bd 4a 12 37 6f c6 31 13 6d 3f 91 93 a2 bc 86 51 21 45 cb 89 36 82 bd 83 69 63 71 ef 69 e1 e7 33 bd 1b 1b 2c b0 5e 58 Data Ascii: 7>pi/O@s<[DhJ7o1m?Q!E6icqi3,^XvYXmfEppoggx(t/HMo'Wl;c?H+,(P76iCJ%4A==p#Du&-!%*'0
Aug 1, 2024 08:39:55.351697922 CEST	1236	IN	Data Raw: de ef cf 74 77 9f f9 1e 7c e0 94 70 17 86 09 35 9c 3d a6 5c 22 ca b7 c1 08 2a ca 1e 95 5c 0f 0b 84 23 c4 2c ec 83 b6 16 f8 d3 e6 79 42 f2 fd 74 6c b1 6d 39 94 90 5b 8c 97 54 28 d1 2e 41 c9 ba 75 82 8d dc 6a b5 ce 6a e5 57 48 fc 0e c1 31 cc 2e 80 Data Ascii: tw\|p5=\"*\#,yBtlm9[T(.AujjWH1.&u[VJ>#JtOlj%[v2z<?(C<eW1;7YIm%a{Pnv6_`FgaQ6(39reNtT2F-gco^T{S
Aug 1, 2024 08:39:55.351743937 CEST	1236	IN	Data Raw: b8 0c b9 f4 69 bd 09 e1 9c 38 8f a4 e2 3c d4 0d 6f a5 b9 cf 7b be 3a b5 ee 89 4b cf 5f 98 33 f3 b1 67 ce 13 ff dd bb 85 9f 84 af f6 ef 07 2f 18 81 73 86 a1 9d 29 14 d7 a2 b4 07 22 22 5d 6e f0 60 69 de 78 6d 84 3c f8 cd 63 1b 36 1c fb 59 31 ed 7a Data Ascii: i8<o{:K_3g/s)""]n`ixm<c6Y1zH=#R&3D]xyb8C@nk3Sa:)fyLxxK+d2W-z?b1Dd{3D#OPfDDhc
Aug 1, 2024 08:39:55.355079889 CEST	1236	IN	Data Raw: 66 d5 17 af 46 38 06 18 09 0b d1 ff 2a 86 cc c5 d3 54 fc 44 f0 28 8d 35 4c db 53 a2 4f 4e f0 0d 89 ce f6 2b 20 75 53 0b 6a 47 e7 46 e7 94 98 2a a2 7d e3 fc 46 17 55 31 9a 12 f0 fc 34 11 cf 4f 3c 3b 3f 29 5f d8 b5 a6 07 4f 4e 59 ec b7 52 5b 3e fa Data Ascii: fF8TD(5LSON+ uSjGF}FU14O<;?)_ONYR[>ZSJ(kUy))KkQP\|#j2+O?N^*;O'aK$XCx.jE;n6GQyBlZZ w-1(\|O[i".

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.9	49860	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:54.905899048 CEST	393	OUT	GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive Origin: http://ww01.rotect.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:55.372191906 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:38 GMT Content-Type: application/font-woff Content-Length: 17264 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-4370" Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 70 00 10 00 00 00 00 71 40 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 43 54 00 00 00 1c 00 00 00 1c 6a aa b6 37 47 44 45 46 00 00 37 84 00 00 00 1e 00 00 00 1e 00 27 01 0d 47 50 4f 53 00 00 37 c4 00 00 0b 8e 00 00 13 c6 29 4d 73 4d 47 53 55 42 00 00 37 a4 00 00 00 20 00 00 00 20 6c 91 74 8f 4f 53 2f 32 00 00 01 e8 00 00 00 56 00 00 00 60 a5 bd 5d 40 63 6d 61 70 00 00 04 ec 00 00 02 75 00 00 03 86 c7 ce be ea 67 61 73 70 00 00 37 7c 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 09 78 00 00 29 05 00 00 47 f8 1b fa 03 ac 68 65 61 64 00 00 01 6c 00 00 00 36 00 00 00 36 fa 9a cf bf 68 68 65 61 00 00 01 a4 00 00 00 21 00 00 00 24 07 c7 04 70 68 6d 74 78 00 00 02 40 00 00 02 aa 00 00 04 1a 57 5c 36 b8 6c 6f 63 61 00 00 07 6c 00 00 02 0a 00 00 02 10 c1 de d4 3a 6d 61 78 70 00 00 01 c8 00 00 00 1f 00 00 00 20 01 50 00 38 6e 61 6d 65 00 00 32 80 00 00 02 e7 00 00 06 b4 4e ce 98 3d 70 6f 73 74 00 00 35 68 00 00 02 11 00 00 [TRUNCATED] Data Ascii: wOFFCpq@FFTMCTj7GDEF7'GPOS7)MsMGSUB7 ltOS/2V`]@cmapugasp7\|glyfx)Gheadl66hhea!$phmtx@W\6local:maxp P8name2N=post5h8',prepdhBL_<'d:jxc`d``>X"]?xc`d``dg0e`g& fB0xc`f`@9 EOa>[$$H)00>xm[HTQdf^a)"0#]0M "%a&Q7)H>DDEKDqI:X}SAM?c^Dq\hVP2DFD>Q4:r5APQ/!T5R4Zejom1Z}$q5=.3Cr>qe!Sa%tr7#^#{4@\*q1T0dwrqk\Gq[#w8Y7rd(\|"8NkG3WvvI7&M99/&s
Aug 1, 2024 08:39:55.372256041 CEST	1236	IN	Data Raw: 98 bc 13 08 38 59 4c 30 8b 51 04 78 86 76 1d c2 31 7d c8 7a 2f 0e 33 a3 32 c9 e4 19 07 10 64 6d c4 74 c2 6b 12 d4 4d be 7f 05 75 3a 47 de 96 f9 dc bf 72 ed 48 2e da 0c 1c fe 69 92 60 f2 bb cd 80 be 4c 37 c6 83 ec 35 fe eb c5 73 55 39 63 66 90 2e Data Ascii: 8YL0Qxv1}z/32dmtkMu:GrH.i`L75sU9cf.''6yYyNoX._a_/rqf.0&rov_=#0<}2QNQ4e:@ZocRy&U0NWi61/>JPW[PP,S8/q'4TD
Aug 1, 2024 08:39:55.372272968 CEST	1236	IN	Data Raw: 17 0f f8 24 bf c6 37 f8 01 3f 13 e2 42 5a 28 09 35 e1 44 18 09 53 c1 17 6d 31 25 ae 8b 0d f1 5c bc 0e c5 42 b9 50 39 d4 09 7d 0d dd 86 63 e1 6c b8 12 ae 87 27 11 3a b2 18 29 47 ba 11 3f fa 30 5a 8d 7e 8a 5e 4b a6 b4 22 d5 a4 a6 d4 91 86 d2 4c 9e Data Ascii: $7?BZ(5DSm1%\BP9}cl':)G?0Z~^K"LG$*SP6\|=77X#i{Iikc-`jCkjW}e;NI9O]\p}[o{okzc"x\|`TU;%
Aug 1, 2024 08:39:55.372344971 CEST	1236	IN	Data Raw: 91 71 b8 96 8a ca 84 5a 29 0f 02 04 a3 41 3d d5 27 8a a0 8d e6 72 38 f0 fb b6 de 5d 7f 9f 9f 58 d3 92 3e bd 6e 5a 58 c8 43 a4 aa bb e9 65 7e 71 c5 bc 15 c5 ad 69 c9 f3 b2 dc 1b 5e 42 58 a1 88 97 12 61 4d 42 c0 d2 fe 68 8d 6a 23 e8 79 a8 b4 54 57 Data Ascii: qZ)A='r8]X>nZXCe~qi^BXaMBhj#yTW[k{?mHZiSk X'UgW7-4_;-T[Hm<l QD<$hVHl/RUiiEe[sygdU
Aug 1, 2024 08:39:55.372361898 CEST	1174	IN	Data Raw: f0 38 cc 14 de 13 96 41 62 df 9b 23 fc f5 11 fd 25 c3 5d 89 33 32 11 9d e7 2d f6 ff f3 38 91 9b 80 ff c7 3d f3 07 4a 1b 06 d3 97 ac 27 cf 9f 3f 61 bd 91 f3 6f 84 5a 0c 27 d0 c1 6a 04 7f f8 d2 06 f3 0b 71 0f e8 70 c0 19 7a 20 f3 ad f7 08 4b ac 56 Data Ascii: 8Ab#%]32-8=J'?aoZ'jqpz KVKA ,ys82.\my!lul=O*c1%.I-5?z}aaC-."}w4kq\|0zpEK\|[c{ZC0.}><&<
Aug 1, 2024 08:39:55.372720957 CEST	1236	IN	Data Raw: 14 42 fc 7d f7 95 ce 4c ad 6a c8 8b 4b 1a f8 eb 40 ed 74 e1 ed d6 a6 2d ad 1d a2 bd c0 93 2a 49 25 5f d2 88 d4 9b da 7a 4f 76 66 50 e2 9f 28 1c b2 d7 2c 16 df f6 a4 86 05 96 15 29 35 34 98 21 5f 0a ef 25 24 f5 75 09 2f 42 c8 9e 72 8a 63 2e 42 f9 Data Ascii: B}LjK@t-*I%_zOvfP(,)54!_%$u/Brc.Br.z)))D>E2y=L^TTbJr`sju49o#iar\wlm%XW^8}qqD29@Nu6^nHI,%"SI]]W
Aug 1, 2024 08:39:55.372782946 CEST	1236	IN	Data Raw: 18 86 b8 f2 7a e4 27 3e 2a b5 72 29 5d a7 ed 3c ed f2 e2 c6 b7 d7 be 2c 7f 73 cd fb eb 5f e0 5f 7a f9 ee d3 17 4c b2 3a 98 21 bc 02 d9 c2 93 75 32 53 dd aa 55 a2 5d 6d 1c fe 9a 7b 81 c5 79 34 9a 43 a9 e2 f1 b7 b1 a5 a5 05 9e 82 42 e1 05 21 85 3e Data Ascii: z'>*r)]<,s__zL:!u2SU]m{y4CB!>u(S0$F!viw-m4-3/e^sR+6fwKfBz\Ftv2#s'VzxwUG&WNp04!1 j%JCB7cG>T\|d9=
Aug 1, 2024 08:39:55.372844934 CEST	1236	IN	Data Raw: 98 5f c9 60 78 8e c6 45 af a2 71 ad 13 3a 39 5d 2b da cb cb db 47 63 44 16 6c 4c 4a e2 1c e0 2d 63 f0 fc 47 c3 d3 50 c9 d1 32 6f 8c de 59 2f 73 82 fc 86 5f f3 44 35 94 c4 45 fa b7 4d 0e 2a e5 9d 68 be 1a 17 9d 52 14 17 bd 8e 43 9f 20 ae d1 cb d6 Data Ascii: _`xEq:9]+GcDlLJ-cGP2oY/s_D5EMhRC FzZCHFCVr_3-/;8]Vq1J:lEdu^IgpY{TFxjy=[fH%^{!-f[b2(GX[Q0b
Aug 1, 2024 08:39:55.372860909 CEST	1236	IN	Data Raw: 26 c3 a6 92 85 b8 8e 68 c0 ba ea 8c 8c ea cc a1 a7 44 74 be 94 02 5d db be f0 3b 48 00 da 8c 48 b4 eb 23 d5 c0 e0 30 27 8c 12 55 b4 38 e8 8a b8 c8 65 0c 9b 10 da 14 e5 ca ef 10 16 43 63 66 83 21 ab 46 18 2a ae b8 b7 da ba 78 b6 88 d6 8f a6 a2 bf Data Ascii: &hDt];HH#0'U8eCcf!Fxdu8,uY2ZRJJ/nDKZ9qB.b,9[99U]{S&!b,WC'$JCEm:+fw;U\WxG
Aug 1, 2024 08:39:55.372920990 CEST	1236	IN	Data Raw: 74 fa 74 72 4a 38 96 d7 9d b7 cb f2 57 df 6e 5f d6 93 49 ad aa bd 37 1b e7 a0 54 e3 8c 2e 4b 69 a9 a5 aa 0a 87 bf e4 d3 ed 23 fc eb 7b 55 b7 8a 1b c9 17 3e c2 8d 63 9d 4e 23 f9 42 1a cc da 53 84 7b a5 44 a9 3d 2f d8 c1 ec 25 8b 51 d0 de 30 db 7b Data Ascii: ttrJ8Wn_I7T.Ki#{U>cN#BS{D=/%Q0{ZNpE`<eDcyUrAZ/-Z=_}foA[?"."F*[3A7f/oU3"Z(M]azxlrGcSN
Aug 1, 2024 08:39:55.377104044 CEST	1120	IN	Data Raw: cc 5a 7d d1 eb 69 64 72 bd 52 8d ca 8b fa 3c 72 11 8d 76 9e ea 0c 66 43 97 fa d1 79 87 9b 0b a3 a7 2f 69 56 fd 53 18 02 1e e0 aa 69 be a9 3c aa b0 79 7f d7 83 da f9 0d f8 c6 96 9a 79 eb 16 37 c4 e9 d2 93 6a 26 24 f8 d4 74 45 44 d7 2c 5e 36 a7 c6 Data Ascii: Z}idrR<rvfCy/iVSi<yy7j&$tED,^67]T{=/+^n+WAVG!3\xiS:AQ7fn-;_D@3sS)<3='\gSm@O&s!Lr$b.[KT)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.9	49859	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:54.905961990 CEST	391	OUT	GET /__media__/fonts/montserrat-medium/montserrat-medium.woff HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive Origin: http://ww01.rotect.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:55.370407104 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:38 GMT Content-Type: application/font-woff Content-Length: 33316 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-8224" Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 77 4f 46 46 00 01 00 00 00 00 82 24 00 13 00 00 00 01 26 88 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 a8 00 00 00 1c 00 00 00 1c 86 39 f0 ac 47 44 45 46 00 00 01 c4 00 00 00 4d 00 00 00 68 06 21 07 01 47 50 4f 53 00 00 02 14 00 00 2a cb 00 00 82 36 c5 fa 25 64 47 53 55 42 00 00 2c e0 00 00 01 9a 00 00 03 24 57 60 3a 43 4f 53 2f 32 00 00 2e 7c 00 00 00 53 00 00 00 60 61 e5 ae a1 63 6d 61 70 00 00 2e d0 00 00 01 89 00 00 01 e2 17 09 75 62 63 76 74 20 00 00 30 5c 00 00 00 3c 00 00 00 3c 0e 59 11 ef 66 70 67 6d 00 00 30 98 00 00 01 b1 00 00 02 65 53 b4 2f a7 67 61 73 70 00 00 32 4c 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 32 54 00 00 46 90 00 00 8b a8 1f 92 91 ac 68 65 61 64 00 00 78 e4 00 00 00 36 00 00 00 36 15 9e 06 99 68 68 65 61 00 00 79 1c 00 00 00 20 00 00 00 24 0f ac 07 51 68 6d 74 78 00 00 79 3c 00 00 02 4a 00 00 03 a4 2e 37 56 bc 6c 6f 63 61 00 00 7b 88 00 00 01 c8 00 00 01 d4 ce bd f0 aa 6d 61 78 70 00 00 7d 50 00 00 00 20 00 00 [TRUNCATED] Data Ascii: wOFF$&FFTM9GDEFMh!GPOS6%dGSUB,$W`:COS/2.\|S`acmap.ubcvt 0\<<Yfpgm0eS/gasp2Lglyf2TFheadx66hheay $Qhmtxy<J.7Vloca{maxp}P name}pgqpostJprepxQ>webf\-hRFSx%=@Py>]aJ5$`&MNuI@Z2(]eAM{F=Y0]OK>m#x}l\m/bq!ImjHeXM[&0]i3(MQ6baetPx"7x^uYg9?Bss<TzW-i}mr?Z?WnU/Se{Z~l=u{k6<Xs{o>^U8_R\|%uxZ_%50tAF/I\|:UWuoN=sWq<~=>5?n[o}7QYfIqUOI8sJJ;uPg~o:
Aug 1, 2024 08:39:55.370488882 CEST	502	IN	Data Raw: 4f ab 3a d5 8a 5f cd 5e 2b 0a 71 cf 49 fc 0a eb d1 2c b5 2c e7 77 34 50 cf 23 00 b3 35 79 f7 45 51 c7 6f f2 b7 a9 eb e3 a8 75 70 ab e4 67 18 10 dc da 55 ad 7d 1a e7 d1 6f 49 bc a1 d9 96 50 ef 63 05 d7 eb 55 54 df c1 35 de 49 1c 1d 77 eb 83 f3 a6 Data Ascii: O:_^+qI,,w4P#5yEQoupgU}oIPcUT5IwZ5P~Ww&f#G_~gWRZ e>~wlT>mpgevGO?Y{3{]O-t}mw&YwRzClO^u`o7jN~6sd4{gU^,'n1
Aug 1, 2024 08:39:55.370507002 CEST	1236	IN	Data Raw: c1 6b 36 83 46 36 03 77 8d a0 47 99 15 36 a3 57 aa d1 73 d2 1f 87 d0 13 37 f4 49 8c c7 66 55 89 71 19 e3 7e 12 dc 7e 1c b4 f2 2e 78 54 25 30 d7 8a 52 1c 55 97 b7 d6 1f dd 59 b7 00 d5 b9 d4 08 3a f0 47 c1 46 9c 8d 7a 5c 26 75 8b 5a be 25 d4 be 8f Data Ascii: k6F6wG6Ws7IfUq~~.xT%0RUY:GFz\&uZ%}"%e;[K+)R-}Drvyap>&a"7eGSG`7.NpF;-v2vNp^M{h\C>;[d8y\|2MK~fygb)AW
Aug 1, 2024 08:39:55.370544910 CEST	1236	IN	Data Raw: 0d de f2 2f 28 7d 0c a5 e6 47 0e 52 1b 7e ad f8 27 28 e1 20 39 fd 34 a0 1b 73 da 14 66 bc 21 c0 34 e8 af 17 74 3c 0e 2a 74 28 e3 4d 89 34 40 c9 a0 00 47 b7 69 f9 fc 02 37 bc ff 92 1d 9b 71 3d e9 ca ae ac 6f fa 9d 93 76 9f d6 33 b8 77 0a 2d 1b 47 Data Ascii: /(}GR~'( 94sf!4t<t(M4@Gi7q=ov3w-G;a{+w"(AKF"gs}8E=N.#afq<(>Y#!V`cD*wYTY__4{u=NiQ2WA)5z,}J
Aug 1, 2024 08:39:55.370560884 CEST	1236	IN	Data Raw: 9e 45 cd f7 01 b3 47 70 f7 5b d0 be 2f a0 b4 eb d0 c0 47 54 7e 2d fd cf 55 bf ae fe 14 14 f1 03 8c d3 f3 fa 75 48 a1 c2 49 ae 80 bb 8c 41 f7 ee d1 1d e0 36 2d fa a4 1e 62 14 82 a3 5b c0 c9 a7 a8 53 54 43 96 1b 87 54 d2 05 29 b2 1b ef 7a 06 7c 63 Data Ascii: EGp[/GT~-UuHIA6-b[STCT)z\|cZ{T>.f3(c(^w(C_a+D=?6NC\}A7U*ZNttYm./]kcEIJLZ>
Aug 1, 2024 08:39:55.370580912 CEST	672	IN	Data Raw: d2 8b f0 1b de b0 5e 17 87 75 99 a4 7c 2e 96 d8 66 bc 3f aa 37 e2 4a 3b f5 c4 98 de 27 91 a7 b4 5d 5f 03 9d 8d 5a 9d 6a 5c 9f 01 9e c4 bb d6 2c 5e 32 7d 1a 12 79 13 9e 04 e7 14 bf 9b c4 d8 e1 ec 30 7d 48 47 18 4f 37 41 7d a6 00 7b 3e 3e e3 2c 5b Data Ascii: ^u\|.f?7J;']_Zj\,^2}y0}HGO7A}{>>,[JqA#o!M}y~{'$-B=^ZvL~yD@1[T$,'a#h0Fk?[zW9Wc&pyMz=*J;
Aug 1, 2024 08:39:55.370724916 CEST	1236	IN	Data Raw: 2d f4 63 9b 44 46 a0 07 87 d0 1f 2d ba 91 6d 1c 61 8c 86 48 e1 27 51 97 8b f8 3c c1 08 7e d3 8f 07 21 67 49 b4 e5 31 f4 63 bd b1 42 30 0f af 10 ed 3f 82 16 5d a1 85 ba 03 fb bb b4 98 74 5a bb 7a 07 66 a4 53 c0 b0 69 e7 71 3c 7f 49 ec ec fa 04 f0 Data Ascii: -cDF-maH'Q<~!gI1cB0?]tZzfSiq<I2}dCV~(-\|Ax6T-On.NV9:z7$Ji(#c-B>Ii(tYg}'o,Lo]y`@&)J_f8#Y-S67{
Aug 1, 2024 08:39:55.370779037 CEST	1236	IN	Data Raw: ae 6d 3a 65 bd 1d 3f 7a b8 c9 b7 25 67 f7 2d cf 66 41 91 79 30 53 be 4f 1b 53 8e e1 9f a9 76 1d af 6e e3 29 56 1d 9f bb ce 1d ef fa a6 d8 48 99 cb 19 16 4a 65 74 c2 34 57 a5 d9 48 fe d8 aa 0e 40 a3 68 54 bb c0 43 0f d0 72 78 50 a4 6d 37 67 db b3 Data Ascii: m:e?z%g-fAy0SOSvn)VHJet4WH@hTCrxPm7g+v06+brcX~4NOhuP\| czb%\|!#;IW#dv?=2'Rv^}\|nYi]Vj=V\kolgNk*}8$Ul\|fl6]d5pr}>
Aug 1, 2024 08:39:55.370804071 CEST	1236	IN	Data Raw: 61 48 a5 c1 85 6c d9 f2 de d6 7b b0 c6 82 a9 bf 0b 35 ac ab 3f 26 f6 f0 99 dc 32 e8 b6 a9 07 d0 1f e6 b3 86 1c a1 86 ed 88 72 1c 8b c7 2b 0f 78 8f 30 7b 2c 7f e5 63 42 7d 91 ff 53 72 11 ef df 63 a2 a5 a0 bd c4 ec 6c d7 c9 b8 a2 e6 99 78 5e a1 9a Data Ascii: aHl{5?&2r+x0{,cB}Srclx^6%+ppcTz7kvSo-MoIN@%>^YE:wD;L{f-3<q;6?D1{Xx~BSbHaf/288G#_mb=DuF}-Qw_:vz
Aug 1, 2024 08:39:55.370872021 CEST	1236	IN	Data Raw: c7 08 cc b2 e2 5f a3 84 df a3 6c d2 06 29 b3 1a 72 71 8c 91 6d d7 ad cd 4f e4 a3 11 c9 ff e5 2a ad 49 e6 ac 48 4e 81 64 3c f7 33 4e bf 91 b2 79 9c 5e c0 24 d7 80 18 67 fc cf a8 59 85 83 d9 24 b2 7f 0c 09 f6 93 cf c4 61 76 19 8e 90 22 0b 8d 71 06 Data Ascii: _l)rqmO*IHNd<3Ny^$gY$av"qF;>c5,{ +^-'/2'dD7MzQ_}_H88$:MxEgrf63,~Ot++rTGo>;_
Aug 1, 2024 08:39:55.375449896 CEST	1236	IN	Data Raw: 03 a9 a4 1e 34 f2 2b e0 55 28 a3 81 94 f1 80 ca 0f fd 50 24 d6 fc 0f f2 af a0 af b6 70 dc cb fa d7 23 98 8b e3 98 71 25 ff 3f c6 9c 7e c9 e8 1f a2 5e 38 c1 8c f7 8f 71 6d 3a 57 4d 55 32 6c ec 7f a3 dd 20 0f 3d 6f 56 a0 a0 1e 1d 33 ff 47 6a d7 35 Data Ascii: 4+U(P$p#q%?~^8qm:WMU2l =oV3Gj5k5B+5\|%0s5f?k34#{v 6sx&>)CBjCMg>@<h\g~1wm@6[d?>Dt\|ywQ:d0IO7JksJl'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.9	49861	208.91.196.253	80	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 1, 2024 08:39:54.953294992 CEST	297	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 1, 2024 08:39:55.420072079 CEST	329	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 01 Aug 2024 06:39:38 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Thu, 15 Aug 2024 06:39:38 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Aug 1, 2024 08:39:55.420134068 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((
Aug 1, 2024 08:39:55.420171022 CEST	1236	IN	Data Raw: a2 c2 14 56 7e 4e ec 57 58 1b 33 a2 c2 14 56 7e 4e ec 57 d8 4e 61 28 ec aa 39 b1 57 61 8d cc 88 7e 5b 5f 46 2b 13 4f bf 39 31 ac 98 c2 14 96 b8 5f fa 14 b6 6b 66 c5 16 f2 28 60 d5 cc 7e 39 94 29 6c d9 cc 82 f9 3b 1d 65 b4 b3 61 be 96 28 ac 9d ef Data Ascii: V~NWX3V~NWNa(9Wa~[_F+O91_kf(`~9)l;ea(\|kvsbX.),q\,+ZwqM8]K`q4#z 0'smsmS+*eb91'jj=\|Jt8'O"W.L.:\u$~8Ur#9T9m
Aug 1, 2024 08:39:55.420212984 CEST	448	IN	Data Raw: d1 d8 e2 4c 61 4d 5d cf bf e3 07 f6 e5 2c 5b de 48 6f 2f ef a3 dd eb 79 07 31 c7 b0 09 2e ef a3 dd eb 79 07 31 c7 b0 09 2e ef a3 dd eb 79 07 31 c7 b0 09 2e ef 43 5f 5e c4 bc 86 25 36 16 0d 5f cf 3b 88 39 86 e5 5f de c7 93 65 f8 4d 1a 85 d8 4a ff Data Ascii: LaM],[Ho/y1.y1.y1.C_^%6_;9_eMJ^,5P)Up00wS~30.2U"S0)"u;g)LaSP{~'S00)LaS0)LaSX8{qV0))LaBv:0)LaSX]
Aug 1, 2024 08:39:55.420309067 CEST	1236	IN	Data Raw: 21 b1 2c 7d f5 28 ac a9 c6 0c 89 c6 c4 84 be 2e 15 f6 da d8 93 21 11 63 e2 49 4f 97 36 4e 5c 5e aa 26 1a 33 24 ba 4d cc e8 ab 4f 61 6d 34 e6 b9 d9 a3 73 46 5f fd 0a 7b 55 7d 63 8a 70 d7 91 d1 57 ef c2 3e 55 fe c7 06 dc 73 b8 eb 18 e6 4b df 83 7b Data Ascii: !,}(.!cIO6N\^&3$MOam4sF_{U}cpW>UsK{^/A}_dwo{gCQ'rX$#R;&?zv'\|\| !Wh@i]izP^:=c'v_1C/=COs\|E^0x9_j]_
Aug 1, 2024 08:39:55.420326948 CEST	1236	IN	Data Raw: 88 ea 1c 66 c4 8a 50 4c 6d b1 79 1f 47 20 0c 84 bd df 0a e3 a2 11 45 45 a2 58 ff 23 4c fb 6e c1 4c 84 95 f8 de 53 39 da 43 cd da 71 96 34 40 b5 1d c6 14 9a f6 ed 02 61 20 ec 7d 1f 51 f2 88 14 67 b8 28 9d 72 a6 f2 7a 5a 9d 08 38 60 25 be a3 11 63 Data Ascii: fPLmyG EEX#LnLS9Cq4@a }Qg(rzZ8`%crK_eZ'FKDu9<Q "U_l\|Gd&e}bT'!v;0becL:;#.\|7D^cu?,6MA{[#gt"S6^/Kt
Aug 1, 2024 08:39:55.420345068 CEST	448	IN	Data Raw: cc 7b a4 3a 29 2c b6 6e 62 39 b5 c2 ba 8b 7b 23 6f 54 31 00 91 08 99 78 f0 93 61 2f 00 cb 73 89 e5 5f 5e 76 44 22 d5 1b 71 f2 22 01 76 ae bd 0c ab 13 41 04 bc 8e 63 e2 e6 cb b4 88 cb 5c a2 a6 34 07 62 e8 7b 1d 52 cd 5a a5 b3 62 3c b2 9f 88 14 86 Data Ascii: {:),nb9{#oT1xa/s_^vD"q"vAc\4b{RZb<$vX#6<\|yu)U~Ho$x@;%SAV`estd"Mb#D0$c1Xyc67'$c=C\&>~u"1<e^YX=jeuu%sk,=H
Aug 1, 2024 08:39:55.420579910 CEST	1236	IN	Data Raw: 3e 65 e5 c9 bd c9 8e cf 7c 56 11 08 00 62 c7 b4 4d d4 95 01 7a 6d b3 98 cb f9 bc 48 8c fe ec 4a 4b 21 17 9e c8 9e 79 e6 f2 df 10 3a 11 12 11 8d e7 c3 1a 51 ec 3d 7c ac fb 6f d2 26 ed 6e 0a 0b df ff 2c 5d c2 16 37 40 ec 16 0b 64 07 64 00 9d 08 c0 Data Ascii: >e\|VbMzmHJK!y:Q=\|o&n,]7@ddPZv~T",P=zwk/vF#+pv,3aq%laub6TKq5a)1{Nuck6qDLQ98V;DT"fnn
Aug 1, 2024 08:39:55.420664072 CEST	1236	IN	Data Raw: 24 89 8a 30 b3 4d 4c 2d b1 2a d5 67 75 c0 d1 3d 4a d1 32 fb 8c 5f 2b a7 bd a8 b0 29 f8 88 5f 25 64 15 61 c4 9b e3 59 97 e7 d8 b2 25 62 46 d8 76 10 c4 94 3e 49 2d 02 42 e4 91 9f 03 b2 65 58 fc 5e 6a 2e c6 83 3f e1 17 13 c8 4a ca 0e bf 6e e9 e3 10 Data Ascii: $0ML-*gu=J2_+)_%daY%bFv>I-BeX^j.?JnuvvOJ_`1DT].])Ya-@?#Ov'Q>$1vCR5I%SaIK,\|hDw(&yL'u~Qd,K;Y%(LIc\|!M0
Aug 1, 2024 08:39:55.420679092 CEST	1236	IN	Data Raw: d6 5d 7b a9 93 cb 4f 20 ac e5 eb 3b 41 8c 89 7b 09 b5 84 42 90 65 4a d1 54 0c 2b 99 ef e3 0a 62 a3 9b 61 2a f8 65 69 89 39 e9 e5 4e d0 06 a3 ef 81 a8 55 3b 62 ac 10 67 54 fd 17 83 f1 14 c2 b6 e3 34 71 af 17 0f a2 2d 9f a2 c2 f7 6f 72 4e 9e a3 eb Data Ascii: ]{O ;A{BeJT+ba*ei9NU;bgT4q-orN8G7!_eulF0\fCY,XqN!EQuXbf2\|+^es01eB&\|(55fLhs8uU(Y;('3lVT$5,UDnH)
Aug 1, 2024 08:39:55.425195932 CEST	1236	IN	Data Raw: 27 84 6d 3f 46 d8 fe b8 25 46 4d 0a 75 9f 58 5e d4 75 b9 b2 c3 0c 6f 5a fa a3 72 1f ab e5 3c 32 4b 4c e5 4e 4e d6 81 86 79 a6 c5 35 bc 4c 4b 9f 0d be 93 40 b9 f5 c1 38 10 0e ee 9a 27 6e 3f 46 d8 c1 94 58 72 24 b7 91 10 ad c9 26 50 76 d8 75 89 e8 Data Ascii: 'm?F%FMuX^uoZr<2KLNNy5LK@8'n?FXr$&Pvu#Z0DOuc^ou0D#c?7(F5Vst8zb<`5@=lCzSxBh{6tdYgPT'<B#H#N]Cg1ao[

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.9	49716	142.250.186.164	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:38:55 UTC	639	OUT	GET /adsense/domains/caf.js?abp=1&bodis=true HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://rotect.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:38:56 UTC	845	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 200591 Date: Thu, 01 Aug 2024 06:38:56 GMT Expires: Thu, 01 Aug 2024 06:38:56 GMT Cache-Control: private, max-age=3600 ETag: "17062080276732993613" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-01 06:38:56 UTC	545	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 34 38 31 37 30 33 37 34 34 32 39 33 38 39 35 34 32 39 37 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 33 2c 31 37 33 30 31 34 33 31 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"14817037442938954297",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301431,173
2024-08-01 06:38:56 UTC	1390	IN	Data Raw: 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 Data Ascii: ProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQs
2024-08-01 06:38:56 UTC	1390	IN	Data Raw: 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 Data Ascii: r d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array F
2024-08-01 06:38:56 UTC	1390	IN	Data Raw: 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b 63 5d 3b 61 2e 4a 67 3d 62 2e 70 72 6f 74 6f 74 79 70 65 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 29 7b 74 68 69 73 2e 58 61 3d 21 31 3b 74 68 69 73 2e 6a 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 45 64 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 70 61 3d 31 3b 74 68 69 73 2e 53 64 3d 74 68 69 73 2e 79 62 3d 30 3b 74 68 69 73 2e 72 61 3d 6e 75 6c 6c Data Ascii: r c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.Jg=b.prototype}function qa(){this.Xa=!1;this.ja=null;this.Ed=void 0;this.pa=1;this.Sd=this.yb=0;this.ra=null
2024-08-01 06:38:56 UTC	1390	IN	Data Raw: 43 2e 72 61 3b 61 2e 43 2e 72 61 3d 6e 75 6c 6c 3b 69 66 28 62 2e 51 66 29 74 68 72 6f 77 20 62 2e 79 66 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 2e 72 65 74 75 72 6e 2c 64 6f 6e 65 3a 21 30 7d 7d 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 29 7b 74 68 69 73 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 63 62 28 62 29 7d 3b 74 68 69 73 2e 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 69 62 28 62 29 7d 3b 74 68 69 73 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 77 61 28 61 2c 62 29 7d 3b 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 Data Ascii: C.ra;a.C.ra=null;if(b.Qf)throw b.yf;return{value:b.return,done:!0}}return{value:void 0,done:!0}}function xa(a){this.next=function(b){return a.cb(b)};this.throw=function(b){return a.ib(b)};this.return=function(b){return wa(a,b)};this[Symbol.iterator]=funct
2024-08-01 06:38:56 UTC	1390	IN	Data Raw: 63 74 69 6f 6e 28 67 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 70 64 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 65 20 74 6f 20 69 74 73 65 6c 66 22 29 29 3b 65 6c 73 65 20 69 66 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 69 73 2e 41 67 28 67 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 71 67 28 67 29 3a 74 68 69 73 2e 56 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 Data Ascii: ction(g){if(g===this)this.pd(new TypeError("A Promise cannot resolve to itself"));else if(g instanceof b)this.Ag(g);else{a:switch(typeof g){case "object":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.qg(g):this.Vd(g)}};b.prototyp
2024-08-01 06:38:56 UTC	1390	IN	Data Raw: 63 28 29 3b 74 72 79 7b 67 2e 63 61 6c 6c 28 68 2c 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 72 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 72 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 75 29 7b 74 72 79 7b 6c 28 72 28 75 29 29 7d 63 61 74 63 68 28 76 29 7b 6d 28 76 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 78 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f Data Ascii: c();try{g.call(h,k.resolve,k.reject)}catch(l){k.reject(l)}};b.prototype.then=function(g,h){function k(r,t){return typeof r=="function"?function(u){try{l(r(u))}catch(v){m(v)}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.xb(k(g,l),k(h,m));return p};b.pro
2024-08-01 06:38:56 UTC	1390	IN	Data Raw: 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 20 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 41 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 62 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: r l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}}function c(){}function d(k){var l=typeof k;return l==="object"&&k!==null\|\|l==="function"}function e(k){if(!Aa(k,g)){var l=new c;ba(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(
2024-08-01 06:38:56 UTC	1390	IN	Data Raw: 2e 73 65 74 28 6b 2c 6c 29 29 3a 6c 3d 22 70 5f 22 2b 6b 3b 76 61 72 20 6d 3d 68 5b 30 5d 5b 6c 5d 3b 69 66 28 6d 26 26 41 61 28 68 5b 30 5d 2c 6c 29 29 66 6f 72 28 68 3d 30 3b 68 3c 6d 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 7b 76 61 72 20 70 3d 6d 5b 68 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 70 2e 6b 65 79 21 3d 3d 70 2e 6b 65 79 7c 7c 6b 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 4d 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 4d 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 77 28 68 29 3b 66 Data Ascii: .set(k,l)):l="p_"+k;var m=h[0][l];if(m&&Aa(h[0],l))for(h=0;h<m.length;h++){var p=m[h];if(k!==k&&p.key!==p.key\|\|k===p.key)return{id:l,list:m,index:h,M:p}}return{id:l,list:m,index:-1,M:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=w(h);f
2024-08-01 06:38:56 UTC	1390	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 5b 68 2e 6b 65 79 2c 68 2e 76 61 6c 75 65 5d 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c Data Ascii: prototype.entries=function(){return c(this,function(h){return[h.key,h.value]})};e.prototype.keys=function(){return c(this,function(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.9	49723	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:38:58 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-01 06:38:58 UTC	465	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0712) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=1484 Date: Thu, 01 Aug 2024 06:38:58 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.9	49724	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:38:59 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-01 06:38:59 UTC	513	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=1516 Date: Thu, 01 Aug 2024 06:38:59 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-01 06:38:59 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.9	49727	156.146.33.138	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:00 UTC	545	OUT	GET /delivery/js/cmp_en.min.js HTTP/1.1 Host: cdn.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:00 UTC	642	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:00 GMT Content-Type: application/javascript Content-Length: 443763 Connection: close Last-Modified: Tue, 16 Jul 2024 20:06:22 GMT ETag: "6c573-61d62e12bab80" Cache-Control: max-age=86400 Expires: Wed, 17 Jul 2024 20:06:56 GMT Edge-Control: max-age=86400 X-77-NZT: EgwBnJIhiAH30ZIAAAwBJRPCNAH3fAkAAA X-77-NZT-Ray: f6587a1d54061bdd842dab66e3270b1f X-Accel-Expires: @1722542831 X-Accel-Date: 1722456755 X-77-Cache: HIT X-77-Age: 37585 Vary: Accept-Encoding Server: CDN77-Turbo X-Accel-Date-Max: 1721162844 X-Cache: HIT X-Age: 37585 X-77-POP: frankfurtDE Accept-Ranges: bytes
2024-08-01 06:39:00 UTC	15742	IN	Data Raw: 77 69 6e 64 6f 77 2e 63 6d 70 63 63 73 76 65 72 73 69 6f 6e 62 75 69 6c 64 3d 22 32 30 32 34 2d 37 2d 31 36 2e 32 30 2e 36 22 3b 69 66 28 21 28 22 72 70 6c 22 20 69 6e 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 29 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 72 70 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 63 2e 73 70 6c 69 74 28 61 29 2e 6a 6f 69 6e 28 62 29 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 66 61 6c 73 65 7d 29 7d 69 66 28 21 28 22 63 6d 70 5f 75 6e 71 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 75 6e 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 Data Ascii: window.cmpccsversionbuild="2024-7-16.20.6";if(!("rpl" in String.prototype)){Object.defineProperty(String.prototype,"rpl",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("cmp_unq" in window)){window.cmp_unq=function(a){re
2024-08-01 06:39:00 UTC	16384	IN	Data Raw: 6e 67 4e 6f 74 69 63 65 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 53 61 6c 65 4f 70 74 4f 75 74 4e 6f 74 69 63 65 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 54 61 72 67 65 74 65 64 41 64 76 65 72 74 69 73 69 6e 67 4f 70 74 4f 75 74 4e 6f 74 69 63 65 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 53 61 6c 65 4f 70 74 4f 75 74 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 54 61 72 67 65 74 65 64 41 64 76 65 72 74 69 73 69 6e 67 4f 70 74 4f 75 74 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 53 65 6e 73 69 74 69 76 65 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 22 2c 22 6e 62 69 74 73 22 2c 38 2c 30 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 4b 6e 6f 77 6e 43 68 69 6c 64 Data Ascii: ngNotice","int",2).addField("SaleOptOutNotice","int",2).addField("TargetedAdvertisingOptOutNotice","int",2).addField("SaleOptOut","int",2).addField("TargetedAdvertisingOptOut","int",2).addField("SensitiveDataProcessing","nbits",8,0,2).addField("KnownChild
2024-08-01 06:39:00 UTC	16384	IN	Data Raw: 69 65 6c 64 28 74 68 69 73 2e 50 75 72 70 6f 73 65 73 41 6c 6c 6f 77 65 64 2c 32 34 29 3b 6c 2e 77 72 69 74 65 42 69 74 46 69 65 6c 64 28 74 68 69 73 2e 50 75 72 70 6f 73 65 73 4c 49 2c 32 34 29 3b 6c 2e 77 72 69 74 65 42 6f 6f 6c 28 74 68 69 73 2e 50 75 72 70 6f 73 65 4f 6e 65 54 72 65 61 74 6d 65 6e 74 29 3b 69 66 28 74 68 69 73 2e 50 75 62 6c 69 73 68 65 72 43 43 2e 6c 65 6e 67 74 68 21 3d 32 29 7b 74 68 69 73 2e 50 75 62 6c 69 73 68 65 72 43 43 3d 22 45 55 22 7d 6c 2e 77 72 69 74 65 4c 61 6e 67 28 74 68 69 73 2e 50 75 62 6c 69 73 68 65 72 43 43 29 3b 6c 2e 77 72 69 74 65 42 69 74 46 69 65 6c 64 4f 72 52 61 6e 67 65 28 74 68 69 73 2e 56 65 6e 64 6f 72 73 41 6c 6c 6f 77 65 64 29 3b 6c 2e 77 72 69 74 65 42 69 74 46 69 65 6c 64 4f 72 52 61 6e 67 65 28 74 Data Ascii: ield(this.PurposesAllowed,24);l.writeBitField(this.PurposesLI,24);l.writeBool(this.PurposeOneTreatment);if(this.PublisherCC.length!=2){this.PublisherCC="EU"}l.writeLang(this.PublisherCC);l.writeBitFieldOrRange(this.VendorsAllowed);l.writeBitFieldOrRange(t
2024-08-01 06:39:00 UTC	16384	IN	Data Raw: 20 77 69 6e 64 6f 77 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 75 73 74 6f 6d 6c 61 6e 67 75 61 67 65 73 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 62 2e 70 75 73 68 28 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 75 73 74 6f 6d 6c 61 6e 67 75 61 67 65 73 5b 61 5d 2e 6c 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7d 7d 72 65 74 75 72 6e 20 62 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 65 74 52 54 4c 4c 61 6e 67 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5b 22 41 52 22 5d 3b 69 66 28 22 63 6d 70 5f 63 75 73 74 6f 6d 6c 61 6e 67 75 61 67 65 73 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 75 73 74 6f 6d 6c 61 6e 67 75 61 67 65 73 2e 6c 65 6e 67 Data Ascii: window){for(var a=0;a<window.cmp_customlanguages.length;a++){b.push(window.cmp_customlanguages[a].l.toUpperCase())}}return b};window.cmp_getRTLLangs=function(){var a=["AR"];if("cmp_customlanguages" in window){for(var b=0;b<window.cmp_customlanguages.leng
2024-08-01 06:39:00 UTC	16384	IN	Data Raw: 22 2b 74 68 69 73 2e 70 75 72 70 6f 73 65 53 65 6c 65 63 74 69 6f 6e 2b 22 2c 22 29 2e 69 6e 64 65 78 4f 66 28 22 2c 22 2b 69 2b 22 2c 22 29 21 3d 2d 31 7d 3b 74 68 69 73 2e 67 65 74 50 75 72 70 6f 73 65 73 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 69 66 28 74 79 70 65 6f 66 28 6c 29 21 3d 3d 22 62 6f 6f 6c 65 61 6e 22 29 7b 6c 3d 74 72 75 65 7d 76 61 72 20 6d 3d 5b 5d 3b 69 66 28 28 74 68 69 73 2e 67 65 74 49 41 42 56 65 6e 64 6f 72 49 44 28 29 3e 30 29 26 26 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 74 63 66 76 65 72 73 69 6f 6e 3e 30 7c 7c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 74 63 66 63 61 76 65 72 73 69 6f 6e 3d 3d 31 29 29 7b 6d 3d 6d 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 70 75 72 70 6f 73 65 73 32 29 3b 6d 3d 6d 2e 63 6f 6e 63 61 74 28 Data Ascii: "+this.purposeSelection+",").indexOf(","+i+",")!=-1};this.getPurposes=function(l){if(typeof(l)!=="boolean"){l=true}var m=[];if((this.getIABVendorID()>0)&&(window.cmpmngr.tcfversion>0\|\|window.cmpmngr.tcfcaversion==1)){m=m.concat(this.purposes2);m=m.concat(
2024-08-01 06:39:00 UTC	16384	IN	Data Raw: 49 6e 64 65 78 28 63 2c 64 2c 67 29 7d 69 66 28 65 3d 3d 22 6e 6f 74 69 63 65 22 29 7b 66 3d 62 3d 3d 2d 31 3f 30 3a 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 68 61 73 45 78 69 73 74 69 6e 67 43 68 6f 69 63 65 3f 31 3a 32 29 7d 65 6c 73 65 7b 69 66 28 65 3d 3d 22 6f 70 74 2d 6f 75 74 22 29 7b 66 3d 62 3d 3d 2d 31 3f 30 3a 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 67 65 74 50 75 72 70 6f 73 65 43 6f 6e 73 65 6e 74 42 79 49 6e 64 65 78 28 62 29 3f 32 3a 31 29 7d 65 6c 73 65 7b 69 66 28 65 3d 3d 22 6f 70 74 2d 69 6e 22 29 7b 66 3d 62 3d 3d 2d 31 3f 30 3a 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 67 65 74 50 75 72 70 6f 73 65 43 6f 6e 73 65 6e 74 42 79 49 6e 64 65 78 28 62 29 3f 31 3a 32 29 7d 7d 7d 72 65 74 75 72 6e 20 66 7d 3b 74 68 69 73 Data Ascii: Index(c,d,g)}if(e=="notice"){f=b==-1?0:(window.cmpmngr.hasExistingChoice?1:2)}else{if(e=="opt-out"){f=b==-1?0:(window.cmpmngr.getPurposeConsentByIndex(b)?2:1)}else{if(e=="opt-in"){f=b==-1?0:(window.cmpmngr.getPurposeConsentByIndex(b)?1:2)}}}return f};this
2024-08-01 06:39:00 UTC	16384	IN	Data Raw: 65 72 28 6a 2c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2c 66 29 7d 7d 7d 63 61 74 63 68 28 64 29 7b 7d 7d 69 66 28 67 26 26 63 3d 3d 3d 74 72 75 65 29 7b 62 72 65 61 6b 7d 7d 7d 69 66 28 77 69 6e 64 6f 77 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 29 7b 69 66 28 74 79 70 65 6f 66 28 62 29 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 62 3d 74 68 69 73 2e 67 65 74 43 4d 50 44 61 74 61 28 29 7d 74 72 79 7b 77 69 6e 64 6f 77 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 63 6d 70 45 76 65 6e 74 22 2c 7b 64 65 74 61 69 6c 3a 7b 74 79 70 65 3a 6a 2c 73 75 62 74 79 70 65 3a 66 2c 64 61 74 61 3a 62 7d 7d 29 29 7d 63 61 74 63 68 28 64 29 7b 7d 74 72 79 7b 77 69 6e 64 6f 77 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 Data Ascii: er(j,window.cmpmngr,f)}}}catch(d){}}if(g&&c===true){break}}}if(window.dispatchEvent){if(typeof(b)=="undefined"){b=this.getCMPData()}try{window.dispatchEvent(new CustomEvent("cmpEvent",{detail:{type:j,subtype:f,data:b}}))}catch(d){}try{window.dispatchEvent
2024-08-01 06:39:00 UTC	16384	IN	Data Raw: 6c 61 79 22 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 64 73 61 5f 44 69 73 70 6c 61 79 28 63 2c 66 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 64 65 66 61 75 6c 74 43 42 28 63 2c 66 29 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 3b 74 68 69 73 2e 5f 5f 74 63 66 61 70 69 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 2c 64 2c 63 29 7b 69 66 28 74 79 70 65 6f 66 28 61 29 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 61 3d 3d 3d 6e 75 6c 6c 29 7b 61 3d 32 7d 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 6c 6f 67 28 22 54 43 46 20 41 50 49 20 63 61 6c 6c 3a 20 20 22 2b 62 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 5f 61 70 69 28 62 2c 63 2c 64 2c 61 29 7d 3b 74 68 69 73 2e 5f 5f 63 6d 70 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c Data Ascii: lay":return this.dsa_Display(c,f);break;default:return this.defaultCB(c,f)}return false};this.__tcfapi=function(b,a,d,c){if(typeof(a)==="undefined"\|\|a===null){a=2}window.cmpmngr.log("TCF API call: "+b);return this.__api(b,c,d,a)};this.__cmp=function(c,d,
2024-08-01 06:39:00 UTC	16384	IN	Data Raw: 6e 64 6f 77 2e 67 69 6f 73 67 54 43 41 70 69 2e 73 65 74 56 69 73 69 74 6f 72 43 6f 6e 73 65 6e 74 29 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 2e 67 69 6f 73 67 54 43 41 70 69 2e 67 65 74 52 65 71 75 69 72 65 64 54 43 29 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 74 72 79 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 2e 67 69 6f 73 67 54 43 41 70 69 2e 67 65 74 52 65 71 75 69 72 65 64 54 43 28 29 3b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 67 65 74 56 65 6e 64 6f 72 43 6f 6e 73 65 6e 74 28 63 6d 70 5f 67 63 28 22 67 69 6f 73 67 22 2c 22 73 30 22 29 29 3b 62 2e 76 65 6e 64 6f 72 3d 61 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 62 2e 70 75 72 70 6f 73 65 2e 63 6f 6e 73 65 6e 74 73 29 7b 62 2e 70 75 Data Ascii: ndow.giosgTCApi.setVisitorConsent)==="function"&&typeof(window.giosgTCApi.getRequiredTC)==="function"){try{var b=window.giosgTCApi.getRequiredTC();var a=window.cmpmngr.getVendorConsent(cmp_gc("giosg","s0"));b.vendor=a;for(var d in b.purpose.consents){b.pu
2024-08-01 06:39:00 UTC	16384	IN	Data Raw: 69 73 2e 73 68 6f 77 50 72 65 76 69 65 77 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 75 74 69 6c 73 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 63 6d 70 6c 61 7a 79 6c 6f 61 64 22 29 3b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 62 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 74 68 69 73 2e 73 68 6f 77 50 72 65 76 69 65 77 28 62 5b 61 5d 29 7d 7d 3b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 4e 65 65 64 73 50 72 65 76 69 65 77 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 69 66 28 21 68 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 69 66 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 75 74 69 6c 73 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 68 2c 22 64 61 74 61 2d 63 6d 70 2d 64 6f 6e 65 Data Ascii: is.showPreviews=function(){var b=window.cmpmngr.utils.getElementsByClassName("cmplazyload");for(var a=0;a<b.length;a++){this.showPreview(b[a])}};this.elementNeedsPreview=function(h){if(!h){return false}if(window.cmpmngr.utils.hasAttribute(h,"data-cmp-done

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.9	49731	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:00 UTC	704	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.rotect.com%2F%3Fdn%3Drotect.com%26pbsubid%3Dcf37f022-d980-4854-884d-1e3949811b21%26pid%3D9POT3387I&&l=en&o=1722494338115 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:00 UTC	503	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:00 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=1; Expires=Sun, 31-Aug-2025 06:39:00 GMT; Path=/; SameSite=None; Secure last-modified: Thu, 01 Aug 2024 06:39:00 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-08-01 06:39:00 UTC	1096	IN	Data Raw: 34 33 43 0d 0a 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 7b 0d 0a 20 76 61 72 20 63 76 61 6c 20 3d 20 22 22 3b 0d 0a 20 74 72 79 7b 63 76 61 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3b 7d 63 61 74 63 68 28 65 29 7b 63 76 61 6c 20 3d 20 22 22 3b 7d 0d 0a 20 76 61 72 20 6c 20 3d 20 22 22 3b 20 69 66 28 22 63 6d 70 5f 67 65 74 6c 61 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 20 6c 20 3d 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 65 74 6c 61 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 20 7d 0d 0a 20 76 61 72 20 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 20 73 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 Data Ascii: 43C(function (){ var cval = ""; try{cval = document.cookie;}catch(e){cval = "";} var l = ""; if("cmp_getlang" in window){ l = window.cmp_getlang().toLowerCase(); } var s = document.createElement("script"); s.src = "https://a.delivery.consent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.9	49740	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:01 UTC	736	OUT	GET /delivery/cmp.php?__cmpcc=1&id=68884&o=1722494340&h=http%3A%2F%2Fww01.rotect.com%2F%3Fdn%3Drotect.com%26pbsubid%3Dcf37f022-d980-4854-884d-1e3949811b21%26pid%3D9POT3387I&&l=en&odw=0&dlt=1&l=en HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=1
2024-08-01 06:39:01 UTC	503	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:01 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=2; Expires=Thu, 01-Aug-2024 06:45:01 GMT; Path=/; SameSite=None; Secure last-modified: Thu, 01 Aug 2024 06:39:01 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-08-01 06:39:01 UTC	5469	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c
2024-08-01 06:39:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.9	49741	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:02 UTC	549	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.rotect.com%2F%3Fdn%3Drotect.com%26pbsubid%3Dcf37f022-d980-4854-884d-1e3949811b21%26pid%3D9POT3387I&&l=en&o=1722494338115 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=1
2024-08-01 06:39:02 UTC	503	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:02 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=2; Expires=Thu, 01-Aug-2024 06:45:02 GMT; Path=/; SameSite=None; Secure last-modified: Thu, 01 Aug 2024 06:39:02 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-08-01 06:39:02 UTC	949	IN	Data Raw: 33 41 45 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 64 Data Ascii: 3AEwindow.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","cd
2024-08-01 06:39:02 UTC	2903	IN	Data Raw: 42 35 30 0d 0a 44 65 66 61 75 6c 74 22 3a 30 2c 22 65 6e 61 62 6c 65 52 65 63 61 6c 6c 42 74 6e 44 65 73 69 67 6e 22 3a 31 2c 22 65 6e 61 62 6c 65 52 65 63 61 6c 6c 42 74 6e 22 3a 30 2c 22 72 65 63 61 6c 6c 42 74 6e 4c 6f 67 69 63 22 3a 30 2c 22 6c 61 79 65 72 4c 6f 67 69 63 22 3a 33 2c 22 63 73 70 62 6c 6f 63 6b 22 3a 30 2c 22 77 65 6c 63 6f 6d 65 70 72 70 73 22 3a 31 2c 22 68 69 64 65 73 74 61 63 6b 73 22 3a 30 2c 22 63 75 73 74 70 75 72 70 6f 73 65 73 22 3a 30 2c 22 63 75 73 74 76 65 6e 64 6f 72 73 22 3a 30 2c 22 69 73 6c 73 70 61 22 3a 31 2c 22 6d 73 70 61 5f 63 6f 76 65 72 22 3a 31 2c 22 6d 73 70 61 5f 6f 6f 6d 6f 64 65 22 3a 31 2c 22 6d 73 70 61 5f 73 70 6d 6f 64 65 22 3a 32 2c 22 62 6f 6f 6c 47 72 6f 75 70 43 68 6f 69 63 65 73 22 3a 31 2c 22 69 6e Data Ascii: B50Default":0,"enableRecallBtnDesign":1,"enableRecallBtn":0,"recallBtnLogic":0,"layerLogic":3,"cspblock":0,"welcomeprps":1,"hidestacks":0,"custpurposes":0,"custvendors":0,"islspa":1,"mspa_cover":1,"mspa_oomode":1,"mspa_spmode":2,"boolGroupChoices":1,"in
2024-08-01 06:39:02 UTC	1635	IN	Data Raw: 36 35 37 0d 0a 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 6c 6f 61 64 43 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 3b 76 61 72 20 68 3d 30 3b 76 61 72 20 63 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 62 2e 63 6d 70 5f 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 69 66 28 21 62 2e 63 6d 70 5f 73 63 72 69 70 74 73 5b 69 5d 2e 64 6f 6e 65 29 7b 68 2b 2b 3b 63 2e 70 75 73 68 28 62 2e 63 6d 70 5f 73 63 72 69 70 74 73 5b 69 5d 29 7d 7d 76 61 72 20 61 3d 66 61 6c 73 65 3b 69 66 28 22 63 6d 70 6d 6e 67 72 22 20 69 6e 20 62 29 7b 69 66 28 68 3e 30 29 7b 69 66 28 21 28 22 63 6d 70 5f 74 69 6d 65 72 22 20 69 6e 20 62 29 29 7b 62 2e 63 6d 70 5f 74 69 6d 65 72 3d 6e 65 77 20 44 61 74 65 28 29 Data Ascii: 657window)){window.cmp_loadCS=function(){var b=window;var h=0;var c=[];for(var i=0;i<b.cmp_scripts.length;i++){if(!b.cmp_scripts[i].done){h++;c.push(b.cmp_scripts[i])}}var a=false;if("cmpmngr" in b){if(h>0){if(!("cmp_timer" in b)){b.cmp_timer=new Date()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.9	49742	138.199.37.40	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:02 UTC	371	OUT	GET /delivery/js/cmp_en.min.js HTTP/1.1 Host: cdn.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:02 UTC	642	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:02 GMT Content-Type: application/javascript Content-Length: 443763 Connection: close Last-Modified: Tue, 16 Jul 2024 20:06:22 GMT ETag: "6c573-61d62e12bab80" Cache-Control: max-age=86400 Expires: Wed, 17 Jul 2024 20:06:56 GMT Edge-Control: max-age=86400 X-77-NZT: EgwBisclJwH39Y0AAAwBJRPCNAH338sAAA X-77-NZT-Ray: 43862e2434856e76862dab66565e8b1a X-Accel-Expires: @1722542831 X-Accel-Date: 1722458001 X-77-Cache: HIT X-77-Age: 36341 Vary: Accept-Encoding Server: CDN77-Turbo X-Accel-Date-Max: 1722335820 X-Cache: HIT X-Age: 36341 X-77-POP: frankfurtDE Accept-Ranges: bytes
2024-08-01 06:39:02 UTC	15742	IN	Data Raw: 77 69 6e 64 6f 77 2e 63 6d 70 63 63 73 76 65 72 73 69 6f 6e 62 75 69 6c 64 3d 22 32 30 32 34 2d 37 2d 31 36 2e 32 30 2e 36 22 3b 69 66 28 21 28 22 72 70 6c 22 20 69 6e 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 29 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 72 70 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 63 2e 73 70 6c 69 74 28 61 29 2e 6a 6f 69 6e 28 62 29 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 66 61 6c 73 65 7d 29 7d 69 66 28 21 28 22 63 6d 70 5f 75 6e 71 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 75 6e 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 Data Ascii: window.cmpccsversionbuild="2024-7-16.20.6";if(!("rpl" in String.prototype)){Object.defineProperty(String.prototype,"rpl",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("cmp_unq" in window)){window.cmp_unq=function(a){re
2024-08-01 06:39:02 UTC	16384	IN	Data Raw: 6e 67 4e 6f 74 69 63 65 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 53 61 6c 65 4f 70 74 4f 75 74 4e 6f 74 69 63 65 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 54 61 72 67 65 74 65 64 41 64 76 65 72 74 69 73 69 6e 67 4f 70 74 4f 75 74 4e 6f 74 69 63 65 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 53 61 6c 65 4f 70 74 4f 75 74 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 54 61 72 67 65 74 65 64 41 64 76 65 72 74 69 73 69 6e 67 4f 70 74 4f 75 74 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 53 65 6e 73 69 74 69 76 65 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 22 2c 22 6e 62 69 74 73 22 2c 38 2c 30 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 4b 6e 6f 77 6e 43 68 69 6c 64 Data Ascii: ngNotice","int",2).addField("SaleOptOutNotice","int",2).addField("TargetedAdvertisingOptOutNotice","int",2).addField("SaleOptOut","int",2).addField("TargetedAdvertisingOptOut","int",2).addField("SensitiveDataProcessing","nbits",8,0,2).addField("KnownChild
2024-08-01 06:39:02 UTC	16384	IN	Data Raw: 69 65 6c 64 28 74 68 69 73 2e 50 75 72 70 6f 73 65 73 41 6c 6c 6f 77 65 64 2c 32 34 29 3b 6c 2e 77 72 69 74 65 42 69 74 46 69 65 6c 64 28 74 68 69 73 2e 50 75 72 70 6f 73 65 73 4c 49 2c 32 34 29 3b 6c 2e 77 72 69 74 65 42 6f 6f 6c 28 74 68 69 73 2e 50 75 72 70 6f 73 65 4f 6e 65 54 72 65 61 74 6d 65 6e 74 29 3b 69 66 28 74 68 69 73 2e 50 75 62 6c 69 73 68 65 72 43 43 2e 6c 65 6e 67 74 68 21 3d 32 29 7b 74 68 69 73 2e 50 75 62 6c 69 73 68 65 72 43 43 3d 22 45 55 22 7d 6c 2e 77 72 69 74 65 4c 61 6e 67 28 74 68 69 73 2e 50 75 62 6c 69 73 68 65 72 43 43 29 3b 6c 2e 77 72 69 74 65 42 69 74 46 69 65 6c 64 4f 72 52 61 6e 67 65 28 74 68 69 73 2e 56 65 6e 64 6f 72 73 41 6c 6c 6f 77 65 64 29 3b 6c 2e 77 72 69 74 65 42 69 74 46 69 65 6c 64 4f 72 52 61 6e 67 65 28 74 Data Ascii: ield(this.PurposesAllowed,24);l.writeBitField(this.PurposesLI,24);l.writeBool(this.PurposeOneTreatment);if(this.PublisherCC.length!=2){this.PublisherCC="EU"}l.writeLang(this.PublisherCC);l.writeBitFieldOrRange(this.VendorsAllowed);l.writeBitFieldOrRange(t
2024-08-01 06:39:02 UTC	16384	IN	Data Raw: 20 77 69 6e 64 6f 77 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 75 73 74 6f 6d 6c 61 6e 67 75 61 67 65 73 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 62 2e 70 75 73 68 28 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 75 73 74 6f 6d 6c 61 6e 67 75 61 67 65 73 5b 61 5d 2e 6c 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7d 7d 72 65 74 75 72 6e 20 62 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 65 74 52 54 4c 4c 61 6e 67 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5b 22 41 52 22 5d 3b 69 66 28 22 63 6d 70 5f 63 75 73 74 6f 6d 6c 61 6e 67 75 61 67 65 73 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 75 73 74 6f 6d 6c 61 6e 67 75 61 67 65 73 2e 6c 65 6e 67 Data Ascii: window){for(var a=0;a<window.cmp_customlanguages.length;a++){b.push(window.cmp_customlanguages[a].l.toUpperCase())}}return b};window.cmp_getRTLLangs=function(){var a=["AR"];if("cmp_customlanguages" in window){for(var b=0;b<window.cmp_customlanguages.leng
2024-08-01 06:39:02 UTC	16384	IN	Data Raw: 22 2b 74 68 69 73 2e 70 75 72 70 6f 73 65 53 65 6c 65 63 74 69 6f 6e 2b 22 2c 22 29 2e 69 6e 64 65 78 4f 66 28 22 2c 22 2b 69 2b 22 2c 22 29 21 3d 2d 31 7d 3b 74 68 69 73 2e 67 65 74 50 75 72 70 6f 73 65 73 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 69 66 28 74 79 70 65 6f 66 28 6c 29 21 3d 3d 22 62 6f 6f 6c 65 61 6e 22 29 7b 6c 3d 74 72 75 65 7d 76 61 72 20 6d 3d 5b 5d 3b 69 66 28 28 74 68 69 73 2e 67 65 74 49 41 42 56 65 6e 64 6f 72 49 44 28 29 3e 30 29 26 26 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 74 63 66 76 65 72 73 69 6f 6e 3e 30 7c 7c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 74 63 66 63 61 76 65 72 73 69 6f 6e 3d 3d 31 29 29 7b 6d 3d 6d 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 70 75 72 70 6f 73 65 73 32 29 3b 6d 3d 6d 2e 63 6f 6e 63 61 74 28 Data Ascii: "+this.purposeSelection+",").indexOf(","+i+",")!=-1};this.getPurposes=function(l){if(typeof(l)!=="boolean"){l=true}var m=[];if((this.getIABVendorID()>0)&&(window.cmpmngr.tcfversion>0\|\|window.cmpmngr.tcfcaversion==1)){m=m.concat(this.purposes2);m=m.concat(
2024-08-01 06:39:02 UTC	16384	IN	Data Raw: 49 6e 64 65 78 28 63 2c 64 2c 67 29 7d 69 66 28 65 3d 3d 22 6e 6f 74 69 63 65 22 29 7b 66 3d 62 3d 3d 2d 31 3f 30 3a 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 68 61 73 45 78 69 73 74 69 6e 67 43 68 6f 69 63 65 3f 31 3a 32 29 7d 65 6c 73 65 7b 69 66 28 65 3d 3d 22 6f 70 74 2d 6f 75 74 22 29 7b 66 3d 62 3d 3d 2d 31 3f 30 3a 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 67 65 74 50 75 72 70 6f 73 65 43 6f 6e 73 65 6e 74 42 79 49 6e 64 65 78 28 62 29 3f 32 3a 31 29 7d 65 6c 73 65 7b 69 66 28 65 3d 3d 22 6f 70 74 2d 69 6e 22 29 7b 66 3d 62 3d 3d 2d 31 3f 30 3a 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 67 65 74 50 75 72 70 6f 73 65 43 6f 6e 73 65 6e 74 42 79 49 6e 64 65 78 28 62 29 3f 31 3a 32 29 7d 7d 7d 72 65 74 75 72 6e 20 66 7d 3b 74 68 69 73 Data Ascii: Index(c,d,g)}if(e=="notice"){f=b==-1?0:(window.cmpmngr.hasExistingChoice?1:2)}else{if(e=="opt-out"){f=b==-1?0:(window.cmpmngr.getPurposeConsentByIndex(b)?2:1)}else{if(e=="opt-in"){f=b==-1?0:(window.cmpmngr.getPurposeConsentByIndex(b)?1:2)}}}return f};this
2024-08-01 06:39:02 UTC	16384	IN	Data Raw: 65 72 28 6a 2c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2c 66 29 7d 7d 7d 63 61 74 63 68 28 64 29 7b 7d 7d 69 66 28 67 26 26 63 3d 3d 3d 74 72 75 65 29 7b 62 72 65 61 6b 7d 7d 7d 69 66 28 77 69 6e 64 6f 77 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 29 7b 69 66 28 74 79 70 65 6f 66 28 62 29 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 62 3d 74 68 69 73 2e 67 65 74 43 4d 50 44 61 74 61 28 29 7d 74 72 79 7b 77 69 6e 64 6f 77 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 63 6d 70 45 76 65 6e 74 22 2c 7b 64 65 74 61 69 6c 3a 7b 74 79 70 65 3a 6a 2c 73 75 62 74 79 70 65 3a 66 2c 64 61 74 61 3a 62 7d 7d 29 29 7d 63 61 74 63 68 28 64 29 7b 7d 74 72 79 7b 77 69 6e 64 6f 77 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 Data Ascii: er(j,window.cmpmngr,f)}}}catch(d){}}if(g&&c===true){break}}}if(window.dispatchEvent){if(typeof(b)=="undefined"){b=this.getCMPData()}try{window.dispatchEvent(new CustomEvent("cmpEvent",{detail:{type:j,subtype:f,data:b}}))}catch(d){}try{window.dispatchEvent
2024-08-01 06:39:02 UTC	16384	IN	Data Raw: 6c 61 79 22 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 64 73 61 5f 44 69 73 70 6c 61 79 28 63 2c 66 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 64 65 66 61 75 6c 74 43 42 28 63 2c 66 29 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 3b 74 68 69 73 2e 5f 5f 74 63 66 61 70 69 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 61 2c 64 2c 63 29 7b 69 66 28 74 79 70 65 6f 66 28 61 29 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 61 3d 3d 3d 6e 75 6c 6c 29 7b 61 3d 32 7d 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 6c 6f 67 28 22 54 43 46 20 41 50 49 20 63 61 6c 6c 3a 20 20 22 2b 62 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 5f 61 70 69 28 62 2c 63 2c 64 2c 61 29 7d 3b 74 68 69 73 2e 5f 5f 63 6d 70 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c Data Ascii: lay":return this.dsa_Display(c,f);break;default:return this.defaultCB(c,f)}return false};this.__tcfapi=function(b,a,d,c){if(typeof(a)==="undefined"\|\|a===null){a=2}window.cmpmngr.log("TCF API call: "+b);return this.__api(b,c,d,a)};this.__cmp=function(c,d,
2024-08-01 06:39:02 UTC	16384	IN	Data Raw: 6e 64 6f 77 2e 67 69 6f 73 67 54 43 41 70 69 2e 73 65 74 56 69 73 69 74 6f 72 43 6f 6e 73 65 6e 74 29 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 2e 67 69 6f 73 67 54 43 41 70 69 2e 67 65 74 52 65 71 75 69 72 65 64 54 43 29 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 74 72 79 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 2e 67 69 6f 73 67 54 43 41 70 69 2e 67 65 74 52 65 71 75 69 72 65 64 54 43 28 29 3b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 67 65 74 56 65 6e 64 6f 72 43 6f 6e 73 65 6e 74 28 63 6d 70 5f 67 63 28 22 67 69 6f 73 67 22 2c 22 73 30 22 29 29 3b 62 2e 76 65 6e 64 6f 72 3d 61 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 62 2e 70 75 72 70 6f 73 65 2e 63 6f 6e 73 65 6e 74 73 29 7b 62 2e 70 75 Data Ascii: ndow.giosgTCApi.setVisitorConsent)==="function"&&typeof(window.giosgTCApi.getRequiredTC)==="function"){try{var b=window.giosgTCApi.getRequiredTC();var a=window.cmpmngr.getVendorConsent(cmp_gc("giosg","s0"));b.vendor=a;for(var d in b.purpose.consents){b.pu
2024-08-01 06:39:02 UTC	16384	IN	Data Raw: 69 73 2e 73 68 6f 77 50 72 65 76 69 65 77 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 75 74 69 6c 73 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 63 6d 70 6c 61 7a 79 6c 6f 61 64 22 29 3b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 62 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 74 68 69 73 2e 73 68 6f 77 50 72 65 76 69 65 77 28 62 5b 61 5d 29 7d 7d 3b 74 68 69 73 2e 65 6c 65 6d 65 6e 74 4e 65 65 64 73 50 72 65 76 69 65 77 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 69 66 28 21 68 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 69 66 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 75 74 69 6c 73 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 68 2c 22 64 61 74 61 2d 63 6d 70 2d 64 6f 6e 65 Data Ascii: is.showPreviews=function(){var b=window.cmpmngr.utils.getElementsByClassName("cmplazyload");for(var a=0;a<b.length;a++){this.showPreview(b[a])}};this.elementNeedsPreview=function(h){if(!h){return false}if(window.cmpmngr.utils.hasAttribute(h,"data-cmp-done

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.9	49744	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:02 UTC	562	OUT	GET /delivery/cmp.php?__cmpcc=1&id=68884&o=1722494340&h=http%3A%2F%2Fww01.rotect.com%2F%3Fdn%3Drotect.com%26pbsubid%3Dcf37f022-d980-4854-884d-1e3949811b21%26pid%3D9POT3387I&&l=en&odw=0&dlt=1&l=en HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=2
2024-08-01 06:39:02 UTC	503	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:02 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=3; Expires=Thu, 01-Aug-2024 06:45:02 GMT; Path=/; SameSite=None; Secure last-modified: Thu, 01 Aug 2024 06:39:02 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-08-01 06:39:02 UTC	949	IN	Data Raw: 33 41 45 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 64 Data Ascii: 3AEwindow.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","cd
2024-08-01 06:39:02 UTC	4532	IN	Data Raw: 31 31 41 37 0d 0a 44 65 66 61 75 6c 74 22 3a 30 2c 22 65 6e 61 62 6c 65 52 65 63 61 6c 6c 42 74 6e 44 65 73 69 67 6e 22 3a 31 2c 22 65 6e 61 62 6c 65 52 65 63 61 6c 6c 42 74 6e 22 3a 30 2c 22 72 65 63 61 6c 6c 42 74 6e 4c 6f 67 69 63 22 3a 30 2c 22 6c 61 79 65 72 4c 6f 67 69 63 22 3a 33 2c 22 63 73 70 62 6c 6f 63 6b 22 3a 30 2c 22 77 65 6c 63 6f 6d 65 70 72 70 73 22 3a 31 2c 22 68 69 64 65 73 74 61 63 6b 73 22 3a 30 2c 22 63 75 73 74 70 75 72 70 6f 73 65 73 22 3a 30 2c 22 63 75 73 74 76 65 6e 64 6f 72 73 22 3a 30 2c 22 69 73 6c 73 70 61 22 3a 31 2c 22 6d 73 70 61 5f 63 6f 76 65 72 22 3a 31 2c 22 6d 73 70 61 5f 6f 6f 6d 6f 64 65 22 3a 31 2c 22 6d 73 70 61 5f 73 70 6d 6f 64 65 22 3a 32 2c 22 62 6f 6f 6c 47 72 6f 75 70 43 68 6f 69 63 65 73 22 3a 31 2c 22 69 Data Ascii: 11A7Default":0,"enableRecallBtnDesign":1,"enableRecallBtn":0,"recallBtnLogic":0,"layerLogic":3,"cspblock":0,"welcomeprps":1,"hidestacks":0,"custpurposes":0,"custvendors":0,"islspa":1,"mspa_cover":1,"mspa_oomode":1,"mspa_spmode":2,"boolGroupChoices":1,"i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.9	49743	156.146.33.138	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:02 UTC	614	OUT	GET /delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfMjY.js HTTP/1.1 Host: cdn.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:03 UTC	619	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:02 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * X-XSS-Protection: 0 Expires: Thu, 01 Aug 2024 06:52:55 GMT Cache-Control: public, max-age=1800 Edge-Control: public, max-age=1800 Last-Modified: Thu, 01 Aug 2024 06:22:55 GMT X-77-NZT: EggBnJIhiAFBDAGckiEnAffHAwAA X-77-NZT-Ray: f6587a1da512673e862dab664e1f5031 X-Accel-Expires: @1722495175 X-Accel-Date: 1722493375 X-77-Cache: HIT X-77-Age: 967 Vary: Accept-Encoding Server: CDN77-Turbo X-Cache: MISS X-77-POP: frankfurtDE
2024-08-01 06:39:03 UTC	15765	IN	Data Raw: 37 62 64 61 0d 0a 69 66 28 21 28 22 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 7d 3b 7d 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 76 67 5f 6e 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 6d 70 5f 68 74 6d 6c 28 22 73 76 67 22 2c 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 78 6d 6c 6e 73 3a 73 76 67 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 76 69 65 77 42 6f 78 22 3a 22 30 20 30 20 35 31 32 20 32 35 36 22 7d 2c 20 22 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 78 29 7b 78 2e Data Ascii: 7bdaif(!("cmp_config_data" in window)){window.cmp_config_data={};}window.cmp_svg_no=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","viewBox":"0 0 512 256"}, "", function (x){x.
2024-08-01 06:39:03 UTC	16384	IN	Data Raw: 30 2e 36 32 37 2c 36 38 2e 32 36 37 20 2d 36 38 2e 32 36 36 39 39 2c 36 38 2e 32 36 37 20 7a 22 2c 22 66 69 6c 6c 22 3a 22 23 37 37 37 22 2c 22 63 6c 61 73 73 22 3a 22 63 6d 70 73 76 67 67 72 61 79 66 69 6c 6c 22 7d 29 7d 29 2e 63 68 69 6c 64 28 22 67 22 2c 20 7b 22 69 64 22 3a 22 73 76 67 5f 31 64 22 7d 2c 20 22 22 2c 20 74 72 75 65 2c 20 66 75 6e 63 74 69 6f 6e 20 28 78 29 7b 78 2e 63 68 69 6c 64 28 22 70 61 74 68 22 2c 20 7b 22 69 64 22 3a 22 70 61 74 68 33 37 35 36 22 2c 22 64 22 3a 22 6d 31 31 30 2e 39 33 33 2c 32 33 38 2e 39 33 33 6c 32 34 37 2e 34 36 37 2c 30 63 34 2e 37 31 38 39 39 2c 30 20 38 2e 35 33 32 39 39 2c 2d 33 2e 38 32 33 20 38 2e 35 33 32 39 39 2c 2d 38 2e 35 33 33 73 2d 33 2e 38 31 34 2c 2d 38 2e 35 33 32 39 39 20 2d 38 2e 35 33 32 39 Data Ascii: 0.627,68.267 -68.26699,68.267 z","fill":"#777","class":"cmpsvggrayfill"})}).child("g", {"id":"svg_1d"}, "", true, function (x){x.child("path", {"id":"path3756","d":"m110.933,238.933l247.467,0c4.71899,0 8.53299,-3.823 8.53299,-8.533s-3.814,-8.53299 -8.5329
2024-08-01 06:39:03 UTC	16384	IN	Data Raw: 76 67 5f 69 63 6f 70 72 76 35 35 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 6d 70 5f 68 74 6d 6c 28 22 73 76 67 22 2c 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 78 6d 6c 6e 73 3a 73 76 67 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 68 65 69 67 68 74 22 3a 22 33 32 70 78 22 2c 22 76 69 65 77 42 6f 78 22 3a 22 30 20 30 20 33 32 20 33 32 22 2c 22 77 69 64 74 68 22 3a 22 33 32 70 78 22 2c 22 63 6c 61 73 73 22 3a 22 63 6d 70 69 63 6f 73 76 67 66 69 6c 6c 22 7d 2c 20 22 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 78 29 7b 78 2e 63 68 69 6c 64 28 22 70 61 74 68 22 2c 20 7b 22 69 64 22 3a 22 Data Ascii: vg_icoprv55=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","height":"32px","viewBox":"0 0 32 32","width":"32px","class":"cmpicosvgfill"}, "", function (x){x.child("path", {"id":"
2024-08-01 06:39:03 UTC	16384	IN	Data Raw: 30 2c 22 6c 65 67 52 4f 57 22 3a 30 7d 2c 7b 22 69 64 22 3a 22 73 34 30 22 2c 22 77 73 69 64 22 3a 36 38 38 38 34 2c 22 6e 22 3a 22 41 6d 61 7a 6f 6e 22 2c 22 6e 6f 6e 65 75 22 3a 31 2c 22 6c 22 3a 22 5c 2f 64 65 6c 69 76 65 72 79 5c 2f 69 63 6f 6e 73 5c 2f 69 63 6f 6e 73 5f 76 34 30 2e 70 6e 67 22 2c 22 70 73 22 3a 22 63 31 2c 32 22 2c 22 63 70 22 3a 22 22 2c 22 6c 70 22 3a 22 22 2c 22 66 70 22 3a 22 22 2c 22 73 70 22 3a 22 22 2c 22 66 22 3a 22 22 2c 22 73 66 22 3a 22 22 2c 22 69 33 69 64 22 3a 30 2c 22 67 69 64 22 3a 37 2c 22 66 62 22 3a 30 2c 22 61 76 22 3a 22 22 2c 22 64 76 22 3a 22 22 2c 22 73 76 22 3a 30 2c 22 70 76 22 3a 30 2c 22 63 6f 22 3a 30 2c 22 6c 65 67 52 4f 57 22 3a 30 7d 2c 7b 22 69 64 22 3a 22 63 34 39 39 30 38 22 2c 22 77 73 69 64 22 3a Data Ascii: 0,"legROW":0},{"id":"s40","wsid":68884,"n":"Amazon","noneu":1,"l":"\/delivery\/icons\/icons_v40.png","ps":"c1,2","cp":"","lp":"","fp":"","sp":"","f":"","sf":"","i3id":0,"gid":7,"fb":0,"av":"","dv":"","sv":0,"pv":0,"co":0,"legROW":0},{"id":"c49908","wsid":
2024-08-01 06:39:03 UTC	16384	IN	Data Raw: 6f 75 20 61 72 65 20 75 73 69 6e 67 2c 20 79 6f 75 72 20 6e 6f 6e 2d 70 72 65 63 69 73 65 20 6c 6f 63 61 74 69 6f 6e 2c 20 79 6f 75 72 20 64 65 76 69 63 65 20 74 79 70 65 20 6f 72 20 77 68 69 63 68 20 63 6f 6e 74 65 6e 74 20 79 6f 75 20 61 72 65 20 28 6f 72 20 68 61 76 65 20 62 65 65 6e 29 20 69 6e 74 65 72 61 63 74 69 6e 67 20 77 69 74 68 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 74 6f 20 6c 69 6d 69 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 74 69 6d 65 73 20 61 6e 20 61 64 20 69 73 20 70 72 65 73 65 6e 74 65 64 20 74 6f 20 79 6f 75 29 2e 22 2c 22 76 22 3a 32 2c 22 74 22 3a 30 2c 22 69 22 3a 30 2c 22 63 70 22 3a 22 22 2c 22 75 70 22 3a 22 22 2c 22 67 70 70 22 3a 22 22 2c 22 69 6c 31 22 3a 22 41 20 63 61 72 20 6d 61 6e 75 66 61 63 74 75 72 65 72 Data Ascii: ou are using, your non-precise location, your device type or which content you are (or have been) interacting with (for example, to limit the number of times an ad is presented to you).","v":2,"t":0,"i":0,"cp":"","up":"","gpp":"","il1":"A car manufacturer
2024-08-01 06:39:03 UTC	16384	IN	Data Raw: 67 55 53 4f 43 44 50 41 22 3a 30 2c 22 6c 65 67 55 53 4d 54 43 44 50 41 22 3a 30 2c 22 6c 65 67 55 53 46 44 42 52 22 3a 30 2c 22 6c 65 67 55 53 57 41 44 41 22 3a 30 7d 2c 7b 22 69 64 22 3a 35 2c 22 77 73 69 64 22 3a 36 38 38 38 34 2c 22 6e 74 22 3a 22 50 72 6f 63 65 73 73 20 74 68 65 20 43 6f 6e 73 75 6d 65 72 5c 75 32 30 31 39 73 20 53 65 6e 73 69 74 69 76 65 20 44 61 74 61 20 43 6f 6e 73 69 73 74 69 6e 67 20 6f 66 20 50 65 72 73 6f 6e 61 6c 20 44 61 74 61 20 52 65 76 65 61 6c 69 6e 67 20 61 20 4d 65 6e 74 61 6c 20 6f 72 20 50 68 79 73 69 63 61 6c 20 48 65 61 6c 74 68 20 44 69 61 67 6e 6f 73 69 73 22 2c 22 64 74 22 3a 22 5b 5d 22 2c 22 76 22 3a 30 2c 22 74 22 3a 30 2c 22 69 22 3a 22 30 22 2c 22 63 70 22 3a 22 2c 2c 22 2c 22 75 70 22 3a 22 2c 2c 22 2c 22 Data Ascii: gUSOCDPA":0,"legUSMTCDPA":0,"legUSFDBR":0,"legUSWADA":0},{"id":5,"wsid":68884,"nt":"Process the Consumer\u2019s Sensitive Data Consisting of Personal Data Revealing a Mental or Physical Health Diagnosis","dt":"[]","v":0,"t":0,"i":"0","cp":",,","up":",,","
2024-08-01 06:39:03 UTC	12633	IN	Data Raw: 74 74 69 6e 67 73 20 69 6e 20 67 65 6e 65 72 61 6c 20 28 55 73 65 72 73 20 6d 61 79 20 6f 70 65 6e 20 74 68 65 20 64 65 76 69 63 65 20 73 65 74 74 69 6e 67 73 20 61 6e 64 20 6c 6f 6f 6b 20 66 6f 72 20 74 68 65 20 72 65 6c 65 76 61 6e 74 20 73 65 74 74 69 6e 67 29 2e 3c 5c 2f 70 3e 5c 72 5c 6e 3c 68 34 3e 48 6f 77 20 74 6f 20 6f 70 74 20 6f 75 74 20 6f 66 20 69 6e 74 65 72 65 73 74 2d 62 61 73 65 64 20 61 64 76 65 72 74 69 73 69 6e 67 3c 5c 2f 68 34 3e 5c 72 5c 6e 3c 70 3e 4e 6f 74 77 69 74 68 73 74 61 6e 64 69 6e 67 20 74 68 65 20 61 62 6f 76 65 2c 20 55 73 65 72 73 20 6d 61 79 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 70 72 6f 76 69 64 65 64 20 62 79 20 3c 61 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 72 65 Data Ascii: ttings in general (Users may open the device settings and look for the relevant setting).<\/p>\r\n<h4>How to opt out of interest-based advertising<\/h4>\r\n<p>Notwithstanding the above, Users may follow the instructions provided by <a target=\"_blank\" re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.9	49745	138.199.37.40	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:03 UTC	440	OUT	GET /delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfMjY.js HTTP/1.1 Host: cdn.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:04 UTC	619	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:04 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * X-XSS-Protection: 0 Expires: Thu, 01 Aug 2024 06:52:55 GMT Cache-Control: public, max-age=1800 Edge-Control: public, max-age=1800 Last-Modified: Thu, 01 Aug 2024 06:22:55 GMT X-77-NZT: EggBisclJwFBDAGckiEnAffJAwAA X-77-NZT-Ray: 43862e24dc9927b1882dab66f1ab2a01 X-Accel-Expires: @1722495175 X-Accel-Date: 1722493375 X-77-Cache: HIT X-77-Age: 969 Vary: Accept-Encoding Server: CDN77-Turbo X-Cache: MISS X-77-POP: frankfurtDE
2024-08-01 06:39:04 UTC	15765	IN	Data Raw: 31 34 33 66 0d 0a 69 66 28 21 28 22 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 7d 3b 7d 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 76 67 5f 6e 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 6d 70 5f 68 74 6d 6c 28 22 73 76 67 22 2c 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 78 6d 6c 6e 73 3a 73 76 67 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 76 69 65 77 42 6f 78 22 3a 22 30 20 30 20 35 31 32 20 32 35 36 22 7d 2c 20 22 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 78 29 7b 78 2e Data Ascii: 143fif(!("cmp_config_data" in window)){window.cmp_config_data={};}window.cmp_svg_no=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","viewBox":"0 0 512 256"}, "", function (x){x.
2024-08-01 06:39:04 UTC	16384	IN	Data Raw: 36 34 30 39 39 20 2d 33 30 2e 36 32 37 2c 36 38 2e 32 36 37 20 2d 36 38 2e 32 36 36 39 39 2c 36 38 2e 32 36 37 20 7a 22 2c 22 66 69 6c 6c 22 3a 22 23 37 37 37 22 2c 22 63 6c 61 73 73 22 3a 22 63 6d 70 73 76 67 67 72 61 79 66 69 6c 6c 22 7d 29 7d 29 2e 63 68 69 6c 64 28 22 67 22 2c 20 7b 22 69 64 22 3a 22 73 76 67 5f 31 64 22 7d 2c 20 22 22 2c 20 74 72 75 65 2c 20 66 75 6e 63 74 69 6f 6e 20 28 78 29 7b 78 2e 63 68 69 6c 64 28 22 70 61 74 68 22 2c 20 7b 22 69 64 22 3a 22 70 61 74 68 33 37 35 36 22 2c 22 64 22 3a 22 6d 31 31 30 2e 39 33 33 2c 32 33 38 2e 39 33 33 6c 32 34 37 2e 34 36 37 2c 30 63 34 2e 37 31 38 39 39 2c 30 20 38 2e 35 33 32 39 39 2c 2d 33 2e 38 32 33 20 38 2e 35 33 32 39 39 2c 2d 38 2e 35 33 33 73 2d 33 2e 38 31 34 2c 2d 38 2e 35 33 32 39 39 Data Ascii: 64099 -30.627,68.267 -68.26699,68.267 z","fill":"#777","class":"cmpsvggrayfill"})}).child("g", {"id":"svg_1d"}, "", true, function (x){x.child("path", {"id":"path3756","d":"m110.933,238.933l247.467,0c4.71899,0 8.53299,-3.823 8.53299,-8.533s-3.814,-8.53299
2024-08-01 06:39:04 UTC	16384	IN	Data Raw: 6f 77 2e 63 6d 70 5f 73 76 67 5f 69 63 6f 70 72 76 35 35 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 6d 70 5f 68 74 6d 6c 28 22 73 76 67 22 2c 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 78 6d 6c 6e 73 3a 73 76 67 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 68 65 69 67 68 74 22 3a 22 33 32 70 78 22 2c 22 76 69 65 77 42 6f 78 22 3a 22 30 20 30 20 33 32 20 33 32 22 2c 22 77 69 64 74 68 22 3a 22 33 32 70 78 22 2c 22 63 6c 61 73 73 22 3a 22 63 6d 70 69 63 6f 73 76 67 66 69 6c 6c 22 7d 2c 20 22 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 78 29 7b 78 2e 63 68 69 6c 64 28 22 70 61 74 68 22 2c Data Ascii: ow.cmp_svg_icoprv55=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","height":"32px","viewBox":"0 0 32 32","width":"32px","class":"cmpicosvgfill"}, "", function (x){x.child("path",
2024-08-01 06:39:04 UTC	16384	IN	Data Raw: 22 3a 30 2c 22 70 76 22 3a 30 2c 22 63 6f 22 3a 30 2c 22 6c 65 67 52 4f 57 22 3a 30 7d 2c 7b 22 69 64 22 3a 22 73 34 30 22 2c 22 77 73 69 64 22 3a 36 38 38 38 34 2c 22 6e 22 3a 22 41 6d 61 7a 6f 6e 22 2c 22 6e 6f 6e 65 75 22 3a 31 2c 22 6c 22 3a 22 5c 2f 64 65 6c 69 76 65 72 79 5c 2f 69 63 6f 6e 73 5c 2f 69 63 6f 6e 73 5f 76 34 30 2e 70 6e 67 22 2c 22 70 73 22 3a 22 63 31 2c 32 22 2c 22 63 70 22 3a 22 22 2c 22 6c 70 22 3a 22 22 2c 22 66 70 22 3a 22 22 2c 22 73 70 22 3a 22 22 2c 22 66 22 3a 22 22 2c 22 73 66 22 3a 22 22 2c 22 69 33 69 64 22 3a 30 2c 22 67 69 64 22 3a 37 2c 22 66 62 22 3a 30 2c 22 61 76 22 3a 22 22 2c 22 64 76 22 3a 22 22 2c 22 73 76 22 3a 30 2c 22 70 76 22 3a 30 2c 22 63 6f 22 3a 30 2c 22 6c 65 67 52 4f 57 22 3a 30 7d 2c 7b 22 69 64 22 3a Data Ascii: ":0,"pv":0,"co":0,"legROW":0},{"id":"s40","wsid":68884,"n":"Amazon","noneu":1,"l":"\/delivery\/icons\/icons_v40.png","ps":"c1,2","cp":"","lp":"","fp":"","sp":"","f":"","sf":"","i3id":0,"gid":7,"fb":0,"av":"","dv":"","sv":0,"pv":0,"co":0,"legROW":0},{"id":
2024-08-01 06:39:04 UTC	16384	IN	Data Raw: 77 65 62 73 69 74 65 20 6f 72 20 61 70 70 20 79 6f 75 20 61 72 65 20 75 73 69 6e 67 2c 20 79 6f 75 72 20 6e 6f 6e 2d 70 72 65 63 69 73 65 20 6c 6f 63 61 74 69 6f 6e 2c 20 79 6f 75 72 20 64 65 76 69 63 65 20 74 79 70 65 20 6f 72 20 77 68 69 63 68 20 63 6f 6e 74 65 6e 74 20 79 6f 75 20 61 72 65 20 28 6f 72 20 68 61 76 65 20 62 65 65 6e 29 20 69 6e 74 65 72 61 63 74 69 6e 67 20 77 69 74 68 20 28 66 6f 72 20 65 78 61 6d 70 6c 65 2c 20 74 6f 20 6c 69 6d 69 74 20 74 68 65 20 6e 75 6d 62 65 72 20 6f 66 20 74 69 6d 65 73 20 61 6e 20 61 64 20 69 73 20 70 72 65 73 65 6e 74 65 64 20 74 6f 20 79 6f 75 29 2e 22 2c 22 76 22 3a 32 2c 22 74 22 3a 30 2c 22 69 22 3a 30 2c 22 63 70 22 3a 22 22 2c 22 75 70 22 3a 22 22 2c 22 67 70 70 22 3a 22 22 2c 22 69 6c 31 22 3a 22 41 20 Data Ascii: website or app you are using, your non-precise location, your device type or which content you are (or have been) interacting with (for example, to limit the number of times an ad is presented to you).","v":2,"t":0,"i":0,"cp":"","up":"","gpp":"","il1":"A
2024-08-01 06:39:04 UTC	16384	IN	Data Raw: 65 67 55 53 54 44 50 53 41 22 3a 30 2c 22 6c 65 67 55 53 4f 43 44 50 41 22 3a 30 2c 22 6c 65 67 55 53 4d 54 43 44 50 41 22 3a 30 2c 22 6c 65 67 55 53 46 44 42 52 22 3a 30 2c 22 6c 65 67 55 53 57 41 44 41 22 3a 30 7d 2c 7b 22 69 64 22 3a 35 2c 22 77 73 69 64 22 3a 36 38 38 38 34 2c 22 6e 74 22 3a 22 50 72 6f 63 65 73 73 20 74 68 65 20 43 6f 6e 73 75 6d 65 72 5c 75 32 30 31 39 73 20 53 65 6e 73 69 74 69 76 65 20 44 61 74 61 20 43 6f 6e 73 69 73 74 69 6e 67 20 6f 66 20 50 65 72 73 6f 6e 61 6c 20 44 61 74 61 20 52 65 76 65 61 6c 69 6e 67 20 61 20 4d 65 6e 74 61 6c 20 6f 72 20 50 68 79 73 69 63 61 6c 20 48 65 61 6c 74 68 20 44 69 61 67 6e 6f 73 69 73 22 2c 22 64 74 22 3a 22 5b 5d 22 2c 22 76 22 3a 30 2c 22 74 22 3a 30 2c 22 69 22 3a 22 30 22 2c 22 63 70 22 3a Data Ascii: egUSTDPSA":0,"legUSOCDPA":0,"legUSMTCDPA":0,"legUSFDBR":0,"legUSWADA":0},{"id":5,"wsid":68884,"nt":"Process the Consumer\u2019s Sensitive Data Consisting of Personal Data Revealing a Mental or Physical Health Diagnosis","dt":"[]","v":0,"t":0,"i":"0","cp":
2024-08-01 06:39:04 UTC	12657	IN	Data Raw: 6c 65 20 64 65 76 69 63 65 73 2c 20 6f 72 20 63 6f 6f 6b 69 65 20 73 65 74 74 69 6e 67 73 20 69 6e 20 67 65 6e 65 72 61 6c 20 28 55 73 65 72 73 20 6d 61 79 20 6f 70 65 6e 20 74 68 65 20 64 65 76 69 63 65 20 73 65 74 74 69 6e 67 73 20 61 6e 64 20 6c 6f 6f 6b 20 66 6f 72 20 74 68 65 20 72 65 6c 65 76 61 6e 74 20 73 65 74 74 69 6e 67 29 2e 3c 5c 2f 70 3e 5c 72 5c 6e 3c 68 34 3e 48 6f 77 20 74 6f 20 6f 70 74 20 6f 75 74 20 6f 66 20 69 6e 74 65 72 65 73 74 2d 62 61 73 65 64 20 61 64 76 65 72 74 69 73 69 6e 67 3c 5c 2f 68 34 3e 5c 72 5c 6e 3c 70 3e 4e 6f 74 77 69 74 68 73 74 61 6e 64 69 6e 67 20 74 68 65 20 61 62 6f 76 65 2c 20 55 73 65 72 73 20 6d 61 79 20 66 6f 6c 6c 6f 77 20 74 68 65 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 20 70 72 6f 76 69 64 65 64 20 62 79 Data Ascii: le devices, or cookie settings in general (Users may open the device settings and look for the relevant setting).<\/p>\r\n<h4>How to opt out of interest-based advertising<\/h4>\r\n<p>Notwithstanding the above, Users may follow the instructions provided by

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.9	49746	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:03 UTC	767	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2F&o=1722494342090&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=3
2024-08-01 06:39:04 UTC	380	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:04 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Thu, 01 Aug 2024 06:39:04 GMT content-length: 43 content-type: image/gif connection: close
2024-08-01 06:39:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.9	49747	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:04 UTC	533	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2F&o=1722494342090&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=3
2024-08-01 06:39:05 UTC	380	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:05 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Thu, 01 Aug 2024 06:39:05 GMT content-length: 43 content-type: image/gif connection: close
2024-08-01 06:39:05 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.9	49726	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:15 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-08-01 06:39:15 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.9	49755	142.250.186.164	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:19 UTC	701	OUT	GET /adsense/domains/caf.js?abp=1&bodis=true HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://rotect.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=152789-152789 If-Range: "17062080276732993613"
2024-08-01 06:39:19 UTC	845	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 200582 Date: Thu, 01 Aug 2024 06:39:19 GMT Expires: Thu, 01 Aug 2024 06:39:19 GMT Cache-Control: private, max-age=3600 ETag: "11422697295923548455" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-01 06:39:19 UTC	545	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 34 38 31 37 30 33 37 34 34 32 39 33 38 39 35 34 32 39 37 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 37 2c 31 37 33 30 31 34 33 39 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"14817037442938954297",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301439,173
2024-08-01 06:39:19 UTC	1390	IN	Data Raw: 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 64 48 4a 68 62 6e 4e 73 59 Data Ascii: omain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsY
2024-08-01 06:39:19 UTC	1390	IN	Data Raw: 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 36 34 41 72 72 Data Ascii: mp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array Float64Arr
2024-08-01 06:39:19 UTC	1390	IN	Data Raw: 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b 63 5d 3b 61 2e 4a 67 3d 62 2e 70 72 6f 74 6f 74 79 70 65 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 29 7b 74 68 69 73 2e 58 61 3d 21 31 3b 74 68 69 73 2e 6a 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 45 64 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 70 61 3d 31 3b 74 68 69 73 2e 53 64 3d 74 68 69 73 2e 79 62 3d 30 3b 74 68 69 73 2e 72 61 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e Data Ascii: if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.Jg=b.prototype}function qa(){this.Xa=!1;this.ja=null;this.Ed=void 0;this.pa=1;this.Sd=this.yb=0;this.ra=null}function
2024-08-01 06:39:19 UTC	1390	IN	Data Raw: 72 61 3d 6e 75 6c 6c 3b 69 66 28 62 2e 51 66 29 74 68 72 6f 77 20 62 2e 79 66 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 2e 72 65 74 75 72 6e 2c 64 6f 6e 65 3a 21 30 7d 7d 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 29 7b 74 68 69 73 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 63 62 28 62 29 7d 3b 74 68 69 73 2e 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 69 62 28 62 29 7d 3b 74 68 69 73 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 77 61 28 61 2c 62 29 7d 3b 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: ra=null;if(b.Qf)throw b.yf;return{value:b.return,done:!0}}return{value:void 0,done:!0}}function xa(a){this.next=function(b){return a.cb(b)};this.throw=function(b){return a.ib(b)};this.return=function(b){return wa(a,b)};this[Symbol.iterator]=function(){ret
2024-08-01 06:39:20 UTC	1390	IN	Data Raw: 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 70 64 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 65 20 74 6f 20 69 74 73 65 6c 66 22 29 29 3b 65 6c 73 65 20 69 66 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 69 73 2e 41 67 28 67 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 71 67 28 67 29 3a 74 68 69 73 2e 56 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 71 67 3d 66 75 6e 63 Data Ascii: if(g===this)this.pd(new TypeError("A Promise cannot resolve to itself"));else if(g instanceof b)this.Ag(g);else{a:switch(typeof g){case "object":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.qg(g):this.Vd(g)}};b.prototype.qg=func
2024-08-01 06:39:20 UTC	1390	IN	Data Raw: 2e 63 61 6c 6c 28 68 2c 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 72 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 72 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 75 29 7b 74 72 79 7b 6c 28 72 28 75 29 29 7d 63 61 74 63 68 28 76 29 7b 6d 28 76 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 78 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 Data Ascii: .call(h,k.resolve,k.reject)}catch(l){k.reject(l)}};b.prototype.then=function(g,h){function k(r,t){return typeof r=="function"?function(u){try{l(r(u))}catch(v){m(v)}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.xb(k(g,l),k(h,m));return p};b.prototype.ca
2024-08-01 06:39:20 UTC	1390	IN	Data Raw: 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 20 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 41 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 62 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 Data Ascii: .next()).done;)l=l.value,this.set(l[0],l[1])}}function c(){}function d(k){var l=typeof k;return l==="object"&&k!==null\|\|l==="function"}function e(k){if(!Aa(k,g)){var l=new c;ba(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m i
2024-08-01 06:39:20 UTC	1390	IN	Data Raw: 29 3a 6c 3d 22 70 5f 22 2b 6b 3b 76 61 72 20 6d 3d 68 5b 30 5d 5b 6c 5d 3b 69 66 28 6d 26 26 41 61 28 68 5b 30 5d 2c 6c 29 29 66 6f 72 28 68 3d 30 3b 68 3c 6d 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 7b 76 61 72 20 70 3d 6d 5b 68 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 70 2e 6b 65 79 21 3d 3d 70 2e 6b 65 79 7c 7c 6b 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 4d 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 4d 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 77 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b Data Ascii: ):l="p_"+k;var m=h[0][l];if(m&&Aa(h[0],l))for(h=0;h<m.length;h++){var p=m[h];if(k!==k&&p.key!==p.key\|\|k===p.key)return{id:l,list:m,index:h,M:p}}return{id:l,list:m,index:-1,M:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=w(h);for(var k;
2024-08-01 06:39:20 UTC	1390	IN	Data Raw: 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 5b 68 2e 6b 65 79 2c 68 2e 76 61 6c 75 65 5d 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 Data Ascii: .entries=function(){return c(this,function(h){return[h.key,h.value]})};e.prototype.keys=function(){return c(this,function(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(va

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.9	49756	142.250.185.100	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:21 UTC	470	OUT	GET /adsense/domains/caf.js?abp=1&bodis=true HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:21 UTC	845	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 200591 Date: Thu, 01 Aug 2024 06:39:21 GMT Expires: Thu, 01 Aug 2024 06:39:21 GMT Cache-Control: private, max-age=3600 ETag: "17062080276732993613" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-01 06:39:21 UTC	545	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 68 61 73 68 3a 22 31 34 38 31 37 30 33 37 34 34 32 39 33 38 39 35 34 32 39 37 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 33 2c 31 37 33 30 31 34 33 31 2c 31 37 33 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"14817037442938954297",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301431,173
2024-08-01 06:39:21 UTC	1390	IN	Data Raw: 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 69 35 75 5a 58 51 73 Data Ascii: ProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQs
2024-08-01 06:39:21 UTC	1390	IN	Data Raw: 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 41 72 72 61 79 20 46 Data Ascii: r d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32Array F
2024-08-01 06:39:21 UTC	1390	IN	Data Raw: 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b 63 5d 3b 61 2e 4a 67 3d 62 2e 70 72 6f 74 6f 74 79 70 65 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 29 7b 74 68 69 73 2e 58 61 3d 21 31 3b 74 68 69 73 2e 6a 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 45 64 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 70 61 3d 31 3b 74 68 69 73 2e 53 64 3d 74 68 69 73 2e 79 62 3d 30 3b 74 68 69 73 2e 72 61 3d 6e 75 6c 6c Data Ascii: r c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.Jg=b.prototype}function qa(){this.Xa=!1;this.ja=null;this.Ed=void 0;this.pa=1;this.Sd=this.yb=0;this.ra=null
2024-08-01 06:39:21 UTC	1390	IN	Data Raw: 43 2e 72 61 3b 61 2e 43 2e 72 61 3d 6e 75 6c 6c 3b 69 66 28 62 2e 51 66 29 74 68 72 6f 77 20 62 2e 79 66 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 2e 72 65 74 75 72 6e 2c 64 6f 6e 65 3a 21 30 7d 7d 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 29 7b 74 68 69 73 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 63 62 28 62 29 7d 3b 74 68 69 73 2e 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 69 62 28 62 29 7d 3b 74 68 69 73 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 77 61 28 61 2c 62 29 7d 3b 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 Data Ascii: C.ra;a.C.ra=null;if(b.Qf)throw b.yf;return{value:b.return,done:!0}}return{value:void 0,done:!0}}function xa(a){this.next=function(b){return a.cb(b)};this.throw=function(b){return a.ib(b)};this.return=function(b){return wa(a,b)};this[Symbol.iterator]=funct
2024-08-01 06:39:21 UTC	1390	IN	Data Raw: 63 74 69 6f 6e 28 67 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 70 64 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 65 20 74 6f 20 69 74 73 65 6c 66 22 29 29 3b 65 6c 73 65 20 69 66 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 69 73 2e 41 67 28 67 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 71 67 28 67 29 3a 74 68 69 73 2e 56 64 28 67 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 Data Ascii: ction(g){if(g===this)this.pd(new TypeError("A Promise cannot resolve to itself"));else if(g instanceof b)this.Ag(g);else{a:switch(typeof g){case "object":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.qg(g):this.Vd(g)}};b.prototyp
2024-08-01 06:39:21 UTC	1390	IN	Data Raw: 63 28 29 3b 74 72 79 7b 67 2e 63 61 6c 6c 28 68 2c 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 72 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 72 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 75 29 7b 74 72 79 7b 6c 28 72 28 75 29 29 7d 63 61 74 63 68 28 76 29 7b 6d 28 76 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 78 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 7d 3b 62 2e 70 72 6f Data Ascii: c();try{g.call(h,k.resolve,k.reject)}catch(l){k.reject(l)}};b.prototype.then=function(g,h){function k(r,t){return typeof r=="function"?function(u){try{l(r(u))}catch(v){m(v)}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.xb(k(g,l),k(h,m));return p};b.pro
2024-08-01 06:39:21 UTC	1390	IN	Data Raw: 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 20 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 41 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 62 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: r l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}}function c(){}function d(k){var l=typeof k;return l==="object"&&k!==null\|\|l==="function"}function e(k){if(!Aa(k,g)){var l=new c;ba(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(
2024-08-01 06:39:21 UTC	1390	IN	Data Raw: 2e 73 65 74 28 6b 2c 6c 29 29 3a 6c 3d 22 70 5f 22 2b 6b 3b 76 61 72 20 6d 3d 68 5b 30 5d 5b 6c 5d 3b 69 66 28 6d 26 26 41 61 28 68 5b 30 5d 2c 6c 29 29 66 6f 72 28 68 3d 30 3b 68 3c 6d 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 7b 76 61 72 20 70 3d 6d 5b 68 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 70 2e 6b 65 79 21 3d 3d 70 2e 6b 65 79 7c 7c 6b 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 4d 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 4d 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 77 28 68 29 3b 66 Data Ascii: .set(k,l)):l="p_"+k;var m=h[0][l];if(m&&Aa(h[0],l))for(h=0;h<m.length;h++){var p=m[h];if(k!==k&&p.key!==p.key\|\|k===p.key)return{id:l,list:m,index:h,M:p}}return{id:l,list:m,index:-1,M:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=w(h);f
2024-08-01 06:39:21 UTC	1390	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 5b 68 2e 6b 65 79 2c 68 2e 76 61 6c 75 65 5d 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c Data Ascii: prototype.entries=function(){return c(this,function(h){return[h.key,h.value]})};e.prototype.keys=function(){return c(this,function(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.9	49758	142.250.184.238	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:21 UTC	1384	OUT	GET /afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol306%2Cpid-bodis-gcontrol426%2Cpid-bodis-gcontrol152%2Cpid-bodis-gcontrol202&client=dp-bodis30_3ph&r=m&hl=en&rpbu=http%3A%2F%2Frotect.com%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2898040491288658&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266&format=r3&nocache=9401722494359241&num=0&output=afd_ads&domain_name=rotect.com&v=3&bsl=8&pac=0&u_his=1&u_tz=-240&dt=1722494359242&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=816&frm=0&uio=-&cont=rs&drt=0&jsid=caf&nfp=1&jsv=652824369&rurl=http%3A%2F%2Frotect.com%2F HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: http://rotect.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:21 UTC	807	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Content-Disposition: inline Date: Thu, 01 Aug 2024 06:39:21 GMT Expires: Thu, 01 Aug 2024 06:39:21 GMT Cache-Control: private, max-age=3600 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-UoA275dLCPMKBAHCCYoUNQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Server: gws X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-08-01 06:39:21 UTC	583	IN	Data Raw: 33 35 62 35 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 20 3c 68 65 61 64 3e 20 3c 73 74 79 6c 65 20 69 64 3d 22 73 73 72 2d 62 6f 69 6c 65 72 70 6c 61 74 65 22 3e 62 6f 64 79 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 6d 61 72 67 69 6e 3a 30 3b 7d 2e 64 69 76 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 7d 2e 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 20 2e 64 69 76 3a 6c 61 73 Data Ascii: 35b5<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:las
2024-08-01 06:39:21 UTC	1390	IN	Data Raw: 69 5f 7b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 76 5f 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 Data Ascii: i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit
2024-08-01 06:39:21 UTC	1390	IN	Data Raw: 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7d 2e 6f 5f 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 7d 2e 78 5f 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 7d 2e 79 5f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 7a 2d 69 6e 64 65 78 3a 31 3b 7d 2e 6b 5f 3e 64 69 76 3a 6e 6f 74 28 2e 79 5f 29 20 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 20 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 20 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c Data Ascii: {overflow:hidden;}.o_{white-space:nowrap;}.x_{cursor:pointer;}.y_{display:none; position:absolute; z-index:1;}.k_>div:not(.y_) {display:-webkit-inline-box; display:-moz-inline-box; display:-ms-inline-flexbox; display:-webkit-inline-flex; display:inline-fl
2024-08-01 06:39:21 UTC	1390	IN	Data Raw: 74 61 72 74 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 42 6f 74 74 6f 6d 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 7d 2e 66 6c 65 78 41 6c 69 67 6e 43 65 6e 74 65 72 7b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b Data Ascii: tart; align-items:flex-start;}.flexAlignBottom{-ms-flex-align:end; -webkit-box-align:end; -webkit-align-items:flex-end; align-items:flex-end;}.flexAlignCenter{-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center;
2024-08-01 06:39:21 UTC	1390	IN	Data Raw: 3b 20 2d 6d 73 2d 66 6c 65 78 2d 6e 65 67 61 74 69 76 65 3a 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 20 30 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 7d 2e 73 69 31 30 32 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 36 70 78 3b 68 65 69 67 68 74 3a 30 70 78 3b 77 69 64 74 68 3a 30 70 78 3b 7d 2e 73 69 31 33 33 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 62 32 62 32 62 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 3b 63 6f 6c 6f 72 3a 23 39 32 39 31 39 32 3b 7d 2e 73 69 31 33 35 7b 62 61 63 Data Ascii: ; -ms-flex-negative:1;-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.si102{border-radius:16px;height:0px;width:0px;}.si133{background-color:#2b2b2b;border-radius:2px;font-size:14px;margin-bottom:5px;margin-left:10px;color:#929192;}.si135{bac
2024-08-01 06:39:21 UTC	1390	IN	Data Raw: 69 76 20 72 73 73 41 74 74 72 43 6f 6e 74 61 69 6e 65 72 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 70 5f 20 73 69 31 33 33 20 73 70 61 6e 22 3e 52 65 6c 61 74 65 64 20 73 65 61 72 63 68 65 73 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 22 65 31 22 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 20 63 6c 69 63 6b 74 72 61 63 6b 65 64 41 64 5f 6a 73 20 73 69 31 30 31 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 Data Ascii: iv rssAttrContainer" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><span class="p_ si133 span">Related searches</span></div><div id="e1" class="i_ div clicktrackedAd_js si101" style="-ms-fle
2024-08-01 06:39:21 UTC	1390	IN	Data Raw: 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 64 69 76 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 63 6c 61 73 73 3d 22 64 69 76 20 71 5f 20 73 69 31 30 32 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 66 73 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 61 64 5f 69 63 6f 6e 73 2f 73 74 61 6e 64 61 72 64 2f 70 75 62 6c 69 73 68 65 72 5f 69 63 6f 6e 5f 69 6d 61 67 65 2f 63 68 65 76 72 6f 6e 2e 73 76 67 3f 63 3d 25 32 33 30 32 31 39 38 62 22 20 61 6c 74 3d 22 22 20 6c Data Ascii: -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><div aria-hidden="true" tabindex="-1" class="div q_ si102"><img src="https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b" alt="" l
2024-08-01 06:39:21 UTC	1390	IN	Data Raw: 51 72 41 47 6e 47 35 2d 56 33 51 64 4e 26 61 6d 70 3b 70 63 73 61 3d 66 61 6c 73 65 22 20 64 61 74 61 2d 6e 62 3d 22 30 22 20 74 61 72 67 65 74 3d 22 5f 74 6f 70 22 20 63 6c 61 73 73 3d 22 69 5f 20 61 20 73 69 31 34 34 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 73 74 61 72 74 3b 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c Data Ascii: QrAGnG5-V3QdN&pcsa=false" data-nb="0" target="_top" class="i_ a si144" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;-ms-flex-pack:start; -webkit-box-pack:start; -webkit-justify-content:fl
2024-08-01 06:39:21 UTC	1390	IN	Data Raw: 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 22 3e 3c 73 70 61 6e 20 64 61 74 61 2d 6c 69 6e 65 73 3d 22 31 22 20 64 61 74 61 2d 74 72 75 6e 63 61 74 65 3d 22 30 22 20 63 6c 61 73 73 3d 22 6d 5f 20 6e 5f 20 73 69 33 34 20 73 70 61 6e 22 3e 42 69 6c 6c 69 6e 67 20 43 75 73 74 6f 6d 65 72 20 53 65 72 76 69 63 65 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 63 6c 61 73 73 3d 22 64 69 76 20 71 5f 20 73 69 31 34 33 20 77 5f 22 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 66 73 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 61 64 5f 69 63 6f 6e 73 2f 73 74 61 6e 64 61 72 64 2f 70 75 62 6c 69 73 68 65 72 5f 69 63 6f Data Ascii: gn-items:center;"><span data-lines="1" data-truncate="0" class="m_ n_ si34 span">Billing Customer Service</span></div><div aria-hidden="true" tabindex="-1" class="div q_ si143 w_"><img src="https://afs.googleusercontent.com/ad_icons/standard/publisher_ico
2024-08-01 06:39:21 UTC	1390	IN	Data Raw: 6e 74 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 20 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 5f 20 64 69 76 22 20 73 74 79 6c 65 3d 22 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 22 3e 3c 64 69 76 20 61 72 69 61 2d 68 69 64 64 65 6e Data Ascii: nt:center;-ms-flex-align:center; -webkit-box-align:center; -webkit-align-items:center; align-items:center;"><div class="i_ div" style="-ms-flex-direction:row; -webkit-box-orient:horizontal; -webkit-flex-direction:row; flex-direction:row;"><div aria-hidden

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.9	49761	216.58.206.33	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:22 UTC	745	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:22 UTC	796	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 01 Aug 2024 06:39:22 GMT Expires: Fri, 02 Aug 2024 05:39:22 GMT Cache-Control: public, max-age=82800 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-01 06:39:22 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 30 32 31 39 38 62 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#02198b' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.9	49760	216.58.206.33	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:22 UTC	758	OUT	GET /ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:22 UTC	796	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 444 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 01 Aug 2024 06:39:22 GMT Expires: Fri, 02 Aug 2024 05:39:22 GMT Cache-Control: public, max-age=82800 Last-Modified: Tue, 27 Jun 2023 17:28:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Age: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-01 06:39:22 UTC	444	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 6c 6e 73 3a 63 63 3d 22 68 74 74 70 3a 2f 2f 63 72 65 61 74 69 76 65 63 6f 6d 6d 6f 6e 73 2e 6f 72 67 2f 6e 73 23 22 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 20 78 6d 6c 6e 73 3a 73 76 67 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f Data Ascii: <svg fill='#ffffff' xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:cc="http://creativecommons.org/ns#" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:svg="http://www.w3.org/2000/svg" xmlns="http://www.w3.org/2000/svg" height="24" viewBo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.9	49764	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:22 UTC	3464	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.rotect.com%2FCustomer_Service_Support.cfm%3Fdomain%3Drotect.com%26fp%3DuQaVNjuDUF4rK4tShEs0Au0%252BUG%252FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%252BbAq91T%252BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%252F%252B4CZ7GqHID18Hn0lG8m%252FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%252FB3mB4%252F7Pf0pa30%252Bn8GQFMwchNirEiFiBbHa%252F3WXS0X4hX9tXVHEVtDO9dSxRwP87%252Fi1FveXGLDtOv0%26yep%3DuR4%252BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%252BrvZrksXCh%252FTWID06mSMUUo50%252FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%252BpDRS3gYFzynxfbhq%252FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%252BErlx0c703%252BKheAp4bPrhPs9N%252BjTikAkPjy%252BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%252BAf1DOeDKAz7sN99h%252Fl6%252BhdNNq%252FajOyXWCcl%252F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%252FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jY [TRUNCATED] Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=3
2024-08-01 06:39:23 UTC	503	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:23 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=4; Expires=Thu, 01-Aug-2024 06:45:23 GMT; Path=/; SameSite=None; Secure last-modified: Thu, 01 Aug 2024 06:39:23 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-08-01 06:39:23 UTC	2397	IN	Data Raw: 39 35 36 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 64 Data Ascii: 956window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","cd
2024-08-01 06:39:23 UTC	1455	IN	Data Raw: 35 41 38 0d 0a 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 64 65 73 69 67 6e 5f 62 6f 6f 6c 47 72 61 79 4f 75 74 57 65 62 73 69 74 65 22 3a 30 2c 22 64 65 73 69 67 6e 5f 69 6e 74 47 72 61 79 4f 75 74 43 6c 69 63 6b 42 65 68 61 76 69 6f 72 22 3a 30 2c 22 64 65 73 69 67 6e 5f 69 6e 74 43 6c 6f 73 65 43 6c 69 63 6b 42 65 68 61 76 69 6f 72 22 3a 33 2c 22 64 65 73 69 67 6e 5f 69 6e 74 53 68 6f 77 43 6c 6f 73 65 43 6c 69 63 6b 22 3a 30 2c 22 64 65 73 69 67 6e 5f 62 6f 6f 6c 43 6c 6f 73 65 50 72 65 66 53 68 6f 77 57 65 6c 63 6f 6d 65 22 3a 30 2c 22 64 65 73 69 67 6e 5f 74 6f 67 67 6c 65 22 3a 30 2c 22 64 65 73 69 67 6e 5f 74 6f 67 67 6c 65 74 78 74 22 3a 31 2c 22 64 65 73 69 67 6e 5f 6c 69 73 74 69 63 6f 6e 22 3a 30 2c 22 64 65 73 69 67 6e 5f 70 72 70 64 65 73 63 72 22 Data Ascii: 5A8osition":1,"design_boolGrayOutWebsite":0,"design_intGrayOutClickBehavior":0,"design_intCloseClickBehavior":3,"design_intShowCloseClick":0,"design_boolClosePrefShowWelcome":0,"design_toggle":0,"design_toggletxt":1,"design_listicon":0,"design_prpdescr"
2024-08-01 06:39:23 UTC	1630	IN	Data Raw: 36 35 37 0d 0a 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 6c 6f 61 64 43 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 3b 76 61 72 20 68 3d 30 3b 76 61 72 20 63 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 62 2e 63 6d 70 5f 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 69 66 28 21 62 2e 63 6d 70 5f 73 63 72 69 70 74 73 5b 69 5d 2e 64 6f 6e 65 29 7b 68 2b 2b 3b 63 2e 70 75 73 68 28 62 2e 63 6d 70 5f 73 63 72 69 70 74 73 5b 69 5d 29 7d 7d 76 61 72 20 61 3d 66 61 6c 73 65 3b 69 66 28 22 63 6d 70 6d 6e 67 72 22 20 69 6e 20 62 29 7b 69 66 28 68 3e 30 29 7b 69 66 28 21 28 22 63 6d 70 5f 74 69 6d 65 72 22 20 69 6e 20 62 29 29 7b 62 2e 63 6d 70 5f 74 69 6d 65 72 3d 6e 65 77 20 44 61 74 65 28 29 Data Ascii: 657window)){window.cmp_loadCS=function(){var b=window;var h=0;var c=[];for(var i=0;i<b.cmp_scripts.length;i++){if(!b.cmp_scripts[i].done){h++;c.push(b.cmp_scripts[i])}}var a=false;if("cmpmngr" in b){if(h>0){if(!("cmp_timer" in b)){b.cmp_timer=new Date()
2024-08-01 06:39:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.9	49765	142.250.184.238	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:23 UTC	555	OUT	GET /adsense/domains/caf.js?pac=0 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://syndicatedsearch.goog/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:23 UTC	844	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 200607 Date: Thu, 01 Aug 2024 06:39:23 GMT Expires: Thu, 01 Aug 2024 06:39:23 GMT Cache-Control: private, max-age=3600 ETag: "7748927821549157024" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-01 06:39:23 UTC	546	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 31 34 38 31 37 30 33 37 34 34 32 39 33 38 39 35 34 32 39 37 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 30 30 30 33 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"14817037442938954297",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301
2024-08-01 06:39:23 UTC	1390	IN	Data Raw: 72 75 65 2c 22 5f 75 73 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c Data Ascii: rue,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvL
2024-08-01 06:39:23 UTC	1390	IN	Data Raw: 75 72 6e 20 74 68 69 73 2e 44 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 Data Ascii: urn this.De};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array
2024-08-01 06:39:23 UTC	1390	IN	Data Raw: 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b 63 5d 3b 61 2e 4a 67 3d 62 2e 70 72 6f 74 6f 74 79 70 65 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 29 7b 74 68 69 73 2e 58 61 3d 21 31 3b 74 68 69 73 2e 6a 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 45 64 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 70 61 3d 31 3b 74 68 69 73 2e 53 64 3d 74 68 69 73 2e 79 62 Data Ascii: ,b);else for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.Jg=b.prototype}function qa(){this.Xa=!1;this.ja=null;this.Ed=void 0;this.pa=1;this.Sd=this.yb
2024-08-01 06:39:23 UTC	1390	IN	Data Raw: 69 66 28 61 2e 43 2e 72 61 29 7b 62 3d 61 2e 43 2e 72 61 3b 61 2e 43 2e 72 61 3d 6e 75 6c 6c 3b 69 66 28 62 2e 51 66 29 74 68 72 6f 77 20 62 2e 79 66 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 2e 72 65 74 75 72 6e 2c 64 6f 6e 65 3a 21 30 7d 7d 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 29 7b 74 68 69 73 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 63 62 28 62 29 7d 3b 74 68 69 73 2e 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 69 62 28 62 29 7d 3b 74 68 69 73 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 77 61 28 61 2c 62 29 7d 3b 74 68 69 73 5b 53 79 6d 62 6f 6c 2e Data Ascii: if(a.C.ra){b=a.C.ra;a.C.ra=null;if(b.Qf)throw b.yf;return{value:b.return,done:!0}}return{value:void 0,done:!0}}function xa(a){this.next=function(b){return a.cb(b)};this.throw=function(b){return a.ib(b)};this.return=function(b){return wa(a,b)};this[Symbol.
2024-08-01 06:39:23 UTC	1390	IN	Data Raw: 72 6f 74 6f 74 79 70 65 2e 72 67 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 70 64 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 65 20 74 6f 20 69 74 73 65 6c 66 22 29 29 3b 65 6c 73 65 20 69 66 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 69 73 2e 41 67 28 67 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 71 67 28 67 29 3a 74 68 69 73 2e 56 64 28 Data Ascii: rototype.rg=function(g){if(g===this)this.pd(new TypeError("A Promise cannot resolve to itself"));else if(g instanceof b)this.Ag(g);else{a:switch(typeof g){case "object":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.qg(g):this.Vd(
2024-08-01 06:39:23 UTC	1390	IN	Data Raw: 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 44 63 28 29 3b 74 72 79 7b 67 2e 63 61 6c 6c 28 68 2c 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 72 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 72 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 75 29 7b 74 72 79 7b 6c 28 72 28 75 29 29 7d 63 61 74 63 68 28 76 29 7b 6d 28 76 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 78 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b Data Ascii: h){var k=this.Dc();try{g.call(h,k.resolve,k.reject)}catch(l){k.reject(l)}};b.prototype.then=function(g,h){function k(r,t){return typeof r=="function"?function(u){try{l(r(u))}catch(v){m(v)}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.xb(k(g,l),k(h,m));
2024-08-01 06:39:23 UTC	1390	IN	Data Raw: 29 7b 6b 3d 77 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 20 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 41 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 62 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 Data Ascii: ){k=w(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}}function c(){}function d(k){var l=typeof k;return l==="object"&&k!==null\|\|l==="function"}function e(k){if(!Aa(k,g)){var l=new c;ba(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Obje
2024-08-01 06:39:23 UTC	1390	IN	Data Raw: 6b 29 3a 28 6c 3d 22 22 2b 20 2b 2b 67 2c 66 2e 73 65 74 28 6b 2c 6c 29 29 3a 6c 3d 22 70 5f 22 2b 6b 3b 76 61 72 20 6d 3d 68 5b 30 5d 5b 6c 5d 3b 69 66 28 6d 26 26 41 61 28 68 5b 30 5d 2c 6c 29 29 66 6f 72 28 68 3d 30 3b 68 3c 6d 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 7b 76 61 72 20 70 3d 6d 5b 68 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 70 2e 6b 65 79 21 3d 3d 70 2e 6b 65 79 7c 7c 6b 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 4d 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 4d 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 Data Ascii: k):(l=""+ ++g,f.set(k,l)):l="p_"+k;var m=h[0][l];if(m&&Aa(h[0],l))for(h=0;h<m.length;h++){var p=m[h];if(k!==k&&p.key!==p.key\|\|k===p.key)return{id:l,list:m,index:h,M:p}}return{id:l,list:m,index:-1,M:void 0}}function e(h){this[0]={};this[1]=b();this.size=0
2024-08-01 06:39:23 UTC	1390	IN	Data Raw: 4d 29 26 26 68 2e 76 61 6c 75 65 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 5b 68 2e 6b 65 79 2c 68 2e 76 61 6c 75 65 5d 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 Data Ascii: M)&&h.value};e.prototype.entries=function(){return c(this,function(h){return[h.key,h.value]})};e.prototype.keys=function(){return c(this,function(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.9	49767	142.250.185.193	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:23 UTC	504	OUT	GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:23 UTC	796	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 200 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 01 Aug 2024 06:39:22 GMT Expires: Fri, 02 Aug 2024 05:39:22 GMT Cache-Control: public, max-age=82800 Age: 1 Last-Modified: Thu, 02 Nov 2023 22:48:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-01 06:39:23 UTC	200	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 30 32 31 39 38 62 27 20 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 77 69 64 74 68 3d 22 32 34 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 32 34 76 32 34 48 30 7a 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 35 2e 38 38 20 34 2e 31 32 4c 31 33 2e 37 36 20 31 32 6c 2d 37 2e 38 38 20 37 2e 38 38 4c 38 20 32 32 6c 31 30 2d 31 30 4c 38 20 32 7a 22 2f 3e 3c 2f 73 76 67 3e Data Ascii: <svg fill='#02198b' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.9	49766	142.250.185.193	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:23 UTC	517	OUT	GET /ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIo7bJAQipncoBCNT9ygEIlKHLAQiFoM0BCLnKzQEIidPNAQip1c0BGOmYzQEY642lFw== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:23 UTC	796	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers Cross-Origin-Opener-Policy: same-origin; report-to="afs-native-asset-managers" Report-To: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} Content-Length: 444 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 01 Aug 2024 06:39:22 GMT Expires: Fri, 02 Aug 2024 05:39:22 GMT Cache-Control: public, max-age=82800 Age: 1 Last-Modified: Tue, 27 Jun 2023 17:28:00 GMT Content-Type: image/svg+xml Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-01 06:39:23 UTC	444	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 27 23 66 66 66 66 66 66 27 20 20 78 6d 6c 6e 73 3a 64 63 3d 22 68 74 74 70 3a 2f 2f 70 75 72 6c 2e 6f 72 67 2f 64 63 2f 65 6c 65 6d 65 6e 74 73 2f 31 2e 31 2f 22 20 78 6d 6c 6e 73 3a 63 63 3d 22 68 74 74 70 3a 2f 2f 63 72 65 61 74 69 76 65 63 6f 6d 6d 6f 6e 73 2e 6f 72 67 2f 6e 73 23 22 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 30 32 2f 32 32 2d 72 64 66 2d 73 79 6e 74 61 78 2d 6e 73 23 22 20 78 6d 6c 6e 73 3a 73 76 67 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f Data Ascii: <svg fill='#ffffff' xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:cc="http://creativecommons.org/ns#" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:svg="http://www.w3.org/2000/svg" xmlns="http://www.w3.org/2000/svg" height="24" viewBo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.9	49768	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:23 UTC	3290	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.rotect.com%2FCustomer_Service_Support.cfm%3Fdomain%3Drotect.com%26fp%3DuQaVNjuDUF4rK4tShEs0Au0%252BUG%252FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%252BbAq91T%252BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%252F%252B4CZ7GqHID18Hn0lG8m%252FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%252FB3mB4%252F7Pf0pa30%252Bn8GQFMwchNirEiFiBbHa%252F3WXS0X4hX9tXVHEVtDO9dSxRwP87%252Fi1FveXGLDtOv0%26yep%3DuR4%252BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%252BrvZrksXCh%252FTWID06mSMUUo50%252FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%252BpDRS3gYFzynxfbhq%252FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%252BErlx0c703%252BKheAp4bPrhPs9N%252BjTikAkPjy%252BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%252BAf1DOeDKAz7sN99h%252Fl6%252BhdNNq%252FajOyXWCcl%252F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%252FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jY [TRUNCATED] Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=4
2024-08-01 06:39:24 UTC	503	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:23 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=5; Expires=Thu, 01-Aug-2024 06:45:23 GMT; Path=/; SameSite=None; Secure last-modified: Thu, 01 Aug 2024 06:39:23 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-08-01 06:39:24 UTC	5469	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c
2024-08-01 06:39:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.9	49769	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:23 UTC	795	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2FCustomer_Service_Support.cfm&o=1722494362047&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=4
2024-08-01 06:39:24 UTC	380	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:24 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Thu, 01 Aug 2024 06:39:24 GMT content-length: 43 content-type: image/gif connection: close
2024-08-01 06:39:24 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.9	49770	142.250.185.206	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:24 UTC	373	OUT	GET /adsense/domains/caf.js?pac=0 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:24 UTC	845	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Content-Length: 200598 Date: Thu, 01 Aug 2024 06:39:24 GMT Expires: Thu, 01 Aug 2024 06:39:24 GMT Cache-Control: private, max-age=3600 ETag: "16340037245570850657" X-Content-Type-Options: nosniff Link: <https://syndicatedsearch.goog>; rel="preconnect" Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-08-01 06:39:24 UTC	545	IN	Data Raw: 69 66 28 21 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 29 7b 77 69 6e 64 6f 77 5b 27 67 6f 6f 67 6c 65 4e 44 54 5f 27 5d 3d 28 6e 65 77 20 44 61 74 65 28 29 29 2e 67 65 74 54 69 6d 65 28 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 41 6c 74 4c 6f 61 64 65 72 3d 33 3b 76 61 72 20 73 66 66 65 44 61 74 61 5f 3d 7b 73 65 72 76 69 63 65 5f 68 6f 73 74 3a 22 73 79 6e 64 69 63 61 74 65 64 73 65 61 72 63 68 2e 67 6f 6f 67 22 2c 68 61 73 68 3a 22 31 34 38 31 37 30 33 37 34 34 32 39 33 38 39 35 34 32 39 37 22 2c 70 61 63 6b 61 67 65 73 3a 22 64 6f 6d 61 69 6e 73 22 2c 6d 6f 64 75 6c 65 3a 22 61 64 73 22 2c 76 65 72 73 69 6f 6e 3a 22 31 22 2c 6d 3a 7b 63 65 69 3a 22 31 37 33 30 31 34 33 37 2c 31 37 33 30 31 Data Ascii: if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"14817037442938954297",packages:"domains",module:"ads",version:"1",m:{cei:"17301437,17301
2024-08-01 06:39:24 UTC	1390	IN	Data Raw: 65 53 65 72 76 65 72 50 72 6f 76 69 64 65 64 44 6f 6d 61 69 6e 22 3a 74 72 75 65 2c 22 5f 77 61 69 74 4f 6e 43 6f 6e 73 65 6e 74 46 6f 72 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 45 6e 68 61 6e 63 65 64 54 61 72 67 65 74 69 6e 67 52 73 6f 6e 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 4e 6f 6e 62 6c 6f 63 6b 69 6e 67 53 61 73 43 6f 6f 6b 69 65 22 3a 74 72 75 65 7d 2c 6d 64 70 3a 31 38 30 30 30 30 30 2c 73 73 64 6c 3a 22 59 58 42 77 63 33 42 76 64 43 35 6a 62 32 30 73 59 6d 78 76 5a 33 4e 77 62 33 51 75 59 32 39 74 4c 47 4a 79 4c 6d 4e 76 62 53 78 6a 62 79 35 6a 62 32 30 73 59 32 78 76 64 57 52 6d 63 6d 39 75 64 43 35 75 5a 58 51 73 5a 58 55 75 59 32 39 74 4c 47 68 76 63 48 52 76 4c 6d 39 79 5a 79 78 70 62 Data Ascii: eServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpb
2024-08-01 06:39:24 UTC	1390	IN	Data Raw: 2e 44 65 7d 3b 76 61 72 20 64 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 65 3d 30 3b 72 65 74 75 72 6e 20 62 7d 29 3b 0a 71 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 72 61 79 20 46 6c 6f 61 74 33 32 Data Ascii: .De};var d="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",e=0;return b});q("Symbol.iterator",function(a){if(a)return a;a=Symbol("Symbol.iterator");for(var b="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Array Float32
2024-08-01 06:39:24 UTC	1390	IN	Data Raw: 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b 63 5d 3b 61 2e 4a 67 3d 62 2e 70 72 6f 74 6f 74 79 70 65 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 29 7b 74 68 69 73 2e 58 61 3d 21 31 3b 74 68 69 73 2e 6a 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 45 64 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 70 61 3d 31 3b 74 68 69 73 2e 53 64 3d 74 68 69 73 2e 79 62 3d 30 3b 74 68 69 73 2e Data Ascii: for(var c in b)if(c!="prototype")if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.Jg=b.prototype}function qa(){this.Xa=!1;this.ja=null;this.Ed=void 0;this.pa=1;this.Sd=this.yb=0;this.
2024-08-01 06:39:24 UTC	1390	IN	Data Raw: 61 29 7b 62 3d 61 2e 43 2e 72 61 3b 61 2e 43 2e 72 61 3d 6e 75 6c 6c 3b 69 66 28 62 2e 51 66 29 74 68 72 6f 77 20 62 2e 79 66 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 2e 72 65 74 75 72 6e 2c 64 6f 6e 65 3a 21 30 7d 7d 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 29 7b 74 68 69 73 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 63 62 28 62 29 7d 3b 74 68 69 73 2e 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 69 62 28 62 29 7d 3b 74 68 69 73 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 77 61 28 61 2c 62 29 7d 3b 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 Data Ascii: a){b=a.C.ra;a.C.ra=null;if(b.Qf)throw b.yf;return{value:b.return,done:!0}}return{value:void 0,done:!0}}function xa(a){this.next=function(b){return a.cb(b)};this.throw=function(b){return a.ib(b)};this.return=function(b){return wa(a,b)};this[Symbol.iterator
2024-08-01 06:39:25 UTC	1390	IN	Data Raw: 2e 72 67 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 70 64 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 65 20 74 6f 20 69 74 73 65 6c 66 22 29 29 3b 65 6c 73 65 20 69 66 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 69 73 2e 41 67 28 67 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 22 66 75 6e 63 74 69 6f 6e 22 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 0a 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 71 67 28 67 29 3a 74 68 69 73 2e 56 64 28 67 29 7d 7d 3b 62 2e 70 Data Ascii: .rg=function(g){if(g===this)this.pd(new TypeError("A Promise cannot resolve to itself"));else if(g instanceof b)this.Ag(g);else{a:switch(typeof g){case "object":var h=g!=null;break a;case "function":h=!0;break a;default:h=!1}h?this.qg(g):this.Vd(g)}};b.p
2024-08-01 06:39:25 UTC	1390	IN	Data Raw: 3d 74 68 69 73 2e 44 63 28 29 3b 74 72 79 7b 67 2e 63 61 6c 6c 28 68 2c 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 72 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 72 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 75 29 7b 74 72 79 7b 6c 28 72 28 75 29 29 7d 63 61 74 63 68 28 76 29 7b 6d 28 76 29 7d 7d 3a 74 7d 76 61 72 20 6c 2c 6d 2c 70 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 72 2c 74 29 7b 6c 3d 72 3b 6d 3d 74 7d 29 3b 74 68 69 73 2e 78 62 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 6d 29 29 3b 72 65 74 75 72 6e 20 70 Data Ascii: =this.Dc();try{g.call(h,k.resolve,k.reject)}catch(l){k.reject(l)}};b.prototype.then=function(g,h){function k(r,t){return typeof r=="function"?function(u){try{l(r(u))}catch(v){m(v)}}:t}var l,m,p=new b(function(r,t){l=r;m=t});this.xb(k(g,l),k(h,m));return p
2024-08-01 06:39:25 UTC	1390	IN	Data Raw: 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 20 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 41 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 62 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 Data Ascii: ;for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}}function c(){}function d(k){var l=typeof k;return l==="object"&&k!==null\|\|l==="function"}function e(k){if(!Aa(k,g)){var l=new c;ba(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=fu
2024-08-01 06:39:25 UTC	1390	IN	Data Raw: 2b 20 2b 2b 67 2c 66 2e 73 65 74 28 6b 2c 6c 29 29 3a 6c 3d 22 70 5f 22 2b 6b 3b 76 61 72 20 6d 3d 68 5b 30 5d 5b 6c 5d 3b 69 66 28 6d 26 26 41 61 28 68 5b 30 5d 2c 6c 29 29 66 6f 72 28 68 3d 30 3b 68 3c 6d 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 7b 76 61 72 20 70 3d 6d 5b 68 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 70 2e 6b 65 79 21 3d 3d 70 2e 6b 65 79 7c 7c 6b 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 4d 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 0a 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 4d 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 Data Ascii: + ++g,f.set(k,l)):l="p_"+k;var m=h[0][l];if(m&&Aa(h[0],l))for(h=0;h<m.length;h++){var p=m[h];if(k!==k&&p.key!==p.key\|\|k===p.key)return{id:l,list:m,index:h,M:p}}return{id:l,list:m,index:-1,M:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h
2024-08-01 06:39:25 UTC	1390	IN	Data Raw: 6c 75 65 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 5b 68 2e 6b 65 79 2c 68 2e 76 61 6c 75 65 5d 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 Data Ascii: lue};e.prototype.entries=function(){return c(this,function(h){return[h.key,h.value]})};e.prototype.keys=function(){return c(this,function(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.value})};e.prototype.forEach=func

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.9	49771	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:24 UTC	561	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2FCustomer_Service_Support.cfm&o=1722494362047&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=5
2024-08-01 06:39:25 UTC	380	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:25 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Thu, 01 Aug 2024 06:39:25 GMT content-length: 43 content-type: image/gif connection: close
2024-08-01 06:39:25 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.9	49772	212.82.100.137	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:25 UTC	1941	OUT	GET /rdclk/dWU9OTg3NzI4NDNFMjZBNEIyQiZ1dD0xNzIyNDk0MzYxNDUwJnVvPTc4MjAyOTY4MDQ4NzgxJmx0PTImcz0yJmVzPVNfNXU0WDFqMmFYbkdOd1kuUkpWNWxFek9iSlNBMHAwb1ZLYlRYWGoyRERiMi4udTdEWEpYMHRldEhIc2xiLkdtajg5aWlqYkJ0VGpFbWt4/RV=2/RE=1725086361/RO=14/RU=https%3a%2f%2fwww.bing.com%2faclick%3fld%3de8k4YwntxTTSJ3pjCdJcEi0DVUCUylND8Iss8blWsEl4FPkDmdC3ng-dLrXBoA8SwiWe1BVTv3SRqIUTGfg6bUf8uxWk9GX-bhCR5eQuMNS7Gc1Hul4T4RotK4rsKYbESbbZSiya3k5Wm_-mEREK6PpWyTDZl_cKR_tuOa7ekdaPcCCDNR%26u%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 [TRUNCATED] Host: r.search.yahoo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:25 UTC	1924	IN	HTTP/1.1 302 Found cache-control: no-store content-length: 0 location: https://www.bing.com/aclick?ld=e8k4YwntxTTSJ3pjCdJcEi0DVUCUylND8Iss8blWsEl4FPkDmdC3ng-dLrXBoA8SwiWe1BVTv3SRqIUTGfg6bUf8uxWk9GX-bhCR5eQuMNS7Gc1Hul4T4RotK4rsKYbESbbZSiya3k5Wm_-mEREK6PpWyTDZl_cKR_tuOa7ekdaPcCCDNR&u=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&rlid=2895040d7f52114f837462a652cb27d7 date: Thu, 01 Aug 2024 06:39:25 GMT Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Server: ATS X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport Referrer-Policy: no-referrer-when-downgrade Set-Cookie: A1=d=AQABBJ0tq2YCEL_MDyb3Sp_JN1S6u6aAd5sFEgEBAQF_rGa1ZtxA0iMA_eMAAA&S=AQAAAu8j9sJ30ypCw7Wm81bvQ6w; Expires=Fri, 1 Aug 2025 12:39:25 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure; HttpOnly Set-Cookie: A3=d=AQABBJ0tq2YCEL_MDyb3Sp_JN1S6u6aAd5sFEgEBAQF_rGa1ZtxA0iMA_eMAAA&S=AQAAAu8j9sJ30ypCw7Wm81bvQ6w; Expires=Fri, 1 Aug 2025 12:39:25 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly Set-Cookie: A1S=d=AQABBJ0tq2YCEL_MDyb3Sp_JN1S6u6aAd5sFEgEBAQF_rGa1ZtxA0iMA_eMAAA&S=AQAAAu8j9sJ30ypCw7Wm81bvQ6w; Domain=.yahoo.com; Path=/; SameSite=Lax; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.9	49719	142.250.185.174	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:26 UTC	860	OUT	GET /afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=vnlpe9pke91z&aqid=mS2rZumFD-3hjuwP-r_m-AI&psid=3113057640&pbt=bs&adbx=290&adby=143&adbh=480&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=652824369&csala=4%7C0%7C1089%7C2340%7C119&lle=0&ifv=1&hpt=0 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://rotect.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:26 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-u4vLT1ZPd3mwV0DPk-oFrw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Thu, 01 Aug 2024 06:39:26 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.9	49776	142.250.185.174	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:27 UTC	860	OUT	GET /afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=m940ytxo0x3e&aqid=mS2rZumFD-3hjuwP-r_m-AI&psid=3113057640&pbt=bv&adbx=290&adby=143&adbh=480&adbw=700&adbah=153%2C153%2C153&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=652824369&csala=4%7C0%7C1089%7C2340%7C119&lle=0&ifv=1&hpt=0 HTTP/1.1 Host: syndicatedsearch.goog Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://rotect.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:27 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-vnJjGVtDhYDuRSBz66M0ww' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Thu, 01 Aug 2024 06:39:27 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.9	49781	104.18.95.41	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:29 UTC	586	OUT	GET /turnstile/v0/b/8c81cb09042c/api.js?onload=UYbeL2&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.justanswer.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:30 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:29 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 44175 Connection: close accept-ranges: bytes last-modified: Fri, 26 Jul 2024 18:15:35 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8ac3d4d47bc35e7c-EWR alt-svc: h3=":443"; ma=86400
2024-08-01 06:39:30 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 6e 2c 72 2c 6f 2c 63 2c 75 2c 79 29 7b 74 72 79 7b 76 61 72 20 5f 3d 65 5b 75 5d 28 79 29 2c 64 3d 5f 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 72 28 70 29 3b 72 65 74 75 72 6e 7d 5f 2e 64 6f 6e 65 3f 6e 28 64 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 64 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 49 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 6e 2c 72 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Rt(e,n,r,o,c,u,y){try{var _=e[u](y),d=_.value}catch(p){r(p);return}_.done?n(d):Promise.resolve(d).then(o,c)}function It(e){return function(){var n=this,r=arguments;return new Promise(function(o,c){var u=e.apply(n,r);funct
2024-08-01 06:39:30 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 43 74 28 65 2c 6e 29 7b 76 61 72 20 72 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 72 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 75 3d 21 31 2c 79 2c 5f 3b 74 72 79 7b 66 6f 72 28 72 3d 72 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 79 3d 72 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 79 2e 76 61 6c 75 65 29 2c 21 28 6e 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 6e 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function Ct(e,n){var r=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(r!=null){var o=[],c=!0,u=!1,y,_;try{for(r=r.call(e);!(c=(y=r.next()).done)&&(o.push(y.value),!(n&&o.length===n));c=!0)
2024-08-01 06:39:30 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 79 26 26 28 79 3d 30 2c 70 5b 30 5d 26 26 28 72 3d 30 29 29 2c 72 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 75 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 75 3d 63 2e 72 65 74 75 72 6e 29 26 26 75 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 75 3d 75 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 75 3b 73 77 69 74 63 68 28 63 3d 30 2c 75 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 75 2e 76 61 6c Data Ascii: ])}}function d(p){if(o)throw new TypeError("Generator is already executing.");for(;y&&(y=0,p[0]&&(r=0)),r;)try{if(o=1,c&&(u=p[0]&2?c.return:p[0]?c.throw\|\|((u=c.return)&&u.call(c),0):c.next)&&!(u=u.call(c,p[1])).done)return u;switch(c=0,u&&(p=[p[0]&2,u.val
2024-08-01 06:39:30 UTC	1369	IN	Data Raw: 7b 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 2c 65 2e 4c 49 47 48 54 3d 22 6c 69 67 68 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 7d 29 28 4c 65 7c 7c 28 4c 65 3d 7b 7d 29 29 3b 76 61 72 20 66 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 66 65 7c 7c 28 66 65 3d 7b 7d 29 29 3b 76 61 72 20 5a 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 5a 7c 7c 28 5a 3d 7b 7d 29 29 3b 76 61 72 20 6c 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 Data Ascii: {e.AUTO="auto",e.LIGHT="light",e.DARK="dark"})(Le\|\|(Le={}));var fe;(function(e){e.NEVER="never",e.AUTO="auto"})(fe\|\|(fe={}));var Z;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(Z\|\|(Z={}));var le;(function(e){e.NEVER="never",e.MANUAL="manu
2024-08-01 06:39:30 UTC	1369	IN	Data Raw: 6e 20 6c 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 5f 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 75 74 28 65 29 7b 72 65 74 75 72 6e 20 6b 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 44 74 28 65 29 7b 72 65 74 75 72 6e 20 6b 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 74 28 65 29 7b 72 65 74 75 72 6e 20 6b 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 46 74 3d 33 30 30 2c 55 74 3d 31 30 3b 76 61 72 20 59 3d 22 30 2f 30 22 3b 66 75 6e 63 74 69 6f 6e 20 64 74 28 65 29 7b 76 61 72 20 6e 3d 6e 65 77 20 55 52 4c 53 Data Ascii: n lt(e){return e==="auto"\|\|_r.test(e)}function ut(e){return k(["always","execute","interaction-only"],e)}function Dt(e){return k(["true","false"],e)}function st(e){return k(["render","execute"],e)}var Ft=300,Ut=10;var Y="0/0";function dt(e){var n=new URLS
2024-08-01 06:39:30 UTC	1369	IN	Data Raw: 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 2c 6e 29 7b 69 66 28 21 46 28 65 2c 6e 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 65 65 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 65 65 28 65 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 74 28 65 2c 6e 29 7b 69 66 28 74 79 70 65 6f 66 20 6e 21 3d 22 66 75 6e 63 74 69 6f 6e Data Ascii: er() hasn't been called");return e}function Qt(e,n){if(!F(e,n))throw new TypeError("Cannot call a class as a function")}function ee(e,n){return ee=Object.setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},ee(e,n)}function Kt(e,n){if(typeof n!="function
2024-08-01 06:39:30 UTC	1369	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 20 45 65 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 73 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 7d 72 65 74 75 72 6e 20 63 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6f 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 63 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 65 28 63 2c 6f 29 7d 2c 46 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 74 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 28 4d 28 6e 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 6e 3a 50 Data Ascii: }function c(){return Ee(o,arguments,se(this).constructor)}return c.prototype=Object.create(o.prototype,{constructor:{value:c,enumerable:!1,writable:!0,configurable:!0}}),ee(c,o)},Fe(e)}function Jt(e,n){return n&&(M(n)==="object"\|\|typeof n=="function")?n:P
2024-08-01 06:39:30 UTC	1369	IN	Data Raw: 31 26 26 28 6e 2e 70 61 72 61 6d 73 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 6f 5b 31 5d 29 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 56 28 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 3f 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 2c 6e 29 7b 76 61 72 20 72 2c 6f 2c 63 3d 70 74 28 6e 2e 70 61 72 61 6d 73 2c 21 31 29 2c 75 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 79 3d 22 22 2e 63 6f 6e 63 61 74 28 63 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e Data Ascii: 1&&(n.params=new URLSearchParams(o[1])),n}function V(){return typeof performance!="undefined"&&performance.now?performance.now():Date.now()}function mt(e,n){var r,o,c=pt(n.params,!1),u="h/".concat("b","/"),y="".concat(c,"/cdn-cgi/challenge-platform/").con
2024-08-01 06:39:30 UTC	1369	IN	Data Raw: 65 2e 6c 65 66 74 3d 22 2d 31 32 32 70 78 22 2c 64 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 2d 39 31 70 78 22 2c 64 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 65 6e 22 3b 76 61 72 20 52 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 52 2e 69 64 3d 65 2b 22 2d 66 72 22 2c 52 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 79 29 2c 52 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 6c 6c 6f 77 22 2c 22 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 69 73 6f 6c 61 74 65 64 3b 20 66 75 6c 6c 73 63 72 65 65 6e 22 29 2c 52 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 61 6e 64 62 6f 78 22 2c 22 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 Data Ascii: e.left="-122px",d.style.top="-91px",d.style.overflow="hidden";var R=document.createElement("iframe");R.id=e+"-fr",R.setAttribute("src",y),R.setAttribute("allow","cross-origin-isolated; fullscreen"),R.setAttribute("sandbox","allow-same-origin allow-scripts
2024-08-01 06:39:30 UTC	1369	IN	Data Raw: 69 6c 64 28 49 29 3b 76 61 72 20 67 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 22 6c 69 6e 65 22 29 3b 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 2d 77 69 64 74 68 22 2c 22 33 22 29 2c 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 22 2c 22 23 66 66 66 22 29 2c 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 69 6c 6c 22 2c 22 6e 6f 6e 65 22 29 2c 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 78 31 22 2c 22 36 22 29 2c 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 78 32 22 2c 22 31 38 22 29 2c 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 79 31 22 2c 22 35 22 29 2c 67 2e 73 65 74 41 74 Data Ascii: ild(I);var g=document.createElementNS("http://www.w3.org/2000/svg","line");g.setAttribute("stroke-width","3"),g.setAttribute("stroke","#fff"),g.setAttribute("fill","none"),g.setAttribute("x1","6"),g.setAttribute("x2","18"),g.setAttribute("y1","5"),g.setAt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.9	49786	104.18.95.41	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:31 UTC	413	OUT	GET /turnstile/v0/b/8c81cb09042c/api.js?onload=UYbeL2&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:31 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:31 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 44175 Connection: close accept-ranges: bytes last-modified: Fri, 26 Jul 2024 18:15:35 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8ac3d4dbc9990f99-EWR alt-svc: h3=":443"; ma=86400
2024-08-01 06:39:31 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 6e 2c 72 2c 6f 2c 63 2c 75 2c 79 29 7b 74 72 79 7b 76 61 72 20 5f 3d 65 5b 75 5d 28 79 29 2c 64 3d 5f 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 72 28 70 29 3b 72 65 74 75 72 6e 7d 5f 2e 64 6f 6e 65 3f 6e 28 64 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 64 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 49 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 6e 2c 72 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Rt(e,n,r,o,c,u,y){try{var _=e[u](y),d=_.value}catch(p){r(p);return}_.done?n(d):Promise.resolve(d).then(o,c)}function It(e){return function(){var n=this,r=arguments;return new Promise(function(o,c){var u=e.apply(n,r);funct
2024-08-01 06:39:31 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 67 72 28 65 2c 6e 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 6e 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 72 2e 70 75 73 68 2e 61 70 70 6c 79 28 72 2c 6f 29 7d 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 4b 65 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 3d 6e 21 3d 6e 75 Data Ascii: e}function gr(e,n){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);n&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),r.push.apply(r,o)}return r}function Ke(e,n){return n=n!=nu
2024-08-01 06:39:31 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 72 29 29 72 65 74 75 72 6e 20 24 65 28 65 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 78 65 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 4f 74 28 65 29 7c 7c 43 74 28 65 2c 6e 29 7c 7c 6b 74 28 65 2c 6e 29 7c 7c 4e 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 43 65 28 65 2c 6e 29 7b 76 61 72 20 72 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(r))return $e(e,n)}}function xe(e,n){return Ot(e)\|\|Ct(e,n)\|\|kt(e,n)\|\|Nt()}function M(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ce(e,n){var r={label:0,sent:function(){if(u[0
2024-08-01 06:39:31 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 4d 74 3d 33 30 30 30 32 30 3b 76 61 72 20 4e 65 3d 33 30 30 30 33 30 3b 76 61 72 20 6b 65 3d 33 30 30 30 33 31 3b 76 61 72 20 48 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Mt=300020;var Ne=300030;var ke=300031;var H;(fu
2024-08-01 06:39:31 UTC	1369	IN	Data Raw: 76 61 72 20 6d 72 3d 2f 5e 5b 30 2d 39 41 2d 5a 61 2d 7a 5f 2d 5d 7b 33 2c 31 30 30 7d 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 50 74 28 65 29 7b 72 65 74 75 72 6e 20 6d 72 2e 74 65 73 74 28 65 29 7d 76 61 72 20 68 72 3d 2f 5e 5b 61 2d 7a 30 2d 39 5f 2d 5d 7b 30 2c 33 32 7d 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 74 79 70 65 6f 66 20 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 68 72 2e 74 65 73 74 28 65 29 7d 76 61 72 20 79 72 3d 2f 5e 5b 61 2d 7a 30 2d 39 5f 5c 2d 3d 5d 7b 30 2c 32 35 35 7d 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 61 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 76 6f 69 64 20 30 3f 21 30 3a 74 79 70 65 6f 66 20 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 79 72 2e 74 65 73 Data Ascii: var mr=/^[0-9A-Za-z_-]{3,100}$/;function Pt(e){return mr.test(e)}var hr=/^[a-z0-9_-]{0,32}$/i;function nt(e){return e===void 0?!0:typeof e=="string"&&hr.test(e)}var yr=/^[a-z0-9_\-=]{0,255}$/i;function at(e){return e===void 0?!0:typeof e=="string"&&yr.tes
2024-08-01 06:39:31 UTC	1369	IN	Data Raw: 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 72 7d 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 2c 6e 2c 72 2c 6f 2c 63 2c 75 2c 79 29 7b 76 61 72 20 5f 3d 70 74 28 72 2c 63 29 2c 64 3d 75 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 75 2c 22 2f 22 29 3a 22 22 2c 70 3d 79 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 79 29 3a 22 22 2c 54 3d 72 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 22 3a 22 66 62 45 22 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 5f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 64 2c 22 74 75 72 6e 73 74 69 6c 65 2f 69 66 2f 6f 76 32 2f 61 76 30 2f 72 63 76 22 29 2e 63 Data Ascii: rl"])!==null&&o!==void 0?o:r}return r}function vt(e,n,r,o,c,u,y){var _=pt(r,c),d=u?"h/".concat(u,"/"):"",p=y?"?".concat(y):"",T=r["feedback-enabled"]===!1?"fbD":"fbE";return"".concat(_,"/cdn-cgi/challenge-platform/").concat(d,"turnstile/if/ov2/av0/rcv").c
2024-08-01 06:39:31 UTC	1369	IN	Data Raw: 65 29 7b 72 65 74 75 72 6e 20 73 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 65 74 75 72 6e 20 72 2e 5f 5f 70 72 6f 74 6f 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 72 29 7d 2c 73 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 24 74 28 65 29 7b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 46 65 28 65 29 7b 76 61 72 20 6e 3d 74 79 70 65 6f 66 20 4d 61 70 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 Data Ascii: e){return se=Object.setPrototypeOf?Object.getPrototypeOf:function(r){return r.__proto__\|\|Object.getPrototypeOf(r)},se(e)}function $t(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function Fe(e){var n=typeof Map=="function"?new Map:void
2024-08-01 06:39:31 UTC	1369	IN	Data Raw: 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 69 66 28 46 28 6e 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 6e 2e 73 72 63 29 29 72 65 74 75 72 6e 20 6e 3b 66 6f 72 28 76 61 72 20 72 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 2c 6f 3d 30 2c 63 3b 63 3d 72 5b 6f 5d 3b 6f 2b 2b 29 69 66 28 46 28 63 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 63 2e 73 72 63 29 29 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 74 72 28 29 7b 76 61 72 20 65 3d 67 74 28 29 3b 65 7c Data Ascii: var e=/\/turnstile\/v0(\/.*)?\/api\.js/,n=document.currentScript;if(F(n,HTMLScriptElement)&&e.test(n.src))return n;for(var r=document.querySelectorAll("script"),o=0,c;c=r[o];o++)if(F(c,HTMLScriptElement)&&e.test(c.src))return c}function tr(){var e=gt();e\|
2024-08-01 06:39:31 UTC	1369	IN	Data Raw: 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 72 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 50 21 3d 3d 76 6f 69 64 20 30 3f 50 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 3f 64 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 35 32 30 70 78 22 3a 6b 28 54 2c 28 57 3d 28 6f 3d 6e 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 6f 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 6f 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 57 21 3d 3d 76 6f 69 64 20 30 3f 57 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 3f 64 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 34 38 30 70 78 22 3a 64 2e 73 74 79 6c 65 2e 68 65 69 67 68 Data Ascii: anguage)===null\|\|r===void 0?void 0:r.toLowerCase())!==null&&P!==void 0?P:"nonexistent")?d.style.height="520px":k(T,(W=(o=n.displayLanguage)===null\|\|o===void 0?void 0:o.toLowerCase())!==null&&W!==void 0?W:"nonexistent")?d.style.height="480px":d.style.heigh
2024-08-01 06:39:31 UTC	1369	IN	Data Raw: 73 65 22 29 3b 53 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 79 22 2c 22 31 32 22 29 2c 53 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 72 78 22 2c 22 31 32 22 29 2c 53 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 79 22 2c 22 31 32 22 29 2c 53 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 78 22 2c 22 31 32 22 29 2c 53 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 69 6c 6c 22 2c 22 23 61 61 61 61 61 61 22 29 2c 53 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 2d 77 69 64 74 68 22 2c 22 30 22 29 2c 77 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 53 29 3b 76 61 72 20 49 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 22 Data Ascii: se");S.setAttribute("ry","12"),S.setAttribute("rx","12"),S.setAttribute("cy","12"),S.setAttribute("cx","12"),S.setAttribute("fill","#aaaaaa"),S.setAttribute("stroke-width","0"),w.appendChild(S);var I=document.createElementNS("http://www.w3.org/2000/svg","

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.9	49785	104.18.94.41	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:31 UTC	764	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t3qx4/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:31 UTC	1362	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:31 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 69947 Connection: close cross-origin-opener-policy: same-origin document-policy: js-profiling cross-origin-embedder-policy: require-corp accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA origin-agent-cluster: ?1 content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cross-origin-resource-policy: cross-origin permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy: same-origin
2024-08-01 06:39:31 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 61 63 33 64 34 64 62 63 39 64 37 31 35 63 62 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8ac3d4dbc9d715cb-EWRalt-svc: h3=":443"; ma=86400
2024-08-01 06:39:31 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-08-01 06:39:31 UTC	1369	IN	Data Raw: 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 73 79 73 74 65 Data Ascii: width: 100%; height: 100%; overflow: hidden;}body, .main-wrapper { margin: 0; background-color: #fff; padding: 0; width: 100%; height: 100%; overflow: hidden; line-height: 17px; color: #1d1f20; font-family: -apple-system, syste
2024-08-01 06:39:31 UTC	1369	IN	Data Raw: 30 3b 0a 7d 0a 0a 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 38 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 30 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 2c 20 30 2e 35 33 29 20 62 6f 74 68 3b 0a 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 36 70 78 3b 0a 20 20 73 74 72 6f 6b 65 Data Ascii: 0;}#success-icon { display: flex; margin-right: 8px; border-radius: 50%; box-shadow: inset 0 0 0 #038127; width: 30px; height: 30px; animation: scale-up-center 0.6s cubic-bezier(0.55, 0.085, 0.68, 0.53) both; stroke-width: 6px; stroke
2024-08-01 06:39:31 UTC	1369	IN	Data Raw: 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 62 2d 6c 62 20 2e 63 62 2d 69 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 62 2d 6c 62 20 69 6e 70 75 74 Data Ascii: me-dark #challenge-error-text a:hover,.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus { color: #949494;}.theme-dark .cb-lb .cb-i { border: 2px solid #dadada; background-color: #222;}.theme-dark .cb-lb input
2024-08-01 06:39:31 UTC	1369	IN	Data Raw: 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 Data Ascii: elper-loop-link { color: #bbb;}.theme-dark #fr-helper-link:visited, .theme-dark #fr-helper-link:link,.theme-dark #fr-helper-loop-link:visited,.theme-dark #fr-helper-loop-link:link { color: #bbb;}.theme-dark #fr-helper-link:active, .theme-dark #f
2024-08-01 06:39:31 UTC	1369	IN	Data Raw: 65 78 74 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 76 69 73 69 74 65 64 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 61 63 74 69 76 65 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 68 6f 76 65 72 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 0a 23 Data Ascii: ext a { color: #1d1f20;}#challenge-overlay a:visited, #challenge-overlay a:link,#challenge-error-text a:visited,#challenge-error-text a:link { color: #1d1f20;}#challenge-overlay a:active, #challenge-overlay a:hover, #challenge-overlay a:focus,#
2024-08-01 06:39:31 UTC	1369	IN	Data Raw: 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 20 7e 20 2e 63 62 2d 69 20 7b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 20 7e 20 2e 63 62 2d 69 3a 3a 61 66 74 65 72 20 7b 0a 20 20 74 6f 70 3a 20 33 70 78 3b 0a 20 20 6c 65 66 74 3a 20 38 70 78 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 62 6f 72 64 65 72 3a 20 73 6f 6c 69 64 20 23 63 34 34 64 Data Ascii: }.cb-lb input:checked ~ .cb-i { transform: rotate(0deg) scale(1); opacity: 1; border-radius: 5px; background-color: white;}.cb-lb input:checked ~ .cb-i::after { top: 3px; left: 8px; transform: rotate(45deg) scale(1); border: solid #c44d
2024-08-01 06:39:31 UTC	1369	IN	Data Raw: 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 35 70 78 20 31 36 70 78 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 65 72 6d 73 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 71 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 70 78 3b 0a 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 Data Ascii: gn-items: center; margin: 5px 16px 0; padding-right: 0; text-align: right;}.size-compact #terms { text-align: right;}.size-compact #qr { text-align: center;}.size-compact #challenge-error-title { margin-top: 3px; width: auto;}.size-c
2024-08-01 06:39:31 UTC	1369	IN	Data Raw: 74 65 72 6d 73 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 38 36 70 78 3b 0a 7d 0a 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 66 61 69 6c 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 38 36 70 78 3b 0a 7d 0a 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 73 70 69 6e 6e 65 72 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 38 36 70 78 3b 0a 7d 0a 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 69 63 6f 6e 2c 0a 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 38 Data Ascii: terms { text-align: center;}.rtl.size-compact #success-icon { left: 86px;}.rtl.size-compact #fail-icon { left: 86px;}.rtl.size-compact #spinner-icon { left: 86px;}.rtl.size-compact #timeout-icon,.rtl.size-compact #expired-icon { left: 8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.9	49788	104.18.94.41	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:31 UTC	731	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ac3d4dbc9d715cb&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t3qx4/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:31 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:31 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 117584 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ac3d4dfbb57c413-EWR alt-svc: h3=":443"; ma=86400
2024-08-01 06:39:31 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 4c 6b 67 48 36 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.LkgH6={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https
2024-08-01 06:39:31 UTC	1369	IN	Data Raw: 73 25 32 30 74 61 6b 69 6e 67 25 32 30 6c 6f 6e 67 65 72 25 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 65 64 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 69 6e 76 61 6c 69 64 5f 64 6f 6d 61 69 6e 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 64 6f 6d 61 69 6e 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 Data Ascii: s%20taking%20longer%20than%20expected.%20Check%20your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","invalid_domain":"Invalid%20domain.%20Contact%20the%20Site%20Administr
2024-08-01 06:39:31 UTC	1369	IN	Data Raw: 67 48 28 35 37 31 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 2c 67 4e 2c 6f 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 69 66 28 67 4e 3d 67 48 2c 6f 3d 7b 27 52 48 57 57 46 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 48 3d 3d 3d 47 7d 2c 27 67 6a 4a 6a 57 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 27 72 72 47 67 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 48 3d 3d 3d 47 7d 2c 27 46 62 61 46 65 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3c 48 7d 2c 27 42 5a 59 77 62 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 27 64 63 49 57 6f 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 29 7b 72 Data Ascii: gH(571)]=function(g,h,i,j,gN,o,x,B,C,D,E,F){if(gN=gH,o={'RHWWF':function(G,H){return H===G},'gjJjW':function(G,H){return G+H},'rrGgM':function(G,H){return H===G},'FbaFe':function(G,H){return G<H},'BZYwb':function(G,H){return G+H},'dcIWo':function(G,H,I){r
2024-08-01 06:39:31 UTC	1369	IN	Data Raw: 5d 29 26 26 28 65 55 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 7c 7c 68 5b 6e 5d 5b 67 50 28 31 34 32 32 29 5d 28 6b 5b 67 50 28 34 34 35 29 5d 28 27 6f 2e 27 2c 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 29 29 2c 6f 2b 2b 29 3b 7d 65 6c 73 65 20 68 5b 6e 5d 3d 69 5b 6c 5b 6d 5d 5d 5b 67 50 28 36 34 33 29 5d 28 66 75 6e 63 74 69 6f 6e 28 73 29 7b 72 65 74 75 72 6e 27 6f 2e 27 2b 73 7d 29 7d 2c 65 56 3d 66 75 6e 63 74 69 6f 6e 28 67 51 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 67 51 3d 67 48 2c 64 3d 7b 27 74 66 6c 6f 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 52 79 6b 69 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 2c 27 47 79 64 6e 74 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 Data Ascii: ])&&(eU(i[l[m]][o])\|\|h[n][gP(1422)](k[gP(445)]('o.',i[l[m]][o]))),o++);}else h[n]=i[l[m]][gP(643)](function(s){return'o.'+s})},eV=function(gQ,d,e,f,g){return gQ=gH,d={'tfloM':function(h,i){return h<i},'Rykil':function(h,i){return h+i},'Gydnt':function(h,i
2024-08-01 06:39:31 UTC	1369	IN	Data Raw: 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 51 68 6a 53 47 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 69 66 56 4e 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 67 51 28 35 34 30 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 3d 3d 6e 75 6c 6c 3f 27 27 3a 66 2e 67 28 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 67 52 29 7b 72 65 74 75 72 6e 20 67 52 3d 62 2c 67 52 28 31 34 39 36 29 5b 67 52 28 31 35 39 34 29 5d 28 69 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 67 53 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 Data Ascii: ':function(h,i){return h!=i},'QhjSG':function(h,i){return h-i},'ifVNn':function(h,i){return i==h}},e=String[gQ(540)],f={'h':function(h){return h==null?'':f.g(h,6,function(i,gR){return gR=b,gR(1496)[gR(1594)](i)})},'g':function(i,j,o,gS,s,x,B,C,D,E,F,G,H,I
2024-08-01 06:39:31 UTC	1369	IN	Data Raw: 30 29 5d 28 30 2c 44 29 26 26 28 44 3d 4d 61 74 68 5b 67 53 28 31 33 34 37 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 69 66 28 64 5b 67 53 28 31 34 33 36 29 5d 28 27 27 2c 43 29 29 7b 69 66 28 4f 62 6a 65 63 74 5b 67 53 28 31 30 39 39 29 5d 5b 67 53 28 31 33 35 30 29 5d 5b 67 53 28 31 31 34 32 29 5d 28 42 2c 43 29 29 7b 69 66 28 64 5b 67 53 28 39 30 30 29 5d 28 32 35 36 2c 43 5b 67 53 28 31 31 32 31 29 5d 28 30 29 29 29 7b 66 6f 72 28 73 3d 30 3b 64 5b 67 53 28 31 34 32 31 29 5d 28 73 2c 46 29 3b 48 3c 3c 3d 31 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 67 53 28 31 34 32 32 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4f 3d 43 5b 67 53 28 31 31 32 31 29 5d 28 30 29 2c 73 3d 30 Data Ascii: 0)](0,D)&&(D=Math[gS(1347)](2,F),F++);continue}break}if(d[gS(1436)]('',C)){if(Object[gS(1099)][gS(1350)][gS(1142)](B,C)){if(d[gS(900)](256,C[gS(1121)](0))){for(s=0;d[gS(1421)](s,F);H<<=1,j-1==I?(I=0,G[gS(1422)](o(H)),H=0):I++,s++);for(O=C[gS(1121)](0),s=0
2024-08-01 06:39:31 UTC	1369	IN	Data Raw: 31 33 32 39 29 5d 28 4f 2c 50 2c 51 2c 52 29 7d 2c 27 4a 4b 50 51 65 27 3a 64 5b 67 57 28 31 31 38 35 29 5d 2c 27 48 6b 55 71 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 2c 51 29 7b 72 65 74 75 72 6e 20 4f 28 50 2c 51 29 7d 2c 27 76 52 48 45 71 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 29 7b 72 65 74 75 72 6e 20 4f 2b 50 7d 2c 27 46 4c 78 64 53 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 2c 51 29 7b 72 65 74 75 72 6e 20 4f 28 50 2c 51 29 7d 7d 2c 78 3d 5b 5d 2c 42 3d 34 2c 43 3d 34 2c 44 3d 33 2c 45 3d 5b 5d 2c 48 3d 6f 28 30 29 2c 49 3d 6a 2c 4a 3d 31 2c 46 3d 30 3b 64 5b 67 57 28 39 30 30 29 5d 28 33 2c 46 29 3b 78 5b 46 5d 3d 46 2c 46 2b 3d 31 29 3b 66 6f 72 28 4b 3d 30 2c 4c 3d 4d 61 74 68 5b 67 57 28 31 33 34 37 29 5d 28 32 2c 32 29 2c 47 3d 31 3b 64 Data Ascii: 1329)](O,P,Q,R)},'JKPQe':d[gW(1185)],'HkUqM':function(O,P,Q){return O(P,Q)},'vRHEq':function(O,P){return O+P},'FLxdS':function(O,P,Q){return O(P,Q)}},x=[],B=4,C=4,D=3,E=[],H=o(0),I=j,J=1,F=0;d[gW(900)](3,F);x[F]=F,F+=1);for(K=0,L=Math[gW(1347)](2,2),G=1;d
2024-08-01 06:39:31 UTC	1369	IN	Data Raw: 46 2b 4e 5b 67 57 28 31 35 39 34 29 5d 28 30 29 2c 42 2d 2d 2c 46 3d 4e 2c 64 5b 67 57 28 31 37 33 38 29 5d 28 30 2c 42 29 26 26 28 42 3d 4d 61 74 68 5b 67 57 28 31 33 34 37 29 5d 28 32 2c 44 29 2c 44 2b 2b 29 7d 65 6c 73 65 28 50 3d 42 5b 43 5d 2c 51 3d 73 5b 67 57 28 38 37 33 29 5d 28 44 2c 45 2c 46 2c 50 29 2c 47 28 51 29 29 3f 28 52 3d 51 3d 3d 3d 27 73 27 26 26 21 52 5b 67 57 28 31 31 39 33 29 5d 28 53 5b 50 5d 29 2c 73 5b 67 57 28 33 33 39 29 5d 3d 3d 3d 54 2b 50 3f 73 5b 67 57 28 35 32 36 29 5d 28 55 2c 73 5b 67 57 28 31 34 33 32 29 5d 28 56 2c 50 29 2c 51 29 3a 52 7c 7c 73 5b 67 57 28 36 36 36 29 5d 28 57 2c 58 2b 50 2c 59 5b 50 5d 29 29 3a 50 28 73 5b 67 57 28 31 34 33 32 29 5d 28 51 2c 50 29 2c 51 29 7d 7d 2c 67 3d 7b 7d 2c 67 5b 67 51 28 31 37 Data Ascii: F+N[gW(1594)](0),B--,F=N,d[gW(1738)](0,B)&&(B=Math[gW(1347)](2,D),D++)}else(P=B[C],Q=s[gW(873)](D,E,F,P),G(Q))?(R=Q==='s'&&!R[gW(1193)](S[P]),s[gW(339)]===T+P?s[gW(526)](U,s[gW(1432)](V,P),Q):R\|\|s[gW(666)](W,X+P,Y[P])):P(s[gW(1432)](Q,P),Q)}},g={},g[gQ(17
2024-08-01 06:39:31 UTC	1369	IN	Data Raw: 29 3a 27 27 2c 6d 3d 6a 5b 67 5a 28 31 32 32 37 29 5d 28 6a 5b 67 5a 28 31 30 38 33 29 5d 28 6a 5b 67 5a 28 31 34 35 39 29 5d 28 67 5a 28 31 32 35 38 29 2b 6c 2c 67 5a 28 31 35 35 35 29 29 2b 31 2b 67 5a 28 31 32 34 32 29 2b 65 4d 5b 67 5a 28 31 33 38 37 29 5d 5b 67 5a 28 37 39 34 29 5d 2c 27 2f 27 29 2c 65 4d 5b 67 5a 28 31 33 38 37 29 5d 5b 67 5a 28 31 30 39 37 29 5d 29 2b 27 2f 27 2b 65 4d 5b 67 5a 28 31 33 38 37 29 5d 5b 67 5a 28 33 39 31 29 5d 2c 6e 3d 6e 65 77 20 65 4d 5b 28 67 5a 28 39 30 35 29 29 5d 28 29 2c 21 6e 29 72 65 74 75 72 6e 3b 6f 3d 6a 5b 67 5a 28 34 38 38 29 5d 2c 6e 5b 67 5a 28 37 38 35 29 5d 28 6f 2c 6d 2c 21 21 5b 5d 29 2c 6e 5b 67 5a 28 37 33 30 29 5d 3d 32 35 30 30 2c 6e 5b 67 5a 28 31 32 34 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ):'',m=j[gZ(1227)](j[gZ(1083)](j[gZ(1459)](gZ(1258)+l,gZ(1555))+1+gZ(1242)+eM[gZ(1387)][gZ(794)],'/'),eM[gZ(1387)][gZ(1097)])+'/'+eM[gZ(1387)][gZ(391)],n=new eM[(gZ(905))](),!n)return;o=j[gZ(488)],n[gZ(785)](o,m,!![]),n[gZ(730)]=2500,n[gZ(1247)]=function(
2024-08-01 06:39:31 UTC	1369	IN	Data Raw: 20 69 3d 3d 3d 68 7d 2c 65 5b 69 68 28 33 33 37 29 5d 3d 69 68 28 31 35 35 31 29 2c 65 5b 69 68 28 31 32 38 36 29 5d 3d 69 68 28 38 39 35 29 2c 66 3d 65 2c 67 3d 64 5b 69 68 28 31 36 31 34 29 5d 2c 67 26 26 67 5b 69 68 28 31 32 39 34 29 5d 3d 3d 3d 69 68 28 31 32 34 30 29 26 26 66 5b 69 68 28 31 32 30 36 29 5d 28 67 5b 69 68 28 36 37 33 29 5d 2c 66 5b 69 68 28 33 33 37 29 5d 29 3f 66 77 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 58 28 29 7d 2c 31 65 33 29 3a 67 26 26 67 5b 69 68 28 31 32 39 34 29 5d 3d 3d 3d 69 68 28 31 32 34 30 29 26 26 67 5b 69 68 28 36 37 33 29 5d 3d 3d 3d 66 5b 69 68 28 31 32 38 36 29 5d 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 66 77 29 7d 29 2c 66 79 3d 21 5b 5d 2c 21 66 30 28 67 48 28 39 33 36 Data Ascii: i===h},e[ih(337)]=ih(1551),e[ih(1286)]=ih(895),f=e,g=d[ih(1614)],g&&g[ih(1294)]===ih(1240)&&f[ih(1206)](g[ih(673)],f[ih(337)])?fw=setInterval(function(){fX()},1e3):g&&g[ih(1294)]===ih(1240)&&g[ih(673)]===f[ih(1286)]&&clearInterval(fw)}),fy=![],!f0(gH(936

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.9	49789	104.18.94.41	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:31 UTC	796	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t3qx4/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:32 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:31 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8ac3d4e0cc7278df-EWR alt-svc: h3=":443"; ma=86400
2024-08-01 06:39:32 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.9	49790	104.18.95.41	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:32 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:32 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:32 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8ac3d4e49b367d06-EWR alt-svc: h3=":443"; ma=86400
2024-08-01 06:39:32 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.9	49791	104.18.95.41	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:32 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ac3d4dbc9d715cb&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:32 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:32 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 116933 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ac3d4e57d5e18c4-EWR alt-svc: h3=":443"; ma=86400
2024-08-01 06:39:32 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 4c 6b 67 48 36 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.LkgH6={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https
2024-08-01 06:39:32 UTC	1369	IN	Data Raw: 66 6f 72 6d 61 74 69 6f 6e 2e 25 33 43 25 32 46 61 25 33 45 22 2c 22 69 6e 76 61 6c 69 64 5f 64 6f 6d 61 69 6e 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 64 6f 6d 61 69 6e 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 65 78 70 69 72 65 64 22 3a 22 45 78 70 69 72 65 64 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 68 75 6d 61 6e 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 2c 22 74 75 72 6e 73 Data Ascii: formation.%3C%2Fa%3E","invalid_domain":"Invalid%20domain.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","turnstile_expired":"Expired.","turnstile_footer_privacy":"Privacy","human_button_text":"Verify%20you%20are%20human","turns
2024-08-01 06:39:32 UTC	1369	IN	Data Raw: 3a 68 72 28 37 31 36 29 2c 27 47 4c 77 6d 74 27 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 72 65 74 75 72 6e 20 67 28 68 29 7d 7d 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 66 6a 28 63 29 7d 63 61 74 63 68 28 67 29 7b 69 66 28 68 72 28 31 33 36 37 29 21 3d 3d 68 72 28 31 37 36 35 29 29 72 65 74 75 72 6e 20 66 68 28 65 5b 68 72 28 36 32 39 29 5d 28 66 69 2c 63 29 29 3b 65 6c 73 65 20 63 5b 68 72 28 35 35 36 29 5d 5b 68 72 28 35 36 38 29 5d 3d 67 2c 68 5b 68 72 28 35 35 36 29 5d 5b 68 72 28 31 37 32 39 29 5d 3d 65 5b 68 72 28 31 31 31 39 29 5d 7d 7d 2c 66 6b 3d 66 75 6e 63 74 69 6f 6e 28 68 73 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 68 73 3d 67 48 2c 64 3d 7b 27 42 46 42 4f 64 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 Data Ascii: :hr(716),'GLwmt':function(g,h){return g(h)}});try{return fj(c)}catch(g){if(hr(1367)!==hr(1765))return fh(e[hr(629)](fi,c));else c[hr(556)][hr(568)]=g,h[hr(556)][hr(1729)]=e[hr(1119)]}},fk=function(hs,d,e,f,g){return hs=gH,d={'BFBOd':function(h,i){return h
2024-08-01 06:39:32 UTC	1369	IN	Data Raw: 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 59 78 7a 57 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 7a 7a 66 42 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 49 44 66 6d 48 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 67 4e 6f 6a 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 57 44 6a 4c 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 4d 59 6a 79 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 41 43 47 72 65 27 3a 66 75 6e 63 74 69 6f 6e 28 68 Data Ascii: ':function(h,i){return h==i},'YxzWT':function(h,i){return h(i)},'zzfBJ':function(h,i){return h(i)},'IDfmH':function(h,i){return i!=h},'gNojx':function(h,i){return h(i)},'WDjLl':function(h,i){return h>i},'MYjyl':function(h,i){return h<i},'ACGre':function(h
2024-08-01 06:39:32 UTC	1369	IN	Data Raw: 3d 30 2c 48 5b 68 78 28 33 34 36 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3d 30 2c 78 2b 2b 29 3b 66 6f 72 28 4e 3d 44 5b 68 78 28 31 37 33 37 29 5d 28 30 29 2c 78 3d 30 3b 64 5b 68 78 28 39 32 31 29 5d 28 31 36 2c 78 29 3b 49 3d 64 5b 68 78 28 31 37 35 36 29 5d 28 64 5b 68 78 28 31 32 33 30 29 5d 28 49 2c 31 29 2c 31 26 4e 29 2c 4a 3d 3d 64 5b 68 78 28 33 31 33 29 5d 28 6a 2c 31 29 3f 28 4a 3d 30 2c 48 5b 68 78 28 33 34 36 29 5d 28 6f 28 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 65 6c 73 65 20 50 3d 74 68 69 73 2e 68 5b 64 5b 68 78 28 35 35 32 29 5d 28 64 5b 68 78 28 31 30 30 37 29 5d 28 74 68 69 73 2e 68 5b 31 38 35 5e 74 68 69 73 2e 67 5d 5b 33 5d 2c 64 5b 68 78 28 31 30 32 39 29 5d 28 31 30 36 2b 74 68 Data Ascii: =0,H[hx(346)](o(I)),I=0):J++,N=0,x++);for(N=D[hx(1737)](0),x=0;d[hx(921)](16,x);I=d[hx(1756)](d[hx(1230)](I,1),1&N),J==d[hx(313)](j,1)?(J=0,H[hx(346)](o(I)),I=0):J++,N>>=1,x++);}else P=this.h[d[hx(552)](d[hx(1007)](this.h[185^this.g][3],d[hx(1029)](106+th
2024-08-01 06:39:32 UTC	1369	IN	Data Raw: 68 78 28 33 34 36 29 5d 28 64 5b 68 78 28 31 34 31 34 29 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3e 3e 3d 31 2c 78 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4e 3d 31 2c 78 3d 30 3b 64 5b 68 78 28 38 36 33 29 5d 28 78 2c 47 29 3b 49 3d 64 5b 68 78 28 31 32 33 30 29 5d 28 49 2c 31 29 7c 4e 2c 4a 3d 3d 64 5b 68 78 28 31 33 35 31 29 5d 28 6a 2c 31 29 3f 28 4a 3d 30 2c 48 5b 68 78 28 33 34 36 29 5d 28 64 5b 68 78 28 31 35 30 37 29 5d 28 6f 2c 49 29 29 2c 49 3d 30 29 3a 4a 2b 2b 2c 4e 3d 30 2c 78 2b 2b 29 3b 66 6f 72 28 4e 3d 44 5b 68 78 28 31 37 33 37 29 5d 28 30 29 2c 78 3d 30 3b 31 36 3e 78 3b 49 3d 64 5b 68 78 28 31 37 35 36 29 5d 28 64 5b 68 78 28 31 32 33 30 29 5d 28 49 2c 31 29 2c 64 5b 68 78 28 31 33 34 30 29 5d 28 4e 2c 31 29 29 2c 4a 3d Data Ascii: hx(346)](d[hx(1414)](o,I)),I=0):J++,N>>=1,x++);}else{for(N=1,x=0;d[hx(863)](x,G);I=d[hx(1230)](I,1)\|N,J==d[hx(1351)](j,1)?(J=0,H[hx(346)](d[hx(1507)](o,I)),I=0):J++,N=0,x++);for(N=D[hx(1737)](0),x=0;16>x;I=d[hx(1756)](d[hx(1230)](I,1),d[hx(1340)](N,1)),J=
2024-08-01 06:39:32 UTC	1369	IN	Data Raw: 77 69 74 63 68 28 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 41 28 37 36 39 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4e 3d 64 5b 68 41 28 31 33 34 30 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 64 5b 68 41 28 31 32 34 39 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 64 5b 68 41 28 37 32 30 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 28 30 3c 4e 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 4f 3d 64 5b 68 41 28 36 35 36 29 5d 28 65 2c 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 41 28 37 36 39 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 64 5b 68 41 28 31 31 34 32 29 5d 28 46 2c 4b 29 3b 4e 3d 48 26 47 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 64 5b 68 Data Ascii: witch(J){case 0:for(J=0,K=Math[hA(769)](2,8),F=1;F!=K;N=d[hA(1340)](G,H),H>>=1,d[hA(1249)](0,H)&&(H=j,G=d[hA(720)](o,I++)),J\|=(0<N?1:0)*F,F<<=1);O=d[hA(656)](e,J);break;case 1:for(J=0,K=Math[hA(769)](2,16),F=1;d[hA(1142)](F,K);N=H&G,H>>=1,0==H&&(H=j,G=d[h
2024-08-01 06:39:32 UTC	1369	IN	Data Raw: 28 33 35 36 29 5d 26 26 28 65 4d 5b 68 43 28 31 30 32 30 29 5d 5b 68 43 28 37 36 31 29 5d 28 29 2c 65 4d 5b 68 43 28 31 30 32 30 29 5d 5b 68 43 28 39 32 38 29 5d 28 29 2c 65 4d 5b 68 43 28 31 36 31 34 29 5d 3d 21 21 5b 5d 2c 65 4d 5b 65 5b 68 43 28 35 33 37 29 5d 5d 5b 68 43 28 31 35 35 37 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 68 43 28 31 37 34 33 29 2c 27 77 69 64 67 65 74 49 64 27 3a 65 4d 5b 68 43 28 31 33 34 34 29 5d 5b 68 43 28 34 38 35 29 5d 2c 27 65 76 65 6e 74 27 3a 65 5b 68 43 28 39 39 37 29 5d 2c 27 63 66 43 68 6c 4f 75 74 27 3a 65 4d 5b 68 43 28 31 33 34 34 29 5d 5b 68 43 28 31 33 31 39 29 5d 2c 27 63 66 43 68 6c 4f 75 74 53 27 3a 65 4d 5b 68 43 28 31 33 34 34 29 5d 5b 68 43 28 31 31 39 32 29 5d 2c 27 63 6f 64 65 27 3a 65 5b 68 43 28 38 32 36 Data Ascii: (356)]&&(eM[hC(1020)][hC(761)](),eM[hC(1020)][hC(928)](),eM[hC(1614)]=!![],eM[e[hC(537)]][hC(1557)]({'source':hC(1743),'widgetId':eM[hC(1344)][hC(485)],'event':e[hC(997)],'cfChlOut':eM[hC(1344)][hC(1319)],'cfChlOutS':eM[hC(1344)][hC(1192)],'code':e[hC(826
2024-08-01 06:39:32 UTC	1369	IN	Data Raw: 68 44 28 31 31 33 33 29 5d 28 6a 5b 68 44 28 38 39 36 29 5d 28 27 76 5f 27 2c 65 4d 5b 68 44 28 31 33 34 34 29 5d 5b 68 44 28 31 30 33 35 29 5d 29 2b 27 3d 27 2b 6d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 32 27 3a 44 3d 6e 65 77 20 65 4d 5b 28 68 44 28 34 39 33 29 29 5d 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 7d 63 61 74 63 68 28 45 29 7b 7d 7d 2c 65 4d 5b 67 48 28 37 39 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 2c 67 2c 68 2c 68 45 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 28 68 45 3d 67 48 2c 69 3d 7b 7d 2c 69 5b 68 45 28 38 31 39 29 5d 3d 68 45 28 33 35 36 29 2c 69 5b 68 45 28 35 36 36 29 5d 3d 68 45 28 37 32 33 29 2c 69 5b 68 45 28 31 34 34 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 21 Data Ascii: hD(1133)](j[hD(896)]('v_',eM[hD(1344)][hD(1035)])+'='+m);continue;case'12':D=new eM[(hD(493))]();continue}break}}catch(E){}},eM[gH(793)]=function(d,e,f,g,h,hE,i,j,k,l,m){(hE=gH,i={},i[hE(819)]=hE(356),i[hE(566)]=hE(723),i[hE(1442)]=function(n,o){return n!
2024-08-01 06:39:32 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 21 3d 3d 67 7d 2c 27 62 56 6f 48 67 27 3a 69 45 28 31 33 35 32 29 2c 27 77 6f 7a 6d 70 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3d 3d 3d 67 7d 2c 27 6f 49 43 62 68 27 3a 69 45 28 31 37 34 33 29 2c 27 51 64 71 73 61 27 3a 69 45 28 37 32 33 29 2c 27 71 58 79 56 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 29 7b 72 65 74 75 72 6e 20 66 28 67 2c 68 29 7d 7d 2c 65 3d 63 5b 69 45 28 37 35 37 29 5d 2c 65 26 26 64 5b 69 45 28 31 34 39 31 29 5d 28 65 5b 69 45 28 31 34 31 38 29 5d 2c 64 5b 69 45 28 31 31 35 39 29 5d 29 26 26 65 5b 69 45 28 31 35 31 37 29 5d 3d 3d 3d 64 5b 69 45 28 31 35 34 30 29 5d 3f 66 56 3d 64 5b 69 45 28 31 34 34 37 29 5d 28 73 65 74 49 6e 74 65 72 Data Ascii: nction(f,g){return f!==g},'bVoHg':iE(1352),'wozmp':function(f,g){return f===g},'oICbh':iE(1743),'Qdqsa':iE(723),'qXyVK':function(f,g,h){return f(g,h)}},e=c[iE(757)],e&&d[iE(1491)](e[iE(1418)],d[iE(1159)])&&e[iE(1517)]===d[iE(1540)]?fV=d[iE(1447)](setInter

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.9	49792	104.18.94.41	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:32 UTC	926	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/973676545:1722493710:qLUOnaAFq2dYDUwc3cK0WRe-w7nNJ5AkZcToKJaEcuM/8ac3d4dbc9d715cb/3dabc1f5c15ee26 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3735 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 3dabc1f5c15ee26 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t3qx4/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:32 UTC	3735	OUT	Data Raw: 76 5f 38 61 63 33 64 34 64 62 63 39 64 37 31 35 63 62 3d 67 51 33 25 32 62 68 2b 36 2b 73 2b 6d 2b 4a 4d 76 57 4d 76 34 2b 4d 68 4a 61 48 52 4d 78 76 48 76 4f 6c 68 4c 2d 30 76 79 71 43 76 43 68 78 6d 33 76 32 76 4a 69 6e 76 78 61 77 41 37 24 76 37 63 42 76 77 65 65 76 67 68 76 75 6b 4c 74 49 51 77 37 67 76 71 72 76 79 2b 4a 61 73 65 4d 32 33 4a 41 76 77 57 75 31 71 74 73 4c 6e 2b 77 67 43 30 76 32 47 56 6e 30 4a 53 36 76 62 63 2d 55 48 76 4c 2b 4d 59 4b 4d 2b 78 65 76 56 2b 4a 2d 76 72 2d 6c 33 6b 4c 61 24 54 66 34 68 71 4e 4c 68 54 56 45 2d 66 69 51 6d 75 2b 77 4d 77 76 4a 4f 54 73 2b 42 33 71 33 76 6a 74 4e 51 78 61 69 2b 76 71 6a 58 54 4a 69 75 31 48 76 6f 76 4d 54 74 30 2b 76 6c 76 71 68 76 65 24 53 78 76 5a 6f 76 48 64 51 30 48 47 68 50 71 76 76 79 Data Ascii: v_8ac3d4dbc9d715cb=gQ3%2bh+6+s+m+JMvWMv4+MhJaHRMxvHvOlhL-0vyqCvChxm3v2vJinvxawA7$v7cBvweevghvukLtIQw7gvqrvy+JaseM23JAvwWu1qtsLn+wgC0v2GVn0JS6vbc-UHvL+MYKM+xevV+J-vr-l3kLa$Tf4hqNLhTVE-fiQmu+wMwvJOTs+B3q3vjtNQxai+vqjXTJiu1HvovMTt0+vlvqhve$SxvZovHdQ0HGhPqvvy
2024-08-01 06:39:32 UTC	731	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:32 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 127864 Connection: close cf-chl-gen: 3EggiQjnY8YzvkaQkf8s0IVY6w6QekaJoqEKTxkunTB5mEFGwfG6Y+QKsv4v1N35ZeGfea9k4Dj8iQBIydvaBRScd0kgHCIdtP6BcV+Z8CXeVWTBDSHCqJrA1b0g8W55Z4pTNMh6hScR2kbcleOSuqcGnTWj1cOVVRCFkJXX4rEUf7YpS5qGD6AulN5cCw4JEx61IaM9+OGWvQk0J5t/U6I0QNI/SwYbXlYWuGu3vJFkphlEmThaRp27HaSr1THs11U06jT2ItqT2niVBTOD9coqKr3PgHCVURspsbYO2+n6LPJN4764uALMVALcwZN0mMp9H1Ea8LW0PbXQmbw/aVlzXJwWgJ3cHdD8F10/8SHFLDAwZoHfcOwweWsXWzLggtnqs3GD69w0zGK05UKm/TJgIJEz2cmrMpMQl+f5rkSvE8DyzHG323eIyP+zXoyHhbcL706Ekv3hNu/mXQGnyBTNLaKqRA==$RJ9cXGVlpjm8hADq Server: cloudflare CF-RAY: 8ac3d4e63dae43af-EWR alt-svc: h3=":443"; ma=86400
2024-08-01 06:39:32 UTC	638	IN	Data Raw: 58 34 52 67 5a 35 4e 6c 65 35 31 7a 65 6c 75 53 57 35 71 41 64 35 74 69 67 58 2b 54 6e 59 46 36 5a 70 61 71 65 71 65 61 69 61 71 75 72 71 75 6e 71 34 69 35 6e 62 70 30 77 48 2b 52 65 4a 36 30 68 4d 47 64 78 61 4f 70 78 38 44 41 69 4d 36 36 77 71 50 4d 7a 36 43 57 32 4d 43 56 6a 4b 62 52 6d 4c 4f 2b 79 71 44 4d 6e 72 47 35 6f 70 2f 49 79 71 4b 71 6e 74 79 6d 34 4f 2f 6e 7a 61 79 2f 36 72 4c 76 77 2b 36 32 36 39 6a 72 75 74 58 2b 2b 74 48 38 30 50 43 2b 78 38 54 32 36 51 7a 64 2b 75 30 48 45 67 58 6f 41 50 48 73 35 63 6e 79 44 68 49 51 39 78 62 73 43 68 45 56 38 77 50 37 49 52 67 61 48 77 55 62 4b 4f 6f 6d 46 2b 62 77 4b 67 76 76 41 53 34 54 47 52 49 56 4c 52 45 4a 47 68 77 7a 46 68 30 4f 46 54 6f 32 51 79 49 5a 4b 43 73 34 49 44 5a 4e 50 52 46 50 50 31 4a Data Ascii: X4RgZ5Nle51zeluSW5qAd5tigX+TnYF6Zpaqeqeaiaqurqunq4i5nbp0wH+ReJ60hMGdxaOpx8DAiM66wqPMz6CW2MCVjKbRmLO+yqDMnrG5op/IyqKqntym4O/nzay/6rLvw+6269jrutX++tH80PC+x8T26Qzd+u0HEgXoAPHs5cnyDhIQ9xbsChEV8wP7IRgaHwUbKOomF+bwKgvvAS4TGRIVLREJGhwzFh0OFTo2QyIZKCs4IDZNPRFPP1J
2024-08-01 06:39:32 UTC	1369	IN	Data Raw: 52 67 50 32 4e 79 56 7a 56 53 65 54 73 33 66 46 42 77 67 46 74 54 50 47 56 2b 56 55 71 48 53 6f 4f 47 59 55 31 4e 5a 58 4f 46 6c 59 35 50 68 47 4f 58 68 70 75 55 65 33 57 57 67 70 39 76 6f 4a 4f 43 66 59 64 6a 71 4a 6c 39 70 5a 64 34 6a 71 31 39 71 48 4a 7a 6c 58 64 7a 63 5a 4b 79 69 5a 71 5a 66 4a 64 38 6e 70 75 53 66 61 4f 37 76 36 72 4c 78 36 6a 48 69 5a 2b 75 77 71 4f 6a 71 4b 4f 71 74 35 4c 4a 6b 37 6a 63 79 36 66 4f 77 4e 32 30 77 4e 2f 67 73 63 65 78 75 36 71 34 78 74 66 63 75 2b 79 74 34 2b 2f 31 7a 71 33 6a 74 39 4f 30 36 4c 6a 39 36 37 62 35 32 2f 66 41 77 77 58 64 30 4e 4c 6b 36 51 48 72 44 4d 54 69 45 4f 7a 68 43 50 77 58 46 41 54 54 39 4e 51 46 45 42 38 4d 44 39 72 38 47 42 4c 30 4a 76 33 65 4b 52 49 44 43 52 6b 6e 41 43 67 43 4d 7a 45 52 42 Data Ascii: RgP2NyVzVSeTs3fFBwgFtTPGV+VUqHSoOGYU1NZXOFlY5PhGOXhpuUe3WWgp9voJOCfYdjqJl9pZd4jq19qHJzlXdzcZKyiZqZfJd8npuSfaO7v6rLx6jHiZ+uwqOjqKOqt5LJk7jcy6fOwN20wN/gscexu6q4xtfcu+yt4+/1zq3jt9O06Lj967b52/fAwwXd0NLk6QHrDMTiEOzhCPwXFATT9NQFEB8MD9r8GBL0Jv3eKRIDCRknACgCMzERB
2024-08-01 06:39:32 UTC	1369	IN	Data Raw: 6c 65 6c 42 4e 58 47 38 37 5a 48 46 69 65 48 5a 37 68 47 6c 43 67 47 61 4a 5a 6c 74 4f 69 49 4b 4a 69 5a 52 6d 68 33 6c 6f 69 6e 4a 30 63 6e 4a 33 57 33 78 56 65 32 31 77 5a 61 57 66 64 61 53 74 6e 4b 61 61 72 71 69 71 66 61 43 45 6c 36 79 45 68 37 4b 78 6a 34 75 58 73 70 47 78 73 4c 61 39 6a 38 57 33 79 61 4f 54 75 49 75 65 6e 63 75 35 76 6f 7a 4f 6a 38 4b 79 78 49 36 72 6c 4a 66 58 6e 4d 75 78 7a 38 76 63 71 35 79 66 6e 36 58 6a 34 63 58 42 34 74 6d 34 34 61 33 53 71 64 54 44 33 72 43 79 77 4b 2f 73 35 63 62 63 30 63 2f 2b 39 2b 48 56 41 4e 33 55 35 2f 67 47 76 4e 33 6c 42 50 62 68 36 52 44 2b 34 68 55 45 43 4f 62 78 31 41 7a 75 43 51 67 61 38 66 6f 51 44 2f 4d 6c 46 42 54 35 4b 4f 51 63 2f 51 63 66 44 75 30 46 45 50 48 6c 36 67 38 6d 4d 79 51 6e 46 66 Data Ascii: lelBNXG87ZHFieHZ7hGlCgGaJZltOiIKJiZRmh3loinJ0cnJ3W3xVe21wZaWfdaStnKaarqiqfaCEl6yEh7Kxj4uXspGxsLa9j8W3yaOTuIuencu5vozOj8KyxI6rlJfXnMuxz8vcq5yfn6Xj4cXB4tm44a3SqdTD3rCywK/s5cbc0c/+9+HVAN3U5/gGvN3lBPbh6RD+4hUECObx1AzuCQga8foQD/MlFBT5KOQc/QcfDu0FEPHl6g8mMyQnFf
2024-08-01 06:39:32 UTC	1369	IN	Data Raw: 67 31 52 62 67 31 52 68 56 6c 71 42 67 49 78 61 5a 49 46 79 59 6d 75 47 62 6b 79 48 67 70 4a 35 6b 6d 74 77 64 46 47 56 62 58 5a 64 65 4b 4a 31 64 70 47 53 68 4a 2b 74 69 34 57 67 66 35 4b 6b 6b 61 4f 6f 6f 6f 71 6c 63 59 6d 49 63 35 57 30 75 36 75 36 6f 49 36 61 73 6f 43 65 76 37 53 6c 6f 4c 32 70 69 37 2b 76 67 34 6d 70 72 4b 57 32 77 61 43 69 30 36 65 78 6d 73 6e 54 76 4e 33 59 79 36 2b 30 75 4c 4c 6f 76 64 79 36 78 73 6e 65 70 2b 32 37 34 2b 6e 4b 38 61 33 6e 34 4c 4b 73 38 4d 6a 33 30 73 6e 56 2b 72 37 69 33 64 2b 2b 75 64 4c 64 2b 39 72 38 35 4f 76 65 41 4f 58 37 34 64 33 6c 44 74 54 59 2b 4e 54 7a 47 39 73 57 38 66 72 70 46 66 54 2b 49 75 45 62 49 79 41 65 2b 51 6f 64 4c 78 45 6c 44 79 67 55 41 6a 45 52 47 41 59 50 4f 54 55 50 50 66 73 79 48 52 4d Data Ascii: g1Rbg1RhVlqBgIxaZIFyYmuGbkyHgpJ5kmtwdFGVbXZdeKJ1dpGShJ+ti4Wgf5KkkaOoooqlcYmIc5W0u6u6oI6asoCev7SloL2pi7+vg4mprKW2waCi06exmsnTvN3Yy6+0uLLovdy6xsnep+274+nK8a3n4LKs8Mj30snV+r7i3d++udLd+9r85OveAOX74d3lDtTY+NTzG9sW8frpFfT+IuEbIyAe+QodLxElDygUAjERGAYPOTUPPfsyHRM
2024-08-01 06:39:32 UTC	1369	IN	Data Raw: 46 71 4c 59 31 35 46 65 45 78 35 68 31 4a 74 56 57 74 71 62 33 42 61 68 6c 4b 56 58 4a 56 65 6b 58 78 38 68 47 35 59 68 48 65 6d 6d 35 65 42 68 34 57 6c 6f 6d 71 61 69 47 79 44 71 59 32 67 68 5a 75 55 72 49 36 48 69 70 61 59 66 58 32 43 77 48 2b 6d 76 70 4f 34 75 4d 4b 31 6e 72 79 73 77 38 48 52 7a 6f 79 79 31 4a 44 54 75 4e 61 30 6e 4d 2b 66 33 64 75 2f 74 62 32 78 73 5a 33 6d 30 36 72 67 78 64 37 4f 77 63 76 4b 36 63 72 6c 35 76 66 56 31 39 6e 62 31 64 62 56 73 4d 37 54 37 2f 54 50 75 2b 59 45 38 4e 72 47 39 65 72 61 78 65 66 2b 44 4f 51 4f 43 41 2f 72 30 76 59 48 41 39 4c 33 43 39 54 6e 43 78 30 59 45 42 38 41 37 77 62 31 38 78 30 41 2f 67 34 6a 34 4f 59 67 37 69 34 7a 48 79 77 59 45 51 51 62 4c 76 6f 37 44 78 67 51 44 67 30 57 46 30 59 59 52 77 45 53 Data Ascii: FqLY15FeEx5h1JtVWtqb3BahlKVXJVekXx8hG5YhHemm5eBh4WlomqaiGyDqY2ghZuUrI6HipaYfX2CwH+mvpO4uMK1nrysw8HRzoyy1JDTuNa0nM+f3du/tb2xsZ3m06rgxd7OwcvK6crl5vfV19nb1dbVsM7T7/TPu+YE8NrG9eraxef+DOQOCA/r0vYHA9L3C9TnCx0YEB8A7wb18x0A/g4j4OYg7i4zHywYEQQbLvo7DxgQDg0WF0YYRwES
2024-08-01 06:39:32 UTC	1369	IN	Data Raw: 31 75 67 34 5a 55 59 35 43 4c 69 6f 6d 58 6e 46 4f 59 6d 58 35 2b 58 6c 6c 37 59 59 61 6c 6c 49 69 65 67 6e 32 57 6a 49 4b 74 62 36 6c 79 73 36 42 74 69 61 57 35 70 33 71 33 6b 33 4f 33 69 33 65 76 74 62 36 66 6a 63 4c 47 6b 6f 43 69 68 38 71 73 75 63 50 52 76 63 50 48 79 4d 53 54 7a 72 4f 58 75 64 47 54 7a 64 4c 5a 79 4c 2f 42 33 4b 48 52 35 4e 72 65 79 64 2f 45 37 4c 2b 6c 37 62 2f 4f 7a 64 32 76 78 72 4c 69 32 4f 69 32 37 39 7a 47 75 75 33 66 39 4c 54 7a 31 65 59 48 42 41 6a 31 44 41 66 4c 32 64 30 4e 35 66 41 4e 35 52 58 77 37 68 59 4a 36 4e 66 56 38 2f 66 70 45 65 41 63 38 66 49 65 47 51 59 64 35 42 37 6d 34 77 30 50 35 51 77 79 44 42 38 6b 45 76 34 47 4e 43 63 62 38 53 59 50 4a 6a 34 38 44 43 30 72 4e 69 45 66 48 79 58 36 50 54 5a 48 4a 6a 73 4b 44 Data Ascii: 1ug4ZUY5CLiomXnFOYmX5+Xll7YYallIiegn2WjIKtb6lys6BtiaW5p3q3k3O3i3evtb6fjcLGkoCih8qsucPRvcPHyMSTzrOXudGTzdLZyL/B3KHR5Nreyd/E7L+l7b/Ozd2vxrLi2Oi279zGuu3f9LTz1eYHBAj1DAfL2d0N5fAN5RXw7hYJ6NfV8/fpEeAc8fIeGQYd5B7m4w0P5QwyDB8kEv4GNCcb8SYPJj48DC0rNiEfHyX6PTZHJjsKD
2024-08-01 06:39:32 UTC	1369	IN	Data Raw: 77 6a 47 4e 71 69 49 64 79 57 49 43 58 6e 59 31 39 6c 33 52 33 6f 58 65 43 70 32 71 61 67 6d 74 71 6d 61 47 7a 5a 5a 2b 4b 6a 59 75 51 70 72 47 38 6e 58 70 37 74 35 2b 61 71 37 53 53 75 59 43 56 68 34 69 2f 78 59 61 4a 72 72 37 46 73 6f 2f 43 69 38 47 31 32 4a 4b 32 74 35 61 6f 70 37 65 5a 74 36 2b 62 34 74 6d 37 35 4a 33 5a 74 72 4f 36 79 4d 37 67 34 62 33 77 71 61 6e 31 30 39 54 67 78 4f 6a 58 32 38 66 65 79 4f 66 30 38 75 71 38 37 37 7a 57 78 64 7a 59 34 73 6e 65 76 38 51 50 34 2f 30 4b 43 65 58 4c 36 52 50 71 42 73 77 64 36 4e 7a 39 38 50 55 4f 2b 68 48 76 35 42 6a 66 46 2f 51 65 43 69 6f 68 44 78 6b 46 2b 76 34 4a 38 44 45 50 49 76 67 33 46 7a 66 35 45 42 38 57 51 66 67 74 45 2f 73 43 44 7a 34 48 49 52 64 44 43 30 59 4a 43 77 77 77 54 43 39 41 4b 43 Data Ascii: wjGNqiIdyWICXnY19l3R3oXeCp2qagmtqmaGzZZ+KjYuQprG8nXp7t5+aq7SSuYCVh4i/xYaJrr7Fso/Ci8G12JK2t5aop7eZt6+b4tm75J3ZtrO6yM7g4b3wqan109TgxOjX28feyOf08uq877zWxdzY4snev8QP4/0KCeXL6RPqBswd6Nz98PUO+hHv5BjfF/QeCiohDxkF+v4J8DEPIvg3Fzf5EB8WQfgtE/sCDz4HIRdDC0YJCwwwTC9AKC
2024-08-01 06:39:32 UTC	1369	IN	Data Raw: 61 35 5a 63 6a 33 69 4d 63 32 4b 67 70 33 36 42 64 4a 56 71 62 4a 75 73 63 49 43 42 72 6f 69 45 73 62 52 32 70 6f 78 36 6a 37 71 55 75 62 6c 33 6b 59 4b 5a 72 36 36 61 6d 73 4b 72 70 37 2b 72 79 4c 79 75 73 49 6d 68 6e 61 36 65 74 63 76 5a 78 4d 37 54 30 62 76 41 6d 74 57 77 73 35 79 2f 35 4c 50 61 75 74 4c 59 77 64 72 63 31 39 44 74 32 2b 65 74 30 75 37 55 75 50 4c 7a 2f 50 7a 47 30 74 4f 35 41 37 72 4d 76 2f 62 30 78 4d 62 6a 42 41 48 4b 31 38 58 5a 37 76 7a 50 33 50 7a 6f 34 52 58 4b 46 66 6e 35 36 78 2f 56 37 43 4c 67 33 66 48 62 34 4f 58 64 34 76 59 5a 38 2b 54 39 2b 4f 6e 34 4a 52 33 75 38 77 59 4f 36 53 38 31 2b 43 67 30 46 6a 4d 2f 50 41 42 43 49 69 51 32 49 79 4d 46 48 54 38 59 49 79 30 2f 42 77 4e 44 55 43 45 65 4e 79 64 41 4b 43 64 53 48 45 77 Data Ascii: a5Zcj3iMc2Kgp36BdJVqbJuscICBroiEsbR2pox6j7qUubl3kYKZr66amsKrp7+ryLyusImhna6etcvZxM7T0bvAmtWws5y/5LPautLYwdrc19Dt2+et0u7UuPLz/PzG0tO5A7rMv/b0xMbjBAHK18XZ7vzP3Pzo4RXKFfn56x/V7CLg3fHb4OXd4vYZ8+T9+On4JR3u8wYO6S81+Cg0FjM/PABCIiQ2IyMFHT8YIy0/BwNDUCEeNydAKCdSHEw
2024-08-01 06:39:32 UTC	1369	IN	Data Raw: 6e 52 6a 65 4b 69 69 64 36 69 47 69 61 2b 4e 65 6f 47 51 6b 34 43 65 74 61 70 75 69 6e 71 53 6d 48 32 56 75 4a 61 68 6d 33 70 32 65 37 61 46 73 62 79 6f 77 49 6e 48 76 59 36 6c 75 36 65 4b 76 36 57 30 6f 4c 43 6b 6f 74 76 57 30 39 2b 33 31 4d 4b 69 6e 38 2f 4f 34 64 48 65 30 74 58 62 78 38 69 6e 72 4b 6a 4c 77 61 2f 76 36 2f 62 34 39 64 6a 70 2b 74 33 50 75 2f 72 63 30 65 48 55 37 64 66 34 2b 75 62 63 44 4e 54 70 33 64 6a 50 36 4f 49 41 32 39 4d 55 45 65 33 31 35 68 51 58 33 50 55 51 31 66 58 68 49 67 54 76 47 41 44 6c 35 79 67 4b 2b 79 48 71 41 68 44 2b 4b 52 77 4b 37 52 63 6e 49 43 30 54 49 78 72 7a 44 66 73 37 41 43 41 41 50 6a 72 33 2f 67 67 79 4b 55 6f 34 53 6b 6b 35 48 69 41 4d 43 6b 38 55 52 68 64 56 55 79 6b 72 4d 7a 6c 64 58 56 77 65 46 45 4d 62 Data Ascii: nRjeKiid6iGia+NeoGQk4CetapuinqSmH2VuJahm3p2e7aFsbyowInHvY6lu6eKv6W0oLCkotvW09+31MKin8/O4dHe0tXbx8inrKjLwa/v6/b49djp+t3Pu/rc0eHU7df4+ubcDNTp3djP6OIA29MUEe315hQX3PUQ1fXhIgTvGADl5ygK+yHqAhD+KRwK7RcnIC0TIxrzDfs7ACAAPjr3/ggyKUo4Skk5HiAMCk8URhdVUykrMzldXVweFEMb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.9	49793	104.18.95.41	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:33 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/973676545:1722493710:qLUOnaAFq2dYDUwc3cK0WRe-w7nNJ5AkZcToKJaEcuM/8ac3d4dbc9d715cb/3dabc1f5c15ee26 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:33 UTC	379	IN	HTTP/1.1 404 Not Found Date: Thu, 01 Aug 2024 06:39:33 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: Fl5V3joaF6k1SY7QFPmgdZ971fobg8X8V68=$ygMwAG6SV/mbRESE Server: cloudflare CF-RAY: 8ac3d4eca8e342cc-EWR alt-svc: h3=":443"; ma=86400
2024-08-01 06:39:33 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.9	49794	104.18.94.41	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:34 UTC	786	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8ac3d4dbc9d715cb/1722494372855/pbsCeFj9PGT6Yu- HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t3qx4/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:34 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:34 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ac3d4f07d458c54-EWR alt-svc: h3=":443"; ma=86400
2024-08-01 06:39:34 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1a 00 00 00 31 08 02 00 00 00 4b 43 2e 6c 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR1KC.lIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.9	49795	104.18.94.41	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:35 UTC	815	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8ac3d4dbc9d715cb/1722494372856/3843ca0d68bc68afcb8f9e3fc4e20a9813e3306fe5d9e6f170ab7f6427b561a3/sU3A5Zaxduayo9D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t3qx4/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:35 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Thu, 01 Aug 2024 06:39:35 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-08-01 06:39:35 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 4f 45 50 4b 44 57 69 38 61 4b 5f 4c 6a 35 34 5f 78 4f 49 4b 6d 42 50 6a 4d 47 5f 6c 32 65 62 78 63 4b 74 5f 5a 43 65 31 59 61 4d 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gOEPKDWi8aK_Lj54_xOIKmBPjMG_l2ebxcKt_ZCe1YaMAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-08-01 06:39:35 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.9	49796	104.18.95.41	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:35 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8ac3d4dbc9d715cb/1722494372855/pbsCeFj9PGT6Yu- HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:36 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:35 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ac3d4f57b1d726e-EWR alt-svc: h3=":443"; ma=86400
2024-08-01 06:39:36 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1a 00 00 00 31 08 02 00 00 00 4b 43 2e 6c 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR1KC.lIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.9	49797	104.18.94.41	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:37 UTC	927	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/973676545:1722493710:qLUOnaAFq2dYDUwc3cK0WRe-w7nNJ5AkZcToKJaEcuM/8ac3d4dbc9d715cb/3dabc1f5c15ee26 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32795 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 3dabc1f5c15ee26 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/t3qx4/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:37 UTC	16384	OUT	Data Raw: 76 5f 38 61 63 33 64 34 64 62 63 39 64 37 31 35 63 62 3d 67 51 33 25 32 62 4b 4d 77 65 6f 4c 33 54 61 71 65 76 5a 76 56 76 48 4c 71 77 64 76 61 2b 33 68 78 65 77 49 76 77 30 78 61 77 32 76 62 30 4a 2d 77 6e 76 57 64 76 77 6f 30 77 6b 76 65 30 77 65 76 54 76 77 73 68 77 55 76 43 61 71 36 33 71 2b 48 6d 76 74 32 4f 6f 76 36 62 5a 33 76 74 55 77 67 42 30 76 41 43 76 4d 61 50 75 35 2b 77 32 4a 76 47 68 76 69 41 6c 78 37 61 65 73 6c 2b 77 6f 77 36 43 43 76 78 30 76 41 69 76 76 41 68 75 73 37 6b 69 76 42 61 52 67 59 33 76 62 53 43 77 76 4d 61 77 56 59 78 64 61 30 76 4f 68 6f 4c 71 55 4c 49 69 77 76 4a 78 61 36 34 58 57 46 45 69 4f 76 4d 78 6e 59 54 41 76 55 33 76 4e 32 6d 71 68 64 75 2d 41 45 63 6a 37 71 36 32 68 32 62 37 66 70 36 4e 5a 65 43 50 64 61 35 31 46 Data Ascii: v_8ac3d4dbc9d715cb=gQ3%2bKMweoL3TaqevZvVvHLqwdva+3hxewIvw0xaw2vb0J-wnvWdvwo0wkve0wevTvwshwUvCaq63q+Hmvt2Oov6bZ3vtUwgB0vACvMaPu5+w2JvGhviAlx7aesl+wow6CCvx0vAivvAhus7kivBaRgY3vbSCwvMawVYxda0vOhoLqULIiwvJxa64XWFEiOvMxnYTAvU3vN2mqhdu-AEcj7q62h2b7fp6NZeCPda51F
2024-08-01 06:39:37 UTC	16384	OUT	Data Raw: 33 2b 4c 6d 76 55 4d 30 76 63 73 52 69 61 30 4a 70 6b 46 50 36 2b 57 76 33 76 58 76 78 30 77 52 76 62 76 4a 59 77 76 51 58 68 4a 61 77 58 33 33 4d 73 4a 2b 74 76 4c 45 6c 61 77 67 6d 45 2b 48 51 76 64 76 57 6e 4d 73 77 4e 76 77 30 4d 6d 76 6f 41 67 30 76 52 77 54 76 59 76 4a 30 76 4b 76 6d 68 76 2d 76 6f 76 79 68 4a 65 66 37 51 54 33 4a 2d 30 42 68 55 2b 71 79 77 45 75 78 76 71 49 77 56 46 48 30 48 2b 2b 4a 76 78 72 68 54 37 66 2b 43 6f 77 6f 4d 6c 76 76 43 4c 61 77 4e 4a 37 53 76 51 76 73 30 79 6b 49 61 4d 43 76 31 2b 4d 72 77 42 76 43 6f 4c 36 76 36 33 57 2b 55 61 4d 30 76 43 2b 48 56 73 2d 76 55 76 4d 6e 77 4e 33 70 2b 54 6f 77 6b 76 4c 51 71 73 77 37 2b 42 72 4a 73 4d 6d 71 30 68 4a 4d 76 72 76 4d 2b 77 61 64 49 67 54 73 4d 6b 6d 24 46 62 47 6e 59 77 Data Ascii: 3+LmvUM0vcsRia0JpkFP6+Wv3vXvx0wRvbvJYwvQXhJawX33MsJ+tvLElawgmE+HQvdvWnMswNvw0MmvoAg0vRwTvYvJ0vKvmhv-vovyhJef7QT3J-0BhU+qywEuxvqIwVFH0H++JvxrhT7f+CowoMlvvCLawNJ7SvQvs0ykIaMCv1+MrwBvCoL6v63W+UaM0vC+HVs-vUvMnwN3p+TowkvLQqsw7+BrJsMmq0hJMvrvM+wadIgTsMkm$FbGnYw
2024-08-01 06:39:37 UTC	27	OUT	Data Raw: 78 56 34 41 77 4b 59 76 6d 73 42 71 48 51 4a 33 30 78 71 76 4e 24 4d 4f 6f 76 76 Data Ascii: xV4AwKYvmsBqHQJ30xqvN$MOovv
2024-08-01 06:39:37 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:37 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26200 Connection: close cf-chl-gen: zakqNmP/xT9bVlfIWAiIXm0B80jXTsRcVXiRY6S+zGHZ3zKdd2E3FuCyEOAbJLSaOonFbOQLv3CJqw19$HvzxcLR6gmEI2KA0 Server: cloudflare CF-RAY: 8ac3d500cfd60f39-EWR alt-svc: h3=":443"; ma=86400
2024-08-01 06:39:37 UTC	1039	IN	Data Raw: 58 34 52 67 5a 35 4b 4c 65 48 4e 34 61 6e 42 31 64 6f 42 2b 6b 4a 79 43 6d 6c 36 66 5a 34 78 69 6f 32 75 76 72 70 35 76 5a 5a 43 70 68 71 43 5a 73 58 47 4d 66 4c 4b 31 76 37 47 35 6c 5a 47 63 72 6f 2b 37 79 4a 61 54 78 61 75 65 70 34 61 74 6e 38 4b 75 31 49 79 54 6c 36 6e 46 6c 38 4f 37 79 71 76 66 74 4e 58 65 6d 72 44 6a 7a 2b 6a 6a 70 4c 37 68 31 4f 37 63 79 2f 48 6d 7a 36 2f 67 7a 39 50 66 79 4e 66 52 79 65 76 55 30 4c 48 72 2b 74 49 45 35 66 6a 6e 77 4f 4d 44 38 67 76 4a 44 64 33 36 2f 76 33 68 79 78 55 48 30 76 49 4f 44 66 55 62 31 67 6e 61 30 51 30 52 41 52 63 61 39 52 34 43 42 69 76 6f 44 4f 67 41 2b 75 6f 71 4c 75 38 6f 4d 41 34 4a 4b 67 38 54 44 53 38 4c 47 68 76 37 44 42 73 51 45 53 59 68 49 30 5a 4a 4b 77 5a 46 50 7a 34 63 52 43 42 43 44 45 34 Data Ascii: X4RgZ5KLeHN4anB1doB+kJyCml6fZ4xio2uvrp5vZZCphqCZsXGMfLK1v7G5lZGcro+7yJaTxauep4atn8Ku1IyTl6nFl8O7yqvftNXemrDjz+jjpL7h1O7cy/Hmz6/gz9PfyNfRyevU0LHr+tIE5fjnwOMD8gvJDd36/v3hyxUH0vIODfUb1gna0Q0RARca9R4CBivoDOgA+uoqLu8oMA4JKg8TDS8LGhv7DBsQESYhI0ZJKwZFPz4cRCBCDE4
2024-08-01 06:39:37 UTC	1369	IN	Data Raw: 57 66 5a 57 64 6f 4a 69 68 59 70 65 4c 65 34 70 72 6b 58 35 71 72 70 53 70 73 61 75 4f 6c 35 4f 6d 76 4b 6d 35 6c 4c 32 35 72 35 70 38 73 4a 75 34 6c 4a 4b 45 76 62 62 49 75 71 53 67 6b 4a 36 77 30 4a 4f 6c 7a 35 69 6a 32 39 57 62 74 38 66 5a 6d 35 50 62 32 4b 43 58 70 4e 36 6e 76 36 58 66 70 74 69 73 35 71 33 64 78 65 71 7a 77 65 61 2f 79 72 61 35 37 64 58 7a 31 4e 6a 33 76 76 54 64 41 64 75 38 2b 74 72 58 36 4e 37 6e 41 4e 34 4e 7a 50 44 79 46 50 4c 69 41 4f 45 4d 30 65 6e 73 46 42 58 72 48 65 6f 55 43 79 45 4f 33 75 48 65 41 77 59 61 35 41 34 5a 49 65 48 6d 36 66 73 46 4a 79 63 55 4d 67 73 4f 39 54 49 4c 46 7a 45 37 45 52 64 44 4e 7a 55 41 48 77 41 67 4a 51 59 57 42 43 38 42 51 45 73 37 44 52 34 68 4d 30 5a 49 47 44 6c 50 4a 6a 6b 33 50 31 41 31 50 55 Data Ascii: WfZWdoJihYpeLe4prkX5qrpSpsauOl5OmvKm5lL25r5p8sJu4lJKEvbbIuqSgkJ6w0JOlz5ij29Wbt8fZm5Pb2KCXpN6nv6Xfptis5q3dxeqzwea/yra57dXz1Nj3vvTdAdu8+trX6N7nAN4NzPDyFPLiAOEM0ensFBXrHeoUCyEO3uHeAwYa5A4ZIeHm6fsFJycUMgsO9TILFzE7ERdDNzUAHwAgJQYWBC8BQEs7DR4hM0ZIGDlPJjk3P1A1PU
2024-08-01 06:39:37 UTC	1369	IN	Data Raw: 67 58 2b 67 65 34 79 4b 69 36 71 6c 6e 32 71 7a 69 35 5a 31 64 35 4b 70 6b 6f 61 34 77 4a 65 59 67 72 75 6b 6a 5a 75 6b 71 5a 6d 33 71 59 6d 5a 79 4c 69 6a 6e 34 6a 54 6b 35 32 33 7a 71 4f 5a 72 4b 62 64 33 64 50 48 33 74 72 62 32 4b 79 38 6f 4e 72 53 70 63 44 54 70 62 79 6e 34 73 66 73 33 75 54 4e 37 65 62 7a 38 74 72 74 2b 50 62 6d 79 50 54 7a 30 74 76 77 38 4f 33 2b 35 4f 58 6d 79 76 58 30 36 77 48 4b 36 75 2f 78 33 51 67 50 35 41 77 57 32 4e 48 59 37 41 30 53 30 64 30 4e 41 69 51 4f 48 53 45 42 34 50 63 6c 34 76 6b 4a 2f 4f 73 4d 47 79 6b 53 42 53 63 45 43 52 51 31 38 78 51 70 4c 44 49 66 4d 44 49 51 45 78 6b 76 49 51 63 30 4a 30 74 43 4e 77 6b 5a 52 55 6b 65 4c 43 31 41 4a 78 42 45 4f 43 67 52 58 43 56 65 54 46 5a 4f 48 56 39 41 48 44 30 66 4f 31 78 Data Ascii: gX+ge4yKi6qln2qzi5Z1d5Kpkoa4wJeYgrukjZukqZm3qYmZyLijn4jTk523zqOZrKbd3dPH3trb2Ky8oNrSpcDTpbyn4sfs3uTN7ebz8trt+PbmyPTz0tvw8O3+5OXmyvX06wHK6u/x3QgP5AwW2NHY7A0S0d0NAiQOHSEB4Pcl4vkJ/OsMGykSBScECRQ18xQpLDIfMDIQExkvIQc0J0tCNwkZRUkeLC1AJxBEOCgRXCVeTFZOHV9AHD0fO1x
2024-08-01 06:39:37 UTC	1369	IN	Data Raw: 33 75 53 73 61 39 2f 6e 6d 32 6f 63 6f 79 70 72 6e 6d 59 68 37 47 79 75 48 32 2b 77 61 2b 36 6c 73 57 7a 76 34 72 4b 79 63 36 6b 70 63 62 4b 31 64 57 2b 30 73 43 6e 75 4a 53 70 7a 71 61 35 6c 39 43 7a 73 64 79 31 35 39 7a 69 6d 39 36 6e 35 38 61 35 72 37 72 49 71 63 54 51 78 39 66 78 7a 2f 71 36 78 64 4f 32 74 37 6a 36 31 50 50 56 77 64 54 75 35 66 54 7a 78 66 6b 4f 35 67 4d 43 35 63 6a 53 33 4f 72 67 37 4e 4d 45 7a 2f 4d 55 35 66 4c 64 2b 52 37 36 2f 66 51 50 41 41 4c 35 2b 42 67 6c 43 76 37 74 43 2f 34 4f 4d 66 41 48 41 67 44 31 4e 51 59 46 42 7a 55 50 4c 52 73 65 46 51 77 39 49 68 55 62 46 7a 59 57 45 79 64 46 47 6a 30 72 53 43 42 43 54 54 49 69 48 7a 5a 49 4f 46 73 38 4d 30 38 75 54 46 67 30 55 47 45 77 52 55 4e 5a 52 54 78 47 57 6c 70 62 62 6c 42 49 Data Ascii: 3uSsa9/nm2ocoyprnmYh7GyuH2+wa+6lsWzv4rKyc6kpcbK1dW+0sCnuJSpzqa5l9Czsdy159zim96n58a5r7rIqcTQx9fxz/q6xdO2t7j61PPVwdTu5fTzxfkO5gMC5cjS3Org7NMEz/MU5fLd+R76/fQPAAL5+BglCv7tC/4OMfAHAgD1NQYFBzUPLRseFQw9IhUbFzYWEydFGj0rSCBCTTIiHzZIOFs8M08uTFg0UGEwRUNZRTxGWlpbblBI
2024-08-01 06:39:37 UTC	1369	IN	Data Raw: 43 71 71 70 69 58 73 58 6d 6d 6d 62 65 68 72 71 75 35 76 4b 36 31 76 38 47 31 77 58 37 42 75 4d 2b 71 6b 59 36 62 7a 36 7a 41 70 4a 43 6d 75 71 61 73 6e 4b 61 7a 71 62 43 35 34 4e 33 4e 30 62 69 6e 75 38 4f 2b 35 4e 58 49 30 4f 66 42 35 4d 2f 77 39 73 58 47 37 62 6d 34 74 76 6a 6e 79 4c 6b 43 38 66 72 42 77 64 7a 7a 35 63 6a 78 41 41 4c 58 42 2f 63 49 7a 75 62 6d 37 68 54 74 43 50 62 4b 37 76 41 59 31 77 7a 59 46 64 73 64 45 42 51 6b 33 78 6f 46 47 4f 50 32 47 68 62 39 41 50 6f 4c 4a 41 2f 79 4b 77 4d 46 39 41 6f 30 42 7a 6b 57 50 43 67 2b 44 45 41 35 48 42 55 2f 4f 54 6b 66 48 42 66 39 4a 55 41 36 4d 54 6b 50 42 55 5a 4a 54 55 39 4a 53 30 39 45 4d 56 4e 47 50 79 41 79 4b 30 74 66 59 46 42 50 55 32 64 6a 55 30 45 6d 53 45 68 6b 58 58 42 4d 4c 69 31 79 62 Data Ascii: CqqpiXsXmmmbehrqu5vK61v8G1wX7BuM+qkY6bz6zApJCmuqasnKazqbC54N3N0binu8O+5NXI0OfB5M/w9sXG7bm4tvjnyLkC8frBwdzz5cjxAALXB/cIzubm7hTtCPbK7vAY1wzYFdsdEBQk3xoFGOP2Ghb9APoLJA/yKwMF9Ao0BzkWPCg+DEA5HBU/OTkfHBf9JUA6MTkPBUZJTU9JS09EMVNGPyAyK0tfYFBPU2djU0EmSEhkXXBMLi1yb
2024-08-01 06:39:37 UTC	1369	IN	Data Raw: 4e 66 59 43 75 67 49 46 36 6d 62 2b 46 79 62 62 4c 6e 59 79 36 71 70 65 48 76 71 32 54 68 74 43 68 71 6f 36 77 32 34 32 53 32 72 32 58 34 63 75 64 72 4a 71 62 76 72 43 65 76 61 69 39 37 64 69 35 72 4b 62 72 37 36 6d 6d 38 38 58 4a 72 39 43 34 73 38 54 6e 76 4c 61 2b 2f 65 37 65 32 39 53 34 34 67 41 42 41 73 54 4d 78 66 73 51 7a 4e 38 42 42 78 55 47 36 67 2f 72 39 4f 4c 70 2b 78 34 63 2b 50 4c 72 48 52 4c 30 4a 2f 49 68 39 78 6f 64 46 76 63 63 45 43 33 36 4c 54 45 6c 44 42 34 70 37 68 41 57 4d 67 51 59 50 2f 59 53 47 52 38 39 2f 52 6f 33 51 69 45 6a 50 45 49 56 49 6a 39 4b 48 54 45 6f 45 69 31 53 52 43 67 58 45 6a 49 61 47 79 6f 6e 4e 7a 77 75 4b 7a 74 41 55 31 4d 6a 59 46 4d 36 4b 6a 67 34 52 6c 70 6f 51 56 78 51 64 54 4a 73 4c 31 4e 54 57 6e 64 53 5a 6e Data Ascii: NfYCugIF6mb+FybbLnYy6qpeHvq2ThtChqo6w242S2r2X4cudrJqbvrCevai97di5rKbr76mm88XJr9C4s8TnvLa+/e7e29S44gABAsTMxfsQzN8BBxUG6g/r9OLp+x4c+PLrHRL0J/Ih9xodFvccEC36LTElDB4p7hAWMgQYP/YSGR89/Ro3QiEjPEIVIj9KHTEoEi1SRCgXEjIaGyonNzwuKztAU1MjYFM6Kjg4RlpoQVxQdTJsL1NTWndSZn
2024-08-01 06:39:37 UTC	1369	IN	Data Raw: 65 36 2b 66 68 37 65 2f 68 4d 79 6b 6f 49 2f 4f 6b 4b 6d 6e 6b 35 4f 50 6b 74 57 50 73 4a 72 58 73 5a 79 57 34 4d 2f 67 73 4b 37 54 76 5a 36 30 76 4b 44 73 37 61 79 6b 79 4b 2f 72 70 4c 50 79 73 2b 61 7a 38 2f 4c 6d 73 76 66 6d 30 41 48 2b 31 63 37 55 7a 66 50 77 30 39 48 68 33 64 59 4e 2b 2f 6a 6e 32 76 37 79 43 39 54 71 34 63 37 6e 7a 2f 44 59 47 52 66 2b 43 78 30 62 48 4f 73 6d 49 66 44 68 4b 68 63 43 2b 43 67 44 2f 51 63 73 42 67 58 76 4d 43 41 76 37 6a 55 6c 43 68 4d 37 2b 79 2f 37 50 44 73 76 2b 6b 41 76 47 55 6c 48 48 68 63 64 46 6a 77 35 48 42 6f 71 4a 68 39 56 52 45 45 77 49 30 63 37 55 78 30 7a 4b 68 63 77 47 44 6b 68 59 56 39 51 4f 6d 52 6a 50 31 64 70 5a 32 67 34 63 6d 30 39 4c 6e 5a 6a 54 6b 56 30 54 30 70 47 65 57 64 65 57 58 34 34 59 31 46 Data Ascii: e6+fh7e/hMykoI/OkKmnk5OPktWPsJrXsZyW4M/gsK7TvZ60vKDs7aykyK/rpLPys+az8/Lmsvfm0AH+1c7UzfPw09Hh3dYN+/jn2v7yC9Tq4c7nz/DYGRf+Cx0bHOsmIfDhKhcC+CgD/QcsBgXvMCAv7jUlChM7+y/7PDsv+kAvGUlHHhcdFjw5HBoqJh9VREEwI0c7Ux0zKhcwGDkhYV9QOmRjP1dpZ2g4cm09LnZjTkV0T0pGeWdeWX44Y1F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.9	49798	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:37 UTC	3474	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.rotect.com%2FAllied_Medical_Winslow_Az_Driver.cfm%3Fdomain%3Drotect.com%26fp%3DuQaVNjuDUF4rK4tShEs0Au0%252BUG%252FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%252BbAq91T%252BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%252F%252B4CZ7GqHID18Hn0lG8m%252FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%252FB3mB4%252F7Pf0pa30%252Bn8GQFMwchNirEiFiBbHa%252F3WXS0X4hX9tXVHEVtDO9dSxRwP87%252Fi1FveXGLDtOv0%26yep%3DuR4%252BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%252BrvZrksXCh%252FTWID06mSMUUo50%252FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%252BpDRS3gYFzynxfbhq%252FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%252BErlx0c703%252BKheAp4bPrhPs9N%252BjTikAkPjy%252BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%252BAf1DOeDKAz7sN99h%252Fl6%252BhdNNq%252FajOyXWCcl%252F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%252FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSly [TRUNCATED] Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=5
2024-08-01 06:39:37 UTC	503	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:37 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=6; Expires=Thu, 01-Aug-2024 06:45:37 GMT; Path=/; SameSite=None; Secure last-modified: Thu, 01 Aug 2024 06:39:37 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-08-01 06:39:37 UTC	5469	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c
2024-08-01 06:39:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.9	49804	104.18.95.41	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:37 UTC	486	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/973676545:1722493710:qLUOnaAFq2dYDUwc3cK0WRe-w7nNJ5AkZcToKJaEcuM/8ac3d4dbc9d715cb/3dabc1f5c15ee26 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:38 UTC	379	IN	HTTP/1.1 404 Not Found Date: Thu, 01 Aug 2024 06:39:38 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: a7THzxL4iXCmHLZlgjIUoHfEfd1RgBAR8ew=$S/CaGyYJh8J3Hk9W Server: cloudflare CF-RAY: 8ac3d506df1c9e02-EWR alt-svc: h3=":443"; ma=86400
2024-08-01 06:39:38 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.9	49762	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:38 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-08-01 06:39:38 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.9	49806	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:38 UTC	3300	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.rotect.com%2FAllied_Medical_Winslow_Az_Driver.cfm%3Fdomain%3Drotect.com%26fp%3DuQaVNjuDUF4rK4tShEs0Au0%252BUG%252FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%252BbAq91T%252BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%252F%252B4CZ7GqHID18Hn0lG8m%252FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%252FB3mB4%252F7Pf0pa30%252Bn8GQFMwchNirEiFiBbHa%252F3WXS0X4hX9tXVHEVtDO9dSxRwP87%252Fi1FveXGLDtOv0%26yep%3DuR4%252BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%252BrvZrksXCh%252FTWID06mSMUUo50%252FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%252BpDRS3gYFzynxfbhq%252FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%252BErlx0c703%252BKheAp4bPrhPs9N%252BjTikAkPjy%252BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%252BAf1DOeDKAz7sN99h%252Fl6%252BhdNNq%252FajOyXWCcl%252F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%252FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSly [TRUNCATED] Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=6
2024-08-01 06:39:38 UTC	503	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:38 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=7; Expires=Thu, 01-Aug-2024 06:45:38 GMT; Path=/; SameSite=None; Secure last-modified: Thu, 01 Aug 2024 06:39:38 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-08-01 06:39:38 UTC	5474	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.9	49809	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:38 UTC	803	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2FAllied_Medical_Winslow_Az_Driver.cfm&o=1722494376954&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=6
2024-08-01 06:39:39 UTC	380	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:38 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Thu, 01 Aug 2024 06:39:38 GMT content-length: 43 content-type: image/gif connection: close
2024-08-01 06:39:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.9	49810	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:39 UTC	569	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2FAllied_Medical_Winslow_Az_Driver.cfm&o=1722494376954&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=7
2024-08-01 06:39:40 UTC	380	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:39 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Thu, 01 Aug 2024 06:39:39 GMT content-length: 43 content-type: image/gif connection: close
2024-08-01 06:39:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.9	49811	212.82.100.137	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:40 UTC	2141	OUT	GET /rdclk/dWU9QjNERUZDNjRCM0EwNDY0RiZ1dD0xNzIyNDk0Mzc1MzcxJnVvPTc5NDM5ODI0NzAxMjczJmx0PTImcz0yJmVzPTJrOE80c041LjJyeUFzUlhaVmhQRDRWdEpMTHZMZkpkaWFjMzJLdW5CeW5acWNHTlVFNzU0TFNrNVpCbF91X0ladk8zRW96MFBvWEVRZy0t/RV=2/RE=1725086375/RO=14/RU=https%3a%2f%2fwww.bing.com%2faclick%3fld%3de8v9GQKnSqbyIt5XJpxiXAnzVUCUyllzQWO0olRcqZ1Mxpl8hcj3k6uecA0aoixs6Hd6ZuFeylLYSaV5ljQB7mvLXU8niOntuCp_PYaUOGG1vmtyqwbH_w0cDm-N2qwwYYDZIFc_3sBEEXxkKf9T0GXMOd18WJb3Z3C422QHJUbROA8ND5%26u%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 [TRUNCATED] Host: r.search.yahoo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A1=d=AQABBJ0tq2YCEL_MDyb3Sp_JN1S6u6aAd5sFEgEBAQF_rGa1ZtxA0iMA_eMAAA&S=AQAAAu8j9sJ30ypCw7Wm81bvQ6w; A3=d=AQABBJ0tq2YCEL_MDyb3Sp_JN1S6u6aAd5sFEgEBAQF_rGa1ZtxA0iMA_eMAAA&S=AQAAAu8j9sJ30ypCw7Wm81bvQ6w; A1S=d=AQABBJ0tq2YCEL_MDyb3Sp_JN1S6u6aAd5sFEgEBAQF_rGa1ZtxA0iMA_eMAAA&S=AQAAAu8j9sJ30ypCw7Wm81bvQ6w
2024-08-01 06:39:40 UTC	1204	IN	HTTP/1.1 302 Found cache-control: no-store content-length: 0 location: https://www.bing.com/aclick?ld=e8v9GQKnSqbyIt5XJpxiXAnzVUCUyllzQWO0olRcqZ1Mxpl8hcj3k6uecA0aoixs6Hd6ZuFeylLYSaV5ljQB7mvLXU8niOntuCp_PYaUOGG1vmtyqwbH_w0cDm-N2qwwYYDZIFc_3sBEEXxkKf9T0GXMOd18WJb3Z3C422QHJUbROA8ND5&u=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&rlid=409fb85eab00133df3acdef586a7d8bb date: Thu, 01 Aug 2024 06:39:40 GMT Age: 0 Connection: close Strict-Transport-Security: max-age=31536000 Server: ATS X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block; report=https://csp.search.yahoo.com/xssreport Referrer-Policy: no-referrer-when-downgrade

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.9	49817	104.16.79.73	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:44 UTC	589	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.everyjobforme.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:44 UTC	373	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:44 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8ac3d52ceb334381-EWR
2024-08-01 06:39:44 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2024-08-01 06:39:44 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arg
2024-08-01 06:39:44 UTC	1369	IN	Data Raw: 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d 69 66 28 73 26 26 70 26 26 70 2e 74 6f 6b 65 6e 29 7b 76 61 72 20 77 2c 53 2c 62 3d 21 31 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: rchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}if(s&&p&&p.token){var w,S,b=!1;document.addEventList
2024-08-01 06:39:44 UTC	1369	IN	Data Raw: 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 64 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 64 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 64 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 64 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 64 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 64 29 3b 72 65 74 75 72 6e 20 64 2e 66 69 72 73 74 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 64 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 29 2c 70 26 26 28 70 2e 69 63 Data Ascii: .timingsV2={},d.versions.timings=2,d.dt=m[0].deliveryType,delete d.timings,t(m[0],d.timingsV2))}1===d.versions.timings&&t(c,d.timings),t(u,d.memory)}else O(d);return d.firstPaint=k("first-paint"),d.firstContentfulPaint=k("first-contentful-paint"),p&&(p.ic
2024-08-01 06:39:44 UTC	1369	IN	Data Raw: 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 52 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 52 29 7d 29 29 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 6c 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 70 75 73 68 28 7b 69 64 3a 6c 2c 75 72 6c 3a 65 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 Data Ascii: ered:!0}};"complete"===window.document.readyState?R():window.addEventListener("load",(function(){window.setTimeout(R)}));var A=function(){return L&&0===v.filter((function(e){return e.id===l})).length},_=function(e){v.push({id:l,url:e,ts:(new Date).getTime
2024-08-01 06:39:44 UTC	1369	IN	Data Raw: 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 Data Ascii: rceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(i=c.lcpResourceEntry)\|\|void 0===i?void 0:i.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?void 0:a.getAttribute("fetchpriority"));break;case"INP"
2024-08-01 06:39:44 UTC	1369	IN	Data Raw: 64 65 64 42 6f 64 79 53 69 7a 65 26 26 28 72 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 3d 6e 5b 30 5d 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 29 2c 65 2e 64 74 3d 6e 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 29 2c 74 28 72 2c 65 2e 74 69 6d 69 6e 67 73 56 32 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3b 69 66 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 26 26 45 2e 66 63 70 26 26 45 2e 66 63 70 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 45 2e 66 63 70 2e 76 61 6c 75 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 73 2e 67 65 74 45 6e 74 72 69 Data Ascii: dedBodySize&&(r.decodedBodySize=n[0].decodedBodySize),e.dt=n[0].deliveryType),t(r,e.timingsV2)}}function k(e){var t;if("first-contentful-paint"===e&&E.fcp&&E.fcp.value)return E.fcp.value;if("function"==typeof s.getEntriesByType){var n=null===(t=s.getEntri
2024-08-01 06:39:44 UTC	1369	IN	Data Raw: 76 65 6e 74 54 79 70 65 3d 7b 7d 29 29 5b 72 2e 4c 6f 61 64 3d 31 5d 3d 22 4c 6f 61 64 22 2c 72 5b 72 2e 41 64 64 69 74 69 6f 6e 61 6c 3d 32 5d 3d 22 41 64 64 69 74 69 6f 6e 61 6c 22 2c 72 5b 72 2e 57 65 62 56 69 74 61 6c 73 56 32 3d 33 5d 3d 22 57 65 62 56 69 74 61 6c 73 56 32 22 2c 28 6e 3d 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 7c 7c 28 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 3d 7b 7d 29 29 2e 48 69 67 68 3d 22 68 69 67 68 22 2c 6e 2e 4c 6f 77 3d 22 6c 6f 77 22 2c 6e 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 2c 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 Data Ascii: ventType={}))[r.Load=1]="Load",r[r.Additional=2]="Additional",r[r.WebVitalsV2=3]="WebVitalsV2",(n=t.FetchPriority\|\|(t.FetchPriority={})).High="high",n.Low="low",n.Auto="auto"},104:function(e,t){!function(e){"use strict";var t,n,r,i,o,a=function(){return w
2024-08-01 06:39:44 UTC	1369	IN	Data Raw: 30 3f 72 3d 22 70 72 65 72 65 6e 64 65 72 22 3a 64 6f 63 75 6d 65 6e 74 2e 77 61 73 44 69 73 63 61 72 64 65 64 3f 72 3d 22 72 65 73 74 6f 72 65 22 3a 6e 2e 74 79 70 65 26 26 28 72 3d 6e 2e 74 79 70 65 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2d 22 29 29 29 2c 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 72 61 74 69 6e 67 3a 22 67 6f 6f 64 22 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 33 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 2c 6e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 72 7d 7d 2c Data Ascii: 0?r="prerender":document.wasDiscarded?r="restore":n.type&&(r=n.type.replace(/_/g,"-"))),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},
2024-08-01 06:39:44 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 3c 30 26 26 28 77 3d 53 28 29 2c 45 28 29 2c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 3d 53 28 29 2c 45 28 29 7d 29 2c 30 29 7d 29 29 29 2c 7b 67 65 74 20 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 Data Ascii: function(){removeEventListener("visibilitychange",b,!0),removeEventListener("prerenderingchange",b,!0)},C=function(){return w<0&&(w=S(),E(),l((function(){setTimeout((function(){w=S(),E()}),0)}))),{get firstHiddenTime(){return w}}},P=function(e){document.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.9	49819	104.16.80.73	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:44 UTC	413	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:44 UTC	373	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:44 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8ac3d531bfaf430f-EWR
2024-08-01 06:39:44 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2024-08-01 06:39:44 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arg
2024-08-01 06:39:44 UTC	1369	IN	Data Raw: 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d 69 66 28 73 26 26 70 26 26 70 2e 74 6f 6b 65 6e 29 7b 76 61 72 20 77 2c 53 2c 62 3d 21 31 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: rchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}if(s&&p&&p.token){var w,S,b=!1;document.addEventList
2024-08-01 06:39:44 UTC	1369	IN	Data Raw: 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 64 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 64 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 64 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 64 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 64 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 64 29 3b 72 65 74 75 72 6e 20 64 2e 66 69 72 73 74 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 64 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 29 2c 70 26 26 28 70 2e 69 63 Data Ascii: .timingsV2={},d.versions.timings=2,d.dt=m[0].deliveryType,delete d.timings,t(m[0],d.timingsV2))}1===d.versions.timings&&t(c,d.timings),t(u,d.memory)}else O(d);return d.firstPaint=k("first-paint"),d.firstContentfulPaint=k("first-contentful-paint"),p&&(p.ic
2024-08-01 06:39:44 UTC	1369	IN	Data Raw: 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 52 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 52 29 7d 29 29 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 6c 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 70 75 73 68 28 7b 69 64 3a 6c 2c 75 72 6c 3a 65 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 Data Ascii: ered:!0}};"complete"===window.document.readyState?R():window.addEventListener("load",(function(){window.setTimeout(R)}));var A=function(){return L&&0===v.filter((function(e){return e.id===l})).length},_=function(e){v.push({id:l,url:e,ts:(new Date).getTime
2024-08-01 06:39:44 UTC	1369	IN	Data Raw: 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 Data Ascii: rceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(i=c.lcpResourceEntry)\|\|void 0===i?void 0:i.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?void 0:a.getAttribute("fetchpriority"));break;case"INP"
2024-08-01 06:39:44 UTC	1369	IN	Data Raw: 64 65 64 42 6f 64 79 53 69 7a 65 26 26 28 72 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 3d 6e 5b 30 5d 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 29 2c 65 2e 64 74 3d 6e 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 29 2c 74 28 72 2c 65 2e 74 69 6d 69 6e 67 73 56 32 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3b 69 66 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 26 26 45 2e 66 63 70 26 26 45 2e 66 63 70 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 45 2e 66 63 70 2e 76 61 6c 75 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 73 2e 67 65 74 45 6e 74 72 69 Data Ascii: dedBodySize&&(r.decodedBodySize=n[0].decodedBodySize),e.dt=n[0].deliveryType),t(r,e.timingsV2)}}function k(e){var t;if("first-contentful-paint"===e&&E.fcp&&E.fcp.value)return E.fcp.value;if("function"==typeof s.getEntriesByType){var n=null===(t=s.getEntri
2024-08-01 06:39:44 UTC	1369	IN	Data Raw: 76 65 6e 74 54 79 70 65 3d 7b 7d 29 29 5b 72 2e 4c 6f 61 64 3d 31 5d 3d 22 4c 6f 61 64 22 2c 72 5b 72 2e 41 64 64 69 74 69 6f 6e 61 6c 3d 32 5d 3d 22 41 64 64 69 74 69 6f 6e 61 6c 22 2c 72 5b 72 2e 57 65 62 56 69 74 61 6c 73 56 32 3d 33 5d 3d 22 57 65 62 56 69 74 61 6c 73 56 32 22 2c 28 6e 3d 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 7c 7c 28 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 3d 7b 7d 29 29 2e 48 69 67 68 3d 22 68 69 67 68 22 2c 6e 2e 4c 6f 77 3d 22 6c 6f 77 22 2c 6e 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 2c 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 Data Ascii: ventType={}))[r.Load=1]="Load",r[r.Additional=2]="Additional",r[r.WebVitalsV2=3]="WebVitalsV2",(n=t.FetchPriority\|\|(t.FetchPriority={})).High="high",n.Low="low",n.Auto="auto"},104:function(e,t){!function(e){"use strict";var t,n,r,i,o,a=function(){return w
2024-08-01 06:39:44 UTC	1369	IN	Data Raw: 30 3f 72 3d 22 70 72 65 72 65 6e 64 65 72 22 3a 64 6f 63 75 6d 65 6e 74 2e 77 61 73 44 69 73 63 61 72 64 65 64 3f 72 3d 22 72 65 73 74 6f 72 65 22 3a 6e 2e 74 79 70 65 26 26 28 72 3d 6e 2e 74 79 70 65 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2d 22 29 29 29 2c 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 72 61 74 69 6e 67 3a 22 67 6f 6f 64 22 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 33 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 2c 6e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 72 7d 7d 2c Data Ascii: 0?r="prerender":document.wasDiscarded?r="restore":n.type&&(r=n.type.replace(/_/g,"-"))),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},
2024-08-01 06:39:44 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 3c 30 26 26 28 77 3d 53 28 29 2c 45 28 29 2c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 3d 53 28 29 2c 45 28 29 7d 29 2c 30 29 7d 29 29 29 2c 7b 67 65 74 20 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 Data Ascii: function(){removeEventListener("visibilitychange",b,!0),removeEventListener("prerenderingchange",b,!0)},C=function(){return w<0&&(w=S(),E(),l((function(){setTimeout((function(){w=S(),E()}),0)}))),{get firstHiddenTime(){return w}}},P=function(e){document.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.9	49821	104.18.94.41	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:44 UTC	589	OUT	GET /turnstile/v0/b/8c81cb09042c/api.js?onload=UYbeL2&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.everyjobforme.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:45 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:44 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 44175 Connection: close accept-ranges: bytes last-modified: Fri, 26 Jul 2024 18:15:35 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8ac3d5320a326a52-EWR alt-svc: h3=":443"; ma=86400
2024-08-01 06:39:45 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 6e 2c 72 2c 6f 2c 63 2c 75 2c 79 29 7b 74 72 79 7b 76 61 72 20 5f 3d 65 5b 75 5d 28 79 29 2c 64 3d 5f 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 72 28 70 29 3b 72 65 74 75 72 6e 7d 5f 2e 64 6f 6e 65 3f 6e 28 64 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 64 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 49 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 6e 2c 72 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Rt(e,n,r,o,c,u,y){try{var _=e[u](y),d=_.value}catch(p){r(p);return}_.done?n(d):Promise.resolve(d).then(o,c)}function It(e){return function(){var n=this,r=arguments;return new Promise(function(o,c){var u=e.apply(n,r);funct
2024-08-01 06:39:45 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 43 74 28 65 2c 6e 29 7b 76 61 72 20 72 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 72 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 75 3d 21 31 2c 79 2c 5f 3b 74 72 79 7b 66 6f 72 28 72 3d 72 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 79 3d 72 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 79 2e 76 61 6c 75 65 29 2c 21 28 6e 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 6e 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function Ct(e,n){var r=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(r!=null){var o=[],c=!0,u=!1,y,_;try{for(r=r.call(e);!(c=(y=r.next()).done)&&(o.push(y.value),!(n&&o.length===n));c=!0)
2024-08-01 06:39:45 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 64 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 79 26 26 28 79 3d 30 2c 70 5b 30 5d 26 26 28 72 3d 30 29 29 2c 72 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 75 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 75 3d 63 2e 72 65 74 75 72 6e 29 26 26 75 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 75 3d 75 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 75 3b 73 77 69 74 63 68 28 63 3d 30 2c 75 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 75 2e 76 61 6c Data Ascii: ])}}function d(p){if(o)throw new TypeError("Generator is already executing.");for(;y&&(y=0,p[0]&&(r=0)),r;)try{if(o=1,c&&(u=p[0]&2?c.return:p[0]?c.throw\|\|((u=c.return)&&u.call(c),0):c.next)&&!(u=u.call(c,p[1])).done)return u;switch(c=0,u&&(p=[p[0]&2,u.val
2024-08-01 06:39:45 UTC	1369	IN	Data Raw: 7b 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 2c 65 2e 4c 49 47 48 54 3d 22 6c 69 67 68 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 7d 29 28 4c 65 7c 7c 28 4c 65 3d 7b 7d 29 29 3b 76 61 72 20 66 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 66 65 7c 7c 28 66 65 3d 7b 7d 29 29 3b 76 61 72 20 5a 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 5a 7c 7c 28 5a 3d 7b 7d 29 29 3b 76 61 72 20 6c 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 Data Ascii: {e.AUTO="auto",e.LIGHT="light",e.DARK="dark"})(Le\|\|(Le={}));var fe;(function(e){e.NEVER="never",e.AUTO="auto"})(fe\|\|(fe={}));var Z;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(Z\|\|(Z={}));var le;(function(e){e.NEVER="never",e.MANUAL="manu
2024-08-01 06:39:45 UTC	1369	IN	Data Raw: 6e 20 6c 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 5f 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 75 74 28 65 29 7b 72 65 74 75 72 6e 20 6b 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 44 74 28 65 29 7b 72 65 74 75 72 6e 20 6b 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 74 28 65 29 7b 72 65 74 75 72 6e 20 6b 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 46 74 3d 33 30 30 2c 55 74 3d 31 30 3b 76 61 72 20 59 3d 22 30 2f 30 22 3b 66 75 6e 63 74 69 6f 6e 20 64 74 28 65 29 7b 76 61 72 20 6e 3d 6e 65 77 20 55 52 4c 53 Data Ascii: n lt(e){return e==="auto"\|\|_r.test(e)}function ut(e){return k(["always","execute","interaction-only"],e)}function Dt(e){return k(["true","false"],e)}function st(e){return k(["render","execute"],e)}var Ft=300,Ut=10;var Y="0/0";function dt(e){var n=new URLS
2024-08-01 06:39:45 UTC	1369	IN	Data Raw: 65 72 28 29 20 68 61 73 6e 27 74 20 62 65 65 6e 20 63 61 6c 6c 65 64 22 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 2c 6e 29 7b 69 66 28 21 46 28 65 2c 6e 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 65 65 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 65 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 65 65 28 65 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 4b 74 28 65 2c 6e 29 7b 69 66 28 74 79 70 65 6f 66 20 6e 21 3d 22 66 75 6e 63 74 69 6f 6e Data Ascii: er() hasn't been called");return e}function Qt(e,n){if(!F(e,n))throw new TypeError("Cannot call a class as a function")}function ee(e,n){return ee=Object.setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},ee(e,n)}function Kt(e,n){if(typeof n!="function
2024-08-01 06:39:45 UTC	1369	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 72 65 74 75 72 6e 20 45 65 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 73 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 7d 72 65 74 75 72 6e 20 63 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6f 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 63 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 65 28 63 2c 6f 29 7d 2c 46 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 74 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 28 4d 28 6e 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 6e 3a 50 Data Ascii: }function c(){return Ee(o,arguments,se(this).constructor)}return c.prototype=Object.create(o.prototype,{constructor:{value:c,enumerable:!1,writable:!0,configurable:!0}}),ee(c,o)},Fe(e)}function Jt(e,n){return n&&(M(n)==="object"\|\|typeof n=="function")?n:P
2024-08-01 06:39:45 UTC	1369	IN	Data Raw: 31 26 26 28 6e 2e 70 61 72 61 6d 73 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 6f 5b 31 5d 29 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 56 28 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 3f 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 2c 6e 29 7b 76 61 72 20 72 2c 6f 2c 63 3d 70 74 28 6e 2e 70 61 72 61 6d 73 2c 21 31 29 2c 75 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 79 3d 22 22 2e 63 6f 6e 63 61 74 28 63 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e Data Ascii: 1&&(n.params=new URLSearchParams(o[1])),n}function V(){return typeof performance!="undefined"&&performance.now?performance.now():Date.now()}function mt(e,n){var r,o,c=pt(n.params,!1),u="h/".concat("b","/"),y="".concat(c,"/cdn-cgi/challenge-platform/").con
2024-08-01 06:39:45 UTC	1369	IN	Data Raw: 65 2e 6c 65 66 74 3d 22 2d 31 32 32 70 78 22 2c 64 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 2d 39 31 70 78 22 2c 64 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 65 6e 22 3b 76 61 72 20 52 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 3b 52 2e 69 64 3d 65 2b 22 2d 66 72 22 2c 52 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 79 29 2c 52 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 6c 6c 6f 77 22 2c 22 63 72 6f 73 73 2d 6f 72 69 67 69 6e 2d 69 73 6f 6c 61 74 65 64 3b 20 66 75 6c 6c 73 63 72 65 65 6e 22 29 2c 52 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 61 6e 64 62 6f 78 22 2c 22 61 6c 6c 6f 77 2d 73 61 6d 65 2d 6f 72 69 67 69 6e 20 61 6c 6c 6f 77 2d 73 63 72 69 70 74 73 Data Ascii: e.left="-122px",d.style.top="-91px",d.style.overflow="hidden";var R=document.createElement("iframe");R.id=e+"-fr",R.setAttribute("src",y),R.setAttribute("allow","cross-origin-isolated; fullscreen"),R.setAttribute("sandbox","allow-same-origin allow-scripts
2024-08-01 06:39:45 UTC	1369	IN	Data Raw: 69 6c 64 28 49 29 3b 76 61 72 20 67 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 22 6c 69 6e 65 22 29 3b 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 2d 77 69 64 74 68 22 2c 22 33 22 29 2c 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 22 2c 22 23 66 66 66 22 29 2c 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 69 6c 6c 22 2c 22 6e 6f 6e 65 22 29 2c 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 78 31 22 2c 22 36 22 29 2c 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 78 32 22 2c 22 31 38 22 29 2c 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 79 31 22 2c 22 35 22 29 2c 67 2e 73 65 74 41 74 Data Ascii: ild(I);var g=document.createElementNS("http://www.w3.org/2000/svg","line");g.setAttribute("stroke-width","3"),g.setAttribute("stroke","#fff"),g.setAttribute("fill","none"),g.setAttribute("x1","6"),g.setAttribute("x2","18"),g.setAttribute("y1","5"),g.setAt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.9	49825	104.18.95.41	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:45 UTC	764	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/url8w/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:45 UTC	1362	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:45 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 69947 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 referrer-policy: same-origin cross-origin-resource-policy: cross-origin document-policy: js-profiling accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-opener-policy: same-origin content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA origin-agent-cluster: ?1 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
2024-08-01 06:39:45 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 61 63 33 64 35 33 36 61 62 36 35 38 63 62 64 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8ac3d536ab658cbd-EWRalt-svc: h3=":443"; ma=86400
2024-08-01 06:39:45 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-08-01 06:39:45 UTC	1369	IN	Data Raw: 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 62 6f 64 79 2c 20 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 37 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 73 79 73 74 65 Data Ascii: width: 100%; height: 100%; overflow: hidden;}body, .main-wrapper { margin: 0; background-color: #fff; padding: 0; width: 100%; height: 100%; overflow: hidden; line-height: 17px; color: #1d1f20; font-family: -apple-system, syste
2024-08-01 06:39:45 UTC	1369	IN	Data Raw: 30 3b 0a 7d 0a 0a 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 38 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 33 38 31 32 37 3b 0a 20 20 77 69 64 74 68 3a 20 33 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 70 78 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 30 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 35 35 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 2c 20 30 2e 35 33 29 20 62 6f 74 68 3b 0a 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 36 70 78 3b 0a 20 20 73 74 72 6f 6b 65 Data Ascii: 0;}#success-icon { display: flex; margin-right: 8px; border-radius: 50%; box-shadow: inset 0 0 0 #038127; width: 30px; height: 30px; animation: scale-up-center 0.6s cubic-bezier(0.55, 0.085, 0.68, 0.53) both; stroke-width: 6px; stroke
2024-08-01 06:39:45 UTC	1369	IN	Data Raw: 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 62 2d 6c 62 20 2e 63 62 2d 69 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 61 64 61 64 61 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 32 32 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 63 62 2d 6c 62 20 69 6e 70 75 74 Data Ascii: me-dark #challenge-error-text a:hover,.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus { color: #949494;}.theme-dark .cb-lb .cb-i { border: 2px solid #dadada; background-color: #222;}.theme-dark .cb-lb input
2024-08-01 06:39:45 UTC	1369	IN	Data Raw: 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 2c 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 Data Ascii: elper-loop-link { color: #bbb;}.theme-dark #fr-helper-link:visited, .theme-dark #fr-helper-link:link,.theme-dark #fr-helper-loop-link:visited,.theme-dark #fr-helper-loop-link:link { color: #bbb;}.theme-dark #fr-helper-link:active, .theme-dark #f
2024-08-01 06:39:45 UTC	1369	IN	Data Raw: 65 78 74 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 76 69 73 69 74 65 64 2c 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 64 31 66 32 30 3b 0a 7d 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 61 63 74 69 76 65 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 68 6f 76 65 72 2c 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 66 6f 63 75 73 2c 0a 23 Data Ascii: ext a { color: #1d1f20;}#challenge-overlay a:visited, #challenge-overlay a:link,#challenge-error-text a:visited,#challenge-error-text a:link { color: #1d1f20;}#challenge-overlay a:active, #challenge-overlay a:hover, #challenge-overlay a:focus,#
2024-08-01 06:39:45 UTC	1369	IN	Data Raw: 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 20 7e 20 2e 63 62 2d 69 20 7b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 77 68 69 74 65 3b 0a 7d 0a 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 20 7e 20 2e 63 62 2d 69 3a 3a 61 66 74 65 72 20 7b 0a 20 20 74 6f 70 3a 20 33 70 78 3b 0a 20 20 6c 65 66 74 3a 20 38 70 78 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 62 6f 72 64 65 72 3a 20 73 6f 6c 69 64 20 23 63 34 34 64 Data Ascii: }.cb-lb input:checked ~ .cb-i { transform: rotate(0deg) scale(1); opacity: 1; border-radius: 5px; background-color: white;}.cb-lb input:checked ~ .cb-i::after { top: 3px; left: 8px; transform: rotate(45deg) scale(1); border: solid #c44d
2024-08-01 06:39:45 UTC	1369	IN	Data Raw: 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 35 70 78 20 31 36 70 78 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 65 72 6d 73 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 72 69 67 68 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 71 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 70 78 3b 0a 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 Data Ascii: gn-items: center; margin: 5px 16px 0; padding-right: 0; text-align: right;}.size-compact #terms { text-align: right;}.size-compact #qr { text-align: center;}.size-compact #challenge-error-title { margin-top: 3px; width: auto;}.size-c
2024-08-01 06:39:45 UTC	1369	IN	Data Raw: 74 65 72 6d 73 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 38 36 70 78 3b 0a 7d 0a 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 66 61 69 6c 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 38 36 70 78 3b 0a 7d 0a 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 73 70 69 6e 6e 65 72 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 38 36 70 78 3b 0a 7d 0a 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 69 63 6f 6e 2c 0a 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 38 Data Ascii: terms { text-align: center;}.rtl.size-compact #success-icon { left: 86px;}.rtl.size-compact #fail-icon { left: 86px;}.rtl.size-compact #spinner-icon { left: 86px;}.rtl.size-compact #timeout-icon,.rtl.size-compact #expired-icon { left: 8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.9	49827	104.18.95.41	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:46 UTC	731	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ac3d536ab658cbd&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/url8w/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:46 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:46 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 118768 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ac3d53a9ae47c81-EWR alt-svc: h3=":443"; ma=86400
2024-08-01 06:39:46 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 4c 6b 67 48 36 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.LkgH6={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https
2024-08-01 06:39:46 UTC	1369	IN	Data Raw: 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 2e 22 2c 22 69 6e 76 61 6c 69 64 5f 64 6f 6d 61 69 6e 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 64 6f 6d 61 69 6e 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 61 69 6c 75 72 65 22 3a 22 46 61 69 6c 75 72 65 25 32 31 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 69 66 72 61 6d 65 5f 61 6c 74 22 3a 22 57 69 64 67 65 74 25 32 30 63 6f 6e 74 61 69 6e 69 6e 67 25 32 30 61 25 32 30 43 6c 6f 75 64 66 6c 61 72 65 25 32 30 73 65 63 75 72 69 74 79 25 32 30 63 68 61 6c 6c 65 6e 67 65 22 2c 22 74 75 72 6e Data Ascii: meout":"Timed%20out.","invalid_domain":"Invalid%20domain.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","turnstile_failure":"Failure%21","turnstile_iframe_alt":"Widget%20containing%20a%20Cloudflare%20security%20challenge","turn
2024-08-01 06:39:46 UTC	1369	IN	Data Raw: 67 5b 67 54 28 31 33 37 37 29 5d 3d 67 54 28 31 34 34 38 29 2c 67 5b 67 54 28 38 36 32 29 5d 3d 67 54 28 35 33 35 29 2c 67 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 51 28 65 29 7d 63 61 74 63 68 28 69 29 7b 69 66 28 68 5b 67 54 28 31 33 37 37 29 5d 21 3d 3d 68 5b 67 54 28 38 36 32 29 5d 29 72 65 74 75 72 6e 20 65 4f 28 65 50 28 65 29 29 3b 65 6c 73 65 20 6b 3d 7b 7d 2c 6b 5b 67 54 28 31 32 37 33 29 5d 3d 67 54 28 33 39 31 29 2c 6b 5b 67 54 28 36 35 39 29 5d 3d 65 5b 67 54 28 31 31 37 30 29 5d 5b 67 54 28 33 35 39 29 5d 2c 6b 5b 67 54 28 31 35 34 39 29 5d 3d 67 54 28 38 33 32 29 2c 6b 5b 68 5b 67 54 28 36 31 38 29 5d 5d 5b 67 54 28 31 34 33 32 29 5d 28 6b 2c 27 2a 27 29 7d 7d 2c 65 52 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 67 55 2c 66 2c 67 2c 68 2c 69 2c 6a Data Ascii: g[gT(1377)]=gT(1448),g[gT(862)]=gT(535),g);try{return eQ(e)}catch(i){if(h[gT(1377)]!==h[gT(862)])return eO(eP(e));else k={},k[gT(1273)]=gT(391),k[gT(659)]=e[gT(1170)][gT(359)],k[gT(1549)]=gT(832),k[h[gT(618)]][gT(1432)](k,'*')}},eR=function(c,gU,f,g,h,i,j
2024-08-01 06:39:46 UTC	1369	IN	Data Raw: 28 66 2c 67 2c 68 2c 67 59 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 78 2c 42 29 7b 6a 3d 28 67 59 3d 67 48 2c 69 3d 7b 7d 2c 69 5b 67 59 28 34 31 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 7c 7c 44 7d 2c 69 5b 67 59 28 39 30 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 5b 67 59 28 31 32 34 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 5b 67 59 28 37 30 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 5b 67 59 28 31 37 34 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 43 2c 44 29 7b 72 65 74 75 72 6e 20 43 2b 44 7d 2c 69 5b 67 59 28 31 37 38 31 29 5d 3d 67 59 28 31 35 30 37 29 2c 69 Data Ascii: (f,g,h,gY,i,j,k,l,m,n,o,s,x,B){j=(gY=gH,i={},i[gY(410)]=function(C,D){return C\|\|D},i[gY(906)]=function(C,D){return C+D},i[gY(1240)]=function(C,D){return C+D},i[gY(700)]=function(C,D){return C+D},i[gY(1745)]=function(C,D){return C+D},i[gY(1781)]=gY(1507),i
2024-08-01 06:39:46 UTC	1369	IN	Data Raw: 31 28 31 37 33 30 29 5d 28 6d 2c 75 6e 64 65 66 69 6e 65 64 2c 68 31 28 31 36 30 37 29 29 7d 2c 31 30 29 2c 65 4d 5b 67 5a 28 39 35 35 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 32 29 7b 68 32 3d 67 5a 2c 65 4d 5b 68 32 28 37 38 37 29 5d 28 29 7d 2c 31 65 33 29 2c 65 4d 5b 67 5a 28 31 37 36 36 29 5d 5b 67 5a 28 34 30 31 29 5d 28 67 5a 28 31 32 31 38 29 2c 6d 29 29 3b 72 65 74 75 72 6e 21 5b 5d 7d 2c 65 56 3d 7b 7d 2c 65 56 5b 67 48 28 34 31 38 29 5d 3d 65 55 2c 65 4d 5b 67 48 28 38 38 33 29 5d 3d 65 56 2c 65 58 3d 65 4d 5b 67 48 28 31 31 37 30 29 5d 5b 67 48 28 31 33 30 38 29 5d 5b 67 48 28 33 33 30 29 5d 2c 65 59 3d 65 4d 5b 67 48 28 31 31 37 30 29 5d 5b 67 48 28 31 33 30 38 29 5d 5b 67 48 28 31 30 33 38 29 5d 2c 66 61 3d 21 5b 5d 2c 66 6e 3d 75 6e 64 65 66 Data Ascii: 1(1730)](m,undefined,h1(1607))},10),eM[gZ(955)](function(h2){h2=gZ,eM[h2(787)]()},1e3),eM[gZ(1766)][gZ(401)](gZ(1218),m));return![]},eV={},eV[gH(418)]=eU,eM[gH(883)]=eV,eX=eM[gH(1170)][gH(1308)][gH(330)],eY=eM[gH(1170)][gH(1308)][gH(1038)],fa=![],fn=undef
2024-08-01 06:39:46 UTC	1369	IN	Data Raw: 32 35 29 5d 3d 66 64 2c 65 4d 5b 67 48 28 33 36 30 29 5d 3d 66 55 2c 66 56 3d 66 75 6e 63 74 69 6f 6e 28 69 7a 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 69 7a 3d 67 48 2c 64 3d 7b 27 61 57 54 4c 44 27 3a 69 7a 28 39 39 38 29 2c 27 73 5a 43 68 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 49 65 6f 6a 49 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 5e 69 7d 2c 27 54 4a 53 54 72 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 5e 69 7d 2c 27 47 52 78 73 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 6c 72 5a 50 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 5e 68 7d 2c 27 46 6b 65 6a 46 Data Ascii: 25)]=fd,eM[gH(360)]=fU,fV=function(iz,d,e,f,g){return iz=gH,d={'aWTLD':iz(998),'sZChn':function(h,i){return h&i},'IeojI':function(h,i){return h^i},'TJSTr':function(h,i){return h^i},'GRxsx':function(h,i){return h-i},'lrZPM':function(h,i){return i^h},'FkejF
2024-08-01 06:39:46 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 74 78 46 6c 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 55 48 74 61 65 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 69 70 75 66 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 71 58 65 70 50 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 54 71 6e 43 79 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 56 51 76 7a 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 4a 72 71 55 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 Data Ascii: return h<<i},'txFlm':function(h,i){return h-i},'UHtae':function(h,i){return i==h},'ipufN':function(h,i){return ih},'qXepP':function(h,i){return h(i)},'TqnCy':function(h,i){return ih},'VQvzK':function(h,i){return h!=i},'JrqUb':function(h,i){return h<i},'
2024-08-01 06:39:46 UTC	1369	IN	Data Raw: 31 34 5e 74 68 69 73 2e 67 5d 2c 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 51 5d 3d 52 5b 53 5d 3b 65 6c 73 65 20 66 6f 72 28 4d 3d 69 42 28 31 30 36 30 29 5b 69 42 28 31 32 37 37 29 5d 28 27 7c 27 29 2c 4e 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 4d 5b 4e 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 64 5b 69 42 28 33 39 38 29 5d 28 30 2c 44 29 26 26 28 44 3d 4d 61 74 68 5b 69 42 28 31 32 37 30 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 78 5b 4c 5d 3d 45 2b 2b 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 44 2d 2d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 69 66 28 4f 62 6a 65 63 74 5b 69 42 28 31 33 32 30 29 5d 5b 69 42 28 34 37 31 29 5d 5b 69 42 28 37 33 37 29 5d 28 42 2c 43 29 29 7b Data Ascii: 14^this.g],this.h[this.g^Q]=R[S];else for(M=iB(1060)[iB(1277)]('\|'),N=0;!![];){switch(M[N++]){case'0':d[iB(398)](0,D)&&(D=Math[iB(1270)](2,F),F++);continue;case'1':x[L]=E++;continue;case'2':D--;continue;case'3':if(Object[iB(1320)][iB(471)][iB(737)](B,C)){
2024-08-01 06:39:46 UTC	1369	IN	Data Raw: 64 5b 69 42 28 31 36 36 31 29 5d 28 48 3c 3c 31 2e 39 38 2c 4f 26 31 2e 34 34 29 2c 64 5b 69 42 28 33 33 39 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 69 42 28 31 33 38 39 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 44 2d 2d 2c 44 3d 3d 30 26 26 28 44 3d 4d 61 74 68 5b 69 42 28 31 32 37 30 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 64 65 6c 65 74 65 20 42 5b 43 5d 7d 65 6c 73 65 20 66 6f 72 28 4f 3d 78 5b 43 5d 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 69 42 28 35 33 32 29 5d 28 48 3c 3c 31 2e 38 35 2c 64 5b 69 42 28 36 33 37 29 5d 28 4f 2c 31 29 29 2c 64 5b 69 42 28 38 37 34 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 69 42 28 31 33 38 39 29 5d 28 64 5b 69 42 28 31 34 35 38 29 5d 28 6f 2c 48 29 29 2c Data Ascii: d[iB(1661)](H<<1.98,O&1.44),d[iB(339)](I,j-1)?(I=0,G[iB(1389)](o(H)),H=0):I++,O>>=1,s++);}D--,D==0&&(D=Math[iB(1270)](2,F),F++),delete B[C]}else for(O=x[C],s=0;s<F;H=d[iB(532)](H<<1.85,d[iB(637)](O,1)),d[iB(874)](I,j-1)?(I=0,G[iB(1389)](d[iB(1458)](o,H)),
2024-08-01 06:39:46 UTC	1369	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 69 44 29 7b 72 65 74 75 72 6e 20 69 44 3d 69 43 2c 68 5b 69 44 28 31 35 35 38 29 5d 28 69 29 7d 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 69 45 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4d 2c 4c 29 7b 66 6f 72 28 69 45 3d 69 7a 2c 73 3d 5b 5d 2c 78 3d 34 2c 42 3d 34 2c 43 3d 33 2c 44 3d 5b 5d 2c 47 3d 6f 28 30 29 2c 48 3d 6a 2c 49 3d 31 2c 45 3d 30 3b 33 3e 45 3b 73 5b 45 5d 3d 45 2c 45 2b 3d 31 29 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 45 28 31 32 37 30 29 5d 28 32 2c 32 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4c 3d 47 26 48 2c 48 3e 3e 3d 31 2c 64 5b 69 45 28 33 39 38 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 28 30 3c Data Ascii: ,function(i,iD){return iD=iC,h[iD(1558)](i)})},'i':function(i,j,o,iE,s,x,B,C,D,E,F,G,H,I,J,K,M,L){for(iE=iz,s=[],x=4,B=4,C=3,D=[],G=o(0),H=j,I=1,E=0;3>E;s[E]=E,E+=1);for(J=0,K=Math[iE(1270)](2,2),F=1;K!=F;L=G&H,H>>=1,d[iE(398)](0,H)&&(H=j,G=o(I++)),J\|=(0<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.9	49828	104.18.95.41	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:46 UTC	796	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/url8w/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:46 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:46 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8ac3d53bbb6a42c1-EWR alt-svc: h3=":443"; ma=86400
2024-08-01 06:39:46 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.9	49830	104.18.95.41	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:47 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8ac3d536ab658cbd&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:47 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:47 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 113759 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8ac3d5409ff319c7-EWR alt-svc: h3=":443"; ma=86400
2024-08-01 06:39:47 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 4c 6b 67 48 36 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.LkgH6={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.privacy_link":"http
2024-08-01 06:39:47 UTC	1369	IN	Data Raw: 65 79 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 61 69 6c 75 72 65 22 3a 22 46 61 69 6c 75 72 65 25 32 31 22 2c 22 6e 6f 74 5f 65 6d 62 65 64 64 65 64 22 3a 22 54 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 6d 75 73 74 25 32 30 62 65 25 32 30 65 6d 62 65 64 64 65 64 25 32 30 69 6e 74 6f 25 32 30 61 25 32 30 70 61 72 65 6e 74 25 32 30 70 61 67 65 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 69 66 72 61 6d 65 5f 61 6c 74 22 3a 22 57 69 64 67 65 74 25 32 30 63 6f 6e 74 61 69 6e 69 6e 67 25 32 30 61 25 32 30 43 6c 6f 75 64 66 6c 61 72 Data Ascii: ey.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","turnstile_failure":"Failure%21","not_embedded":"This%20challenge%20must%20be%20embedded%20into%20a%20parent%20page.","turnstile_iframe_alt":"Widget%20containing%20a%20Cloudflar
2024-08-01 06:39:47 UTC	1369	IN	Data Raw: 6e 28 68 62 2c 64 2c 65 2c 66 2c 67 29 7b 68 62 3d 67 48 2c 64 3d 7b 7d 2c 64 5b 68 62 28 31 32 31 33 29 5d 3d 68 62 28 37 35 37 29 2c 64 5b 68 62 28 34 35 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 64 5b 68 62 28 33 39 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 65 3d 64 2c 66 3d 31 2c 67 3d 65 5b 68 62 28 34 35 34 29 5d 28 31 65 33 2c 65 4d 5b 68 62 28 31 33 30 30 29 5d 5b 68 62 28 31 34 31 30 29 5d 28 65 5b 68 62 28 33 39 38 29 5d 28 32 2c 66 29 2c 33 32 29 29 2c 65 4d 5b 68 62 28 34 36 31 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 63 29 7b 68 63 3d 68 62 2c 65 4d 5b 68 63 28 37 35 37 29 5d 26 26 28 65 4d 5b 68 63 28 31 32 32 35 29 5d 5b 68 63 28 31 33 37 39 29 Data Ascii: n(hb,d,e,f,g){hb=gH,d={},d[hb(1213)]=hb(757),d[hb(454)]=function(h,i){return h*i},d[hb(398)]=function(h,i){return h<<i},e=d,f=1,g=e[hb(454)](1e3,eM[hb(1300)][hb(1410)](e[hb(398)](2,f),32)),eM[hb(461)](function(hc){hc=hb,eM[hc(757)]&&(eM[hc(1225)][hc(1379)
2024-08-01 06:39:47 UTC	1369	IN	Data Raw: 64 28 31 35 37 34 29 2c 31 29 2b 6a 5b 68 64 28 31 36 30 33 29 5d 2c 65 4d 5b 68 64 28 39 37 34 29 5d 5b 68 64 28 31 34 36 31 29 5d 29 2b 27 2f 27 2c 65 4d 5b 68 64 28 39 37 34 29 5d 5b 68 64 28 31 32 33 31 29 5d 29 2c 27 2f 27 29 2b 65 4d 5b 68 64 28 39 37 34 29 5d 5b 68 64 28 36 30 34 29 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 39 27 3a 78 3d 28 73 3d 7b 7d 2c 73 5b 68 64 28 35 36 30 29 5d 3d 66 2c 73 2e 63 63 3d 67 2c 73 5b 68 64 28 31 32 35 33 29 5d 3d 6e 2c 4a 53 4f 4e 5b 68 64 28 31 31 30 34 29 5d 28 73 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 30 27 3a 42 3d 6e 65 77 20 65 4d 5b 28 68 64 28 39 33 36 29 29 5d 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 31 27 3a 43 3d 65 4d 5b 68 64 28 39 37 34 29 5d 5b 68 64 28 31 38 33 Data Ascii: d(1574),1)+j[hd(1603)],eM[hd(974)][hd(1461)])+'/',eM[hd(974)][hd(1231)]),'/')+eM[hd(974)][hd(604)];continue;case'9':x=(s={},s[hd(560)]=f,s.cc=g,s[hd(1253)]=n,JSON[hd(1104)](s));continue;case'10':B=new eM[(hd(936))]();continue;case'11':C=eM[hd(974)][hd(183
2024-08-01 06:39:47 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 68 68 29 7b 68 68 3d 68 65 2c 65 4d 5b 68 68 28 31 38 31 37 29 5d 28 6b 2c 75 6e 64 65 66 69 6e 65 64 2c 68 68 28 31 37 31 34 29 29 7d 2c 31 30 29 2c 65 4d 5b 68 65 28 34 36 31 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 69 29 7b 68 69 3d 68 65 2c 65 4d 5b 68 69 28 38 36 31 29 5d 28 29 7d 2c 31 65 33 29 2c 65 4d 5b 68 65 28 31 35 33 33 29 5d 5b 68 65 28 35 37 31 29 5d 28 68 65 28 39 34 31 29 2c 6b 29 3b 72 65 74 75 72 6e 21 5b 5d 7d 2c 66 6b 3d 7b 7d 2c 66 6b 5b 67 48 28 36 37 39 29 5d 3d 66 6a 2c 65 4d 5b 67 48 28 31 33 32 37 29 5d 3d 66 6b 2c 66 6d 3d 65 4d 5b 67 48 28 39 37 34 29 5d 5b 67 48 28 35 36 36 29 5d 5b 67 48 28 37 30 37 29 5d 2c 66 6e 3d 65 4d 5b 67 48 28 39 37 34 29 5d 5b 67 48 28 35 36 36 29 5d 5b 67 48 28 37 31 36 29 5d 2c 66 7a Data Ascii: tion(hh){hh=he,eM[hh(1817)](k,undefined,hh(1714))},10),eM[he(461)](function(hi){hi=he,eM[hi(861)]()},1e3),eM[he(1533)][he(571)](he(941),k);return![]},fk={},fk[gH(679)]=fj,eM[gH(1327)]=fk,fm=eM[gH(974)][gH(566)][gH(707)],fn=eM[gH(974)][gH(566)][gH(716)],fz
2024-08-01 06:39:47 UTC	1369	IN	Data Raw: 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 69 4d 3d 67 48 2c 64 3d 7b 27 49 44 4a 48 71 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 5a 67 62 61 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 77 6e 72 4a 56 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 79 73 4a 69 58 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 75 7a 54 46 49 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 6a 62 47 64 64 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 4f 4f 66 4b 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b Data Ascii: ,d,e,f,g){return iM=gH,d={'IDJHq':function(h,i){return h==i},'ZgbaA':function(h,i){return h-i},'wnrJV':function(h,i){return h>i},'ysJiX':function(h,i){return h\|i},'uzTFI':function(h,i){return h<<i},'jbGdd':function(h,i){return i==h},'OOfKQ':function(h,i){
2024-08-01 06:39:47 UTC	1369	IN	Data Raw: 67 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 69 4f 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 2c 4f 29 7b 69 66 28 69 4f 3d 69 4d 2c 64 5b 69 4f 28 31 32 30 35 29 5d 28 6e 75 6c 6c 2c 69 29 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 78 3d 7b 7d 2c 42 3d 7b 7d 2c 43 3d 27 27 2c 44 3d 32 2c 45 3d 33 2c 46 3d 32 2c 47 3d 5b 5d 2c 48 3d 30 2c 49 3d 30 2c 4a 3d 30 3b 4a 3c 69 5b 69 4f 28 31 32 31 38 29 5d 3b 4a 2b 3d 31 29 69 66 28 4b 3d 69 5b 69 4f 28 34 38 37 29 5d 28 4a 29 2c 4f 62 6a 65 63 74 5b 69 4f 28 31 37 33 35 29 5d 5b 69 4f 28 39 32 30 29 5d 5b 69 4f 28 31 31 36 33 29 5d 28 78 2c 4b 29 7c 7c 28 78 5b 4b 5d 3d 45 2b 2b 2c 42 5b 4b 5d 3d 21 30 29 2c 4c 3d 43 2b 4b 2c 4f 62 6a 65 63 74 5b 69 4f 28 Data Ascii: g':function(i,j,o,iO,s,x,B,C,D,E,F,G,H,I,J,K,L,M,N,O){if(iO=iM,d[iO(1205)](null,i))return'';for(x={},B={},C='',D=2,E=3,F=2,G=[],H=0,I=0,J=0;J<i[iO(1218)];J+=1)if(K=i[iO(487)](J),Object[iO(1735)][iO(920)][iO(1163)](x,K)\|\|(x[K]=E++,B[K]=!0),L=C+K,Object[iO(
2024-08-01 06:39:47 UTC	1369	IN	Data Raw: 5b 69 4f 28 31 36 38 38 29 5d 28 4f 2c 31 29 2c 64 5b 69 4f 28 33 39 35 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 69 4f 28 36 33 35 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4f 3d 31 2c 73 3d 30 3b 73 3c 46 3b 48 3d 48 3c 3c 31 7c 4f 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 69 4f 28 36 33 35 29 5d 28 64 5b 69 4f 28 31 33 31 37 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4f 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4f 3d 43 5b 69 4f 28 31 38 34 30 29 5d 28 30 29 2c 73 3d 30 3b 31 36 3e 73 3b 48 3d 64 5b 69 4f 28 31 35 33 38 29 5d 28 64 5b 69 4f 28 36 32 38 29 5d 28 48 2c 31 29 2c 64 5b 69 4f 28 31 36 32 39 29 5d 28 4f 2c 31 29 29 2c 49 3d 3d 64 5b 69 4f 28 31 37 38 Data Ascii: [iO(1688)](O,1),d[iO(395)](I,j-1)?(I=0,G[iO(635)](o(H)),H=0):I++,O>>=1,s++);}else{for(O=1,s=0;s<F;H=H<<1\|O,I==j-1?(I=0,G[iO(635)](d[iO(1317)](o,H)),H=0):I++,O=0,s++);for(O=C[iO(1840)](0),s=0;16>s;H=d[iO(1538)](d[iO(628)](H,1),d[iO(1629)](O,1)),I==d[iO(178
2024-08-01 06:39:47 UTC	1369	IN	Data Raw: 68 28 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 52 28 31 33 35 35 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4c 3d 47 26 48 2c 48 3e 3e 3d 31 2c 48 3d 3d 30 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 69 52 28 34 39 38 29 5d 28 30 3c 4c 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 4d 3d 64 5b 69 52 28 34 34 33 29 5d 28 65 2c 4a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 52 28 31 33 35 35 29 5d 28 32 2c 31 36 29 2c 46 3d 31 3b 64 5b 69 52 28 31 35 37 35 29 5d 28 46 2c 4b 29 3b 4c 3d 47 26 48 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 64 5b 69 52 28 31 37 33 34 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 28 30 3c 4c 3f 31 3a 30 Data Ascii: h(J){case 0:for(J=0,K=Math[iR(1355)](2,8),F=1;F!=K;L=G&H,H>>=1,H==0&&(H=j,G=o(I++)),J\|=d[iR(498)](0<L?1:0,F),F<<=1);M=d[iR(443)](e,J);break;case 1:for(J=0,K=Math[iR(1355)](2,16),F=1;d[iR(1575)](F,K);L=G&H,H>>=1,0==H&&(H=j,G=d[iR(1734)](o,I++)),J\|=(0<L?1:0
2024-08-01 06:39:47 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 47 3d 3d 3d 48 7d 2c 27 48 68 4f 69 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 28 48 29 7d 2c 27 58 67 73 65 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 3c 48 7d 2c 27 53 78 6b 73 52 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 2c 4a 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 2c 4a 29 7d 2c 27 42 56 76 4e 68 27 3a 69 56 28 31 36 38 33 29 2c 27 45 67 4d 54 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 7d 2c 6f 5b 69 56 28 31 37 37 30 29 5d 28 6e 75 6c 6c 2c 68 29 7c 7c 6f 5b 69 56 28 31 33 32 30 29 5d 28 76 6f 69 64 20 30 2c 68 29 29 72 65 74 75 72 6e 20 6a 3b 66 6f 72 28 78 3d 6f 5b 69 56 28 31 33 36 34 29 5d 28 67 70 2c 68 29 Data Ascii: ){return G===H},'HhOij':function(G,H){return G(H)},'XgseJ':function(G,H){return G<H},'SxksR':function(G,H,I,J){return G(H,I,J)},'BVvNh':iV(1683),'EgMTK':function(G,H){return G+H}},o[iV(1770)](null,h)\|\|o[iV(1320)](void 0,h))return j;for(x=o[iV(1364)](gp,h)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.9	49831	104.18.95.41	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:47 UTC	927	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1762104049:1722493544:Np3zdzwOpzq4TvaI5wwBswkuEGVUcxd8CUQmfa_Mytk/8ac3d536ab658cbd/af09b333a59d613 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3778 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: af09b333a59d613 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/url8w/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:47 UTC	3778	OUT	Data Raw: 76 5f 38 61 63 33 64 35 33 36 61 62 36 35 38 63 62 64 3d 59 54 74 4f 52 4f 50 4f 46 4f 65 4f 6c 4c 30 6e 4c 30 4a 4f 4c 52 6c 6a 55 34 4c 58 30 55 30 4e 61 52 67 53 44 30 62 5a 78 30 78 52 58 65 74 30 77 30 6c 41 35 30 67 75 50 30 50 30 75 4f 44 24 36 70 70 30 59 52 30 66 30 6f 68 75 6f 61 74 30 78 49 24 30 7a 4f 6c 65 30 6b 5a 38 4f 25 32 62 49 30 56 52 30 78 4c 76 33 24 49 65 6a 30 71 50 46 30 2d 47 6a 4f 4c 39 30 2d 4f 36 34 24 64 37 4c 51 47 7a 77 61 34 24 54 65 30 43 4f 67 70 30 6f 4f 6c 61 43 74 4f 30 7a 42 62 50 70 78 52 45 32 7a 30 70 24 33 74 65 50 4f 36 4c 36 30 6c 4e 77 46 41 50 67 74 74 30 73 33 75 54 58 6a 41 4f 30 5a 54 72 42 6c 41 66 79 55 30 24 30 4c 74 62 4f 4f 30 61 76 4f 36 61 58 46 6a 30 64 4f 30 56 6e 68 6c 48 32 55 54 44 30 36 24 30 Data Ascii: v_8ac3d536ab658cbd=YTtOROPOFOeOlL0nL0JOLRljU4LX0U0NaRgSD0bZx0xRXet0w0lA50guP0P0uOD$6pp0YR0f0ohuoat0xI$0zOle0kZ8O%2bI0VR0xLv3$Iej0qPF0-GjOL90-O64$d7LQGzwa4$Te0COgp0oOlaCtO0zBbPpxRE2z0p$3tePO6L60lNwFAPgtt0s3uTXjAO0ZTrBlAfyU0$0LtbOO0avO6aXFj0dO0VnhlH2UTD06$0
2024-08-01 06:39:47 UTC	731	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:47 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 127752 Connection: close cf-chl-gen: sXXPaGdjygPFY+hudflbjkojT9HeyCw1nbSirmyjnNYFXSOr+lkluny/3pE6k+oHQ2k4jI2D8XghpQ+aJfVVfJniJ0cjMiJbjGhgUiwt7lZacuRu4+r/OXG1Q7X7TnyYBKoAybnA4FM1DSxll7fqw9wV9qqGH+7NAxp9w/gKuh+n/ubQSiMAoFfOBKqC9wZATVdLPbeYS2X1qekY1Eh6qLJs2e2tvHiOxvcLSr0PmB0CdSuQLPW+/Ty0RcVOcQDPEmFeag9AHKjII7EJpKNeM5L+UoP3Hzf0r4DRe1i4puk9GNSA/PCh7LYt/CiE16Bq5ldcxqKGTOEhxFqX4UUhKLYz9VOIsGrLDyED115ZpKza18hiByqNoBkj5e+3kOERApY1U26JauumaL+f9CkgopuBkLnK9OdQXoHPDC8CxpveUsEg0+epuh44RaiRYPPCmyPBSjM5TYSspl+MwU35aieEdxDzbw==$CYVP5MQYS84aUu3V Server: cloudflare CF-RAY: 8ac3d5411b2a4232-EWR alt-svc: h3=":443"; ma=86400
2024-08-01 06:39:47 UTC	638	IN	Data Raw: 79 62 70 38 74 62 66 4f 6a 59 79 6e 6e 4c 2f 50 69 72 4c 57 6b 4a 61 77 6b 4c 4f 57 75 4e 7a 62 7a 4b 48 67 6d 39 43 30 78 2b 62 51 6f 37 4f 6d 35 65 4c 6e 32 63 58 6b 78 38 37 67 77 66 4b 7a 38 65 37 76 35 64 48 77 39 62 6e 76 39 50 61 2f 2f 66 72 33 38 64 72 2b 79 73 76 32 33 41 6f 4f 2f 4d 7a 7a 79 66 77 4f 30 2b 62 53 35 50 76 73 2b 68 48 76 49 52 30 61 33 2f 44 65 37 78 59 57 45 76 63 65 47 68 62 38 47 6a 45 52 41 66 76 70 49 66 4c 7a 41 2f 49 46 46 44 59 6e 44 51 7a 2b 4b 78 45 59 50 44 34 38 46 6a 49 65 4a 78 52 48 4f 43 78 47 53 6a 30 4a 55 44 51 2f 4a 53 56 52 49 6a 52 62 56 68 59 35 55 45 77 35 56 78 6f 65 54 6d 49 66 55 6d 46 57 58 47 30 73 52 43 6c 73 4d 44 4a 77 4c 6a 56 7a 64 58 52 6e 51 31 6f 30 53 58 70 33 4f 44 35 68 67 33 46 75 57 55 64 Data Ascii: ybp8tbfOjYynnL/PirLWkJawkLOWuNzbzKHgm9C0x+bQo7Om5eLn2cXkx87gwfKz8e7v5dHw9bnv9Pa//fr38dr+ysv23AoO/MzzyfwO0+bS5Pvs+hHvIR0a3/De7xYWEvceGhb8GjERAfvpIfLzA/IFFDYnDQz+KxEYPD48FjIeJxRHOCxGSj0JUDQ/JSVRIjRbVhY5UEw5VxoeTmIfUmFWXG0sRClsMDJwLjVzdXRnQ1o0SXp3OD5hg3FuWUd
2024-08-01 06:39:47 UTC	1369	IN	Data Raw: 69 6a 59 34 79 73 6f 71 4f 6c 61 58 43 6f 68 4c 43 64 73 36 32 7a 70 5a 53 33 76 4a 69 4b 70 34 71 59 73 37 47 2f 6b 63 61 53 74 62 56 38 75 38 57 70 6e 4a 65 62 75 74 50 41 6e 4c 62 4c 72 4e 4f 6b 31 63 69 53 30 63 6a 52 74 61 76 53 74 72 33 4f 74 64 61 36 70 4e 50 45 36 4f 79 38 7a 4d 6d 35 37 61 2b 72 30 65 76 74 78 50 62 4d 75 63 33 64 32 66 65 36 41 41 44 38 2b 67 66 56 76 72 72 34 34 51 4d 49 34 63 37 58 43 67 48 74 33 77 44 6a 46 77 63 4a 31 67 6f 48 39 4e 4d 4f 2f 76 58 63 45 68 7a 74 2b 2f 6f 6b 4b 69 73 54 41 75 51 57 47 77 54 77 43 42 77 66 4c 79 6f 51 38 77 37 79 46 77 51 54 48 44 6b 61 47 43 41 43 4f 42 6f 6b 4d 66 6b 65 4b 44 51 69 49 69 77 34 54 43 59 77 50 41 59 71 4e 44 39 45 4c 6a 68 44 46 30 59 36 47 78 30 76 55 6c 30 79 5a 54 5a 63 56 Data Ascii: ijY4ysoqOlaXCohLCds62zpZS3vJiKp4qYs7G/kcaStbV8u8WpnJebutPAnLbLrNOk1ciS0cjRtavStr3Otda6pNPE6Oy8zMm57a+r0evtxPbMuc3d2fe6AAD8+gfVvrr44QMI4c7XCgHt3wDjFwcJ1goH9NMO/vXcEhzt+/okKisTAuQWGwTwCBwfLyoQ8w7yFwQTHDkaGCACOBokMfkeKDQiIiw4TCYwPAYqND9ELjhDF0Y6Gx0vUl0yZTZcV
2024-08-01 06:39:47 UTC	1369	IN	Data Raw: 6a 61 4b 71 64 70 34 6d 6d 68 36 69 49 68 35 43 37 71 71 61 55 6b 49 71 53 66 35 75 32 6b 71 4f 5a 70 62 4f 4b 6f 63 79 69 6d 4c 2b 71 79 37 36 75 73 71 65 74 73 4b 53 6f 75 4e 6a 52 30 4e 53 39 34 62 79 73 7a 73 4f 65 6f 4f 61 77 77 4f 61 33 6f 38 32 35 33 71 2b 6e 76 75 4c 55 79 38 50 41 73 2b 62 69 35 75 36 31 30 37 6e 35 2f 75 7a 79 32 4d 32 2b 41 37 37 57 36 66 7a 39 36 65 4c 4a 43 64 6e 53 79 51 50 67 44 75 6b 52 43 2f 58 72 38 2f 58 30 2f 41 4c 38 45 52 6b 51 46 53 45 47 2f 66 72 71 48 78 6b 43 39 2b 66 36 37 76 6f 4a 4b 75 7a 6f 45 77 34 45 45 50 67 58 42 78 45 4d 4c 42 45 56 45 43 49 52 48 7a 67 37 52 69 51 59 49 55 6f 6b 4a 6b 63 4a 4a 52 35 49 49 53 70 49 54 43 51 77 54 6a 46 61 4d 53 70 57 4f 6c 78 59 4f 54 67 7a 49 31 67 6c 4f 6c 34 74 51 46 Data Ascii: jaKqdp4mmh6iIh5C7qqaUkIqSf5u2kqOZpbOKocyimL+qy76usqetsKSouNjR0NS94byszsOeoOawwOa3o8253q+nvuLUy8PAs+bi5u6107n5/uzy2M2+A77W6fz96eLJCdnSyQPgDukRC/Xr8/X0/AL8ERkQFSEG/frqHxkC9+f67voJKuzoEw4EEPgXBxEMLBEVECIRHzg7RiQYIUokJkcJJR5IISpITCQwTjFaMSpWOlxYOTgzI1glOl4tQF
2024-08-01 06:39:47 UTC	1369	IN	Data Raw: 74 59 71 71 61 32 79 47 75 49 32 72 72 36 42 7a 6c 49 32 79 67 70 32 53 68 73 68 38 67 5a 2b 5a 72 63 57 4c 72 37 47 4b 73 38 65 75 79 37 54 42 74 64 76 46 6b 37 6d 7a 79 62 50 6a 7a 37 69 64 76 65 6a 51 34 38 66 6a 31 74 6e 76 72 63 33 4f 37 4f 58 52 73 73 6d 79 32 4b 2f 72 79 39 6a 75 31 2f 48 4d 76 73 4c 77 75 72 37 5a 33 4f 6a 70 41 41 61 2b 78 65 73 4a 34 64 37 2b 42 4d 62 6a 37 64 49 59 31 2b 6e 6e 35 65 6a 77 45 76 48 71 34 68 48 61 33 76 6e 38 43 52 49 67 4a 74 37 6c 44 4f 30 43 2f 68 38 6b 35 67 51 4f 38 6a 6a 35 43 53 7a 7a 4f 52 63 4b 2b 76 63 62 44 2f 77 54 48 54 6c 48 51 77 73 35 41 77 41 5a 44 6c 41 78 4b 43 39 54 56 43 73 79 47 55 35 4a 54 31 6c 51 46 7a 41 72 51 42 34 36 55 6c 56 6e 59 69 4e 47 61 32 64 4d 56 6b 52 46 4b 44 46 64 55 6e 4a Data Ascii: tYqqa2yGuI2rr6BzlI2ygp2Shsh8gZ+ZrcWLr7GKs8euy7TBtdvFk7mzybPjz7idvejQ48fj1tnvrc3O7OXRssmy2K/ry9ju1/HMvsLwur7Z3OjpAAa+xesJ4d7+BMbj7dIY1+nn5ejwEvHq4hHa3vn8CRIgJt7lDO0C/h8k5gQO8jj5CSzzORcK+vcbD/wTHTlHQws5AwAZDlAxKC9TVCsyGU5JT1lQFzArQB46UlVnYiNGa2dMVkRFKDFdUnJ
2024-08-01 06:39:47 UTC	1369	IN	Data Raw: 48 65 73 73 5a 2b 58 75 4a 4b 30 75 4a 75 38 70 5a 75 6a 71 73 69 57 68 49 75 59 6e 36 6d 4d 73 36 53 32 7a 63 6d 77 79 6f 32 39 6b 36 2b 33 76 63 36 36 78 4a 2b 62 74 38 2b 6e 77 2b 54 4a 33 4e 71 32 79 62 36 76 30 4d 76 56 35 75 76 42 35 50 66 59 36 75 37 65 79 4e 6a 62 33 2b 2f 33 75 77 54 31 43 4d 51 44 78 4e 55 49 42 75 72 49 2b 4e 38 43 42 67 7a 79 39 65 67 45 39 4f 50 71 45 67 73 5a 48 51 37 33 2f 66 7a 34 39 67 48 36 47 51 41 6b 46 77 6e 6b 49 44 41 48 34 77 49 4d 42 68 55 7a 4e 53 38 49 4d 6a 6b 48 4b 68 38 61 45 66 77 32 2b 51 4d 36 4c 30 59 79 4e 7a 56 4e 4c 52 39 4e 54 7a 46 4c 4c 45 63 75 53 79 64 41 4b 31 68 45 4c 45 31 4a 45 56 46 53 50 30 46 61 50 6d 4e 63 59 42 74 6a 4b 32 68 4d 58 30 42 68 52 58 4e 79 61 30 64 52 5a 6d 74 44 4e 6b 64 73 Data Ascii: HessZ+XuJK0uJu8pZujqsiWhIuYn6mMs6S2zcmwyo29k6+3vc66xJ+bt8+nw+TJ3Nq2yb6v0MvV5uvB5PfY6u7eyNjb3+/3uwT1CMQDxNUIBurI+N8CBgzy9egE9OPqEgsZHQ73/fz49gH6GQAkFwnkIDAH4wIMBhUzNS8IMjkHKh8aEfw2+QM6L0YyNzVNLR9NTzFLLEcuSydAK1hELE1JEVFSP0FaPmNcYBtjK2hMX0BhRXNya0dRZmtDNkds
2024-08-01 06:39:47 UTC	1369	IN	Data Raw: 65 39 72 6e 79 47 68 72 54 4c 78 70 2b 66 68 34 37 4a 76 4a 33 4d 73 4c 2b 66 71 4e 43 79 7a 4e 47 5a 78 39 47 76 32 4c 54 59 74 4a 32 33 32 4d 66 6b 75 39 2f 4c 35 4e 6a 6b 77 4f 44 44 34 39 50 6b 30 4f 66 33 30 72 44 4c 30 38 33 56 39 39 66 55 30 4f 34 46 2b 76 48 67 39 73 58 64 33 74 2f 37 41 76 76 72 32 52 50 62 32 2b 51 41 38 2f 4d 51 46 4e 54 59 32 65 37 30 30 51 48 72 2f 74 6b 4f 41 52 58 6a 45 53 54 36 36 78 59 71 44 2b 63 53 4c 2b 33 72 46 69 33 78 37 78 6f 7a 4b 6a 63 59 4d 7a 55 6f 45 30 41 73 46 44 55 78 2b 44 6b 34 4f 44 67 61 48 68 38 66 51 53 55 4d 4a 6b 4d 4d 50 77 39 47 4c 53 55 38 55 53 35 66 4f 45 38 70 50 56 4a 57 4a 55 45 77 59 69 64 46 4e 47 59 6b 59 69 45 69 58 7a 34 6c 58 6a 31 75 4d 7a 4a 54 61 6a 64 6f 55 47 77 35 65 33 59 38 50 Data Ascii: e9rnyGhrTLxp+fh47JvJ3MsL+fqNCyzNGZx9Gv2LTYtJ232Mfku9/L5NjkwODD49Pk0Of30rDL083V99fU0O4F+vHg9sXd3t/7Avvr2RPb2+QA8/MQFNTY2e700QHr/tkOARXjEST66xYqD+cSL+3rFi3x7xozKjcYMzUoE0AsFDUx+Dk4ODgaHh8fQSUMJkMMPw9GLSU8US5fOE8pPVJWJUEwYidFNGYkYiEiXz4lXj1uMzJTajdoUGw5e3Y8P
2024-08-01 06:39:47 UTC	1369	IN	Data Raw: 6e 76 34 71 2b 71 38 4f 47 77 71 2f 48 79 63 61 7a 79 39 53 6e 6b 72 48 49 7a 4e 54 59 71 64 76 53 74 4a 36 69 76 4c 37 67 35 39 76 6a 79 61 72 49 70 72 44 64 32 39 48 76 72 74 61 77 7a 4f 33 4f 37 4e 50 4c 38 4e 44 57 7a 39 32 37 32 4e 4d 49 41 39 7a 58 44 4e 58 31 79 38 76 58 36 38 77 52 33 51 34 4c 41 75 6e 6e 39 64 54 4e 42 67 2f 58 39 4f 6a 75 32 2b 50 33 41 2f 63 6c 4a 52 30 61 46 2b 7a 32 48 77 73 73 45 69 4d 66 48 53 6b 33 4d 43 50 77 39 51 30 58 4b 7a 59 34 46 79 49 31 47 42 38 6d 4f 77 51 35 4a 79 78 42 52 30 45 59 51 78 45 62 51 79 39 51 4e 6b 64 44 51 55 31 62 56 45 63 56 47 6c 67 2f 55 6c 6b 31 49 6b 64 69 4a 56 46 46 59 43 63 31 58 79 31 6f 4c 6e 49 71 5a 30 6c 43 51 6c 52 77 53 6c 74 5a 54 30 6c 5a 55 57 4a 74 58 48 42 77 50 48 56 48 66 45 Data Ascii: nv4q+q8OGwq/Hycazy9SnkrHIzNTYqdvStJ6ivL7g59vjyarIprDd29HvrtawzO3O7NPL8NDWz9272NMIA9zXDNX1y8vX68wR3Q4LAunn9dTNBg/X9Oju2+P3A/clJR0aF+z2HwssEiMfHSk3MCPw9Q0XKzY4FyI1GB8mOwQ5JyxBR0EYQxEbQy9QNkdDQU1bVEcVGlg/Ulk1IkdiJVFFYCc1Xy1oLnIqZ0lCQlRwSltZT0lZUWJtXHBwPHVHfE
2024-08-01 06:39:47 UTC	1369	IN	Data Raw: 72 4a 76 42 72 37 43 66 78 61 2b 30 6f 38 6d 76 75 4b 66 4e 72 37 79 72 30 61 2f 50 33 64 69 7a 33 75 47 6e 37 4e 76 68 35 71 33 6c 35 39 54 68 77 4d 48 42 37 74 50 37 79 76 48 56 31 76 58 4a 41 66 48 35 31 62 2f 31 2b 2b 6d 2f 2b 51 48 4a 32 2f 76 75 2f 64 76 6d 44 4f 30 52 36 2b 4c 34 45 66 4c 32 2f 65 6e 56 38 2f 30 57 37 2b 7a 36 2b 76 73 43 35 76 67 6e 39 67 4d 46 44 67 4d 4d 37 51 48 73 43 43 55 6f 46 6a 6b 4d 4f 52 45 39 45 76 34 34 4c 77 38 53 2b 77 45 43 48 44 4d 6c 53 68 38 59 53 7a 67 2b 50 6b 45 6d 51 69 74 54 4e 78 55 76 52 6c 63 5a 53 42 4d 51 4e 54 38 2f 51 45 31 64 4d 44 70 63 4d 45 6b 36 54 46 55 72 49 45 56 50 54 31 46 64 62 55 42 4b 62 45 42 5a 53 6c 78 6c 64 6a 42 56 58 31 39 61 62 58 31 51 57 6e 78 51 61 56 70 73 61 6f 4a 41 5a 57 39 Data Ascii: rJvBr7Cfxa+0o8mvuKfNr7yr0a/P3diz3uGn7Nvh5q3l59ThwMHB7tP7yvHV1vXJAfH51b/1++m/+QHJ2/vu/dvmDO0R6+L4EfL2/enV8/0W7+z6+vsC5vgn9gMFDgMM7QHsCCUoFjkMORE9Ev44Lw8S+wECHDMlSh8YSzg+PkEmQitTNxUvRlcZSBMQNT8/QE1dMDpcMEk6TFUrIEVPT1FdbUBKbEBZSlxldjBVX19abX1QWnxQaVpsaoJAZW9
2024-08-01 06:39:47 UTC	1369	IN	Data Raw: 72 61 76 78 4e 53 6e 73 64 4f 71 33 36 2b 69 33 74 71 6c 78 64 44 58 30 63 6e 71 74 65 6a 4b 79 4f 33 42 73 4d 66 42 35 38 54 75 78 2b 54 52 30 50 50 72 31 63 33 2b 33 2b 72 50 34 77 48 37 42 66 7a 42 35 2f 54 63 44 4f 6e 59 45 64 2f 63 34 66 4c 71 7a 41 6b 4d 30 51 34 52 37 68 77 67 38 42 2f 76 37 50 45 44 34 39 77 5a 48 4f 45 65 35 66 34 73 4d 41 45 76 41 50 77 43 45 2f 54 73 4b 53 7a 78 4c 51 73 50 50 45 41 52 50 78 41 4e 45 41 34 61 45 78 34 53 53 43 6f 49 53 43 78 50 4a 77 77 4f 50 6a 55 69 56 6c 45 73 57 55 51 6b 53 6b 77 6d 58 52 6f 32 4d 44 34 6b 48 44 30 30 49 57 6f 63 51 55 74 4c 53 46 6c 70 50 45 5a 6f 50 46 56 47 54 30 78 50 52 6d 5a 76 61 56 6c 75 66 58 52 64 4f 58 56 34 50 6e 6c 43 57 34 69 4d 58 59 74 4e 61 49 31 36 65 6d 70 78 54 6c 4a 31 Data Ascii: ravxNSnsdOq36+i3tqlxdDX0cnqtejKyO3BsMfB58Tux+TR0PPr1c3+3+rP4wH7BfzB5/TcDOnYEd/c4fLqzAkM0Q4R7hwg8B/v7PED49wZHOEe5f4sMAEvAPwCE/TsKSzxLQsPPEARPxANEA4aEx4SSCoISCxPJwwOPjUiVlEsWUQkSkwmXRo2MD4kHD00IWocQUtLSFlpPEZoPFVGT0xPRmZvaVlufXRdOXV4PnlCW4iMXYtNaI16empxTlJ1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.9	49832	104.18.95.41	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:48 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1762104049:1722493544:Np3zdzwOpzq4TvaI5wwBswkuEGVUcxd8CUQmfa_Mytk/8ac3d536ab658cbd/af09b333a59d613 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:48 UTC	379	IN	HTTP/1.1 404 Not Found Date: Thu, 01 Aug 2024 06:39:48 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: xgquvalJo34BgybEmvW+R7XSB7njXwx59bk=$7bve69n25/W9Dzlk Server: cloudflare CF-RAY: 8ac3d546ed117c87-EWR alt-svc: h3=":443"; ma=86400
2024-08-01 06:39:48 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.9	49833	104.18.95.41	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:48 UTC	815	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/8ac3d536ab658cbd/1722494387392/0b21e6da347028c78568b35d454810d31763306ba96f9ef3f1c4361bef81b042/lcsy_foqe_oORdt HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/url8w/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:48 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Thu, 01 Aug 2024 06:39:48 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 1 Connection: close
2024-08-01 06:39:48 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 43 79 48 6d 32 6a 52 77 4b 4d 65 46 61 4c 4e 64 52 55 67 51 30 78 64 6a 4d 47 75 70 62 35 37 7a 38 63 51 32 47 2d 2d 42 73 45 49 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gCyHm2jRwKMeFaLNdRUgQ0xdjMGupb57z8cQ2G--BsEIAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2024-08-01 06:39:48 UTC	1	IN	Data Raw: 4a Data Ascii: J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.9	49835	104.18.95.41	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:50 UTC	786	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8ac3d536ab658cbd/1722494387396/SKwrBXNtsNLA2jL HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/url8w/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:50 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:50 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ac3d5528ceb7cf4-EWR alt-svc: h3=":443"; ma=86400
2024-08-01 06:39:50 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 03 00 00 00 62 08 02 00 00 00 1a e2 fe 17 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRbIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.9	49840	104.18.95.41	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:50 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/b/i/8ac3d536ab658cbd/1722494387396/SKwrBXNtsNLA2jL HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:50 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:50 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 8ac3d5568c458cc0-EWR alt-svc: h3=":443"; ma=86400
2024-08-01 06:39:50 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 03 00 00 00 62 08 02 00 00 00 1a e2 fe 17 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRbIDAT$IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.9	49838	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:50 UTC	3467	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.rotect.com%2FFlatbed_Truck_Driving_Jobs.cfm%3Fdomain%3Drotect.com%26fp%3DuQaVNjuDUF4rK4tShEs0Au0%252BUG%252FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%252BbAq91T%252BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%252F%252B4CZ7GqHID18Hn0lG8m%252FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%252FB3mB4%252F7Pf0pa30%252Bn8GQFMwchNirEiFiBbHa%252F3WXS0X4hX9tXVHEVtDO9dSxRwP87%252Fi1FveXGLDtOv0%26yep%3DuR4%252BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%252BrvZrksXCh%252FTWID06mSMUUo50%252FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%252BpDRS3gYFzynxfbhq%252FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%252BErlx0c703%252BKheAp4bPrhPs9N%252BjTikAkPjy%252BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%252BAf1DOeDKAz7sN99h%252Fl6%252BhdNNq%252FajOyXWCcl%252F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%252FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8 [TRUNCATED] Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=7
2024-08-01 06:39:51 UTC	503	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:51 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=8; Expires=Thu, 01-Aug-2024 06:45:51 GMT; Path=/; SameSite=None; Secure last-modified: Thu, 01 Aug 2024 06:39:51 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-08-01 06:39:51 UTC	5469	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c
2024-08-01 06:39:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.9	49841	104.18.95.41	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:50 UTC	928	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1762104049:1722493544:Np3zdzwOpzq4TvaI5wwBswkuEGVUcxd8CUQmfa_Mytk/8ac3d536ab658cbd/af09b333a59d613 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 32596 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: af09b333a59d613 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/url8w/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:50 UTC	16384	OUT	Data Raw: 76 5f 38 61 63 33 64 35 33 36 61 62 36 35 38 63 62 64 3d 59 54 74 4f 38 4c 36 70 24 67 74 42 6a 5a 70 30 6d 30 32 30 55 67 5a 30 42 30 57 4f 70 52 55 65 36 64 30 44 4a 4f 5a 53 36 36 30 6d 44 55 53 36 56 5a 30 58 68 67 24 55 5a 30 6e 42 30 36 46 52 5a 57 30 49 4f 58 6f 66 74 30 30 24 5a 30 33 4f 5a 76 49 30 67 46 61 41 30 78 77 4f 4e 4e 65 30 59 41 68 4f 59 30 25 32 62 68 6a 30 75 30 52 55 70 30 74 77 53 4f 36 66 67 66 61 35 78 30 58 32 33 41 68 56 46 30 59 24 4f 30 59 4f 74 36 63 56 42 33 42 46 47 38 54 4c 30 5a 54 5a 73 30 30 66 30 4e 4a 36 74 62 5a 30 5a 4f 42 46 56 67 4f 70 24 46 74 30 4a 33 58 34 7a 49 31 63 24 46 4f 46 56 30 42 63 6d 30 36 66 73 65 74 4c 64 4e 4a 75 6d 6e 7a 4e 68 70 65 4c 34 68 2b 2b 59 35 7a 75 30 32 54 67 6f 6f 63 72 71 51 63 68 Data Ascii: v_8ac3d536ab658cbd=YTtO8L6p$gtBjZp0m020UgZ0B0WOpRUe6d0DJOZS660mDUS6VZ0Xhg$UZ0nB06FRZW0IOXoft00$Z03OZvI0gFaA0xwONNe0YAhOY0%2bhj0u0RUp0twSO6fgfa5x0X23AhVF0Y$O0YOt6cVB3BFG8TL0ZTZs00f0NJ6tbZ0ZOBFVgOp$Ft0J3X4zI1c$FOFV0Bcm06fsetLdNJumnzNhpeL4h++Y5zu02TgoocrqQch
2024-08-01 06:39:50 UTC	16212	OUT	Data Raw: 4e 46 57 30 73 44 30 57 2d 30 30 56 4e 4e 74 36 30 48 4b 72 4b 4a 62 58 70 30 4f 30 57 30 39 4f 6c 24 30 66 30 67 4f 30 30 30 76 42 44 6c 4f 4f 35 30 58 74 4c 75 30 4a 4f 2d 74 30 53 63 38 30 6d 33 41 70 30 47 30 47 52 6c 62 74 5a 4f 6c 74 6c 61 30 41 4f 4c 58 61 33 30 64 4f 36 6a 36 4f 30 57 5a 74 6a 30 66 30 73 4f 67 30 6c 50 30 74 30 55 63 4c 78 4f 7a 4f 36 6d 36 45 30 51 39 5a 55 36 39 30 59 30 44 74 36 34 36 4b 39 30 52 55 34 36 38 30 6b 44 5a 53 36 31 30 65 52 58 53 36 43 30 75 52 5a 70 36 6b 30 71 52 55 57 36 51 30 6a 74 55 70 36 44 4f 2b 52 58 41 36 69 30 70 74 5a 4e 36 6a 4f 44 74 58 4e 36 54 4f 2b 74 5a 41 36 53 4f 44 24 55 4e 36 70 4f 71 74 67 78 36 41 4f 51 74 58 33 36 58 4f 56 24 67 62 36 78 4f 6f 24 55 78 36 61 4f 50 62 4c 47 30 46 44 59 74 Data Ascii: NFW0sD0W-00VNNt60HKrKJbXp0O0W09Ol$0f0gO000vBDlOO50XtLu0JO-t0Sc80m3Ap0G0GRlbtZOltla0AOLXa30dO6j6O0WZtj0f0sOg0lP0t0UcLxOzO6m6E0Q9ZU690Y0Dt646K90RU4680kDZS610eRXS6C0uRZp6k0qRUW6Q0jtUp6DO+RXA6i0ptZN6jODtXN6TO+tZA6SOD$UN6pOqtgx6AOQtX36XOV$gb6xOo$Ux6aOPbLG0FDYt
2024-08-01 06:39:51 UTC	330	IN	HTTP/1.1 200 OK Date: Thu, 01 Aug 2024 06:39:51 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 26200 Connection: close cf-chl-gen: +9ZWj8jc2wElV3F4g7ljHXwVI7IUG2tIhwtz82gQ9fobSY8kLmNSsdxf67J+mBJrbBDSs8rIWGJrOPeR$h1rOUVuoUyURr9Qj Server: cloudflare CF-RAY: 8ac3d5578ab919ef-EWR alt-svc: h3=":443"; ma=86400
2024-08-01 06:39:51 UTC	1039	IN	Data Raw: 79 62 70 38 74 62 65 6f 76 49 69 6b 71 38 7a 52 71 71 75 55 6c 37 65 72 79 38 6d 61 73 39 50 4e 6e 72 6a 50 35 4a 2b 38 73 5a 32 61 36 61 61 70 70 72 6a 4c 32 64 79 72 71 71 7a 65 30 2b 62 7a 35 50 54 34 39 4f 53 33 78 2f 6e 73 39 74 50 37 37 75 51 44 42 50 54 30 43 63 54 71 41 2f 72 64 37 76 6f 48 45 41 48 71 46 63 2f 32 44 64 6f 59 43 64 54 58 33 78 6f 59 45 41 37 35 47 66 73 44 46 66 55 6e 35 79 59 6b 44 68 6f 44 45 54 49 73 49 65 30 79 38 43 4d 75 4d 6a 6f 70 4d 7a 73 38 4c 77 4a 42 2f 53 34 6c 45 45 45 34 51 67 67 56 42 78 6b 73 49 43 73 68 48 46 4d 30 54 30 34 72 45 69 6b 6b 57 31 56 63 4f 31 70 61 4e 31 55 66 48 31 67 34 4b 44 30 6a 4b 57 64 4d 51 47 52 6d 4d 43 67 2b 62 7a 4e 7a 54 6d 45 35 4d 47 51 37 55 48 52 48 58 55 46 62 56 6e 79 41 63 6e 70 Data Ascii: ybp8tbeovIikq8zRqquUl7ery8mas9PNnrjP5J+8sZ2a6aapprjL2dyrqqze0+bz5PT49OS3x/ns9tP77uQDBPT0CcTqA/rd7voHEAHqFc/2DdoYCdTX3xoYEA75GfsDFfUn5yYkDhoDETIsIe0y8CMuMjopMzs8LwJB/S4lEEE4QggVBxksICshHFM0T04rEikkW1VcO1paN1UfH1g4KD0jKWdMQGRmMCg+bzNzTmE5MGQ7UHRHXUFbVnyAcnp
2024-08-01 06:39:51 UTC	1369	IN	Data Raw: 4d 6c 36 2b 79 79 4e 57 33 70 61 32 6e 7a 4e 4c 4d 6f 4c 79 77 35 4b 53 65 76 4f 65 6c 77 74 2b 32 78 4e 69 77 72 73 6a 4b 36 37 37 7a 74 75 76 78 32 4d 6a 6c 75 37 76 63 32 2b 38 44 7a 64 76 44 39 74 41 48 30 75 6b 49 31 65 62 63 2b 73 7a 71 33 52 54 6c 37 65 49 59 2b 65 2f 6f 35 51 66 30 37 2f 6f 43 39 2b 37 38 48 50 76 30 2f 51 63 6f 36 68 6b 72 36 78 44 75 45 41 4d 54 37 4f 38 4a 4a 67 49 72 47 68 51 6e 4c 50 35 41 51 6a 55 63 45 78 45 57 42 44 41 43 50 7a 5a 47 46 69 49 6c 49 43 4e 43 50 53 56 4f 48 7a 67 75 57 6c 41 33 4c 44 63 70 4f 52 74 65 4c 54 4a 55 58 6b 56 6b 5a 55 42 53 55 7a 39 44 56 6c 74 68 4c 43 52 6b 5a 32 70 6c 59 33 4e 6d 64 45 4e 6f 54 48 63 2f 66 48 68 42 67 45 39 32 59 48 42 2f 67 6b 56 6d 64 33 39 4e 57 6f 4f 4a 68 49 52 4d 6b 5a Data Ascii: Ml6+yyNW3pa2nzNLMoLyw5KSevOelwt+2xNiwrsjK677ztuvx2Mjlu7vc2+8DzdvD9tAH0ukI1ebc+szq3RTl7eIY+e/o5Qf07/oC9+78HPv0/Qco6hkr6xDuEAMT7O8JJgIrGhQnLP5AQjUcExEWBDACPzZGFiIlICNCPSVOHzguWlA3LDcpORteLTJUXkVkZUBSUz9DVlthLCRkZ2plY3NmdENoTHc/fHhBgE92YHB/gkVmd39NWoOJhIRMkZ
2024-08-01 06:39:51 UTC	1369	IN	Data Raw: 32 4b 79 74 33 38 6d 5a 34 75 4b 79 31 74 47 36 35 37 71 36 32 65 4f 70 32 71 32 75 79 75 65 30 31 63 57 2f 73 64 71 79 35 62 50 64 32 63 75 37 34 74 7a 66 41 2b 37 65 33 75 4d 45 39 74 2f 43 2b 38 41 41 34 4f 48 70 37 42 58 55 42 39 54 78 7a 39 50 59 2b 64 59 4f 46 68 6a 78 48 4f 2f 75 41 4f 45 44 41 65 41 4b 2b 50 55 76 44 66 7a 35 44 67 6b 43 44 69 73 78 4b 53 33 78 42 68 49 6e 45 51 63 35 2b 44 67 35 4a 54 77 35 52 79 49 52 4e 44 63 6c 51 30 6b 64 48 77 38 6f 44 45 51 78 4b 6a 55 71 45 44 73 33 50 56 30 73 54 31 6f 76 59 6a 4e 5a 55 6c 77 69 47 6d 49 30 51 57 4e 4d 5a 55 4a 4c 4b 53 35 75 61 31 39 41 54 58 59 79 61 6d 52 4f 55 30 78 38 64 46 4e 75 66 58 30 38 67 55 5a 61 4f 33 4a 2f 67 49 71 48 68 59 65 45 68 35 4f 56 64 59 43 44 63 4a 6c 57 5a 33 46 Data Ascii: 2Kyt38mZ4uKy1tG657q62eOp2q2uyue01cW/sdqy5bPd2cu74tzfA+7e3uME9t/C+8AA4OHp7BXUB9Txz9PY+dYOFhjxHO/uAOEDAeAK+PUvDfz5DgkCDisxKS3xBhInEQc5+Dg5JTw5RyIRNDclQ0kdHw8oDEQxKjUqEDs3PV0sT1ovYjNZUlwiGmI0QWNMZUJLKS5ua19ATXYyamROU0x8dFNufX08gUZaO3J/gIqHhYeEh5OVdYCDcJlWZ3F
2024-08-01 06:39:51 UTC	1369	IN	Data Raw: 74 79 34 7a 74 69 38 70 62 4c 67 75 38 6e 50 77 4f 44 4e 72 73 57 71 71 38 61 32 39 38 62 54 32 2b 7a 37 7a 62 58 2b 2b 50 6a 33 42 50 66 44 31 4d 4b 2f 35 2b 48 6e 44 75 48 58 37 38 38 4d 34 64 37 52 46 42 6e 6b 46 4e 45 4d 36 2f 76 35 31 2f 62 71 41 67 4c 34 39 65 41 66 39 75 51 46 42 51 6b 4b 4a 51 6b 4b 48 78 33 79 4c 2b 73 32 45 43 72 79 44 43 6e 75 50 78 30 77 2f 50 77 6a 45 76 59 66 41 54 45 39 50 77 59 57 41 79 6b 33 45 42 45 4b 45 77 39 4b 4d 42 4a 56 56 30 67 6c 57 43 38 73 57 56 34 2f 58 53 41 74 48 55 42 6d 47 6b 42 58 4a 52 35 45 54 58 41 76 62 6d 63 6c 4e 45 78 4e 4b 55 46 45 63 45 63 75 56 48 4f 41 4e 6e 35 33 67 30 32 43 58 54 6b 36 59 48 78 35 5a 34 64 6c 68 30 39 4b 67 6e 4e 4f 69 30 68 32 53 70 53 4c 56 56 69 59 66 35 78 39 62 4b 46 30 Data Ascii: ty4zti8pbLgu8nPwODNrsWqq8a298bT2+z7zbX++Pj3BPfD1MK/5+HnDuHX788M4d7RFBnkFNEM6/v51/bqAgL49eAf9uQFBQkKJQkKHx3yL+s2ECryDCnuPx0w/PwjEvYfATE9PwYWAyk3EBEKEw9KMBJVV0glWC8sWV4/XSAtHUBmGkBXJR5ETXAvbmclNExNKUFEcEcuVHOANn53g02CXTk6YHx5Z4dlh09KgnNOi0h2SpSLVViYf5x9bKF0
2024-08-01 06:39:51 UTC	1369	IN	Data Raw: 53 37 71 72 62 66 76 37 6d 77 35 73 50 6a 77 62 44 46 35 37 54 75 79 73 58 64 33 64 6a 2b 34 64 44 6a 30 64 6a 41 2f 76 73 42 41 4d 4b 2b 34 51 76 6b 43 66 33 52 7a 39 50 6c 35 51 63 4c 30 77 6e 62 38 2f 34 4e 47 4e 59 50 49 2b 7a 61 2b 41 4c 35 43 67 6f 72 36 66 67 49 42 78 77 67 4a 43 45 43 4e 41 6e 76 43 50 66 31 2b 50 49 46 50 41 73 63 46 44 73 62 2b 52 77 45 2f 68 30 31 48 78 77 43 47 68 67 6a 47 55 51 63 45 52 31 54 4b 52 45 67 56 53 38 76 48 46 41 77 4d 78 34 75 4c 43 41 64 55 54 46 51 48 31 70 54 58 45 64 71 4b 6b 39 68 4f 55 74 4c 63 48 4a 7a 4b 53 70 50 57 6e 6f 33 4e 6c 6b 2b 58 46 4e 36 63 58 4a 66 66 44 36 42 67 31 39 70 51 32 42 4c 57 48 43 47 67 33 4b 42 69 58 2b 51 59 5a 52 61 6e 48 47 4c 6b 32 70 74 6b 5a 31 78 67 58 4f 51 6c 70 36 69 63 Data Ascii: S7qrbfv7mw5sPjwbDF57TuysXd3dj+4dDj0djA/vsBAMK+4QvkCf3Rz9Pl5QcL0wnb8/4NGNYPI+za+AL5Cgor6fgIBxwgJCECNAnvCPf1+PIFPAscFDsb+RwE/h01HxwCGhgjGUQcER1TKREgVS8vHFAwMx4uLCAdUTFQH1pTXEdqKk9hOUtLcHJzKSpPWno3Nlk+XFN6cXJffD6Bg19pQ2BLWHCGg3KBiX+QYZRanHGLk2ptkZ1xgXOQlp6ic
2024-08-01 06:39:51 UTC	1369	IN	Data Raw: 75 73 61 6e 6b 38 2b 32 74 77 72 54 32 78 50 6e 72 2b 4e 47 32 38 72 2f 4d 75 72 2f 42 32 76 62 32 78 73 48 57 44 38 6e 46 78 74 44 67 79 63 6f 51 35 63 30 47 47 39 6a 4e 48 52 76 64 31 66 66 62 32 4e 55 69 34 2b 58 77 33 69 76 6d 39 43 6f 6b 4b 2b 45 75 4c 2b 51 47 35 76 44 2b 46 77 77 6e 46 66 6b 36 4f 2f 68 42 2f 52 45 4e 4e 68 4d 66 47 52 41 52 52 53 4d 70 50 30 55 6d 51 6b 78 43 48 30 5a 50 53 7a 55 54 51 78 67 7a 46 46 6b 31 4c 78 78 4f 54 6a 5a 65 58 53 39 44 4f 6a 73 7a 4b 6a 35 75 50 7a 68 46 4b 45 70 7a 54 46 42 57 54 30 74 44 4d 58 6c 56 62 30 74 49 56 58 45 35 67 56 70 30 58 56 4e 59 63 59 6d 46 59 6f 36 4e 5a 32 46 4c 55 6b 6d 42 54 31 5a 4e 68 56 5a 72 62 6e 31 64 6b 46 35 77 57 6f 32 45 66 4b 4e 78 6a 33 39 68 59 32 69 44 64 6d 52 6d 61 48 Data Ascii: usank8+2twrT2xPnr+NG28r/Mur/B2vb2xsHWD8nFxtDgycoQ5c0GG9jNHRvd1ffb2NUi4+Xw3ivm9CokK+EuL+QG5vD+FwwnFfk6O/hB/RENNhMfGRARRSMpP0UmQkxCH0ZPSzUTQxgzFFk1LxxOTjZeXS9DOjszKj5uPzhFKEpzTFBWT0tDMXlVb0tIVXE5gVp0XVNYcYmFYo6NZ2FLUkmBT1ZNhVZrbn1dkF5wWo2EfKNxj39hY2iDdmRmaH
2024-08-01 06:39:51 UTC	1369	IN	Data Raw: 34 38 54 6c 79 4c 7a 79 31 4c 6e 59 74 2b 50 54 38 76 50 57 30 38 6a 33 2b 74 6f 4e 36 4f 37 66 45 41 7a 76 7a 42 54 6b 38 52 67 55 36 4f 72 55 33 41 67 52 32 4f 6e 35 2f 76 41 67 47 41 50 33 46 78 67 59 2b 68 7a 6b 47 66 30 77 4b 42 51 43 2f 69 41 72 4f 54 50 7a 44 7a 7a 37 4e 78 41 4b 43 68 45 58 2b 77 51 45 4d 67 5a 45 52 43 6f 46 53 79 6b 76 49 43 73 65 50 68 78 46 49 6b 59 70 57 44 59 36 4b 79 59 78 50 79 70 51 58 45 45 78 4c 6d 41 34 4e 31 68 67 52 44 70 73 4b 55 30 39 4f 57 42 67 51 32 51 74 59 55 5a 34 63 46 78 4b 52 32 68 7a 67 58 73 38 56 34 52 45 66 31 68 53 55 6c 6c 66 52 45 78 4d 65 6b 36 4d 6a 48 4a 4e 6b 33 46 33 61 48 4e 6d 68 6d 68 32 56 58 39 6f 6b 57 36 53 64 61 53 43 68 6e 64 79 66 59 74 32 6e 4b 69 4e 65 6f 70 74 6d 34 47 6c 6b 61 4b Data Ascii: 48TlyLzy1LnYt+PT8vPW08j3+toN6O7fEAzvzBTk8RgU6OrU3AgR2On5/vAgGAP3FxgY+hzkGf0wKBQC/iArOTPzDzz7NxAKChEX+wQEMgZERCoFSykvICsePhxFIkYpWDY6KyYxPypQXEExLmA4N1hgRDpsKU09OWBgQ2QtYUZ4cFxKR2hzgXs8V4REf1hSUllfRExMek6MjHJNk3F3aHNmhmh2VX9okW6SdaSChndyfYt2nKiNeoptm4GlkaK
2024-08-01 06:39:51 UTC	1369	IN	Data Raw: 73 33 4b 34 64 33 53 39 4f 58 75 31 66 63 41 36 39 72 6c 78 50 6e 65 36 65 58 39 34 68 54 4d 41 4f 59 49 32 41 54 73 48 4e 67 48 36 79 44 59 44 76 4c 39 46 41 66 32 38 65 67 55 2b 52 7a 6b 43 76 34 4b 4d 42 51 44 4a 53 41 66 42 78 49 30 4a 67 6f 38 45 69 6f 4f 51 50 67 34 45 6b 52 45 4b 42 5a 49 4f 44 51 59 54 41 55 76 48 6b 42 45 4d 79 4d 65 55 45 4d 70 57 45 67 32 4b 79 59 56 54 43 35 67 49 55 30 7a 56 47 42 48 4f 56 67 2b 56 54 73 32 4a 57 4d 2f 4f 69 6c 62 51 30 39 57 62 45 42 6f 55 58 56 4d 61 31 5a 72 54 6b 70 77 64 31 4f 45 68 48 46 57 55 6b 6c 31 57 49 79 4d 65 31 36 51 6a 48 39 6a 58 70 43 43 5a 6d 4b 49 64 6d 75 4d 58 59 74 76 61 34 4b 51 63 71 52 64 6b 48 65 43 66 70 5a 36 64 70 79 5a 66 72 47 63 6f 49 4a 2b 71 4b 4b 45 75 48 57 6c 69 71 32 65 Data Ascii: s3K4d3S9OXu1fcA69rlxPne6eX94hTMAOYI2ATsHNgH6yDYDvL9FAf28egU+RzkCv4KMBQDJSAfBxI0Jgo8EioOQPg4EkREKBZIODQYTAUvHkBEMyMeUEMpWEg2KyYVTC5gIU0zVGBHOVg+VTs2JWM/OilbQ09WbEBoUXVMa1ZrTkpwd1OEhHFWUkl1WIyMe16QjH9jXpCCZmKIdmuMXYtva4KQcqRdkHeCfpZ6dpyZfrGcoIJ+qKKEuHWliq2e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.9	49850	104.18.95.41	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:51 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1762104049:1722493544:Np3zdzwOpzq4TvaI5wwBswkuEGVUcxd8CUQmfa_Mytk/8ac3d536ab658cbd/af09b333a59d613 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-01 06:39:51 UTC	379	IN	HTTP/1.1 404 Not Found Date: Thu, 01 Aug 2024 06:39:51 GMT Content-Type: application/json Content-Length: 7 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 0yTH0b0I8b4D8VbnmUMK8z1+o5UGDOWKxck=$CJQ7IqCaqxP5Iork Server: cloudflare CF-RAY: 8ac3d55d0fe8436a-EWR alt-svc: h3=":443"; ma=86400
2024-08-01 06:39:51 UTC	7	IN	Data Raw: 69 6e 76 61 6c 69 64 Data Ascii: invalid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.9	49848	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:51 UTC	3293	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.rotect.com%2FFlatbed_Truck_Driving_Jobs.cfm%3Fdomain%3Drotect.com%26fp%3DuQaVNjuDUF4rK4tShEs0Au0%252BUG%252FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%252BbAq91T%252BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%252F%252B4CZ7GqHID18Hn0lG8m%252FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%252FB3mB4%252F7Pf0pa30%252Bn8GQFMwchNirEiFiBbHa%252F3WXS0X4hX9tXVHEVtDO9dSxRwP87%252Fi1FveXGLDtOv0%26yep%3DuR4%252BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%252BrvZrksXCh%252FTWID06mSMUUo50%252FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%252BpDRS3gYFzynxfbhq%252FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%252BErlx0c703%252BKheAp4bPrhPs9N%252BjTikAkPjy%252BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%252BAf1DOeDKAz7sN99h%252Fl6%252BhdNNq%252FajOyXWCcl%252F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%252FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8 [TRUNCATED] Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=8
2024-08-01 06:39:52 UTC	503	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:52 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=9; Expires=Thu, 01-Aug-2024 06:45:52 GMT; Path=/; SameSite=None; Secure last-modified: Thu, 01 Aug 2024 06:39:52 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-08-01 06:39:52 UTC	5469	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c
2024-08-01 06:39:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.9	49849	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:51 UTC	797	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2FFlatbed_Truck_Driving_Jobs.cfm&o=1722494390085&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=8
2024-08-01 06:39:52 UTC	380	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:52 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Thu, 01 Aug 2024 06:39:52 GMT content-length: 43 content-type: image/gif connection: close
2024-08-01 06:39:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.9	49852	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:52 UTC	563	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2FFlatbed_Truck_Driving_Jobs.cfm&o=1722494390085&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=9
2024-08-01 06:39:53 UTC	380	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:53 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Thu, 01 Aug 2024 06:39:53 GMT content-length: 43 content-type: image/gif connection: close
2024-08-01 06:39:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.9	49854	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:54 UTC	3460	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.rotect.com%2FJob_Vacancies_Jobs.cfm%3Fdomain%3Drotect.com%26fp%3DuQaVNjuDUF4rK4tShEs0Au0%252BUG%252FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%252BbAq91T%252BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%252F%252B4CZ7GqHID18Hn0lG8m%252FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%252FB3mB4%252F7Pf0pa30%252Bn8GQFMwchNirEiFiBbHa%252F3WXS0X4hX9tXVHEVtDO9dSxRwP87%252Fi1FveXGLDtOv0%26yep%3DuR4%252BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%252BrvZrksXCh%252FTWID06mSMUUo50%252FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%252BpDRS3gYFzynxfbhq%252FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%252BErlx0c703%252BKheAp4bPrhPs9N%252BjTikAkPjy%252BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%252BAf1DOeDKAz7sN99h%252Fl6%252BhdNNq%252FajOyXWCcl%252F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%252FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1 [TRUNCATED] Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=9
2024-08-01 06:39:55 UTC	504	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:55 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=10; Expires=Thu, 01-Aug-2024 06:45:55 GMT; Path=/; SameSite=None; Secure last-modified: Thu, 01 Aug 2024 06:39:55 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-08-01 06:39:55 UTC	5474	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.9	49862	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:55 UTC	3287	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.rotect.com%2FJob_Vacancies_Jobs.cfm%3Fdomain%3Drotect.com%26fp%3DuQaVNjuDUF4rK4tShEs0Au0%252BUG%252FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%252BbAq91T%252BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%252F%252B4CZ7GqHID18Hn0lG8m%252FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%252FB3mB4%252F7Pf0pa30%252Bn8GQFMwchNirEiFiBbHa%252F3WXS0X4hX9tXVHEVtDO9dSxRwP87%252Fi1FveXGLDtOv0%26yep%3DuR4%252BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%252BrvZrksXCh%252FTWID06mSMUUo50%252FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%252BpDRS3gYFzynxfbhq%252FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%252BErlx0c703%252BKheAp4bPrhPs9N%252BjTikAkPjy%252BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%252BAf1DOeDKAz7sN99h%252Fl6%252BhdNNq%252FajOyXWCcl%252F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%252FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1 [TRUNCATED] Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=10
2024-08-01 06:39:56 UTC	504	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:55 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=11; Expires=Thu, 01-Aug-2024 06:45:55 GMT; Path=/; SameSite=None; Secure last-modified: Thu, 01 Aug 2024 06:39:55 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-08-01 06:39:56 UTC	5469	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c
2024-08-01 06:39:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.9	49863	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:56 UTC	790	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2FJob_Vacancies_Jobs.cfm&o=1722494394730&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=10
2024-08-01 06:39:56 UTC	380	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:56 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Thu, 01 Aug 2024 06:39:56 GMT content-length: 43 content-type: image/gif connection: close
2024-08-01 06:39:56 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.9	49864	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:39:57 UTC	556	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2FJob_Vacancies_Jobs.cfm&o=1722494394730&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=11
2024-08-01 06:39:57 UTC	380	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:39:57 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Thu, 01 Aug 2024 06:39:57 GMT content-length: 43 content-type: image/gif connection: close
2024-08-01 06:39:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.9	49866	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:40:00 UTC	3464	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.rotect.com%2FAllied_Medical_Driver.cfm%3Fdomain%3Drotect.com%26fp%3DuQaVNjuDUF4rK4tShEs0Au0%252BUG%252FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%252BbAq91T%252BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%252F%252B4CZ7GqHID18Hn0lG8m%252FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%252FB3mB4%252F7Pf0pa30%252Bn8GQFMwchNirEiFiBbHa%252F3WXS0X4hX9tXVHEVtDO9dSxRwP87%252Fi1FveXGLDtOv0%26yep%3DuR4%252BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%252BrvZrksXCh%252FTWID06mSMUUo50%252FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%252BpDRS3gYFzynxfbhq%252FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%252BErlx0c703%252BKheAp4bPrhPs9N%252BjTikAkPjy%252BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%252BAf1DOeDKAz7sN99h%252Fl6%252BhdNNq%252FajOyXWCcl%252F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%252FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTS [TRUNCATED] Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=11
2024-08-01 06:40:01 UTC	504	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:40:01 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=12; Expires=Thu, 01-Aug-2024 06:46:01 GMT; Path=/; SameSite=None; Secure last-modified: Thu, 01 Aug 2024 06:40:01 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-08-01 06:40:01 UTC	948	IN	Data Raw: 33 41 44 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 64 Data Ascii: 3ADwindow.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","cd
2024-08-01 06:40:01 UTC	4528	IN	Data Raw: 31 31 41 38 0d 0a 73 44 65 66 61 75 6c 74 22 3a 30 2c 22 65 6e 61 62 6c 65 52 65 63 61 6c 6c 42 74 6e 44 65 73 69 67 6e 22 3a 31 2c 22 65 6e 61 62 6c 65 52 65 63 61 6c 6c 42 74 6e 22 3a 30 2c 22 72 65 63 61 6c 6c 42 74 6e 4c 6f 67 69 63 22 3a 30 2c 22 6c 61 79 65 72 4c 6f 67 69 63 22 3a 33 2c 22 63 73 70 62 6c 6f 63 6b 22 3a 30 2c 22 77 65 6c 63 6f 6d 65 70 72 70 73 22 3a 31 2c 22 68 69 64 65 73 74 61 63 6b 73 22 3a 30 2c 22 63 75 73 74 70 75 72 70 6f 73 65 73 22 3a 30 2c 22 63 75 73 74 76 65 6e 64 6f 72 73 22 3a 30 2c 22 69 73 6c 73 70 61 22 3a 31 2c 22 6d 73 70 61 5f 63 6f 76 65 72 22 3a 31 2c 22 6d 73 70 61 5f 6f 6f 6d 6f 64 65 22 3a 31 2c 22 6d 73 70 61 5f 73 70 6d 6f 64 65 22 3a 32 2c 22 62 6f 6f 6c 47 72 6f 75 70 43 68 6f 69 63 65 73 22 3a 31 2c 22 Data Ascii: 11A8sDefault":0,"enableRecallBtnDesign":1,"enableRecallBtn":0,"recallBtnLogic":0,"layerLogic":3,"cspblock":0,"welcomeprps":1,"hidestacks":0,"custpurposes":0,"custvendors":0,"islspa":1,"mspa_cover":1,"mspa_oomode":1,"mspa_spmode":2,"boolGroupChoices":1,"
2024-08-01 06:40:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.9	49867	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:40:02 UTC	3290	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fww01.rotect.com%2FAllied_Medical_Driver.cfm%3Fdomain%3Drotect.com%26fp%3DuQaVNjuDUF4rK4tShEs0Au0%252BUG%252FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%252BbAq91T%252BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%252F%252B4CZ7GqHID18Hn0lG8m%252FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%252FB3mB4%252F7Pf0pa30%252Bn8GQFMwchNirEiFiBbHa%252F3WXS0X4hX9tXVHEVtDO9dSxRwP87%252Fi1FveXGLDtOv0%26yep%3DuR4%252BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%252BrvZrksXCh%252FTWID06mSMUUo50%252FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%252BpDRS3gYFzynxfbhq%252FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%252BErlx0c703%252BKheAp4bPrhPs9N%252BjTikAkPjy%252BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%252BAf1DOeDKAz7sN99h%252Fl6%252BhdNNq%252FajOyXWCcl%252F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%252FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTS [TRUNCATED] Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=12
2024-08-01 06:40:02 UTC	504	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:40:02 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=13; Expires=Thu, 01-Aug-2024 06:46:02 GMT; Path=/; SameSite=None; Secure last-modified: Thu, 01 Aug 2024 06:40:02 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-08-01 06:40:02 UTC	5474	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.9	49868	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:40:02 UTC	793	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2FAllied_Medical_Driver.cfm&o=1722494400190&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ww01.rotect.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=12
2024-08-01 06:40:02 UTC	380	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:40:02 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Thu, 01 Aug 2024 06:40:02 GMT content-length: 43 content-type: image/gif connection: close
2024-08-01 06:40:02 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.9	49869	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:40:03 UTC	559	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fww01.rotect.com%2FAllied_Medical_Driver.cfm&o=1722494400190&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=26&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=13
2024-08-01 06:40:03 UTC	380	IN	HTTP/1.1 200 OK date: Thu, 01 Aug 2024 06:40:03 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Thu, 01 Aug 2024 06:40:03 GMT content-length: 43 content-type: image/gif connection: close
2024-08-01 06:40:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.9	49836	87.230.98.78	443	5748	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-01 06:40:06 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-08-01 06:40:06 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Target ID:	0
Start time:	02:38:46
Start date:	01/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	02:38:50
Start date:	01/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1712 --field-trial-handle=1940,i,12065040936513396881,3636851821948398797,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	02:38:52
Start date:	01/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://rotect.com"
Imagebase:	0x7ff6b2cb0000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: http://ww01.rotect.com/Job_Vacancies_Jobs.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILOD	LLM: Score: 8 brands: Rotect Reasons: The URL 'http://ww01.rotect.com/Job_Vacancies_Jobs.cfm?domain=rotect.com&fp=...' is suspicious due to the use of 'ww01' instead of 'www', which is a common technique used in phishing attacks to mislead users. The page contains advertisements and links that are not directly related to the brand 'Rotect', which is another red flag. The presence of multiple external links and the lack of a prominent login form or captcha further suggest that this site is designed to redirect users to other potentially harmful sites. Based on these observations, the site appears to be a phishing site. DOM: 35.20.pages.csv
Source: http://ww01.rotect.com/Job_Vacancies_Jobs.cfm?domain=rotect.com&fp=uQaVNjuDUF4rK4tShEs0Au0%2BUG%2FCeyiWjmHuJDHRqzsEMBO5hTAyoZGFMwv9geWH6UgUNIRIK0jH34rMqn%2BbAq91T%2BH7XHKwVndZVPw5en5SqttRmoxpRcwSJEY169O%2F%2B4CZ7GqHID18Hn0lG8m%2FuiO90YVULVBdMDPE0snKT7ILODWhmpK84X9k5wEaJofZVEDDqQGjbhmyqz1kDl5aiVQBi18vjP2R5USjHuKYNq7BKfQGR%2FB3mB4%2F7Pf0pa30%2Bn8GQFMwchNirEiFiBbHa%2F3WXS0X4hX9tXVHEVtDO9dSxRwP87%2Fi1FveXGLDtOv0&yep=uR4%2BnZ7cz5mWiXJVawFgNzNBqOCeymjuSDQqG0Alus3nD0orhEGGffc8QmNGBXh4bxGUw%2BrvZrksXCh%2FTWID06mSMUUo50%2FPHhycEgdiEpwZfubxBn1XEO9K03M77Pdhb2RwFuLyoum9d0cxXDaObAlpXd%2BpDRS3gYFzynxfbhq%2FBcNbWMv7LnNBqqHmzantZfazVTP4Q3Sh5i9PzEUid9NczlG6yJ192hW73qTdeEFmTVLZSoOMq8VmUupXbdK8gfZgVBJ%2BErlx0c703%2BKheAp4bPrhPs9N%2BjTikAkPjy%2BFE9fgjCiLyHv9p2RyjL4TdCwKeYxgT%2BAf1DOeDKAz7sN99h%2Fl6%2BhdNNq%2FajOyXWCcl%2F3tyF4AqR5eDYi9C32T5bhhpECkIaNj4%2FeSrVhhWdrCsDumR03cQjpzlish0KjRjrOhp2SgUvrSlyu7JEX8jYBTSnZ1f799I869dOJpnv%2F73J2w083cKWeSNilzYTAa4CR%2BMvM2qQoAqjc08pDZiHkL6b5MjVRcP6c4i5dU31rnZ%2Bkmwy7OHkDsnnGjElKFiaHSxO91VDUJk5vrRjkMjkXIy2uILIkc6TEPjii6jYyypXxZ4eYyija1oDOtc2I3nx4b%2BUMzFr2c%2FSLfe32iW2HH9q1ePVrxViaalLTTLGyJVWvW5wwyXnk0jGXhUCnigLLVRCzgQ%2Bqa%2BQ7kdoV3Prt2jVq2JIvbEY2Sy%2BlXVGBWokdZSGlvUcAtSWlTxaaJ6vtQd06Kdk1nLhN0fK4ZddBdusz%2Ba%2B4b5VUu3xTRNTeb%2BQEyZFOwuNbMfSEhVodK1RZgbaaONJTbSSfzHB3hSN4H%2Fhjew%2FV%2F2qn2geIorBIGVe8ihORHIvWa9m47FAM1VYbgstMUVFew55MOVOnVfz9%2F3wP9op%2FJdBOQEJ43Iyyhk5bv5IkaaQkmahSo57X7l%2FMZUPXy1JQU6%2F6SK5OBqOjsOztIJI%2FVVafAbGHp7mQ%2BNM7WdgsxJzmRjqbRFV5xZEYb3qkUfRTjeTewHOngd8mFDFv%2B3QCJ101a%2FS7zKV%2FRzq1pebGcywM1t%2FoqCdH3Gh%2F7IfGvgMIrQTiTjdCZWOR%2F5shU74SCxaDbOTGlbbsWMwtODtId1%2BiCgY5XQAHcyDjHD%2Bg3T3ktNbRX7bF7f8ai5iLcllrUsqhNrewG9cmGZj3%2FFhPkTyVr%2FnKpXUeeXa%2FQiF5KpiAf4b0AWLY%2FFHcUqTyjyIrMexuiedMZnTUqo8YnBatBorqKlaZOWnm0%2FsrVNoisJ60CPABKIQ0%2FI0jk%2Fy6J89xswtQCWz6VUSSeWiSckpuUX0EG21Wfgb2zeLmE81Dnrku%2BrT9gXXwQJTRTPsi28z8YXodHl8rDAdx2paTV8uwr5H22Hdk9KnbaHx%2BhkE%2F2EaLaBA2apEQAZxGxEGgg2LoG%2FSX3tLFqFSSiK46HhhFAW7yhI1OWTcMYhRKRZivIAeLnvPC2rCaPur0MWGhd%2BsXcmvqy2%2Bs93uTqsNSyNxZtdcEc%2FJ%2Bz%2B5WOIg%2BoZPG4yDSb9hyEIRcsRsA8ybsXyIJCmarUMDiRUVCgQrTC4oWzFPGuaupZTR34nxdv%2B00eZl%2BMLAyNYPM1gGyB6aC4IYjxv5xIlfmnGLG3l6lxGXE5viAqfh2bQ7lsnjzaZbgn%2B0ko9b4bWbIQ9XKNyOS4oC5tGmapfR3vtg%3D%3D&gtnp=0&gtpp=0&tp1=cf37f022-d980-4854-884d-1e3949811b21&kbetu=1&maxads=0&kld=1003&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=uizcpS2vK%2BPE8C3jtYNgThNeVom%2Bc90lAaNmJ8t%2FDFo%3D&pbsubid=cf37f022-d980-4854-884d-1e3949811b21&gtnp=0&gtpp=0&kt=210&&kbc=707&ki=321217634&ktd=0&kld=1003&kp=4&bd=-4%231024%231280%231%230	LLM: Score: 8 Reasons: The website uses an unusual subdomain 'ww01' and a non-standard top level domain 'com'. The brand name 'rotect' is not commonly associated with job vacancy promotions, which raises suspicions about the site's legitimacy. The presence of a link to 'www.everyjobforme.com/Apply' also suggests that the site may be a phishing attempt. DOM: 35.20.pages.csv

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://rotect.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Windows Analysis Report
http://rotect.com