Edit tour

Windows Analysis Report
http://gooel.com

Overview

General Information

Sample URL:	http://gooel.com
Analysis ID:	1504085
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for domain / URL

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2672 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2956 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2248,i,12398436667138726223,12833074406393657,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6200 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://gooel.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /1/6bc175e1c8?a=1588455398&v=1.264.0&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=3444&ck=0&s=9efd9e17cf87cb36&ref=http://ifdnzact.com/Job_Listings.cfm&ptid=3c42b75b1b7c8603&af=err,spa,xhr,stn,ins&ap=309&be=457&fe=1916&dc=460&at=QhtZR1lPS08%3D&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1725452563698,%22n%22:0,%22f%22:3,%22dn%22:3,%22dne%22:3,%22c%22:3,%22ce%22:3,%22rq%22:47,%22rp%22:457,%22rpe%22:833,%22di%22:916,%22ds%22:916,%22de%22:917,%22dc%22:2369,%22l%22:2369,%22le%22:2373%7D,%22navigation%22:%7B%7D%7D&fp=934&fcp=934 HTTP/1.1Host: bam.nr-data.netConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36content-type: text/plainAccept: */*Origin: http://ifdnzact.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=2&bd=-4%231024%231280%231%230Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 04 Sep 2024 12:22:41 GMTServer: ApacheReferrer-Policy: no-referrer-when-downgradeAccept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-VersionPermissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com")Content-Length: 10Keep-Alive: timeout=5, max=127Connection: Keep-AliveContent-Type: text/html; charset=iso-8859-1Data Raw: 4e 6f 20 66 61 76 69 63 6f 6e Data Ascii: No favicon

Source: chromecache_152.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot
Source: chromecache_152.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix
Source: chromecache_152.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf
Source: chromecache_152.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold
Source: chromecache_152.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf
Source: chromecache_152.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Source: chromecache_152.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2
Source: chromecache_152.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot
Source: chromecache_152.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix
Source: chromecache_152.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf
Source: chromecache_152.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular
Source: chromecache_152.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf
Source: chromecache_152.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Source: chromecache_152.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2
Source: chromecache_152.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/js/min.js?v2.3
Source: chromecache_152.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/pics/28903/search.png)
Source: chromecache_152.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/pics/28905/arrrow.png)
Source: chromecache_152.2.dr	String found in binary or memory: http://i1.cdn-image.com/__media__/pics/29590/bg1.png)
Source: chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot
Source: chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix
Source: chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf
Source: chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold
Source: chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf
Source: chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Source: chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2
Source: chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot
Source: chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix
Source: chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf
Source: chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular
Source: chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf
Source: chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Source: chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2
Source: chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/js/min.js?v2.3
Source: chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/pics/28903/search.png)
Source: chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/pics/28905/arrrow.png)
Source: chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	String found in binary or memory: http://i2.cdn-image.com/__media__/pics/29590/bg1.png)
Source: chromecache_176.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot
Source: chromecache_176.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix
Source: chromecache_176.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf
Source: chromecache_176.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold
Source: chromecache_176.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf
Source: chromecache_176.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Source: chromecache_176.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2
Source: chromecache_176.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot
Source: chromecache_176.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix
Source: chromecache_176.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf
Source: chromecache_176.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular
Source: chromecache_176.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf
Source: chromecache_176.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Source: chromecache_176.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2
Source: chromecache_176.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/js/min.js?v2.3
Source: chromecache_176.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/pics/28903/search.png)
Source: chromecache_176.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/pics/28905/arrrow.png)
Source: chromecache_176.2.dr	String found in binary or memory: http://i3.cdn-image.com/__media__/pics/29590/bg1.png)
Source: chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot
Source: chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix
Source: chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf
Source: chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold
Source: chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf
Source: chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Source: chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2
Source: chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot
Source: chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix
Source: chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf
Source: chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular
Source: chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf
Source: chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Source: chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2
Source: chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/js/min.js?v2.3
Source: chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/pics/28903/search.png)
Source: chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/pics/28905/arrrow.png)
Source: chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	String found in binary or memory: http://i4.cdn-image.com/__media__/pics/29590/bg1.png)
Source: chromecache_176.2.dr	String found in binary or memory: http://ifdnzact.com/Download_Software.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmy
Source: chromecache_139.2.dr, chromecache_148.2.dr, chromecache_121.2.dr, chromecache_133.2.dr, chromecache_154.2.dr, chromecache_176.2.dr, chromecache_152.2.dr, chromecache_168.2.dr, chromecache_119.2.dr	String found in binary or memory: http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOUR
Source: chromecache_176.2.dr	String found in binary or memory: http://ifdnzact.com/Public_Records.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDO
Source: chromecache_139.2.dr, chromecache_148.2.dr, chromecache_121.2.dr, chromecache_133.2.dr, chromecache_154.2.dr, chromecache_152.2.dr, chromecache_168.2.dr, chromecache_119.2.dr	String found in binary or memory: http://ifdnzact.com/Web_Directory.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOU
Source: chromecache_139.2.dr, chromecache_148.2.dr, chromecache_121.2.dr, chromecache_133.2.dr, chromecache_154.2.dr, chromecache_152.2.dr, chromecache_168.2.dr, chromecache_119.2.dr	String found in binary or memory: http://ifdnzact.com/YouTube_Videos.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDO
Source: chromecache_139.2.dr, chromecache_148.2.dr, chromecache_121.2.dr, chromecache_133.2.dr, chromecache_154.2.dr, chromecache_176.2.dr, chromecache_152.2.dr, chromecache_168.2.dr, chromecache_119.2.dr	String found in binary or memory: http://ifdnzact.com/display.cfm
Source: chromecache_139.2.dr, chromecache_148.2.dr, chromecache_121.2.dr, chromecache_133.2.dr, chromecache_154.2.dr, chromecache_176.2.dr, chromecache_152.2.dr, chromecache_168.2.dr, chromecache_119.2.dr	String found in binary or memory: https://cdn.consentmanager.net
Source: chromecache_139.2.dr, chromecache_148.2.dr, chromecache_121.2.dr, chromecache_133.2.dr, chromecache_154.2.dr, chromecache_176.2.dr, chromecache_152.2.dr, chromecache_168.2.dr, chromecache_119.2.dr	String found in binary or memory: https://delivery.consentmanager.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.5:49820 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@26/115@54/12

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2248,i,12398436667138726223,12833074406393657,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://gooel.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2248,i,12398436667138726223,12833074406393657,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://gooel.com	2%	Virustotal		Browse
http://gooel.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Link
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
js-agent.newrelic.com	0%	Virustotal	Browse
i1.cdn-image.com	0%	Virustotal	Browse
gooel.com	2%	Virustotal	Browse
fastly-tls12-bam.nr-data.net	0%	Virustotal	Browse
a.delivery.consentmanager.net	0%	Virustotal	Browse
1376624012.rsc.cdn77.org	0%	Virustotal	Browse
i2.cdn-image.com	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
i3.cdn-image.com	0%	Virustotal	Browse
delivery.consentmanager.net	0%	Virustotal	Browse
i4.cdn-image.com	0%	Virustotal	Browse
ifdnzact.com	6%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
bam.nr-data.net	0%	Virustotal	Browse
cdn.consentmanager.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
http://i1.cdn-image.com/__media__/pics/29590/bg1.png)	0%	Avira URL Cloud	safe
http://ifdnzact.com/favicon.ico	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dgooel.com%26pid%3D9PO755G95&&l=en&o=1725452540140	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FJob_Listings.cfm&o=1725452586974&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14&	0%	Avira URL Cloud	safe
http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOUR	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FDownload_Software.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%252BtlnDJDYgWvUn3IboedbPOeSEd%252F6OHC1l3mjJ49%252BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%252FuHqpKKskJY%252BL5As0rfFpeEoTHkctWlKiXqOaIb0E%252FuKcZZj%252FV46HWlnBlE2vMTEAVy%252BfVJb%252B6xQhBhPJpsebcFrjI%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26%26%26kt%3D246%26%26kbc%3D707%26ki%3D8849840%26ktd%3D0%26kld%3D1063%26kp%3D3%26bd%3D-4%25231024%25231280%25231%25230%2523455%2523509&&l=en&o=1725452557999	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf	0%	Avira URL Cloud	safe
https://js-agent.newrelic.com/nr-spa-1.264.0.min.js	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FJob_Listings.cfm&o=1725452607382&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14&	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FYouTube_Videos.cfm&o=1725452595333&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14&	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FWeb_Directory.cfm&o=1725452592147&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14&	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf	0%	Avira URL Cloud	safe
http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/pics/28905/arrrow.png	0%	Avira URL Cloud	safe
http://ifdnzact.com/YouTube_Videos.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDO	0%	Avira URL Cloud	safe
http://i4.cdn-image.com/__media__/pics/29590/bg1.png	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2F&o=1725452574177&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14&	0%	Avira URL Cloud	safe
http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/pics/28905/arrrow.png)	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix	0%	Avira URL Cloud	safe
https://bam.nr-data.net/jserrors/1/6bc175e1c8?a=1588455398&v=1.264.0&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=8696&ck=0&s=9efd9e17cf87cb36&ref=http://ifdnzact.com/Job_Listings.cfm&ptid=3c42b75b1b7c8603	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/pics/29590/bg1.png)	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/pics/29590/bg1.png	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/pics/28905/arrrow.png)	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FPublic_Records.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%252BtlnDJDYgWvUn3IboedbPOeSEd%252F6OHC1l3mjJ49%252BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%252FuHqpKKskJY%252BL5As0rfFpeEoTHkctWlKiXqOaIb0E%252FuKcZZj%252FV46HWlnBlE2vMTEAVy%252BfVJb%252B6xQhBhPJpsebcFrjI%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26%26%26kt%3D246%26%26kbc%3D754%26ki%3D23459819%26ktd%3D0%26kld%3D1063%26kp%3D1%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1725452568207	0%	Avira URL Cloud	safe
http://ifdnzact.com/display.cfm	0%	Avira URL Cloud	safe
http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FDownload_Software.cfm&o=1725452559622&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14&	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=1&id=68884&o=1725452543&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dgooel.com%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff	0%	Avira URL Cloud	safe
http://ifdnzact.com/Web_Directory.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOU	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/pics/29590/bg1.png)	0%	Avira URL Cloud	safe
http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix	0%	Avira URL Cloud	safe
http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular	0%	Avira URL Cloud	safe
http://ifdnzact.com/px.js?ch=1	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FJob_Listings.cfm&o=1725452565250&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14&	0%	Avira URL Cloud	safe
http://ifdnzact.com/px.js?ch=2	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold	0%	Avira URL Cloud	safe
http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2F&o=1725452544847&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14&	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/pics/28905/arrrow.png	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix	0%	Avira URL Cloud	safe
http://ifdnzact.com/?dn=gooel.com&pid=9PO755G95	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff	0%	Avira URL Cloud	safe
http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/pics/28903/search.png)	0%	Avira URL Cloud	safe
https://cdn.consentmanager.net	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FWeb_Directory.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%252B%252Fhu433Xx3PD15ir6ozW6g%252B7%252Fea%252F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%252BqZfXQe%252BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%252F1cxsPrqaFAy6dYLUq7i1pz%252FZiU3zxM84cKvQOfDAD43%252BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%252B%252BVjRyg8N96%252BaJl%252BKUVQpheJlks%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26%26kt%3D251%26%26kbc%3D754%26ki%3D30468440%26ktd%3D0%26kld%3D1063%26kp%3D2%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1725452590938	0%	Avira URL Cloud	safe
https://bam.nr-data.net/1/6bc175e1c8?a=1588455398&v=1.264.0&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=3444&ck=0&s=9efd9e17cf87cb36&ref=http://ifdnzact.com/Job_Listings.cfm&ptid=3c42b75b1b7c8603&af=err,spa,xhr,stn,ins&ap=309&be=457&fe=1916&dc=460&at=QhtZR1lPS08%3D&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1725452563698,%22n%22:0,%22f%22:3,%22dn%22:3,%22dne%22:3,%22c%22:3,%22ce%22:3,%22rq%22:47,%22rp%22:457,%22rpe%22:833,%22di%22:916,%22ds%22:916,%22de%22:917,%22dc%22:2369,%22l%22:2369,%22le%22:2373%7D,%22navigation%22:%7B%7D%7D&fp=934&fcp=934	0%	Avira URL Cloud	safe
http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/pics/28903/search.png)	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FJob_Listings.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%252BtlnDJDYgWvUn3IboedbPOeSEd%252F6OHC1l3mjJ49%252BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%252FuHqpKKskJY%252BL5As0rfFpeEoTHkctWlKiXqOaIb0E%252FuKcZZj%252FV46HWlnBlE2vMTEAVy%252BfVJb%252B6xQhBhPJpsebcFrjI%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26%26%26kt%3D246%26%26kbc%3D754%26ki%3D15912405%26ktd%3D0%26kld%3D1063%26kp%3D2%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1725452564326	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FJob_Listings.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrBW%252FAjMs%252FNGJHN8sjAkMbUyPA4lQy18GJwdXaa56Nx8FGV28Q4K8x%252FkPKHovFYYvKzb22HErRerJiRw8YBGlrdJFjUzcWiP%252FvdHkp4tNeMNWH516OLWtRI4V4GYSvqIEqi7MqVMIGNM6yQ841mUTySbs0Ur2meguR4lTPre7TGsFHPmKEjM8%252B8tfKPoNS6cOzC0jkEdxYpU8E6PFCshC1Lraq6GFCiEI5iEufbp%252B8m0OE8bd0CyMIR3hu65lpnMI94eACkNWx%252Bo5c%252FDD5yErOuL%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26%26kt%3D251%26%26kbc%3D754%26ki%3D15912405%26ktd%3D0%26kld%3D1063%26kp%3D3%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1725452606139	0%	Avira URL Cloud	safe
http://i4.cdn-image.com/__media__/pics/29590/bg1.png)	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot	0%	Avira URL Cloud	safe
https://cdn.consentmanager.net/delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfMzI.js	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FJob_Listings.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%252B%252Fhu433Xx3PD15ir6ozW6g%252B7%252Fea%252F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%252BqZfXQe%252BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%252F1cxsPrqaFAy6dYLUq7i1pz%252FZiU3zxM84cKvQOfDAD43%252BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%252B%252BVjRyg8N96%252BaJl%252BKUVQpheJlks%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26%26kt%3D251%26%26kbc%3D754%26ki%3D15912405%26ktd%3D0%26kld%3D1063%26kp%3D3%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1725452584931	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FDownload_Software.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%252BtlnDJDYgWvUn3IboedbPOeSEd%252F6OHC1l3mjJ49%252BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%252FuHqpKKskJY%252BL5As0rfFpeEoTHkctWlKiXqOaIb0E%252FuKcZZj%252FV46HWlnBlE2vMTEAVy%252BfVJb%252B6xQhBhPJpsebcFrjI%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26%26%26kt%3D246%26%26kbc%3D707%26ki%3D8849840%26ktd%3D0%26kld%3D1063%26kp%3D3%26bd%3D-4%25231024%25231280%25231%25230&&l=en&o=1725452558155	0%	Avira URL Cloud	safe
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf	0%	Avira URL Cloud	safe
https://a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FYouTube_Videos.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%252B%252Fhu433Xx3PD15ir6ozW6g%252B7%252Fea%252F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%252BqZfXQe%252BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%252F1cxsPrqaFAy6dYLUq7i1pz%252FZiU3zxM84cKvQOfDAD43%252BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%252B%252BVjRyg8N96%252BaJl%252BKUVQpheJlks%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26%26kt%3D251%26%26kbc%3D707%26ki%3D31510203%26ktd%3D0%26kld%3D1063%26kp%3D1%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1725452594454	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/pics/28903/search.png)	0%	Avira URL Cloud	safe
http://i4.cdn-image.com/__media__/pics/28903/search.png)	0%	Avira URL Cloud	safe
http://i4.cdn-image.com/__media__/pics/28905/arrrow.png)	0%	Avira URL Cloud	safe
http://i1.cdn-image.com/__media__/pics/28905/arrrow.png	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot	0%	Avira URL Cloud	safe
https://delivery.consentmanager.net	0%	Avira URL Cloud	safe
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold	0%	Avira URL Cloud	safe
http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix	0%	Avira URL Cloud	safe
http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot	0%	Avira URL Cloud	safe
http://i4.cdn-image.com/__media__/pics/28905/arrrow.png	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
gooel.com	185.53.178.52	true	false	2%, Virustotal, Browse	unknown
fastly-tls12-bam.nr-data.net	162.247.243.29	true	false	0%, Virustotal, Browse	unknown
js-agent.newrelic.com	162.247.243.39	true	false	0%, Virustotal, Browse	unknown
i1.cdn-image.com	208.91.196.253	true	false	0%, Virustotal, Browse	unknown
1376624012.rsc.cdn77.org	207.211.211.27	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	0%, Virustotal, Browse	unknown
i3.cdn-image.com	208.91.196.253	true	false	0%, Virustotal, Browse	unknown
a.delivery.consentmanager.net	87.230.98.78	true	false	0%, Virustotal, Browse	unknown
i2.cdn-image.com	208.91.196.253	true	false	0%, Virustotal, Browse	unknown
www.google.com	216.58.206.68	true	false	0%, Virustotal, Browse	unknown
ifdnzact.com	208.91.196.46	true	false	6%, Virustotal, Browse	unknown
delivery.consentmanager.net	87.230.98.78	true	false	0%, Virustotal, Browse	unknown
i4.cdn-image.com	208.91.196.253	true	false	0%, Virustotal, Browse	unknown
cdn.consentmanager.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
bam.nr-data.net	unknown	unknown	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://ifdnzact.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dgooel.com%26pid%3D9PO755G95&&l=en&o=1725452540140	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FJob_Listings.cfm&o=1725452586974&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14&	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FDownload_Software.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%252BtlnDJDYgWvUn3IboedbPOeSEd%252F6OHC1l3mjJ49%252BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%252FuHqpKKskJY%252BL5As0rfFpeEoTHkctWlKiXqOaIb0E%252FuKcZZj%252FV46HWlnBlE2vMTEAVy%252BfVJb%252B6xQhBhPJpsebcFrjI%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26%26%26kt%3D246%26%26kbc%3D707%26ki%3D8849840%26ktd%3D0%26kld%3D1063%26kp%3D3%26bd%3D-4%25231024%25231280%25231%25230%2523455%2523509&&l=en&o=1725452557999	false	Avira URL Cloud: safe	unknown
http://ifdnzact.com/Web_Directory.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%2B%2Fhu433Xx3PD15ir6ozW6g%2B7%2Fea%2F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%2BqZfXQe%2BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%2F1cxsPrqaFAy6dYLUq7i1pz%2FZiU3zxM84cKvQOfDAD43%2BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%2B%2BVjRyg8N96%2BaJl%2BKUVQpheJlks&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=754&ki=30468440&ktd=0&kld=1063&kp=2&bd=-4%231024%231280%231%230	false		unknown
https://js-agent.newrelic.com/nr-spa-1.264.0.min.js	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FYouTube_Videos.cfm&o=1725452595333&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14&	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FJob_Listings.cfm&o=1725452607382&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14&	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FWeb_Directory.cfm&o=1725452592147&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14&	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/pics/28905/arrrow.png	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/pics/29590/bg1.png	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2F&o=1725452574177&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14&	false	Avira URL Cloud: safe	unknown
https://bam.nr-data.net/jserrors/1/6bc175e1c8?a=1588455398&v=1.264.0&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=8696&ck=0&s=9efd9e17cf87cb36&ref=http://ifdnzact.com/Job_Listings.cfm&ptid=3c42b75b1b7c8603	false	Avira URL Cloud: safe	unknown
http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%2B%2Fhu433Xx3PD15ir6ozW6g%2B7%2Fea%2F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%2BqZfXQe%2BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%2F1cxsPrqaFAy6dYLUq7i1pz%2FZiU3zxM84cKvQOfDAD43%2BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%2B%2BVjRyg8N96%2BaJl%2BKUVQpheJlks&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230	false		unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff	false	Avira URL Cloud: safe	unknown
http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=2&bd=-4%231024%231280%231%230	false		unknown
http://i3.cdn-image.com/__media__/pics/29590/bg1.png	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FPublic_Records.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%252BtlnDJDYgWvUn3IboedbPOeSEd%252F6OHC1l3mjJ49%252BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%252FuHqpKKskJY%252BL5As0rfFpeEoTHkctWlKiXqOaIb0E%252FuKcZZj%252FV46HWlnBlE2vMTEAVy%252BfVJb%252B6xQhBhPJpsebcFrjI%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26%26%26kt%3D246%26%26kbc%3D754%26ki%3D23459819%26ktd%3D0%26kld%3D1063%26kp%3D1%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1725452568207	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FDownload_Software.cfm&o=1725452559622&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14&	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/cmp.php?__cmpcc=1&id=68884&o=1725452543&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dgooel.com%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff	false	Avira URL Cloud: safe	unknown
http://ifdnzact.com/px.js?ch=1	false	Avira URL Cloud: safe	unknown
http://gooel.com/	false		unknown
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FJob_Listings.cfm&o=1725452565250&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14&	false	Avira URL Cloud: safe	unknown
http://ifdnzact.com/px.js?ch=2	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2F&o=1725452544847&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14&	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/pics/28905/arrrow.png	false	Avira URL Cloud: safe	unknown
http://ifdnzact.com/?dn=gooel.com&pid=9PO755G95	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff	false	Avira URL Cloud: safe	unknown
http://ifdnzact.com/Public_Records.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=754&ki=23459819&ktd=0&kld=1063&kp=1&bd=-4%231024%231280%231%230	false		unknown
https://a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FWeb_Directory.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%252B%252Fhu433Xx3PD15ir6ozW6g%252B7%252Fea%252F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%252BqZfXQe%252BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%252F1cxsPrqaFAy6dYLUq7i1pz%252FZiU3zxM84cKvQOfDAD43%252BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%252B%252BVjRyg8N96%252BaJl%252BKUVQpheJlks%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26%26kt%3D251%26%26kbc%3D754%26ki%3D30468440%26ktd%3D0%26kld%3D1063%26kp%3D2%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1725452590938	false	Avira URL Cloud: safe	unknown
https://bam.nr-data.net/1/6bc175e1c8?a=1588455398&v=1.264.0&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=3444&ck=0&s=9efd9e17cf87cb36&ref=http://ifdnzact.com/Job_Listings.cfm&ptid=3c42b75b1b7c8603&af=err,spa,xhr,stn,ins&ap=309&be=457&fe=1916&dc=460&at=QhtZR1lPS08%3D&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1725452563698,%22n%22:0,%22f%22:3,%22dn%22:3,%22dne%22:3,%22c%22:3,%22ce%22:3,%22rq%22:47,%22rp%22:457,%22rpe%22:833,%22di%22:916,%22ds%22:916,%22de%22:917,%22dc%22:2369,%22l%22:2369,%22le%22:2373%7D,%22navigation%22:%7B%7D%7D&fp=934&fcp=934	false	Avira URL Cloud: safe	unknown
http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBW%2FAjMs%2FNGJHN8sjAkMbUyPA4lQy18GJwdXaa56Nx8FGV28Q4K8x%2FkPKHovFYYvKzb22HErRerJiRw8YBGlrdJFjUzcWiP%2FvdHkp4tNeMNWH516OLWtRI4V4GYSvqIEqi7MqVMIGNM6yQ841mUTySbs0Ur2meguR4lTPre7TGsFHPmKEjM8%2B8tfKPoNS6cOzC0jkEdxYpU8E6PFCshC1Lraq6GFCiEI5iEufbp%2B8m0OE8bd0CyMIR3hu65lpnMI94eACkNWx%2Bo5c%2FDD5yErOuL&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230	false		unknown
https://a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FJob_Listings.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%252BtlnDJDYgWvUn3IboedbPOeSEd%252F6OHC1l3mjJ49%252BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%252FuHqpKKskJY%252BL5As0rfFpeEoTHkctWlKiXqOaIb0E%252FuKcZZj%252FV46HWlnBlE2vMTEAVy%252BfVJb%252B6xQhBhPJpsebcFrjI%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26%26%26kt%3D246%26%26kbc%3D754%26ki%3D15912405%26ktd%3D0%26kld%3D1063%26kp%3D2%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1725452564326	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FJob_Listings.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrBW%252FAjMs%252FNGJHN8sjAkMbUyPA4lQy18GJwdXaa56Nx8FGV28Q4K8x%252FkPKHovFYYvKzb22HErRerJiRw8YBGlrdJFjUzcWiP%252FvdHkp4tNeMNWH516OLWtRI4V4GYSvqIEqi7MqVMIGNM6yQ841mUTySbs0Ur2meguR4lTPre7TGsFHPmKEjM8%252B8tfKPoNS6cOzC0jkEdxYpU8E6PFCshC1Lraq6GFCiEI5iEufbp%252B8m0OE8bd0CyMIR3hu65lpnMI94eACkNWx%252Bo5c%252FDD5yErOuL%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26%26kt%3D251%26%26kbc%3D754%26ki%3D15912405%26ktd%3D0%26kld%3D1063%26kp%3D3%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1725452606139	false	Avira URL Cloud: safe	unknown
https://cdn.consentmanager.net/delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfMzI.js	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FJob_Listings.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%252B%252Fhu433Xx3PD15ir6ozW6g%252B7%252Fea%252F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%252BqZfXQe%252BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%252F1cxsPrqaFAy6dYLUq7i1pz%252FZiU3zxM84cKvQOfDAD43%252BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%252B%252BVjRyg8N96%252BaJl%252BKUVQpheJlks%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26%26kt%3D251%26%26kbc%3D754%26ki%3D15912405%26ktd%3D0%26kld%3D1063%26kp%3D3%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1725452584931	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FDownload_Software.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%252BtlnDJDYgWvUn3IboedbPOeSEd%252F6OHC1l3mjJ49%252BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%252FuHqpKKskJY%252BL5As0rfFpeEoTHkctWlKiXqOaIb0E%252FuKcZZj%252FV46HWlnBlE2vMTEAVy%252BfVJb%252B6xQhBhPJpsebcFrjI%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26%26%26kt%3D246%26%26kbc%3D707%26ki%3D8849840%26ktd%3D0%26kld%3D1063%26kp%3D3%26bd%3D-4%25231024%25231280%25231%25230&&l=en&o=1725452558155	false	Avira URL Cloud: safe	unknown
https://a.delivery.consentmanager.net/delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FYouTube_Videos.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%252B%252Fhu433Xx3PD15ir6ozW6g%252B7%252Fea%252F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%252BqZfXQe%252BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%252F1cxsPrqaFAy6dYLUq7i1pz%252FZiU3zxM84cKvQOfDAD43%252BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%252B%252BVjRyg8N96%252BaJl%252BKUVQpheJlks%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26%26kt%3D251%26%26kbc%3D707%26ki%3D31510203%26ktd%3D0%26kld%3D1063%26kp%3D1%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1725452594454	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/pics/28905/arrrow.png	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/pics/28905/arrrow.png	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://i1.cdn-image.com/__media__/pics/29590/bg1.png)	chromecache_152.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	chromecache_152.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	false	Avira URL Cloud: safe	unknown
http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOUR	chromecache_139.2.dr, chromecache_148.2.dr, chromecache_121.2.dr, chromecache_133.2.dr, chromecache_154.2.dr, chromecache_176.2.dr, chromecache_152.2.dr, chromecache_168.2.dr, chromecache_119.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf	chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf	chromecache_152.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	chromecache_176.2.dr	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf	chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.otf	chromecache_176.2.dr	false	Avira URL Cloud: safe	unknown
http://ifdnzact.com/YouTube_Videos.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDO	chromecache_139.2.dr, chromecache_148.2.dr, chromecache_121.2.dr, chromecache_133.2.dr, chromecache_154.2.dr, chromecache_152.2.dr, chromecache_168.2.dr, chromecache_119.2.dr	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff2	chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold	chromecache_152.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/pics/28905/arrrow.png)	chromecache_152.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix	chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	chromecache_176.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/pics/29590/bg1.png)	chromecache_176.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot	chromecache_176.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot	chromecache_152.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/pics/28905/arrrow.png)	chromecache_176.2.dr	false	Avira URL Cloud: safe	unknown
http://ifdnzact.com/display.cfm	chromecache_139.2.dr, chromecache_148.2.dr, chromecache_121.2.dr, chromecache_133.2.dr, chromecache_154.2.dr, chromecache_176.2.dr, chromecache_152.2.dr, chromecache_168.2.dr, chromecache_119.2.dr	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular	chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	false	Avira URL Cloud: safe	unknown
http://ifdnzact.com/Web_Directory.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOU	chromecache_139.2.dr, chromecache_148.2.dr, chromecache_121.2.dr, chromecache_133.2.dr, chromecache_154.2.dr, chromecache_152.2.dr, chromecache_168.2.dr, chromecache_119.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff2	chromecache_152.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf	chromecache_176.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	chromecache_176.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/pics/29590/bg1.png)	chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix	chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular	chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.ttf	chromecache_152.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold	chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.ttf	chromecache_152.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix	chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix	chromecache_152.2.dr	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot	chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/pics/28903/search.png)	chromecache_176.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.consentmanager.net	chromecache_139.2.dr, chromecache_148.2.dr, chromecache_121.2.dr, chromecache_133.2.dr, chromecache_154.2.dr, chromecache_176.2.dr, chromecache_152.2.dr, chromecache_168.2.dr, chromecache_119.2.dr	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf	chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/pics/28903/search.png)	chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.svg#montserrat-regular	chromecache_152.2.dr	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/pics/29590/bg1.png)	chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot	chromecache_152.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf	chromecache_176.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot?#iefix	chromecache_152.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf	chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix	chromecache_176.2.dr	false	Avira URL Cloud: safe	unknown
http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot	chromecache_139.2.dr, chromecache_148.2.dr, chromecache_133.2.dr, chromecache_168.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.otf	chromecache_152.2.dr	false	Avira URL Cloud: safe	unknown
http://i1.cdn-image.com/__media__/pics/28903/search.png)	chromecache_152.2.dr	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/pics/28903/search.png)	chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/pics/28905/arrrow.png)	chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot	chromecache_176.2.dr	false	Avira URL Cloud: safe	unknown
https://delivery.consentmanager.net	chromecache_139.2.dr, chromecache_148.2.dr, chromecache_121.2.dr, chromecache_133.2.dr, chromecache_154.2.dr, chromecache_176.2.dr, chromecache_152.2.dr, chromecache_168.2.dr, chromecache_119.2.dr	false	Avira URL Cloud: safe	unknown
http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.svg#montserrat-bold	chromecache_176.2.dr	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.eot?#iefix	chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	false	Avira URL Cloud: safe	unknown
http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.eot	chromecache_121.2.dr, chromecache_154.2.dr, chromecache_119.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
195.181.170.18	unknown	United Kingdom	60068	CDN77GB	false
208.91.196.46	ifdnzact.com	Virgin Islands (BRITISH)	40034	CONFLUENCE-NETWORK-INCVG	false
208.91.196.253	i1.cdn-image.com	Virgin Islands (BRITISH)	40034	CONFLUENCE-NETWORK-INCVG	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
87.230.98.78	a.delivery.consentmanager.net	Germany	61157	PLUSSERVER-ASN1DE	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
185.53.178.52	gooel.com	Germany	61969	TEAMINTERNET-ASDE	false
207.211.211.27	1376624012.rsc.cdn77.org	United States	14135	NAVISITE-EAST-2US	false
162.247.243.29	fastly-tls12-bam.nr-data.net	United States	13335	CLOUDFLARENETUS	false
162.247.243.39	js-agent.newrelic.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.8
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1504085
Start date and time:	2024-09-04 14:21:22 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 56s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://gooel.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@26/115@54/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: http://ifdnzact.com/Download_Software.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=707&ki=8849840&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230 Browse: http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=2&bd=-4%231024%231280%231%230 Browse: http://ifdnzact.com/Public_Records.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=754&ki=23459819&ktd=0&kld=1063&kp=1&bd=-4%231024%231280%231%230 Browse: http://gooel.com/ Browse: http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%2B%2Fhu433Xx3PD15ir6ozW6g%2B7%2Fea%2F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%2BqZfXQe%2BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%2F1cxsPrqaFAy6dYLUq7i1pz%2FZiU3zxM84cKvQOfDAD43%2BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%2B%2BVjRyg8N96%2BaJl%2BKUVQpheJlks&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230 Browse: http://ifdnzact.com/Web_Directory.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%2B%2Fhu433Xx3PD15ir6ozW6g%2B7%2Fea%2F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%2BqZfXQe%2BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%2F1cxsPrqaFAy6dYLUq7i1pz%2FZiU3zxM84cKvQOfDAD43%2BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%2B%2BVjRyg8N96%2BaJl%2BKUVQpheJlks&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=754&ki=30468440&ktd=0&kld=1063&kp=2&bd=-4%231024%231280%231%230 Browse: http://ifdnzact.com/YouTube_Videos.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%2B%2Fhu433Xx3PD15ir6ozW6g%2B7%2Fea%2F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%2BqZfXQe%2BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%2F1cxsPrqaFAy6dYLUq7i1pz%2FZiU3zxM84cKvQOfDAD43%2BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%2B%2BVjRyg8N96%2BaJl%2BKUVQpheJlks&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=707&ki=31510203&ktd=0&kld=1063&kp=1&bd=-4%231024%231280%231%230 Browse: http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBW%2FAjMs%2FNGJHN8sjAkMbUyPA4lQy18GJwdXaa56Nx8FGV28Q4K8x%2FkPKHovFYYvKzb22HErRerJiRw8YBGlrdJFjUzcWiP%2FvdHkp4tNeMNWH516OLWtRI4V4GYSvqIEqi7MqVMIGNM6yQ841mUTySbs0Ur2meguR4lTPre7TGsFHPmKEjM8%2B8tfKPoNS6cOzC0jkEdxYpU8E6PFCshC1Lraq6GFCiEI5iEufbp%2B8m0OE8bd0CyMIR3hu65lpnMI94eACkNWx%2Bo5c%2FDD5yErOuL&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.131, 142.250.186.142, 64.233.184.84, 34.104.35.123, 199.232.210.172, 192.229.221.95, 13.95.31.18, 13.85.23.206, 142.250.186.67, 199.232.214.172, 172.217.16.142, 93.184.221.240
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, update.googleapis.com, hlb.apr-52dd2-0.edgecastdns.net, clients.l.google.com, wu-b-net.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Sep 4 11:22:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9797964606302627
Encrypted:	false
SSDEEP:	48:8idJTRdjFHAidAKZdA19ehwiZUklqehWy+3:8Q7QJy
MD5:	6E5F067F88D969584B8A4E7C4F2AE318
SHA1:	6BC4FABA82070A03793621D7FA0B51EA68E53FBC
SHA-256:	46AC6140F23D64D1442ACD7EB3B48DCEA1AEE06781219409885E2A02382A373E
SHA-512:	06C8EBACECA3CE1296136825C96A426EF025020B6A9C9E86C261F0A0EB3250DA7610B1A09A4021F1BD6102CF40B677A5FAF14460E207FB359127C9CDE2388EFE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......-.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I$Y.b....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V$Y.b....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V$Y.b....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V$Y.b..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V$Y.b...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............{.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Sep 4 11:22:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.000752576643711
Encrypted:	false
SSDEEP:	48:8NdJTRdjFHAidAKZdA1weh/iZUkAQkqeh5y+2:8J7q9Q0y
MD5:	C9CB9C6CCC99C4A8A9538529EC5DFA23
SHA1:	E98A369EDF97D36A071918121C1E9274A4445CE4
SHA-256:	6908089A43FAB4B72AF8367626E5451AEF2F1AB2E0DC07C1EE7D3960BD288A93
SHA-512:	4B2936109F4B63C0A8803DC7032B9D8A9C40310DCC0C4736D2496ACD6C2821857113097EFDE4DB5991ADC44B905BFD967C53E8222DCDC30F728CF2CC4BF2BF0E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....#.#.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I$Y.b....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V$Y.b....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V$Y.b....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V$Y.b..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V$Y.b...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............{.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.008780846611442
Encrypted:	false
SSDEEP:	48:8xSdJTRdjsHAidAKZdA14tseh7sFiZUkmgqeh7s3y+BX:8xg7RnNy
MD5:	48DE0605634EBFB1A352A2B3EF2AEBD0
SHA1:	52881C2B1764D32CF1C38EC704F91936B76FBCB9
SHA-256:	2DAF0A7F39EA81D1EC590A350C8C031876F95C383D1CFD96DC49003A87B53CA6
SHA-512:	80BA5FE3CD8D530F36746D1C4F4916E0BB1A1AF3241875C38065810E8DB797CD19952E029229F0A414F1DB415EF544E7D14AC40A786A44789FAB7ABA7073BA2F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I$Y.b....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V$Y.b....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V$Y.b....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V$Y.b..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............{.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Sep 4 11:22:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.999344215437231
Encrypted:	false
SSDEEP:	48:8zdJTRdjFHAidAKZdA1vehDiZUkwqehVy+R:8X7x/y
MD5:	068108535D5D25B66C4C161E1A126D3A
SHA1:	A29C92A8271B3807F6D00A3E684B977C00277F39
SHA-256:	15141226B37BB6B668F7375E02B8F0B166724AE84A862F3D81891A933695D815
SHA-512:	078A57756B5797C2CBD9E22BC17F17A1AD025A8F1E8AC4AACB67AF8B3D436EFCC74725BA522FE18B91F6F12CB3BD026600D42BE8B65E9DB491095027F1F92C60
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....y.......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I$Y.b....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V$Y.b....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V$Y.b....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V$Y.b..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V$Y.b...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............{.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Sep 4 11:22:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9870539416565904
Encrypted:	false
SSDEEP:	48:8IdJTRdjFHAidAKZdA1hehBiZUk1W1qehry+C:8+7R9Ly
MD5:	9E02ED8F99426C6D1AC292FB856ECD85
SHA1:	95574CA207D803E6505009A3260E49CE12F8AA9D
SHA-256:	15CF3C7FF37B31B69606AB0CCBA81B51175D14141D7F59208F562DB8144E7CB8
SHA-512:	472FA2F03F91564FD1FD73094B4CDB8B51F6F08E801029D1011C1A570AB2E7560A7BD38B0E6A6C60AFB00A4AE1AC9AD30450591F05A9B28724DF41D32DC8163C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....x(.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I$Y.b....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V$Y.b....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V$Y.b....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V$Y.b..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V$Y.b...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............{.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Sep 4 11:22:17 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9981438283876147
Encrypted:	false
SSDEEP:	48:8VdJTRdjFHAidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbNy+yT+:8R7NT/TbxWOvTbNy7T
MD5:	1D516256678F0F29E7D58FA0B2525B68
SHA1:	5B8E63723718B8C2ED4C9960BC11045B2A7EB046
SHA-256:	2D3F6BAEF02DF00048434856C41A2E6A2B57F299551E9ADCF641DCAFB671D61F
SHA-512:	272B89AA8AD2F764730558FC0C0EA6565734775A096788AB8DFA38974387032869A2A3256C696CECA33F2CD98251DEFFE4EA20FE3D8CB90AD6053AAF43E29B91
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....C......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I$Y.b....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V$Y.b....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V$Y.b....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V$Y.b..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V$Y.b...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............{.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	dropped
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 2234
Category:	downloaded
Size (bytes):	1007
Entropy (8bit):	7.8157411033142195
Encrypted:	false
SSDEEP:	24:XSBQ0JQqZErISqEXuN6GSOhpzgV4vo5teVnpSVZtT7q:XwQ0J2ISqEeNKevo5tQAVZA
MD5:	6839ED6FB06B4BA5FBEC345AB0EAB1A2
SHA1:	8AEEC5398D642DC55EDFE7F1C24BEE04FDA1D0C3
SHA-256:	FA54C3A981C2EEDF4CD26ED4A560181DFB4DB145C8708DF62D5E3A89C0ADB362
SHA-512:	B37C324657B43992FC2CAF7F272AA67C35528C14E8DDE6246C1C5AEF96FA845648152D94E09E8DAB855F8149A47ADEAB4ACBC2E2E36D8DE8454D2BEB9732C490
Malicious:	false
Reputation:	low
URL:	http://gooel.com/
Preview:	...........Umo.4..\|....\{\.\.&.....W...O..;YS.....-..g.${{b..P..z&.3o..._\....v..........W...rrE.....z;...eI..+..JBn~....x.\...^...I.MC....cf.d<.n.!a..YT..V[.........\R..+..'..)..o..;.......bU.+..W..?v..j.J....o..UKj,we.....] E[^...N...\|-.[...D.. .EBAr..mE%/........h}..'..Fk..J.....l..=J.Z..-....xgQB-x..u....V...b9.<\|M.;9.Q"{.Xm....g......qK.rK..%.'iD...)...q.P...."z.b.Qv.m@Zr.,...Ad.v.>............9.u2{!'......r...V....aG.....X.o}.\|.-......W.h.....z%<...e.W........}..W...r`.....7V........-5.Py.R.<B....1.[-.7..x5.N.b..........n..p..-.G.M.=.&pt..(.v.A]..............I..".;..x......m...P&z...P..._.]....ga...t.....Z..Z..u..!Q...q'[(....S.Y.~../n-.:GK..W!..60...f.\|[.i.........S.CvzX.9...e.<U$.axx.F...B;..A.t...L......O.'<.%.p.x^.....T...9.0...'..t..)..`..$l.a..&g....<.w.....&PF.`_.dX@Q...2..a.....9..`%..5....p.(T.2...)F.T..(j...=.. .1Un7.W.`...xwz...)..d........<.{....:<.3...t........kC.....p..Q..O .../.;..R.vD.I,`T5...`....F....G.G........K{....

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (54037), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	89425
Entropy (8bit):	5.527071268122514
Encrypted:	false
SSDEEP:	1536:C8Cg328X8dpsclE2MClQy+m+/XxIumFOvDZPFbcU:Czg3t8psclEYPFWxIqD3bcU
MD5:	9979E76586B7B4EEC9CFF8239422EDBE
SHA1:	43B56A03D9149BBF20C01CD1DBB8AF109433573D
SHA-256:	1471FE172DB2AA94FD5EBFECE23D9FAB3A7F8E75A123AC09CA69D830FB5049A7
SHA-512:	F0BA875960CAEF5CECA9CA670C3CA79D9134592B6EE35403E1A5167D8034AF6D2EED9AF61A5672A2DEED714F17656FF32E56F1C08AFD3171AEF5BEB1E562D049
Malicious:	false
Reputation:	low
URL:	http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=2&bd=-4%231024%231280%231%230
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>..<head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net">.. <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25856)
Category:	downloaded
Size (bytes):	111625
Entropy (8bit):	5.376480334868259
Encrypted:	false
SSDEEP:	768:5cZoWRfuJuXcZoYRgZoo1cZoCRvgStdSk6UNxLdbLCM595O6KWkE4pmeVbm/mG70:5y+qRuZtdSk6IxLd28FK0Ril3B5tVaT8
MD5:	350B0AF5C03AE18E2962D06ED4FD4181
SHA1:	4E20075BE3012F19ADDEF303941746967693137E
SHA-256:	6EA1DCC558D6DA061BCFB4056DCE24691CBDA2E45303F08FA343834512910F08
SHA-512:	A86486132C1162104FE222CE940FD0EDEFF3C5734DBE6BABFFD20875686AB1549D3D60FB0C45891B2F6992F84FE70EF1BA3BBFF42464F32E32141F2E46A92C48
Malicious:	false
Reputation:	low
URL:	https://cdn.consentmanager.net/delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfMzI.js
Preview:	if(!("cmp_config_data" in window)){window.cmp_config_data={};}window.cmp_svg_no=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","viewBox":"0 0 512 256"}, "", function (x){x.child("g", {}, "", true, function (x){x.child("ellipse", {"id":"svg_11","ry":"111.500004","rx":"113","cy":"120.89999","cx":"386","stroke-linecap":"null","stroke-linejoin":"null","stroke-dasharray":"null","stroke-width":"0","stroke":"#000000","fill":"#e5e5e5","class":"cmpsvgsilverfill"}).child("rect", {"id":"svg_13","height":"222","width":"256.999992","y":"9.899994","x":"140.000002","stroke-linecap":"null","stroke-linejoin":"null","stroke-dasharray":"null","stroke-width":"0","stroke":"#000000","fill":"#e5e5e5","class":"cmpsvgsilverfill"}).child("ellipse", {"ry":"111.500004","rx":"113","id":"svg_9","cy":"118.399998","cx":"125","stroke-linecap":"null","stroke-linejoin":"null","stroke-dasharray":"null","stroke-width":"0","stroke":"#000000","fill

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10758), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	27426
Entropy (8bit):	5.647740854193859
Encrypted:	false
SSDEEP:	768:CiBtrifZVO7Wg3hIBY4kfYHJXOviU4diGPFbcq:C8Cg3/mFOv7uZPFbcq
MD5:	A0E57FA9F1827C6AF4B899755C51AD1B
SHA1:	E1AA04E7C8CFF4438DB1FF76C3D1707C752DE823
SHA-256:	A5D338344ACFE6C786B8A5C9B9BD7F96554CD4BD8E67DB9F6DABFDBE00D7C807
SHA-512:	1C09E3DB9BC0A2546A62C8102D9E9C9646B3FE24C1EACDF03F09AED7825FDB72E09F81B60EF71C3C91BABDD930C3AAE4D8005C27481E52A1CDAD47A79A428E9F
Malicious:	false
Reputation:	low
URL:	http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBW%2FAjMs%2FNGJHN8sjAkMbUyPA4lQy18GJwdXaa56Nx8FGV28Q4K8x%2FkPKHovFYYvKzb22HErRerJiRw8YBGlrdJFjUzcWiP%2FvdHkp4tNeMNWH516OLWtRI4V4GYSvqIEqi7MqVMIGNM6yQ841mUTySbs0Ur2meguR4lTPre7TGsFHPmKEjM8%2B8tfKPoNS6cOzC0jkEdxYpU8E6PFCshC1Lraq6GFCiEI5iEufbp%2B8m0OE8bd0CyMIR3hu65lpnMI94eACkNWx%2Bo5c%2FDD5yErOuL&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>..<head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net">.. <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17264, version 2.1
Category:	downloaded
Size (bytes):	17264
Entropy (8bit):	7.968311258079736
Encrypted:	false
SSDEEP:	384:JCniidHsnwUHgJANwPtNdi0ONd4Ijgub4WuGgpX+RGVzN:wi8sn7g/W4Ijgub4BGgpwGVR
MD5:	A43B107861B42CE1335E41E43D4E4D00
SHA1:	99BDB1CEC4A68EBE29249C46FEFEFB6880D009E5
SHA-256:	A6542DC92D71EB412BAC89D8FB06C70F15BE74A64B1B4EF1633288B78F4F2FF2
SHA-512:	151D1D3865B24940962476CD6824232EEABFAED92A90439ED5D467D1C7156F7B03BDE91D0303D15648BA13441B8750060066BEDBDEFA0EB930C43A16CBBCFDF9
Malicious:	false
Reputation:	low
URL:	http://i2.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Preview:	wOFF......Cp......q@........................FFTM..CT........j..7GDEF..7..........'..GPOS..7.........)MsMGSUB..7.... ... l.t.OS/2.......V...`..]@cmap.......u.......gasp..7\|............glyf...x..)...G.....head...l...6...6...hhea.......!...$...phmtx...@........W\6.loca...l...........:maxp........... .P.8name..2.........N.=post..5h........8',.prep...d........h..........B.L.._.<...........'......d:.....j..............x.c`d``>.........X...".....].?...x.c`d``dg0e`g..& f.B...0........x.c`f.`.........................@9 ..............E........O...a>..[...$.$..H)00..>.....x.m.[HTQ...........d..f^.a.).".0#].0M... .."%a&Q.7)H..>DD.E..K.......D....q.I:.X....}.........SA...M?c.^D.q.\....h.V.P.2...D..FD>.Q......4..:r..5.A..P.Q./!..T.5..R....4.....Ze....j...o...m.1..Z.}..$.q...5=..3C.......r..>.......qe!S.a..%.t..r..7#.^#..{4.......@\....*....q.1T.0.d..w..r.q.k.\G..q[#w8....Y7..r.d........(..\|"8N.k....G3.........Wv.v.I7&M..9.9/.&..s.....8YL0.Q.x.v..1}.z/.3.2.....dm.t.k..M...

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	dropped
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	445779
Entropy (8bit):	5.372377792972919
Encrypted:	false
SSDEEP:	6144:3p/9KwI51nTb7W9/juAwiiogfk8hMidjXKVYUB4sE7oJs7jw2Pb//sFrq+8YcbJJ:kRMuTKVYp7oJs7kFrBO9
MD5:	3D88F4FD7169BF9CD80536786AE27F6B
SHA1:	C8F5815575A8ADB7C0423C2FA68CC3C1B2E8579B
SHA-256:	51A7FC24DB382764AAEB0A9C7D4EAAA8C4BE4E54243A42CB3ADE188BA3F768B7
SHA-512:	42B183741E345555E55E9B8C39764D0E3A1213304238B9520C22EE619FEF766E7C45E784036A7E84E5BD5011A018932D9D6C78228E5DFC7D38436B5BD81DF893
Malicious:	false
Reputation:	low
URL:	https://cdn.consentmanager.net/delivery/js/cmp_en.min.js
Preview:	window.cmpccsversionbuild="2024-9-2.20.41";if(!("rpl" in String.prototype)){Object.defineProperty(String.prototype,"rpl",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("cmp_unq" in window)){window.cmp_unq=function(a){return a.filter(function(c,d,b){return b&&b.indexOf(c)===d})}}if(!("replaceAll" in String.prototype)){Object.defineProperty(String.prototype,"replaceAll",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("fnd" in Array.prototype)){Object.defineProperty(Array.prototype,"fnd",{value:function(b){var c=this;b=String(b);for(var a=0;a<c.length;a++){if(String(c[a])==b){return a}}return -1},enumerable:false})}window.cmp_fnd=function(a,c){var d=a;c=String(c);for(var b=0;b<d.length;b++){if(String(d[b])==c){return b}}return -1};window.cmpccsversion=20220717;(function(){var b="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",a=/^(?:[A-Za-z\d+\/]{4})*?(?:[A-Za-z\d+\/]{2}(?:==)?\|[A-Za-z\d+\/]{3}=?)?$/

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	dropped
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17312, version 2.1
Category:	downloaded
Size (bytes):	17312
Entropy (8bit):	7.969945306725023
Encrypted:	false
SSDEEP:	384:gIMoUXEVKzOr+cRe8hGCLzypa78QKS+RATaD:PMoU0VKzoJe80Ms5D
MD5:	BEBE201D813FEAAD85A3E66607D0DA3A
SHA1:	28B049502AFA8E9DB5340C1A92400591B39870E8
SHA-256:	58BB75322BEB862803B0D156E1A1D01FB1E7FDE82EE93C929B08BF5AEA9FC55B
SHA-512:	2C83376EDCB92F471C458F6C5F316DD24639FCBB88AEC93B2C2690A596CC129860D0D46A2FE1FB4D71AF8AE5856EE48F19EBB17DAD38DDE918AF76C3ABF7441B
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Preview:	wOFF......C.......s`........................FFTM...l........i..+GDEF.............'..GPOS................GSUB...p... ... l.t.OS/2.......T...`..=.cmap.......u.......gasp...\............glyf...d..(...G8a.?.head..9p...4...6....hhea..9....!...$...'hmtx..9.........Y.-.loca..<x............maxp..>........ .P.7name..>............post..A.........8Y,.prep..C.........h.............h<......'......d:................................x...[l\......vb{l......7....h.o.+....!Q.p1.O.P.P%.h......UU...UEMpQ.ZA.1.I !.C..@...=...=..:.cB.P5:>.9{....^k......)wJ..x.)..R~.....gO>m~....6.BJ..:..tIY.._...dq../mxe...l\|ic.....Kc..lzj..o...%.;....^.x}.o..l.e...gOV.V=\5]..z_..o..n.o..;..5.5.........5.....n................O./...c.t.R.4.t...K...TCm.H..........]....nT:.:.t....j..A..JwU...$.![y...J+.....u.....).I.H..7I..H....%..}.........nZ..ef/. .?(O.A7)..q...p...f.#xx.M.O.;.j...q7.7..Ds.O.@t.D1Et...0.F....`.f.d...9wIX.F.a...fxl.C..[.0.F.0..D..E.a.c(.8<G.j...,....S.Y..>.t..2s.Y....G

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	downloaded
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/js/min.js?v2.3
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	downloaded
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
URL:	http://i4.cdn-image.com/__media__/js/min.js?v2.3
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	445779
Entropy (8bit):	5.372377792972919
Encrypted:	false
SSDEEP:	6144:3p/9KwI51nTb7W9/juAwiiogfk8hMidjXKVYUB4sE7oJs7jw2Pb//sFrq+8YcbJJ:kRMuTKVYp7oJs7kFrBO9
MD5:	3D88F4FD7169BF9CD80536786AE27F6B
SHA1:	C8F5815575A8ADB7C0423C2FA68CC3C1B2E8579B
SHA-256:	51A7FC24DB382764AAEB0A9C7D4EAAA8C4BE4E54243A42CB3ADE188BA3F768B7
SHA-512:	42B183741E345555E55E9B8C39764D0E3A1213304238B9520C22EE619FEF766E7C45E784036A7E84E5BD5011A018932D9D6C78228E5DFC7D38436B5BD81DF893
Malicious:	false
Reputation:	low
Preview:	window.cmpccsversionbuild="2024-9-2.20.41";if(!("rpl" in String.prototype)){Object.defineProperty(String.prototype,"rpl",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("cmp_unq" in window)){window.cmp_unq=function(a){return a.filter(function(c,d,b){return b&&b.indexOf(c)===d})}}if(!("replaceAll" in String.prototype)){Object.defineProperty(String.prototype,"replaceAll",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("fnd" in Array.prototype)){Object.defineProperty(Array.prototype,"fnd",{value:function(b){var c=this;b=String(b);for(var a=0;a<c.length;a++){if(String(c[a])==b){return a}}return -1},enumerable:false})}window.cmp_fnd=function(a,c){var d=a;c=String(c);for(var b=0;b<d.length;b++){if(String(d[b])==c){return b}}return -1};window.cmpccsversion=20220717;(function(){var b="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",a=/^(?:[A-Za-z\d+\/]{4})*?(?:[A-Za-z\d+\/]{2}(?:==)?\|[A-Za-z\d+\/]{3}=?)?$/

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
URL:	http://i2.cdn-image.com/__media__/pics/29590/bg1.png
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	79
Entropy (8bit):	2.716326985350135
Encrypted:	false
SSDEEP:	3:tQTltaL5UJjV9GjUJjVE:6XG5UJjGjUJj2
MD5:	8E3DB10AF5A3E1CABE7AA67674E21188
SHA1:	E2314B0038DF2D49DDBE461F33A6797D4586CDE0
SHA-256:	87ECD5BABD6FD9F4F6F796D745AA38751FAF3985E3B55F87A2F53E506FE07362
SHA-512:	A4F136016F4591E021D54F06141896581371828BF02F662A050B2A36567DFEC6068A4C758815D481E01BD7D68692329B5EE228C854AB2D85246D05B56692FB09
Malicious:	false
Reputation:	low
Preview:	[71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10758), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	27467
Entropy (8bit):	5.646708698879449
Encrypted:	false
SSDEEP:	768:CiBtrifZVO7Wg3hIBYUqqJYHJXw45NdiGPFbcq:C8Cg38vAFw4BZPFbcq
MD5:	1F9C1A6DB9DC92ACB06C6B44C2C9228E
SHA1:	26E585F60D3D4E87AFF147BC02E8911D2B907989
SHA-256:	66FA5110DEDFAE7E9D5FE5EE5613E87AE61639FCD066044AED39FEE22269023D
SHA-512:	B61167A0E95B1AACB1FA501131BC2B61628B300F259C4A83836859D39D6877F40F720A890122B22EE6C96D27DB4CC8CD8236CA73343F1D9A9032A4D3D601C123
Malicious:	false
Reputation:	low
URL:	http://ifdnzact.com/Download_Software.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=707&ki=8849840&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230%23455%23509
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>..<head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net">.. <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 27, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	283
Entropy (8bit):	5.627839973207706
Encrypted:	false
SSDEEP:	6:6v/lhP6VILzlMbNqG1DB/9w2ZCGErnTyBmgHaTeBJ5cdTp:6v/7uILJMndKPGEbTdg6sG9
MD5:	80D42C82A6C37DA90210FD60A2F36128
SHA1:	554BA7C84D2A27ECF3B1F29D03E62101936B54D8
SHA-256:	A1626E2D9160A0890A0A8D6E3AF9E7095D68A24F9FB5AC8A166000C9A2581E10
SHA-512:	8ECB032C38176996EE637009833F3399F773B325E4F574FBBD26F93CDB82892C4143C5816543052B3A5123B89EF4B1AACA0407315AAB879968085E61A20786B6
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/pics/28905/arrrow.png
Preview:	.PNG........IHDR..............(.....HPLTEGpL......................................................................z......tRNS.t..@....fU...2'...dg.......kIDAT..}.... ..P...{..O5...$....v....a.W..J.....I.ih^JF5P.z..H.Lz..F./..h.:.....{t.....i.....;.h...E.....B.6....IEND.B`.

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/pics/29590/bg1.png
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (346), with no line terminators
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	5.00818604439199
Encrypted:	false
SSDEEP:	6:qIZmJNsVwbDRWPWG3mV/R7cjTDEG5OQRoYxHSNHbMFKdCuFxXcvH3eVP4SzpF9yc:+JG0DRWZmX7OPrRNwN7MFMCu/cvOVQSl
MD5:	F84F931C0DD37448E03F0DABF4E4CA9F
SHA1:	9C2C50EDCF576453CCC07BF65668BD23C76E8663
SHA-256:	5C1D5FD46A88611C31ECBB8FFC1142A7E74EC7FB7D72BD3891131C880EF3F584
SHA-512:	AFC3089D932FB030E932BF6414AC05681771051DD51D164F09635CA09CBD8525A52879524B6AA24E972E7766DDF529484CC1EC416DE8B61255435A89BA781F8C
Malicious:	false
Reputation:	low
URL:	http://ifdnzact.com/px.js?ch=2
Preview:	var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17312, version 2.1
Category:	downloaded
Size (bytes):	17312
Entropy (8bit):	7.969945306725023
Encrypted:	false
SSDEEP:	384:gIMoUXEVKzOr+cRe8hGCLzypa78QKS+RATaD:PMoU0VKzoJe80Ms5D
MD5:	BEBE201D813FEAAD85A3E66607D0DA3A
SHA1:	28B049502AFA8E9DB5340C1A92400591B39870E8
SHA-256:	58BB75322BEB862803B0D156E1A1D01FB1E7FDE82EE93C929B08BF5AEA9FC55B
SHA-512:	2C83376EDCB92F471C458F6C5F316DD24639FCBB88AEC93B2C2690A596CC129860D0D46A2FE1FB4D71AF8AE5856EE48F19EBB17DAD38DDE918AF76C3ABF7441B
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Preview:	wOFF......C.......s`........................FFTM...l........i..+GDEF.............'..GPOS................GSUB...p... ... l.t.OS/2.......T...`..=.cmap.......u.......gasp...\............glyf...d..(...G8a.?.head..9p...4...6....hhea..9....!...$...'hmtx..9.........Y.-.loca..<x............maxp..>........ .P.7name..>............post..A.........8Y,.prep..C.........h.............h<......'......d:................................x...[l\......vb{l......7....h.o.+....!Q.p1.O.P.P%.h......UU...UEMpQ.ZA.1.I !.C..@...=...=..:.cB.P5:>.9{....^k......)wJ..x.)..R~.....gO>m~....6.BJ..:..tIY.._...dq../mxe...l\|ic.....Kc..lzj..o...%.;....^.x}.o..l.e...gOV.V=\5]..z_..o..n.o..;..5.5.........5.....n................O./...c.t.R.4.t...K...TCm.H..........]....nT:.:.t....j..A..JwU...$.![y...J+.....u.....).I.H..7I..H....%..}.........nZ..ef/. .?(O.A7)..q...p...f.#xx.M.O.;.j...q7.7..Ds.O.@t.D1Et...0.F....`.f.d...9wIX.F.a...fxl.C..[.0.F.0..D..E.a.c(.8<G.j...,....S.Y..>.t..2s.Y....G

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17264, version 2.1
Category:	downloaded
Size (bytes):	17264
Entropy (8bit):	7.968311258079736
Encrypted:	false
SSDEEP:	384:JCniidHsnwUHgJANwPtNdi0ONd4Ijgub4WuGgpX+RGVzN:wi8sn7g/W4Ijgub4BGgpwGVR
MD5:	A43B107861B42CE1335E41E43D4E4D00
SHA1:	99BDB1CEC4A68EBE29249C46FEFEFB6880D009E5
SHA-256:	A6542DC92D71EB412BAC89D8FB06C70F15BE74A64B1B4EF1633288B78F4F2FF2
SHA-512:	151D1D3865B24940962476CD6824232EEABFAED92A90439ED5D467D1C7156F7B03BDE91D0303D15648BA13441B8750060066BEDBDEFA0EB930C43A16CBBCFDF9
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Preview:	wOFF......Cp......q@........................FFTM..CT........j..7GDEF..7..........'..GPOS..7.........)MsMGSUB..7.... ... l.t.OS/2.......V...`..]@cmap.......u.......gasp..7\|............glyf...x..)...G.....head...l...6...6...hhea.......!...$...phmtx...@........W\6.loca...l...........:maxp........... .P.8name..2.........N.=post..5h........8',.prep...d........h..........B.L.._.<...........'......d:.....j..............x.c`d``>.........X...".....].?...x.c`d``dg0e`g..& f.B...0........x.c`f.`.........................@9 ..............E........O...a>..[...$.$..H)00..>.....x.m.[HTQ...........d..f^.a.).".0#].0M... .."%a&Q.7)H..>DD.E..K.......D....q.I:.X....}.........SA...M?c.^D.q.\....h.V.P.2...D..FD>.Q......4..:r..5.A..P.Q./!..T.5..R....4.....Ze....j...o...m.1..Z.}..$.q...5=..3C.......r..>.......qe!S.a..%.t..r..7#.^#..{4.......@\....*....q.1T.0.d..w..r.q.k.\G..q[#w8....Y7..r.d........(..\|"8N.k....G3.........Wv.v.I7&M..9.9/.&..s.....8YL0.Q.x.v..1}.z/.3.2.....dm.t.k..M...

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10758), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	27446
Entropy (8bit):	5.647554862315419
Encrypted:	false
SSDEEP:	768:CiBtrifZVO7Wg3hIBYv1qJYHJXwOuWdiGPFbcq:C8Cg3nwAFwOZZPFbcq
MD5:	C76FCFDEDF0ED39043EDDBCF0D810625
SHA1:	8E383A53701F83B65FBF9DC899C080E5517A925E
SHA-256:	9A636E3F3D91C49D4A260B282082076864CA4634DA56B732C04C52AFB65152B4
SHA-512:	E9DC0DC02137E39CC498FA8C99763F77C88BC3AFDABF709348F7B57486018540A0631489ADE1BE1ADAE1F5E85D68EE1B0F61115F7615CAF8BD6F1B2DFECD963F
Malicious:	false
Reputation:	low
URL:	http://ifdnzact.com/Public_Records.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=754&ki=23459819&ktd=0&kld=1063&kp=1&bd=-4%231024%231280%231%230
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>..<head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net">.. <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (346), with no line terminators
Category:	dropped
Size (bytes):	346
Entropy (8bit):	5.00818604439199
Encrypted:	false
SSDEEP:	6:qIZmJNsVwbDRWPWG3mV/R7cjTDEG5OQRoYxHSNHbMFKdCuFxXcvH3eVP4SzpF9yc:+JG0DRWZmX7OPrRNwN7MFMCu/cvOVQSl
MD5:	F84F931C0DD37448E03F0DABF4E4CA9F
SHA1:	9C2C50EDCF576453CCC07BF65668BD23C76E8663
SHA-256:	5C1D5FD46A88611C31ECBB8FFC1142A7E74EC7FB7D72BD3891131C880EF3F584
SHA-512:	AFC3089D932FB030E932BF6414AC05681771051DD51D164F09635CA09CBD8525A52879524B6AA24E972E7766DDF529484CC1EC416DE8B61255435A89BA781F8C
Malicious:	false
Reputation:	low
Preview:	var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	downloaded
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/js/min.js?v2.3
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 27, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	283
Entropy (8bit):	5.627839973207706
Encrypted:	false
SSDEEP:	6:6v/lhP6VILzlMbNqG1DB/9w2ZCGErnTyBmgHaTeBJ5cdTp:6v/7uILJMndKPGEbTdg6sG9
MD5:	80D42C82A6C37DA90210FD60A2F36128
SHA1:	554BA7C84D2A27ECF3B1F29D03E62101936B54D8
SHA-256:	A1626E2D9160A0890A0A8D6E3AF9E7095D68A24F9FB5AC8A166000C9A2581E10
SHA-512:	8ECB032C38176996EE637009833F3399F773B325E4F574FBBD26F93CDB82892C4143C5816543052B3A5123B89EF4B1AACA0407315AAB879968085E61A20786B6
Malicious:	false
Reputation:	low
URL:	http://i4.cdn-image.com/__media__/pics/28905/arrrow.png
Preview:	.PNG........IHDR..............(.....HPLTEGpL......................................................................z......tRNS.t..@....fU...2'...dg.......kIDAT..}.... ..P...{..O5...$....v....a.W..J.....I.ih^JF5P.z..H.Lz..F./..h.:.....{t.....i.....;.h...E.....B.6....IEND.B`.

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 27, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	283
Entropy (8bit):	5.627839973207706
Encrypted:	false
SSDEEP:	6:6v/lhP6VILzlMbNqG1DB/9w2ZCGErnTyBmgHaTeBJ5cdTp:6v/7uILJMndKPGEbTdg6sG9
MD5:	80D42C82A6C37DA90210FD60A2F36128
SHA1:	554BA7C84D2A27ECF3B1F29D03E62101936B54D8
SHA-256:	A1626E2D9160A0890A0A8D6E3AF9E7095D68A24F9FB5AC8A166000C9A2581E10
SHA-512:	8ECB032C38176996EE637009833F3399F773B325E4F574FBBD26F93CDB82892C4143C5816543052B3A5123B89EF4B1AACA0407315AAB879968085E61A20786B6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............(.....HPLTEGpL......................................................................z......tRNS.t..@....fU...2'...dg.......kIDAT..}.... ..P...{..O5...$....v....a.W..J.....I.ih^JF5P.z..H.Lz..F./..h.:.....{t.....i.....;.h...E.....B.6....IEND.B`.

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/pics/29590/bg1.png
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	dropped
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (346), with no line terminators
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	5.00818604439199
Encrypted:	false
SSDEEP:	6:qIZmJNsVwbDRWPWG3mV/R7cjTDEG5OQRoYxHSNHbMFKdCuFxXcvH3eVP4SzpF9yc:+JG0DRWZmX7OPrRNwN7MFMCu/cvOVQSl
MD5:	F84F931C0DD37448E03F0DABF4E4CA9F
SHA1:	9C2C50EDCF576453CCC07BF65668BD23C76E8663
SHA-256:	5C1D5FD46A88611C31ECBB8FFC1142A7E74EC7FB7D72BD3891131C880EF3F584
SHA-512:	AFC3089D932FB030E932BF6414AC05681771051DD51D164F09635CA09CBD8525A52879524B6AA24E972E7766DDF529484CC1EC416DE8B61255435A89BA781F8C
Malicious:	false
Reputation:	low
URL:	http://ifdnzact.com/px.js?ch=1
Preview:	var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10758), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	27439
Entropy (8bit):	5.652302171424867
Encrypted:	false
SSDEEP:	768:CiBtrifZVO7Wg3hIBYYqJYHJXw8wGdiGPFbcq:C8Cg39AFw8XZPFbcq
MD5:	A26EF64ED7568B2F99803BB4329EC51D
SHA1:	E535EBA17071897552F3F682C235088302F84D01
SHA-256:	36CB0171B5330B2B3728B66B6C4C29883A03F4B40F9597F927CB8A351AB587FC
SHA-512:	AFD75D12826AC85748368D5274D6476873C10A43D04DBD6AD236F57EC57D0A862A580B161059B1CDE6580D153A2098F7F9D0E95047C463D3C2D2159F05A50A87
Malicious:	false
Reputation:	low
URL:	http://ifdnzact.com/Web_Directory.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%2B%2Fhu433Xx3PD15ir6ozW6g%2B7%2Fea%2F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%2BqZfXQe%2BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%2F1cxsPrqaFAy6dYLUq7i1pz%2FZiU3zxM84cKvQOfDAD43%2BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%2B%2BVjRyg8N96%2BaJl%2BKUVQpheJlks&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=754&ki=30468440&ktd=0&kld=1063&kp=2&bd=-4%231024%231280%231%230
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>..<head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net">.. <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	10
Entropy (8bit):	3.1219280948873624
Encrypted:	false
SSDEEP:	3:I6MdLn:Nwn
MD5:	6608DD3E21CA3BEABD4BDFA625A0B221
SHA1:	E926D0F8694A4BC4013308AFACA7AF51E4C9FD9F
SHA-256:	C75EB01138771BFB2A5517AEAE882356733782767C4560CC9601C34D2591CA75
SHA-512:	FB9A38C874CD26E779EAA5ACFFFCCD3835620A41ADBFE9B086C6A213BF0596F4F98823487F9C79B8F02F649B8B2E4D3232FFCB78106147B3FF671ED7809BBD51
Malicious:	false
Reputation:	low
URL:	http://ifdnzact.com/favicon.ico
Preview:	No favicon

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	downloaded
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
URL:	http://i3.cdn-image.com/__media__/js/min.js?v2.3
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (346), with no line terminators
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	5.00818604439199
Encrypted:	false
SSDEEP:	6:qIZmJNsVwbDRWPWG3mV/R7cjTDEG5OQRoYxHSNHbMFKdCuFxXcvH3eVP4SzpF9yc:+JG0DRWZmX7OPrRNwN7MFMCu/cvOVQSl
MD5:	F84F931C0DD37448E03F0DABF4E4CA9F
SHA1:	9C2C50EDCF576453CCC07BF65668BD23C76E8663
SHA-256:	5C1D5FD46A88611C31ECBB8FFC1142A7E74EC7FB7D72BD3891131C880EF3F584
SHA-512:	AFC3089D932FB030E932BF6414AC05681771051DD51D164F09635CA09CBD8525A52879524B6AA24E972E7766DDF529484CC1EC416DE8B61255435A89BA781F8C
Malicious:	false
Reputation:	low
URL:	http://ifdnzact.com/px.js?ch=1
Preview:	var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10758), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	27438
Entropy (8bit):	5.644075530723708
Encrypted:	false
SSDEEP:	768:CiBtrifZVO7Wg3hIBYRUfKYHJXvv9cudiGPFbcq:C8Cg3Zw9FvvtZPFbcq
MD5:	0809FB1AA79D5AFCE8B450C2D4EA03DD
SHA1:	2FBE642E8267D465EC20689AF94972BD905CFDEA
SHA-256:	D25C2F56B1920A0EB69AE3D5500121531A0A9BD2D0B054EAF739F127927C7E02
SHA-512:	C509C5797B10B3461CE34E5CB95FD868961175CF1644D2D72F315AD3BA99FE0D350B90ABA8271334C95BE1457FA697565A45CE9A3279E8D8D29E31473CBC4BEA
Malicious:	false
Reputation:	low
URL:	http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%2B%2Fhu433Xx3PD15ir6ozW6g%2B7%2Fea%2F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%2BqZfXQe%2BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%2F1cxsPrqaFAy6dYLUq7i1pz%2FZiU3zxM84cKvQOfDAD43%2BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%2B%2BVjRyg8N96%2BaJl%2BKUVQpheJlks&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>..<head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net">.. <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17264, version 2.1
Category:	downloaded
Size (bytes):	17264
Entropy (8bit):	7.968311258079736
Encrypted:	false
SSDEEP:	384:JCniidHsnwUHgJANwPtNdi0ONd4Ijgub4WuGgpX+RGVzN:wi8sn7g/W4Ijgub4BGgpwGVR
MD5:	A43B107861B42CE1335E41E43D4E4D00
SHA1:	99BDB1CEC4A68EBE29249C46FEFEFB6880D009E5
SHA-256:	A6542DC92D71EB412BAC89D8FB06C70F15BE74A64B1B4EF1633288B78F4F2FF2
SHA-512:	151D1D3865B24940962476CD6824232EEABFAED92A90439ED5D467D1C7156F7B03BDE91D0303D15648BA13441B8750060066BEDBDEFA0EB930C43A16CBBCFDF9
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Preview:	wOFF......Cp......q@........................FFTM..CT........j..7GDEF..7..........'..GPOS..7.........)MsMGSUB..7.... ... l.t.OS/2.......V...`..]@cmap.......u.......gasp..7\|............glyf...x..)...G.....head...l...6...6...hhea.......!...$...phmtx...@........W\6.loca...l...........:maxp........... .P.8name..2.........N.=post..5h........8',.prep...d........h..........B.L.._.<...........'......d:.....j..............x.c`d``>.........X...".....].?...x.c`d``dg0e`g..& f.B...0........x.c`f.`.........................@9 ..............E........O...a>..[...$.$..H)00..>.....x.m.[HTQ...........d..f^.a.).".0#].0M... .."%a&Q.7)H..>DD.E..K.......D....q.I:.X....}.........SA...M?c.^D.q.\....h.V.P.2...D..FD>.Q......4..:r..5.A..P.Q./!..T.5..R....4.....Ze....j...o...m.1..Z.}..$.q...5=..3C.......r..>.......qe!S.a..%.t..r..7#.^#..{4.......@\....*....q.1T.0.d..w..r.q.k.\G..q[#w8....Y7..r.d........(..\|"8N.k....G3.........Wv.v.I7&M..9.9/.&..s.....8YL0.Q.x.v..1}.z/.3.2.....dm.t.k..M...

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10758), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	27467
Entropy (8bit):	5.645971341560893
Encrypted:	false
SSDEEP:	768:CiBtrifZVO7Wg3hIBYGkfYHJXO45NdiGPFbcq:C8Cg3xmFO4BZPFbcq
MD5:	8BD7D4732D190414344B5C53DAF1658F
SHA1:	338D856E5068E7E913B49F2CA23F626ADF50F235
SHA-256:	50EE44AA37D8F3EAA8A2BD860AD090D1E93D7138C185FE275782CBE77268CE04
SHA-512:	83AE48B8C61CF723F17444615DAD5935EF1BA15B3CA8F055844B4594FBE8A02B1A295B8C3DBD47266F9BCA08B54ACE8468F100541203C4250F3E5D6655566F6C
Malicious:	false
Reputation:	low
URL:	http://ifdnzact.com/Download_Software.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=707&ki=8849840&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>..<head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net">.. <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
URL:	http://i3.cdn-image.com/__media__/pics/29590/bg1.png
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25856)
Category:	downloaded
Size (bytes):	111625
Entropy (8bit):	5.376480334868259
Encrypted:	false
SSDEEP:	768:5cZoWRfuJuXcZoYRgZoo1cZoCRvgStdSk6UNxLdbLCM595O6KWkE4pmeVbm/mG70:5y+qRuZtdSk6IxLd28FK0Ril3B5tVaT8
MD5:	350B0AF5C03AE18E2962D06ED4FD4181
SHA1:	4E20075BE3012F19ADDEF303941746967693137E
SHA-256:	6EA1DCC558D6DA061BCFB4056DCE24691CBDA2E45303F08FA343834512910F08
SHA-512:	A86486132C1162104FE222CE940FD0EDEFF3C5734DBE6BABFFD20875686AB1549D3D60FB0C45891B2F6992F84FE70EF1BA3BBFF42464F32E32141F2E46A92C48
Malicious:	false
Reputation:	low
URL:	https://cdn.consentmanager.net/delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfMzI.js
Preview:	if(!("cmp_config_data" in window)){window.cmp_config_data={};}window.cmp_svg_no=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","viewBox":"0 0 512 256"}, "", function (x){x.child("g", {}, "", true, function (x){x.child("ellipse", {"id":"svg_11","ry":"111.500004","rx":"113","cy":"120.89999","cx":"386","stroke-linecap":"null","stroke-linejoin":"null","stroke-dasharray":"null","stroke-width":"0","stroke":"#000000","fill":"#e5e5e5","class":"cmpsvgsilverfill"}).child("rect", {"id":"svg_13","height":"222","width":"256.999992","y":"9.899994","x":"140.000002","stroke-linecap":"null","stroke-linejoin":"null","stroke-dasharray":"null","stroke-width":"0","stroke":"#000000","fill":"#e5e5e5","class":"cmpsvgsilverfill"}).child("ellipse", {"ry":"111.500004","rx":"113","id":"svg_9","cy":"118.399998","cx":"125","stroke-linecap":"null","stroke-linejoin":"null","stroke-dasharray":"null","stroke-width":"0","stroke":"#000000","fill

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (346), with no line terminators
Category:	dropped
Size (bytes):	346
Entropy (8bit):	5.00818604439199
Encrypted:	false
SSDEEP:	6:qIZmJNsVwbDRWPWG3mV/R7cjTDEG5OQRoYxHSNHbMFKdCuFxXcvH3eVP4SzpF9yc:+JG0DRWZmX7OPrRNwN7MFMCu/cvOVQSl
MD5:	F84F931C0DD37448E03F0DABF4E4CA9F
SHA1:	9C2C50EDCF576453CCC07BF65668BD23C76E8663
SHA-256:	5C1D5FD46A88611C31ECBB8FFC1142A7E74EC7FB7D72BD3891131C880EF3F584
SHA-512:	AFC3089D932FB030E932BF6414AC05681771051DD51D164F09635CA09CBD8525A52879524B6AA24E972E7766DDF529484CC1EC416DE8B61255435A89BA781F8C
Malicious:	false
Reputation:	low
Preview:	var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17312, version 2.1
Category:	downloaded
Size (bytes):	17312
Entropy (8bit):	7.969945306725023
Encrypted:	false
SSDEEP:	384:gIMoUXEVKzOr+cRe8hGCLzypa78QKS+RATaD:PMoU0VKzoJe80Ms5D
MD5:	BEBE201D813FEAAD85A3E66607D0DA3A
SHA1:	28B049502AFA8E9DB5340C1A92400591B39870E8
SHA-256:	58BB75322BEB862803B0D156E1A1D01FB1E7FDE82EE93C929B08BF5AEA9FC55B
SHA-512:	2C83376EDCB92F471C458F6C5F316DD24639FCBB88AEC93B2C2690A596CC129860D0D46A2FE1FB4D71AF8AE5856EE48F19EBB17DAD38DDE918AF76C3ABF7441B
Malicious:	false
Reputation:	low
URL:	http://i4.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Preview:	wOFF......C.......s`........................FFTM...l........i..+GDEF.............'..GPOS................GSUB...p... ... l.t.OS/2.......T...`..=.cmap.......u.......gasp...\............glyf...d..(...G8a.?.head..9p...4...6....hhea..9....!...$...'hmtx..9.........Y.-.loca..<x............maxp..>........ .P.7name..>............post..A.........8Y,.prep..C.........h.............h<......'......d:................................x...[l\......vb{l......7....h.o.+....!Q.p1.O.P.P%.h......UU...UEMpQ.ZA.1.I !.C..@...=...=..:.cB.P5:>.9{....^k......)wJ..x.)..R~.....gO>m~....6.BJ..:..tIY.._...dq../mxe...l\|ic.....Kc..lzj..o...%.;....^.x}.o..l.e...gOV.V=\5]..z_..o..n.o..;..5.5.........5.....n................O./...c.t.R.4.t...K...TCm.H..........]....nT:.:.t....j..A..JwU...$.![y...J+.....u.....).I.H..7I..H....%..}.........nZ..ef/. .?(O.A7)..q...p...f.#xx.M.O.;.j...q7.7..Ds.O.@t.D1Et...0.F....`.f.d...9wIX.F.a...fxl.C..[.0.F.0..D..E.a.c(.8<G.j...,....S.Y..>.t..2s.Y....G

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 27, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	283
Entropy (8bit):	5.627839973207706
Encrypted:	false
SSDEEP:	6:6v/lhP6VILzlMbNqG1DB/9w2ZCGErnTyBmgHaTeBJ5cdTp:6v/7uILJMndKPGEbTdg6sG9
MD5:	80D42C82A6C37DA90210FD60A2F36128
SHA1:	554BA7C84D2A27ECF3B1F29D03E62101936B54D8
SHA-256:	A1626E2D9160A0890A0A8D6E3AF9E7095D68A24F9FB5AC8A166000C9A2581E10
SHA-512:	8ECB032C38176996EE637009833F3399F773B325E4F574FBBD26F93CDB82892C4143C5816543052B3A5123B89EF4B1AACA0407315AAB879968085E61A20786B6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............(.....HPLTEGpL......................................................................z......tRNS.t..@....fU...2'...dg.......kIDAT..}.... ..P...{..O5...$....v....a.W..J.....I.ih^JF5P.z..H.Lz..F./..h.:.....{t.....i.....;.h...E.....B.6....IEND.B`.

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 27, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	283
Entropy (8bit):	5.627839973207706
Encrypted:	false
SSDEEP:	6:6v/lhP6VILzlMbNqG1DB/9w2ZCGErnTyBmgHaTeBJ5cdTp:6v/7uILJMndKPGEbTdg6sG9
MD5:	80D42C82A6C37DA90210FD60A2F36128
SHA1:	554BA7C84D2A27ECF3B1F29D03E62101936B54D8
SHA-256:	A1626E2D9160A0890A0A8D6E3AF9E7095D68A24F9FB5AC8A166000C9A2581E10
SHA-512:	8ECB032C38176996EE637009833F3399F773B325E4F574FBBD26F93CDB82892C4143C5816543052B3A5123B89EF4B1AACA0407315AAB879968085E61A20786B6
Malicious:	false
Reputation:	low
URL:	http://i1.cdn-image.com/__media__/pics/28905/arrrow.png
Preview:	.PNG........IHDR..............(.....HPLTEGpL......................................................................z......tRNS.t..@....fU...2'...dg.......kIDAT..}.... ..P...{..O5...$....v....a.W..J.....I.ih^JF5P.z..H.Lz..F./..h.:.....{t.....i.....;.h...E.....B.6....IEND.B`.

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17312, version 2.1
Category:	downloaded
Size (bytes):	17312
Entropy (8bit):	7.969945306725023
Encrypted:	false
SSDEEP:	384:gIMoUXEVKzOr+cRe8hGCLzypa78QKS+RATaD:PMoU0VKzoJe80Ms5D
MD5:	BEBE201D813FEAAD85A3E66607D0DA3A
SHA1:	28B049502AFA8E9DB5340C1A92400591B39870E8
SHA-256:	58BB75322BEB862803B0D156E1A1D01FB1E7FDE82EE93C929B08BF5AEA9FC55B
SHA-512:	2C83376EDCB92F471C458F6C5F316DD24639FCBB88AEC93B2C2690A596CC129860D0D46A2FE1FB4D71AF8AE5856EE48F19EBB17DAD38DDE918AF76C3ABF7441B
Malicious:	false
Reputation:	low
URL:	http://i3.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Preview:	wOFF......C.......s`........................FFTM...l........i..+GDEF.............'..GPOS................GSUB...p... ... l.t.OS/2.......T...`..=.cmap.......u.......gasp...\............glyf...d..(...G8a.?.head..9p...4...6....hhea..9....!...$...'hmtx..9.........Y.-.loca..<x............maxp..>........ .P.7name..>............post..A.........8Y,.prep..C.........h.............h<......'......d:................................x...[l\......vb{l......7....h.o.+....!Q.p1.O.P.P%.h......UU...UEMpQ.ZA.1.I !.C..@...=...=..:.cB.P5:>.9{....^k......)wJ..x.)..R~.....gO>m~....6.BJ..:..tIY.._...dq../mxe...l\|ic.....Kc..lzj..o...%.;....^.x}.o..l.e...gOV.V=\5]..z_..o..n.o..;..5.5.........5.....n................O./...c.t.R.4.t...K...TCm.H..........]....nT:.:.t....j..A..JwU...$.![y...J+.....u.....).I.H..7I..H....%..}.........nZ..ef/. .?(O.A7)..q...p...f.#xx.M.O.;.j...q7.7..Ds.O.@t.D1Et...0.F....`.f.d...9wIX.F.a...fxl.C..[.0.F.0..D..E.a.c(.8<G.j...,....S.Y..>.t..2s.Y....G

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	445779
Entropy (8bit):	5.372377792972919
Encrypted:	false
SSDEEP:	6144:3p/9KwI51nTb7W9/juAwiiogfk8hMidjXKVYUB4sE7oJs7jw2Pb//sFrq+8YcbJJ:kRMuTKVYp7oJs7kFrBO9
MD5:	3D88F4FD7169BF9CD80536786AE27F6B
SHA1:	C8F5815575A8ADB7C0423C2FA68CC3C1B2E8579B
SHA-256:	51A7FC24DB382764AAEB0A9C7D4EAAA8C4BE4E54243A42CB3ADE188BA3F768B7
SHA-512:	42B183741E345555E55E9B8C39764D0E3A1213304238B9520C22EE619FEF766E7C45E784036A7E84E5BD5011A018932D9D6C78228E5DFC7D38436B5BD81DF893
Malicious:	false
Reputation:	low
URL:	https://cdn.consentmanager.net/delivery/js/cmp_en.min.js
Preview:	window.cmpccsversionbuild="2024-9-2.20.41";if(!("rpl" in String.prototype)){Object.defineProperty(String.prototype,"rpl",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("cmp_unq" in window)){window.cmp_unq=function(a){return a.filter(function(c,d,b){return b&&b.indexOf(c)===d})}}if(!("replaceAll" in String.prototype)){Object.defineProperty(String.prototype,"replaceAll",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("fnd" in Array.prototype)){Object.defineProperty(Array.prototype,"fnd",{value:function(b){var c=this;b=String(b);for(var a=0;a<c.length;a++){if(String(c[a])==b){return a}}return -1},enumerable:false})}window.cmp_fnd=function(a,c){var d=a;c=String(c);for(var b=0;b<d.length;b++){if(String(d[b])==c){return b}}return -1};window.cmpccsversion=20220717;(function(){var b="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",a=/^(?:[A-Za-z\d+\/]{4})*?(?:[A-Za-z\d+\/]{2}(?:==)?\|[A-Za-z\d+\/]{3}=?)?$/

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 27, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	283
Entropy (8bit):	5.627839973207706
Encrypted:	false
SSDEEP:	6:6v/lhP6VILzlMbNqG1DB/9w2ZCGErnTyBmgHaTeBJ5cdTp:6v/7uILJMndKPGEbTdg6sG9
MD5:	80D42C82A6C37DA90210FD60A2F36128
SHA1:	554BA7C84D2A27ECF3B1F29D03E62101936B54D8
SHA-256:	A1626E2D9160A0890A0A8D6E3AF9E7095D68A24F9FB5AC8A166000C9A2581E10
SHA-512:	8ECB032C38176996EE637009833F3399F773B325E4F574FBBD26F93CDB82892C4143C5816543052B3A5123B89EF4B1AACA0407315AAB879968085E61A20786B6
Malicious:	false
Reputation:	low
URL:	http://i3.cdn-image.com/__media__/pics/28905/arrrow.png
Preview:	.PNG........IHDR..............(.....HPLTEGpL......................................................................z......tRNS.t..@....fU...2'...dg.......kIDAT..}.... ..P...{..O5...$....v....a.W..J.....I.ih^JF5P.z..H.Lz..F./..h.:.....{t.....i.....;.h...E.....B.6....IEND.B`.

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17264, version 2.1
Category:	downloaded
Size (bytes):	17264
Entropy (8bit):	7.968311258079736
Encrypted:	false
SSDEEP:	384:JCniidHsnwUHgJANwPtNdi0ONd4Ijgub4WuGgpX+RGVzN:wi8sn7g/W4Ijgub4BGgpwGVR
MD5:	A43B107861B42CE1335E41E43D4E4D00
SHA1:	99BDB1CEC4A68EBE29249C46FEFEFB6880D009E5
SHA-256:	A6542DC92D71EB412BAC89D8FB06C70F15BE74A64B1B4EF1633288B78F4F2FF2
SHA-512:	151D1D3865B24940962476CD6824232EEABFAED92A90439ED5D467D1C7156F7B03BDE91D0303D15648BA13441B8750060066BEDBDEFA0EB930C43A16CBBCFDF9
Malicious:	false
Reputation:	low
URL:	http://i4.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Preview:	wOFF......Cp......q@........................FFTM..CT........j..7GDEF..7..........'..GPOS..7.........)MsMGSUB..7.... ... l.t.OS/2.......V...`..]@cmap.......u.......gasp..7\|............glyf...x..)...G.....head...l...6...6...hhea.......!...$...phmtx...@........W\6.loca...l...........:maxp........... .P.8name..2.........N.=post..5h........8',.prep...d........h..........B.L.._.<...........'......d:.....j..............x.c`d``>.........X...".....].?...x.c`d``dg0e`g..& f.B...0........x.c`f.`.........................@9 ..............E........O...a>..[...$.$..H)00..>.....x.m.[HTQ...........d..f^.a.).".0#].0M... .."%a&Q.7)H..>DD.E..K.......D....q.I:.X....}.........SA...M?c.^D.q.\....h.V.P.2...D..FD>.Q......4..:r..5.A..P.Q./!..T.5..R....4.....Ze....j...o...m.1..Z.}..$.q...5=..3C.......r..>.......qe!S.a..%.t..r..7#.^#..{4.......@\....*....q.1T.0.d..w..r.q.k.\G..q[#w8....Y7..r.d........(..\|"8N.k....G3.........Wv.v.I7&M..9.9/.&..s.....8YL0.Q.x.v..1}.z/.3.2.....dm.t.k..M...

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	dropped
Size (bytes):	112706
Entropy (8bit):	5.270535863712287
Encrypted:	false
SSDEEP:	1536:TFjFIrylBOe2v0jH3PgkAFlvMgm9pp48O9UN:TFjFsyqpW/2BmxN
MD5:	D445C6AB99F8D2940DF12996FAEACCC0
SHA1:	C9421462F9C049239D0DB6D55891F6D08951692F
SHA-256:	3E1292BC5BA29CB4EEDBE81561AC86BD0DCE1129A3262DD7033669C42B64EF20
SHA-512:	31C570D5B1878E351FE46192E167A73B578943CB3B525A0DD3B44370DF1B1FD5F58861D3009677F1F4453C2F435B7A45289DAE2B2B01BAFA9E84962F1DC22D86
Malicious:	false
Reputation:	low
Preview:	/! For license information please see nr-spa-1.264.0.min.js.LICENSE.txt /."use strict";(self["webpackChunk:NRBA-1.264.0.PROD"]=self["webpackChunk:NRBA-1.264.0.PROD"]\|\|[]).push([[478],{9527:(e,t,i)=>{i.d(t,{n:()=>c});var s=i(9422),r=i(4777),n=i(4618),a=i(2838),o=i(2614);class c extends r.J{constructor(e,t,i){super(i),this.endpoint=e,this.opts=t\|\|{},this.started=!1,this.timeoutHandle=null,this.aborted=!1,this.harvesting=!1,this.harvest=new n.M(this.sharedContext),(0,a.Q)(this.unload.bind(this)),this.sharedContext?.ee.on(o.tS.RESET,(()=>this.runHarvest({forceNoRetry:!0})))}unload(){this.aborted\|\|(this.opts.onUnload&&this.opts.onUnload(),this.runHarvest({unload:!0}))}startTimer(e,t){this.interval=e,this.started=!0,this.scheduleHarvest(null!=t?t:this.interval)}stopTimer(){let e=arguments.length>0&&void 0!==arguments[0]&&arguments[0];this.aborted=e,this.started=!1,this.timeoutHandle&&clearTimeout(this.timeoutHandle)}scheduleHarvest(e,t){this.timeoutHandle\|\|(null==e&&(e=this.interval),this.

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 27, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	283
Entropy (8bit):	5.627839973207706
Encrypted:	false
SSDEEP:	6:6v/lhP6VILzlMbNqG1DB/9w2ZCGErnTyBmgHaTeBJ5cdTp:6v/7uILJMndKPGEbTdg6sG9
MD5:	80D42C82A6C37DA90210FD60A2F36128
SHA1:	554BA7C84D2A27ECF3B1F29D03E62101936B54D8
SHA-256:	A1626E2D9160A0890A0A8D6E3AF9E7095D68A24F9FB5AC8A166000C9A2581E10
SHA-512:	8ECB032C38176996EE637009833F3399F773B325E4F574FBBD26F93CDB82892C4143C5816543052B3A5123B89EF4B1AACA0407315AAB879968085E61A20786B6
Malicious:	false
Reputation:	low
URL:	http://i2.cdn-image.com/__media__/pics/28905/arrrow.png
Preview:	.PNG........IHDR..............(.....HPLTEGpL......................................................................z......tRNS.t..@....fU...2'...dg.......kIDAT..}.... ..P...{..O5...$....v....a.W..J.....I.ih^JF5P.z..H.Lz..F./..h.:.....{t.....i.....;.h...E.....B.6....IEND.B`.

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10758), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	27398
Entropy (8bit):	5.638537683359355
Encrypted:	false
SSDEEP:	768:CiBtrifZVO7Wg3hIBYcqJYHJXwarV0diGPFbcq:C8Cg35AFwapKZPFbcq
MD5:	7785AF47F7F40E92479EA4FAE07A4BAB
SHA1:	58395D82BDEABA474E77ADDA92F4AEE1FCB9ED90
SHA-256:	EDC45D1640774D930FCD949F38D10D10EA06E90D17953E312044B621BD32A901
SHA-512:	426BFB6B8C8D0D2F5DF75A32859446DE152686382466F92CB4AC42501A481650EE16B8C37D295F501D0952C753EDE1DE4016C660ADC6C383DD7E983885F03E2F
Malicious:	false
Reputation:	low
URL:	http://ifdnzact.com/YouTube_Videos.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%2B%2Fhu433Xx3PD15ir6ozW6g%2B7%2Fea%2F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%2BqZfXQe%2BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%2F1cxsPrqaFAy6dYLUq7i1pz%2FZiU3zxM84cKvQOfDAD43%2BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%2B%2BVjRyg8N96%2BaJl%2BKUVQpheJlks&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=707&ki=31510203&ktd=0&kld=1063&kp=1&bd=-4%231024%231280%231%230
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>..<head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net">.. <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17312, version 2.1
Category:	downloaded
Size (bytes):	17312
Entropy (8bit):	7.969945306725023
Encrypted:	false
SSDEEP:	384:gIMoUXEVKzOr+cRe8hGCLzypa78QKS+RATaD:PMoU0VKzoJe80Ms5D
MD5:	BEBE201D813FEAAD85A3E66607D0DA3A
SHA1:	28B049502AFA8E9DB5340C1A92400591B39870E8
SHA-256:	58BB75322BEB862803B0D156E1A1D01FB1E7FDE82EE93C929B08BF5AEA9FC55B
SHA-512:	2C83376EDCB92F471C458F6C5F316DD24639FCBB88AEC93B2C2690A596CC129860D0D46A2FE1FB4D71AF8AE5856EE48F19EBB17DAD38DDE918AF76C3ABF7441B
Malicious:	false
Reputation:	low
URL:	http://i2.cdn-image.com/__media__/fonts/montserrat-bold/montserrat-bold.woff
Preview:	wOFF......C.......s`........................FFTM...l........i..+GDEF.............'..GPOS................GSUB...p... ... l.t.OS/2.......T...`..=.cmap.......u.......gasp...\............glyf...d..(...G8a.?.head..9p...4...6....hhea..9....!...$...'hmtx..9.........Y.-.loca..<x............maxp..>........ .P.7name..>............post..A.........8Y,.prep..C.........h.............h<......'......d:................................x...[l\......vb{l......7....h.o.+....!Q.p1.O.P.P%.h......UU...UEMpQ.ZA.1.I !.C..@...=...=..:.cB.P5:>.9{....^k......)wJ..x.)..R~.....gO>m~....6.BJ..:..tIY.._...dq../mxe...l\|ic.....Kc..lzj..o...%.;....^.x}.o..l.e...gOV.V=\5]..z_..o..n.o..;..5.5.........5.....n................O./...c.t.R.4.t...K...TCm.H..........]....nT:.:.t....j..A..JwU...$.![y...J+.....u.....).I.H..7I..H....%..}.........nZ..ef/. .?(O.A7)..q...p...f.#xx.M.O.;.j...q7.7..Ds.O.@t.D1Et...0.F....`.f.d...9wIX.F.a...fxl.C..[.0.F.0..D..E.a.c(.8<G.j...,....S.Y..>.t..2s.Y....G

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	24
Entropy (8bit):	2.459147917027245
Encrypted:	false
SSDEEP:	3:CUXJ/lH:Dl
MD5:	BC32ED98D624ACB4008F986349A20D26
SHA1:	2D3DF8C11D2168CE2C27E0937421D11D85016361
SHA-256:	0C9CF152A0AD00D4F102C93C613C104914BE5517AC8F8E0831727F8BFBE8B300
SHA-512:	71ACC6DA78D5D5BF0EEA30E2EE0AC5C992B00EFEC959077DFE0AB769F1DBBD9AF12D5C5C155046283D5416BEB606A9EF323FB410E903768B1569B69F37075B4E
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,..........

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 27, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	283
Entropy (8bit):	5.627839973207706
Encrypted:	false
SSDEEP:	6:6v/lhP6VILzlMbNqG1DB/9w2ZCGErnTyBmgHaTeBJ5cdTp:6v/7uILJMndKPGEbTdg6sG9
MD5:	80D42C82A6C37DA90210FD60A2F36128
SHA1:	554BA7C84D2A27ECF3B1F29D03E62101936B54D8
SHA-256:	A1626E2D9160A0890A0A8D6E3AF9E7095D68A24F9FB5AC8A166000C9A2581E10
SHA-512:	8ECB032C38176996EE637009833F3399F773B325E4F574FBBD26F93CDB82892C4143C5816543052B3A5123B89EF4B1AACA0407315AAB879968085E61A20786B6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............(.....HPLTEGpL......................................................................z......tRNS.t..@....fU...2'...dg.......kIDAT..}.... ..P...{..O5...$....v....a.W..J.....I.ih^JF5P.z..H.Lz..F./..h.:.....{t.....i.....;.h...E.....B.6....IEND.B`.

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1730 x 988, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	17986
Entropy (8bit):	7.930640185402301
Encrypted:	false
SSDEEP:	384:/ATpX6Cex7jSxPgvgsODg/B2HgqSSeMjhRNAxB60ZL/HU+HqofTBf:ipX6nx7elggsODg52AqSSJhIxBZZLc8N
MD5:	825CCD29AC102FCADAF92B2343D5917B
SHA1:	24472E766CFAC5B82A73B219796556A0A3702BD6
SHA-256:	0878FB2875C0AD852DE8FB3E8F443AFDF3064890F1443B3FECCC274382F913CD
SHA-512:	71B8E7C0813227F5EFA4B4E0561978B13672F46EE441BC222AD77AA46A32F0F44A5DAB3EF038BB3418190E69DCED597A79E77566DA01A259F1CD6B5298A08662
Malicious:	false
Reputation:	low
URL:	http://i4.cdn-image.com/__media__/pics/29590/bg1.png
Preview:	.PNG........IHDR..............N.7....PLTE.#A..,&/M:CaMVs2..J.. .IDATx...Qz......0..,..,7.....)..;.%......z...\|.N....(.........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0@a.0P..0P.(.P.(...(........................@a..@a.0@a.0P.%........@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@a.0P..0P.(.P.(.P.(...(........................@a..@a.0@aPea..Lt......[=u..l....=.H.h.O..nN.c...=..e.{l......[,lu.._c...nk,n.....;~..'......^a...$..sb..V...&..aqc.m.3...T.s....*l...#.z........Xt...H+..8c/BH..1...>...CX...Ha.y/.A.Il.2...g.}..s../.Q..8{.;R.9.1.o......eG...o..-.V.:.......;..u...$...5'..lW.:..Q\......v_.:z....4'.,l].2z....4'.e,.~O]..%>\|..v_.2....U}.8..u=.hL4$..7a....j.....;..eM.hL....\.>.......',./.].I,..{}a.......91\|J.z.....s...[C.1...S.V.. ...r..K. .....\|ea.......sb...?j....3.U.U9#..c..T.?......4.......J..

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 27, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	283
Entropy (8bit):	5.627839973207706
Encrypted:	false
SSDEEP:	6:6v/lhP6VILzlMbNqG1DB/9w2ZCGErnTyBmgHaTeBJ5cdTp:6v/7uILJMndKPGEbTdg6sG9
MD5:	80D42C82A6C37DA90210FD60A2F36128
SHA1:	554BA7C84D2A27ECF3B1F29D03E62101936B54D8
SHA-256:	A1626E2D9160A0890A0A8D6E3AF9E7095D68A24F9FB5AC8A166000C9A2581E10
SHA-512:	8ECB032C38176996EE637009833F3399F773B325E4F574FBBD26F93CDB82892C4143C5816543052B3A5123B89EF4B1AACA0407315AAB879968085E61A20786B6
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............(.....HPLTEGpL......................................................................z......tRNS.t..@....fU...2'...dg.......kIDAT..}.... ..P...{..O5...$....v....a.W..J.....I.ih^JF5P.z..H.Lz..F./..h.:.....{t.....i.....;.h...E.....B.6....IEND.B`.

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65460)
Category:	downloaded
Size (bytes):	112706
Entropy (8bit):	5.270535863712287
Encrypted:	false
SSDEEP:	1536:TFjFIrylBOe2v0jH3PgkAFlvMgm9pp48O9UN:TFjFsyqpW/2BmxN
MD5:	D445C6AB99F8D2940DF12996FAEACCC0
SHA1:	C9421462F9C049239D0DB6D55891F6D08951692F
SHA-256:	3E1292BC5BA29CB4EEDBE81561AC86BD0DCE1129A3262DD7033669C42B64EF20
SHA-512:	31C570D5B1878E351FE46192E167A73B578943CB3B525A0DD3B44370DF1B1FD5F58861D3009677F1F4453C2F435B7A45289DAE2B2B01BAFA9E84962F1DC22D86
Malicious:	false
Reputation:	low
URL:	https://js-agent.newrelic.com/nr-spa-1.264.0.min.js
Preview:	/! For license information please see nr-spa-1.264.0.min.js.LICENSE.txt /."use strict";(self["webpackChunk:NRBA-1.264.0.PROD"]=self["webpackChunk:NRBA-1.264.0.PROD"]\|\|[]).push([[478],{9527:(e,t,i)=>{i.d(t,{n:()=>c});var s=i(9422),r=i(4777),n=i(4618),a=i(2838),o=i(2614);class c extends r.J{constructor(e,t,i){super(i),this.endpoint=e,this.opts=t\|\|{},this.started=!1,this.timeoutHandle=null,this.aborted=!1,this.harvesting=!1,this.harvest=new n.M(this.sharedContext),(0,a.Q)(this.unload.bind(this)),this.sharedContext?.ee.on(o.tS.RESET,(()=>this.runHarvest({forceNoRetry:!0})))}unload(){this.aborted\|\|(this.opts.onUnload&&this.opts.onUnload(),this.runHarvest({unload:!0}))}startTimer(e,t){this.interval=e,this.started=!0,this.scheduleHarvest(null!=t?t:this.interval)}stopTimer(){let e=arguments.length>0&&void 0!==arguments[0]&&arguments[0];this.aborted=e,this.started=!1,this.timeoutHandle&&clearTimeout(this.timeoutHandle)}scheduleHarvest(e,t){this.timeoutHandle\|\|(null==e&&(e=this.interval),this.

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (10730), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	27299
Entropy (8bit):	5.647822390457977
Encrypted:	false
SSDEEP:	768:CiBtrifZVO7Wg3hIBY6Z5Y7qXFJediGP/bcq:C8Cg3YGSF6ZP/bcq
MD5:	CA9638BFFEA98C5BB9415EC8EC8B0CE9
SHA1:	4F5D9B1C50271DFF1A785EAC677E2309A3E19A9E
SHA-256:	525987935830C700F1C0FC6EB033F4B57C1CA886A64DE28186C3E090E1F713DC
SHA-512:	05649A8E45DFEE4DEEFC495E68930ACD988DE2473D579F7995706423C8FFCB65ACE45D4ED1610DA1E4541D924DCC5C62A26C70DDA8BC62521B4CC4AE967A44A8
Malicious:	false
Reputation:	low
URL:	http://ifdnzact.com/?dn=gooel.com&pid=9PO755G95
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">..<html>..<head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net">.. <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){window.cmp_cdn="cdn.consentmanager.net"}if(!("cmp_proto" in window)){window.cmp_proto="https:"}if(!("cmp_codesrc" in window)){window.cmp_codesrc="1"}window.cmp_getsupportedLangs=function(){var b=["DE","EN","FR","IT","NO","DA","FI","ES","PT","RO","BG","ET","EL","GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (346), with no line terminators
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	5.00818604439199
Encrypted:	false
SSDEEP:	6:qIZmJNsVwbDRWPWG3mV/R7cjTDEG5OQRoYxHSNHbMFKdCuFxXcvH3eVP4SzpF9yc:+JG0DRWZmX7OPrRNwN7MFMCu/cvOVQSl
MD5:	F84F931C0DD37448E03F0DABF4E4CA9F
SHA1:	9C2C50EDCF576453CCC07BF65668BD23C76E8663
SHA-256:	5C1D5FD46A88611C31ECBB8FFC1142A7E74EC7FB7D72BD3891131C880EF3F584
SHA-512:	AFC3089D932FB030E932BF6414AC05681771051DD51D164F09635CA09CBD8525A52879524B6AA24E972E7766DDF529484CC1EC416DE8B61255435A89BA781F8C
Malicious:	false
Reputation:	low
URL:	http://ifdnzact.com/px.js?ch=2
Preview:	var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25856)
Category:	dropped
Size (bytes):	111625
Entropy (8bit):	5.376480334868259
Encrypted:	false
SSDEEP:	768:5cZoWRfuJuXcZoYRgZoo1cZoCRvgStdSk6UNxLdbLCM595O6KWkE4pmeVbm/mG70:5y+qRuZtdSk6IxLd28FK0Ril3B5tVaT8
MD5:	350B0AF5C03AE18E2962D06ED4FD4181
SHA1:	4E20075BE3012F19ADDEF303941746967693137E
SHA-256:	6EA1DCC558D6DA061BCFB4056DCE24691CBDA2E45303F08FA343834512910F08
SHA-512:	A86486132C1162104FE222CE940FD0EDEFF3C5734DBE6BABFFD20875686AB1549D3D60FB0C45891B2F6992F84FE70EF1BA3BBFF42464F32E32141F2E46A92C48
Malicious:	false
Reputation:	low
Preview:	if(!("cmp_config_data" in window)){window.cmp_config_data={};}window.cmp_svg_no=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","viewBox":"0 0 512 256"}, "", function (x){x.child("g", {}, "", true, function (x){x.child("ellipse", {"id":"svg_11","ry":"111.500004","rx":"113","cy":"120.89999","cx":"386","stroke-linecap":"null","stroke-linejoin":"null","stroke-dasharray":"null","stroke-width":"0","stroke":"#000000","fill":"#e5e5e5","class":"cmpsvgsilverfill"}).child("rect", {"id":"svg_13","height":"222","width":"256.999992","y":"9.899994","x":"140.000002","stroke-linecap":"null","stroke-linejoin":"null","stroke-dasharray":"null","stroke-width":"0","stroke":"#000000","fill":"#e5e5e5","class":"cmpsvgsilverfill"}).child("ellipse", {"ry":"111.500004","rx":"113","id":"svg_9","cy":"118.399998","cx":"125","stroke-linecap":"null","stroke-linejoin":"null","stroke-dasharray":"null","stroke-width":"0","stroke":"#000000","fill

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 17264, version 2.1
Category:	downloaded
Size (bytes):	17264
Entropy (8bit):	7.968311258079736
Encrypted:	false
SSDEEP:	384:JCniidHsnwUHgJANwPtNdi0ONd4Ijgub4WuGgpX+RGVzN:wi8sn7g/W4Ijgub4BGgpwGVR
MD5:	A43B107861B42CE1335E41E43D4E4D00
SHA1:	99BDB1CEC4A68EBE29249C46FEFEFB6880D009E5
SHA-256:	A6542DC92D71EB412BAC89D8FB06C70F15BE74A64B1B4EF1633288B78F4F2FF2
SHA-512:	151D1D3865B24940962476CD6824232EEABFAED92A90439ED5D467D1C7156F7B03BDE91D0303D15648BA13441B8750060066BEDBDEFA0EB930C43A16CBBCFDF9
Malicious:	false
Reputation:	low
URL:	http://i3.cdn-image.com/__media__/fonts/montserrat-regular/montserrat-regular.woff
Preview:	wOFF......Cp......q@........................FFTM..CT........j..7GDEF..7..........'..GPOS..7.........)MsMGSUB..7.... ... l.t.OS/2.......V...`..]@cmap.......u.......gasp..7\|............glyf...x..)...G.....head...l...6...6...hhea.......!...$...phmtx...@........W\6.loca...l...........:maxp........... .P.8name..2.........N.=post..5h........8',.prep...d........h..........B.L.._.<...........'......d:.....j..............x.c`d``>.........X...".....].?...x.c`d``dg0e`g..& f.B...0........x.c`f.`.........................@9 ..............E........O...a>..[...$.$..H)00..>.....x.m.[HTQ...........d..f^.a.).".0#].0M... .."%a&Q.7)H..>DD.E..K.......D....q.I:.X....}.........SA...M?c.^D.q.\....h.V.P.2...D..FD>.Q......4..:r..5.A..P.Q./!..T.5..R....4.....Ze....j...o...m.1..Z.}..$.q...5=..3C.......r..>.......qe!S.a..%.t..r..7#.^#..{4.......@\....*....q.1T.0.d..w..r.q.k.\G..q[#w8....Y7..r.d........(..\|"8N.k....G3.........Wv.v.I7&M..9.9/.&..s.....8YL0.Q.x.v..1}.z/.3.2.....dm.t.k..M...

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8349), with CRLF line terminators
Category:	downloaded
Size (bytes):	8435
Entropy (8bit):	5.369353534036235
Encrypted:	false
SSDEEP:	192:+w5t7czLxuBQJprSnxviE/h8BQrFVzQUT98xjBt2Lh015uwHxM+FzopqRdcGSiHy:35t7czKqSxRHzPTouh0LlHxLd0qR6n
MD5:	C16C3A4C0FAD29106F34D00E89F6886E
SHA1:	6E11811AB8A98BB295B0916CDEE68B302C33403D
SHA-256:	097786D677A859B7BC87E285377B083B76D66A2FC2832A16BCD50B0E99DF77FF
SHA-512:	154BAF532DBEDBA258B2AC12AA16463A66098B9F149DECE93AB337072976EB2CCCEAEDFBFAACE25606CCDB48F795803FCE1BFE5ECA197325743E8DD7C849F6E3
Malicious:	false
Reputation:	low
URL:	http://i2.cdn-image.com/__media__/js/min.js?v2.3
Preview:	/.. Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved.. */..var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function changeStatus(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 4, 2024 14:22:09.034513950 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 4, 2024 14:22:09.096990108 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 4, 2024 14:22:09.284502983 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 4, 2024 14:22:18.105758905 CEST	49709	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:22:18.106070042 CEST	49710	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:22:18.110637903 CEST	80	49709	185.53.178.52	192.168.2.5
Sep 4, 2024 14:22:18.111195087 CEST	80	49710	185.53.178.52	192.168.2.5
Sep 4, 2024 14:22:18.111293077 CEST	49709	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:22:18.111293077 CEST	49710	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:22:18.111957073 CEST	49710	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:22:18.116719961 CEST	80	49710	185.53.178.52	192.168.2.5
Sep 4, 2024 14:22:18.636346102 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 4, 2024 14:22:18.766149044 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 4, 2024 14:22:18.891597033 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 4, 2024 14:22:19.002971888 CEST	80	49710	185.53.178.52	192.168.2.5
Sep 4, 2024 14:22:19.003010035 CEST	80	49710	185.53.178.52	192.168.2.5
Sep 4, 2024 14:22:19.003058910 CEST	49710	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:22:19.224509954 CEST	49713	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:19.230307102 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:19.230467081 CEST	49713	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:19.231062889 CEST	49713	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:19.235935926 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.387271881 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 4, 2024 14:22:20.387375116 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 4, 2024 14:22:20.597628117 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.597637892 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.597651958 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.597664118 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.597692013 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.597712994 CEST	49713	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:20.597913027 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.597932100 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.597949982 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.597951889 CEST	49713	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:20.597963095 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.597999096 CEST	49713	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:20.598006010 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.598133087 CEST	49713	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:20.602741957 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.602747917 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.602751017 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.602792025 CEST	49713	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:20.685580015 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.685610056 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.685647964 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.685657978 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.685668945 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.685678005 CEST	49713	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:20.685713053 CEST	49713	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:20.685849905 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.685900927 CEST	49713	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:20.685925961 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.685936928 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.685947895 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.685961962 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.685977936 CEST	49713	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:20.686012983 CEST	49713	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:20.686624050 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.686791897 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.686844110 CEST	49713	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:20.915169001 CEST	49714	443	192.168.2.5	216.58.206.68
Sep 4, 2024 14:22:20.915199995 CEST	443	49714	216.58.206.68	192.168.2.5
Sep 4, 2024 14:22:20.915326118 CEST	49714	443	192.168.2.5	216.58.206.68
Sep 4, 2024 14:22:20.919888973 CEST	49714	443	192.168.2.5	216.58.206.68
Sep 4, 2024 14:22:20.919899940 CEST	443	49714	216.58.206.68	192.168.2.5
Sep 4, 2024 14:22:20.928869009 CEST	49715	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:20.928925037 CEST	443	49715	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:20.929061890 CEST	49715	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:20.930042028 CEST	49715	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:20.930058956 CEST	443	49715	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:20.933828115 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:20.933856964 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:20.933943987 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:20.934560061 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:20.934571981 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:20.962901115 CEST	49713	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:20.964040995 CEST	49717	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:20.970452070 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.970500946 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:20.970658064 CEST	49717	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:21.002217054 CEST	49717	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:21.005825043 CEST	49718	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:21.010813951 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:21.011774063 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.011856079 CEST	49718	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:21.012514114 CEST	49718	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:21.019921064 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.058691978 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:21.111934900 CEST	49713	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:21.437836885 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:21.458456039 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.458642006 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.458650112 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.458657980 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.458724022 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.458729982 CEST	49718	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:21.458748102 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.458755016 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.458760977 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.458766937 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.458794117 CEST	49718	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:21.458826065 CEST	49718	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:21.482942104 CEST	49717	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:21.488434076 CEST	49719	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:21.488504887 CEST	443	49719	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:21.488601923 CEST	49719	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:21.504158974 CEST	49719	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:21.504199982 CEST	443	49719	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:21.511060953 CEST	49718	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:21.515934944 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.523091078 CEST	49720	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:21.528255939 CEST	80	49720	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.528393984 CEST	49720	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:21.528592110 CEST	49720	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:21.533567905 CEST	80	49720	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.552894115 CEST	443	49714	216.58.206.68	192.168.2.5
Sep 4, 2024 14:22:21.558470964 CEST	49714	443	192.168.2.5	216.58.206.68
Sep 4, 2024 14:22:21.558501005 CEST	443	49714	216.58.206.68	192.168.2.5
Sep 4, 2024 14:22:21.559631109 CEST	443	49714	216.58.206.68	192.168.2.5
Sep 4, 2024 14:22:21.559746027 CEST	49714	443	192.168.2.5	216.58.206.68
Sep 4, 2024 14:22:21.578764915 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:21.605912924 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.606113911 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.606121063 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.606134892 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.606141090 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.606148005 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.606215954 CEST	49718	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:21.606293917 CEST	49718	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:21.606879950 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.606888056 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.606894970 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.606916904 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.606956959 CEST	49718	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:21.606972933 CEST	49718	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:21.607661963 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.608886957 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.608897924 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.608913898 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.608923912 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.608954906 CEST	49718	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:21.609003067 CEST	49718	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:21.609276056 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.609345913 CEST	49718	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:21.609433889 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.624696970 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:21.642411947 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:21.642425060 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:21.643723011 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:21.643791914 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:21.644629955 CEST	49714	443	192.168.2.5	216.58.206.68
Sep 4, 2024 14:22:21.644777060 CEST	443	49714	216.58.206.68	192.168.2.5
Sep 4, 2024 14:22:21.645957947 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:21.646071911 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:21.646579981 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:21.646589041 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:21.651736021 CEST	49718	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:21.692753077 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.698750973 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:21.699625969 CEST	49714	443	192.168.2.5	216.58.206.68
Sep 4, 2024 14:22:21.699636936 CEST	443	49714	216.58.206.68	192.168.2.5
Sep 4, 2024 14:22:21.735104084 CEST	49718	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:21.751430988 CEST	49714	443	192.168.2.5	216.58.206.68
Sep 4, 2024 14:22:21.821474075 CEST	443	49715	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:21.834975958 CEST	49715	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:21.835011005 CEST	443	49715	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:21.836715937 CEST	443	49715	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:21.836790085 CEST	49715	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:21.840660095 CEST	49715	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:21.840800047 CEST	443	49715	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:21.910659075 CEST	49721	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:21.911756039 CEST	49722	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:21.915836096 CEST	80	49721	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.915961027 CEST	49721	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:21.916569948 CEST	80	49722	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.916654110 CEST	49722	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:21.917119980 CEST	49721	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:21.918205976 CEST	49722	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:21.921943903 CEST	80	49721	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.922998905 CEST	80	49722	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.938910007 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:21.938944101 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:21.938954115 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:21.938987970 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:21.939006090 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:21.939013958 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:21.939028025 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:21.939045906 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:21.939078093 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:21.939114094 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:21.941658974 CEST	49715	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:21.941689014 CEST	443	49715	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:21.966275930 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:21.966303110 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:21.966412067 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:21.966428995 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:21.966471910 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:21.977711916 CEST	80	49720	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:21.997482061 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:21.997509003 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:21.997574091 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:21.997589111 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:21.997636080 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:21.997663975 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.039000988 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.039025068 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.039114952 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.039133072 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.039167881 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.039186954 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.071183920 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.071206093 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.071314096 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.071332932 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.071387053 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.091178894 CEST	49715	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:22.091327906 CEST	49720	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:22.094674110 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.094692945 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.094767094 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.094784975 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.094921112 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.109803915 CEST	80	49720	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.116543055 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.116563082 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.116642952 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.116658926 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.116816044 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.132349014 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.132366896 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.132427931 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.132442951 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.132550001 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.146676064 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.146699905 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.146848917 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.146864891 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.150171041 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.160154104 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.160172939 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.160330057 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.160345078 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.162103891 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.171083927 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.171103001 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.171258926 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.171277046 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.174091101 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.183716059 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.183732986 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.183818102 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.183834076 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.184068918 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.195934057 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.195949078 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.196012020 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.196026087 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.196135998 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.196170092 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.205812931 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.205828905 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.205899000 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.205914974 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.206020117 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.216629982 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.216650009 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.216759920 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.216774940 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.216818094 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.225238085 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.225259066 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.225366116 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.225380898 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.225423098 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.234673977 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.234695911 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.234814882 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.234836102 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.235918045 CEST	49720	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:22.235930920 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.243375063 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.243396044 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.243495941 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.243510008 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.246077061 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.254450083 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.254477978 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.254527092 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.254540920 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.254574060 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.254592896 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.265588999 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.265609980 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.265677929 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.265691042 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.265726089 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.265746117 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.278112888 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.278134108 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.278207064 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.278220892 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.278258085 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.287843943 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.287861109 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.287940979 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.287955999 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.287991047 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.299159050 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.299175978 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.299238920 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.299252033 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.299288988 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.309809923 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.309827089 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.309927940 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.309941053 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.309984922 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.318288088 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.318304062 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.318372011 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.318383932 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.318433046 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.326427937 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.326445103 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.326514959 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.326529026 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.326562881 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.346226931 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.346245050 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.346286058 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.346332073 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.346348047 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.346365929 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.346385002 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.346409082 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.362725973 CEST	80	49721	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.362879038 CEST	80	49721	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.362891912 CEST	80	49721	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.362904072 CEST	80	49721	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.362916946 CEST	80	49721	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.362997055 CEST	49721	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:22.363033056 CEST	80	49721	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.363039017 CEST	80	49721	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.363050938 CEST	80	49721	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.363066912 CEST	80	49721	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.363075972 CEST	49721	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:22.363075972 CEST	49721	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:22.363112926 CEST	49721	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:22.363132000 CEST	80	49721	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.363178015 CEST	49721	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:22.367768049 CEST	80	49721	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.367949009 CEST	80	49721	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.367960930 CEST	80	49721	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.367971897 CEST	80	49721	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.367984056 CEST	80	49721	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.368047953 CEST	49721	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:22.368083000 CEST	49721	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:22.390223026 CEST	80	49722	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.390296936 CEST	80	49722	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.390383005 CEST	80	49722	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.390394926 CEST	80	49722	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.390404940 CEST	80	49722	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.390441895 CEST	49722	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:22.390474081 CEST	80	49722	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.390526056 CEST	80	49722	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.390537024 CEST	80	49722	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.390568018 CEST	49722	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:22.390568018 CEST	49722	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:22.390589952 CEST	49722	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:22.391899109 CEST	443	49719	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:22.391968966 CEST	80	49722	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.391983032 CEST	80	49722	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.392040014 CEST	49722	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:22.395186901 CEST	80	49722	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.395220041 CEST	80	49722	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.395231009 CEST	80	49722	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.395243883 CEST	80	49722	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.395334959 CEST	49722	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:22.395387888 CEST	49722	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:22.449778080 CEST	80	49721	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.449804068 CEST	80	49721	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.449892998 CEST	80	49721	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.449914932 CEST	80	49721	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.449932098 CEST	49721	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:22.449958086 CEST	80	49721	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.449995041 CEST	49721	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:22.450011969 CEST	49721	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:22.483105898 CEST	80	49722	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.483124971 CEST	80	49722	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.483143091 CEST	80	49722	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.483202934 CEST	80	49722	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.483216047 CEST	80	49722	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:22.483248949 CEST	49722	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:22.483303070 CEST	49722	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:22.568836927 CEST	49719	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:22.568865061 CEST	443	49719	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:22.570131063 CEST	443	49719	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:22.570142984 CEST	443	49719	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:22.570209026 CEST	49719	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:22.584557056 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.597256899 CEST	49716	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:22.597284079 CEST	443	49716	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:22.609931946 CEST	49723	443	192.168.2.5	184.28.90.27
Sep 4, 2024 14:22:22.609981060 CEST	443	49723	184.28.90.27	192.168.2.5
Sep 4, 2024 14:22:22.610091925 CEST	49723	443	192.168.2.5	184.28.90.27
Sep 4, 2024 14:22:22.621767044 CEST	49723	443	192.168.2.5	184.28.90.27
Sep 4, 2024 14:22:22.621787071 CEST	443	49723	184.28.90.27	192.168.2.5
Sep 4, 2024 14:22:22.971539974 CEST	49719	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:22.971864939 CEST	49719	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:22.971878052 CEST	443	49719	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:22.971894026 CEST	443	49719	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:23.154004097 CEST	443	49719	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:23.154079914 CEST	49719	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:23.154083967 CEST	443	49719	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:23.154128075 CEST	49719	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:23.157948971 CEST	49719	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:23.157974958 CEST	443	49719	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:23.195899963 CEST	49729	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:23.196403980 CEST	49730	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:23.202769995 CEST	80	49729	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:23.202876091 CEST	49729	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:23.205219030 CEST	80	49730	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:23.205297947 CEST	49730	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:23.205554008 CEST	49729	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:23.205957890 CEST	49730	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:23.210422039 CEST	80	49729	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:23.210825920 CEST	80	49730	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:23.221549034 CEST	49731	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:23.221580029 CEST	443	49731	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:23.221653938 CEST	49731	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:23.222693920 CEST	49731	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:23.222712994 CEST	443	49731	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:23.232094049 CEST	49732	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:23.236996889 CEST	80	49732	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.237170935 CEST	49732	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:23.237715960 CEST	49732	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:23.241080999 CEST	49733	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:23.242676973 CEST	80	49732	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.246092081 CEST	80	49733	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.246181011 CEST	49733	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:23.246309042 CEST	49733	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:23.251075983 CEST	80	49733	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.264161110 CEST	443	49723	184.28.90.27	192.168.2.5
Sep 4, 2024 14:22:23.264234066 CEST	49723	443	192.168.2.5	184.28.90.27
Sep 4, 2024 14:22:23.318670988 CEST	49723	443	192.168.2.5	184.28.90.27
Sep 4, 2024 14:22:23.318697929 CEST	443	49723	184.28.90.27	192.168.2.5
Sep 4, 2024 14:22:23.319034100 CEST	443	49723	184.28.90.27	192.168.2.5
Sep 4, 2024 14:22:23.524525881 CEST	443	49723	184.28.90.27	192.168.2.5
Sep 4, 2024 14:22:23.524605036 CEST	49723	443	192.168.2.5	184.28.90.27
Sep 4, 2024 14:22:23.611150026 CEST	49723	443	192.168.2.5	184.28.90.27
Sep 4, 2024 14:22:23.627026081 CEST	49734	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:23.632075071 CEST	80	49734	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.632199049 CEST	49734	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:23.633280039 CEST	49734	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:23.638185978 CEST	80	49734	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.643171072 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:23.643215895 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:23.643311977 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:23.643894911 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:23.643907070 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:23.656511068 CEST	443	49723	184.28.90.27	192.168.2.5
Sep 4, 2024 14:22:23.663816929 CEST	80	49729	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:23.672898054 CEST	80	49730	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:23.677445889 CEST	49736	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:23.677481890 CEST	443	49736	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:23.677556992 CEST	49736	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:23.678112984 CEST	49736	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:23.678124905 CEST	443	49736	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:23.686765909 CEST	80	49732	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.686822891 CEST	80	49732	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.686835051 CEST	80	49732	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.686938047 CEST	49732	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:23.686945915 CEST	80	49732	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.686953068 CEST	80	49732	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.686964989 CEST	80	49732	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.686969995 CEST	80	49732	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.686975956 CEST	80	49709	185.53.178.52	192.168.2.5
Sep 4, 2024 14:22:23.686999083 CEST	49732	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:23.687056065 CEST	49709	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:22:23.704503059 CEST	80	49733	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.704559088 CEST	80	49733	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.704565048 CEST	80	49733	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.704581976 CEST	80	49733	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.704596996 CEST	80	49733	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.704602957 CEST	80	49733	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.704607964 CEST	80	49733	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.704621077 CEST	49733	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:23.704659939 CEST	49733	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:23.704685926 CEST	80	49733	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.704691887 CEST	80	49733	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.704704046 CEST	80	49733	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.704746962 CEST	49733	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:23.709677935 CEST	80	49733	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.710277081 CEST	80	49733	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.710359097 CEST	49733	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:23.738744020 CEST	49730	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:23.763902903 CEST	49709	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:22:23.768816948 CEST	80	49709	185.53.178.52	192.168.2.5
Sep 4, 2024 14:22:23.773627996 CEST	80	49732	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.773680925 CEST	49732	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:23.792934895 CEST	80	49733	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.792996883 CEST	80	49733	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.793004036 CEST	80	49733	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.793037891 CEST	80	49733	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.793051958 CEST	80	49733	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:23.793071032 CEST	49733	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:23.793108940 CEST	49733	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:23.796974897 CEST	49729	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:23.797235966 CEST	443	49723	184.28.90.27	192.168.2.5
Sep 4, 2024 14:22:23.797303915 CEST	443	49723	184.28.90.27	192.168.2.5
Sep 4, 2024 14:22:23.797374010 CEST	49723	443	192.168.2.5	184.28.90.27
Sep 4, 2024 14:22:23.814498901 CEST	49723	443	192.168.2.5	184.28.90.27
Sep 4, 2024 14:22:23.814498901 CEST	49723	443	192.168.2.5	184.28.90.27
Sep 4, 2024 14:22:23.814531088 CEST	443	49723	184.28.90.27	192.168.2.5
Sep 4, 2024 14:22:23.814543009 CEST	443	49723	184.28.90.27	192.168.2.5
Sep 4, 2024 14:22:23.848833084 CEST	443	49731	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:23.849298954 CEST	49731	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:23.849308968 CEST	443	49731	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:23.849656105 CEST	443	49731	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:23.850126982 CEST	49731	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:23.850192070 CEST	443	49731	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:23.850523949 CEST	49731	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:23.896490097 CEST	443	49731	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:23.944504023 CEST	49737	443	192.168.2.5	184.28.90.27
Sep 4, 2024 14:22:23.944540024 CEST	443	49737	184.28.90.27	192.168.2.5
Sep 4, 2024 14:22:23.944642067 CEST	49737	443	192.168.2.5	184.28.90.27
Sep 4, 2024 14:22:23.945600033 CEST	49737	443	192.168.2.5	184.28.90.27
Sep 4, 2024 14:22:23.945612907 CEST	443	49737	184.28.90.27	192.168.2.5
Sep 4, 2024 14:22:24.082487106 CEST	80	49734	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:24.158226967 CEST	443	49731	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:24.158253908 CEST	443	49731	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:24.158315897 CEST	49731	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:24.158333063 CEST	443	49731	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:24.158375978 CEST	443	49731	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:24.158427954 CEST	49731	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:24.162302971 CEST	49731	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:24.162327051 CEST	443	49731	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:24.173002958 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:24.173042059 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:24.173171043 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:24.173367977 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:24.173378944 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:24.200578928 CEST	49734	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:24.296782017 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.298604012 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.298630953 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.299922943 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.300002098 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.302201033 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.302326918 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.302520990 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.302531958 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.325396061 CEST	443	49736	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:24.325694084 CEST	49736	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:24.325722933 CEST	443	49736	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:24.326806068 CEST	443	49736	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:24.326865911 CEST	49736	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:24.327560902 CEST	49736	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:24.327629089 CEST	443	49736	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:24.327826977 CEST	49736	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:24.327836990 CEST	443	49736	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:24.335114956 CEST	49739	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:24.335144997 CEST	443	49739	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:24.335294008 CEST	49739	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:24.335611105 CEST	49739	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:24.335623026 CEST	443	49739	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:24.392621040 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.392942905 CEST	49736	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:24.609731913 CEST	443	49737	184.28.90.27	192.168.2.5
Sep 4, 2024 14:22:24.609816074 CEST	49737	443	192.168.2.5	184.28.90.27
Sep 4, 2024 14:22:24.612205029 CEST	49737	443	192.168.2.5	184.28.90.27
Sep 4, 2024 14:22:24.612211943 CEST	443	49737	184.28.90.27	192.168.2.5
Sep 4, 2024 14:22:24.612440109 CEST	443	49737	184.28.90.27	192.168.2.5
Sep 4, 2024 14:22:24.614377975 CEST	49737	443	192.168.2.5	184.28.90.27
Sep 4, 2024 14:22:24.617130995 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.617142916 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.617151022 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.617167950 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.617171049 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.617173910 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.617221117 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.617260933 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.617275953 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.617326021 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.660492897 CEST	443	49737	184.28.90.27	192.168.2.5
Sep 4, 2024 14:22:24.686017990 CEST	443	49736	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:24.686053038 CEST	443	49736	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:24.686068058 CEST	443	49736	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:24.686121941 CEST	49736	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:24.686157942 CEST	443	49736	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:24.686218977 CEST	443	49736	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:24.686268091 CEST	49736	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:24.689141989 CEST	49736	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:24.689157963 CEST	443	49736	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:24.692472935 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.692493916 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.692516088 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.692544937 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.692569017 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.692600012 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.692617893 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.722672939 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.722697973 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.722762108 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.722779989 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.722810030 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.722830057 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.765471935 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.765500069 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.766096115 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.766119957 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.766164064 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.799197912 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.799226046 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.799293041 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.799305916 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.799333096 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.799352884 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.822356939 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.822384119 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.822516918 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.822530985 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.822575092 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.825700045 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:24.844976902 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.845004082 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.845068932 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.845078945 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.845115900 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.845135927 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.860362053 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.860383987 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.860447884 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.860457897 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.860491991 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.860511065 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.873682022 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.873697996 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.873758078 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.873768091 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.873817921 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.886956930 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.886977911 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.887027979 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.887038946 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.887070894 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.887087107 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.891854048 CEST	443	49737	184.28.90.27	192.168.2.5
Sep 4, 2024 14:22:24.891911983 CEST	443	49737	184.28.90.27	192.168.2.5
Sep 4, 2024 14:22:24.892007113 CEST	49737	443	192.168.2.5	184.28.90.27
Sep 4, 2024 14:22:24.892582893 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:24.900139093 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.900161982 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.900207043 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.900214911 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.900252104 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.900270939 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.913930893 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.913964033 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.914017916 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.914026022 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.914062023 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.914078951 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.924582958 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.924607992 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.924695015 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.924707890 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.924751997 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.935422897 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.935456038 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.935511112 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.935520887 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.935564041 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.938061953 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.943808079 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.943831921 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.943882942 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.943890095 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.943922043 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.943938971 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.952318907 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.952342033 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.952411890 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.952419996 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.952461958 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.953371048 CEST	443	49739	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:24.962135077 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.962162971 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.962208033 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.962218046 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.962243080 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.962260962 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.980191946 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.980215073 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.980268955 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.980276108 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.980310917 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.980330944 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.991473913 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.991494894 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.991576910 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:24.991589069 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:24.991636992 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.003365040 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.003387928 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.003447056 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.003457069 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.003487110 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.006086111 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.015242100 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.015263081 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.015321970 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.015332937 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.015378952 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.026060104 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.026098967 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.026139021 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.026149035 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.026182890 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.026201963 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.037492037 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.037513018 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.037602901 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.037612915 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.037647963 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.037666082 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.042870045 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.042891026 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.042948961 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.042959929 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.042985916 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.043008089 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.052515030 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.052536964 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.052589893 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.052604914 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.052634001 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.052653074 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.070672035 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.070693016 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.070820093 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.070837021 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.070887089 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.081068993 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.081098080 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.081171989 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.081198931 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.081207991 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.081250906 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.081305981 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.081357956 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.124521971 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.127085924 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:25.127115965 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.127321959 CEST	49739	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:25.127346039 CEST	443	49739	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:25.127623081 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.127892017 CEST	443	49739	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:25.128879070 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:25.128973007 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.129636049 CEST	49739	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:25.129712105 CEST	443	49739	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:25.130158901 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:25.130233049 CEST	49739	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:25.143215895 CEST	49737	443	192.168.2.5	184.28.90.27
Sep 4, 2024 14:22:25.143268108 CEST	443	49737	184.28.90.27	192.168.2.5
Sep 4, 2024 14:22:25.143290043 CEST	49737	443	192.168.2.5	184.28.90.27
Sep 4, 2024 14:22:25.143299103 CEST	443	49737	184.28.90.27	192.168.2.5
Sep 4, 2024 14:22:25.149197102 CEST	49735	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.149219036 CEST	443	49735	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.172497988 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.176506042 CEST	443	49739	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:25.313934088 CEST	443	49739	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:25.313956022 CEST	443	49739	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:25.313971996 CEST	443	49739	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:25.314032078 CEST	49739	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:25.314062119 CEST	443	49739	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:25.314081907 CEST	443	49739	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:25.314084053 CEST	49739	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:25.314132929 CEST	49739	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:25.336677074 CEST	49739	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:25.336694002 CEST	443	49739	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:25.339427948 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.339456081 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.339463949 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.339503050 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.339519024 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.339520931 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:25.339534044 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.339550972 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.339565039 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:25.339565039 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:25.339580059 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:25.339611053 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:25.434906960 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.434928894 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.435062885 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:25.435077906 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.435132980 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:25.466578960 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.466598988 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.466675043 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:25.466685057 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.466749907 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:25.507430077 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.507455111 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.507544994 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:25.507544994 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:25.507558107 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.507601976 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:25.539685965 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.539701939 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.539860010 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:25.539875031 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.539943933 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:25.562880993 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.562906981 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.562973976 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:25.562985897 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.563025951 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:25.563025951 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:25.583935976 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.583986044 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.584022045 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.584026098 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:25.584089041 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:25.601500034 CEST	49738	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:25.601521969 CEST	443	49738	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:25.615469933 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.615520000 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.615612030 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.616444111 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:25.616458893 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:25.668217897 CEST	49741	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:25.668272018 CEST	443	49741	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:25.668518066 CEST	49741	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:25.668895006 CEST	49741	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:25.668915987 CEST	443	49741	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:26.252248049 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.252594948 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:26.252628088 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.253004074 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.253720045 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:26.253829956 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.253904104 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:26.300503969 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.309931993 CEST	443	49741	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:26.310425043 CEST	49741	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:26.310458899 CEST	443	49741	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:26.310846090 CEST	443	49741	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:26.311757088 CEST	49741	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:26.311841011 CEST	443	49741	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:26.312165976 CEST	49741	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:26.356504917 CEST	443	49741	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:26.404141903 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:26.569823027 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.569849968 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.569859028 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.569886923 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.569906950 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.569919109 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.569921970 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:26.569953918 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.569967985 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:26.569967985 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:26.569996119 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:26.620645046 CEST	443	49741	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:26.620733023 CEST	443	49741	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:26.620837927 CEST	49741	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:26.622617960 CEST	49741	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:26.622641087 CEST	443	49741	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:26.633475065 CEST	49710	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:22:26.638528109 CEST	49742	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:26.638539076 CEST	80	49710	185.53.178.52	192.168.2.5
Sep 4, 2024 14:22:26.638575077 CEST	443	49742	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:26.638710976 CEST	49742	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:26.639055014 CEST	49742	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:26.639075994 CEST	443	49742	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:26.645912886 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.645929098 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.645951986 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.645965099 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.645991087 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:26.646025896 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.646078110 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:26.646079063 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:26.686605930 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.686619997 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.686657906 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.686697960 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:26.686736107 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.686752081 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:26.686800957 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:26.718621016 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.718646049 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.718720913 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:26.718753099 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.718770981 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:26.718815088 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:26.752388954 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.752423048 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.752492905 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:26.752525091 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.752538919 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:26.752578974 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:26.775623083 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.775650024 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.775718927 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:26.775734901 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.775775909 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:26.794904947 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.794965982 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.794998884 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:26.795013905 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.795026064 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.795047998 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:26.795077085 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:26.797873020 CEST	49740	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:26.797889948 CEST	443	49740	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:26.825258970 CEST	80	49710	185.53.178.52	192.168.2.5
Sep 4, 2024 14:22:26.894594908 CEST	49710	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:22:26.895960093 CEST	49743	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:22:26.900885105 CEST	80	49743	185.53.178.52	192.168.2.5
Sep 4, 2024 14:22:26.900968075 CEST	49743	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:22:26.901185036 CEST	49743	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:22:26.905932903 CEST	80	49743	185.53.178.52	192.168.2.5
Sep 4, 2024 14:22:27.276916027 CEST	443	49742	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:27.278115988 CEST	49742	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:27.278146029 CEST	443	49742	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:27.278553009 CEST	443	49742	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:27.291995049 CEST	49742	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:27.292155027 CEST	443	49742	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:27.292184114 CEST	49742	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:27.336509943 CEST	443	49742	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:27.343360901 CEST	49742	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:27.548114061 CEST	80	49743	185.53.178.52	192.168.2.5
Sep 4, 2024 14:22:27.585227013 CEST	443	49742	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:27.585315943 CEST	443	49742	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:27.585468054 CEST	49742	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:27.689335108 CEST	49742	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:27.689394951 CEST	443	49742	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:27.702737093 CEST	49743	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:22:29.638479948 CEST	49744	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:22:29.638541937 CEST	443	49744	13.85.23.86	192.168.2.5
Sep 4, 2024 14:22:29.638622999 CEST	49744	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:22:29.644062042 CEST	49744	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:22:29.644087076 CEST	443	49744	13.85.23.86	192.168.2.5
Sep 4, 2024 14:22:30.325078964 CEST	443	49744	13.85.23.86	192.168.2.5
Sep 4, 2024 14:22:30.325156927 CEST	49744	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:22:30.368575096 CEST	49744	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:22:30.368604898 CEST	443	49744	13.85.23.86	192.168.2.5
Sep 4, 2024 14:22:30.368979931 CEST	443	49744	13.85.23.86	192.168.2.5
Sep 4, 2024 14:22:30.421984911 CEST	49744	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:22:31.121267080 CEST	49744	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:22:31.168499947 CEST	443	49744	13.85.23.86	192.168.2.5
Sep 4, 2024 14:22:31.342977047 CEST	443	49744	13.85.23.86	192.168.2.5
Sep 4, 2024 14:22:31.343003988 CEST	443	49744	13.85.23.86	192.168.2.5
Sep 4, 2024 14:22:31.343013048 CEST	443	49744	13.85.23.86	192.168.2.5
Sep 4, 2024 14:22:31.343049049 CEST	443	49744	13.85.23.86	192.168.2.5
Sep 4, 2024 14:22:31.343063116 CEST	443	49744	13.85.23.86	192.168.2.5
Sep 4, 2024 14:22:31.343074083 CEST	443	49744	13.85.23.86	192.168.2.5
Sep 4, 2024 14:22:31.343102932 CEST	49744	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:22:31.343137980 CEST	443	49744	13.85.23.86	192.168.2.5
Sep 4, 2024 14:22:31.343166113 CEST	49744	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:22:31.343169928 CEST	443	49744	13.85.23.86	192.168.2.5
Sep 4, 2024 14:22:31.343180895 CEST	443	49744	13.85.23.86	192.168.2.5
Sep 4, 2024 14:22:31.343185902 CEST	49744	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:22:31.343193054 CEST	443	49744	13.85.23.86	192.168.2.5
Sep 4, 2024 14:22:31.343224049 CEST	49744	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:22:31.343235970 CEST	49744	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:22:31.343244076 CEST	443	49744	13.85.23.86	192.168.2.5
Sep 4, 2024 14:22:31.343530893 CEST	443	49744	13.85.23.86	192.168.2.5
Sep 4, 2024 14:22:31.343974113 CEST	49744	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:22:31.467298031 CEST	443	49714	216.58.206.68	192.168.2.5
Sep 4, 2024 14:22:31.467371941 CEST	443	49714	216.58.206.68	192.168.2.5
Sep 4, 2024 14:22:31.467463970 CEST	49714	443	192.168.2.5	216.58.206.68
Sep 4, 2024 14:22:31.966125965 CEST	49744	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:22:31.966171026 CEST	443	49744	13.85.23.86	192.168.2.5
Sep 4, 2024 14:22:32.960757971 CEST	49714	443	192.168.2.5	216.58.206.68
Sep 4, 2024 14:22:32.960792065 CEST	443	49714	216.58.206.68	192.168.2.5
Sep 4, 2024 14:22:33.923495054 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 4, 2024 14:22:33.924061060 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 4, 2024 14:22:33.924943924 CEST	49751	443	192.168.2.5	23.1.237.91
Sep 4, 2024 14:22:33.924979925 CEST	443	49751	23.1.237.91	192.168.2.5
Sep 4, 2024 14:22:33.925050974 CEST	49751	443	192.168.2.5	23.1.237.91
Sep 4, 2024 14:22:33.926219940 CEST	49751	443	192.168.2.5	23.1.237.91
Sep 4, 2024 14:22:33.926233053 CEST	443	49751	23.1.237.91	192.168.2.5
Sep 4, 2024 14:22:33.928566933 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 4, 2024 14:22:33.928858042 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 4, 2024 14:22:34.518194914 CEST	443	49751	23.1.237.91	192.168.2.5
Sep 4, 2024 14:22:34.518275023 CEST	49751	443	192.168.2.5	23.1.237.91
Sep 4, 2024 14:22:36.815413952 CEST	443	49715	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:36.815496922 CEST	443	49715	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:36.815689087 CEST	49715	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:37.955696106 CEST	49752	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:37.956613064 CEST	49753	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:37.962400913 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:37.962428093 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:37.962476969 CEST	49752	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:37.962549925 CEST	49753	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:37.962904930 CEST	49753	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:37.967886925 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.549417973 CEST	49752	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.554322004 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.767411947 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.767429113 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.767448902 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.767462015 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.767481089 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.767487049 CEST	49753	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.767493963 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.767504930 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.767549038 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.767549992 CEST	49753	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.767565966 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.767579079 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.767612934 CEST	49753	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.767641068 CEST	49753	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.772366047 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.772378922 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.772392035 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.772438049 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.772444963 CEST	49753	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.772499084 CEST	49753	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.854079008 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.854196072 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.854207993 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.854219913 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.854232073 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.854243040 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.854254961 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.854269028 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.854271889 CEST	49752	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.854281902 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.854295015 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.854332924 CEST	49752	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.854357958 CEST	49752	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.855706930 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.855736017 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.855748892 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.855823040 CEST	49753	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.855917931 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.855930090 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.855942965 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.855957031 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.855967999 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.855993032 CEST	49753	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.855993032 CEST	49753	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.856018066 CEST	49753	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.856782913 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.856806993 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.856827021 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.856838942 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.856852055 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.856899977 CEST	49753	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.859117985 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.859153986 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.859165907 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.859178066 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.859210968 CEST	49752	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.859241962 CEST	49752	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.894156933 CEST	49754	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:38.894179106 CEST	443	49754	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:38.894337893 CEST	49754	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:38.894639015 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:38.894681931 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:38.894761086 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:38.895220041 CEST	49754	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:38.895232916 CEST	443	49754	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:38.895451069 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:38.895464897 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:38.905206919 CEST	49756	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:38.905219078 CEST	443	49756	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:38.905292034 CEST	49756	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:38.906068087 CEST	49753	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.916659117 CEST	49756	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:38.916671991 CEST	443	49756	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:38.917352915 CEST	49753	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.918401957 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.928584099 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.928682089 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.928826094 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.929080963 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.934289932 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.943212986 CEST	49758	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:38.944650888 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.944667101 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.944678068 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.944730043 CEST	49752	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.944767952 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.944804907 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.944833040 CEST	49752	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.944978952 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.945025921 CEST	49752	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.945055008 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.945071936 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.945084095 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.945096970 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.945132971 CEST	49752	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.945157051 CEST	49752	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.945841074 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.945879936 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:38.946031094 CEST	49752	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:38.948062897 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:38.948172092 CEST	49758	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:38.948694944 CEST	49758	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:38.953454018 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:38.973879099 CEST	49759	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:38.978810072 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:38.978915930 CEST	49759	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:38.979039907 CEST	49759	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:38.984183073 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.020808935 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:39.075028896 CEST	49753	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:39.395570993 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.395742893 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.395749092 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.395762920 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.395770073 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.395836115 CEST	49758	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.395848036 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.395875931 CEST	49758	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.395920038 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.395925999 CEST	49758	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.395963907 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.395968914 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.395981073 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.396028996 CEST	49758	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.398812056 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:39.400861979 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.404500961 CEST	49760	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:39.404535055 CEST	443	49760	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:39.404616117 CEST	49760	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:39.404961109 CEST	49760	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:39.404972076 CEST	443	49760	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:39.418905020 CEST	49761	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.419208050 CEST	49758	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.423732042 CEST	80	49761	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.423813105 CEST	49761	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.423998117 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.425672054 CEST	49761	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.430618048 CEST	80	49761	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.438080072 CEST	49762	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.438354015 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.438437939 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.438494921 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.438585997 CEST	49759	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.438920975 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.438929081 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.438942909 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.438949108 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.438956022 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.438990116 CEST	49759	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.439033985 CEST	49759	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.442857981 CEST	80	49762	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.443026066 CEST	49762	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.443223953 CEST	49762	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.448180914 CEST	80	49762	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.451051950 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:39.517868996 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.517887115 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.517893076 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.517899036 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.517909050 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.517915010 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.517920971 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.517929077 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.517965078 CEST	49758	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.518002987 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.518023968 CEST	49758	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.518215895 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.518249989 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.518254042 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.518277884 CEST	49758	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.518352032 CEST	49758	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.518719912 CEST	443	49754	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:39.519903898 CEST	49754	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:39.519920111 CEST	443	49754	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:39.521023989 CEST	443	49754	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:39.521085024 CEST	49754	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:39.521481991 CEST	49754	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:39.521544933 CEST	443	49754	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:39.522034883 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.522124052 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.522294044 CEST	49758	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.523684025 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.523689985 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.523703098 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.523746967 CEST	49758	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.523766041 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.524143934 CEST	49758	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.528038025 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.528321028 CEST	49763	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.529515028 CEST	49764	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.535634995 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.535707951 CEST	49763	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.536915064 CEST	80	49764	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.537143946 CEST	49764	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.543037891 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:39.548712015 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:39.548732996 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:39.548882961 CEST	49764	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.548980951 CEST	49763	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.550061941 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:39.550154924 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:39.556673050 CEST	80	49764	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.556746006 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.558551073 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:39.558675051 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:39.565766096 CEST	49754	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:39.565774918 CEST	443	49754	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:39.569781065 CEST	443	49756	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:39.570306063 CEST	49756	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:39.570314884 CEST	443	49756	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:39.571376085 CEST	443	49756	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:39.571429968 CEST	49756	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:39.571891069 CEST	49756	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:39.571953058 CEST	443	49756	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:39.572392941 CEST	49756	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:39.572402954 CEST	443	49756	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:39.573646069 CEST	49765	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.574100971 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:39.574116945 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:39.574296951 CEST	49759	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.583584070 CEST	80	49765	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.583718061 CEST	49765	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.583904982 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.586453915 CEST	49765	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.591212988 CEST	80	49765	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.613337040 CEST	49754	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:39.613346100 CEST	49756	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:39.613368034 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:39.675406933 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.685511112 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.685524940 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.685533047 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.685538054 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.685544014 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.685622931 CEST	49759	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.685658932 CEST	49759	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.685897112 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.685936928 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.685942888 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.685985088 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.685992002 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.686024904 CEST	49759	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.686024904 CEST	49759	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.686760902 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.686783075 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.686794996 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.686830997 CEST	49759	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.686856031 CEST	49759	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.686860085 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.686863899 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.686950922 CEST	49759	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.767014027 CEST	49766	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.767930984 CEST	49767	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.769937992 CEST	443	49756	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:39.769968987 CEST	443	49756	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:39.770039082 CEST	49756	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:39.770059109 CEST	443	49756	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:39.770071030 CEST	443	49756	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:39.770108938 CEST	49756	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:39.772028923 CEST	49756	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:39.772041082 CEST	443	49756	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:39.772916079 CEST	80	49766	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.773102045 CEST	49766	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.773447037 CEST	49766	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.773596048 CEST	80	49767	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.773660898 CEST	49767	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.773833990 CEST	49767	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.778333902 CEST	80	49766	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.779720068 CEST	80	49767	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.878140926 CEST	80	49761	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.911709070 CEST	80	49762	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.911874056 CEST	80	49762	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.911910057 CEST	80	49762	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.911978006 CEST	49762	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.912014961 CEST	80	49762	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.912022114 CEST	80	49762	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.912034035 CEST	80	49762	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.912039995 CEST	80	49762	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.912070990 CEST	49762	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.912381887 CEST	80	49762	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.912432909 CEST	80	49762	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.912437916 CEST	80	49762	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:39.912498951 CEST	49762	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.914935112 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:39.914958954 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:39.914966106 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:39.914994001 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:39.915005922 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:39.915014029 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:39.915071964 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:39.915103912 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:39.915143967 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:39.915195942 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:39.933628082 CEST	49761	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:39.943815947 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:39.943845034 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:39.943949938 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:39.943949938 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:39.943963051 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:39.944184065 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:39.971745968 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:39.971780062 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:39.971879959 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:39.971890926 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:39.971905947 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:39.972203016 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.011430025 CEST	80	49764	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.011441946 CEST	80	49764	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.011455059 CEST	80	49764	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.011460066 CEST	80	49764	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.011466980 CEST	80	49764	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.011471987 CEST	80	49764	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.011485100 CEST	80	49764	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.011490107 CEST	80	49764	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.011498928 CEST	80	49764	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.011509895 CEST	80	49764	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.011517048 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.011528969 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.011535883 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.011537075 CEST	49764	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.011540890 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.011547089 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.011552095 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.011560917 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.011570930 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.011576891 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.011584044 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.011609077 CEST	49764	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.011657953 CEST	49763	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.011657953 CEST	49763	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.012523890 CEST	80	49761	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.016475916 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.016510963 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.016613007 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.016629934 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.016681910 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.016769886 CEST	80	49764	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.016777992 CEST	80	49764	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.016791105 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.016829014 CEST	49764	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.017117023 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.017122030 CEST	80	49764	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.017168999 CEST	49763	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.035089016 CEST	443	49760	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.041470051 CEST	80	49765	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.048309088 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.048333883 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.048408031 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.048419952 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.048429966 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.048604012 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.059748888 CEST	49761	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.060206890 CEST	49764	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.071295977 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.071326971 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.071372032 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.071382999 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.071420908 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.071472883 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.092437029 CEST	49760	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:40.092688084 CEST	49765	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.095951080 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.095980883 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.096050024 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.096060991 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.096101046 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.096132994 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.101447105 CEST	80	49764	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.101455927 CEST	80	49764	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.101468086 CEST	80	49764	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.101501942 CEST	80	49764	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.101517916 CEST	49764	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.101557016 CEST	49764	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.101923943 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.102034092 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.102039099 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.102085114 CEST	49763	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.102114916 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.102119923 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.102158070 CEST	49763	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.110069036 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.110096931 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.110127926 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.110137939 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.110209942 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.110209942 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.111704111 CEST	49760	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:40.111713886 CEST	443	49760	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.112076998 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.113065958 CEST	443	49760	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.113076925 CEST	443	49760	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.113133907 CEST	49760	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:40.113691092 CEST	49760	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:40.113782883 CEST	443	49760	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.114061117 CEST	49760	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:40.114068031 CEST	443	49760	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.126055002 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.126084089 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.126174927 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.126194000 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.126235008 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.136754990 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.136775017 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.136871099 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.136879921 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.136919975 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.147897959 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.147918940 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.147983074 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.147999048 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.148017883 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.148056984 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.155500889 CEST	49760	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:40.160737038 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.160767078 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.160814047 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.160824060 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.160861015 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.160888910 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.173072100 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.173091888 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.173165083 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.173180103 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.173429966 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.187463045 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.187488079 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.187557936 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.187572956 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.187618971 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.193886995 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.193903923 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.194004059 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.194019079 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.194071054 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.199290991 CEST	49768	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:40.199336052 CEST	443	49768	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.199430943 CEST	49768	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:40.200154066 CEST	49768	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:40.200170040 CEST	443	49768	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.200968027 CEST	49762	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.202353954 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.202372074 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.202459097 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.202467918 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.202516079 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.204005003 CEST	49769	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.204137087 CEST	49770	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.204387903 CEST	49771	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.205830097 CEST	80	49762	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.208839893 CEST	80	49769	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.208900928 CEST	80	49770	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.208909035 CEST	49769	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.208950043 CEST	49770	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.209125996 CEST	49770	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.209157944 CEST	80	49771	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.209225893 CEST	49771	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.209445000 CEST	49769	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.210973024 CEST	49771	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.213252068 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.213270903 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.213339090 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.213351011 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.213391066 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.213807106 CEST	80	49770	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.214235067 CEST	80	49769	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.215787888 CEST	80	49771	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.219333887 CEST	80	49767	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.219451904 CEST	80	49767	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.219458103 CEST	80	49767	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.219464064 CEST	80	49767	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.219505072 CEST	49767	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.220123053 CEST	80	49767	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.220156908 CEST	80	49767	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.220210075 CEST	49767	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.222196102 CEST	80	49767	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.222202063 CEST	80	49767	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.222213984 CEST	80	49767	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.222258091 CEST	49767	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.223193884 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.223231077 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.223272085 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.223284006 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.223318100 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.223330975 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.224313974 CEST	80	49767	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.224320889 CEST	80	49767	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.224334002 CEST	80	49767	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.224349976 CEST	80	49767	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.224376917 CEST	49767	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.224415064 CEST	49767	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.224870920 CEST	80	49767	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.224927902 CEST	49767	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.224936962 CEST	80	49767	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.234131098 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.234154940 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.234214067 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.234224081 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.234249115 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.234272003 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.237370014 CEST	80	49766	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.237502098 CEST	80	49766	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.237508059 CEST	80	49766	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.237520933 CEST	80	49766	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.237528086 CEST	80	49766	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.237565041 CEST	49766	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.237591028 CEST	80	49766	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.237597942 CEST	80	49766	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.237653017 CEST	49766	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.237962008 CEST	80	49766	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.237967014 CEST	80	49766	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.237978935 CEST	80	49766	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.238013029 CEST	49766	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.243415117 CEST	80	49766	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.243448019 CEST	80	49766	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.243671894 CEST	49766	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.247209072 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.247246027 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.247288942 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.247304916 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.247338057 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.247351885 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.259649038 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.259673119 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.259728909 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.259737015 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.259769917 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.259798050 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.272710085 CEST	49767	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.279494047 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.279520035 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.279592037 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.279603004 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.279633999 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.279652119 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.281584978 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.281601906 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.281687021 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.281697035 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.281768084 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.289747000 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.289762974 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.289824009 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.289840937 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.289884090 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.299348116 CEST	80	49762	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.301665068 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.301683903 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.301728964 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.301738024 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.301774979 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.301794052 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.306370020 CEST	80	49767	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.306380987 CEST	80	49767	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.306463003 CEST	49767	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.306468964 CEST	80	49767	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.306472063 CEST	80	49767	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.306473970 CEST	80	49767	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.306521893 CEST	49767	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.307152033 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.307169914 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.307229996 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.307239056 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.307252884 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.307279110 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.309679985 CEST	443	49760	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.309709072 CEST	443	49760	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.309717894 CEST	443	49760	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.309775114 CEST	49760	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:40.309787989 CEST	443	49760	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.309834957 CEST	443	49760	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.310004950 CEST	49760	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:40.310939074 CEST	49760	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:40.310957909 CEST	443	49760	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.322201967 CEST	49772	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.322237968 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.322462082 CEST	49772	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.322690010 CEST	49772	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.322700977 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.322797060 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.322819948 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.322868109 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.322879076 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.322895050 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.322901011 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.322920084 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.322926044 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.322948933 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.322974920 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.323016882 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.323563099 CEST	49755	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.323579073 CEST	443	49755	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.328181982 CEST	80	49766	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.328191996 CEST	80	49766	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.328197956 CEST	80	49766	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.328222036 CEST	80	49766	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.328259945 CEST	49766	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.328300953 CEST	49766	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.340069056 CEST	49773	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:40.340102911 CEST	443	49773	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.340215921 CEST	49773	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:40.340503931 CEST	49773	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:40.340518951 CEST	443	49773	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.345400095 CEST	49762	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.357583046 CEST	49763	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.362373114 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.420717955 CEST	49774	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:40.420742989 CEST	443	49774	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.420835972 CEST	49774	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:40.422045946 CEST	49774	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:40.422061920 CEST	443	49774	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.439085007 CEST	80	49762	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.457149029 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.457164049 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.457179070 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.457191944 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.457254887 CEST	49763	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.457283020 CEST	49763	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.457480907 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.457637072 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.457681894 CEST	49763	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.457698107 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.457710028 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.457720995 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.457750082 CEST	49763	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.459659100 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.459709883 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.459722042 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.459741116 CEST	49763	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.459748030 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.459772110 CEST	49763	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.460086107 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.460144043 CEST	49763	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.490473032 CEST	49762	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.547749043 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.587888002 CEST	49763	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.656398058 CEST	80	49770	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.656404018 CEST	80	49770	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.656471014 CEST	80	49770	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.656477928 CEST	49770	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.656497002 CEST	80	49770	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.656548023 CEST	49770	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.656589985 CEST	80	49770	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.656599998 CEST	80	49770	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.656609058 CEST	80	49770	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.656640053 CEST	49770	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.656737089 CEST	80	49770	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.656749010 CEST	80	49769	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.656769037 CEST	80	49769	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.656780005 CEST	80	49769	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.656791925 CEST	80	49769	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.656805038 CEST	80	49769	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.656811953 CEST	49770	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.656815052 CEST	80	49770	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.656831026 CEST	80	49770	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.656847954 CEST	49769	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.656886101 CEST	49770	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.659058094 CEST	80	49769	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.659204006 CEST	80	49769	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.659743071 CEST	80	49771	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.660335064 CEST	49769	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.660953045 CEST	80	49769	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.660995007 CEST	80	49769	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.661006927 CEST	80	49769	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.662139893 CEST	80	49769	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.662153006 CEST	80	49769	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.662168026 CEST	80	49769	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.664926052 CEST	49769	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.715851068 CEST	49771	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.743442059 CEST	80	49770	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.743457079 CEST	80	49769	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.743469000 CEST	80	49769	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.743556023 CEST	49769	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.743587971 CEST	80	49769	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.743604898 CEST	80	49769	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.743618011 CEST	80	49769	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.743652105 CEST	49769	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.794210911 CEST	80	49771	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:40.795885086 CEST	49769	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.795977116 CEST	49770	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.827835083 CEST	443	49768	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.828708887 CEST	49768	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:40.828737974 CEST	443	49768	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.829140902 CEST	443	49768	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.829524994 CEST	49768	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:40.829585075 CEST	443	49768	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.829962969 CEST	49768	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:40.843847990 CEST	49771	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:40.876507044 CEST	443	49768	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.977799892 CEST	443	49773	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.978128910 CEST	49773	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:40.978158951 CEST	443	49773	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.978523016 CEST	443	49773	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.978872061 CEST	49773	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:40.978997946 CEST	443	49773	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:40.979078054 CEST	49773	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:40.989337921 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.989645958 CEST	49772	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.989659071 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.990015984 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.990367889 CEST	49772	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:40.990432024 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:40.990617990 CEST	49772	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:41.020502090 CEST	443	49773	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:41.036501884 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:41.042808056 CEST	443	49774	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:41.043056965 CEST	49774	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:41.043068886 CEST	443	49774	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:41.043418884 CEST	443	49774	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:41.043759108 CEST	49774	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:41.043818951 CEST	443	49774	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:41.043965101 CEST	49774	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:41.088505030 CEST	443	49774	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:41.149702072 CEST	443	49768	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:41.149728060 CEST	443	49768	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:41.149785042 CEST	49768	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:41.149801970 CEST	443	49768	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:41.149825096 CEST	443	49768	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:41.149970055 CEST	49768	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:41.150856972 CEST	49768	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:41.150872946 CEST	443	49768	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:41.294414043 CEST	443	49773	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:41.294439077 CEST	443	49773	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:41.294508934 CEST	443	49773	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:41.294509888 CEST	49773	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:41.294641972 CEST	49773	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:41.295849085 CEST	49773	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:41.295865059 CEST	443	49773	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:41.346797943 CEST	443	49774	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:41.346870899 CEST	443	49774	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:41.347234964 CEST	49774	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:41.347436905 CEST	49774	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:41.347446918 CEST	443	49774	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:41.352575064 CEST	49775	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:41.352605104 CEST	443	49775	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:41.352711916 CEST	49775	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:41.352889061 CEST	49775	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:41.352901936 CEST	443	49775	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:41.357758999 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:41.362622976 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:41.365207911 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:41.365228891 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:41.365246058 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:41.365295887 CEST	49772	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:41.365309954 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:41.365372896 CEST	49772	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:41.393517971 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:41.393539906 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:41.393613100 CEST	49772	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:41.393626928 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:41.393696070 CEST	49772	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:41.418638945 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:41.418673992 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:41.418734074 CEST	49772	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:41.418744087 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:41.418766022 CEST	49772	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:41.418773890 CEST	49772	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:41.456473112 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:41.460957050 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:41.460983038 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:41.461025953 CEST	49772	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:41.461036921 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:41.461100101 CEST	49772	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:41.494921923 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:41.494941950 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:41.495415926 CEST	49772	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:41.495426893 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:41.495477915 CEST	49772	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:41.498183966 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:41.520654917 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:41.520673990 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:41.520823002 CEST	49772	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:41.520833015 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:41.520989895 CEST	49772	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:41.537364960 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:41.537462950 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:41.537543058 CEST	49772	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:41.537960052 CEST	49772	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:41.537978888 CEST	443	49772	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:41.576297998 CEST	49776	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:41.576354027 CEST	443	49776	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:41.576754093 CEST	49776	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:41.577852964 CEST	49776	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:41.577868938 CEST	443	49776	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:41.825324059 CEST	80	49710	185.53.178.52	192.168.2.5
Sep 4, 2024 14:22:41.825436115 CEST	49710	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:22:41.983407974 CEST	443	49775	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:41.983726978 CEST	49775	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:41.983738899 CEST	443	49775	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:41.984127998 CEST	443	49775	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:41.984467983 CEST	49775	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:41.984584093 CEST	443	49775	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:41.984713078 CEST	49775	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:42.028501034 CEST	443	49775	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:42.225241899 CEST	443	49776	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:42.234808922 CEST	49776	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:42.234833956 CEST	443	49776	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:42.235250950 CEST	443	49776	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:42.236093044 CEST	49776	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:42.236156940 CEST	443	49776	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:42.236287117 CEST	49776	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:42.244745016 CEST	49710	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:22:42.249677896 CEST	80	49710	185.53.178.52	192.168.2.5
Sep 4, 2024 14:22:42.280510902 CEST	443	49776	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:42.284743071 CEST	49776	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:42.290647030 CEST	443	49775	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:42.290752888 CEST	443	49775	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:42.290873051 CEST	49775	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:42.294656992 CEST	49775	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:42.294680119 CEST	443	49775	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:42.538434029 CEST	443	49776	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:42.538507938 CEST	443	49776	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:42.538621902 CEST	49776	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:42.548048973 CEST	80	49743	185.53.178.52	192.168.2.5
Sep 4, 2024 14:22:42.550201893 CEST	49743	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:22:42.746623993 CEST	49776	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:42.746659994 CEST	443	49776	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:42.790770054 CEST	49743	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:22:42.795815945 CEST	80	49743	185.53.178.52	192.168.2.5
Sep 4, 2024 14:22:42.806087017 CEST	49777	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:42.806138992 CEST	443	49777	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:42.806246996 CEST	49777	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:42.806452990 CEST	49777	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:42.806473017 CEST	443	49777	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:43.436537027 CEST	443	49777	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:43.444803953 CEST	49777	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:43.444824934 CEST	443	49777	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:43.445312023 CEST	443	49777	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:43.449834108 CEST	49777	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:43.449930906 CEST	443	49777	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:43.450498104 CEST	49777	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:43.496501923 CEST	443	49777	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:43.751369953 CEST	443	49777	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:43.751457930 CEST	443	49777	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:43.751507998 CEST	49777	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:43.755340099 CEST	49777	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:43.755359888 CEST	443	49777	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:44.539294004 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:44.544290066 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:44.949353933 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:44.949374914 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:44.949389935 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:44.949399948 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:44.949414015 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:44.949464083 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:44.949506998 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:44.949517965 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:44.949533939 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:44.949552059 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:44.949559927 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:44.949561119 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:44.949568987 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:44.949610949 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:44.950659037 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:44.952224970 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:44.954428911 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:44.954432011 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:44.954433918 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:44.954509020 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.019758940 CEST	49778	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:45.019804955 CEST	443	49778	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:45.019885063 CEST	49778	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:45.020144939 CEST	49778	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:45.020152092 CEST	443	49778	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:45.039767981 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.039854050 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.039860964 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.039864063 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.039870977 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.039932013 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.040137053 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.040148973 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.040182114 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.040191889 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.040210009 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.040221930 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.040230989 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.040262938 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.041476965 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.041490078 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.041502953 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.041516066 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.041542053 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.041553974 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.041558981 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.041601896 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.041938066 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.041950941 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.041964054 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.041975975 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.041991949 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.042007923 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.042443991 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.042517900 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.042531013 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.042562008 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.042640924 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.042653084 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.042665005 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.042685032 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.042712927 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.043394089 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.044929028 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.044974089 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.136662960 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.136686087 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.136704922 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.136718035 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.136730909 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.136754990 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.136797905 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.137109041 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.137120008 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.137132883 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.137145996 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.137156963 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.137162924 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.137171030 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.137181044 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.137193918 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.137206078 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.137217045 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.137239933 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.137255907 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.137358904 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.137370110 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.137382030 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.137393951 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.137447119 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.137470007 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.137482882 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.137494087 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.137506008 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.137527943 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.137530088 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.137543917 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.137556076 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.137557030 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.137586117 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.138056993 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.138070107 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.138082027 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.138109922 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.138123035 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.138191938 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.138230085 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.138241053 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.138284922 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.138290882 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.138302088 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.138314009 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.138326883 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.138338089 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.138348103 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.138415098 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.138427973 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.138441086 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.138453960 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.138457060 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.138473988 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:45.138484955 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.138520956 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:45.151242018 CEST	49779	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:45.151293993 CEST	443	49779	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:45.151364088 CEST	49779	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:45.153574944 CEST	49779	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:45.153589964 CEST	443	49779	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:45.655896902 CEST	443	49778	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:45.657316923 CEST	49778	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:45.657341957 CEST	443	49778	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:45.657694101 CEST	443	49778	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:45.658096075 CEST	49778	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:45.658152103 CEST	443	49778	195.181.170.18	192.168.2.5
Sep 4, 2024 14:22:45.705105066 CEST	49778	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:22:45.779658079 CEST	443	49779	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:45.806543112 CEST	49779	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:45.806566954 CEST	443	49779	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:45.807039976 CEST	443	49779	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:45.807513952 CEST	49779	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:45.807579994 CEST	443	49779	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:45.807799101 CEST	49779	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:45.807825089 CEST	443	49779	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:45.999519110 CEST	443	49779	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:45.999547005 CEST	443	49779	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:45.999619007 CEST	443	49779	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:45.999627113 CEST	49779	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:45.999674082 CEST	49779	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:46.001455069 CEST	49779	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:46.001475096 CEST	443	49779	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:46.052217960 CEST	49780	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:46.052278996 CEST	443	49780	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:46.052405119 CEST	49780	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:46.052757025 CEST	49780	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:46.052776098 CEST	443	49780	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:46.078768015 CEST	49781	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:46.078816891 CEST	443	49781	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:46.079044104 CEST	49781	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:46.079287052 CEST	49781	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:46.079298973 CEST	443	49781	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:46.673352957 CEST	443	49780	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:46.673794985 CEST	49780	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:46.673829079 CEST	443	49780	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:46.674184084 CEST	443	49780	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:46.674650908 CEST	49780	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:46.674710989 CEST	443	49780	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:46.674972057 CEST	49780	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:46.711656094 CEST	443	49781	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:46.711999893 CEST	49781	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:46.712032080 CEST	443	49781	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:46.712409973 CEST	443	49781	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:46.713615894 CEST	49781	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:46.713705063 CEST	443	49781	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:46.713999033 CEST	49781	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:46.716497898 CEST	443	49780	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:46.756505013 CEST	443	49781	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:46.859710932 CEST	443	49780	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:46.859793901 CEST	443	49780	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:46.859878063 CEST	49780	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:46.860452890 CEST	49780	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:46.860476017 CEST	443	49780	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:46.864593983 CEST	49782	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:46.864628077 CEST	443	49782	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:46.864732981 CEST	49782	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:46.864965916 CEST	49782	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:46.864975929 CEST	443	49782	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:46.878313065 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:46.878336906 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:46.878391981 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:46.878670931 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:46.878681898 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.020549059 CEST	443	49781	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:47.020574093 CEST	443	49781	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:47.020634890 CEST	49781	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:47.020668030 CEST	443	49781	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:47.020832062 CEST	443	49781	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:47.020874023 CEST	49781	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:47.021995068 CEST	49781	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:47.022018909 CEST	443	49781	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:47.334511995 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.334855080 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.334887028 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.335932970 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.335995913 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.341303110 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.341439962 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.341500998 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.341516972 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.389827013 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.435806990 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.435867071 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.435890913 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.435920954 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.435944080 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.435945988 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.435961962 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.435990095 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.435991049 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.436006069 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.436014891 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.436059952 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.436065912 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.436578035 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.436623096 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.436630011 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.443258047 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.443434000 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.443443060 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.489223003 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.492614985 CEST	443	49782	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:47.496979952 CEST	49782	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:47.497006893 CEST	443	49782	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:47.497387886 CEST	443	49782	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:47.497891903 CEST	49782	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:47.497945070 CEST	443	49782	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:47.498392105 CEST	49782	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:47.524034023 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.524049044 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.524127960 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.524151087 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.524178982 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.524183989 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.524202108 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.524214983 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.524235964 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.524264097 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.544502974 CEST	443	49782	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:47.609225988 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.609252930 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.609325886 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.609347105 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.610171080 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.610284090 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.610301971 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.610347033 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.610353947 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.611318111 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.611341000 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.611404896 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.611412048 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.612729073 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.613327026 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.613344908 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.613399029 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.613404989 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.613476038 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.695885897 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.695976973 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.696049929 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.696141005 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.797700882 CEST	443	49782	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:47.797779083 CEST	443	49782	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:47.797905922 CEST	49782	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:47.844588995 CEST	49782	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:47.844625950 CEST	443	49782	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:47.916445017 CEST	49783	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.916486979 CEST	443	49783	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.948590994 CEST	49784	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:47.948622942 CEST	443	49784	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:47.948931932 CEST	49784	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:47.949233055 CEST	49784	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:47.949245930 CEST	443	49784	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:47.959762096 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.959774017 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:47.960019112 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.960846901 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:47.960856915 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.409538984 CEST	443	49784	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:48.409866095 CEST	49784	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:48.409881115 CEST	443	49784	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:48.410986900 CEST	443	49784	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:48.411050081 CEST	49784	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:48.412379980 CEST	49784	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:48.412528038 CEST	443	49784	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:48.412683010 CEST	49784	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:48.412692070 CEST	443	49784	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:48.421340942 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.421627998 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.421634912 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.422828913 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.422887087 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.423226118 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.423321009 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.423609018 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.423614025 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.453190088 CEST	49784	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:48.468802929 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.521193027 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.521282911 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.521307945 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.521341085 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.521351099 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.521365881 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.521380901 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.522116899 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.522145987 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.522156954 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.522166014 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.522206068 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.522224903 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.522229910 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.522265911 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.525940895 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.536772966 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.536823988 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.536837101 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.545646906 CEST	443	49784	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:48.545757055 CEST	443	49784	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:48.545816898 CEST	49784	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:48.548182011 CEST	49784	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:48.548202991 CEST	443	49784	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:48.553082943 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:48.558048964 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.578408957 CEST	49786	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:48.578438044 CEST	443	49786	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:48.578576088 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.578602076 CEST	49786	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:48.578850985 CEST	49786	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:48.578866959 CEST	443	49786	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:48.609934092 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.610048056 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.610080957 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.610131025 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.610167027 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.610173941 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.610174894 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.610192060 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.610251904 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.610263109 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.610320091 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.610373020 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.610380888 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.611052990 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.611099958 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.611120939 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.611125946 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.611169100 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.611201048 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.611212969 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.611218929 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.611242056 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.611918926 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.611988068 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.611987114 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.611995935 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.612040997 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.612044096 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.612056017 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.612101078 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.612109900 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.612158060 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.612224102 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.612229109 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.658968925 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.658989906 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.699137926 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.699158907 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.699177027 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.699184895 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.699187994 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.699227095 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.699248075 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.699276924 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.699284077 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.699301004 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.700184107 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.700225115 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.700237036 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.700268984 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.700274944 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.700283051 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.700294018 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.700318098 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.700974941 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.700990915 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.701049089 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.701054096 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.701111078 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.702003956 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.702037096 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.702064037 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.702068090 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.702095032 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.702138901 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.702395916 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.703494072 CEST	49785	443	192.168.2.5	162.247.243.39
Sep 4, 2024 14:22:48.703509092 CEST	443	49785	162.247.243.39	192.168.2.5
Sep 4, 2024 14:22:48.758620977 CEST	49787	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:48.758657932 CEST	443	49787	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:48.758755922 CEST	49787	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:48.759144068 CEST	49787	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:48.759156942 CEST	443	49787	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:48.958889008 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.958911896 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.958935022 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.958947897 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.958959103 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.958972931 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.959005117 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:48.959018946 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.959033966 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:48.959039927 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.959081888 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:48.959214926 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.959220886 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.959225893 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.959249020 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.959278107 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:48.959292889 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:48.959300995 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.959314108 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.959356070 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:48.961410046 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.961431026 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.961443901 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.961517096 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.961520910 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:48.961529016 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.961540937 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.961565971 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:48.961592913 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:48.961618900 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.961625099 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.961776972 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.961807013 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:48.961823940 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.961834908 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.961886883 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:48.962227106 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.962238073 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:48.962280989 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:49.010663986 CEST	49788	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:49.010703087 CEST	443	49788	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:49.010782957 CEST	49788	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:49.011862993 CEST	49788	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:49.011878014 CEST	443	49788	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:49.041491985 CEST	443	49786	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:49.042021990 CEST	49786	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:49.042058945 CEST	443	49786	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:49.043077946 CEST	443	49786	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:49.043272972 CEST	49786	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:49.043638945 CEST	49786	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:49.043701887 CEST	443	49786	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:49.043823004 CEST	49786	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:49.043832064 CEST	443	49786	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:49.049117088 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:49.086355925 CEST	49786	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:49.102375984 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:49.197679996 CEST	443	49786	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:49.197788954 CEST	443	49786	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:49.197937012 CEST	49786	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:49.229650021 CEST	443	49787	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:49.240387917 CEST	49787	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:49.240403891 CEST	443	49787	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:49.240892887 CEST	443	49787	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:49.244663000 CEST	49787	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:49.244782925 CEST	443	49787	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:49.248123884 CEST	49787	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:49.248161077 CEST	49787	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:49.248225927 CEST	443	49787	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:49.260610104 CEST	49786	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:49.260647058 CEST	443	49786	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:49.382009029 CEST	443	49787	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:49.382122993 CEST	443	49787	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:49.382205963 CEST	49787	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:49.383116007 CEST	49787	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:49.383136988 CEST	443	49787	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:49.387574911 CEST	49789	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:49.387609005 CEST	443	49789	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:49.387681961 CEST	49789	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:49.388010979 CEST	49789	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:49.388024092 CEST	443	49789	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:49.630320072 CEST	443	49788	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:49.630793095 CEST	49788	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:49.630821943 CEST	443	49788	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:49.631196022 CEST	443	49788	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:49.631712914 CEST	49788	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:49.631787062 CEST	443	49788	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:49.631932974 CEST	49788	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:49.631963015 CEST	443	49788	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:49.671767950 CEST	49788	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:49.816605091 CEST	443	49788	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:49.816620111 CEST	443	49788	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:49.816693068 CEST	49788	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:49.816710949 CEST	443	49788	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:49.816725016 CEST	443	49788	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:49.817197084 CEST	49788	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:49.820055008 CEST	49788	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:49.820080996 CEST	443	49788	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:49.830133915 CEST	49790	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:49.830178976 CEST	443	49790	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:49.830292940 CEST	49790	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:49.830590010 CEST	49790	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:49.830604076 CEST	443	49790	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:49.840023994 CEST	443	49789	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:49.870316982 CEST	49789	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:49.870335102 CEST	443	49789	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:49.870886087 CEST	443	49789	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:49.871450901 CEST	49789	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:49.871531010 CEST	443	49789	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:49.871825933 CEST	49789	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:49.883106947 CEST	49791	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:49.883162022 CEST	443	49791	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:49.883337021 CEST	49791	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:49.883713961 CEST	49791	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:49.883733034 CEST	443	49791	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:49.916491985 CEST	443	49789	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:50.004694939 CEST	443	49789	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:50.004805088 CEST	443	49789	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:50.004877090 CEST	49789	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:50.006587982 CEST	49789	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:50.006613016 CEST	443	49789	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:50.456963062 CEST	443	49790	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:50.464112997 CEST	49790	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:50.464154959 CEST	443	49790	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:50.464569092 CEST	443	49790	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:50.496038914 CEST	49790	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:50.496196985 CEST	443	49790	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:50.496413946 CEST	49790	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:50.505235910 CEST	443	49791	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:50.507529974 CEST	49791	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:50.507560015 CEST	443	49791	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:50.507978916 CEST	443	49791	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:50.510952950 CEST	49791	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:50.511043072 CEST	443	49791	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:50.511589050 CEST	49791	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:50.540501118 CEST	443	49790	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:50.556493998 CEST	443	49791	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:50.764982939 CEST	443	49790	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:50.764997005 CEST	443	49790	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:50.765064955 CEST	49790	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:50.765105963 CEST	443	49790	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:50.765125036 CEST	443	49790	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:50.765173912 CEST	49790	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:50.766983986 CEST	49790	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:50.767010927 CEST	443	49790	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:50.810892105 CEST	443	49791	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:50.810977936 CEST	443	49791	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:50.811049938 CEST	49791	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:50.811574936 CEST	49791	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:50.811597109 CEST	443	49791	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:50.824151993 CEST	49792	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:50.824192047 CEST	443	49792	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:50.824276924 CEST	49792	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:50.825201988 CEST	49792	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:50.825216055 CEST	443	49792	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:51.470609903 CEST	443	49792	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:51.470915079 CEST	49792	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:51.470947981 CEST	443	49792	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:51.471303940 CEST	443	49792	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:51.471755028 CEST	49792	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:51.471822023 CEST	443	49792	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:51.471931934 CEST	49792	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:51.516495943 CEST	443	49792	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:51.780369997 CEST	443	49792	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:51.780462980 CEST	443	49792	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:51.780599117 CEST	49792	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:51.781265020 CEST	49792	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:51.781282902 CEST	443	49792	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:52.573801994 CEST	49793	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:22:52.574008942 CEST	49794	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:22:52.578738928 CEST	80	49793	185.53.178.52	192.168.2.5
Sep 4, 2024 14:22:52.578773975 CEST	80	49794	185.53.178.52	192.168.2.5
Sep 4, 2024 14:22:52.578805923 CEST	49793	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:22:52.578843117 CEST	49794	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:22:52.594438076 CEST	49794	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:22:52.599288940 CEST	80	49794	185.53.178.52	192.168.2.5
Sep 4, 2024 14:22:53.188277960 CEST	49795	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.188335896 CEST	443	49795	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.188415051 CEST	49795	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.188673019 CEST	49795	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.188689947 CEST	443	49795	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.190881968 CEST	49796	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.190912008 CEST	443	49796	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.191062927 CEST	49796	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.191368103 CEST	49796	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.191382885 CEST	443	49796	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.192919970 CEST	49797	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.192939043 CEST	443	49797	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.192997932 CEST	49797	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.193424940 CEST	49797	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.193442106 CEST	443	49797	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.483481884 CEST	80	49794	185.53.178.52	192.168.2.5
Sep 4, 2024 14:22:53.483603001 CEST	80	49794	185.53.178.52	192.168.2.5
Sep 4, 2024 14:22:53.483640909 CEST	49794	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:22:53.596817970 CEST	49717	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:53.604947090 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.640978098 CEST	443	49795	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.654602051 CEST	443	49796	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.666368961 CEST	443	49797	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.670842886 CEST	49795	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.670874119 CEST	443	49795	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.671307087 CEST	443	49795	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.686275005 CEST	443	49751	23.1.237.91	192.168.2.5
Sep 4, 2024 14:22:53.686346054 CEST	49751	443	192.168.2.5	23.1.237.91
Sep 4, 2024 14:22:53.693706036 CEST	49796	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.693720102 CEST	443	49796	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.694375038 CEST	443	49796	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.694782972 CEST	49797	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.694807053 CEST	443	49797	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.695465088 CEST	49795	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.695580006 CEST	443	49795	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.695997953 CEST	49796	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.696069956 CEST	443	49797	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.696104050 CEST	443	49796	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.696136951 CEST	49797	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.696181059 CEST	49795	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.696227074 CEST	49795	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.696233034 CEST	443	49795	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.696279049 CEST	49796	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.696279049 CEST	49796	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.696325064 CEST	443	49796	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.696819067 CEST	49797	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.697012901 CEST	443	49797	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.697516918 CEST	49797	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.697523117 CEST	443	49797	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.697532892 CEST	49797	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.744493961 CEST	443	49797	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.751391888 CEST	49797	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.824450970 CEST	443	49796	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.824584007 CEST	443	49796	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.824649096 CEST	49796	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.825162888 CEST	443	49795	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.825268984 CEST	443	49795	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.825321913 CEST	49795	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.854482889 CEST	443	49797	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.854794979 CEST	443	49797	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.854855061 CEST	49797	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.856940031 CEST	49796	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.856961012 CEST	443	49796	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.857376099 CEST	49795	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.857398033 CEST	443	49795	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.858791113 CEST	49797	443	192.168.2.5	162.247.243.29
Sep 4, 2024 14:22:53.858797073 CEST	443	49797	162.247.243.29	192.168.2.5
Sep 4, 2024 14:22:53.873851061 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.873858929 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.873871088 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.873923063 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.873929024 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.873939991 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.873945951 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.873970985 CEST	49717	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:53.873975992 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.873981953 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.873987913 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.874022961 CEST	49717	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:53.874037981 CEST	49717	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:53.874108076 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.879008055 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.879056931 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.879067898 CEST	49717	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:53.899204969 CEST	49798	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:53.899245977 CEST	443	49798	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:53.899386883 CEST	49798	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:53.899923086 CEST	49798	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:53.899939060 CEST	443	49798	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:53.925862074 CEST	49799	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:53.925904989 CEST	443	49799	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:53.925995111 CEST	49799	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:53.927078962 CEST	49799	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:53.927097082 CEST	443	49799	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:53.937573910 CEST	49717	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:53.963948965 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.963957071 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.963968992 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.964021921 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.964026928 CEST	49717	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:53.964029074 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.964035034 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.964042902 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.964087009 CEST	49717	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:53.964103937 CEST	49717	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:53.964976072 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.964982986 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.964993954 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.965054035 CEST	49717	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:53.965432882 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.965439081 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.965451002 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:22:53.965503931 CEST	49717	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:54.010231018 CEST	49800	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:54.015073061 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.015165091 CEST	49800	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:54.017560005 CEST	49717	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:22:54.022692919 CEST	49800	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:54.027513027 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.473905087 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.473922968 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.473933935 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.473997116 CEST	49800	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:54.474210024 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.474258900 CEST	49800	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:54.474268913 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.474287987 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.474342108 CEST	49800	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:54.474368095 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.474381924 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.474419117 CEST	49800	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:54.566526890 CEST	443	49798	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:54.581186056 CEST	49798	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:54.581221104 CEST	443	49798	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:54.581641912 CEST	443	49798	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:54.583529949 CEST	443	49799	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:54.589785099 CEST	49798	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:54.589883089 CEST	443	49798	207.211.211.27	192.168.2.5
Sep 4, 2024 14:22:54.589968920 CEST	49799	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:54.590003967 CEST	443	49799	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:54.590383053 CEST	443	49799	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:54.591176987 CEST	49799	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:54.591248989 CEST	443	49799	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:54.591856956 CEST	49800	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:54.594022989 CEST	49799	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:54.597440958 CEST	49801	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:54.597938061 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.602443933 CEST	80	49801	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.602678061 CEST	49801	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:54.602878094 CEST	49801	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:54.608414888 CEST	80	49801	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.633372068 CEST	49798	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:22:54.636492968 CEST	443	49799	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:54.687834978 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.687856913 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.687870979 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.687884092 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.687897921 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.687908888 CEST	49800	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:54.687952995 CEST	49800	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:54.688209057 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.688229084 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.688241005 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.688268900 CEST	49800	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:54.688297033 CEST	49800	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:54.688364983 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.688371897 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.688407898 CEST	49800	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:54.688946009 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.689059973 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.689254045 CEST	49800	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:54.690041065 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.690052986 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.690059900 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.690067053 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.690119982 CEST	49800	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:54.694983959 CEST	443	49754	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:54.695086002 CEST	443	49754	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:54.695417881 CEST	49754	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:54.793466091 CEST	49754	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:54.793494940 CEST	443	49754	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:54.794044018 CEST	49802	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:54.795278072 CEST	49803	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:54.799010992 CEST	80	49802	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.799083948 CEST	49802	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:54.799516916 CEST	49802	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:54.800102949 CEST	80	49803	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.800188065 CEST	49803	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:54.804327965 CEST	80	49802	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.806199074 CEST	49803	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:54.811069012 CEST	80	49803	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:54.917545080 CEST	443	49799	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:54.917570114 CEST	443	49799	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:54.917639971 CEST	49799	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:54.917666912 CEST	443	49799	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:54.917681932 CEST	443	49799	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:54.917736053 CEST	49799	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:54.931338072 CEST	49799	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:54.931354046 CEST	443	49799	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:55.071247101 CEST	80	49801	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.113684893 CEST	49801	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:55.205265045 CEST	80	49801	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.241416931 CEST	49804	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:55.241449118 CEST	443	49804	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:55.241585970 CEST	49804	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:55.241995096 CEST	49804	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:55.242003918 CEST	443	49804	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:55.262443066 CEST	49801	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:55.263730049 CEST	80	49802	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.263900995 CEST	80	49802	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.263938904 CEST	80	49802	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.263952971 CEST	80	49802	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.263952971 CEST	49802	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:55.263993025 CEST	49802	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:55.264015913 CEST	80	49802	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.264034986 CEST	80	49802	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.264116049 CEST	80	49802	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.264127970 CEST	80	49802	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.264139891 CEST	80	49802	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.264153957 CEST	80	49802	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.264166117 CEST	49802	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:55.264210939 CEST	49802	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:55.268881083 CEST	80	49802	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.268913984 CEST	80	49802	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.268964052 CEST	49802	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:55.291049957 CEST	80	49803	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.291363001 CEST	80	49803	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.291369915 CEST	80	49803	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.291378021 CEST	80	49803	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.291383028 CEST	80	49803	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.291389942 CEST	80	49803	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.291418076 CEST	49803	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:55.291439056 CEST	80	49803	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.291445971 CEST	80	49803	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.291456938 CEST	49803	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:55.291460037 CEST	80	49803	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.291469097 CEST	80	49803	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.291491032 CEST	49803	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:55.291516066 CEST	49803	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:55.296413898 CEST	80	49803	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.296422005 CEST	80	49803	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.296437979 CEST	80	49803	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.296487093 CEST	49803	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:55.350650072 CEST	80	49802	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.350708008 CEST	80	49802	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.350713015 CEST	80	49802	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.350719929 CEST	80	49802	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.350754976 CEST	49802	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:55.350775957 CEST	80	49802	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.350791931 CEST	49802	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:55.384043932 CEST	80	49803	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.384052038 CEST	80	49803	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.384058952 CEST	80	49803	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.384113073 CEST	49803	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:55.384150028 CEST	80	49803	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:55.384200096 CEST	49803	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:55.396962881 CEST	49802	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:55.861835957 CEST	443	49804	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:55.910722971 CEST	49804	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:55.957442045 CEST	49804	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:55.957453966 CEST	443	49804	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:55.958034992 CEST	443	49804	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:55.959258080 CEST	49804	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:55.959335089 CEST	443	49804	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:55.959791899 CEST	49804	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:56.004494905 CEST	443	49804	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:56.026725054 CEST	49805	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:56.026776075 CEST	443	49805	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:56.026981115 CEST	49805	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:56.027877092 CEST	49805	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:56.027904034 CEST	443	49805	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:56.051160097 CEST	49806	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:56.051340103 CEST	49807	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:56.056015968 CEST	80	49806	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.056126118 CEST	49806	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:56.056164980 CEST	80	49807	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.056235075 CEST	49807	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:56.056351900 CEST	49808	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:56.056577921 CEST	49807	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:56.056988955 CEST	49806	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:56.061196089 CEST	80	49808	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.061285019 CEST	49808	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:56.061376095 CEST	80	49807	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.061641932 CEST	49808	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:56.061861038 CEST	80	49806	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.066417933 CEST	80	49808	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.166291952 CEST	443	49804	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:56.166410923 CEST	443	49804	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:56.166692019 CEST	49804	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:56.167642117 CEST	49804	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:56.167665958 CEST	443	49804	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:56.197510004 CEST	49809	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:56.197550058 CEST	443	49809	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:56.197649002 CEST	49809	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:56.198106050 CEST	49809	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:56.198117971 CEST	443	49809	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:56.511106014 CEST	80	49807	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.511137009 CEST	80	49807	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.511148930 CEST	80	49807	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.511161089 CEST	80	49807	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.511173964 CEST	80	49807	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.511185884 CEST	80	49807	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.511198044 CEST	80	49807	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.511194944 CEST	49807	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:56.511214018 CEST	80	49807	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.511243105 CEST	49807	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:56.511254072 CEST	49807	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:56.511306047 CEST	80	49806	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.511323929 CEST	80	49806	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.511336088 CEST	80	49806	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.511348963 CEST	80	49806	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.511360884 CEST	80	49806	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.511369944 CEST	49806	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:56.511373043 CEST	80	49806	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.511384964 CEST	80	49806	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.511398077 CEST	80	49806	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.511400938 CEST	49806	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:56.511410952 CEST	80	49806	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.511420012 CEST	49806	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:56.511424065 CEST	80	49806	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.511455059 CEST	49806	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:56.511478901 CEST	49806	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:56.516294956 CEST	80	49806	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.516449928 CEST	80	49806	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.516491890 CEST	49806	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:56.517153978 CEST	80	49808	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.592772007 CEST	49808	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:56.599781036 CEST	80	49806	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.599800110 CEST	80	49806	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.599811077 CEST	80	49806	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.599832058 CEST	80	49806	208.91.196.253	192.168.2.5
Sep 4, 2024 14:22:56.599858046 CEST	49806	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:56.599905014 CEST	49806	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:22:56.687568903 CEST	443	49805	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:56.730376005 CEST	49805	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:56.730406046 CEST	443	49805	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:56.731029987 CEST	443	49805	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:56.748830080 CEST	49805	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:56.748951912 CEST	443	49805	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:56.749167919 CEST	49805	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:56.796494007 CEST	443	49805	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:56.843533993 CEST	443	49809	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:56.844017982 CEST	49809	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:56.844037056 CEST	443	49809	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:56.844407082 CEST	443	49809	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:56.844858885 CEST	49809	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:56.844924927 CEST	443	49809	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:56.845148087 CEST	49809	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:56.892504930 CEST	443	49809	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:56.996978998 CEST	443	49805	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:56.997005939 CEST	443	49805	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:56.997056961 CEST	49805	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:56.997082949 CEST	443	49805	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:56.997288942 CEST	443	49805	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:56.997328043 CEST	49805	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:57.011151075 CEST	49805	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:57.011174917 CEST	443	49805	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:57.152173996 CEST	443	49809	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:57.152271032 CEST	443	49809	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:57.152318954 CEST	49809	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:57.161582947 CEST	49809	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:22:57.161608934 CEST	443	49809	87.230.98.78	192.168.2.5
Sep 4, 2024 14:22:58.128251076 CEST	80	49793	185.53.178.52	192.168.2.5
Sep 4, 2024 14:22:58.130253077 CEST	49793	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:22:58.726803064 CEST	49793	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:22:58.732446909 CEST	80	49793	185.53.178.52	192.168.2.5
Sep 4, 2024 14:23:00.567101955 CEST	443	49778	195.181.170.18	192.168.2.5
Sep 4, 2024 14:23:00.567184925 CEST	443	49778	195.181.170.18	192.168.2.5
Sep 4, 2024 14:23:00.567390919 CEST	49778	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:23:02.486696959 CEST	49778	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:23:02.486733913 CEST	443	49778	195.181.170.18	192.168.2.5
Sep 4, 2024 14:23:05.049932957 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:05.049932957 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:05.055005074 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.055022001 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.489500046 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.489525080 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.489537001 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.489548922 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.489561081 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.489573956 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.489573956 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:05.489614964 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:05.489634037 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:05.489655018 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.489672899 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.489685059 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.489725113 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:05.489794970 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.489806890 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.489826918 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.489834070 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.489834070 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:05.489871979 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:05.492011070 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.492058039 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.492064953 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:05.492068052 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.492105961 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:05.492114067 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.492125988 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.492139101 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.492171049 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:05.492207050 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.492243052 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:05.492263079 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.492278099 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.492290020 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.492316008 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:05.492533922 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.492553949 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.492564917 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.492569923 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:05.492594957 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:05.582802057 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:05.623384953 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:05.745608091 CEST	49810	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:05.745660067 CEST	443	49810	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:05.745727062 CEST	49810	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:05.747539997 CEST	49811	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:23:05.747585058 CEST	443	49811	195.181.170.18	192.168.2.5
Sep 4, 2024 14:23:05.747649908 CEST	49811	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:23:05.752891064 CEST	49811	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:23:05.752906084 CEST	443	49811	195.181.170.18	192.168.2.5
Sep 4, 2024 14:23:05.753613949 CEST	49810	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:05.753628016 CEST	443	49810	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:05.776218891 CEST	49812	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:05.776256084 CEST	443	49812	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:05.776321888 CEST	49812	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:05.776743889 CEST	49812	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:05.776752949 CEST	443	49812	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:05.777872086 CEST	49813	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:05.782713890 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:05.782793999 CEST	49813	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:05.793209076 CEST	49813	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:05.803275108 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.063287020 CEST	49713	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:06.068196058 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:06.229398966 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.230247021 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.230328083 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.230340004 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.230360985 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.230374098 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.230384111 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.230384111 CEST	49813	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:06.230384111 CEST	49813	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:06.230401993 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.230415106 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.230458975 CEST	49813	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:06.230458975 CEST	49813	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:06.317231894 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.361479998 CEST	49813	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:06.380865097 CEST	49813	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:06.380956888 CEST	443	49810	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:06.381454945 CEST	49810	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:06.381484985 CEST	443	49810	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:06.381884098 CEST	443	49810	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:06.382456064 CEST	49810	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:06.382456064 CEST	49814	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:06.382520914 CEST	443	49810	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:06.385961056 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.387321949 CEST	80	49814	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.387480021 CEST	49814	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:06.388266087 CEST	49814	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:06.393058062 CEST	80	49814	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.393491030 CEST	443	49812	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:06.402539968 CEST	443	49811	195.181.170.18	192.168.2.5
Sep 4, 2024 14:23:06.428527117 CEST	49810	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:06.441221952 CEST	49812	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:06.443130016 CEST	49811	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:23:06.475692987 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.475845098 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.475907087 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.475914001 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.475943089 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.475946903 CEST	49813	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:06.475950956 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.475991964 CEST	49813	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:06.476207018 CEST	49813	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:06.476526976 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.476596117 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.476758003 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.476763964 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.476775885 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.476782084 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.476852894 CEST	49813	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:06.476852894 CEST	49813	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:06.477345943 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.477421999 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.477667093 CEST	49813	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:06.485711098 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.485897064 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.486218929 CEST	49813	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:06.487811089 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.487818003 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.487950087 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.488006115 CEST	49813	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:06.514122963 CEST	49811	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:23:06.514141083 CEST	443	49811	195.181.170.18	192.168.2.5
Sep 4, 2024 14:23:06.514386892 CEST	49812	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:06.514410973 CEST	443	49812	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:06.514813900 CEST	443	49811	195.181.170.18	192.168.2.5
Sep 4, 2024 14:23:06.514971018 CEST	443	49812	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:06.517463923 CEST	49812	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:06.517580986 CEST	443	49812	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:06.518130064 CEST	49811	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:23:06.518249989 CEST	443	49811	195.181.170.18	192.168.2.5
Sep 4, 2024 14:23:06.518452883 CEST	49812	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:06.528547049 CEST	443	49812	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:06.530263901 CEST	49813	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:06.560389042 CEST	49811	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:23:06.577929020 CEST	49815	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:06.582278967 CEST	49816	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:06.582845926 CEST	80	49815	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.582979918 CEST	49815	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:06.586361885 CEST	49815	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:06.587135077 CEST	80	49816	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.587284088 CEST	49816	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:06.587425947 CEST	49816	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:06.591203928 CEST	80	49815	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.592191935 CEST	80	49816	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.702311993 CEST	49718	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:06.707252026 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.795850039 CEST	443	49812	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:06.795881987 CEST	443	49812	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:06.795967102 CEST	443	49812	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:06.795999050 CEST	49812	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:06.796396017 CEST	49812	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:06.798278093 CEST	49812	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:06.798301935 CEST	443	49812	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:06.854208946 CEST	49817	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:06.854253054 CEST	443	49817	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:06.854306936 CEST	80	49814	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:06.854479074 CEST	49817	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:06.857254028 CEST	49817	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:06.857274055 CEST	443	49817	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:06.901941061 CEST	49814	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:06.986988068 CEST	80	49814	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.032017946 CEST	49814	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:07.033056974 CEST	80	49815	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.033154964 CEST	80	49815	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.033176899 CEST	80	49815	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.033186913 CEST	80	49815	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.033195972 CEST	80	49815	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.033206940 CEST	80	49815	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.033225060 CEST	80	49815	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.033240080 CEST	49815	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:07.033269882 CEST	49815	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:07.033302069 CEST	80	49815	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.033353090 CEST	80	49815	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.033431053 CEST	80	49815	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.033452034 CEST	49815	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:07.038100958 CEST	80	49815	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.038132906 CEST	80	49815	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.038140059 CEST	80	49815	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.038153887 CEST	80	49815	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.038167000 CEST	49815	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:07.038243055 CEST	49815	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:07.044773102 CEST	80	49816	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.044856071 CEST	80	49816	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.044886112 CEST	80	49816	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.044892073 CEST	80	49816	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.045001984 CEST	80	49816	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.045008898 CEST	80	49816	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.045022011 CEST	80	49816	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.045027971 CEST	49816	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:07.045049906 CEST	80	49816	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.045056105 CEST	80	49816	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.045084953 CEST	49816	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:07.045133114 CEST	49816	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:07.047862053 CEST	80	49816	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.048362970 CEST	49816	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:07.049992085 CEST	80	49816	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.050003052 CEST	80	49816	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.050018072 CEST	80	49816	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.050024033 CEST	80	49816	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.050110102 CEST	49816	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:07.050110102 CEST	49816	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:07.113158941 CEST	49720	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:07.118407011 CEST	80	49720	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.119924068 CEST	80	49815	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.120007038 CEST	80	49815	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.120012999 CEST	80	49815	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.120018959 CEST	80	49815	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.120137930 CEST	80	49815	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.120171070 CEST	49815	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:07.131756067 CEST	80	49816	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.131763935 CEST	80	49816	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.131778002 CEST	80	49816	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.131784916 CEST	80	49816	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.132364035 CEST	49816	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:07.160280943 CEST	49815	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:07.462179899 CEST	49721	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:07.467035055 CEST	80	49721	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.494147062 CEST	49722	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:07.498963118 CEST	80	49722	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:07.502470016 CEST	443	49817	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:07.503169060 CEST	49817	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:07.503186941 CEST	443	49817	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:07.503572941 CEST	443	49817	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:07.504359007 CEST	49817	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:07.504427910 CEST	443	49817	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:07.504781961 CEST	49817	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:07.552495003 CEST	443	49817	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:07.813920975 CEST	443	49817	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:07.813942909 CEST	443	49817	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:07.813981056 CEST	443	49817	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:07.814013004 CEST	49817	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:07.814029932 CEST	443	49817	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:07.814076900 CEST	49817	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:07.814110041 CEST	443	49817	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:07.814165115 CEST	49817	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:07.815443039 CEST	49817	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:07.815459967 CEST	443	49817	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:07.834861040 CEST	49818	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:07.834886074 CEST	443	49818	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:07.834959030 CEST	49818	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:07.835549116 CEST	49818	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:07.835565090 CEST	443	49818	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:08.471389055 CEST	443	49818	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:08.476465940 CEST	80	49794	185.53.178.52	192.168.2.5
Sep 4, 2024 14:23:08.476588964 CEST	49794	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:23:08.507344007 CEST	49818	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:08.507363081 CEST	443	49818	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:08.507823944 CEST	443	49818	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:08.508881092 CEST	49818	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:08.508961916 CEST	443	49818	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:08.509411097 CEST	49818	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:08.512101889 CEST	49794	80	192.168.2.5	185.53.178.52
Sep 4, 2024 14:23:08.521059036 CEST	80	49794	185.53.178.52	192.168.2.5
Sep 4, 2024 14:23:08.552505016 CEST	443	49818	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:08.672236919 CEST	49729	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:08.678384066 CEST	80	49729	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:08.686019897 CEST	49730	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:08.691335917 CEST	80	49730	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:08.780018091 CEST	49732	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:08.783020973 CEST	443	49818	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:08.783109903 CEST	443	49818	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:08.783166885 CEST	49818	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:08.784310102 CEST	49818	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:08.784331083 CEST	443	49818	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:08.784900904 CEST	80	49732	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:08.797095060 CEST	49819	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:08.797161102 CEST	443	49819	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:08.797229052 CEST	49819	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:08.797384024 CEST	49733	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:08.797568083 CEST	49819	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:08.797585964 CEST	443	49819	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:08.802305937 CEST	80	49733	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:09.087343931 CEST	49734	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:09.092248917 CEST	80	49734	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:09.173883915 CEST	49820	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:23:09.173949003 CEST	443	49820	13.85.23.86	192.168.2.5
Sep 4, 2024 14:23:09.174016953 CEST	49820	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:23:09.175082922 CEST	49820	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:23:09.175090075 CEST	443	49820	13.85.23.86	192.168.2.5
Sep 4, 2024 14:23:09.433432102 CEST	443	49819	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:09.433772087 CEST	49819	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:09.433796883 CEST	443	49819	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:09.434155941 CEST	443	49819	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:09.434489012 CEST	49819	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:09.434564114 CEST	443	49819	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:09.434659958 CEST	49819	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:09.472100019 CEST	443	49798	207.211.211.27	192.168.2.5
Sep 4, 2024 14:23:09.472203016 CEST	443	49798	207.211.211.27	192.168.2.5
Sep 4, 2024 14:23:09.472310066 CEST	49798	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:23:09.480509043 CEST	443	49819	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:09.740360975 CEST	443	49819	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:09.740448952 CEST	443	49819	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:09.740518093 CEST	49819	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:09.750173092 CEST	49819	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:09.750200033 CEST	443	49819	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:09.863431931 CEST	443	49820	13.85.23.86	192.168.2.5
Sep 4, 2024 14:23:09.863544941 CEST	49820	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:23:09.980007887 CEST	49820	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:23:09.980041981 CEST	443	49820	13.85.23.86	192.168.2.5
Sep 4, 2024 14:23:09.980458021 CEST	443	49820	13.85.23.86	192.168.2.5
Sep 4, 2024 14:23:10.032402992 CEST	49820	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:23:10.082849026 CEST	49820	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:23:10.128495932 CEST	443	49820	13.85.23.86	192.168.2.5
Sep 4, 2024 14:23:10.300687075 CEST	49798	443	192.168.2.5	207.211.211.27
Sep 4, 2024 14:23:10.300719976 CEST	443	49798	207.211.211.27	192.168.2.5
Sep 4, 2024 14:23:10.309916019 CEST	443	49820	13.85.23.86	192.168.2.5
Sep 4, 2024 14:23:10.309937954 CEST	443	49820	13.85.23.86	192.168.2.5
Sep 4, 2024 14:23:10.309947014 CEST	443	49820	13.85.23.86	192.168.2.5
Sep 4, 2024 14:23:10.309967995 CEST	443	49820	13.85.23.86	192.168.2.5
Sep 4, 2024 14:23:10.309974909 CEST	443	49820	13.85.23.86	192.168.2.5
Sep 4, 2024 14:23:10.309978962 CEST	443	49820	13.85.23.86	192.168.2.5
Sep 4, 2024 14:23:10.309986115 CEST	49820	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:23:10.310003996 CEST	443	49820	13.85.23.86	192.168.2.5
Sep 4, 2024 14:23:10.310040951 CEST	49820	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:23:10.310065985 CEST	49820	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:23:10.310863972 CEST	443	49820	13.85.23.86	192.168.2.5
Sep 4, 2024 14:23:10.310911894 CEST	443	49820	13.85.23.86	192.168.2.5
Sep 4, 2024 14:23:10.310925007 CEST	49820	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:23:10.310931921 CEST	443	49820	13.85.23.86	192.168.2.5
Sep 4, 2024 14:23:10.310962915 CEST	49820	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:23:10.311374903 CEST	443	49820	13.85.23.86	192.168.2.5
Sep 4, 2024 14:23:10.311423063 CEST	49820	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:23:10.431596994 CEST	49820	443	192.168.2.5	13.85.23.86
Sep 4, 2024 14:23:10.431632996 CEST	443	49820	13.85.23.86	192.168.2.5
Sep 4, 2024 14:23:11.345765114 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:11.345766068 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:11.350744963 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.350769997 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.689281940 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.689295053 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.689306974 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.689320087 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.689343929 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:11.689397097 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:11.690221071 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.690584898 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.690594912 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.690613985 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.690623999 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:11.690627098 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.690655947 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:11.690723896 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.690767050 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:11.690772057 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.690789938 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.690802097 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.690812111 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.690838099 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:11.690869093 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:11.691768885 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.691781044 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.691792011 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.691803932 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.691839933 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:11.691843987 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.691854954 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.691876888 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:11.691899061 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:11.691945076 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.692032099 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.692043066 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.692059994 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.692071915 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.692086935 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:11.692107916 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.692121029 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.692133904 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:11.692153931 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:11.694380045 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.694394112 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.694406033 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.694453001 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:11.694485903 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:11.740165949 CEST	49821	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:11.740221024 CEST	443	49821	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:11.740314007 CEST	49821	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:11.740654945 CEST	49821	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:11.740674973 CEST	443	49821	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:11.779620886 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:11.834644079 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:12.356933117 CEST	443	49821	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:12.407161951 CEST	49821	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:12.628626108 CEST	49821	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:12.628659964 CEST	443	49821	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:12.629261971 CEST	443	49821	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:12.631056070 CEST	49821	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:12.631128073 CEST	443	49821	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:12.631481886 CEST	49821	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:12.631510019 CEST	443	49821	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:12.898943901 CEST	443	49821	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:12.898969889 CEST	443	49821	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:12.899053097 CEST	443	49821	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:12.899048090 CEST	49821	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:12.899096966 CEST	49821	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:12.900366068 CEST	49821	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:12.900393009 CEST	443	49821	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:12.909533978 CEST	49822	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:12.909567118 CEST	443	49822	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:12.909645081 CEST	49822	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:12.909970999 CEST	49822	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:12.909985065 CEST	443	49822	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:12.954380989 CEST	49823	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:12.954426050 CEST	443	49823	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:12.954560041 CEST	49823	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:12.954781055 CEST	49823	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:12.954790115 CEST	443	49823	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:13.523878098 CEST	443	49822	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:13.524226904 CEST	49822	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:13.524259090 CEST	443	49822	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:13.524646997 CEST	443	49822	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:13.524980068 CEST	49822	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:13.525042057 CEST	443	49822	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:13.525134087 CEST	49822	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:13.565980911 CEST	49822	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:13.566005945 CEST	443	49822	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:13.601713896 CEST	443	49823	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:13.602005959 CEST	49823	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:13.602021933 CEST	443	49823	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:13.602390051 CEST	443	49823	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:13.602797985 CEST	49823	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:13.602900982 CEST	443	49823	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:13.602976084 CEST	49823	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:13.648498058 CEST	443	49823	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:13.829191923 CEST	443	49822	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:13.829216957 CEST	443	49822	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:13.829276085 CEST	443	49822	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:13.829278946 CEST	49822	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:13.829307079 CEST	443	49822	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:13.829327106 CEST	49822	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:13.829404116 CEST	443	49822	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:13.829498053 CEST	49822	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:13.830399990 CEST	49822	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:13.830415010 CEST	443	49822	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:13.911626101 CEST	443	49823	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:13.911716938 CEST	443	49823	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:13.911916018 CEST	49823	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:13.912962914 CEST	49823	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:13.912985086 CEST	443	49823	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:13.954617977 CEST	49824	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:13.954663038 CEST	443	49824	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:13.954864025 CEST	49824	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:13.955322027 CEST	49824	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:13.955334902 CEST	443	49824	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:14.558514118 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:14.558514118 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:14.586468935 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:14.604876995 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.604892015 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.604901075 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.605107069 CEST	443	49824	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:14.606302977 CEST	49824	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:14.606328011 CEST	443	49824	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:14.606707096 CEST	443	49824	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:14.618129969 CEST	49824	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:14.618129969 CEST	49824	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:14.618244886 CEST	443	49824	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:14.670295000 CEST	49824	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:14.913857937 CEST	443	49824	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:14.913966894 CEST	443	49824	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:14.918296099 CEST	49824	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:14.949316978 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.949350119 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.949361086 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.949382067 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.949393034 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.949404001 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.949417114 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.949443102 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:14.949696064 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.949726105 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:14.949743986 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.949755907 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.949773073 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:14.950280905 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:14.951745987 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.951757908 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.951769114 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.951776028 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.951790094 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.951801062 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.951865911 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:14.951865911 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:14.951956987 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.952058077 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.952068090 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.952079058 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.952090979 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.952105045 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.952132940 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:14.953680992 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:14.954252005 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.954286098 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.954298019 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.954420090 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.954449892 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:14.954472065 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.954485893 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:14.954530954 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:14.954530954 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:15.039740086 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:15.086278915 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:15.191750050 CEST	49824	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:15.191771030 CEST	443	49824	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:15.256417990 CEST	49825	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:15.256464005 CEST	443	49825	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:15.256560087 CEST	49825	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:15.258438110 CEST	49825	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:15.258451939 CEST	443	49825	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:15.887998104 CEST	443	49825	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:15.888350010 CEST	49825	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:15.888370037 CEST	443	49825	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:15.888720989 CEST	443	49825	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:15.890022993 CEST	49825	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:15.890079975 CEST	443	49825	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:15.892072916 CEST	49825	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:15.892097950 CEST	443	49825	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:16.085711956 CEST	443	49825	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:16.085740089 CEST	443	49825	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:16.085789919 CEST	49825	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:16.085812092 CEST	443	49825	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:16.085829973 CEST	443	49825	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:16.085876942 CEST	49825	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:16.087729931 CEST	49825	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:16.087744951 CEST	443	49825	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:16.098273993 CEST	49827	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:16.098304987 CEST	443	49827	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:16.098370075 CEST	49827	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:16.098908901 CEST	49827	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:16.098922968 CEST	443	49827	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:16.133402109 CEST	49828	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:16.133436918 CEST	443	49828	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:16.133497953 CEST	49828	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:16.133742094 CEST	49828	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:16.133758068 CEST	443	49828	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:16.726557016 CEST	443	49827	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:16.726908922 CEST	49827	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:16.726927996 CEST	443	49827	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:16.727320910 CEST	443	49827	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:16.727708101 CEST	49827	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:16.727780104 CEST	443	49827	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:16.727905035 CEST	49827	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:16.759742022 CEST	443	49828	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:16.760054111 CEST	49828	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:16.760081053 CEST	443	49828	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:16.760550022 CEST	443	49828	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:16.761050940 CEST	49828	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:16.761051893 CEST	49828	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:16.761080027 CEST	443	49828	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:16.761135101 CEST	443	49828	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:16.772504091 CEST	443	49827	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:16.800394058 CEST	49828	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:17.034718990 CEST	443	49827	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:17.034750938 CEST	443	49827	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:17.034878969 CEST	443	49827	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:17.034926891 CEST	49827	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:17.036612988 CEST	49827	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:17.043764114 CEST	49827	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:17.043795109 CEST	443	49827	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:17.069683075 CEST	443	49828	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:17.069787979 CEST	443	49828	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:17.070184946 CEST	49828	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:17.070282936 CEST	49828	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:17.070297956 CEST	443	49828	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:17.078305006 CEST	49829	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:17.078337908 CEST	443	49829	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:17.081579924 CEST	49829	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:17.081887007 CEST	49829	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:17.081902027 CEST	443	49829	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:17.698493958 CEST	443	49829	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:17.750255108 CEST	49829	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:17.788994074 CEST	49829	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:17.789005995 CEST	443	49829	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:17.789565086 CEST	443	49829	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:17.794852018 CEST	49829	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:17.794944048 CEST	443	49829	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:17.804399967 CEST	49829	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:17.848490000 CEST	443	49829	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:18.005032063 CEST	443	49829	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:18.005131006 CEST	443	49829	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:18.005179882 CEST	49829	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:18.006659031 CEST	49829	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:18.006678104 CEST	443	49829	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:20.938556910 CEST	49830	443	192.168.2.5	216.58.206.68
Sep 4, 2024 14:23:20.938606977 CEST	443	49830	216.58.206.68	192.168.2.5
Sep 4, 2024 14:23:20.938688040 CEST	49830	443	192.168.2.5	216.58.206.68
Sep 4, 2024 14:23:20.939265966 CEST	49830	443	192.168.2.5	216.58.206.68
Sep 4, 2024 14:23:20.939280033 CEST	443	49830	216.58.206.68	192.168.2.5
Sep 4, 2024 14:23:21.423578024 CEST	443	49811	195.181.170.18	192.168.2.5
Sep 4, 2024 14:23:21.423671961 CEST	443	49811	195.181.170.18	192.168.2.5
Sep 4, 2024 14:23:21.423747063 CEST	49811	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:23:21.557418108 CEST	443	49810	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:21.557512999 CEST	443	49810	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:21.557570934 CEST	49810	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:21.583986044 CEST	443	49830	216.58.206.68	192.168.2.5
Sep 4, 2024 14:23:21.584897995 CEST	49830	443	192.168.2.5	216.58.206.68
Sep 4, 2024 14:23:21.584924936 CEST	443	49830	216.58.206.68	192.168.2.5
Sep 4, 2024 14:23:21.585309029 CEST	443	49830	216.58.206.68	192.168.2.5
Sep 4, 2024 14:23:21.585791111 CEST	49830	443	192.168.2.5	216.58.206.68
Sep 4, 2024 14:23:21.585863113 CEST	443	49830	216.58.206.68	192.168.2.5
Sep 4, 2024 14:23:21.637358904 CEST	49830	443	192.168.2.5	216.58.206.68
Sep 4, 2024 14:23:21.824940920 CEST	49715	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:21.824974060 CEST	443	49715	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:22.489515066 CEST	49811	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:23:22.489540100 CEST	443	49811	195.181.170.18	192.168.2.5
Sep 4, 2024 14:23:22.489718914 CEST	49715	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:22.489741087 CEST	443	49715	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:22.489763021 CEST	49715	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:22.489778042 CEST	49715	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:22.490000963 CEST	49810	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:22.490031004 CEST	443	49810	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:23.952146053 CEST	49752	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:23.957144022 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:24.030297995 CEST	49753	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:24.035227060 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:24.536745071 CEST	49758	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:24.541815996 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:24.702189922 CEST	49759	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:24.707108021 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:25.029557943 CEST	49761	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:25.034538031 CEST	80	49761	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:25.046032906 CEST	49765	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:25.050971985 CEST	80	49765	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:25.108473063 CEST	49764	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:25.113492966 CEST	80	49764	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:25.311499119 CEST	49767	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:25.316453934 CEST	80	49767	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:25.343230963 CEST	49766	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:25.348253965 CEST	80	49766	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:25.452605009 CEST	49762	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:25.457626104 CEST	80	49762	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:25.561986923 CEST	49763	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:25.566843033 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:25.749483109 CEST	49769	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:25.749528885 CEST	49770	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:25.754314899 CEST	80	49769	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:25.754328012 CEST	80	49770	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:25.796420097 CEST	49771	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:25.801301956 CEST	80	49771	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:26.565207005 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:26.570058107 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.872915983 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.872935057 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.872946024 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.872956991 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.872971058 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.872988939 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.873003006 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.873014927 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.873027086 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.873037100 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.873049974 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.873049974 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:26.873064041 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.873080015 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.873106956 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:26.875469923 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.875546932 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:26.875597000 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.875608921 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.875619888 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.875633955 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.875653982 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:26.875674963 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:26.875740051 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.875751972 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.875762939 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.875787020 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:26.875828028 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.875839949 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.875852108 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.875870943 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.875880003 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:26.875885963 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:26.875906944 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:26.875946999 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:26.915196896 CEST	49831	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:26.915246010 CEST	443	49831	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:26.915339947 CEST	49831	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:26.915741920 CEST	49831	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:26.915761948 CEST	443	49831	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:26.916343927 CEST	49832	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:23:26.916402102 CEST	443	49832	195.181.170.18	192.168.2.5
Sep 4, 2024 14:23:26.916522026 CEST	49832	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:23:26.917016029 CEST	49832	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:23:26.917031050 CEST	443	49832	195.181.170.18	192.168.2.5
Sep 4, 2024 14:23:26.941849947 CEST	49833	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:26.941891909 CEST	443	49833	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:26.941966057 CEST	49833	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:26.942996025 CEST	49833	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:26.943012953 CEST	443	49833	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:26.963181019 CEST	80	49757	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:27.009195089 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:27.579559088 CEST	443	49832	195.181.170.18	192.168.2.5
Sep 4, 2024 14:23:27.583616018 CEST	49832	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:23:27.583652973 CEST	443	49832	195.181.170.18	192.168.2.5
Sep 4, 2024 14:23:27.584233999 CEST	443	49832	195.181.170.18	192.168.2.5
Sep 4, 2024 14:23:27.585474014 CEST	49832	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:23:27.585570097 CEST	443	49832	195.181.170.18	192.168.2.5
Sep 4, 2024 14:23:27.640580893 CEST	49832	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:23:27.813354015 CEST	443	49831	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:27.813862085 CEST	49831	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:27.813889980 CEST	443	49831	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:27.814255953 CEST	443	49831	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:27.814637899 CEST	49831	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:27.814703941 CEST	443	49831	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:27.820653915 CEST	443	49833	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:27.820873022 CEST	49833	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:27.820890903 CEST	443	49833	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:27.821244001 CEST	443	49833	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:27.821535110 CEST	49833	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:27.821604967 CEST	443	49833	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:27.821909904 CEST	49833	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:27.821926117 CEST	443	49833	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:27.855000019 CEST	49831	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:28.137268066 CEST	443	49833	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:28.137293100 CEST	443	49833	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:28.137358904 CEST	49833	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:28.137378931 CEST	443	49833	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:28.137409925 CEST	443	49833	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:28.137506008 CEST	49833	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:28.140305042 CEST	49833	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:28.140325069 CEST	443	49833	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:28.233016968 CEST	49834	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:28.233057976 CEST	443	49834	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:28.233156919 CEST	49834	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:28.233503103 CEST	49834	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:28.233515978 CEST	443	49834	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:28.236301899 CEST	49835	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:28.236341000 CEST	443	49835	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:28.236455917 CEST	49835	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:28.236618042 CEST	49835	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:28.236638069 CEST	443	49835	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:28.863078117 CEST	443	49834	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:28.863620043 CEST	49834	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:28.863632917 CEST	443	49834	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:28.863954067 CEST	443	49834	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:28.864501953 CEST	49834	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:28.864550114 CEST	443	49834	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:28.864876032 CEST	49834	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:28.885416031 CEST	443	49835	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:28.885950089 CEST	49835	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:28.885981083 CEST	443	49835	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:28.886358976 CEST	443	49835	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:28.900019884 CEST	49835	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:28.900113106 CEST	443	49835	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:28.900266886 CEST	49835	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:28.912491083 CEST	443	49834	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:28.944490910 CEST	443	49835	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:29.172751904 CEST	443	49834	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:29.172842979 CEST	443	49834	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:29.172890902 CEST	49834	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:29.177005053 CEST	49834	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:29.177028894 CEST	443	49834	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:29.202461958 CEST	443	49835	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:29.202497959 CEST	443	49835	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:29.202560902 CEST	49835	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:29.202594042 CEST	443	49835	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:29.202655077 CEST	443	49835	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:29.202709913 CEST	49835	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:29.203227997 CEST	49835	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:29.203243017 CEST	443	49835	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:29.264761925 CEST	49836	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:29.264811039 CEST	443	49836	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:29.265117884 CEST	49836	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:29.265391111 CEST	49836	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:29.265403032 CEST	443	49836	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:29.950571060 CEST	443	49836	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:30.003319025 CEST	49836	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:30.081285000 CEST	49836	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:30.081294060 CEST	443	49836	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:30.081842899 CEST	443	49836	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:30.082503080 CEST	49836	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:30.082570076 CEST	443	49836	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:30.083000898 CEST	49836	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:30.128496885 CEST	443	49836	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:30.296111107 CEST	443	49836	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:30.296209097 CEST	443	49836	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:30.296266079 CEST	49836	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:30.298777103 CEST	49836	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:30.298795938 CEST	443	49836	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:31.516686916 CEST	443	49830	216.58.206.68	192.168.2.5
Sep 4, 2024 14:23:31.516753912 CEST	443	49830	216.58.206.68	192.168.2.5
Sep 4, 2024 14:23:31.516838074 CEST	49830	443	192.168.2.5	216.58.206.68
Sep 4, 2024 14:23:32.515203953 CEST	49830	443	192.168.2.5	216.58.206.68
Sep 4, 2024 14:23:32.515242100 CEST	443	49830	216.58.206.68	192.168.2.5
Sep 4, 2024 14:23:38.969372988 CEST	49717	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:38.974284887 CEST	80	49717	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:39.701961040 CEST	49800	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:39.706898928 CEST	80	49800	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:40.220643997 CEST	49801	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:40.225610971 CEST	80	49801	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:40.355487108 CEST	49802	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:40.360703945 CEST	80	49802	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:40.390255928 CEST	49803	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:40.395157099 CEST	80	49803	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:41.515081882 CEST	49807	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:41.519956112 CEST	80	49807	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:41.530663967 CEST	49808	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:41.535587072 CEST	80	49808	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:41.608962059 CEST	49806	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:41.615652084 CEST	80	49806	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:42.485589027 CEST	443	49832	195.181.170.18	192.168.2.5
Sep 4, 2024 14:23:42.485687017 CEST	443	49832	195.181.170.18	192.168.2.5
Sep 4, 2024 14:23:42.485909939 CEST	49832	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:23:42.488360882 CEST	49832	443	192.168.2.5	195.181.170.18
Sep 4, 2024 14:23:42.488382101 CEST	443	49832	195.181.170.18	192.168.2.5
Sep 4, 2024 14:23:42.812187910 CEST	443	49831	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:42.812283039 CEST	443	49831	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:42.813900948 CEST	49831	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:44.488013983 CEST	49831	443	192.168.2.5	87.230.98.78
Sep 4, 2024 14:23:44.488054991 CEST	443	49831	87.230.98.78	192.168.2.5
Sep 4, 2024 14:23:51.081223011 CEST	49713	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:51.086314917 CEST	80	49713	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:51.500143051 CEST	49813	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:51.505103111 CEST	80	49813	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:51.717967987 CEST	49718	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:51.722949982 CEST	80	49718	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:52.000514984 CEST	49814	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:52.005451918 CEST	80	49814	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:52.125264883 CEST	49720	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:52.125287056 CEST	49815	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:52.130152941 CEST	80	49720	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:52.130170107 CEST	80	49815	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:52.141609907 CEST	49816	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:52.146514893 CEST	80	49816	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:52.468724012 CEST	49721	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:52.474142075 CEST	80	49721	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:52.500178099 CEST	49722	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:52.504966974 CEST	80	49722	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:53.688186884 CEST	49729	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:53.693279982 CEST	80	49729	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:53.703424931 CEST	49730	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:23:53.708220959 CEST	80	49730	208.91.196.46	192.168.2.5
Sep 4, 2024 14:23:53.796674967 CEST	49732	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:53.801539898 CEST	80	49732	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:53.811892033 CEST	49733	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:53.816683054 CEST	80	49733	208.91.196.253	192.168.2.5
Sep 4, 2024 14:23:54.093265057 CEST	49734	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:23:54.268002987 CEST	80	49734	208.91.196.253	192.168.2.5
Sep 4, 2024 14:24:08.961759090 CEST	49752	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:24:08.966757059 CEST	80	49752	208.91.196.46	192.168.2.5
Sep 4, 2024 14:24:09.043589115 CEST	49753	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:24:09.048687935 CEST	80	49753	208.91.196.46	192.168.2.5
Sep 4, 2024 14:24:09.546879053 CEST	49758	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:24:09.551733971 CEST	80	49758	208.91.196.253	192.168.2.5
Sep 4, 2024 14:24:09.710077047 CEST	49759	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:24:09.715158939 CEST	80	49759	208.91.196.253	192.168.2.5
Sep 4, 2024 14:24:10.038196087 CEST	49761	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:24:10.043237925 CEST	80	49761	208.91.196.253	192.168.2.5
Sep 4, 2024 14:24:10.050597906 CEST	49765	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:24:10.055525064 CEST	80	49765	208.91.196.253	192.168.2.5
Sep 4, 2024 14:24:10.125277996 CEST	49764	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:24:10.130177975 CEST	80	49764	208.91.196.253	192.168.2.5
Sep 4, 2024 14:24:10.328332901 CEST	49767	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:24:10.333295107 CEST	80	49767	208.91.196.253	192.168.2.5
Sep 4, 2024 14:24:10.358927011 CEST	49766	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:24:10.363899946 CEST	80	49766	208.91.196.253	192.168.2.5
Sep 4, 2024 14:24:10.468240023 CEST	49762	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:24:10.473161936 CEST	80	49762	208.91.196.253	192.168.2.5
Sep 4, 2024 14:24:10.578399897 CEST	49763	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:24:10.583420992 CEST	80	49763	208.91.196.253	192.168.2.5
Sep 4, 2024 14:24:10.761219025 CEST	49769	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:24:10.761219025 CEST	49770	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:24:10.766208887 CEST	80	49769	208.91.196.253	192.168.2.5
Sep 4, 2024 14:24:10.766226053 CEST	80	49770	208.91.196.253	192.168.2.5
Sep 4, 2024 14:24:10.811930895 CEST	49771	80	192.168.2.5	208.91.196.253
Sep 4, 2024 14:24:10.816816092 CEST	80	49771	208.91.196.253	192.168.2.5
Sep 4, 2024 14:24:11.969741106 CEST	49757	80	192.168.2.5	208.91.196.46
Sep 4, 2024 14:24:11.974749088 CEST	80	49757	208.91.196.46	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 4, 2024 14:22:16.405448914 CEST	53	58117	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:16.436893940 CEST	53	63084	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:17.517659903 CEST	53	59126	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:18.053906918 CEST	59062	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:18.054049015 CEST	61634	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:18.104727030 CEST	53	61634	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:18.105123997 CEST	53	59062	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:19.195904016 CEST	65105	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:19.196492910 CEST	51826	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:19.205625057 CEST	53	65105	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:19.286473989 CEST	53	51826	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:20.892235041 CEST	52447	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:20.892369032 CEST	50531	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:20.899305105 CEST	53	52447	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:20.900002956 CEST	53	50531	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:20.918286085 CEST	63974	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:20.919156075 CEST	55409	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:20.920727968 CEST	53959	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:20.921217918 CEST	61199	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:20.926224947 CEST	53	63974	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:20.927203894 CEST	53	55409	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:20.929255962 CEST	53	61199	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:20.929754972 CEST	53	53959	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:20.965662003 CEST	50171	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:20.966793060 CEST	63395	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:20.979732037 CEST	53	63395	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:21.004666090 CEST	53	50171	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:21.457524061 CEST	65386	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:21.458187103 CEST	61587	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:21.464684963 CEST	53	65386	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:21.465543985 CEST	53	61587	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:23.103269100 CEST	65206	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:23.104307890 CEST	63932	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:23.192759991 CEST	53	65206	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:23.193763971 CEST	53	63932	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:23.194025040 CEST	62557	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:23.194632053 CEST	63447	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:23.207010031 CEST	53	63447	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:23.230321884 CEST	53	62557	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:23.632687092 CEST	54265	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:23.632996082 CEST	61888	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:23.640948057 CEST	53	61888	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:23.641860962 CEST	53	54265	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:23.646249056 CEST	59259	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:23.646914959 CEST	65140	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:23.652940035 CEST	53	59259	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:23.654403925 CEST	53	65140	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:26.851501942 CEST	53708	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:26.851685047 CEST	59724	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:26.879574060 CEST	53	59724	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:26.895139933 CEST	53	53708	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:34.871457100 CEST	53	65294	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:37.862644911 CEST	57884	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:37.863109112 CEST	58211	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:37.870620012 CEST	53	58211	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:37.954890013 CEST	53	57884	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:38.810264111 CEST	58349	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:38.810635090 CEST	64407	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:38.811213017 CEST	58564	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:38.811671972 CEST	62274	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:38.817403078 CEST	53	64407	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:38.818080902 CEST	53	58349	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:38.818947077 CEST	53	62274	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:38.819437981 CEST	53	58564	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:38.896816015 CEST	54234	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:38.897147894 CEST	51580	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:38.903793097 CEST	53	54234	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:38.904030085 CEST	53	51580	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:38.921286106 CEST	62200	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:38.921454906 CEST	54120	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:38.936533928 CEST	53	62200	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:38.952644110 CEST	64534	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:38.952991009 CEST	52382	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:38.958679914 CEST	53	54120	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:38.972393990 CEST	53	64534	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:38.973484993 CEST	53	52382	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:39.417675018 CEST	60748	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:39.417828083 CEST	51919	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:39.430772066 CEST	53	51919	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:39.437585115 CEST	53	60748	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:40.167231083 CEST	50462	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:40.167521954 CEST	52257	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:40.202137947 CEST	53	52257	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:40.203546047 CEST	53	50462	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:46.869667053 CEST	49270	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:46.870080948 CEST	51507	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:46.877743006 CEST	53	49270	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:46.877827883 CEST	53	51507	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:47.939639091 CEST	54815	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:47.940018892 CEST	51996	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:47.947424889 CEST	53	54815	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:47.947792053 CEST	53	51996	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:47.951436996 CEST	62875	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:47.951613903 CEST	52752	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:47.958165884 CEST	53	62875	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:47.959398031 CEST	53	52752	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:48.569463968 CEST	64233	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:48.569610119 CEST	50671	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:48.576458931 CEST	53	64233	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:48.577919960 CEST	53	50671	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:53.870388985 CEST	53	58411	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:53.989871979 CEST	58689	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:53.990330935 CEST	55087	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:53.998528957 CEST	53	58689	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:54.009445906 CEST	53	55087	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:56.017438889 CEST	62587	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:56.017813921 CEST	59126	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:22:56.025290012 CEST	53	62587	1.1.1.1	192.168.2.5
Sep 4, 2024 14:22:56.055583000 CEST	53	59126	1.1.1.1	192.168.2.5
Sep 4, 2024 14:23:05.757606030 CEST	50678	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:23:05.758276939 CEST	58839	53	192.168.2.5	1.1.1.1
Sep 4, 2024 14:23:05.766622066 CEST	53	58839	1.1.1.1	192.168.2.5
Sep 4, 2024 14:23:05.777259111 CEST	53	50678	1.1.1.1	192.168.2.5
Sep 4, 2024 14:23:15.801981926 CEST	53	50436	1.1.1.1	192.168.2.5
Sep 4, 2024 14:23:16.288338900 CEST	53	49720	1.1.1.1	192.168.2.5
Sep 4, 2024 14:23:44.648931980 CEST	53	52142	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 4, 2024 14:22:19.286600113 CEST	192.168.2.5	1.1.1.1	c22c	(Port unreachable)	Destination Unreachable
Sep 4, 2024 14:22:38.958744049 CEST	192.168.2.5	1.1.1.1	c22e	(Port unreachable)	Destination Unreachable
Sep 4, 2024 14:22:56.055672884 CEST	192.168.2.5	1.1.1.1	c22e	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 4, 2024 14:22:18.053906918 CEST	192.168.2.5	1.1.1.1	0xcbd4	Standard query (0)	gooel.com	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:18.054049015 CEST	192.168.2.5	1.1.1.1	0xe95a	Standard query (0)	gooel.com	65	IN (0x0001)	false
Sep 4, 2024 14:22:19.195904016 CEST	192.168.2.5	1.1.1.1	0xf270	Standard query (0)	ifdnzact.com	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:19.196492910 CEST	192.168.2.5	1.1.1.1	0xa9b2	Standard query (0)	ifdnzact.com	65	IN (0x0001)	false
Sep 4, 2024 14:22:20.892235041 CEST	192.168.2.5	1.1.1.1	0x5dcc	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:20.892369032 CEST	192.168.2.5	1.1.1.1	0x4935	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 4, 2024 14:22:20.918286085 CEST	192.168.2.5	1.1.1.1	0x333e	Standard query (0)	delivery.consentmanager.net	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:20.919156075 CEST	192.168.2.5	1.1.1.1	0xac53	Standard query (0)	delivery.consentmanager.net	65	IN (0x0001)	false
Sep 4, 2024 14:22:20.920727968 CEST	192.168.2.5	1.1.1.1	0x36e3	Standard query (0)	cdn.consentmanager.net	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:20.921217918 CEST	192.168.2.5	1.1.1.1	0x3507	Standard query (0)	cdn.consentmanager.net	65	IN (0x0001)	false
Sep 4, 2024 14:22:20.965662003 CEST	192.168.2.5	1.1.1.1	0x4c8e	Standard query (0)	i1.cdn-image.com	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:20.966793060 CEST	192.168.2.5	1.1.1.1	0x3740	Standard query (0)	i1.cdn-image.com	65	IN (0x0001)	false
Sep 4, 2024 14:22:21.457524061 CEST	192.168.2.5	1.1.1.1	0xf14d	Standard query (0)	a.delivery.consentmanager.net	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:21.458187103 CEST	192.168.2.5	1.1.1.1	0xb240	Standard query (0)	a.delivery.consentmanager.net	65	IN (0x0001)	false
Sep 4, 2024 14:22:23.103269100 CEST	192.168.2.5	1.1.1.1	0x4e23	Standard query (0)	ifdnzact.com	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:23.104307890 CEST	192.168.2.5	1.1.1.1	0xea58	Standard query (0)	ifdnzact.com	65	IN (0x0001)	false
Sep 4, 2024 14:22:23.194025040 CEST	192.168.2.5	1.1.1.1	0x5deb	Standard query (0)	i1.cdn-image.com	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:23.194632053 CEST	192.168.2.5	1.1.1.1	0x3cbb	Standard query (0)	i1.cdn-image.com	65	IN (0x0001)	false
Sep 4, 2024 14:22:23.632687092 CEST	192.168.2.5	1.1.1.1	0xa20f	Standard query (0)	cdn.consentmanager.net	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:23.632996082 CEST	192.168.2.5	1.1.1.1	0x4f06	Standard query (0)	cdn.consentmanager.net	65	IN (0x0001)	false
Sep 4, 2024 14:22:23.646249056 CEST	192.168.2.5	1.1.1.1	0x976c	Standard query (0)	a.delivery.consentmanager.net	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:23.646914959 CEST	192.168.2.5	1.1.1.1	0xee1	Standard query (0)	a.delivery.consentmanager.net	65	IN (0x0001)	false
Sep 4, 2024 14:22:26.851501942 CEST	192.168.2.5	1.1.1.1	0xaa97	Standard query (0)	gooel.com	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:26.851685047 CEST	192.168.2.5	1.1.1.1	0x27a4	Standard query (0)	gooel.com	65	IN (0x0001)	false
Sep 4, 2024 14:22:37.862644911 CEST	192.168.2.5	1.1.1.1	0x48ae	Standard query (0)	ifdnzact.com	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:37.863109112 CEST	192.168.2.5	1.1.1.1	0x1930	Standard query (0)	ifdnzact.com	65	IN (0x0001)	false
Sep 4, 2024 14:22:38.810264111 CEST	192.168.2.5	1.1.1.1	0xd2ca	Standard query (0)	delivery.consentmanager.net	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:38.810635090 CEST	192.168.2.5	1.1.1.1	0x5f2f	Standard query (0)	delivery.consentmanager.net	65	IN (0x0001)	false
Sep 4, 2024 14:22:38.811213017 CEST	192.168.2.5	1.1.1.1	0xbcc9	Standard query (0)	cdn.consentmanager.net	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:38.811671972 CEST	192.168.2.5	1.1.1.1	0xede2	Standard query (0)	cdn.consentmanager.net	65	IN (0x0001)	false
Sep 4, 2024 14:22:38.896816015 CEST	192.168.2.5	1.1.1.1	0x4826	Standard query (0)	a.delivery.consentmanager.net	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:38.897147894 CEST	192.168.2.5	1.1.1.1	0xec20	Standard query (0)	a.delivery.consentmanager.net	65	IN (0x0001)	false
Sep 4, 2024 14:22:38.921286106 CEST	192.168.2.5	1.1.1.1	0x75eb	Standard query (0)	i2.cdn-image.com	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:38.921454906 CEST	192.168.2.5	1.1.1.1	0x21e0	Standard query (0)	i2.cdn-image.com	65	IN (0x0001)	false
Sep 4, 2024 14:22:38.952644110 CEST	192.168.2.5	1.1.1.1	0xb59f	Standard query (0)	i4.cdn-image.com	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:38.952991009 CEST	192.168.2.5	1.1.1.1	0x92f	Standard query (0)	i4.cdn-image.com	65	IN (0x0001)	false
Sep 4, 2024 14:22:39.417675018 CEST	192.168.2.5	1.1.1.1	0x2e12	Standard query (0)	i2.cdn-image.com	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:39.417828083 CEST	192.168.2.5	1.1.1.1	0x1fc6	Standard query (0)	i2.cdn-image.com	65	IN (0x0001)	false
Sep 4, 2024 14:22:40.167231083 CEST	192.168.2.5	1.1.1.1	0x1a10	Standard query (0)	i4.cdn-image.com	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:40.167521954 CEST	192.168.2.5	1.1.1.1	0xaa42	Standard query (0)	i4.cdn-image.com	65	IN (0x0001)	false
Sep 4, 2024 14:22:46.869667053 CEST	192.168.2.5	1.1.1.1	0xcfae	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:46.870080948 CEST	192.168.2.5	1.1.1.1	0x6bcb	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Sep 4, 2024 14:22:47.939639091 CEST	192.168.2.5	1.1.1.1	0x3edb	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:47.940018892 CEST	192.168.2.5	1.1.1.1	0x9ee1	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Sep 4, 2024 14:22:47.951436996 CEST	192.168.2.5	1.1.1.1	0xa5aa	Standard query (0)	js-agent.newrelic.com	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:47.951613903 CEST	192.168.2.5	1.1.1.1	0x5dea	Standard query (0)	js-agent.newrelic.com	65	IN (0x0001)	false
Sep 4, 2024 14:22:48.569463968 CEST	192.168.2.5	1.1.1.1	0x8c51	Standard query (0)	bam.nr-data.net	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:48.569610119 CEST	192.168.2.5	1.1.1.1	0xdecb	Standard query (0)	bam.nr-data.net	65	IN (0x0001)	false
Sep 4, 2024 14:22:53.989871979 CEST	192.168.2.5	1.1.1.1	0x652c	Standard query (0)	i3.cdn-image.com	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:53.990330935 CEST	192.168.2.5	1.1.1.1	0xdd91	Standard query (0)	i3.cdn-image.com	65	IN (0x0001)	false
Sep 4, 2024 14:22:56.017438889 CEST	192.168.2.5	1.1.1.1	0x71ca	Standard query (0)	i3.cdn-image.com	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:56.017813921 CEST	192.168.2.5	1.1.1.1	0x81d	Standard query (0)	i3.cdn-image.com	65	IN (0x0001)	false
Sep 4, 2024 14:23:05.757606030 CEST	192.168.2.5	1.1.1.1	0x10e6	Standard query (0)	i1.cdn-image.com	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:23:05.758276939 CEST	192.168.2.5	1.1.1.1	0xa734	Standard query (0)	i1.cdn-image.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 4, 2024 14:22:18.105123997 CEST	1.1.1.1	192.168.2.5	0xcbd4	No error (0)	gooel.com		185.53.178.52	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:19.205625057 CEST	1.1.1.1	192.168.2.5	0xf270	No error (0)	ifdnzact.com		208.91.196.46	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:20.899305105 CEST	1.1.1.1	192.168.2.5	0x5dcc	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:20.900002956 CEST	1.1.1.1	192.168.2.5	0x4935	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 4, 2024 14:22:20.926224947 CEST	1.1.1.1	192.168.2.5	0x333e	No error (0)	delivery.consentmanager.net		87.230.98.78	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:20.929255962 CEST	1.1.1.1	192.168.2.5	0x3507	No error (0)	cdn.consentmanager.net	1376624012.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 4, 2024 14:22:20.929754972 CEST	1.1.1.1	192.168.2.5	0x36e3	No error (0)	cdn.consentmanager.net	1376624012.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 4, 2024 14:22:20.929754972 CEST	1.1.1.1	192.168.2.5	0x36e3	No error (0)	1376624012.rsc.cdn77.org		207.211.211.27	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:20.929754972 CEST	1.1.1.1	192.168.2.5	0x36e3	No error (0)	1376624012.rsc.cdn77.org		37.19.194.80	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:20.929754972 CEST	1.1.1.1	192.168.2.5	0x36e3	No error (0)	1376624012.rsc.cdn77.org		169.150.255.183	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:20.929754972 CEST	1.1.1.1	192.168.2.5	0x36e3	No error (0)	1376624012.rsc.cdn77.org		169.150.255.180	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:20.929754972 CEST	1.1.1.1	192.168.2.5	0x36e3	No error (0)	1376624012.rsc.cdn77.org		195.181.175.40	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:20.929754972 CEST	1.1.1.1	192.168.2.5	0x36e3	No error (0)	1376624012.rsc.cdn77.org		212.102.56.178	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:20.929754972 CEST	1.1.1.1	192.168.2.5	0x36e3	No error (0)	1376624012.rsc.cdn77.org		195.181.170.18	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:21.004666090 CEST	1.1.1.1	192.168.2.5	0x4c8e	No error (0)	i1.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:21.464684963 CEST	1.1.1.1	192.168.2.5	0xf14d	No error (0)	a.delivery.consentmanager.net		87.230.98.78	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:23.192759991 CEST	1.1.1.1	192.168.2.5	0x4e23	No error (0)	ifdnzact.com		208.91.196.46	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:23.230321884 CEST	1.1.1.1	192.168.2.5	0x5deb	No error (0)	i1.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:23.640948057 CEST	1.1.1.1	192.168.2.5	0x4f06	No error (0)	cdn.consentmanager.net	1376624012.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 4, 2024 14:22:23.641860962 CEST	1.1.1.1	192.168.2.5	0xa20f	No error (0)	cdn.consentmanager.net	1376624012.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 4, 2024 14:22:23.641860962 CEST	1.1.1.1	192.168.2.5	0xa20f	No error (0)	1376624012.rsc.cdn77.org		195.181.170.18	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:23.641860962 CEST	1.1.1.1	192.168.2.5	0xa20f	No error (0)	1376624012.rsc.cdn77.org		169.150.255.180	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:23.641860962 CEST	1.1.1.1	192.168.2.5	0xa20f	No error (0)	1376624012.rsc.cdn77.org		212.102.56.179	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:23.641860962 CEST	1.1.1.1	192.168.2.5	0xa20f	No error (0)	1376624012.rsc.cdn77.org		195.181.175.41	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:23.641860962 CEST	1.1.1.1	192.168.2.5	0xa20f	No error (0)	1376624012.rsc.cdn77.org		169.150.255.183	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:23.641860962 CEST	1.1.1.1	192.168.2.5	0xa20f	No error (0)	1376624012.rsc.cdn77.org		207.211.211.26	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:23.641860962 CEST	1.1.1.1	192.168.2.5	0xa20f	No error (0)	1376624012.rsc.cdn77.org		37.19.194.81	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:23.652940035 CEST	1.1.1.1	192.168.2.5	0x976c	No error (0)	a.delivery.consentmanager.net		87.230.98.78	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:26.895139933 CEST	1.1.1.1	192.168.2.5	0xaa97	No error (0)	gooel.com		185.53.178.52	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:30.635013103 CEST	1.1.1.1	192.168.2.5	0xa14	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:30.635013103 CEST	1.1.1.1	192.168.2.5	0xa14	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:31.175347090 CEST	1.1.1.1	192.168.2.5	0x7782	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 4, 2024 14:22:31.175347090 CEST	1.1.1.1	192.168.2.5	0x7782	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:37.954890013 CEST	1.1.1.1	192.168.2.5	0x48ae	No error (0)	ifdnzact.com		208.91.196.46	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:38.818080902 CEST	1.1.1.1	192.168.2.5	0xd2ca	No error (0)	delivery.consentmanager.net		87.230.98.78	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:38.818947077 CEST	1.1.1.1	192.168.2.5	0xede2	No error (0)	cdn.consentmanager.net	1376624012.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 4, 2024 14:22:38.819437981 CEST	1.1.1.1	192.168.2.5	0xbcc9	No error (0)	cdn.consentmanager.net	1376624012.rsc.cdn77.org		CNAME (Canonical name)	IN (0x0001)	false
Sep 4, 2024 14:22:38.819437981 CEST	1.1.1.1	192.168.2.5	0xbcc9	No error (0)	1376624012.rsc.cdn77.org		195.181.170.18	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:38.819437981 CEST	1.1.1.1	192.168.2.5	0xbcc9	No error (0)	1376624012.rsc.cdn77.org		207.211.211.26	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:38.819437981 CEST	1.1.1.1	192.168.2.5	0xbcc9	No error (0)	1376624012.rsc.cdn77.org		37.19.194.81	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:38.819437981 CEST	1.1.1.1	192.168.2.5	0xbcc9	No error (0)	1376624012.rsc.cdn77.org		169.150.255.184	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:38.819437981 CEST	1.1.1.1	192.168.2.5	0xbcc9	No error (0)	1376624012.rsc.cdn77.org		195.181.175.41	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:38.819437981 CEST	1.1.1.1	192.168.2.5	0xbcc9	No error (0)	1376624012.rsc.cdn77.org		169.150.255.180	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:38.819437981 CEST	1.1.1.1	192.168.2.5	0xbcc9	No error (0)	1376624012.rsc.cdn77.org		212.102.56.178	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:38.903793097 CEST	1.1.1.1	192.168.2.5	0x4826	No error (0)	a.delivery.consentmanager.net		87.230.98.78	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:38.936533928 CEST	1.1.1.1	192.168.2.5	0x75eb	No error (0)	i2.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:38.972393990 CEST	1.1.1.1	192.168.2.5	0xb59f	No error (0)	i4.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:39.437585115 CEST	1.1.1.1	192.168.2.5	0x2e12	No error (0)	i2.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:40.203546047 CEST	1.1.1.1	192.168.2.5	0x1a10	No error (0)	i4.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:44.492599010 CEST	1.1.1.1	192.168.2.5	0x3e25	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 4, 2024 14:22:44.492599010 CEST	1.1.1.1	192.168.2.5	0x3e25	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:46.877743006 CEST	1.1.1.1	192.168.2.5	0xcfae	No error (0)	js-agent.newrelic.com		162.247.243.39	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:47.947424889 CEST	1.1.1.1	192.168.2.5	0x3edb	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 4, 2024 14:22:47.947424889 CEST	1.1.1.1	192.168.2.5	0x3edb	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 4, 2024 14:22:47.947424889 CEST	1.1.1.1	192.168.2.5	0x3edb	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:47.947792053 CEST	1.1.1.1	192.168.2.5	0x9ee1	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 4, 2024 14:22:47.947792053 CEST	1.1.1.1	192.168.2.5	0x9ee1	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 4, 2024 14:22:47.958165884 CEST	1.1.1.1	192.168.2.5	0xa5aa	No error (0)	js-agent.newrelic.com		162.247.243.39	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:48.576458931 CEST	1.1.1.1	192.168.2.5	0x8c51	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 4, 2024 14:22:48.576458931 CEST	1.1.1.1	192.168.2.5	0x8c51	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 4, 2024 14:22:48.576458931 CEST	1.1.1.1	192.168.2.5	0x8c51	No error (0)	fastly-tls12-bam.nr-data.net		162.247.243.29	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:48.577919960 CEST	1.1.1.1	192.168.2.5	0xdecb	No error (0)	bam.nr-data.net	bam.cell.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 4, 2024 14:22:48.577919960 CEST	1.1.1.1	192.168.2.5	0xdecb	No error (0)	bam.cell.nr-data.net	fastly-tls12-bam.nr-data.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 4, 2024 14:22:53.998528957 CEST	1.1.1.1	192.168.2.5	0x652c	No error (0)	i3.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:22:56.025290012 CEST	1.1.1.1	192.168.2.5	0x71ca	No error (0)	i3.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:23:05.777259111 CEST	1.1.1.1	192.168.2.5	0x10e6	No error (0)	i1.cdn-image.com		208.91.196.253	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:23:09.027367115 CEST	1.1.1.1	192.168.2.5	0xc772	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 4, 2024 14:23:09.027367115 CEST	1.1.1.1	192.168.2.5	0xc772	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:23:28.907610893 CEST	1.1.1.1	192.168.2.5	0x4bac	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 4, 2024 14:23:28.907610893 CEST	1.1.1.1	192.168.2.5	0x4bac	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:23:34.550272942 CEST	1.1.1.1	192.168.2.5	0xa9c5	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 4, 2024 14:23:34.550272942 CEST	1.1.1.1	192.168.2.5	0xa9c5	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

ifdnzact.com

cdn.consentmanager.net

a.delivery.consentmanager.net

js-agent.newrelic.com

bam.nr-data.net

i1.cdn-image.com

i2.cdn-image.com

i4.cdn-image.com

i3.cdn-image.com

fs.microsoft.com

slscr.update.microsoft.com

gooel.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	185.53.178.52	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:18.111957073 CEST	424	OUT	GET / HTTP/1.1 Host: gooel.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:19.002971888 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:18 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Redirect: skenzo X-Buckets: bucket011 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_PeviVk6I6t4v60yxzwEXLHQpbVH6nGUBuUrgHlABuDN0hdSDPnGJT4zsHaVeloTogP45+i+2UloXRo8srysF5A== X-Template: tpl_CleanPeppermintBlack_twoclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Domain: gooel.com X-Subdomain: Content-Encoding: gzip Data Raw: 33 65 66 0d 0a 1f 8b 08 00 00 00 00 00 04 03 b5 55 6d 6f e4 34 10 fe 7c f9 15 c6 15 5c 7b 5c e2 a4 a5 5c 9b 26 8b d4 17 d1 93 0a 57 1d 8b 80 4f c8 1b 3b 59 53 c7 0e b6 b3 bb 2d ea 7f 67 ec 24 7b 7b 62 85 f8 50 f6 cb 7a 26 f6 33 6f cf cc 14 5f 5c 7f b8 9a ff 76 7f 83 96 ae 95 e8 fe e7 cb bb f7 57 08 c7 84 fc 72 72 45 c8 f5 fc 1a fd 7a 3b ff e1 0e 65 49 8a e6 86 2a 2b 9c d0 8a 4a 42 6e 7e c4 11 1a 7f 78 e9 5c 97 13 b2 5e af 93 f5 49 a2 4d 43 e6 1f c9 c6 63 66 1e 64 3c c6 6e 07 21 61 8e e1 59 54 04 c3 9b 56 2a 5b ee 81 c9 ce cf cf 87 d7 18 c1 a5 5c 52 d5 94 98 2b 8c b6 27 8f c1 29 9b 05 6f 8a 96 3b 0a c1 b8 2e e6 7f f6 62 55 e2 2b ad 1c 57 2e 9e 3f 76 1c a3 6a 90 4a ec f8 c6 11 6f fb 02 55 4b 6a 2c 77 65 ef ea f8 0c 93 5d 20 45 5b 5e e2 95 e0 eb 4e 1b b7 f3 7c 2d 98 5b 96 8c af 44 c5 e3 20 bc 45 42 41 72 a8 8c 6d 45 25 2f b3 b7 a8 a5 1b d1 f6 ed a4 80 68 7d be 0a 27 9c e4 b3 46 6b 2e 93 4a b7 05 19 14 db 6c 16 d6 3d 4a 8e 5a ce 04 2d b1 ad 0c 87 78 67 51 42 2d 78 f9 bb 75 d4 a4 e8 af e8 d5 82 56 0f 8d Data Ascii: 3efUmo4\|\{\\&WO;YS-g${{bPz&3o_\vWrrEz;eI+JBn~x\^IMCcfd<n!aYTV[\R+')o;.bU+W.?vjJoUKj,we] E[^N\|-[D EBArmE%/h}'Fk.Jl=JZ-xgQB-xuV
Sep 4, 2024 14:22:19.003010035 CEST	681	IN	Data Raw: d1 bd 62 39 ea 8d 3c 7c 4d 08 3b 39 eb ac 51 22 7b b7 58 6d fa a4 92 ba 67 b5 81 90 13 c5 1d 71 4b de 72 4b 02 8c 25 01 27 69 44 fd fa 08 29 1d 1b de 71 ea 50 05 a9 e2 e6 22 7a 15 62 ca 51 76 d2 6d 40 5a 72 d1 2c 1d 88 c7 41 64 c2 76 92 3e e6 10 Data Ascii: b9<\|M;9Q"{XmgqKrK%'iD)qP"zbQvm@Zr,Adv>9u2{!'rVaGXo}\|-Whz%<eW}Wr`7V-5PyR<B1[-7x5Nbnp-GM=
Sep 4, 2024 14:22:26.633475065 CEST	362	OUT	GET /favicon.ico HTTP/1.1 Host: gooel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://gooel.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:26.825258970 CEST	230	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:26 GMT Content-Type: image/x-icon Content-Length: 0 Connection: keep-alive Last-Modified: Thu, 29 Aug 2024 07:41:46 GMT ETag: "66d0263a-0" Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49713	208.91.196.46	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:19.231062889 CEST	482	OUT	GET /?dn=gooel.com&pid=9PO755G95 HTTP/1.1 Host: ifdnzact.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://gooel.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:20.597628117 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 04 Sep 2024 12:22:19 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Set-Cookie: vsid=921vr472998139651082039; expires=Mon, 03-Sep-2029 12:22:19 GMT; Max-Age=157680000; path=/; domain=ifdnzact.com; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_A0iPVvNO/0NBsOg72wI7RlUQ5wTF9klDJH7/CumpiYLw+pzunvrcCBovUzWerUlFLafWA/KN1rCf1cKoDRL0Ww== Keep-Alive: timeout=5, max=125 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 36 61 39 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 Data Ascii: 6a97<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="ht
Sep 4, 2024 14:22:20.597637892 CEST	1236	IN	Data Raw: 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d Data Ascii: tps://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window
Sep 4, 2024 14:22:20.597651958 CEST	1236	IN	Data Raw: 20 61 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 65 74 6c 61 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 6a 29 7b 69 66 28 74 79 70 65 6f 66 28 6a 29 21 3d 22 62 6f 6f 6c 65 61 6e 22 29 7b 6a 3d 74 72 75 65 7d 69 66 28 6a 26 26 74 79 70 65 6f 66 28 63 6d Data Ascii: a};window.cmp_getlang=function(j){if(typeof(j)!="boolean"){j=true}if(j&&typeof(cmp_getlang.usedlang)=="string"&&cmp_getlang.usedlang!==""){return cmp_getlang.usedlang}var g=window.cmp_getsupportedLangs();var c=[];var f=location.hash;var e=loc
Sep 4, 2024 14:22:20.597664118 CEST	1236	IN	Data Raw: 77 65 72 43 61 73 65 28 29 3b 69 66 28 22 63 6d 70 5f 63 75 73 74 6f 6d 6c 61 6e 67 75 61 67 65 73 22 20 69 6e 20 68 29 7b 66 6f 72 28 76 61 72 20 71 3d 30 3b 71 3c 68 2e 63 6d 70 5f 63 75 73 74 6f 6d 6c 61 6e 67 75 61 67 65 73 2e 6c 65 6e 67 74 Data Ascii: werCase();if("cmp_customlanguages" in h){for(var q=0;q<h.cmp_customlanguages.length;q++){if(h.cmp_customlanguages[q].l.toUpperCase()==o.toUpperCase()){o="en";break}}}b="_"+o}function x(i,e){var w="";i+="=";var s=i.length;var d=location;if(d.ha
Sep 4, 2024 14:22:20.597692013 CEST	896	IN	Data Raw: 3a 22 22 29 2b 28 22 63 6d 70 5f 70 61 72 61 6d 73 22 20 69 6e 20 68 3f 22 26 22 2b 68 2e 63 6d 70 5f 70 61 72 61 6d 73 3a 22 22 29 2b 28 75 2e 63 6f 6f 6b 69 65 2e 6c 65 6e 67 74 68 3e 30 3f 22 26 5f 5f 63 6d 70 66 63 63 3d 31 22 3a 22 22 29 2b Data Ascii: :"")+("cmp_params" in h?"&"+h.cmp_params:"")+(u.cookie.length>0?"&__cmpfcc=1":"")+"&l="+o.toLowerCase()+"&o="+(new Date()).getTime();j.type="text/javascript";j.async=true;if(u.currentScript&&u.currentScript.parentElement){u.currentScript.paren
Sep 4, 2024 14:22:20.597913027 CEST	1236	IN	Data Raw: 75 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 7b 75 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 7d 65 6c 73 65 7b 69 Data Ascii: u.currentScript.parentElement){u.currentScript.parentElement.appendChild(j)}else{if(u.body){u.body.appendChild(j)}else{var t=v("body");if(t.length==0){t=v("div")}if(t.length==0){t=v("span")}if(t.length==0){t=v("ins")}if(t.length==0){t=v("scrip
Sep 4, 2024 14:22:20.597932100 CEST	1236	IN	Data Raw: 5f 5f 63 6d 70 2e 61 3d 5f 5f 63 6d 70 2e 61 7c 7c 5b 5d 3b 69 66 28 21 61 2e 6c 65 6e 67 74 68 29 7b 72 65 74 75 72 6e 20 5f 5f 63 6d 70 2e 61 7d 65 6c 73 65 7b 69 66 28 61 5b 30 5d 3d 3d 3d 22 70 69 6e 67 22 29 7b 69 66 28 61 5b 31 5d 3d 3d 3d Data Ascii: __cmp.a=__cmp.a\|\|[];if(!a.length){return __cmp.a}else{if(a[0]==="ping"){if(a[1]===2){a[2]({gdprApplies:gdprAppliesGlobally,cmpLoaded:false,cmpStatus:"stub",displayStatus:"hidden",apiVersion:"2.2",cmpId:31},true)}else{a[2](false,true)}}else{if(
Sep 4, 2024 14:22:20.597949982 CEST	1236	IN	Data Raw: 68 3d 66 61 6c 73 65 3b 5f 5f 67 70 70 2e 65 3d 5f 5f 67 70 70 2e 65 7c 7c 5b 5d 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 5f 5f 67 70 70 2e 65 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 69 66 28 5f 5f 67 70 70 2e 65 5b 64 5d 2e 69 64 3d 3d 65 29 Data Ascii: h=false;__gpp.e=__gpp.e\|\|[];for(var d=0;d<__gpp.e.length;d++){if(__gpp.e[d].id==e){__gpp.e[d].splice(d,1);h=true;break}}return{eventName:"listenerRemoved",listenerId:e,data:h,pingData:window.cmp_gpp_ping()}}else{if(g==="getGPPData"){return{sec
Sep 4, 2024 14:22:20.597963095 CEST	672	IN	Data Raw: 6c 6c 49 64 3a 62 2e 63 61 6c 6c 49 64 7d 7d 3b 64 2e 73 6f 75 72 63 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 61 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 3a 65 2c 22 2a 22 29 7d 2c 62 2e 70 61 72 61 6d 65 74 65 72 29 7d 69 66 28 74 Data Ascii: llId:b.callId}};d.source.postMessage(a?JSON.stringify(e):e,"*")},b.parameter)}if(typeof(c)==="object"&&c!==null&&"__gppCall" in c){var b=c.__gppCall;window.__gpp(b.command,function(h,g){var e={__gppReturn:{returnValue:h,success:g,callId:b.call
Sep 4, 2024 14:22:20.598006010 CEST	1236	IN	Data Raw: 5f 73 65 74 47 70 70 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 28 61 20 69 6e 20 77 69 6e 64 6f 77 29 7c 7c 28 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 Data Ascii: _setGppStub=function(a){if(!(a in window)\|\|(typeof(window[a])!=="function"&&typeof(window[a])!=="object"&&(typeof(window[a])==="undefined"\|\|window[a]!==null))){window[a]=window.cmp_gppstub;window[a].msgHandler=window.cmp_msghandler;window.addE
Sep 4, 2024 14:22:20.602741957 CEST	1236	IN	Data Raw: 65 6d 65 6e 74 28 22 69 6d 67 22 29 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 30 70 78 22 3b 69 6d 67 6c 6f 67 2e 73 72 63 3d 22 68 74 74 70 3a 2f Data Ascii: ement("img");imglog.style.height="0px";imglog.style.width="0px";imglog.src="http://ifdnzact.com/sk-logabpstatus.php?a=eTJXaDJCZjZHMENOMStrcUhhZlBabjZXRHh0TFhnSXp5NytJSDJMTmsyRzl2QnZIYVp6TXBlQU1maWNwcW9ZVVVVVDdzR0VWazNja2w0SHZlUE5xTnZjanUxY3lvR
Sep 4, 2024 14:22:20.962901115 CEST	333	OUT	GET /px.js?ch=1 HTTP/1.1 Host: ifdnzact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/?dn=gooel.com&pid=9PO755G95 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:21.058691978 CEST	1084	IN	HTTP/1.1 200 OK Date: Wed, 04 Sep 2024 12:22:21 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=87 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 76 61 72 20 61 62 70 3d 61 62 70 7c 7c 66 61 6c 73 65 3b 76 61 72 20 73 63 72 69 70 74 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 76 61 72 20 73 63 72 69 70 74 3d 73 63 72 69 70 74 73 5b 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 66 28 73 63 72 69 70 74 29 7b 76 61 72 20 71 75 65 72 79 3d 73 63 72 69 70 74 2e 73 72 63 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 2e 73 70 6c 69 74 28 22 26 22 29 3b 76 61 72 20 70 61 72 61 6d 73 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 71 75 65 72 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 70 61 72 61 6d 3d 71 75 65 72 79 5b 69 5d 2e 73 70 6c 69 74 28 22 3d 22 29 3b 70 61 72 61 6d 73 5b 70 61 72 61 6d 5b 30 5d 5d 3d 70 61 72 61 6d 5b 31 5d 7d 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 31 29 61 62 70 3d 74 72 75 65 3b 65 6c 73 65 20 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 32 29 61 62 70 3d 61 62 70 26 [TRUNCATED] Data Ascii: var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49717	208.91.196.46	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:21.002217054 CEST	333	OUT	GET /px.js?ch=2 HTTP/1.1 Host: ifdnzact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/?dn=gooel.com&pid=9PO755G95 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:21.437836885 CEST	1085	IN	HTTP/1.1 200 OK Date: Wed, 04 Sep 2024 12:22:21 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=105 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 76 61 72 20 61 62 70 3d 61 62 70 7c 7c 66 61 6c 73 65 3b 76 61 72 20 73 63 72 69 70 74 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 76 61 72 20 73 63 72 69 70 74 3d 73 63 72 69 70 74 73 5b 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 66 28 73 63 72 69 70 74 29 7b 76 61 72 20 71 75 65 72 79 3d 73 63 72 69 70 74 2e 73 72 63 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 2e 73 70 6c 69 74 28 22 26 22 29 3b 76 61 72 20 70 61 72 61 6d 73 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 71 75 65 72 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 70 61 72 61 6d 3d 71 75 65 72 79 5b 69 5d 2e 73 70 6c 69 74 28 22 3d 22 29 3b 70 61 72 61 6d 73 5b 70 61 72 61 6d 5b 30 5d 5d 3d 70 61 72 61 6d 5b 31 5d 7d 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 31 29 61 62 70 3d 74 72 75 65 3b 65 6c 73 65 20 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 32 29 61 62 70 3d 61 62 70 26 [TRUNCATED] Data Ascii: var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};
Sep 4, 2024 14:22:53.596817970 CEST	482	OUT	GET /?dn=gooel.com&pid=9PO755G95 HTTP/1.1 Host: ifdnzact.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://gooel.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:53.873851061 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 04 Sep 2024 12:22:53 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Set-Cookie: vsid=917vr472998173672883993; expires=Mon, 03-Sep-2029 12:22:53 GMT; Max-Age=157680000; path=/; domain=ifdnzact.com; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_A0iPVvNO/0NBsOg72wI7RlUQ5wTF9klDJH7/CumpiYLw+pzunvrcCBovUzWerUlFLafWA/KN1rCf1cKoDRL0Ww== Keep-Alive: timeout=5, max=117 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 36 61 61 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 Data Ascii: 6aa3<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="ht
Sep 4, 2024 14:22:53.873858929 CEST	1236	IN	Data Raw: 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d Data Ascii: tps://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window
Sep 4, 2024 14:22:53.873871088 CEST	1236	IN	Data Raw: 20 61 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 65 74 6c 61 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 6a 29 7b 69 66 28 74 79 70 65 6f 66 28 6a 29 21 3d 22 62 6f 6f 6c 65 61 6e 22 29 7b 6a 3d 74 72 75 65 7d 69 66 28 6a 26 26 74 79 70 65 6f 66 28 63 6d Data Ascii: a};window.cmp_getlang=function(j){if(typeof(j)!="boolean"){j=true}if(j&&typeof(cmp_getlang.usedlang)=="string"&&cmp_getlang.usedlang!==""){return cmp_getlang.usedlang}var g=window.cmp_getsupportedLangs();var c=[];var f=location.hash;var e=loc
Sep 4, 2024 14:22:53.873923063 CEST	1236	IN	Data Raw: 77 65 72 43 61 73 65 28 29 3b 69 66 28 22 63 6d 70 5f 63 75 73 74 6f 6d 6c 61 6e 67 75 61 67 65 73 22 20 69 6e 20 68 29 7b 66 6f 72 28 76 61 72 20 71 3d 30 3b 71 3c 68 2e 63 6d 70 5f 63 75 73 74 6f 6d 6c 61 6e 67 75 61 67 65 73 2e 6c 65 6e 67 74 Data Ascii: werCase();if("cmp_customlanguages" in h){for(var q=0;q<h.cmp_customlanguages.length;q++){if(h.cmp_customlanguages[q].l.toUpperCase()==o.toUpperCase()){o="en";break}}}b="_"+o}function x(i,e){var w="";i+="=";var s=i.length;var d=location;if(d.ha
Sep 4, 2024 14:22:53.873929024 CEST	1236	IN	Data Raw: 3a 22 22 29 2b 28 22 63 6d 70 5f 70 61 72 61 6d 73 22 20 69 6e 20 68 3f 22 26 22 2b 68 2e 63 6d 70 5f 70 61 72 61 6d 73 3a 22 22 29 2b 28 75 2e 63 6f 6f 6b 69 65 2e 6c 65 6e 67 74 68 3e 30 3f 22 26 5f 5f 63 6d 70 66 63 63 3d 31 22 3a 22 22 29 2b Data Ascii: :"")+("cmp_params" in h?"&"+h.cmp_params:"")+(u.cookie.length>0?"&__cmpfcc=1":"")+"&l="+o.toLowerCase()+"&o="+(new Date()).getTime();j.type="text/javascript";j.async=true;if(u.currentScript&&u.currentScript.parentElement){u.currentScript.paren
Sep 4, 2024 14:22:53.873939991 CEST	1236	IN	Data Raw: 63 74 69 6f 6e 28 62 29 7b 69 66 28 21 77 69 6e 64 6f 77 2e 66 72 61 6d 65 73 5b 62 5d 29 7b 69 66 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 Data Ascii: ction(b){if(!window.frames[b]){if(document.body){var a=document.createElement("iframe");a.style.cssText="display:none";if("cmp_cdn" in window&&"cmp_ultrablocking" in window&&window.cmp_ultrablocking>0){a.src="//"+window.cmp_cdn+"/delivery/empt
Sep 4, 2024 14:22:53.873945951 CEST	1236	IN	Data Raw: 22 29 7b 5f 5f 63 6d 70 2e 61 2e 70 75 73 68 28 5b 5d 2e 73 6c 69 63 65 2e 61 70 70 6c 79 28 61 29 29 7d 65 6c 73 65 7b 69 66 28 61 5b 30 5d 3d 3d 3d 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 7c 7c 61 5b 30 5d 3d 3d 3d 22 72 65 6d 6f Data Ascii: "){__cmp.a.push([].slice.apply(a))}else{if(a[0]==="addEventListener"\|\|a[0]==="removeEventListener"){__cmp.a.push([].slice.apply(a))}else{if(a.length==4&&a[3]===false){a[2]({},false)}else{__cmp.a.push([].slice.apply(a))}}}}}}};window.cmp_gpp_pi
Sep 4, 2024 14:22:53.873975992 CEST	1236	IN	Data Raw: 70 69 6e 67 28 29 7d 7d 65 6c 73 65 7b 69 66 28 67 3d 3d 3d 22 68 61 73 53 65 63 74 69 6f 6e 22 7c 7c 67 3d 3d 3d 22 67 65 74 53 65 63 74 69 6f 6e 22 7c 7c 67 3d 3d 3d 22 67 65 74 46 69 65 6c 64 22 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 65 6c Data Ascii: ping()}}else{if(g==="hasSection"\|\|g==="getSection"\|\|g==="getField"){return null}else{__gpp.q.push([].slice.apply(a))}}}}}};window.cmp_msghandler=function(d){var a=typeof d.data==="string";try{var c=a?JSON.parse(d.data):d.data}catch(f){var c=nu
Sep 4, 2024 14:22:53.873981953 CEST	1236	IN	Data Raw: 20 69 6e 20 62 3f 62 2e 76 65 72 73 69 6f 6e 3a 31 29 7d 7d 3b 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 65 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 28 61 20 69 6e 20 77 69 6e 64 6f 77 29 7c 7c 28 74 79 70 65 6f 66 28 77 69 6e Data Ascii: in b?b.version:1)}};window.cmp_setStub=function(a){if(!(a in window)\|\|(typeof(window[a])!=="function"&&typeof(window[a])!=="object"&&(typeof(window[a])==="undefined"\|\|window[a]!==null))){window[a]=window.cmp_stub;window[a].msgHandler=window.c
Sep 4, 2024 14:22:53.873987913 CEST	556	IN	Data Raw: 75 62 28 22 5f 5f 67 70 70 22 29 7d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 61 62 70 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 Data Ascii: ub("__gpp")};</script><script type="text/javascript">var abp;</script><script type="text/javascript" src="http://ifdnzact.com/px.js?ch=1"></script><script type="text/javascript" src="http://ifdnzact.com/px.js?ch=2"></script><script type="text/
Sep 4, 2024 14:22:53.874108076 CEST	1236	IN	Data Raw: 5a 36 52 56 59 76 61 47 39 43 61 33 5a 55 64 46 4a 68 62 69 39 52 59 57 74 45 57 54 5a 33 59 6d 5a 6d 52 31 6f 78 4d 45 68 55 4e 48 55 77 4e 31 68 48 57 58 46 4e 4d 44 6c 36 57 6c 68 74 65 6a 51 3d 26 62 3d 22 2b 61 62 70 3b 64 6f 63 75 6d 65 6e Data Ascii: Z6RVYvaG9Ca3ZUdFJhbi9RYWtEWTZ3YmZmR1oxMEhUNHUwN1hHWXFNMDl6WlhtejQ=&b="+abp;document.body.appendChild(imglog);if(typeof abperurl !== "undefined" && abperurl!="")window.top.location=abperurl;}catch(err){}}</script><meta name="tids" content="a='2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49718	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:21.012514114 CEST	351	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/?dn=gooel.com&pid=9PO755G95 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:21.458456039 CEST	341	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:21 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Thu, 16 Feb 2023 16:29:54 GMT Connection: keep-alive ETag: "63ee5a02-20f3" Expires: Wed, 18 Sep 2024 12:22:21 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Sep 4, 2024 14:22:21.458642006 CEST	1236	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n
Sep 4, 2024 14:22:21.458650112 CEST	1236	IN	Data Raw: 28 29 3b 6f 3c 31 65 33 26 26 28 6f 2b 3d 31 39 30 30 29 3b 76 61 72 20 72 3d 6e 2e 67 65 74 44 61 79 28 29 2c 69 3d 6e 2e 67 65 74 4d 6f 6e 74 68 28 29 2c 6e 3d 6e 2e 67 65 74 44 61 74 65 28 29 3b 6e 3c 31 30 26 26 28 6e 3d 22 30 22 2b 6e 29 3b Data Ascii: ();o<1e3&&(o+=1900);var r=n.getDay(),i=n.getMonth(),n=n.getDate();n<10&&(n="0"+n);o=t[r]+", "+e[i]+" "+n+", "+o;document.write(o)}function checkUTFChar(t){for(var e=!0,n=0;n<128;++n){var o=n.toString(16);if(1==o.length&&(o="0"+o),o="%"+o,(o=un
Sep 4, 2024 14:22:21.458657980 CEST	1236	IN	Data Raw: 65 28 62 72 5f 64 61 74 61 2e 67 65 74 4d 6f 75 73 65 50 6f 73 69 74 69 6f 6e 44 61 74 61 28 29 29 3a 22 61 64 63 6c 6b 22 3d 3d 74 7c 7c 22 73 72 63 71 72 79 22 3d 3d 74 3f 22 26 62 64 3d 22 2b 65 73 63 61 70 65 28 62 72 5f 64 61 74 61 2e 67 65 Data Ascii: e(br_data.getMousePositionData()):"adclk"==t\|\|"srcqry"==t?"&bd="+escape(br_data.getSearchBoxRelatedData()):"&bd="+escape(br_data.getURLBrowserData())}catch(t){}return e}var brdata=function(){this.fd="#",this.cookieSupport=-1,this.isinframe=-1,
Sep 4, 2024 14:22:21.458724022 CEST	1236	IN	Data Raw: 65 50 6f 73 69 74 69 6f 6e 44 61 74 61 28 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 66 69 72 6d 54 6f 4f 70 74 4f 75 74 28 29 7b 76 61 72 20 74 3b 6f 70 74 4f 75 74 3d 63 6f 6e 66 69 72 6d 28 22 59 6f 75 20 77 69 6c 6c 20 6e 6f 74 20 62 65 Data Ascii: ePositionData()}};function confirmToOptOut(){var t;optOut=confirm("You will not be able to see any ads or websearches."),optOut&&((t=new Date).setTime(t.getTime()+31536e6),t="; expires="+t.toGMTString(),document.cookie="dnsoptout=1"+t+"; path=
Sep 4, 2024 14:22:21.458748102 CEST	896	IN	Data Raw: 69 65 6e 74 57 69 64 74 68 26 26 28 65 3d 74 68 69 73 2e 5f 54 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 57 69 64 74 68 29 7d 63 61 74 63 68 28 74 29 7b 65 3d 30 7d 72 65 74 75 72 6e 20 65 7d 2c 5f 77 74 3a 66 75 6e 63 Data Ascii: ientWidth&&(e=this._Top.document.body.clientWidth)}catch(t){e=0}return e},_wt:function(){return this._Top?null!=this._Top.window.screenTop?this._Top.window.screenTop:this._Top.window.screenY:0},_wl:function(){return this._Top?null!=this._Top.w
Sep 4, 2024 14:22:21.458755016 CEST	1236	IN	Data Raw: 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 65 77 65 62 6b 69 74 22 29 26 26 28 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 62 6c 75 72 28 29 2c 74 68 69 73 2e 5f 54 6f 70 2e Data Ascii: serAgent.toLowerCase().indexOf("applewebkit")&&(this._Top.window.blur(),this._Top.window.focus()),_npW.Init=function(e){with(e)Params=e.Params,Main=function(){void 0===window.mozPaintCount\|\|(t=window.open("about:blank"))&&t.close();var t=Param
Sep 4, 2024 14:22:21.458760977 CEST	1236	IN	Data Raw: 6f 77 50 6f 70 26 26 28 73 68 6f 77 50 6f 70 3d 30 29 2c 21 31 3b 31 21 3d 73 68 6f 77 50 6f 70 7c 7c 72 65 6e 64 65 72 46 41 43 50 28 74 29 7c 7c 73 68 70 70 28 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 68 70 70 28 Data Ascii: owPop&&(showPop=0),!1;1!=showPop\|\|renderFACP(t)\|\|shpp(t)}catch(t){}}function shpp(t){if("undefined"!=typeof __pp&&1==showPop&&!renderFACP(t))try{if(t\|\|((t=window.event\|\|window.Event).cancelBubble=!0),t.button&&2==t.button)return;try{var e=!1;i
Sep 4, 2024 14:22:21.458766937 CEST	123	IN	Data Raw: 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 42 72 6f 77 73 65 72 44 65 74 61 69 6c 73 28 29 7b 72 65 6c 70 6c 61 63 65 41 6c 6c 41 4c 69 6e Data Ascii: vigator.userAgent)}catch(t){}return t}function setBrowserDetails(){relplaceAllALinks&&relplaceAllALinks(/(\/trf\|\.cfm)\?/)}
Sep 4, 2024 14:22:21.511060953 CEST	389	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:21.605912924 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:21 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Wed, 18 Sep 2024 12:22:21 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 30 f2 00 2c c1 00 2c 37 03 90 81 f9 8f 29 b2 13 3b 91 25 a0 9b ae dd a1 ab d6 7a bc 0f e7 7c b7 4e fd b0 ab 8a 28 f1 09 c8 13 96 00 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c [TRUNCATED] Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0P%@a@a0@a0P0P(P(P((@a@a0@a0P0P(P(P((@a@a0@aPeaLt[=ul=HhOnNc=e{l[,lu_cnk,n;~'^a$sbV&aqcm3Ts*l#zXtH+8c/BH1>CXHay/AIl2g}s/Q8{.;R91oeGo-V:;u$5'.lW:Q\v_:z4',l]2z4'e,~O]%>\|v_2U}8u=hL4$7aj;eMhL\>',/]I,{}a91\|Jz
Sep 4, 2024 14:22:21.606113911 CEST	553	IN	Data Raw: b1 73 e2 d5 85 ed aa 5b 43 07 31 c7 b0 d3 f6 53 17 56 dd 8c e8 20 e6 18 96 72 88 08 4b e8 20 e6 18 96 f8 01 7c 65 61 db 1a 97 d0 8b 98 d7 b0 f2 73 62 f8 8c 1a 3f 6a d3 c2 07 f0 95 33 ce 55 85 55 39 23 1e fd 63 98 c5 54 ba 3f 16 93 15 b6 b5 82 34 Data Ascii: s[C1SV rK \|easb?j3UU9#cT?4JYA)O(W.:+FOQX3DWsn]{d^Va4\>gDbvU1aEjass+e9<lNTX3KVaV\|
Sep 4, 2024 14:22:21.606121063 CEST	1236	IN	Data Raw: aa 23 f1 d3 39 cc 88 bf f8 cd 54 39 f7 ad 6d 9e fd f0 c2 9a 9b 11 1d c3 1c c4 32 76 4f 98 11 1d c3 1c c4 12 b7 4f 98 11 1d c3 bc 88 25 ce 89 e1 5b de 6b 98 17 b1 c4 39 31 7c c9 1b 12 13 ac ed a0 b3 85 b5 f7 1d 6f 48 74 5f 9f 33 27 86 19 d1 90 68 Data Ascii: #9T9m2vOO%[k91\|oHt_3'hLL?*l!m9hgDwx"#Q8pvg{-nr34/=0isbz9_X?vq:1qN:\|%n0#Si^NfA(G\|cN,S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49720	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:21.528592110 CEST	392	OUT	GET /__media__/pics/28905/arrrow.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:21.977711916 CEST	326	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:21 GMT Content-Type: image/png Content-Length: 283 Last-Modified: Tue, 04 Jan 2022 14:44:27 GMT Connection: keep-alive ETag: "61d45d4b-11b" Expires: Wed, 18 Sep 2024 12:22:21 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Sep 4, 2024 14:22:22.109803915 CEST	283	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 1b 08 03 00 00 00 ad 28 94 ae 00 00 00 48 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR(HPLTEGpLztRNSt@fU2'dgkIDAT} P{O5$vaWJIih^JF5PzHLzF/h:{t
Sep 4, 2024 14:23:07.113158941 CEST	6	OUT	Data Raw: 00 Data Ascii:
Sep 4, 2024 14:23:52.125264883 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49721	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:21.917119980 CEST	381	OUT	GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive Origin: http://ifdnzact.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:22.362725973 CEST	278	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:22 GMT Content-Type: application/font-woff Content-Length: 17312 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-43a0" Access-Control-Allow-Origin: * Accept-Ranges: bytes
Sep 4, 2024 14:22:22.362879038 CEST	1236	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 a0 00 10 00 00 00 00 73 60 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 6c 00 00 00 1c 00 00 00 1c 69 99 f4 2b 47 44 45 46 00 00 01 88 00 00 00 1e 00 00 00 1e 00 27 Data Ascii: wOFFCs`FFTMli+GDEF'GPOSGSUBp ltOS/2T`=cmapugasp\glyfd(G8a?head9p46hhea9!$
Sep 4, 2024 14:22:22.362891912 CEST	224	IN	Data Raw: e1 9b 59 ab 7e 9e 0c c0 69 90 ef 07 dd 3c 96 a2 60 5e c6 5a 06 6b 45 ac e5 88 9b 6a e2 a6 1c 0b ab c4 cd 37 e4 1d c6 4d ca 2d e2 48 23 fa fa d0 aa 9e d1 01 56 b5 85 99 ad 5c 9e 42 06 fb 2a d8 33 60 5f 04 7b 18 ec 29 b0 c7 c0 1e c5 73 5e bd 3e 00 Data Ascii: Y~i<`^ZkEj7M-H#V\B*3`_{)s^>\ry<9:<G0)mh[Jx+&K<F26<aq,Sf,oY-N[y0/<:9:YV'V
Sep 4, 2024 14:22:22.362904072 CEST	1236	IN	Data Raw: 0f f0 eb 7e ae 03 8a cd b0 74 c0 e6 60 25 af 56 8c 3e de ba a6 99 bd 89 f9 01 54 6a 61 44 2b b3 fb 19 31 c0 35 c8 e8 2f 2a 6c 2c 65 b1 94 b5 6b 9c b7 2c 0b 36 a3 33 d6 62 15 9a f9 c9 f9 36 72 6e 2f 7a f5 6b bc 4d 69 64 7b 91 72 0e 2b d3 16 4f 42 Data Ascii: ~t`%V>TjaD+15/l,ek,63b6rn/zkMid{r+OBQpS@V/=6zvR(YJOgerl+h6@w rDMy0Q<y5F^WQ_MkkVje]"F_#FM5+U-{x;U,G\ri6
Sep 4, 2024 14:22:22.362916946 CEST	1236	IN	Data Raw: 37 64 cf 52 66 ce 9b ba 6b 75 6b 9f 98 d4 73 d5 21 b8 1c 86 cb 90 f6 36 9f e0 77 f9 86 9e 3c f5 9f 75 ff be b6 02 5f 15 bd 67 be 22 7a d3 a8 7f d9 2a 9f 5b eb c2 4d 8f f7 b9 d2 9c 6e 6c e4 e6 6e 10 b9 69 ac 4f ac 8b dc 59 ac cf 61 fd f4 75 91 9b Data Ascii: 7dRfkuks!6w<u_g"z*[MnlniOYaukNi[L8^uz<SsekJt]$wqg%TJl@Q-RPt-jgVe,_m{yQ)d&tnk00V1dUYf/{mzv<
Sep 4, 2024 14:22:22.363033056 CEST	448	IN	Data Raw: 3a 8a 70 11 25 46 89 38 91 28 92 2d b7 2d 05 0e d7 34 37 cd 53 f3 d2 74 cd 57 0b d0 42 b5 70 2d dd 5b f7 f6 d5 2d ba 4d 77 d6 5d 75 4f dd 4b 6f a1 f7 d5 63 f5 c9 3e 39 e5 16 29 7f d5 53 54 8d 34 32 84 9f a2 06 8a 60 11 26 22 45 b4 88 15 09 8a 7a Data Ascii: :p%F8(--47StWBp-[-Mw]uOKoc>9)ST42`&"EzPQhZCMEu:IQ:/H.SdL2AQ^a\|`3w32OyFQjS4L#jf8UnOX~{09bU43q:jvuqj&4
Sep 4, 2024 14:22:22.363039017 CEST	1236	IN	Data Raw: 09 2b d9 2a fb 89 cf 7c a4 54 38 0a 1b 6f 59 c4 2b 5e f3 81 15 ac 67 39 1b 58 c7 26 36 b3 85 8d 6c 65 9b fa 9d ca 6e f6 b0 8b 9b 3c e2 09 73 31 28 c4 64 31 4f 79 4c c1 4f 6d d6 c6 90 00 00 00 00 01 00 01 ff ff 00 0f 78 9c 95 3c 09 60 93 55 d2 df Data Ascii: +*\|T8oY+^g9X&6len<s1(d1OyLOmx<`U;I6I"=$-[^4@Or7>m[\9vQu]]EUwW[YPiZm73o\ofrmwpnyH4%(\|\Brypf[.\s2i`KK
Sep 4, 2024 14:22:22.363050938 CEST	224	IN	Data Raw: 43 a5 33 99 f1 63 30 28 65 7a e2 06 e2 c6 40 63 56 fe 88 ac 82 c6 0d 3b 5a 0a e7 07 a7 c6 46 96 2d 8e af 89 0b 2a 74 51 8e 6f ca 48 9d 92 6a 22 b9 55 45 51 6b 6f ac 4d 36 34 3d 50 bf 27 ca 12 14 ac 5c e0 e2 13 7a d7 5c 9d 91 54 93 46 79 18 8b eb Data Ascii: C3c0(ez@cV;ZF-tQoHj"UEQkoM64=P'\z\TFy5yOql#q89fv{d[Iy+LLN*I"-8>.gI9&N$.?..c6=`2S$Rf():~r:
Sep 4, 2024 14:22:22.363066912 CEST	1236	IN	Data Raw: 99 85 22 1f 42 52 62 23 26 75 c4 4f d1 07 97 c8 94 d9 0d e9 a9 53 92 13 57 57 15 45 af bb be ae 8f 0d 41 c8 06 ef d0 bb a6 ea cc e4 ea 34 86 33 07 f5 e6 07 b4 31 4c ee ed 9a 43 a4 f7 1c a6 41 06 07 3d 82 71 76 75 c2 b9 99 b6 1e ce 8a 73 5d a9 85 Data Ascii: "BRb#&uOSWWEA431LCA=qvus]Z/i0S9(gGg%n]m "B \>pSY}GK5%g}W0(DXq",7#!])'DoAm2nDF.\==4Q3;\|Fv
Sep 4, 2024 14:22:22.363132000 CEST	224	IN	Data Raw: a7 85 c5 37 3e d3 b1 e2 be a6 f0 8c 70 ef a0 69 2f cf 8b 8b b9 4f dc bf 40 a4 73 3c d3 5b 8e ee 9d 86 fa e9 d5 bd 7f 44 bf 9d 68 bd 4a 12 37 6f c6 31 13 6d 3f 91 93 a2 bc 86 51 21 45 cb 89 36 82 bd 83 69 63 71 ef 69 e1 e7 33 bd 1b 1b 2c b0 5e 58 Data Ascii: 7>pi/O@s<[DhJ7o1m?Q!E6icqi3,^XvYXmfEppoggx(t/HMo'Wl;c?H+,(P76iCJ%4A==p#Du&-!%*'0
Sep 4, 2024 14:22:22.367768049 CEST	1236	IN	Data Raw: de ef cf 74 77 9f f9 1e 7c e0 94 70 17 86 09 35 9c 3d a6 5c 22 ca b7 c1 08 2a ca 1e 95 5c 0f 0b 84 23 c4 2c ec 83 b6 16 f8 d3 e6 79 42 f2 fd 74 6c b1 6d 39 94 90 5b 8c 97 54 28 d1 2e 41 c9 ba 75 82 8d dc 6a b5 ce 6a e5 57 48 fc 0e c1 31 cc 2e 80 Data Ascii: tw\|p5=\"*\#,yBtlm9[T(.AujjWH1.&u[VJ>#JtOlj%[v2z<?(C<eW1;7YIm%a{Pnv6_`FgaQ6(39reNtT2F-gco^T{S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49722	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:21.918205976 CEST	387	OUT	GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive Origin: http://ifdnzact.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:22.390223026 CEST	278	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:22 GMT Content-Type: application/font-woff Content-Length: 17264 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-4370" Access-Control-Allow-Origin: * Accept-Ranges: bytes
Sep 4, 2024 14:22:22.390296936 CEST	1236	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 70 00 10 00 00 00 00 71 40 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 43 54 00 00 00 1c 00 00 00 1c 6a aa b6 37 47 44 45 46 00 00 37 84 00 00 00 1e 00 00 00 1e 00 27 Data Ascii: wOFFCpq@FFTMCTj7GDEF7'GPOS7)MsMGSUB7 ltOS/2V`]@cmapugasp7\|glyfx)Gheadl66hhea!$
Sep 4, 2024 14:22:22.390383005 CEST	224	IN	Data Raw: 27 75 10 61 ed e5 79 7b d1 aa 23 ec b5 07 f0 c1 f7 17 31 5c be e6 00 00 78 9c ad 92 57 4c 55 41 10 86 bf bd 5c ae 8a 05 41 44 44 c5 c3 51 40 ac 28 22 82 0d 15 0b 76 11 b1 a1 82 2d c6 5e 12 51 23 24 f6 82 15 b0 c4 96 60 2f 88 1a 1b d8 22 1a 35 21 Data Ascii: 'uay{#1\xWLUA\ADDQ@("v-^Q#$`/"5!`x0A("Lfu#HTV(pMy5I$)E[$:p%F8(--47StWBp-[-Mw]uOKoc>9)ST42`&"E
Sep 4, 2024 14:22:22.390394926 CEST	1236	IN	Data Raw: 8a 7a cb f2 50 51 eb 68 1e 5a 43 4d ab a4 86 fc 45 75 f9 83 3a 49 51 85 a2 3a c8 2f b2 48 de 90 d7 e5 2e 99 2a 53 64 b2 4c 92 89 32 41 c6 cb 18 19 51 e1 5e 61 fb d1 d4 7c 60 de 33 ef 9a 77 cc 1c 33 db cc 32 4f 99 11 85 79 85 b9 46 99 51 6a 94 18 Data Ascii: zPQhZCMEu:IQ:/H.SdL2AQ^a\|`3w32OyFQjS4L#jf8UnOX~{09bU43q:jvuqj&4_h?iAKZ6v :LGBBWNzN/zD` 0Af#hX1
Sep 4, 2024 14:22:22.390404940 CEST	224	IN	Data Raw: e3 5c 8d ba 30 b3 8f ca 18 0b 06 93 19 31 f2 51 c9 75 61 4a 7d 10 28 64 72 65 06 18 f0 05 91 29 70 00 f8 6f 99 5f 5c 5d bf b0 fb ae f6 ac be 8e ec 9c 72 7e 71 ef aa ce f8 a4 e8 b4 f9 fa f0 a4 a2 e2 49 ad b5 c5 93 5e f7 af 7b b2 cf 35 51 ef 96 db Data Ascii: \01QuaJ}(dre)po_\]r~qI^{5Q>^71a^O"+SsHU4Nk&IvmMZx]N8I$wL\|`CK\|rGk?adXE#2`#BB2U2\|
Sep 4, 2024 14:22:22.390474081 CEST	1236	IN	Data Raw: 92 87 c9 42 7c 12 cd ba 30 99 d2 8b 32 c0 64 34 e8 20 b0 63 eb 23 11 6a eb a0 65 b0 22 71 aa 67 95 9f 3a 3c a3 b4 a9 4e 18 2e 5b 5d 38 27 75 61 bf d1 5f bd d0 e8 36 bf 75 61 5d 5c 5a 6c 45 4d 55 c9 ac ba 0e 43 6c 7a 4a be 21 22 a5 a0 b1 f2 60 72 Data Ascii: B\|02d4 c#je"qg:<N.[]8'ua_6ua]\ZlEMUClzJ!"`rJOQz1<L{r&~J}r8/\^6H/{"eYBeexy~WIq8&}8>Vb\_fy9**[Z5yE3w.<hqV>15sD=7G4
Sep 4, 2024 14:22:22.390526056 CEST	1236	IN	Data Raw: 9e e5 a3 5d 52 52 b6 a2 a4 78 75 f1 ea cf a0 e2 fb ef 9f e8 bd 37 37 63 ed d6 0b 3b e3 d5 b9 c2 c3 05 8d 25 83 9f 5c 14 2e fe 29 2d 34 28 14 ce 56 d7 dc dd dc 88 78 51 e6 5e 45 d9 97 33 4b 2b d7 52 23 18 07 ee f0 66 c1 6a 30 d0 9f 82 f8 35 6b 0e Data Ascii: ]RRxu77c;%\.)-4(VxQ^E3K+R#fj05kV\|>h98GFOFN=(;%=+<1Ux~=^1rJh$wTSjtONzSQ2L/[ G?4>ggi+Bu[>{@
Sep 4, 2024 14:22:22.390537024 CEST	448	IN	Data Raw: 7a 15 78 96 97 b7 af e8 bc 8b 5c 9d 31 e3 d0 21 16 bb 0f 5b c9 d6 e1 63 74 0d 15 8d dd 49 ce d6 e4 64 0e 20 0d 2d 6d 00 f9 86 c5 e5 da 30 33 09 e8 5c 61 25 75 6d 09 54 7e 23 50 ee 38 12 80 3a 12 44 b9 63 14 1d 68 2a 1e c8 68 08 4d a5 4e 29 37 6a Data Ascii: zx\1![ctId -m03\a%umT~#P8:Dch*hMN)7j5J%Y0cY%+[YV6pzo)zLb"DDUvd41Xr6tml"? W3pG4V90/<z}FNq`FeZ!NG
Sep 4, 2024 14:22:22.391968966 CEST	1236	IN	Data Raw: 14 42 fc 7d f7 95 ce 4c ad 6a c8 8b 4b 1a f8 eb 40 ed 74 e1 ed d6 a6 2d ad 1d a2 bd c0 93 2a 49 25 5f d2 88 d4 9b da 7a 4f 76 66 50 e2 9f 28 1c b2 d7 2c 16 df f6 a4 86 05 96 15 29 35 34 98 21 5f 0a ef 25 24 f5 75 09 2f 42 c8 9e 72 8a 63 2e 42 f9 Data Ascii: B}LjK@t-*I%_zOvfP(,)54!_%$u/Brc.Br.z)))D>E2y=L^TTbJr`sju49o#iar\wlm%XW^8}qqD29@Nu6^nHI,%"SI]]W
Sep 4, 2024 14:22:22.391983032 CEST	1236	IN	Data Raw: 18 86 b8 f2 7a e4 27 3e 2a b5 72 29 5d a7 ed 3c ed f2 e2 c6 b7 d7 be 2c 7f 73 cd fb eb 5f e0 5f 7a f9 ee d3 17 4c b2 3a 98 21 bc 02 d9 c2 93 75 32 53 dd aa 55 a2 5d 6d 1c fe 9a 7b 81 c5 79 34 9a 43 a9 e2 f1 b7 b1 a5 a5 05 9e 82 42 e1 05 21 85 3e Data Ascii: z'>*r)]<,s__zL:!u2SU]m{y4CB!>u(S0$F!viw-m4-3/e^sR+6fwKfBz\Ftv2#s'VzxwUG&WNp04!1 j%JCB7cG>T\|d9=
Sep 4, 2024 14:22:22.395186901 CEST	1236	IN	Data Raw: 98 5f c9 60 78 8e c6 45 af a2 71 ad 13 3a 39 5d 2b da cb cb db 47 63 44 16 6c 4c 4a e2 1c e0 2d 63 f0 fc 47 c3 d3 50 c9 d1 32 6f 8c de 59 2f 73 82 fc 86 5f f3 44 35 94 c4 45 fa b7 4d 0e 2a e5 9d 68 be 1a 17 9d 52 14 17 bd 8e 43 9f 20 ae d1 cb d6 Data Ascii: _`xEq:9]+GcDlLJ-cGP2oY/s_D5EMhRC FzZCHFCVr_3-/;8]Vq1J:lEdu^IgpY{TFxjy=[fH%^{!-f[b2(GX[Q0b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49729	208.91.196.46	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:23.205554008 CEST	275	OUT	GET /px.js?ch=1 HTTP/1.1 Host: ifdnzact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:23.663816929 CEST	1085	IN	HTTP/1.1 200 OK Date: Wed, 04 Sep 2024 12:22:23 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=125 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 76 61 72 20 61 62 70 3d 61 62 70 7c 7c 66 61 6c 73 65 3b 76 61 72 20 73 63 72 69 70 74 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 76 61 72 20 73 63 72 69 70 74 3d 73 63 72 69 70 74 73 5b 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 66 28 73 63 72 69 70 74 29 7b 76 61 72 20 71 75 65 72 79 3d 73 63 72 69 70 74 2e 73 72 63 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 2e 73 70 6c 69 74 28 22 26 22 29 3b 76 61 72 20 70 61 72 61 6d 73 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 71 75 65 72 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 70 61 72 61 6d 3d 71 75 65 72 79 5b 69 5d 2e 73 70 6c 69 74 28 22 3d 22 29 3b 70 61 72 61 6d 73 5b 70 61 72 61 6d 5b 30 5d 5d 3d 70 61 72 61 6d 5b 31 5d 7d 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 31 29 61 62 70 3d 74 72 75 65 3b 65 6c 73 65 20 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 32 29 61 62 70 3d 61 62 70 26 [TRUNCATED] Data Ascii: var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};
Sep 4, 2024 14:23:08.672236919 CEST	6	OUT	Data Raw: 00 Data Ascii:
Sep 4, 2024 14:23:53.688186884 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49730	208.91.196.46	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:23.205957890 CEST	275	OUT	GET /px.js?ch=2 HTTP/1.1 Host: ifdnzact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:23.672898054 CEST	1085	IN	HTTP/1.1 200 OK Date: Wed, 04 Sep 2024 12:22:23 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=127 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 76 61 72 20 61 62 70 3d 61 62 70 7c 7c 66 61 6c 73 65 3b 76 61 72 20 73 63 72 69 70 74 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 76 61 72 20 73 63 72 69 70 74 3d 73 63 72 69 70 74 73 5b 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 66 28 73 63 72 69 70 74 29 7b 76 61 72 20 71 75 65 72 79 3d 73 63 72 69 70 74 2e 73 72 63 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 2e 73 70 6c 69 74 28 22 26 22 29 3b 76 61 72 20 70 61 72 61 6d 73 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 71 75 65 72 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 70 61 72 61 6d 3d 71 75 65 72 79 5b 69 5d 2e 73 70 6c 69 74 28 22 3d 22 29 3b 70 61 72 61 6d 73 5b 70 61 72 61 6d 5b 30 5d 5d 3d 70 61 72 61 6d 5b 31 5d 7d 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 31 29 61 62 70 3d 74 72 75 65 3b 65 6c 73 65 20 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 32 29 61 62 70 3d 61 62 70 26 [TRUNCATED] Data Ascii: var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};
Sep 4, 2024 14:23:08.686019897 CEST	6	OUT	Data Raw: 00 Data Ascii:
Sep 4, 2024 14:23:53.703424931 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49732	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:23.237715960 CEST	293	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:23.686765909 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:23 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Fri, 17 Feb 2023 06:44:26 GMT Connection: keep-alive ETag: "63ef224a-20f3" Expires: Wed, 18 Sep 2024 12:22:23 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 2a 2f 0d 0a 76 61 72 20 73 68 6f 77 50 6f 70 3d 31 3b 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 53 65 61 72 63 68 54 65 78 74 28 74 29 7b 74 2e 76 61 6c 75 65 3d 22 22 2c 74 2e 73 65 6c 65 63 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 72 65 70 6c 61 63 65 53 74 72 69 6e 67 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 65 2c 6e 2c 22 67 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 75 62 6d 69 74 53 65 61 72 63 68 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2b 3d 67 65 6e 65 72 61 74 65 42 72 6f 77 4c 6f 67 55 52 4c 28 22 73 72 63 71 72 79 22 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 74 5d 2c 30 3d 3d 64 2e 65 6c 65 6d 65 6e 74 73 2e 71 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 7c 7c 22 45 6e 74 65 72 20 4b 65 79 77 6f 72 64 [TRUNCATED] Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function change
Sep 4, 2024 14:22:23.686822891 CEST	1236	IN	Data Raw: 53 74 61 74 75 73 28 74 29 7b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 61 64 64 62 6f 6f 6b 6d 61 72 6b 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 41 73 48 6f 6d 65 50 61 67 65 28 74 2c 65 29 7b 72 65 Data Ascii: Status(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate(){var t=new Array("Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"),e=new Array("January","February","March","April
Sep 4, 2024 14:22:23.686835051 CEST	1236	IN	Data Raw: 43 6c 69 63 6b 55 52 4c 28 6c 69 6e 6b 73 5b 69 5d 2c 22 6f 6c 6f 64 22 29 2c 6c 69 6e 6b 73 5b 69 5d 2e 69 6e 6e 65 72 48 54 4d 4c 3d 74 65 6d 70 44 61 74 61 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 6f 64 69 66 79 4b Data Ascii: ClickURL(links[i],"olod"),links[i].innerHTML=tempData)}catch(t){}}function modifyKeywordClickURL(t,e){return t.href=t.href+generateBrowLogURL(e),"undefined"!=typeof prctu&&0<prctu.length&&(t.href=prctu+getEscapedString(t.href)),!0}function gen
Sep 4, 2024 14:22:23.686945915 CEST	1236	IN	Data Raw: 73 2e 67 65 74 4c 6f 63 61 6c 54 69 6d 65 5a 6f 6e 65 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2b 74 68 69 73 2e 66 64 2b 74 68 69 73 2e 67 65 74 53 63 72 65 65 6e 48 65 69 67 68 74 28 29 2b 74 68 69 73 2e 66 64 2b 74 68 69 73 2e 67 65 74 53 63 72 Data Ascii: s.getLocalTimeZone().toString()+this.fd+this.getScreenHeight()+this.fd+this.getScreenWidth()+this.fd+(this.isCookieSupported()?1:0).toString()+this.fd+this.getABPStatus()),this.browserdata},this.getMousePositionData=function(){return this.fd+m
Sep 4, 2024 14:22:23.686953068 CEST	1236	IN	Data Raw: 5f 54 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 7d 63 61 74 63 68 28 74 29 7b 65 3d 30 7d 72 65 74 75 72 6e 20 65 7d 2c 5f 77 77 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 30 3b 74 72 79 Data Ascii: _Top.document.body.clientHeight)}catch(t){e=0}return e},_ww:function(){var e=0;try{"number"==typeof this._Top.window.innerWidth?e=this._Top.window.innerWidth:this._Top.document.documentElement&&this._Top.document.documentElement.clientWidth?e=
Sep 4, 2024 14:22:23.686964989 CEST	1236	IN	Data Raw: 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 65 77 65 62 6b 69 74 22 29 26 26 28 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 62 6c 75 72 28 29 2c 74 68 69 73 2e 5f 54 6f 70 Data Ascii: userAgent.toLowerCase().indexOf("applewebkit")&&(this._Top.window.blur(),this._Top.window.focus()),_npW.Init=function(e){with(e)Params=e.Params,Main=function(){void 0===window.mozPaintCount\|\|(t=window.open("about:blank"))&&t.close();var t=Para
Sep 4, 2024 14:22:23.686969995 CEST	225	IN	Data Raw: 68 6f 77 50 6f 70 26 26 28 73 68 6f 77 50 6f 70 3d 30 29 2c 21 31 3b 31 21 3d 73 68 6f 77 50 6f 70 7c 7c 72 65 6e 64 65 72 46 41 43 50 28 74 29 7c 7c 73 68 70 70 28 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 68 70 70 Data Ascii: howPop&&(showPop=0),!1;1!=showPop\|\|renderFACP(t)\|\|shpp(t)}catch(t){}}function shpp(t){if("undefined"!=typeof __pp&&1==showPop&&!renderFACP(t))try{if(t\|\|((t=window.event\|\|window.Event).cancelBubble=!0),t.button&&2==t.button)re
Sep 4, 2024 14:22:23.773627996 CEST	1135	IN	Data Raw: 74 75 72 6e 3b 74 72 79 7b 76 61 72 20 65 3d 21 31 3b 69 73 49 45 28 29 26 26 28 65 3d 73 68 64 73 70 28 74 29 29 2c 65 7c 7c 22 6c 64 22 3d 3d 74 7c 7c 28 76 6f 69 64 20 30 21 3d 3d 5f 5f 70 70 2e 6b 70 26 26 76 6f 69 64 20 30 21 3d 3d 5f 5f 70 Data Ascii: turn;try{var e=!1;isIE()&&(e=shdsp(t)),e\|\|"ld"==t\|\|(void 0!==__pp.kp&&void 0!==__pp.kp.u&&__pp.kp.u&&0<__pp.kp.u.length&&0==__pp.kp.pd&&(__pp.kp.pd=!0,"ex"==t&&(__pp.kp.u=__pp.kp.u+"&_onx_=1"),_skPU.doPU(__pp.kp.u,__pp.kp.w,__pp.kp.h,__pp.kp.p
Sep 4, 2024 14:23:08.780018091 CEST	6	OUT	Data Raw: 00 Data Ascii:
Sep 4, 2024 14:23:53.796674967 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49733	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:23.246309042 CEST	297	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:23.704503059 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:23 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Wed, 18 Sep 2024 12:22:23 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 30 f2 00 2c c1 00 2c 37 03 90 81 f9 8f 29 b2 13 3b 91 25 a0 9b ae dd a1 ab d6 7a bc 0f e7 7c b7 4e fd b0 ab 8a 28 f1 09 c8 13 96 00 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c [TRUNCATED] Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0P%@a@a0@a0P0P(P(P((@a@a0@a0P0P(P(P((@a@a0@aPeaLt[=ul=HhOnNc=e{l[,lu_cnk,n;~'^a$sbV&aqcm3Ts*l#zXtH+8c/BH1>CXHay/AIl2g}s/Q8{.;R91oeGo-V:;u$5'.lW:Q\v_:z4',l]2z4'e,~O]%>\|v_2U}8u=hL4$7aj;eMhL\>',/]I,{}a91\|Jz
Sep 4, 2024 14:22:23.704559088 CEST	1236	IN	Data Raw: b1 73 e2 d5 85 ed aa 5b 43 07 31 c7 b0 d3 f6 53 17 56 dd 8c e8 20 e6 18 96 72 88 08 4b e8 20 e6 18 96 f8 01 7c 65 61 db 1a 97 d0 8b 98 d7 b0 f2 73 62 f8 8c 1a 3f 6a d3 c2 07 f0 95 33 ce 55 85 55 39 23 1e fd 63 98 c5 54 ba 3f 16 93 15 b6 b5 82 34 Data Ascii: s[C1SV rK \|easb?j3UU9#cT?4JYA)O(W.:+FOQX3DWsn]{d^Va4\>gDbvU1aEjass+e9<lNTX3KVaV\|
Sep 4, 2024 14:22:23.704565048 CEST	777	IN	Data Raw: 25 2e ef 57 dd a0 c2 fa 1c c0 aa e8 eb 95 1b c5 d4 5b fa 3a 36 49 9f c6 4e 1c c7 e2 da be 36 5d 2d 64 90 a8 9a 5d f2 ed da c6 e2 aa 17 e6 75 3d 7d 75 9d 7f 66 3b cf b2 a2 7d d2 e7 62 71 d3 a3 b0 1e ad de d5 d4 97 a3 98 43 58 c1 c6 de 5f 79 c4 e0 Data Ascii: %.W[:6IN6]-d]u=}uf;}bqCX_y:RHn\nv[U+,UnCX9r}K5G.ek8}`]~y/GXTW=)l`c~yq,%+,~Oaxpz[5$%4
Sep 4, 2024 14:22:23.704581976 CEST	1236	IN	Data Raw: 21 b1 2c 7d f5 28 ac a9 c6 0c 89 c6 c4 84 be 2e 15 f6 da d8 93 21 11 63 e2 49 4f 97 36 4e 5c 5e aa 26 1a 33 24 ba 4d cc e8 ab 4f 61 6d 34 e6 b9 d9 a3 73 46 5f fd 0a 7b 55 7d 63 8a 70 d7 91 d1 57 ef c2 3e 55 fe c7 06 dc 73 b8 eb 18 e6 4b df 83 7b Data Ascii: !,}(.!cIO6N\^&3$MOam4sF_{U}cpW>UsK{^/A}_dwo{gCQ'rX$#R;&?zv'\|\| !Wh@i]izP^:=c'v_1C/=COs\|E^0x9_j]_
Sep 4, 2024 14:22:23.704596996 CEST	1236	IN	Data Raw: 88 ea 1c 66 c4 8a 50 4c 6d b1 79 1f 47 20 0c 84 bd df 0a e3 a2 11 45 45 a2 58 ff 23 4c fb 6e c1 4c 84 95 f8 de 53 39 da 43 cd da 71 96 34 40 b5 1d c6 14 9a f6 ed 02 61 20 ec 7d 1f 51 f2 88 14 67 b8 28 9d 72 a6 f2 7a 5a 9d 08 38 60 25 be a3 11 63 Data Ascii: fPLmyG EEX#LnLS9Cq4@a }Qg(rzZ8`%crK_eZ'FKDu9<Q "U_l\|Gd&e}bT'!v;0becL:;#.\|7D^cu?,6MA{[#gt"S6^/Kt
Sep 4, 2024 14:22:23.704602957 CEST	1236	IN	Data Raw: cc 7b a4 3a 29 2c b6 6e 62 39 b5 c2 ba 8b 7b 23 6f 54 31 00 91 08 99 78 f0 93 61 2f 00 cb 73 89 e5 5f 5e 76 44 22 d5 1b 71 f2 22 01 76 ae bd 0c ab 13 41 04 bc 8e 63 e2 e6 cb b4 88 cb 5c a2 a6 34 07 62 e8 7b 1d 52 cd 5a a5 b3 62 3c b2 9f 88 14 86 Data Ascii: {:),nb9{#oT1xa/s_^vD"q"vAc\4b{RZb<$vX#6<\|yu)U~Ho$x@;%SAV`estd"Mb#D0$c1Xyc67'$c=C\&>~u"1<e^YX=jeuu%sk,=H
Sep 4, 2024 14:22:23.704607964 CEST	1236	IN	Data Raw: 7f 8b a9 be 08 d3 6c eb 28 5d 32 fc 38 10 e3 01 26 da 9b d2 e5 f2 92 bd 8e a4 16 fb 29 4c 19 a2 f6 4f 63 73 21 a6 bd 42 4c 7b dc c2 06 35 fc 40 10 a3 69 44 77 0d ba 90 bf 3b ac 9c 31 09 75 0a 8b 7e be 97 fa 19 ce cd 75 f8 ca ab 5d 8f 2f 98 00 46 Data Ascii: l(]28&)LOcs!BL{5@iDw;1u~u]/FisKD9!I{'YRp+e8\G,+IYM$zEbK;[Z/!{72,tWtR!"r^a!l9R,:;'/HKZ/t!)H
Sep 4, 2024 14:22:23.704685926 CEST	1236	IN	Data Raw: ab 9f 31 c3 62 9a e5 af eb 74 05 b1 f1 21 ec 9e e4 40 13 2e 7a 93 67 da 27 8c 24 87 a8 3a 70 3a 19 d6 5c d6 e5 76 3b 61 13 db 78 88 14 f4 e3 85 8a b6 fd dc 3d fb 98 14 85 58 08 2d 84 bd 00 61 2a f3 69 cf 0d a6 c5 97 58 d0 28 ad 80 98 76 3e c1 cb Data Ascii: 1bt!@.zg'$:p:\v;ax=X-aiX(v>:Z%W/z:]$q^/[y;dX9J=`am=4bJ4a\|Z"L$P6:ym%Js),P6#)8e0,Usc;PK&Ib
Sep 4, 2024 14:22:23.704691887 CEST	1120	IN	Data Raw: 31 28 66 fb e6 fe 3e 49 3c 40 98 c6 af ad 2f ff 2d 92 07 30 b9 9e d0 47 5a 31 0b 4f 5f 8b 02 04 7f 6c 64 e7 02 c7 40 2a 51 b4 75 14 15 2b ce 6a a2 bb c0 f6 bd 5a fa bb a4 43 b5 52 f4 4d 5e 59 f5 d3 34 c3 0e cb f8 23 84 75 12 45 7b 05 89 46 d1 65 Data Ascii: 1(f>I<@/-0GZ1O_ld@*Qu+jZCRM^Y4#uE{Fe\@dQ7].pAVMZ7iTE2bj;@X7nP,>HiARvb,U.y\-{3{y7!Zn!},!neWO~!BIWd_h2
Sep 4, 2024 14:22:23.704704046 CEST	1236	IN	Data Raw: 45 d8 c1 94 98 ab 10 93 bd 48 92 c7 f0 a2 2c 91 c1 b2 f8 84 33 4d be cc b5 2e 7d bc a6 a3 ce e6 5a a6 c3 e2 35 03 dd ec c9 77 94 0e d7 d2 27 d4 33 fd ab 70 57 ac da 89 3a 08 3c db b9 ae fe 01 c2 f6 ed 9b 87 3c 1e 75 96 79 61 e4 38 a6 57 c6 75 ea Data Ascii: EH,3M.}Z5w'3pW:<<uya8Wu_+7<.tPG5f2eH/fA3l)1#!Tssy$%i_uvRPU3ZC(iMkmHm\|L<#%zhC6C4A1C
Sep 4, 2024 14:22:23.709677935 CEST	1236	IN	Data Raw: d8 c8 5f b8 76 d4 13 c1 d4 5a af da c5 e2 d4 af e4 c6 22 bc 9e 7e 23 81 71 b6 aa 43 7a 8f b5 38 d9 e0 44 6a 40 5d 86 a6 02 9b 34 f6 d8 ed f2 0e 7b c9 9f bb 9a 09 70 dd 36 b3 f6 72 ed 46 88 3d 08 eb d3 27 34 74 03 da 29 58 7b e4 74 d9 2f 31 14 f0 Data Ascii: _vZ"~#qCz8Dj@]4{p6rF='4t)X{t/1FBUOaguA-OW`eX5IcFTDt#;a}iS56lQ9z.X :QOTGcW\M(+*6o&,x}6aTaT 9p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49734	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:23.633280039 CEST	300	OUT	GET /__media__/pics/28905/arrrow.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:24.082487106 CEST	609	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:24 GMT Content-Type: image/png Content-Length: 283 Last-Modified: Tue, 04 Jan 2022 14:44:27 GMT Connection: keep-alive ETag: "61d45d4b-11b" Expires: Wed, 18 Sep 2024 12:22:24 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 1b 08 03 00 00 00 ad 28 94 ae 00 00 00 48 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 05 7a f2 f8 00 00 00 17 74 52 4e 53 00 74 db fa 40 1b e0 0e 05 66 55 f4 bd ec 32 27 d1 b0 ca 82 a6 64 67 ff c5 fb 8e 00 00 00 6b 49 44 41 54 18 d3 7d d1 c9 0e 80 20 0c 04 50 c4 a5 e0 86 7b ff ff 4f 35 f4 e0 c8 24 f6 f8 c2 d2 76 9c 93 18 c5 61 89 57 ed 12 4a d4 a7 a6 b9 94 0f 49 97 69 68 5e 4a 46 35 50 eb 8d 7a a0 85 48 b6 4c 7a 02 8d 46 d5 2f 85 d5 68 07 3a 8c a0 89 e0 8b 7b 74 86 de a1 bf 18 ca 9e 69 2e 9a 9d f6 c3 3b bc 68 cf 9c 05 e7 45 99 de f1 b5 0e ae 42 db 93 36 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR(HPLTEGpLztRNSt@fU2'dgkIDAT} P{O5$vaWJIih^JF5PzHLzF/h:{ti.;hEB6IENDB`
Sep 4, 2024 14:23:09.087343931 CEST	6	OUT	Data Raw: 00 Data Ascii:
Sep 4, 2024 14:23:54.093265057 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49743	185.53.178.52	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:26.901185036 CEST	273	OUT	GET /favicon.ico HTTP/1.1 Host: gooel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:27.548114061 CEST	230	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:27 GMT Content-Type: image/x-icon Content-Length: 0 Connection: keep-alive Last-Modified: Thu, 29 Aug 2024 07:41:46 GMT ETag: "66d0263a-0" Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49753	208.91.196.46	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:37.962904930 CEST	1089	OUT	GET /Download_Software.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=707&ki=8849840&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230%23455%23509 HTTP/1.1 Host: ifdnzact.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Referer: http://ifdnzact.com/?dn=gooel.com&pid=9PO755G95 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:38.767411947 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 04 Sep 2024 12:22:38 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Set-Cookie: vsid=921vr472998158401077086; expires=Mon, 03-Sep-2029 12:22:38 GMT; Max-Age=157680000; path=/; domain=ifdnzact.com; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_VQlxrv7NmjFLJHteFPsur7B+FDmmSZ+ox2CoLhlCehktPZaVC0617xkDeEyAFh7kxaKHxQEtnpfUz24+AOdKYg== Keep-Alive: timeout=5, max=98 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 36 62 34 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 Data Ascii: 6b4b<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="htt
Sep 4, 2024 14:22:38.767429113 CEST	224	IN	Data Raw: 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 Data Ascii: ps://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|windo
Sep 4, 2024 14:22:38.767448902 CEST	1236	IN	Data Raw: 77 2e 63 6d 70 5f 69 64 3c 31 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 69 64 3d 30 7d 69 66 28 21 28 22 63 6d 70 5f 63 64 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 69 64 3d 22 32 31 66 64 63 61 32 32 38 Data Ascii: w.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){w
Sep 4, 2024 14:22:38.767462015 CEST	1236	IN	Data Raw: 69 6f 6e 2e 68 61 73 68 3b 76 61 72 20 65 3d 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 76 61 72 20 61 3d 22 6c 61 6e 67 75 61 67 65 73 22 20 69 6e 20 6e 61 76 69 67 61 74 6f 72 3f 6e 61 76 69 67 61 74 6f 72 2e 6c 61 6e 67 75 61 67 65 73 3a Data Ascii: ion.hash;var e=location.search;var a="languages" in navigator?navigator.languages:[];if(f.indexOf("cmplang=")!=-1){c.push(f.substr(f.indexOf("cmplang=")+8,2).toUpperCase())}else{if(e.indexOf("cmplang=")!=-1){c.push(e.substr(e.indexOf("cmplang=
Sep 4, 2024 14:22:38.767481089 CEST	1236	IN	Data Raw: 64 3d 6c 6f 63 61 74 69 6f 6e 3b 69 66 28 64 2e 68 61 73 68 2e 69 6e 64 65 78 4f 66 28 69 29 21 3d 2d 31 29 7b 77 3d 64 2e 68 61 73 68 2e 73 75 62 73 74 72 28 64 2e 68 61 73 68 2e 69 6e 64 65 78 4f 66 28 69 29 2b 73 2c 39 39 39 39 29 7d 65 6c 73 Data Ascii: d=location;if(d.hash.indexOf(i)!=-1){w=d.hash.substr(d.hash.indexOf(i)+s,9999)}else{if(d.search.indexOf(i)!=-1){w=d.search.substr(d.search.indexOf(i)+s,9999)}else{return e}}if(w.indexOf("&")!=-1){w=w.substr(0,w.indexOf("&"))}return w}var k=("c
Sep 4, 2024 14:22:38.767493963 CEST	672	IN	Data Raw: 75 72 72 65 6e 74 53 63 72 69 70 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 7d 65 6c 73 65 7b 69 66 28 75 2e 62 6f 64 79 29 7b 75 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 7d 65 6c Data Ascii: urrentScript.parentElement.appendChild(j)}else{if(u.body){u.body.appendChild(j)}else{var t=v("body");if(t.length==0){t=v("div")}if(t.length==0){t=v("span")}if(t.length==0){t=v("ins")}if(t.length==0){t=v("script")}if(t.length==0){t=v("head")}if
Sep 4, 2024 14:22:38.767504930 CEST	1236	IN	Data Raw: 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 7b 75 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 7d 65 6c 73 65 7b 69 66 Data Ascii: .currentScript.parentElement){u.currentScript.parentElement.appendChild(j)}else{if(u.body){u.body.appendChild(j)}else{var t=v("body");if(t.length==0){t=v("div")}if(t.length==0){t=v("span")}if(t.length==0){t=v("ins")}if(t.length==0){t=v("script
Sep 4, 2024 14:22:38.767549038 CEST	1236	IN	Data Raw: 5f 63 6d 70 2e 61 3d 5f 5f 63 6d 70 2e 61 7c 7c 5b 5d 3b 69 66 28 21 61 2e 6c 65 6e 67 74 68 29 7b 72 65 74 75 72 6e 20 5f 5f 63 6d 70 2e 61 7d 65 6c 73 65 7b 69 66 28 61 5b 30 5d 3d 3d 3d 22 70 69 6e 67 22 29 7b 69 66 28 61 5b 31 5d 3d 3d 3d 32 Data Ascii: _cmp.a=__cmp.a\|\|[];if(!a.length){return __cmp.a}else{if(a[0]==="ping"){if(a[1]===2){a[2]({gdprApplies:gdprAppliesGlobally,cmpLoaded:false,cmpStatus:"stub",displayStatus:"hidden",apiVersion:"2.2",cmpId:31},true)}else{a[2](false,true)}}else{if(a
Sep 4, 2024 14:22:38.767565966 CEST	1236	IN	Data Raw: 3d 66 61 6c 73 65 3b 5f 5f 67 70 70 2e 65 3d 5f 5f 67 70 70 2e 65 7c 7c 5b 5d 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 5f 5f 67 70 70 2e 65 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 69 66 28 5f 5f 67 70 70 2e 65 5b 64 5d 2e 69 64 3d 3d 65 29 7b Data Ascii: =false;__gpp.e=__gpp.e\|\|[];for(var d=0;d<__gpp.e.length;d++){if(__gpp.e[d].id==e){__gpp.e[d].splice(d,1);h=true;break}}return{eventName:"listenerRemoved",listenerId:e,data:h,pingData:window.cmp_gpp_ping()}}else{if(g==="getGPPData"){return{sect
Sep 4, 2024 14:22:38.767579079 CEST	1236	IN	Data Raw: 6c 49 64 3a 62 2e 63 61 6c 6c 49 64 7d 7d 3b 64 2e 73 6f 75 72 63 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 61 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 3a 65 2c 22 2a 22 29 7d 2c 62 2e 70 61 72 61 6d 65 74 65 72 29 7d 69 66 28 74 79 Data Ascii: lId:b.callId}};d.source.postMessage(a?JSON.stringify(e):e,"*")},b.parameter)}if(typeof(c)==="object"&&c!==null&&"__gppCall" in c){var b=c.__gppCall;window.__gpp(b.command,function(h,g){var e={__gppReturn:{returnValue:h,success:g,callId:b.callI
Sep 4, 2024 14:22:38.772366047 CEST	1236	IN	Data Raw: 64 6f 77 2e 63 6d 70 5f 64 69 73 61 62 6c 65 67 70 70 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 61 64 64 46 72 61 6d 65 28 22 5f 5f 67 70 70 4c 6f 63 61 74 6f 72 22 29 7d 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 65 74 53 74 75 62 28 22 5f 5f 63 6d 70 22 Data Ascii: dow.cmp_disablegpp){window.cmp_addFrame("__gppLocator")}window.cmp_setStub("__cmp");if(!("cmp_disabletcf" in window)\|\|!window.cmp_disabletcf){window.cmp_setStub("__tcfapi")}if(!("cmp_disableusp" in window)\|\|!window.cmp_disableusp){window.cmp_s
Sep 4, 2024 14:22:38.917352915 CEST	936	OUT	GET /px.js?ch=1 HTTP/1.1 Host: ifdnzact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/Download_Software.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=707&ki=8849840&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=933vr472998158622328902
Sep 4, 2024 14:22:39.020808935 CEST	1085	IN	HTTP/1.1 200 OK Date: Wed, 04 Sep 2024 12:22:38 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=119 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 76 61 72 20 61 62 70 3d 61 62 70 7c 7c 66 61 6c 73 65 3b 76 61 72 20 73 63 72 69 70 74 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 76 61 72 20 73 63 72 69 70 74 3d 73 63 72 69 70 74 73 5b 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 66 28 73 63 72 69 70 74 29 7b 76 61 72 20 71 75 65 72 79 3d 73 63 72 69 70 74 2e 73 72 63 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 2e 73 70 6c 69 74 28 22 26 22 29 3b 76 61 72 20 70 61 72 61 6d 73 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 71 75 65 72 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 70 61 72 61 6d 3d 71 75 65 72 79 5b 69 5d 2e 73 70 6c 69 74 28 22 3d 22 29 3b 70 61 72 61 6d 73 5b 70 61 72 61 6d 5b 30 5d 5d 3d 70 61 72 61 6d 5b 31 5d 7d 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 31 29 61 62 70 3d 74 72 75 65 3b 65 6c 73 65 20 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 32 29 61 62 70 3d 61 62 70 26 [TRUNCATED] Data Ascii: var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49752	208.91.196.46	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:38.549417973 CEST	1019	OUT	GET /Download_Software.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=707&ki=8849840&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230 HTTP/1.1 Host: ifdnzact.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:38.854079008 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 04 Sep 2024 12:22:38 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Set-Cookie: vsid=933vr472998158622328902; expires=Mon, 03-Sep-2029 12:22:38 GMT; Max-Age=157680000; path=/; domain=ifdnzact.com; HttpOnly X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_eRp/Ux47hSSPziVp6trFx3MOVJwRlxMW7HMca1v0RGDUb5APOi45DQeqB7cu3gYkxzIVyFe7vg9JYC8F3uwJNg== Keep-Alive: timeout=5, max=127 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 36 62 34 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 Data Ascii: 6b4b<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="ht
Sep 4, 2024 14:22:38.854196072 CEST	224	IN	Data Raw: 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d Data Ascii: tps://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppliesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|wind
Sep 4, 2024 14:22:38.854207993 CEST	1236	IN	Data Raw: 6f 77 2e 63 6d 70 5f 69 64 3c 31 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 69 64 3d 30 7d 69 66 28 21 28 22 63 6d 70 5f 63 64 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 69 64 3d 22 32 31 66 64 63 61 32 32 Data Ascii: ow.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" in window)){window.cmp_host="a.delivery.consentmanager.net"}if(!("cmp_cdn" in window)){
Sep 4, 2024 14:22:38.854219913 CEST	1236	IN	Data Raw: 74 69 6f 6e 2e 68 61 73 68 3b 76 61 72 20 65 3d 6c 6f 63 61 74 69 6f 6e 2e 73 65 61 72 63 68 3b 76 61 72 20 61 3d 22 6c 61 6e 67 75 61 67 65 73 22 20 69 6e 20 6e 61 76 69 67 61 74 6f 72 3f 6e 61 76 69 67 61 74 6f 72 2e 6c 61 6e 67 75 61 67 65 73 Data Ascii: tion.hash;var e=location.search;var a="languages" in navigator?navigator.languages:[];if(f.indexOf("cmplang=")!=-1){c.push(f.substr(f.indexOf("cmplang=")+8,2).toUpperCase())}else{if(e.indexOf("cmplang=")!=-1){c.push(e.substr(e.indexOf("cmplang
Sep 4, 2024 14:22:38.854232073 CEST	1236	IN	Data Raw: 20 64 3d 6c 6f 63 61 74 69 6f 6e 3b 69 66 28 64 2e 68 61 73 68 2e 69 6e 64 65 78 4f 66 28 69 29 21 3d 2d 31 29 7b 77 3d 64 2e 68 61 73 68 2e 73 75 62 73 74 72 28 64 2e 68 61 73 68 2e 69 6e 64 65 78 4f 66 28 69 29 2b 73 2c 39 39 39 39 29 7d 65 6c Data Ascii: d=location;if(d.hash.indexOf(i)!=-1){w=d.hash.substr(d.hash.indexOf(i)+s,9999)}else{if(d.search.indexOf(i)!=-1){w=d.search.substr(d.search.indexOf(i)+s,9999)}else{return e}}if(w.indexOf("&")!=-1){w=w.substr(0,w.indexOf("&"))}return w}var k=("
Sep 4, 2024 14:22:38.854243040 CEST	1236	IN	Data Raw: 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 7d 65 6c 73 65 7b 69 66 28 75 2e 62 6f 64 79 29 7b 75 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6a 29 7d 65 Data Ascii: currentScript.parentElement.appendChild(j)}else{if(u.body){u.body.appendChild(j)}else{var t=v("body");if(t.length==0){t=v("div")}if(t.length==0){t=v("span")}if(t.length==0){t=v("ins")}if(t.length==0){t=v("script")}if(t.length==0){t=v("head")}i
Sep 4, 2024 14:22:38.854254961 CEST	896	IN	Data Raw: 63 64 6e 2b 22 2f 64 65 6c 69 76 65 72 79 2f 65 6d 70 74 79 2e 68 74 6d 6c 22 7d 61 2e 6e 61 6d 65 3d 62 3b 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 49 6e 74 65 6e 74 69 6f 6e 61 6c 6c 79 20 68 69 64 64 65 6e 2c 20 Data Ascii: cdn+"/delivery/empty.html"}a.name=b;a.setAttribute("title","Intentionally hidden, please ignore");a.setAttribute("role","none");a.setAttribute("tabindex","-1");document.body.appendChild(a)}else{window.setTimeout(window.cmp_addFrame,10,b)}}};wi
Sep 4, 2024 14:22:38.854269028 CEST	1236	IN	Data Raw: 6c 73 65 2c 74 72 75 65 29 7d 7d 65 6c 73 65 7b 69 66 28 61 5b 30 5d 3d 3d 3d 22 67 65 74 55 53 50 44 61 74 61 22 29 7b 61 5b 32 5d 28 7b 76 65 72 73 69 6f 6e 3a 31 2c 75 73 70 53 74 72 69 6e 67 3a 77 69 6e 64 6f 77 2e 63 6d 70 5f 72 63 28 22 22 Data Ascii: lse,true)}}else{if(a[0]==="getUSPData"){a[2]({version:1,uspString:window.cmp_rc("")},true)}else{if(a[0]==="getTCData"){__cmp.a.push([].slice.apply(a))}else{if(a[0]==="addEventListener"\|\|a[0]==="removeEventListener"){__cmp.a.push([].slice.apply
Sep 4, 2024 14:22:38.854281902 CEST	1236	IN	Data Raw: 50 50 44 61 74 61 22 29 7b 72 65 74 75 72 6e 7b 73 65 63 74 69 6f 6e 49 64 3a 33 2c 67 70 70 56 65 72 73 69 6f 6e 3a 31 2c 73 65 63 74 69 6f 6e 4c 69 73 74 3a 5b 5d 2c 61 70 70 6c 69 63 61 62 6c 65 53 65 63 74 69 6f 6e 73 3a 5b 30 5d 2c 67 70 70 Data Ascii: PPData"){return{sectionId:3,gppVersion:1,sectionList:[],applicableSections:[0],gppString:"",pingData:window.cmp_gpp_ping()}}else{if(g==="hasSection"\|\|g==="getSection"\|\|g==="getField"){return null}else{__gpp.q.push([].slice.apply(a))}}}}}};wind
Sep 4, 2024 14:22:38.854295015 CEST	448	IN	Data Raw: 65 73 73 3a 67 2c 63 61 6c 6c 49 64 3a 62 2e 63 61 6c 6c 49 64 7d 7d 3b 64 2e 73 6f 75 72 63 65 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 61 3f 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 3a 65 2c 22 2a 22 29 7d 2c 22 70 61 72 61 6d 65 74 65 Data Ascii: ess:g,callId:b.callId}};d.source.postMessage(a?JSON.stringify(e):e,"*")},"parameter" in b?b.parameter:null,"version" in b?b.version:1)}};window.cmp_setStub=function(a){if(!(a in window)\|\|(typeof(window[a])!=="function"&&typeof(window[a])!=="ob
Sep 4, 2024 14:22:38.859117985 CEST	1236	IN	Data Raw: 5f 73 65 74 47 70 70 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 28 61 20 69 6e 20 77 69 6e 64 6f 77 29 7c 7c 28 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 Data Ascii: _setGppStub=function(a){if(!(a in window)\|\|(typeof(window[a])!=="function"&&typeof(window[a])!=="object"&&(typeof(window[a])==="undefined"\|\|window[a]!==null))){window[a]=window.cmp_gppstub;window[a].msgHandler=window.cmp_msghandler;window.addE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49757	208.91.196.46	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:38.929080963 CEST	936	OUT	GET /px.js?ch=2 HTTP/1.1 Host: ifdnzact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/Download_Software.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=707&ki=8849840&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=933vr472998158622328902
Sep 4, 2024 14:22:39.398812056 CEST	1085	IN	HTTP/1.1 200 OK Date: Wed, 04 Sep 2024 12:22:39 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Last-Modified: Wed, 20 Jan 2021 10:45:10 GMT ETag: "15a-5b952a63b81f1" Accept-Ranges: bytes Content-Length: 346 Keep-Alive: timeout=5, max=118 Connection: Keep-Alive Content-Type: application/javascript Data Raw: 76 61 72 20 61 62 70 3d 61 62 70 7c 7c 66 61 6c 73 65 3b 76 61 72 20 73 63 72 69 70 74 73 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 3b 76 61 72 20 73 63 72 69 70 74 3d 73 63 72 69 70 74 73 5b 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 2d 31 5d 3b 69 66 28 73 63 72 69 70 74 29 7b 76 61 72 20 71 75 65 72 79 3d 73 63 72 69 70 74 2e 73 72 63 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 2e 73 70 6c 69 74 28 22 26 22 29 3b 76 61 72 20 70 61 72 61 6d 73 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 71 75 65 72 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 70 61 72 61 6d 3d 71 75 65 72 79 5b 69 5d 2e 73 70 6c 69 74 28 22 3d 22 29 3b 70 61 72 61 6d 73 5b 70 61 72 61 6d 5b 30 5d 5d 3d 70 61 72 61 6d 5b 31 5d 7d 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 31 29 61 62 70 3d 74 72 75 65 3b 65 6c 73 65 20 69 66 28 70 61 72 61 6d 73 5b 22 63 68 22 5d 3d 3d 32 29 61 62 70 3d 61 62 70 26 [TRUNCATED] Data Ascii: var abp=abp\|\|false;var scripts=document.getElementsByTagName("script");var script=scripts[scripts.length-1];if(script){var query=script.src.replace(/^[^\?]+\??/,"").split("&");var params={};for(var i=0;i<query.length;i++){var param=query[i].split("=");params[param[0]]=param[1]}if(params["ch"]==1)abp=true;else if(params["ch"]==2)abp=abp&&false};
Sep 4, 2024 14:22:41.357758999 CEST	1187	OUT	GET /favicon.ico HTTP/1.1 Host: ifdnzact.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ifdnzact.com/Download_Software.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=707&ki=8849840&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230%23455%23509 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=933vr472998158622328902; __cmpcccx68884=aBQEcyqcAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAvsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyh-Dc4OA
Sep 4, 2024 14:22:41.456473112 CEST	667	IN	HTTP/1.1 404 Not Found Date: Wed, 04 Sep 2024 12:22:41 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") Content-Length: 10 Keep-Alive: timeout=5, max=127 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 4e 6f 20 66 61 76 69 63 6f 6e Data Ascii: No favicon
Sep 4, 2024 14:22:44.539294004 CEST	1230	OUT	GET /Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=2&bd=-4%231024%231280%231%230 HTTP/1.1 Host: ifdnzact.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=933vr472998158622328902; __cmpcccx68884=aBQEcyqnAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAvsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyh-Dc4OA
Sep 4, 2024 14:22:44.949353933 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 04 Sep 2024 12:22:44 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_Z2kAS4QGVcg1jVgh7kd7f2xsBZQ7uXP4e2wymj7MSwdLTJ2r9gx8+9x+TNkTKiTWVhvpY+U7J03SUpSIPAKGSw== Keep-Alive: timeout=5, max=124 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 31 35 64 35 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 [TRUNCATED] Data Ascii: 15d51<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppl
Sep 4, 2024 14:22:44.949374914 CEST	1236	IN	Data Raw: 69 65 73 47 6c 6f 62 61 6c 6c 79 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 77 69 6e 64 6f 77 2e 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 74 72 75 65 7d 69 66 28 21 28 22 63 6d 70 5f 69 64 22 20 69 6e 20 77 69 6e 64 6f 77 29 7c 7c Data Ascii: iesGlobally" in window){window.gdprAppliesGlobally=true}if(!("cmp_id" in window)\|\|window.cmp_id<1){window.cmp_id=0}if(!("cmp_cdid" in window)){window.cmp_cdid="21fdca2281833"}if(!("cmp_params" in window)){window.cmp_params=""}if(!("cmp_host" i
Sep 4, 2024 14:22:44.949389935 CEST	1236	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 63 6d 70 5f 67 65 74 6c 61 6e 67 2e 75 73 65 64 6c 61 6e 67 7d 76 61 72 20 67 3d 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 65 74 73 75 70 70 6f 72 74 65 64 4c 61 6e 67 73 28 29 3b 76 61 72 20 63 3d 5b 5d 3b 76 61 72 20 66 3d Data Ascii: ){return cmp_getlang.usedlang}var g=window.cmp_getsupportedLangs();var c=[];var f=location.hash;var e=location.search;var a="languages" in navigator?navigator.languages:[];if(f.indexOf("cmplang=")!=-1){c.push(f.substr(f.indexOf("cmplang=")+8,2
Sep 4, 2024 14:22:44.949399948 CEST	1236	IN	Data Raw: 55 70 70 65 72 43 61 73 65 28 29 29 7b 6f 3d 22 65 6e 22 3b 62 72 65 61 6b 7d 7d 7d 62 3d 22 5f 22 2b 6f 7d 66 75 6e 63 74 69 6f 6e 20 78 28 69 2c 65 29 7b 76 61 72 20 77 3d 22 22 3b 69 2b 3d 22 3d 22 3b 76 61 72 20 73 3d 69 2e 6c 65 6e 67 74 68 Data Ascii: UpperCase()){o="en";break}}}b="_"+o}function x(i,e){var w="";i+="=";var s=i.length;var d=location;if(d.hash.indexOf(i)!=-1){w=d.hash.substr(d.hash.indexOf(i)+s,9999)}else{if(d.search.indexOf(i)!=-1){w=d.search.substr(d.search.indexOf(i)+s,9999
Sep 4, 2024 14:22:44.949414015 CEST	896	IN	Data Raw: 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3b 6a 2e 61 73 79 6e 63 3d 74 72 75 65 3b 69 66 28 75 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 26 26 75 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 Data Ascii: e="text/javascript";j.async=true;if(u.currentScript&&u.currentScript.parentElement){u.currentScript.parentElement.appendChild(j)}else{if(u.body){u.body.appendChild(j)}else{var t=v("body");if(t.length==0){t=v("div")}if(t.length==0){t=v("span")}
Sep 4, 2024 14:22:44.949506998 CEST	1236	IN	Data Raw: 74 2e 6c 65 6e 67 74 68 3d 3d 30 29 7b 74 3d 76 28 22 64 69 76 22 29 7d 69 66 28 74 2e 6c 65 6e 67 74 68 3d 3d 30 29 7b 74 3d 76 28 22 73 70 61 6e 22 29 7d 69 66 28 74 2e 6c 65 6e 67 74 68 3d 3d 30 29 7b 74 3d 76 28 22 69 6e 73 22 29 7d 69 66 28 Data Ascii: t.length==0){t=v("div")}if(t.length==0){t=v("span")}if(t.length==0){t=v("ins")}if(t.length==0){t=v("script")}if(t.length==0){t=v("head")}if(t.length>0){t[0].appendChild(j)}}}})();window.cmp_addFrame=function(b){if(!window.frames[b]){if(documen
Sep 4, 2024 14:22:44.949517965 CEST	224	IN	Data Raw: 2c 63 6d 70 53 74 61 74 75 73 3a 22 73 74 75 62 22 2c 64 69 73 70 6c 61 79 53 74 61 74 75 73 3a 22 68 69 64 64 65 6e 22 2c 61 70 69 56 65 72 73 69 6f 6e 3a 22 32 2e 32 22 2c 63 6d 70 49 64 3a 33 31 7d 2c 74 72 75 65 29 7d 65 6c 73 65 7b 61 5b 32 Data Ascii: ,cmpStatus:"stub",displayStatus:"hidden",apiVersion:"2.2",cmpId:31},true)}else{a[2](false,true)}}else{if(a[0]==="getUSPData"){a[2]({version:1,uspString:window.cmp_rc("")},true)}else{if(a[0]==="getTCData"){__cmp.a.push([].sli
Sep 4, 2024 14:22:44.949533939 CEST	1236	IN	Data Raw: 63 65 2e 61 70 70 6c 79 28 61 29 29 7d 65 6c 73 65 7b 69 66 28 61 5b 30 5d 3d 3d 3d 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 7c 7c 61 5b 30 5d 3d 3d 3d 22 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 29 7b 5f 5f 63 6d Data Ascii: ce.apply(a))}else{if(a[0]==="addEventListener"\|\|a[0]==="removeEventListener"){__cmp.a.push([].slice.apply(a))}else{if(a.length==4&&a[3]===false){a[2]({},false)}else{__cmp.a.push([].slice.apply(a))}}}}}}};window.cmp_gpp_ping=function(){return{g
Sep 4, 2024 14:22:44.949552059 CEST	1236	IN	Data Raw: 61 73 53 65 63 74 69 6f 6e 22 7c 7c 67 3d 3d 3d 22 67 65 74 53 65 63 74 69 6f 6e 22 7c 7c 67 3d 3d 3d 22 67 65 74 46 69 65 6c 64 22 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 65 6c 73 65 7b 5f 5f 67 70 70 2e 71 2e 70 75 73 68 28 5b 5d 2e 73 6c 69 Data Ascii: asSection"\|\|g==="getSection"\|\|g==="getField"){return null}else{__gpp.q.push([].slice.apply(a))}}}}}};window.cmp_msghandler=function(d){var a=typeof d.data==="string";try{var c=a?JSON.parse(d.data):d.data}catch(f){var c=null}if(typeof(c)==="obj
Sep 4, 2024 14:22:44.949559927 CEST	1236	IN	Data Raw: 69 6e 64 6f 77 2e 63 6d 70 5f 73 65 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 28 61 20 69 6e 20 77 69 6e 64 6f 77 29 7c 7c 28 74 79 70 65 6f 66 28 77 69 6e 64 6f 77 5b 61 5d 29 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 Data Ascii: indow.cmp_setStub=function(a){if(!(a in window)\|\|(typeof(window[a])!=="function"&&typeof(window[a])!=="object"&&(typeof(window[a])==="undefined"\|\|window[a]!==null))){window[a]=window.cmp_stub;window[a].msgHandler=window.cmp_msghandler;window.a
Sep 4, 2024 14:22:44.949561119 CEST	672	IN	Data Raw: 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 76 61 72 20 61 62 70 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 Data Ascii: <script type="text/javascript">var abp;</script><script type="text/javascript" src="http://ifdnzact.com/px.js?ch=1"></script><script type="text/javascript" src="http://ifdnzact.com/px.js?ch=2"></script><script type="text/javascript">function h
Sep 4, 2024 14:22:48.553082943 CEST	1232	OUT	GET /Public_Records.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=754&ki=23459819&ktd=0&kld=1063&kp=1&bd=-4%231024%231280%231%230 HTTP/1.1 Host: ifdnzact.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=933vr472998158622328902; __cmpcccx68884=aBQEcyrUAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAvsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyh-Dc4OA
Sep 4, 2024 14:22:48.958889008 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 04 Sep 2024 12:22:48 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_k65S+O7Yqp0ATMPQpFjEZ6jtSyF+BCYCqfujEPiI11X+a0E6dgJ31/yDlTnc6efvYM8TO44JWO+6IHk/2uW4nA== Keep-Alive: timeout=5, max=110 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 36 62 33 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 [TRUNCATED] Data Ascii: 6b36<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppli
Sep 4, 2024 14:23:05.049932957 CEST	1236	OUT	GET /Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%2B%2Fhu433Xx3PD15ir6ozW6g%2B7%2Fea%2F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%2BqZfXQe%2BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%2F1cxsPrqaFAy6dYLUq7i1pz%2FZiU3zxM84cKvQOfDAD43%2BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%2B%2BVjRyg8N96%2BaJl%2BKUVQpheJlks&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230 HTTP/1.1 Host: ifdnzact.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=933vr472998158622328902; __cmpcccx68884=aBQEcyr6AAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAvsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyh-Dc4OA Data Raw: Data Ascii:
Sep 4, 2024 14:23:05.489500046 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 04 Sep 2024 12:23:05 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_SyjCfv11xGzD/6Fd6DJE5yWZcEAqhl82R6iMlQHxAMjzRsHb3BNeutcuTai0dFFTyYrJWZJRcW3oKmU0sE9R9g== Keep-Alive: timeout=5, max=123 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 36 62 32 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 [TRUNCATED] Data Ascii: 6b2e<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppli
Sep 4, 2024 14:23:11.345765114 CEST	1236	OUT	GET /Web_Directory.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%2B%2Fhu433Xx3PD15ir6ozW6g%2B7%2Fea%2F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%2BqZfXQe%2BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%2F1cxsPrqaFAy6dYLUq7i1pz%2FZiU3zxM84cKvQOfDAD43%2BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%2B%2BVjRyg8N96%2BaJl%2BKUVQpheJlks&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=754&ki=30468440&ktd=0&kld=1063&kp=2&bd=-4%231024%231280%231%230 HTTP/1.1 Host: ifdnzact.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=933vr472998158622328902; __cmpcccx68884=aBQEcyutAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAvsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyh-Dc4O Data Raw: Data Ascii:
Sep 4, 2024 14:23:11.689281940 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 04 Sep 2024 12:23:11 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_c3Ev/fGzO5dl11E4PGmZFjLkYCXAbgz3dLErekCJcrOX+U1D+zUkARWZZMPgHF7r+9BtLKksbpdkwhBtR5tVQQ== Keep-Alive: timeout=5, max=116 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 36 62 32 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 [TRUNCATED] Data Ascii: 6b2f<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppli
Sep 4, 2024 14:23:14.558514118 CEST	1236	OUT	GET /YouTube_Videos.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%2B%2Fhu433Xx3PD15ir6ozW6g%2B7%2Fea%2F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%2BqZfXQe%2BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%2F1cxsPrqaFAy6dYLUq7i1pz%2FZiU3zxM84cKvQOfDAD43%2BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%2B%2BVjRyg8N96%2BaJl%2BKUVQpheJlks&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=707&ki=31510203&ktd=0&kld=1063&kp=1&bd=-4%231024%231280%231%230 HTTP/1.1 Host: ifdnzact.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=933vr472998158622328902; __cmpcccx68884=aBQEcyvhAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAvsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyh-Dc4 Data Raw: Data Ascii:
Sep 4, 2024 14:23:14.949316978 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 04 Sep 2024 12:23:14 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_jtYq3AT3wlvR7fqoFDrhGOvRwnb00xt+xM4PU1vvv6AQKi1cheqr8/cGfiDCgTWL3a8xh7kx30dhOvJCEeE3nA== Keep-Alive: timeout=5, max=117 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 36 62 30 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 [TRUNCATED] Data Ascii: 6b06<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppli
Sep 4, 2024 14:23:26.565207005 CEST	1227	OUT	GET /Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBW%2FAjMs%2FNGJHN8sjAkMbUyPA4lQy18GJwdXaa56Nx8FGV28Q4K8x%2FkPKHovFYYvKzb22HErRerJiRw8YBGlrdJFjUzcWiP%2FvdHkp4tNeMNWH516OLWtRI4V4GYSvqIEqi7MqVMIGNM6yQ841mUTySbs0Ur2meguR4lTPre7TGsFHPmKEjM8%2B8tfKPoNS6cOzC0jkEdxYpU8E6PFCshC1Lraq6GFCiEI5iEufbp%2B8m0OE8bd0CyMIR3hu65lpnMI94eACkNWx%2Bo5c%2FDD5yErOuL&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230 HTTP/1.1 Host: ifdnzact.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: vsid=933vr472998158622328902; __cmpcccx68884=aBQEcywBAAwABAAoBEAAIABwALgAaABQAEEAJoAXgBDgDHAcSA9ECDIEHAUaAqIBUsAvsHWwdlg_rRfWjItGlaNm0brRv2jzaPS0fFs7LZ7Wz7toS2hVtDraJW0atwvbqNupcL0wvbo9ej2dHv0fHsoOyh-Dc4OA
Sep 4, 2024 14:23:26.872915983 CEST	1236	IN	HTTP/1.1 200 OK Date: Wed, 04 Sep 2024 12:23:26 GMT Server: Apache Referrer-Policy: no-referrer-when-downgrade Accept-CH: Sec-CH-Save-Data, Sec-CH-DPR, Sec-CH-Width, Sec-CH-Viewport-Width, Sec-CH-Viewport-Height, Sec-CH-Device-Memory, Sec-CH-RTT, Sec-CH-Downlink, Sec-CH-ECT, Sec-CH-Prefers-Color-Scheme, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-platform-version=("https://dts.gnpge.com"), ch-ua-model=("https://dts.gnpge.com") X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAKX74ixpzVyXbJprcLfbH4psP4+L2entqri0lzh6pkAaXLPIcclv6DQBeJJjGFWrBIF6QMyFwXT5CCRyjS2penECAwEAAQ==_D3M78t9cYBamk4kFTa1oqGwBqx8xDnh2N2GcmmACx7qXFuOx0oW3WrdnsFiNAW2CRIlQCKb7e2V9qDeewB7qbA== Keep-Alive: timeout=5, max=124 Connection: Keep-Alive Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 36 62 32 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 74 61 79 69 6e 69 66 72 61 6d 65 20 3d 20 31 3b 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 64 6f 6e 74 6c 6f 61 64 69 6e 69 66 72 61 6d 65 20 3d 20 74 72 75 65 3b 20 69 66 28 [TRUNCATED] Data Ascii: 6b22<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head><link rel="preconnect" href="https://delivery.consentmanager.net"> <link rel="preconnect" href="https://cdn.consentmanager.net"> <script>window.cmp_stayiniframe = 1; window.cmp_dontloadiniframe = true; if(!"gdprAppli

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49758	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:38.948694944 CEST	928	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/Download_Software.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=707&ki=8849840&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230%23455%23509 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:39.395570993 CEST	341	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:39 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Thu, 16 Feb 2023 20:40:11 GMT Connection: keep-alive ETag: "63ee94ab-20f3" Expires: Wed, 18 Sep 2024 12:22:39 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Sep 4, 2024 14:22:39.395742893 CEST	1236	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n
Sep 4, 2024 14:22:39.395749092 CEST	224	IN	Data Raw: 28 29 3b 6f 3c 31 65 33 26 26 28 6f 2b 3d 31 39 30 30 29 3b 76 61 72 20 72 3d 6e 2e 67 65 74 44 61 79 28 29 2c 69 3d 6e 2e 67 65 74 4d 6f 6e 74 68 28 29 2c 6e 3d 6e 2e 67 65 74 44 61 74 65 28 29 3b 6e 3c 31 30 26 26 28 6e 3d 22 30 22 2b 6e 29 3b Data Ascii: ();o<1e3&&(o+=1900);var r=n.getDay(),i=n.getMonth(),n=n.getDate();n<10&&(n="0"+n);o=t[r]+", "+e[i]+" "+n+", "+o;document.write(o)}function checkUTFChar(t){for(var e=!0,n=0;n<128;++n){var o=n.toString(16);if(1==o.length&&(o="
Sep 4, 2024 14:22:39.395762920 CEST	1236	IN	Data Raw: 30 22 2b 6f 29 2c 6f 3d 22 25 22 2b 6f 2c 28 6f 3d 75 6e 65 73 63 61 70 65 28 6f 29 29 3d 3d 74 29 7b 65 3d 21 31 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 56 61 6c 69 64 55 52 4c 43 68 61 72 73 Data Ascii: 0"+o),o="%"+o,(o=unescape(o))==t){e=!1;break}}return e}function checkValidURLChars(t){var e,n;if(""==t)return!1;if(t.match(/[#&]/))return!0;for(n=t.length,intCur=0;intCur<n&&(chrValue=t.charAt(intCur),1!=(e=checkUTFChar(chrValue)));intCur++);r
Sep 4, 2024 14:22:39.395770073 CEST	1236	IN	Data Raw: 2c 74 68 69 73 2e 69 73 69 6e 66 72 61 6d 65 3d 2d 31 2c 74 68 69 73 2e 62 72 6f 77 73 65 72 64 61 74 61 3d 22 22 2c 74 68 69 73 2e 67 65 74 41 42 50 53 74 61 74 75 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 Data Ascii: ,this.isinframe=-1,this.browserdata="",this.getABPStatus=function(){return void 0!==window.abp&&window.abp?1:0},this.getLocalTimeZone=function(){return(new Date).getTimezoneOffset()/60*-1},this.getScreenHeight=function(){return screen.height},
Sep 4, 2024 14:22:39.395848036 CEST	448	IN	Data Raw: 70 74 6f 75 74 3d 31 22 2b 74 2b 22 3b 20 70 61 74 68 3d 2f 22 2c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 29 7d 76 61 72 20 6d 58 3d 30 2c 6d 59 3d 30 2c 62 72 5f 64 61 74 61 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: ptout=1"+t+"; path=/",window.location.reload())}var mX=0,mY=0,br_data=!1;function mPos(t){try{mX=window.Event?t.pageX:event.clientX+(document.documentElement.scrollLeft\|\|document.body.scrollLeft),mY=window.Event?t.pageY:event.clientY+(document
Sep 4, 2024 14:22:39.395920038 CEST	1236	IN	Data Raw: 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 3a 74 68 69 73 2e 5f 54 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 74 68 69 73 2e 5f 54 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 Data Ascii: indow.innerHeight:this._Top.document.documentElement&&this._Top.document.documentElement.clientHeight?e=this._Top.document.documentElement.clientHeight:this._Top.document.body&&this._Top.document.body.clientHeight&&(e=this._Top.document.body.c
Sep 4, 2024 14:22:39.395963907 CEST	224	IN	Data Raw: 6e 70 66 3d 6e 70 66 7c 7c 22 74 6f 6f 6c 62 61 72 3d 30 2c 73 63 72 6f 6c 6c 62 61 72 73 3d 31 2c 6c 6f 63 61 74 69 6f 6e 3d 31 2c 73 74 61 74 75 73 62 61 72 3d 30 2c 6d 65 6e 75 62 61 72 3d 30 2c 72 65 73 69 7a 61 62 6c 65 3d 31 22 3b 76 61 72 Data Ascii: npf=npf\|\|"toolbar=0,scrollbars=1,location=1,statusbar=0,menubar=0,resizable=1";var _npW=this._Top.window.open(_npSU,_npID,npf+",top="+pxTop+",left="+pxLeft+",width="+pw+",height="+ph);return _npW&&(_npW.blur(),-1<navigator.u
Sep 4, 2024 14:22:39.395968914 CEST	1236	IN	Data Raw: 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 65 77 65 62 6b 69 74 22 29 26 26 28 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 62 6c 75 72 28 29 2c 74 68 69 73 2e 5f 54 6f 70 2e Data Ascii: serAgent.toLowerCase().indexOf("applewebkit")&&(this._Top.window.blur(),this._Top.window.focus()),_npW.Init=function(e){with(e)Params=e.Params,Main=function(){void 0===window.mozPaintCount\|\|(t=window.open("about:blank"))&&t.close();var t=Param
Sep 4, 2024 14:22:39.395981073 CEST	1236	IN	Data Raw: 6f 77 50 6f 70 26 26 28 73 68 6f 77 50 6f 70 3d 30 29 2c 21 31 3b 31 21 3d 73 68 6f 77 50 6f 70 7c 7c 72 65 6e 64 65 72 46 41 43 50 28 74 29 7c 7c 73 68 70 70 28 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 68 70 70 28 Data Ascii: owPop&&(showPop=0),!1;1!=showPop\|\|renderFACP(t)\|\|shpp(t)}catch(t){}}function shpp(t){if("undefined"!=typeof __pp&&1==showPop&&!renderFACP(t))try{if(t\|\|((t=window.event\|\|window.Event).cancelBubble=!0),t.button&&2==t.button)return;try{var e=!1;i
Sep 4, 2024 14:22:39.400861979 CEST	123	IN	Data Raw: 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 42 72 6f 77 73 65 72 44 65 74 61 69 6c 73 28 29 7b 72 65 6c 70 6c 61 63 65 41 6c 6c 41 4c 69 6e Data Ascii: vigator.userAgent)}catch(t){}return t}function setBrowserDetails(){relplaceAllALinks&&relplaceAllALinks(/(\/trf\|\.cfm)\?/)}
Sep 4, 2024 14:22:39.419208050 CEST	389	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:39.517868996 CEST	329	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:39 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Wed, 18 Sep 2024 12:22:39 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49759	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:38.979039907 CEST	916	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i4.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/Download_Software.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=707&ki=8849840&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:39.438354015 CEST	341	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:39 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Thu, 16 Feb 2023 20:41:36 GMT Connection: keep-alive ETag: "63ee9500-20f3" Expires: Wed, 18 Sep 2024 12:22:39 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Sep 4, 2024 14:22:39.438437939 CEST	1236	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n
Sep 4, 2024 14:22:39.438494921 CEST	224	IN	Data Raw: 28 29 3b 6f 3c 31 65 33 26 26 28 6f 2b 3d 31 39 30 30 29 3b 76 61 72 20 72 3d 6e 2e 67 65 74 44 61 79 28 29 2c 69 3d 6e 2e 67 65 74 4d 6f 6e 74 68 28 29 2c 6e 3d 6e 2e 67 65 74 44 61 74 65 28 29 3b 6e 3c 31 30 26 26 28 6e 3d 22 30 22 2b 6e 29 3b Data Ascii: ();o<1e3&&(o+=1900);var r=n.getDay(),i=n.getMonth(),n=n.getDate();n<10&&(n="0"+n);o=t[r]+", "+e[i]+" "+n+", "+o;document.write(o)}function checkUTFChar(t){for(var e=!0,n=0;n<128;++n){var o=n.toString(16);if(1==o.length&&(o="
Sep 4, 2024 14:22:39.438920975 CEST	1236	IN	Data Raw: 30 22 2b 6f 29 2c 6f 3d 22 25 22 2b 6f 2c 28 6f 3d 75 6e 65 73 63 61 70 65 28 6f 29 29 3d 3d 74 29 7b 65 3d 21 31 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 56 61 6c 69 64 55 52 4c 43 68 61 72 73 Data Ascii: 0"+o),o="%"+o,(o=unescape(o))==t){e=!1;break}}return e}function checkValidURLChars(t){var e,n;if(""==t)return!1;if(t.match(/[#&]/))return!0;for(n=t.length,intCur=0;intCur<n&&(chrValue=t.charAt(intCur),1!=(e=checkUTFChar(chrValue)));intCur++);r
Sep 4, 2024 14:22:39.438929081 CEST	1236	IN	Data Raw: 2c 74 68 69 73 2e 69 73 69 6e 66 72 61 6d 65 3d 2d 31 2c 74 68 69 73 2e 62 72 6f 77 73 65 72 64 61 74 61 3d 22 22 2c 74 68 69 73 2e 67 65 74 41 42 50 53 74 61 74 75 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 Data Ascii: ,this.isinframe=-1,this.browserdata="",this.getABPStatus=function(){return void 0!==window.abp&&window.abp?1:0},this.getLocalTimeZone=function(){return(new Date).getTimezoneOffset()/60*-1},this.getScreenHeight=function(){return screen.height},
Sep 4, 2024 14:22:39.438942909 CEST	1236	IN	Data Raw: 70 74 6f 75 74 3d 31 22 2b 74 2b 22 3b 20 70 61 74 68 3d 2f 22 2c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 29 7d 76 61 72 20 6d 58 3d 30 2c 6d 59 3d 30 2c 62 72 5f 64 61 74 61 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: ptout=1"+t+"; path=/",window.location.reload())}var mX=0,mY=0,br_data=!1;function mPos(t){try{mX=window.Event?t.pageX:event.clientX+(document.documentElement.scrollLeft\|\|document.body.scrollLeft),mY=window.Event?t.pageY:event.clientY+(document
Sep 4, 2024 14:22:39.438949108 CEST	1236	IN	Data Raw: 70 3f 6e 75 6c 6c 21 3d 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 4c 65 66 74 3f 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 4c 65 66 74 3a 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 73 Data Ascii: p?null!=this._Top.window.screenLeft?this._Top.window.screenLeft:this._Top.window.screenX:0},doPU:function(url,pw,ph,npf,dr){if(!this._Top&&(this._Top=self,top!=self))try{top.document.location.toString()&&(this._Top=top)}catch(e){}var _npSU=dr?
Sep 4, 2024 14:22:39.438956022 CEST	896	IN	Data Raw: 6e 64 6f 77 2e 65 76 65 6e 74 7c 7c 77 69 6e 64 6f 77 2e 45 76 65 6e 74 29 2e 63 61 6e 63 65 6c 42 75 62 62 6c 65 3d 21 30 29 2c 74 2e 62 75 74 74 6f 6e 26 26 32 3d 3d 74 2e 62 75 74 74 6f 6e 29 72 65 74 75 72 6e 21 31 3b 69 66 28 76 6f 69 64 20 Data Ascii: ndow.event\|\|window.Event).cancelBubble=!0),t.button&&2==t.button)return!1;if(void 0!==__pp.FACP.u&&0<__pp.FACP.u.length)return __pp.FACP.pd=!0,__pp.FACP.u=__pp.FACP.u+generateBrowLogURL("adclk"),_skPU.doPU(__pp.FACP.u,__pp.FACP.w,__pp.FACP.h,_
Sep 4, 2024 14:22:39.528038025 CEST	1135	IN	Data Raw: 74 75 72 6e 3b 74 72 79 7b 76 61 72 20 65 3d 21 31 3b 69 73 49 45 28 29 26 26 28 65 3d 73 68 64 73 70 28 74 29 29 2c 65 7c 7c 22 6c 64 22 3d 3d 74 7c 7c 28 76 6f 69 64 20 30 21 3d 3d 5f 5f 70 70 2e 6b 70 26 26 76 6f 69 64 20 30 21 3d 3d 5f 5f 70 Data Ascii: turn;try{var e=!1;isIE()&&(e=shdsp(t)),e\|\|"ld"==t\|\|(void 0!==__pp.kp&&void 0!==__pp.kp.u&&__pp.kp.u&&0<__pp.kp.u.length&&0==__pp.kp.pd&&(__pp.kp.pd=!0,"ex"==t&&(__pp.kp.u=__pp.kp.u+"&_onx_=1"),_skPU.doPU(__pp.kp.u,__pp.kp.w,__pp.kp.h,__pp.kp.p
Sep 4, 2024 14:22:39.574296951 CEST	389	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i4.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:39.675406933 CEST	329	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:39 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Wed, 18 Sep 2024 12:22:39 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Sep 4, 2024 14:22:39.685511112 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((
Sep 4, 2024 14:22:39.685524940 CEST	1236	IN	Data Raw: a2 c2 14 56 7e 4e ec 57 58 1b 33 a2 c2 14 56 7e 4e ec 57 d8 4e 61 28 ec aa 39 b1 57 61 8d cc 88 7e 5b 5f 46 2b 13 4f bf 39 31 ac 98 c2 14 96 b8 5f fa 14 b6 6b 66 c5 16 f2 28 60 d5 cc 7e 39 94 29 6c d9 cc 82 f9 3b 1d 65 b4 b3 61 be 96 28 ac 9d ef Data Ascii: V~NWX3V~NWNa(9Wa~[_F+O91_kf(`~9)l;ea(\|kvsbX.),q\,+ZwqM8]K`q4#z 0'smsmS+*eb91'jj=\|Jt8'O"W.L.:\u$~8Ur#9T9m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49761	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:39.425672054 CEST	392	OUT	GET /__media__/pics/28905/arrrow.png HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:39.878140926 CEST	326	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:39 GMT Content-Type: image/png Content-Length: 283 Last-Modified: Tue, 04 Jan 2022 14:44:27 GMT Connection: keep-alive ETag: "61d45d4b-11b" Expires: Wed, 18 Sep 2024 12:22:39 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Sep 4, 2024 14:22:40.012523890 CEST	283	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 1b 08 03 00 00 00 ad 28 94 ae 00 00 00 48 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR(HPLTEGpLztRNSt@fU2'dgkIDAT} P{O5$vaWJIih^JF5PzHLzF/h:{t
Sep 4, 2024 14:23:25.029557943 CEST	6	OUT	Data Raw: 00 Data Ascii:
Sep 4, 2024 14:24:10.038196087 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49762	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:39.443223953 CEST	293	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:39.911709070 CEST	341	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:39 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Thu, 16 Feb 2023 20:42:04 GMT Connection: keep-alive ETag: "63ee951c-20f3" Expires: Wed, 18 Sep 2024 12:22:39 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Sep 4, 2024 14:22:39.911874056 CEST	1236	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n
Sep 4, 2024 14:22:39.911910057 CEST	224	IN	Data Raw: 28 29 3b 6f 3c 31 65 33 26 26 28 6f 2b 3d 31 39 30 30 29 3b 76 61 72 20 72 3d 6e 2e 67 65 74 44 61 79 28 29 2c 69 3d 6e 2e 67 65 74 4d 6f 6e 74 68 28 29 2c 6e 3d 6e 2e 67 65 74 44 61 74 65 28 29 3b 6e 3c 31 30 26 26 28 6e 3d 22 30 22 2b 6e 29 3b Data Ascii: ();o<1e3&&(o+=1900);var r=n.getDay(),i=n.getMonth(),n=n.getDate();n<10&&(n="0"+n);o=t[r]+", "+e[i]+" "+n+", "+o;document.write(o)}function checkUTFChar(t){for(var e=!0,n=0;n<128;++n){var o=n.toString(16);if(1==o.length&&(o="
Sep 4, 2024 14:22:39.912014961 CEST	1236	IN	Data Raw: 30 22 2b 6f 29 2c 6f 3d 22 25 22 2b 6f 2c 28 6f 3d 75 6e 65 73 63 61 70 65 28 6f 29 29 3d 3d 74 29 7b 65 3d 21 31 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 56 61 6c 69 64 55 52 4c 43 68 61 72 73 Data Ascii: 0"+o),o="%"+o,(o=unescape(o))==t){e=!1;break}}return e}function checkValidURLChars(t){var e,n;if(""==t)return!1;if(t.match(/[#&]/))return!0;for(n=t.length,intCur=0;intCur<n&&(chrValue=t.charAt(intCur),1!=(e=checkUTFChar(chrValue)));intCur++);r
Sep 4, 2024 14:22:39.912022114 CEST	1236	IN	Data Raw: 2c 74 68 69 73 2e 69 73 69 6e 66 72 61 6d 65 3d 2d 31 2c 74 68 69 73 2e 62 72 6f 77 73 65 72 64 61 74 61 3d 22 22 2c 74 68 69 73 2e 67 65 74 41 42 50 53 74 61 74 75 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 Data Ascii: ,this.isinframe=-1,this.browserdata="",this.getABPStatus=function(){return void 0!==window.abp&&window.abp?1:0},this.getLocalTimeZone=function(){return(new Date).getTimezoneOffset()/60*-1},this.getScreenHeight=function(){return screen.height},
Sep 4, 2024 14:22:39.912034035 CEST	1236	IN	Data Raw: 70 74 6f 75 74 3d 31 22 2b 74 2b 22 3b 20 70 61 74 68 3d 2f 22 2c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 29 7d 76 61 72 20 6d 58 3d 30 2c 6d 59 3d 30 2c 62 72 5f 64 61 74 61 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: ptout=1"+t+"; path=/",window.location.reload())}var mX=0,mY=0,br_data=!1;function mPos(t){try{mX=window.Event?t.pageX:event.clientX+(document.documentElement.scrollLeft\|\|document.body.scrollLeft),mY=window.Event?t.pageY:event.clientY+(document
Sep 4, 2024 14:22:39.912039995 CEST	672	IN	Data Raw: 70 3f 6e 75 6c 6c 21 3d 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 4c 65 66 74 3f 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 4c 65 66 74 3a 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 73 Data Ascii: p?null!=this._Top.window.screenLeft?this._Top.window.screenLeft:this._Top.window.screenX:0},doPU:function(url,pw,ph,npf,dr){if(!this._Top&&(this._Top=self,top!=self))try{top.document.location.toString()&&(this._Top=top)}catch(e){}var _npSU=dr?
Sep 4, 2024 14:22:39.912381887 CEST	1236	IN	Data Raw: 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 65 77 65 62 6b 69 74 22 29 26 26 28 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 62 6c 75 72 28 29 2c 74 68 69 73 2e 5f 54 6f 70 2e Data Ascii: serAgent.toLowerCase().indexOf("applewebkit")&&(this._Top.window.blur(),this._Top.window.focus()),_npW.Init=function(e){with(e)Params=e.Params,Main=function(){void 0===window.mozPaintCount\|\|(t=window.open("about:blank"))&&t.close();var t=Param
Sep 4, 2024 14:22:39.912432909 CEST	224	IN	Data Raw: 6f 77 50 6f 70 26 26 28 73 68 6f 77 50 6f 70 3d 30 29 2c 21 31 3b 31 21 3d 73 68 6f 77 50 6f 70 7c 7c 72 65 6e 64 65 72 46 41 43 50 28 74 29 7c 7c 73 68 70 70 28 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 68 70 70 28 Data Ascii: owPop&&(showPop=0),!1;1!=showPop\|\|renderFACP(t)\|\|shpp(t)}catch(t){}}function shpp(t){if("undefined"!=typeof __pp&&1==showPop&&!renderFACP(t))try{if(t\|\|((t=window.event\|\|window.Event).cancelBubble=!0),t.button&&2==t.button)re
Sep 4, 2024 14:22:39.912437916 CEST	1135	IN	Data Raw: 74 75 72 6e 3b 74 72 79 7b 76 61 72 20 65 3d 21 31 3b 69 73 49 45 28 29 26 26 28 65 3d 73 68 64 73 70 28 74 29 29 2c 65 7c 7c 22 6c 64 22 3d 3d 74 7c 7c 28 76 6f 69 64 20 30 21 3d 3d 5f 5f 70 70 2e 6b 70 26 26 76 6f 69 64 20 30 21 3d 3d 5f 5f 70 Data Ascii: turn;try{var e=!1;isIE()&&(e=shdsp(t)),e\|\|"ld"==t\|\|(void 0!==__pp.kp&&void 0!==__pp.kp.u&&__pp.kp.u&&0<__pp.kp.u.length&&0==__pp.kp.pd&&(__pp.kp.pd=!0,"ex"==t&&(__pp.kp.u=__pp.kp.u+"&_onx_=1"),_skPU.doPU(__pp.kp.u,__pp.kp.w,__pp.kp.h,__pp.kp.p
Sep 4, 2024 14:22:40.200968027 CEST	300	OUT	GET /__media__/pics/28905/arrrow.png HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:40.299348116 CEST	326	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:40 GMT Content-Type: image/png Content-Length: 283 Last-Modified: Tue, 04 Jan 2022 14:44:27 GMT Connection: keep-alive ETag: "61d45d4b-11b" Expires: Wed, 18 Sep 2024 12:22:40 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Sep 4, 2024 14:22:40.439085007 CEST	283	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 1b 08 03 00 00 00 ad 28 94 ae 00 00 00 48 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR(HPLTEGpLztRNSt@fU2'dgkIDAT} P{O5$vaWJIih^JF5PzHLzF/h:{t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49764	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:39.548882961 CEST	297	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:40.011430025 CEST	329	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:39 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Wed, 18 Sep 2024 12:22:39 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Sep 4, 2024 14:22:40.011441946 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((
Sep 4, 2024 14:22:40.011455059 CEST	1236	IN	Data Raw: a2 c2 14 56 7e 4e ec 57 58 1b 33 a2 c2 14 56 7e 4e ec 57 d8 4e 61 28 ec aa 39 b1 57 61 8d cc 88 7e 5b 5f 46 2b 13 4f bf 39 31 ac 98 c2 14 96 b8 5f fa 14 b6 6b 66 c5 16 f2 28 60 d5 cc 7e 39 94 29 6c d9 cc 82 f9 3b 1d 65 b4 b3 61 be 96 28 ac 9d ef Data Ascii: V~NWX3V~NWNa(9Wa~[_F+O91_kf(`~9)l;ea(\|kvsbX.),q\,+ZwqM8]K`q4#z 0'smsmS+*eb91'jj=\|Jt8'O"W.L.:\u$~8Ur#9T9m
Sep 4, 2024 14:22:40.011460066 CEST	1236	IN	Data Raw: d1 d8 e2 4c 61 4d 5d cf bf e3 07 f6 e5 2c 5b de 48 6f 2f ef a3 dd eb 79 07 31 c7 b0 09 2e ef a3 dd eb 79 07 31 c7 b0 09 2e ef a3 dd eb 79 07 31 c7 b0 09 2e ef 43 5f 5e c4 bc 86 25 36 16 0d 5f cf 3b 88 39 86 e5 5f de c7 93 65 f8 4d 1a 85 d8 4a ff Data Ascii: LaM],[Ho/y1.y1.y1.C_^%6_;9_eMJ^,5P)Up00wS~30.2U"S0)"u;g)LaSP{~'S00)LaS0)LaSX8{qV0))LaBv:0)LaSX]
Sep 4, 2024 14:22:40.011466980 CEST	672	IN	Data Raw: d4 89 2b 20 00 60 f7 69 44 4f d8 9c 3a 11 53 cb 77 06 3e 52 6e ba 01 0f 1c c4 b5 31 a7 2c 0a 7e 92 05 6f 08 4a 31 68 c4 db 1e d9 44 2e 89 21 a9 23 a0 11 af fc 38 7d a7 30 9f c4 e0 27 22 90 c2 2e fc 34 11 d5 88 c1 4f 44 5c 16 d0 88 0f be 18 3a 11 Data Ascii: + `iDO:Sw>Rn1,~oJ1hD.!#8}0'".4OD\:fl4"I,"!.I) $@sj*1cAHB#Ju"zbK7;@"r-%1>1fR%&gxDk5(\2{b(6A'B&B$^&<d"Du~
Sep 4, 2024 14:22:40.011471987 CEST	1236	IN	Data Raw: 22 53 36 ef 5e 2f 8b 98 b2 4b 8f a1 0e 8c 74 bc ae 11 d5 e3 e0 32 c7 b1 fc 10 16 75 2b 8e 19 a5 0a 33 ea 44 10 06 c2 5e d4 88 51 fd 78 d1 4d 6e e1 41 98 56 62 3a 0c 2c 3c a5 4e 04 61 20 ec 55 8d 28 c6 90 4f 29 4c 78 49 84 f1 36 e7 61 d8 6b cd 8e Data Ascii: "S6^/Kt2u+3D^QxMnAVb:,<Na U(O)LxI6ak/a4$#Wy0DWw)t"a/jD7uB"l\|uUcvDa}Yn,h`Jap$@+)950v(-E<h>3:/\|NlN{Q'"!s7
Sep 4, 2024 14:22:40.011485100 CEST	1236	IN	Data Raw: 75 25 73 6b ed a7 2c 0b a3 3d ab c0 02 92 d8 09 8d 48 cd 6d 46 79 8d db 8e cf 11 9a 1b 20 f2 22 37 3d 7d 69 57 11 b4 66 47 1c 4c 0a 20 30 d8 d1 d7 88 25 77 b1 2e 15 35 bb 48 1b 14 83 87 ac 4a 71 42 66 21 37 db b4 36 96 d9 81 71 0e 0c 76 1c 4d 61 Data Ascii: u%sk,=HmFy "7=}iWfGL 0%w.5HJqBf!76qvMaUsr\^s>l9}0][NG#(Z]LnhD-hvu?@:6(4k%5$FDwR<`{qh>e\|VbM
Sep 4, 2024 14:22:40.011490107 CEST	1236	IN	Data Raw: 83 4b 96 f1 5a 2f 74 f8 21 05 29 ec 8f ff 9a fd a6 d6 48 f4 d2 11 49 0c 31 90 cd 21 a6 c3 5c 24 a3 59 49 2a bb d7 41 44 af 01 bb 59 2e b4 5e 07 b5 73 f6 da 78 fe fe 3d 46 12 43 8c 55 85 91 9b fb d5 eb 87 44 d5 dc ae cf d1 23 2c ee 09 c9 c5 ae 48 Data Ascii: KZ/t!)HI1!\$YIADY.^sx=FCUD#,HnAS1Tc2>wm0LX(Md<#w\|k4AA.nHOy3tjkwv+sD{ck2t%nn.S1b`O$0ML-gu=J2
Sep 4, 2024 14:22:40.011498928 CEST	1236	IN	Data Raw: a1 2c 9c 55 73 0b 63 3b 50 4b b1 26 84 ed 87 49 62 8b b0 5d cd b7 73 10 93 2a 26 1b d9 a3 c9 04 66 26 62 dd 76 64 e9 3a 5e 81 b0 66 f7 b7 6e 78 2c 73 36 4d dd af 90 25 2b 95 f8 90 e7 d8 9e 40 d8 49 e9 16 a2 a9 9a 5d 59 57 ce 70 35 a9 b2 43 a6 03 Data Ascii: ,Usc;PK&Ib]s&f&bvd:^fnx,s6M%+@I]YWp5C:FE\mm\|;p_!/%Z/Vv6\$"uh;)'TaVbz3% IDAT5,a)myVemzEy.XeK(\_e*M6:"]{O ;A{
Sep 4, 2024 14:22:40.011509895 CEST	896	IN	Data Raw: 42 49 db c8 15 e8 89 57 64 5f 06 c3 b7 a9 14 68 ff 32 c5 7f c6 76 75 85 fc 76 3b 61 db f7 bf 44 58 9d 60 d9 a4 12 53 00 52 37 54 c0 80 14 df fa 3d a5 9e 42 d9 c1 12 9e c4 ce 7d c6 e5 b5 c8 c4 81 ed 30 e4 7e 18 23 3f a7 05 10 8b 24 ac 1f be 5c 4b Data Ascii: BIWd_h2vuv;aDX`SR7T=B}0~#?$\K!LUUWvSFr~Pvm1a5"V]J)DU+R{SzSEU6Jr;Kf(FqefQaeDd]*yP'1Ahnj['m?F%FMuX^u
Sep 4, 2024 14:22:40.016769886 CEST	1236	IN	Data Raw: 45 d8 c1 94 98 ab 10 93 bd 48 92 c7 f0 a2 2c 91 c1 b2 f8 84 33 4d be cc b5 2e 7d bc a6 a3 ce e6 5a a6 c3 e2 35 03 dd ec c9 77 94 0e d7 d2 27 d4 33 fd ab 70 57 ac da 89 3a 08 3c db b9 ae fe 01 c2 f6 ed 9b 87 3c 1e 75 96 79 61 e4 38 a6 57 c6 75 ea Data Ascii: EH,3M.}Z5w'3pW:<<uya8Wu_+7<.tPG5f2eH/fA3l)1#!Tssy$%i_uvRPU3ZC(iMkmHm\|L<#%zhC6C4A1C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49763	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:39.548980951 CEST	381	OUT	GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive Origin: http://ifdnzact.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:40.011517048 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:39 GMT Content-Type: application/font-woff Content-Length: 17312 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-43a0" Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 a0 00 10 00 00 00 00 73 60 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 6c 00 00 00 1c 00 00 00 1c 69 99 f4 2b 47 44 45 46 00 00 01 88 00 00 00 1e 00 00 00 1e 00 27 01 0d 47 50 4f 53 00 00 01 a8 00 00 0c c5 00 00 16 c0 c0 0d d5 ee 47 53 55 42 00 00 0e 70 00 00 00 20 00 00 00 20 6c 91 74 8f 4f 53 2f 32 00 00 0e 90 00 00 00 54 00 00 00 60 a6 e9 3d 09 63 6d 61 70 00 00 0e e4 00 00 02 75 00 00 03 86 c7 ce be ea 67 61 73 70 00 00 11 5c 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 11 64 00 00 28 0b 00 00 47 38 61 9a 3f 94 68 65 61 64 00 00 39 70 00 00 00 34 00 00 00 36 09 88 d5 e9 68 68 65 61 00 00 39 a4 00 00 00 21 00 00 00 24 07 97 04 27 68 6d 74 78 00 00 39 c8 00 00 02 ad 00 00 04 1a 59 f7 2d 9c 6c 6f 63 61 00 00 3c 78 00 00 02 09 00 00 02 10 b1 e6 c4 00 6d 61 78 70 00 00 3e 84 00 00 00 1f 00 00 00 20 01 50 00 37 6e 61 6d 65 00 00 3e a4 00 00 02 df 00 00 06 99 17 bc cd 9c 70 6f 73 74 00 00 41 84 00 00 02 11 00 00 [TRUNCATED] Data Ascii: wOFFCs`FFTMli+GDEF'GPOSGSUBp ltOS/2T`=cmapugasp\glyfd(G8a?head9p46hhea9!$'hmtx9Y-loca<xmaxp> P7name>postA8Y,prepChh<'d:x[l\vb{l7ho+.!Qp1OPP%hUUUEMpQZA1I !C@==:cBP5:>9{^k)wJx)R~gO>m~6BJ:tIY_dq/mxel\|icKclzjo%;^x}olegOVV=\5]z_ono;555nO/ctR4tKTCmH]nT::tjAJwU$![yJ+u)IH7IH%}nZef/ ?(OA7)qpf#xxMO;jq77DsO@tD1Et0F`fd9wIXFafxlC[0F0
Sep 4, 2024 14:22:40.011528969 CEST	1236	IN	Data Raw: 44 dd ee 45 e9 61 dc 63 28 f3 38 3c 47 b9 6a d1 ec 05 2c 04 99 99 84 53 82 59 a7 e4 3e ac 74 b8 ef 32 73 9a 59 a7 e0 96 83 47 12 0e f3 70 58 94 61 f7 8a 84 dc e7 d0 f4 39 14 0a fc 77 01 85 96 51 e8 02 0a 45 51 28 86 42 19 70 bc 03 8e 14 56 c3 28 Data Ascii: DEac(8<Gj,SY>t2sYGpXa9wQEQ(BpV(G9X`-J!G4Bap["8&`KfY3k00d'8<YQuk{"333J/<y6A>4sDCs9jfV4s%>
Sep 4, 2024 14:22:40.011535883 CEST	1236	IN	Data Raw: c1 69 10 bc 67 55 37 6b 7c c1 66 8e 63 f7 57 c3 fb 12 68 cc 1e 71 1a ee 09 50 ed 83 7b 1a ee df 06 5d 0f e8 e6 ed 2a dc 0f c2 59 e5 3f c3 ca 27 d1 3c 85 6f fa 43 a9 d3 3e a3 8d 48 f2 f6 e4 84 ad b4 46 83 04 08 92 76 77 37 79 9b d7 fd 63 58 f7 66 Data Ascii: igU7k\|fcWhqP{]*Y?'<oC>HFvw7ycXfF~]mw(7(8CaW`kub-X&r6ZEkI/c#+p~oxjyu,.yB2KPa~M#cN-GE_T1Gha^l6
Sep 4, 2024 14:22:40.011540890 CEST	1236	IN	Data Raw: e0 5c a7 bb ca 01 ee 4f f0 74 84 be 92 3c 22 82 7c 5c bd cc 9b 61 64 0d 6b fe 0c 4c 26 6d 67 9c b5 e7 ad 79 a2 f0 aa dd 63 a2 a0 3a 41 cc f9 ec fb 39 d3 9b 35 11 75 4d 5a 09 97 d5 42 c0 3d 46 0f 1a b1 3d e8 ff 67 2d 49 84 6e 44 c5 0f f4 0d 91 39 Data Ascii: \Ot<"\|\adkL&mgyc:A95uMZB=F=g-InD9N--SO7S"SDkQ{g:/^-k>{I.sfmg$BTiv\NuK//?[A-?-G\|\|zW\|\|_^qv>I!(&e^H
Sep 4, 2024 14:22:40.011547089 CEST	1236	IN	Data Raw: bb fc 6b fd bb fd eb 03 a6 c9 5b 02 66 05 74 07 4c 09 38 10 34 47 f8 77 ad a2 76 0c 1c 5d b5 f5 00 fe b7 75 d5 d6 13 f8 df d6 55 65 88 87 e7 c2 6c 97 49 11 f9 1e f1 a8 b8 70 8e 1b 6e d4 ea cc 0a a5 51 0f 89 26 b3 d1 20 57 28 65 5a 9d 3c 18 7c 5c Data Ascii: k[ftL84Gwv]uUelIpnQ& W(eZ<\|\drDwQi%smna72-k@@o7.;pF<p8^&GT\bh84`J]\|.j-e)\|&z}ek.>O4:\|@
Sep 4, 2024 14:22:40.011552095 CEST	1236	IN	Data Raw: a6 41 06 07 3d 82 71 76 75 c2 b9 99 b6 1e ce 8a 73 5d a9 85 e8 d7 5a 2f 69 f6 ac 30 53 b1 39 28 bd 91 67 f3 47 fa a3 0e 67 25 cc 82 6e 09 02 a0 5d 6d 20 ee e4 22 e7 42 f7 20 5c 3e 06 e4 91 70 53 b8 02 59 90 b7 e5 d3 7d fb 0f ec 47 1c 09 dc c3 c4 Data Ascii: A=qvus]Z/i0S9(gGg%n]m "B \>pSY}GK5%g}W0(DXq",7#!])'DoAm2nDF.\==4Q3;\|Fv;fQd&+Y;6S"tQ8(/"'h=DjYEYw
Sep 4, 2024 14:22:40.011560917 CEST	162	IN	Data Raw: 89 36 82 bd 83 69 63 71 ef 69 e1 e7 33 bd 1b 1b 2c b0 5e 58 76 e0 e4 83 dd b0 59 58 6d e1 c0 66 45 d8 17 70 1e fa 8b 70 6f 1a 0c 1a a0 fa fc 19 e1 b3 8d c2 67 67 04 78 96 9e 0f 28 0d 74 1c 2f 48 b2 e7 4d c5 8e d7 8c 02 0d 6f 80 b8 95 27 57 6c 3b Data Ascii: 6icqi3,^XvYXmfEppoggx(t/HMo'Wl;c?H+,(P76iCJ%4A==p#Du&-!%*'0
Sep 4, 2024 14:22:40.011570930 CEST	1236	IN	Data Raw: de ef cf 74 77 9f f9 1e 7c e0 94 70 17 86 09 35 9c 3d a6 5c 22 ca b7 c1 08 2a ca 1e 95 5c 0f 0b 84 23 c4 2c ec 83 b6 16 f8 d3 e6 79 42 f2 fd 74 6c b1 6d 39 94 90 5b 8c 97 54 28 d1 2e 41 c9 ba 75 82 8d dc 6a b5 ce 6a e5 57 48 fc 0e c1 31 cc 2e 80 Data Ascii: tw\|p5=\"*\#,yBtlm9[T(.AujjWH1.&u[VJ>#JtOlj%[v2z<?(C<eW1;7YIm%a{Pnv6_`FgaQ6(39reNtT2F-gco^T{S
Sep 4, 2024 14:22:40.011576891 CEST	1236	IN	Data Raw: b8 0c b9 f4 69 bd 09 e1 9c 38 8f a4 e2 3c d4 0d 6f a5 b9 cf 7b be 3a b5 ee 89 4b cf 5f 98 33 f3 b1 67 ce 13 ff dd bb 85 9f 84 af f6 ef 07 2f 18 81 73 86 a1 9d 29 14 d7 a2 b4 07 22 22 5d 6e f0 60 69 de 78 6d 84 3c f8 cd 63 1b 36 1c fb 59 31 ed 7a Data Ascii: i8<o{:K_3g/s)""]n`ixm<c6Y1zH=#R&3D]xyb8C@nk3Sa:)fyLxxK+d2W-z?b1Dd{3D#OPfDDhc
Sep 4, 2024 14:22:40.011584044 CEST	1236	IN	Data Raw: 66 d5 17 af 46 38 06 18 09 0b d1 ff 2a 86 cc c5 d3 54 fc 44 f0 28 8d 35 4c db 53 a2 4f 4e f0 0d 89 ce f6 2b 20 75 53 0b 6a 47 e7 46 e7 94 98 2a a2 7d e3 fc 46 17 55 31 9a 12 f0 fc 34 11 cf 4f 3c 3b 3f 29 5f d8 b5 a6 07 4f 4e 59 ec b7 52 5b 3e fa Data Ascii: fF8TD(5LSON+ uSjGF}FU14O<;?)_ONYR[>ZSJ(kUy))KkQP\|#j2+O?N^*;O'aK$XCx.jE;n6GQyBlZZ w-1(\|O[i".
Sep 4, 2024 14:22:40.016791105 CEST	1236	IN	Data Raw: 7a 4f 5c 62 ec ce 09 79 65 c2 9e aa a5 79 17 94 b9 4b 93 1e 75 71 83 c6 43 d7 46 b4 1e 8b 3b de 70 e8 da 98 59 87 e3 0f 6d da f8 c7 2c d8 34 5c 48 df f0 bb 6c 61 13 50 f9 66 f5 1b 94 41 26 31 ce 15 1c aa ff fd 55 9c 8f 50 f4 9c 2b 39 24 90 19 47 Data Ascii: zO\byeyKuqCF;pYm,4\HlaPfA&1UP+9$G;cVyEnsYp7*qRDQLKw}9["p#LX9EUzOUk%K!K-3J`cve-I[FnSjY9R=K %
Sep 4, 2024 14:22:40.357583046 CEST	387	OUT	GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1 Host: i2.cdn-image.com Connection: keep-alive Origin: http://ifdnzact.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:40.457149029 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:40 GMT Content-Type: application/font-woff Content-Length: 17264 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-4370" Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 70 00 10 00 00 00 00 71 40 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 43 54 00 00 00 1c 00 00 00 1c 6a aa b6 37 47 44 45 46 00 00 37 84 00 00 00 1e 00 00 00 1e 00 27 01 0d 47 50 4f 53 00 00 37 c4 00 00 0b 8e 00 00 13 c6 29 4d 73 4d 47 53 55 42 00 00 37 a4 00 00 00 20 00 00 00 20 6c 91 74 8f 4f 53 2f 32 00 00 01 e8 00 00 00 56 00 00 00 60 a5 bd 5d 40 63 6d 61 70 00 00 04 ec 00 00 02 75 00 00 03 86 c7 ce be ea 67 61 73 70 00 00 37 7c 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 09 78 00 00 29 05 00 00 47 f8 1b fa 03 ac 68 65 61 64 00 00 01 6c 00 00 00 36 00 00 00 36 fa 9a cf bf 68 68 65 61 00 00 01 a4 00 00 00 21 00 00 00 24 07 c7 04 70 68 6d 74 78 00 00 02 40 00 00 02 aa 00 00 04 1a 57 5c 36 b8 6c 6f 63 61 00 00 07 6c 00 00 02 0a 00 00 02 10 c1 de d4 3a 6d 61 78 70 00 00 01 c8 00 00 00 1f 00 00 00 20 01 50 00 38 6e 61 6d 65 00 00 32 80 00 00 02 e7 00 00 06 b4 4e ce 98 3d 70 6f 73 74 00 00 35 68 00 00 02 11 00 00 [TRUNCATED] Data Ascii: wOFFCpq@FFTMCTj7GDEF7'GPOS7)MsMGSUB7 ltOS/2V`]@cmapugasp7\|glyfx)Gheadl66hhea!$phmtx@W\6local:maxp P8name2N=post5h8',prepdhBL_<'d:jxc`d``>X"]?xc`d``dg0e`g& fB0xc`f`@9 EOa>[$$H)00>xm[HTQdf^a)"0#]0M "%a&Q7)H>DDEKDqI:X}SAM?c^Dq\hVP2DFD>Q4:r5APQ/!T5R4Zejom1Z}$q5=.3Cr>qe!Sa%tr7#^#{4@\*q1T0dwrqk\Gq[#w8Y7rd(\|"8NkG3WvvI7&M99/&s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49765	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:39.586453915 CEST	392	OUT	GET /__media__/pics/28905/arrrow.png HTTP/1.1 Host: i4.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:40.041470051 CEST	609	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:39 GMT Content-Type: image/png Content-Length: 283 Last-Modified: Tue, 04 Jan 2022 14:44:27 GMT Connection: keep-alive ETag: "61d45d4b-11b" Expires: Wed, 18 Sep 2024 12:22:39 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 1b 08 03 00 00 00 ad 28 94 ae 00 00 00 48 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 05 7a f2 f8 00 00 00 17 74 52 4e 53 00 74 db fa 40 1b e0 0e 05 66 55 f4 bd ec 32 27 d1 b0 ca 82 a6 64 67 ff c5 fb 8e 00 00 00 6b 49 44 41 54 18 d3 7d d1 c9 0e 80 20 0c 04 50 c4 a5 e0 86 7b ff ff 4f 35 f4 e0 c8 24 f6 f8 c2 d2 76 9c 93 18 c5 61 89 57 ed 12 4a d4 a7 a6 b9 94 0f 49 97 69 68 5e 4a 46 35 50 eb 8d 7a a0 85 48 b6 4c 7a 02 8d 46 d5 2f 85 d5 68 07 3a 8c a0 89 e0 8b 7b 74 86 de a1 bf 18 ca 9e 69 2e 9a 9d f6 c3 3b bc 68 cf 9c 05 e7 45 99 de f1 b5 0e ae 42 db 93 36 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR(HPLTEGpLztRNSt@fU2'dgkIDAT} P{O5$vaWJIih^JF5PzHLzF/h:{ti.;hEB6IENDB`
Sep 4, 2024 14:23:25.046032906 CEST	6	OUT	Data Raw: 00 Data Ascii:
Sep 4, 2024 14:24:10.050597906 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49766	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:39.773447037 CEST	381	OUT	GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1 Host: i4.cdn-image.com Connection: keep-alive Origin: http://ifdnzact.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:40.237370014 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:40 GMT Content-Type: application/font-woff Content-Length: 17312 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-43a0" Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 a0 00 10 00 00 00 00 73 60 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 6c 00 00 00 1c 00 00 00 1c 69 99 f4 2b 47 44 45 46 00 00 01 88 00 00 00 1e 00 00 00 1e 00 27 01 0d 47 50 4f 53 00 00 01 a8 00 00 0c c5 00 00 16 c0 c0 0d d5 ee 47 53 55 42 00 00 0e 70 00 00 00 20 00 00 00 20 6c 91 74 8f 4f 53 2f 32 00 00 0e 90 00 00 00 54 00 00 00 60 a6 e9 3d 09 63 6d 61 70 00 00 0e e4 00 00 02 75 00 00 03 86 c7 ce be ea 67 61 73 70 00 00 11 5c 00 00 00 08 00 00 00 08 00 00 00 10 67 6c 79 66 00 00 11 64 00 00 28 0b 00 00 47 38 61 9a 3f 94 68 65 61 64 00 00 39 70 00 00 00 34 00 00 00 36 09 88 d5 e9 68 68 65 61 00 00 39 a4 00 00 00 21 00 00 00 24 07 97 04 27 68 6d 74 78 00 00 39 c8 00 00 02 ad 00 00 04 1a 59 f7 2d 9c 6c 6f 63 61 00 00 3c 78 00 00 02 09 00 00 02 10 b1 e6 c4 00 6d 61 78 70 00 00 3e 84 00 00 00 1f 00 00 00 20 01 50 00 37 6e 61 6d 65 00 00 3e a4 00 00 02 df 00 00 06 99 17 bc cd 9c 70 6f 73 74 00 00 41 84 00 00 02 11 00 00 [TRUNCATED] Data Ascii: wOFFCs`FFTMli+GDEF'GPOSGSUBp ltOS/2T`=cmapugasp\glyfd(G8a?head9p46hhea9!$'hmtx9Y-loca<xmaxp> P7name>postA8Y,prepChh<'d:x[l\vb{l7ho+.!Qp1OPP%hUUUEMpQZA1I !C@==:cBP5:>9{^k)wJx)R~gO>m~6BJ:tIY_dq/mxel\|icKclzjo%;^x}olegOVV=\5]z_ono;555nO/ctR4tKTCmH]nT::tjAJwU$![yJ+u)IH7IH%}nZef/ ?(OA7)qpf#xxMO;jq77DsO@tD1Et0F`fd9wIXFafxlC[0F0
Sep 4, 2024 14:22:40.237502098 CEST	502	IN	Data Raw: 44 dd ee 45 e9 61 dc 63 28 f3 38 3c 47 b9 6a d1 ec 05 2c 04 99 99 84 53 82 59 a7 e4 3e ac 74 b8 ef 32 73 9a 59 a7 e0 96 83 47 12 0e f3 70 58 94 61 f7 8a 84 dc e7 d0 f4 39 14 0a fc 77 01 85 96 51 e8 02 0a 45 51 28 86 42 19 70 bc 03 8e 14 56 c3 28 Data Ascii: DEac(8<Gj,SY>t2sYGpXa9wQEQ(BpV(G9X`-J!G4Bap["8&`KfY3k00d'8<YQuk{"333J/<y6A>4sDCs9jfV4s%>
Sep 4, 2024 14:22:40.237508059 CEST	1236	IN	Data Raw: 0f f0 eb 7e ae 03 8a cd b0 74 c0 e6 60 25 af 56 8c 3e de ba a6 99 bd 89 f9 01 54 6a 61 44 2b b3 fb 19 31 c0 35 c8 e8 2f 2a 6c 2c 65 b1 94 b5 6b 9c b7 2c 0b 36 a3 33 d6 62 15 9a f9 c9 f9 36 72 6e 2f 7a f5 6b bc 4d 69 64 7b 91 72 0e 2b d3 16 4f 42 Data Ascii: ~t`%V>TjaD+15/l,ek,63b6rn/zkMid{r+OBQpS@V/=6zvR(YJOgerl+h6@w rDMy0Q<y5F^WQ_MkkVje]"F_#FM5+U-{x;U,G\ri6
Sep 4, 2024 14:22:40.237520933 CEST	1236	IN	Data Raw: 37 64 cf 52 66 ce 9b ba 6b 75 6b 9f 98 d4 73 d5 21 b8 1c 86 cb 90 f6 36 9f e0 77 f9 86 9e 3c f5 9f 75 ff be b6 02 5f 15 bd 67 be 22 7a d3 a8 7f d9 2a 9f 5b eb c2 4d 8f f7 b9 d2 9c 6e 6c e4 e6 6e 10 b9 69 ac 4f ac 8b dc 59 ac cf 61 fd f4 75 91 9b Data Ascii: 7dRfkuks!6w<u_g"z*[MnlniOYaukNi[L8^uz<SsekJt]$wqg%TJl@Q-RPt-jgVe,_m{yQ)d&tnk00V1dUYf/{mzv<
Sep 4, 2024 14:22:40.237528086 CEST	1236	IN	Data Raw: 3a 8a 70 11 25 46 89 38 91 28 92 2d b7 2d 05 0e d7 34 37 cd 53 f3 d2 74 cd 57 0b d0 42 b5 70 2d dd 5b f7 f6 d5 2d ba 4d 77 d6 5d 75 4f dd 4b 6f a1 f7 d5 63 f5 c9 3e 39 e5 16 29 7f d5 53 54 8d 34 32 84 9f a2 06 8a 60 11 26 22 45 b4 88 15 09 8a 7a Data Ascii: :p%F8(--47StWBp-[-Mw]uOKoc>9)ST42`&"EzPQhZCMEu:IQ:/H.SdL2AQ^a\|`3w32OyFQjS4L#jf8UnOX~{09bU43q:jvuqj&4
Sep 4, 2024 14:22:40.237591028 CEST	1236	IN	Data Raw: 11 c7 cd 27 be a4 8c e2 34 1b 35 46 03 ca 8c 41 ae 91 7f 74 f6 ec d6 b3 67 e7 5f 5c 71 11 1f 14 97 d1 76 98 fb 8e 3b cd b9 e2 38 b6 8b 3e ee a0 a9 d5 98 26 9a 83 52 9b 46 fb 95 19 12 72 62 67 e1 b8 1c ee 0b 38 05 0b 29 3f cc 46 95 3c 07 9a bf e8 Data Ascii: '45FAtg_\qv;8>&RFrbg8)?F<PQkL%1pd"N\|'O~8wQ0"ZSv5>_}{Z^zIx%;_1}UOMtu2A3:j5j.$J2!NY-#
Sep 4, 2024 14:22:40.237597942 CEST	896	IN	Data Raw: 5e 22 3c fb d6 8d 43 8f b6 37 14 2e a8 5e b5 78 6b ed ac 4d 57 c1 fc e6 86 05 53 db 5e 5c cc f6 80 d2 fd 26 5b 2b ca 38 87 f6 9c d2 e7 25 d1 49 46 bc f2 e2 2b df dc 6e 6b 6b 5b 52 d5 44 2e 3f 29 3c 8d ee d6 7a 6d de 1b 0b 85 2a c4 4f e7 d6 e0 dc Data Ascii: ^"<C7.^xkMWS^\&[+8%IF+nkk[RD.?)<zmOQ<I $/,\sV$7?]3 &H['.\|?v$u.,-,8a;tyM!$AF(2WleCq<S^:@gsgv
Sep 4, 2024 14:22:40.237962008 CEST	1236	IN	Data Raw: de ef cf 74 77 9f f9 1e 7c e0 94 70 17 86 09 35 9c 3d a6 5c 22 ca b7 c1 08 2a ca 1e 95 5c 0f 0b 84 23 c4 2c ec 83 b6 16 f8 d3 e6 79 42 f2 fd 74 6c b1 6d 39 94 90 5b 8c 97 54 28 d1 2e 41 c9 ba 75 82 8d dc 6a b5 ce 6a e5 57 48 fc 0e c1 31 cc 2e 80 Data Ascii: tw\|p5=\"*\#,yBtlm9[T(.AujjWH1.&u[VJ>#JtOlj%[v2z<?(C<eW1;7YIm%a{Pnv6_`FgaQ6(39reNtT2F-gco^T{S
Sep 4, 2024 14:22:40.237967014 CEST	1236	IN	Data Raw: b8 0c b9 f4 69 bd 09 e1 9c 38 8f a4 e2 3c d4 0d 6f a5 b9 cf 7b be 3a b5 ee 89 4b cf 5f 98 33 f3 b1 67 ce 13 ff dd bb 85 9f 84 af f6 ef 07 2f 18 81 73 86 a1 9d 29 14 d7 a2 b4 07 22 22 5d 6e f0 60 69 de 78 6d 84 3c f8 cd 63 1b 36 1c fb 59 31 ed 7a Data Ascii: i8<o{:K_3g/s)""]n`ixm<c6Y1zH=#R&3D]xyb8C@nk3Sa:)fyLxxK+d2W-z?b1Dd{3D#OPfDDhc
Sep 4, 2024 14:22:40.237978935 CEST	1236	IN	Data Raw: 66 d5 17 af 46 38 06 18 09 0b d1 ff 2a 86 cc c5 d3 54 fc 44 f0 28 8d 35 4c db 53 a2 4f 4e f0 0d 89 ce f6 2b 20 75 53 0b 6a 47 e7 46 e7 94 98 2a a2 7d e3 fc 46 17 55 31 9a 12 f0 fc 34 11 cf 4f 3c 3b 3f 29 5f d8 b5 a6 07 4f 4e 59 ec b7 52 5b 3e fa Data Ascii: fF8TD(5LSON+ uSjGF}FU14O<;?)_ONYR[>ZSJ(kUy))KkQP\|#j2+O?N^*;O'aK$XCx.jE;n6GQyBlZZ w-1(\|O[i".
Sep 4, 2024 14:22:40.243415117 CEST	1236	IN	Data Raw: 7a 4f 5c 62 ec ce 09 79 65 c2 9e aa a5 79 17 94 b9 4b 93 1e 75 71 83 c6 43 d7 46 b4 1e 8b 3b de 70 e8 da 98 59 87 e3 0f 6d da f8 c7 2c d8 34 5c 48 df f0 bb 6c 61 13 50 f9 66 f5 1b 94 41 26 31 ce 15 1c aa ff fd 55 9c 8f 50 f4 9c 2b 39 24 90 19 47 Data Ascii: zO\byeyKuqCF;pYm,4\HlaPfA&1UP+9$G;cVyEnsYp7*qRDQLKw}9["p#LX9EUzOUk%K!K-3J`cve-I[FnSjY9R=K %

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49767	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:39.773833990 CEST	387	OUT	GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1 Host: i4.cdn-image.com Connection: keep-alive Origin: http://ifdnzact.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:40.219333887 CEST	278	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:40 GMT Content-Type: application/font-woff Content-Length: 17264 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-4370" Access-Control-Allow-Origin: * Accept-Ranges: bytes
Sep 4, 2024 14:22:40.219451904 CEST	1236	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 70 00 10 00 00 00 00 71 40 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 43 54 00 00 00 1c 00 00 00 1c 6a aa b6 37 47 44 45 46 00 00 37 84 00 00 00 1e 00 00 00 1e 00 27 Data Ascii: wOFFCpq@FFTMCTj7GDEF7'GPOS7)MsMGSUB7 ltOS/2V`]@cmapugasp7\|glyfx)Gheadl66hhea!$
Sep 4, 2024 14:22:40.219458103 CEST	1236	IN	Data Raw: 27 75 10 61 ed e5 79 7b d1 aa 23 ec b5 07 f0 c1 f7 17 31 5c be e6 00 00 78 9c ad 92 57 4c 55 41 10 86 bf bd 5c ae 8a 05 41 44 44 c5 c3 51 40 ac 28 22 82 0d 15 0b 76 11 b1 a1 82 2d c6 5e 12 51 23 24 f6 82 15 b0 c4 96 60 2f 88 1a 1b d8 22 1a 35 21 Data Ascii: 'uay{#1\xWLUA\ADDQ@("v-^Q#$`/"5!`x0A("Lfu#HTV(pMy5I$)E[$:p%F8(--47StWBp-[-Mw]uOKoc>9)ST42`&"EzPQhZCMEu
Sep 4, 2024 14:22:40.219464064 CEST	448	IN	Data Raw: 5d 62 59 70 6d 60 5b 50 14 2b bb ea a2 a8 20 c5 dd 5f 5d 5d b1 e0 ae 7c bb a8 e8 92 97 ef dc fb de 4c 26 13 58 bf 3f 65 26 33 b9 f7 dc 73 ce 3d ed 9e 73 ee 70 84 2b 19 be c9 7d 4a ce 72 ae dc 44 8e f3 d6 2b 79 2d ef a5 33 98 12 7d 14 b2 69 db 83 Data Ascii: ]bYpm`[P+ _]]\|L&X?e&3s=sp+}JrD+y-3}i*>zHWg xNzeM3?(\|xasS9r\+Y~r>gA={sGHcw$p.\01Qua
Sep 4, 2024 14:22:40.220123053 CEST	1236	IN	Data Raw: 92 87 c9 42 7c 12 cd ba 30 99 d2 8b 32 c0 64 34 e8 20 b0 63 eb 23 11 6a eb a0 65 b0 22 71 aa 67 95 9f 3a 3c a3 b4 a9 4e 18 2e 5b 5d 38 27 75 61 bf d1 5f bd d0 e8 36 bf 75 61 5d 5c 5a 6c 45 4d 55 c9 ac ba 0e 43 6c 7a 4a be 21 22 a5 a0 b1 f2 60 72 Data Ascii: B\|02d4 c#je"qg:<N.[]8'ua_6ua]\ZlEMUClzJ!"`rJOQz1<L{r&~J}r8/\^6H/{"eYBeexy~WIq8&}8>Vb\_fy9**[Z5yE3w.<hqV>15sD=7G4
Sep 4, 2024 14:22:40.220156908 CEST	224	IN	Data Raw: 9e e5 a3 5d 52 52 b6 a2 a4 78 75 f1 ea cf a0 e2 fb ef 9f e8 bd 37 37 63 ed d6 0b 3b e3 d5 b9 c2 c3 05 8d 25 83 9f 5c 14 2e fe 29 2d 34 28 14 ce 56 d7 dc dd dc 88 78 51 e6 5e 45 d9 97 33 4b 2b d7 52 23 18 07 ee f0 66 c1 6a 30 d0 9f 82 f8 35 6b 0e Data Ascii: ]RRxu77c;%\.)-4(VxQ^E3K+R#fj05kV\|>h98GFOFN=(;%=+<1Ux~=^1rJh$wTSjtONzSQ2L/[ G?4>gg
Sep 4, 2024 14:22:40.222196102 CEST	1236	IN	Data Raw: 69 2b cf 42 d2 fb cb ab e2 75 5b 3e ea a7 7b 40 f1 be c4 68 45 59 e7 d0 88 53 fc c0 a0 d6 52 2c c9 c4 77 de 7c e7 eb eb 30 59 f8 87 75 fd 9a 4d e4 d4 09 e1 c5 d3 e4 94 f0 f0 75 41 7d 97 28 ab 74 7e 1d ce 77 17 ed 9b f4 ed 49 ca 84 6d 30 5d 78 1a Data Ascii: i+Bu[>{@hEYSR,w\|0YuMuA}(t~wIm0]xh}jq(lS-&+\|gTH!%G$:Ha$5h\|)"zO:gVwH7A6KR,CV"S.z:r^&7
Sep 4, 2024 14:22:40.222202063 CEST	1236	IN	Data Raw: 71 60 46 65 5a f3 9e ce bc a2 0e c4 21 0e e7 4e 47 1c 98 7e fa b0 c9 d4 8c 23 9d 3a 09 89 33 7b 0f 7e 94 6d b1 64 2c db d6 b1 a1 a9 69 63 9b db fe 9b 03 0d 10 32 e4 57 51 f7 46 5b fb fe ce 4e 46 0b 85 93 c5 70 f0 41 e9 55 07 01 8d 28 44 66 21 8b Data Ascii: q`FeZ!NG~#:3{~md,ic2WQF[NFpAU(Df!BZ]:2gjZ~3xe+;fsJE}7=0}mevKnXuQ8nYOp$rhS<$AmUFN"nvyJsJs*\IB}LjK@t
Sep 4, 2024 14:22:40.222213984 CEST	448	IN	Data Raw: fa 0c 7f 9a 79 1e 95 73 f6 64 79 57 31 d9 ec 09 ea 39 db b6 76 66 2d 2c ce 49 4f cd 49 cd 99 d1 bb ac b8 30 79 c5 12 f7 3d 9f ed 99 b4 6c e9 b8 e2 4a 83 4c 78 52 9e 56 34 d3 7d 09 f1 af 5d d9 34 19 4a 28 cf 52 d9 19 ed 2a 37 85 c6 41 34 d3 45 37 Data Ascii: ysdyW19vf-,IOI0y=lJLxRV4}]4J(R7A4E7Vo^RI=$.;Z,NUb3(jY% [5l(Zsm)i{SE'c-n,hl.mhn@~Qgz'>*r)]<
Sep 4, 2024 14:22:40.224313974 CEST	1236	IN	Data Raw: 86 e8 43 42 37 85 e0 63 08 a9 c7 47 ad 3e 54 7c 64 39 3d d3 f0 0d 7e 3c 79 8b cd c5 9d e3 3c c4 04 83 97 07 4b c3 04 9b 65 a3 03 38 7e fc 05 e1 c3 0f 2f 40 f4 a3 27 84 1f 4f fe 01 c6 6b f2 9e 5a b2 fc 99 e4 78 c3 ec d2 d2 f9 b1 70 43 b8 78 f1 02 Data Ascii: CB7cG>T\|d9=~<y<Ke8~/@'OkZxpCxD^A)_+L_Zjt{dac\GHYyfN6$$qS\ew$.c4D:=->Pr:r,AK~S5<,<9QBr~~(r
Sep 4, 2024 14:22:40.224320889 CEST	1236	IN	Data Raw: 8d 62 32 f8 28 47 19 b5 58 18 5b b4 e8 da eb 51 30 62 e8 d4 5b 8e 3b 55 30 96 c8 a6 8e 2b b0 9b be 4c cf 3f 42 a4 bd a0 21 e6 71 eb 50 8e 79 6a e3 68 96 cc d5 a1 2a 01 bf 43 c1 05 4f 87 d2 c4 0f 6d 09 7f b6 57 27 38 87 f9 cc 0f 3a 56 34 42 51 7c Data Ascii: b2(GX[Q0b[;U0+L?B!qPyjh*COmW'8:V4BQ\|E=D>%`:((~%j^MoQjQpLvk?r [dV++t0:>PmZ{CJ1DzyZ+cDqZ2RlhKFO#ViC#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49770	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:40.209125996 CEST	293	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i4.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:40.656398058 CEST	341	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:40 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Thu, 16 Feb 2023 20:41:36 GMT Connection: keep-alive ETag: "63ee9500-20f3" Expires: Wed, 18 Sep 2024 12:22:40 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Sep 4, 2024 14:22:40.656404018 CEST	1236	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n
Sep 4, 2024 14:22:40.656471014 CEST	1236	IN	Data Raw: 28 29 3b 6f 3c 31 65 33 26 26 28 6f 2b 3d 31 39 30 30 29 3b 76 61 72 20 72 3d 6e 2e 67 65 74 44 61 79 28 29 2c 69 3d 6e 2e 67 65 74 4d 6f 6e 74 68 28 29 2c 6e 3d 6e 2e 67 65 74 44 61 74 65 28 29 3b 6e 3c 31 30 26 26 28 6e 3d 22 30 22 2b 6e 29 3b Data Ascii: ();o<1e3&&(o+=1900);var r=n.getDay(),i=n.getMonth(),n=n.getDate();n<10&&(n="0"+n);o=t[r]+", "+e[i]+" "+n+", "+o;document.write(o)}function checkUTFChar(t){for(var e=!0,n=0;n<128;++n){var o=n.toString(16);if(1==o.length&&(o="0"+o),o="%"+o,(o=un
Sep 4, 2024 14:22:40.656497002 CEST	448	IN	Data Raw: 65 28 62 72 5f 64 61 74 61 2e 67 65 74 4d 6f 75 73 65 50 6f 73 69 74 69 6f 6e 44 61 74 61 28 29 29 3a 22 61 64 63 6c 6b 22 3d 3d 74 7c 7c 22 73 72 63 71 72 79 22 3d 3d 74 3f 22 26 62 64 3d 22 2b 65 73 63 61 70 65 28 62 72 5f 64 61 74 61 2e 67 65 Data Ascii: e(br_data.getMousePositionData()):"adclk"==t\|\|"srcqry"==t?"&bd="+escape(br_data.getSearchBoxRelatedData()):"&bd="+escape(br_data.getURLBrowserData())}catch(t){}return e}var brdata=function(){this.fd="#",this.cookieSupport=-1,this.isinframe=-1,
Sep 4, 2024 14:22:40.656589985 CEST	1236	IN	Data Raw: 75 72 6e 20 73 63 72 65 65 6e 2e 68 65 69 67 68 74 7d 2c 74 68 69 73 2e 67 65 74 53 63 72 65 65 6e 57 69 64 74 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 63 72 65 65 6e 2e 77 69 64 74 68 7d 2c 74 68 69 73 2e 63 61 6c 6c 65 64 Data Ascii: urn screen.height},this.getScreenWidth=function(){return screen.width},this.calledInExternalFrame=function(){return"n"},this.isCookieSupported=function(){var t;return-1==this.cookieSupport&&(t=navigator.cookieEnabled\|\|!1,void 0!==navigator.coo
Sep 4, 2024 14:22:40.656599998 CEST	224	IN	Data Raw: 74 2e 63 6c 69 65 6e 74 59 2b 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 54 6f 70 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 54 6f 70 29 7d 63 61 74 63 68 28 74 29 7b 7d Data Ascii: t.clientY+(document.documentElement.scrollTop\|\|document.body.scrollTop)}catch(t){}return!0}document.onmousemove=mPos;var _skPU={_Top:null,_wh:function(){var e=0;try{"number"==typeof this._Top.window.innerHeight?e=this._Top.w
Sep 4, 2024 14:22:40.656609058 CEST	1236	IN	Data Raw: 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 3a 74 68 69 73 2e 5f 54 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 74 68 69 73 2e 5f 54 6f 70 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 Data Ascii: indow.innerHeight:this._Top.document.documentElement&&this._Top.document.documentElement.clientHeight?e=this._Top.document.documentElement.clientHeight:this._Top.document.body&&this._Top.document.body.clientHeight&&(e=this._Top.document.body.c
Sep 4, 2024 14:22:40.656737089 CEST	224	IN	Data Raw: 6e 70 66 3d 6e 70 66 7c 7c 22 74 6f 6f 6c 62 61 72 3d 30 2c 73 63 72 6f 6c 6c 62 61 72 73 3d 31 2c 6c 6f 63 61 74 69 6f 6e 3d 31 2c 73 74 61 74 75 73 62 61 72 3d 30 2c 6d 65 6e 75 62 61 72 3d 30 2c 72 65 73 69 7a 61 62 6c 65 3d 31 22 3b 76 61 72 Data Ascii: npf=npf\|\|"toolbar=0,scrollbars=1,location=1,statusbar=0,menubar=0,resizable=1";var _npW=this._Top.window.open(_npSU,_npID,npf+",top="+pxTop+",left="+pxLeft+",width="+pw+",height="+ph);return _npW&&(_npW.blur(),-1<navigator.u
Sep 4, 2024 14:22:40.656815052 CEST	1236	IN	Data Raw: 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 65 77 65 62 6b 69 74 22 29 26 26 28 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 62 6c 75 72 28 29 2c 74 68 69 73 2e 5f 54 6f 70 2e Data Ascii: serAgent.toLowerCase().indexOf("applewebkit")&&(this._Top.window.blur(),this._Top.window.focus()),_npW.Init=function(e){with(e)Params=e.Params,Main=function(){void 0===window.mozPaintCount\|\|(t=window.open("about:blank"))&&t.close();var t=Param
Sep 4, 2024 14:22:40.656831026 CEST	224	IN	Data Raw: 6f 77 50 6f 70 26 26 28 73 68 6f 77 50 6f 70 3d 30 29 2c 21 31 3b 31 21 3d 73 68 6f 77 50 6f 70 7c 7c 72 65 6e 64 65 72 46 41 43 50 28 74 29 7c 7c 73 68 70 70 28 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 68 70 70 28 Data Ascii: owPop&&(showPop=0),!1;1!=showPop\|\|renderFACP(t)\|\|shpp(t)}catch(t){}}function shpp(t){if("undefined"!=typeof __pp&&1==showPop&&!renderFACP(t))try{if(t\|\|((t=window.event\|\|window.Event).cancelBubble=!0),t.button&&2==t.button)re
Sep 4, 2024 14:22:40.743442059 CEST	1135	IN	Data Raw: 74 75 72 6e 3b 74 72 79 7b 76 61 72 20 65 3d 21 31 3b 69 73 49 45 28 29 26 26 28 65 3d 73 68 64 73 70 28 74 29 29 2c 65 7c 7c 22 6c 64 22 3d 3d 74 7c 7c 28 76 6f 69 64 20 30 21 3d 3d 5f 5f 70 70 2e 6b 70 26 26 76 6f 69 64 20 30 21 3d 3d 5f 5f 70 Data Ascii: turn;try{var e=!1;isIE()&&(e=shdsp(t)),e\|\|"ld"==t\|\|(void 0!==__pp.kp&&void 0!==__pp.kp.u&&__pp.kp.u&&0<__pp.kp.u.length&&0==__pp.kp.pd&&(__pp.kp.pd=!0,"ex"==t&&(__pp.kp.u=__pp.kp.u+"&_onx_=1"),_skPU.doPU(__pp.kp.u,__pp.kp.w,__pp.kp.h,__pp.kp.p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49769	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:40.209445000 CEST	297	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i4.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:40.656749010 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:40 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Wed, 18 Sep 2024 12:22:40 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 30 f2 00 2c c1 00 2c 37 03 90 81 f9 8f 29 b2 13 3b 91 25 a0 9b ae dd a1 ab d6 7a bc 0f e7 7c b7 4e fd b0 ab 8a 28 f1 09 c8 13 96 00 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c [TRUNCATED] Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0P%@a@a0@a0P0P(P(P((@a@a0@a0P0P(P(P((@a@a0@aPeaLt[=ul=HhOnNc=e{l[,lu_cnk,n;~'^a$sbV&aqcm3Ts*l#zXtH+8c/BH1>CXHay/AIl2g}s/Q8{.;R91oeGo-V:;u$5'.lW:Q\v_:z4',l]2z4'e,~O]%>\|v_2U}8u=hL4$7aj;eMhL\>',/]I,{}a91\|Jz
Sep 4, 2024 14:22:40.656769037 CEST	553	IN	Data Raw: b1 73 e2 d5 85 ed aa 5b 43 07 31 c7 b0 d3 f6 53 17 56 dd 8c e8 20 e6 18 96 72 88 08 4b e8 20 e6 18 96 f8 01 7c 65 61 db 1a 97 d0 8b 98 d7 b0 f2 73 62 f8 8c 1a 3f 6a d3 c2 07 f0 95 33 ce 55 85 55 39 23 1e fd 63 98 c5 54 ba 3f 16 93 15 b6 b5 82 34 Data Ascii: s[C1SV rK \|easb?j3UU9#cT?4JYA)O(W.:+FOQX3DWsn]{d^Va4\>gDbvU1aEjass+e9<lNTX3KVaV\|
Sep 4, 2024 14:22:40.656780005 CEST	1236	IN	Data Raw: aa 23 f1 d3 39 cc 88 bf f8 cd 54 39 f7 ad 6d 9e fd f0 c2 9a 9b 11 1d c3 1c c4 32 76 4f 98 11 1d c3 1c c4 12 b7 4f 98 11 1d c3 bc 88 25 ce 89 e1 5b de 6b 98 17 b1 c4 39 31 7c c9 1b 12 13 ac ed a0 b3 85 b5 f7 1d 6f 48 74 5f 9f 33 27 86 19 d1 90 68 Data Ascii: #9T9m2vOO%[k91\|oHt_3'hLL?*l!m9hgDwx"#Q8pvg{-nr34/=0isbz9_X?vq:1qN:\|%n0#Si^NfA(G\|cN,S
Sep 4, 2024 14:22:40.656791925 CEST	1236	IN	Data Raw: 76 8a 3a 8a b0 91 14 a6 30 85 29 4c 61 0a 53 58 5d fc bd c4 32 36 b6 92 c2 3e e4 6f fe 96 b1 b4 95 14 f6 21 3f 9a f2 b3 29 85 29 4c 61 0a 9b 2b 0f ce 9e 9c cb 17 b6 f2 af 71 76 95 e8 32 31 cb 97 45 7c f2 af 4a 57 98 c2 92 fa 7a 5d 8b f8 b9 22 1a Data Ascii: v:0)LaSX]26>o!?))La+qv21E\|JWz]"s21_iE-Lc.:\uil!BV6/LT}RKpc.:\u}a7 Vk10}}\m-ony(N7!Xs5!,}(.
Sep 4, 2024 14:22:40.656805038 CEST	448	IN	Data Raw: 93 3c 64 22 44 e2 75 9f 9f d4 09 cb 7e fd d6 19 0b 93 eb 44 60 01 27 f1 aa 8f 4f 4c 80 e5 91 0e d9 52 d9 e4 3a 11 32 11 22 f1 32 8d 28 39 7f f1 66 75 a4 8a 6c ee 3c 0f c2 40 d8 65 1a 31 37 9b d9 38 1d d3 eb 44 14 62 28 c3 ae d2 88 0f b4 0a 5e db Data Ascii: <d"Du~D`'OLR:2"2(9ful<@e178Db(^knX]B{ST1Sb<NDG+OKbyJ(P]%4wzl7dhawh@#^D }c3Ny=u"fPLmyG
Sep 4, 2024 14:22:40.659058094 CEST	1236	IN	Data Raw: 22 53 36 ef 5e 2f 8b 98 b2 4b 8f a1 0e 8c 74 bc ae 11 d5 e3 e0 32 c7 b1 fc 10 16 75 2b 8e 19 a5 0a 33 ea 44 10 06 c2 5e d4 88 51 fd 78 d1 4d 6e e1 41 98 56 62 3a 0c 2c 3c a5 4e 04 61 20 ec 55 8d 28 c6 90 4f 29 4c 78 49 84 f1 36 e7 61 d8 6b cd 8e Data Ascii: "S6^/Kt2u+3D^QxMnAVb:,<Na U(O)LxI6ak/a4$#Wy0DWw)t"a/jD7uB"l\|uUcvDa}Yn,h`Jap$@+)950v(-E<h>3:/\|NlN{Q'"!s7
Sep 4, 2024 14:22:40.659204006 CEST	224	IN	Data Raw: 75 25 73 6b ed a7 2c 0b a3 3d ab c0 02 92 d8 09 8d 48 cd 6d 46 79 8d db 8e cf 11 9a 1b 20 f2 22 37 3d 7d 69 57 11 b4 66 47 1c 4c 0a 20 30 d8 d1 d7 88 25 77 b1 2e 15 35 bb 48 1b 14 83 87 ac 4a 71 42 66 21 37 db b4 36 96 d9 81 71 0e 0c 76 1c 4d 61 Data Ascii: u%sk,=HmFy "7=}iWfGL 0%w.5HJqBf!76qvMaUsr\^s>l9}0][NG#(Z]LnhD-hvu?@:6(4k%5$FDwR<`{qh
Sep 4, 2024 14:22:40.660953045 CEST	1236	IN	Data Raw: 3e 65 e5 c9 bd c9 8e cf 7c 56 11 08 00 62 c7 b4 4d d4 95 01 7a 6d b3 98 cb f9 bc 48 8c fe ec 4a 4b 21 17 9e c8 9e 79 e6 f2 df 10 3a 11 12 11 8d e7 c3 1a 51 ec 3d 7c ac fb 6f d2 26 ed 6e 0a 0b df ff 2c 5d c2 16 37 40 ec 16 0b 64 07 64 00 9d 08 c0 Data Ascii: >e\|VbMzmHJK!y:Q=\|o&n,]7@ddPZv~T",P=zwk/vF#+pv,3aq%laub6TKq5a)1{Nuck6qDLQ98V;DT"fnn
Sep 4, 2024 14:22:40.660995007 CEST	1236	IN	Data Raw: 24 89 8a 30 b3 4d 4c 2d b1 2a d5 67 75 c0 d1 3d 4a d1 32 fb 8c 5f 2b a7 bd a8 b0 29 f8 88 5f 25 64 15 61 c4 9b e3 59 97 e7 d8 b2 25 62 46 d8 76 10 c4 94 3e 49 2d 02 42 e4 91 9f 03 b2 65 58 fc 5e 6a 2e c6 83 3f e1 17 13 c8 4a ca 0e bf 6e e9 e3 10 Data Ascii: $0ML-*gu=J2_+)_%daY%bFv>I-BeX^j.?JnuvvOJ_`1DT].])Ya-@?#Ov'Q>$1vCR5I%SaIK,\|hDw(&yL'u~Qd,K;Y%(LIc\|!M0
Sep 4, 2024 14:22:40.661006927 CEST	1236	IN	Data Raw: d6 5d 7b a9 93 cb 4f 20 ac e5 eb 3b 41 8c 89 7b 09 b5 84 42 90 65 4a d1 54 0c 2b 99 ef e3 0a 62 a3 9b 61 2a f8 65 69 89 39 e9 e5 4e d0 06 a3 ef 81 a8 55 3b 62 ac 10 67 54 fd 17 83 f1 14 c2 b6 e3 34 71 af 17 0f a2 2d 9f a2 c2 f7 6f 72 4e 9e a3 eb Data Ascii: ]{O ;A{BeJT+ba*ei9NU;bgT4q-orN8G7!_eulF0\fCY,XqN!EQuXbf2\|+^es01eB&\|(55fLhs8uU(Y;('3lVT$5,UDnH)
Sep 4, 2024 14:22:40.662139893 CEST	1236	IN	Data Raw: 27 84 6d 3f 46 d8 fe b8 25 46 4d 0a 75 9f 58 5e d4 75 b9 b2 c3 0c 6f 5a fa a3 72 1f ab e5 3c 32 4b 4c e5 4e 4e d6 81 86 79 a6 c5 35 bc 4c 4b 9f 0d be 93 40 b9 f5 c1 38 10 0e ee 9a 27 6e 3f 46 d8 c1 94 58 72 24 b7 91 10 ad c9 26 50 76 d8 75 89 e8 Data Ascii: 'm?F%FMuX^uoZr<2KLNNy5LK@8'n?FXr$&Pvu#Z0DOuc^ou0D#c?7(F5Vst8zb<`5@=lCzSxBh{6tdYgPT'<B#H#N]Cg1ao[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49771	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:40.210973024 CEST	300	OUT	GET /__media__/pics/28905/arrrow.png HTTP/1.1 Host: i4.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:40.659743071 CEST	326	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:40 GMT Content-Type: image/png Content-Length: 283 Last-Modified: Tue, 04 Jan 2022 14:44:27 GMT Connection: keep-alive ETag: "61d45d4b-11b" Expires: Wed, 18 Sep 2024 12:22:40 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Sep 4, 2024 14:22:40.794210911 CEST	283	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 1b 08 03 00 00 00 ad 28 94 ae 00 00 00 48 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR(HPLTEGpLztRNSt@fU2'dgkIDAT} P{O5$vaWJIih^JF5PzHLzF/h:{t
Sep 4, 2024 14:23:25.796420097 CEST	6	OUT	Data Raw: 00 Data Ascii:
Sep 4, 2024 14:24:10.811930895 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49794	185.53.178.52	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:52.594438076 CEST	424	OUT	GET / HTTP/1.1 Host: gooel.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:53.483481884 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Redirect: skenzo X-Buckets: bucket011 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_PeviVk6I6t4v60yxzwEXLHQpbVH6nGUBuUrgHlABuDN0hdSDPnGJT4zsHaVeloTogP45+i+2UloXRo8srysF5A== X-Template: tpl_CleanPeppermintBlack_twoclick X-Language: english Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Domain: gooel.com X-Subdomain: Content-Encoding: gzip Data Raw: 33 65 66 0d 0a 1f 8b 08 00 00 00 00 00 04 03 b5 55 6d 6f e4 34 10 fe 7c f9 15 c6 15 5c 7b 5c e2 a4 a5 5c 9b 26 8b d4 17 d1 93 0a 57 1d 8b 80 4f c8 1b 3b 59 53 c7 0e b6 b3 bb 2d ea 7f 67 ec 24 7b 7b 62 85 f8 50 f6 cb 7a 26 f6 33 6f cf cc 14 5f 5c 7f b8 9a ff 76 7f 83 96 ae 95 e8 fe e7 cb bb f7 57 08 c7 84 fc 72 72 45 c8 f5 fc 1a fd 7a 3b ff e1 0e 65 49 8a e6 86 2a 2b 9c d0 8a 4a 42 6e 7e c4 11 1a 7f 78 e9 5c 97 13 b2 5e af 93 f5 49 a2 4d 43 e6 1f c9 c6 63 66 1e 64 3c c6 6e 07 21 61 8e e1 59 54 04 c3 9b 56 2a 5b ee 81 c9 ce cf cf 87 d7 18 c1 a5 5c 52 d5 94 98 2b 8c b6 27 8f c1 29 9b 05 6f 8a 96 3b 0a c1 b8 2e e6 7f f6 62 55 e2 2b ad 1c 57 2e 9e 3f 76 1c a3 6a 90 4a ec f8 c6 11 6f fb 02 55 4b 6a 2c 77 65 ef ea f8 0c 93 5d 20 45 5b 5e e2 95 e0 eb 4e 1b b7 f3 7c 2d 98 5b 96 8c af 44 c5 e3 20 bc 45 42 41 72 a8 8c 6d 45 25 2f b3 b7 a8 a5 1b d1 f6 ed a4 80 68 7d be 0a 27 9c e4 b3 46 6b 2e 93 4a b7 05 19 14 db 6c 16 d6 3d 4a 8e 5a ce 04 2d b1 ad 0c 87 78 67 51 42 2d 78 f9 bb 75 d4 a4 e8 af e8 d5 82 56 0f 8d Data Ascii: 3efUmo4\|\{\\&WO;YS-g${{bPz&3o_\vWrrEz;eI+JBn~x\^IMCcfd<n!aYTV[\R+')o;.bU+W.?vjJoUKj,we] E[^N\|-[D EBArmE%/h}'Fk.Jl=JZ-xgQB-xuV
Sep 4, 2024 14:22:53.483603001 CEST	681	IN	Data Raw: d1 bd 62 39 ea 8d 3c 7c 4d 08 3b 39 eb ac 51 22 7b b7 58 6d fa a4 92 ba 67 b5 81 90 13 c5 1d 71 4b de 72 4b 02 8c 25 01 27 69 44 fd fa 08 29 1d 1b de 71 ea 50 05 a9 e2 e6 22 7a 15 62 ca 51 76 d2 6d 40 5a 72 d1 2c 1d 88 c7 41 64 c2 76 92 3e e6 10 Data Ascii: b9<\|M;9Q"{XmgqKrK%'iD)qP"zbQvm@Zr,Adv>9u2{!'rVaGXo}\|-Whz%<eW}Wr`7V-5PyR<B1[-7x5Nbnp-GM=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49800	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:54.022692919 CEST	351	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/?dn=gooel.com&pid=9PO755G95 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:54.473905087 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:54 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Thu, 16 Feb 2023 16:29:54 GMT Connection: keep-alive ETag: "63ee5a02-20f3" Expires: Wed, 18 Sep 2024 12:22:54 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 2a 2f 0d 0a 76 61 72 20 73 68 6f 77 50 6f 70 3d 31 3b 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 53 65 61 72 63 68 54 65 78 74 28 74 29 7b 74 2e 76 61 6c 75 65 3d 22 22 2c 74 2e 73 65 6c 65 63 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 72 65 70 6c 61 63 65 53 74 72 69 6e 67 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 65 2c 6e 2c 22 67 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 75 62 6d 69 74 53 65 61 72 63 68 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2b 3d 67 65 6e 65 72 61 74 65 42 72 6f 77 4c 6f 67 55 52 4c 28 22 73 72 63 71 72 79 22 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 74 5d 2c 30 3d 3d 64 2e 65 6c 65 6d 65 6e 74 73 2e 71 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 7c 7c 22 45 6e 74 65 72 20 4b 65 79 77 6f 72 64 [TRUNCATED] Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function change
Sep 4, 2024 14:22:54.473922968 CEST	1236	IN	Data Raw: 53 74 61 74 75 73 28 74 29 7b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 61 64 64 62 6f 6f 6b 6d 61 72 6b 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 41 73 48 6f 6d 65 50 61 67 65 28 74 2c 65 29 7b 72 65 Data Ascii: Status(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate(){var t=new Array("Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"),e=new Array("January","February","March","April
Sep 4, 2024 14:22:54.473933935 CEST	789	IN	Data Raw: 43 6c 69 63 6b 55 52 4c 28 6c 69 6e 6b 73 5b 69 5d 2c 22 6f 6c 6f 64 22 29 2c 6c 69 6e 6b 73 5b 69 5d 2e 69 6e 6e 65 72 48 54 4d 4c 3d 74 65 6d 70 44 61 74 61 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 6d 6f 64 69 66 79 4b Data Ascii: ClickURL(links[i],"olod"),links[i].innerHTML=tempData)}catch(t){}}function modifyKeywordClickURL(t,e){return t.href=t.href+generateBrowLogURL(e),"undefined"!=typeof prctu&&0<prctu.length&&(t.href=prctu+getEscapedString(t.href)),!0}function gen
Sep 4, 2024 14:22:54.474210024 CEST	1236	IN	Data Raw: 75 72 6e 20 73 63 72 65 65 6e 2e 68 65 69 67 68 74 7d 2c 74 68 69 73 2e 67 65 74 53 63 72 65 65 6e 57 69 64 74 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 63 72 65 65 6e 2e 77 69 64 74 68 7d 2c 74 68 69 73 2e 63 61 6c 6c 65 64 Data Ascii: urn screen.height},this.getScreenWidth=function(){return screen.width},this.calledInExternalFrame=function(){return"n"},this.isCookieSupported=function(){var t;return-1==this.cookieSupport&&(t=navigator.cookieEnabled\|\|!1,void 0!==navigator.coo
Sep 4, 2024 14:22:54.474268913 CEST	1236	IN	Data Raw: 74 2e 63 6c 69 65 6e 74 59 2b 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 54 6f 70 7c 7c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 54 6f 70 29 7d 63 61 74 63 68 28 74 29 7b 7d Data Ascii: t.clientY+(document.documentElement.scrollTop\|\|document.body.scrollTop)}catch(t){}return!0}document.onmousemove=mPos;var _skPU={_Top:null,_wh:function(){var e=0;try{"number"==typeof this._Top.window.innerHeight?e=this._Top.window.innerHeight:t
Sep 4, 2024 14:22:54.474287987 CEST	1236	IN	Data Raw: 68 28 65 29 7b 7d 76 61 72 20 5f 6e 70 53 55 3d 64 72 3f 75 72 6c 3a 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 2c 5f 6e 70 49 44 3d 22 70 75 5f 22 2b 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 Data Ascii: h(e){}var _npSU=dr?url:"about:blank",_npID="pu_"+Math.floor(89999999*Math.random()+1e7),pxLeft=0,pxTop=0;-1==pw&&(pw=this._ww()),-1==ph&&(ph=this._wh()),pxLeft=this._wl()+this._ww()/2-pw/2,pxTop=this._wt()+this._wh()/2-ph/2,npf=npf\|\|"toolbar=0
Sep 4, 2024 14:22:54.474368095 CEST	1236	IN	Data Raw: 41 43 50 2e 77 2c 5f 5f 70 70 2e 46 41 43 50 2e 68 2c 5f 5f 70 70 2e 46 41 43 50 2e 70 2c 22 65 78 22 3d 3d 74 29 2c 21 28 73 68 6f 77 50 6f 70 3d 30 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 28 5f 5f 70 70 2e 46 41 43 50 2e 70 64 3d Data Ascii: ACP.w,__pp.FACP.h,__pp.FACP.p,"ex"==t),!(showPop=0)}catch(t){return!(__pp.FACP.pd=!0)}}function atevt(){document.addEventListener?document.addEventListener("click",ppctrl,!1):document.attachEvent?document.attachEvent("onclick",ppctrl):document
Sep 4, 2024 14:22:54.474381924 CEST	571	IN	Data Raw: 20 76 6f 69 64 20 30 21 3d 3d 5f 5f 70 70 2e 64 70 26 26 76 6f 69 64 20 30 21 3d 3d 5f 5f 70 70 2e 64 70 2e 75 26 26 5f 5f 70 70 2e 64 70 2e 75 26 26 30 3c 5f 5f 70 70 2e 64 70 2e 75 2e 6c 65 6e 67 74 68 26 26 30 3d 3d 5f 5f 70 70 2e 64 70 2e 70 Data Ascii: void 0!==__pp.dp&&void 0!==__pp.dp.u&&__pp.dp.u&&0<__pp.dp.u.length&&0==__pp.dp.pd?(__pp.dp.pd=!0,_skPU.doPU(__pp.dp.u,__pp.dp.w,__pp.dp.h,__pp.dp.p,"ex"==t),!0):!1}catch(t){return!1}}function shldp(t){try{return void 0!==__pp.ld&&void 0!==__
Sep 4, 2024 14:22:54.591856956 CEST	389	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:54.687834978 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:54 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Wed, 18 Sep 2024 12:22:54 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 30 f2 00 2c c1 00 2c 37 03 90 81 f9 8f 29 b2 13 3b 91 25 a0 9b ae dd a1 ab d6 7a bc 0f e7 7c b7 4e fd b0 ab 8a 28 f1 09 c8 13 96 00 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c [TRUNCATED] Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0P%@a@a0@a0P0P(P(P((@a@a0@a0P0P(P(P((@a@a0@aPeaLt[=ul=HhOnNc=e{l[,lu_cnk,n;~'^a$sbV&aqcm3Ts*l#zXtH+8c/BH1>CXHay/AIl2g}s/Q8{.;R91oeGo-V:;u$5'.lW:Q\v_:z4',l]2z4'e,~O]%>\|v_2U}8u=hL4$7aj;eMhL\>',/]I,{}a91\|Jz
Sep 4, 2024 14:22:54.687856913 CEST	1236	IN	Data Raw: b1 73 e2 d5 85 ed aa 5b 43 07 31 c7 b0 d3 f6 53 17 56 dd 8c e8 20 e6 18 96 72 88 08 4b e8 20 e6 18 96 f8 01 7c 65 61 db 1a 97 d0 8b 98 d7 b0 f2 73 62 f8 8c 1a 3f 6a d3 c2 07 f0 95 33 ce 55 85 55 39 23 1e fd 63 98 c5 54 ba 3f 16 93 15 b6 b5 82 34 Data Ascii: s[C1SV rK \|easb?j3UU9#cT?4JYA)O(W.:+FOQX3DWsn]{d^Va4\>gDbvU1aEjass+e9<lNTX3KVaV\|
Sep 4, 2024 14:22:54.687870979 CEST	1236	IN	Data Raw: 25 2e ef 57 dd a0 c2 fa 1c c0 aa e8 eb 95 1b c5 d4 5b fa 3a 36 49 9f c6 4e 1c c7 e2 da be 36 5d 2d 64 90 a8 9a 5d f2 ed da c6 e2 aa 17 e6 75 3d 7d 75 9d 7f 66 3b cf b2 a2 7d d2 e7 62 71 d3 a3 b0 1e ad de d5 d4 97 a3 98 43 58 c1 c6 de 5f 79 c4 e0 Data Ascii: %.W[:6IN6]-d]u=}uf;}bqCX_y:RHn\nv[U+,UnCX9r}K5G.ek8}`]~y/GXTW=)l`c~yq,%+,~Oaxpz[5$%4
Sep 4, 2024 14:22:54.687884092 CEST	1236	IN	Data Raw: 10 0f 13 06 c6 10 88 d7 f8 3a 4a d8 8a 06 12 02 e1 82 0f 92 73 94 30 94 63 08 c4 a9 02 ec 34 61 e8 40 23 10 49 20 9e a0 e6 0c 61 28 c7 10 88 c3 05 d8 2b 84 a1 1c 43 20 f8 1c 32 27 09 43 39 86 40 01 76 2f 61 60 0c 01 be ee 25 0c e5 18 02 05 d8 ad Data Ascii: :Js0c4a@#I a(+C 2'C9@v/a`%10HE10t7(!~/CZwho[JeGc`G}"(l]P!Pu]6Q!P +1J#fKH>g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49801	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:54.602878094 CEST	392	OUT	GET /__media__/pics/28905/arrrow.png HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:55.071247101 CEST	326	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:55 GMT Content-Type: image/png Content-Length: 283 Last-Modified: Tue, 04 Jan 2022 14:44:27 GMT Connection: keep-alive ETag: "61d45d4b-11b" Expires: Wed, 18 Sep 2024 12:22:55 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Sep 4, 2024 14:22:55.205265045 CEST	283	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 1b 08 03 00 00 00 ad 28 94 ae 00 00 00 48 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR(HPLTEGpLztRNSt@fU2'dgkIDAT} P{O5$vaWJIih^JF5PzHLzF/h:{t
Sep 4, 2024 14:23:40.220643997 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49802	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:54.799516916 CEST	381	OUT	GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive Origin: http://ifdnzact.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:55.263730049 CEST	278	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:55 GMT Content-Type: application/font-woff Content-Length: 17312 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-43a0" Access-Control-Allow-Origin: * Accept-Ranges: bytes
Sep 4, 2024 14:22:55.263900995 CEST	1236	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 a0 00 10 00 00 00 00 73 60 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 6c 00 00 00 1c 00 00 00 1c 69 99 f4 2b 47 44 45 46 00 00 01 88 00 00 00 1e 00 00 00 1e 00 27 Data Ascii: wOFFCs`FFTMli+GDEF'GPOSGSUBp ltOS/2T`=cmapugasp\glyfd(G8a?head9p46hhea9!$
Sep 4, 2024 14:22:55.263938904 CEST	1236	IN	Data Raw: e1 9b 59 ab 7e 9e 0c c0 69 90 ef 07 dd 3c 96 a2 60 5e c6 5a 06 6b 45 ac e5 88 9b 6a e2 a6 1c 0b ab c4 cd 37 e4 1d c6 4d ca 2d e2 48 23 fa fa d0 aa 9e d1 01 56 b5 85 99 ad 5c 9e 42 06 fb 2a d8 33 60 5f 04 7b 18 ec 29 b0 c7 c0 1e c5 73 5e bd 3e 00 Data Ascii: Y~i<`^ZkEj7M-H#V\B*3`_{)s^>\ry<9:<G0)mh[Jx+&K<F26<aq,Sf,oY-N[y0/<:9:YV'V~t`%V>
Sep 4, 2024 14:22:55.263952971 CEST	1236	IN	Data Raw: f9 28 3c 43 28 18 e6 72 98 6b 2a 7c 92 95 32 ba 3a 96 cb 7b 78 ca e1 69 01 4f 51 5b 2f 67 f0 b2 84 17 07 bd 73 76 c7 cd 69 c7 97 e4 37 07 ab 15 56 95 2c 96 8c 95 22 56 f2 da dd 8d a1 b9 89 61 d3 5b 45 60 67 ce 18 59 46 e7 35 1f f7 6a 6d fe a7 8e Data Ascii: (<C(rk\|2:{xiOQ[/gsvi7V,"Va[E`gYF5jm ;Qqa{>ynhciF0::I$UvI2&hwKs`!\|.v+Cx'Q1i#~Qun?'r3TNWeMcru:~'>V7dRfkuks!
Sep 4, 2024 14:22:55.264015913 CEST	1236	IN	Data Raw: 6c 61 74 6e 00 08 00 04 00 00 00 00 ff ff 00 00 00 00 00 00 78 9c 63 60 66 0a 66 da c3 c0 ca c0 c0 d4 c5 14 c1 c0 c0 e0 0d a1 19 e3 18 8c 18 8d 80 a2 0c ac 40 39 20 c5 d2 c0 c0 a0 ef c0 a0 e0 c5 00 05 05 95 45 c5 40 8a f7 37 13 f3 89 ff 40 35 cc Data Ascii: latnxc`ff@9 E@7@5'~ 9&)@JExWLUA\ADDQ@("v-^Q#$`/"5!`x0A("Lfu#HTV(pMy5I$)E[$:p%F8(--47
Sep 4, 2024 14:22:55.264034986 CEST	896	IN	Data Raw: 3a 17 b9 17 ae db 64 4c d4 c2 d7 96 bf ee dc a7 0a 5e 71 7a c9 ae a4 40 bf 31 1d 4a 55 53 93 b0 66 dc 54 63 81 b1 78 a9 26 a2 28 2c 75 7c 6b e3 82 c9 11 69 91 93 a7 54 95 34 5a f2 42 f4 06 4b 86 a9 71 fa f3 fa 98 e2 8c 38 33 ec 0a 31 26 44 68 82 Data Ascii: :dL^qz@1JUSfTcx&(,u\|kiT4ZBKq831&Dh@{IC$uP{3?+WT//?Azowgr/~8>M@l4Gyveoe{'~Pj2YgV2E.\|\Xkjb-Z'45FA
Sep 4, 2024 14:22:55.264116049 CEST	1236	IN	Data Raw: 99 85 22 1f 42 52 62 23 26 75 c4 4f d1 07 97 c8 94 d9 0d e9 a9 53 92 13 57 57 15 45 af bb be ae 8f 0d 41 c8 06 ef d0 bb a6 ea cc e4 ea 34 86 33 07 f5 e6 07 b4 31 4c ee ed 9a 43 a4 f7 1c a6 41 06 07 3d 82 71 76 75 c2 b9 99 b6 1e ce 8a 73 5d a9 85 Data Ascii: "BRb#&uOSWWEA431LCA=qvus]Z/i0S9(gGg%n]m "B \>pSY}GK5%g}W0(DXq",7#!])'DoAm2nDF.\==4Q3;\|Fv
Sep 4, 2024 14:22:55.264127970 CEST	1236	IN	Data Raw: a7 85 c5 37 3e d3 b1 e2 be a6 f0 8c 70 ef a0 69 2f cf 8b 8b b9 4f dc bf 40 a4 73 3c d3 5b 8e ee 9d 86 fa e9 d5 bd 7f 44 bf 9d 68 bd 4a 12 37 6f c6 31 13 6d 3f 91 93 a2 bc 86 51 21 45 cb 89 36 82 bd 83 69 63 71 ef 69 e1 e7 33 bd 1b 1b 2c b0 5e 58 Data Ascii: 7>pi/O@s<[DhJ7o1m?Q!E6icqi3,^XvYXmfEppoggx(t/HMo'Wl;c?H+,(P76iCJ%4A==p#Du&-!%*'0tw\|p5=
Sep 4, 2024 14:22:55.264139891 CEST	1236	IN	Data Raw: 70 07 e3 29 0d 95 fc 30 49 c8 a9 7f d4 13 9d 56 d4 21 34 5b c1 44 a9 80 0f 3b a6 a4 ae 4f cc b6 d4 05 a9 63 6b 62 83 d3 96 3e 57 97 94 b7 2d 66 66 74 70 52 75 7d 74 d4 f4 2c a5 36 34 d0 c7 5b fb c0 f4 cc e6 38 ad dc 37 d4 d3 4b 2d fa 60 38 8b 3e Data Ascii: p)0IV!4[D;Ockb>W-fftpRu}t,64[87K-`8>;W sj9T.D9Qp\|{.=J8tn);/]8*$P{o=on{AS b>'{3gNM_i8<o
Sep 4, 2024 14:22:55.264153957 CEST	1236	IN	Data Raw: 3d df 0c e4 51 10 ad e7 d8 79 e4 2d 95 50 12 cc e2 59 d0 c0 8a 1c 5a e9 38 d8 c7 a6 e4 32 ca a7 ef 2d ed 55 31 0b 8e d7 4f 2a 4f 0a 0c 0a 33 1b fb b8 64 7d b3 e2 0b ca a6 aa 55 ab a0 2b bb a0 46 33 c1 cf 2c 9f 21 d6 12 48 0a 6c 24 67 59 7c 8f 1a Data Ascii: =Qy-PYZ82-U1OO3d}U+F3,!Hl$gY\|l{;[g,lUUiNkgkc(j3bzG5DN#YMRTn}=\|;mhe@,^xTWV^_NFF$'fF8*T
Sep 4, 2024 14:22:55.268881083 CEST	1236	IN	Data Raw: bd 47 80 63 15 63 08 63 d0 57 d7 f8 c4 c9 0c 38 d6 39 48 4a 9f 25 e0 c5 7a 07 b3 9f ee 2c c3 e2 54 f1 a0 79 58 e7 aa 87 f0 77 dc 0b e7 d2 07 49 a6 fb 62 87 77 f1 de f0 50 4a 9d e1 fd 05 f7 6c 10 bc 14 ba 7f 76 78 47 19 3c c5 90 f0 98 d4 3a 83 4c Data Ascii: GcccW89HJ%z,TyXwIbwPJlvxG<:Lv0>Kp3!3*'5d9#9N: \YDLvj`::T;Zxd5'qd7p 26`GZuHQP2zO\byeyK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49803	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:54.806199074 CEST	387	OUT	GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive Origin: http://ifdnzact.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:55.291049957 CEST	278	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:55 GMT Content-Type: application/font-woff Content-Length: 17264 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-4370" Access-Control-Allow-Origin: * Accept-Ranges: bytes
Sep 4, 2024 14:22:55.291363001 CEST	1236	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 70 00 10 00 00 00 00 71 40 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 43 54 00 00 00 1c 00 00 00 1c 6a aa b6 37 47 44 45 46 00 00 37 84 00 00 00 1e 00 00 00 1e 00 27 Data Ascii: wOFFCpq@FFTMCTj7GDEF7'GPOS7)MsMGSUB7 ltOS/2V`]@cmapugasp7\|glyfx)Gheadl66hhea!$
Sep 4, 2024 14:22:55.291369915 CEST	1236	IN	Data Raw: 27 75 10 61 ed e5 79 7b d1 aa 23 ec b5 07 f0 c1 f7 17 31 5c be e6 00 00 78 9c ad 92 57 4c 55 41 10 86 bf bd 5c ae 8a 05 41 44 44 c5 c3 51 40 ac 28 22 82 0d 15 0b 76 11 b1 a1 82 2d c6 5e 12 51 23 24 f6 82 15 b0 c4 96 60 2f 88 1a 1b d8 22 1a 35 21 Data Ascii: 'uay{#1\xWLUA\ADDQ@("v-^Q#$`/"5!`x0A("Lfu#HTV(pMy5I$)E[$:p%F8(--47StWBp-[-Mw]uOKoc>9)ST42`&"EzPQhZCMEu
Sep 4, 2024 14:22:55.291378021 CEST	1236	IN	Data Raw: 5d 62 59 70 6d 60 5b 50 14 2b bb ea a2 a8 20 c5 dd 5f 5d 5d b1 e0 ae 7c bb a8 e8 92 97 ef dc fb de 4c 26 13 58 bf 3f 65 26 33 b9 f7 dc 73 ce 3d ed 9e 73 ee 70 84 2b 19 be c9 7d 4a ce 72 ae dc 44 8e f3 d6 2b 79 2d ef a5 33 98 12 7d 14 b2 69 db 83 Data Ascii: ]bYpm`[P+ _]]\|L&X?e&3s=sp+}JrD+y-3}i*>zHWg xNzeM3?(\|xasS9r\+Y~r>gA={sGHcw$p.\01Qua
Sep 4, 2024 14:22:55.291383028 CEST	1236	IN	Data Raw: 5f 6f 77 0f 3d 45 2a 5a 38 66 0b 93 11 a7 5c f2 36 4a 04 c3 ca 0b f1 91 d3 1d 63 36 41 67 f0 62 84 ca 14 b6 e7 2b ef 6c 2c 9d b3 f3 db 9d 73 4a 4f 74 35 d5 59 ea 9a 3b 4b 4b 3b 4b c9 db 3d 0f 66 64 2d 69 58 b1 a2 61 49 56 c6 83 43 c3 a9 7d 69 69 Data Ascii: _ow=E*Z8f\6Jc6Agb+l,sJOt5Y;KK;K=fd-iXaIVC}ii}@9fNDyhe'rA%.D1%S:`(6-!s(Mupn18w<5JK=1@lJ.%a-%.BAhi?^tEl4Gb /Di
Sep 4, 2024 14:22:55.291389942 CEST	896	IN	Data Raw: 2e 83 5b 5f 2b 2a 69 dd bb 07 2e 3f 19 23 5c bb 46 4e f5 fe 9c b1 45 ff 0b db 8f 70 94 d9 7c c4 35 08 5f c9 14 41 64 44 40 0c b1 24 4c b2 69 28 c2 00 39 39 97 e6 6f b5 3c b2 a6 a4 67 51 72 6e e6 c1 8a a9 19 f7 75 e5 6e 88 cf 9c da 43 5a 23 67 c6 Data Ascii: .[_+*i.?#\FNEp\|5_AdD@$Li(99o<gQrnunCZ#gZN,ZXP:uJ!"Lg9wZH>4cf2;B(YX,m^Xf62O^y2SCyW.]@1(k.pB7C=t7?'
Sep 4, 2024 14:22:55.291439056 CEST	1236	IN	Data Raw: 14 42 fc 7d f7 95 ce 4c ad 6a c8 8b 4b 1a f8 eb 40 ed 74 e1 ed d6 a6 2d ad 1d a2 bd c0 93 2a 49 25 5f d2 88 d4 9b da 7a 4f 76 66 50 e2 9f 28 1c b2 d7 2c 16 df f6 a4 86 05 96 15 29 35 34 98 21 5f 0a ef 25 24 f5 75 09 2f 42 c8 9e 72 8a 63 2e 42 f9 Data Ascii: B}LjK@t-*I%_zOvfP(,)54!_%$u/Brc.Br.z)))D>E2y=L^TTbJr`sju49o#iar\wlm%XW^8}qqD29@Nu6^nHI,%"SI]]W
Sep 4, 2024 14:22:55.291445971 CEST	224	IN	Data Raw: 18 86 b8 f2 7a e4 27 3e 2a b5 72 29 5d a7 ed 3c ed f2 e2 c6 b7 d7 be 2c 7f 73 cd fb eb 5f e0 5f 7a f9 ee d3 17 4c b2 3a 98 21 bc 02 d9 c2 93 75 32 53 dd aa 55 a2 5d 6d 1c fe 9a 7b 81 c5 79 34 9a 43 a9 e2 f1 b7 b1 a5 a5 05 9e 82 42 e1 05 21 85 3e Data Ascii: z'>*r)]<,s__zL:!u2SU]m{y4CB!>u(S0$F!viw-m4-3/e^sR+6fwKfBz\Ftv2#s'VzxwUG&WNp04!1 j%J
Sep 4, 2024 14:22:55.291460037 CEST	1236	IN	Data Raw: 86 e8 43 42 37 85 e0 63 08 a9 c7 47 ad 3e 54 7c 64 39 3d d3 f0 0d 7e 3c 79 8b cd c5 9d e3 3c c4 04 83 97 07 4b c3 04 9b 65 a3 03 38 7e fc 05 e1 c3 0f 2f 40 f4 a3 27 84 1f 4f fe 01 c6 6b f2 9e 5a b2 fc 99 e4 78 c3 ec d2 d2 f9 b1 70 43 b8 78 f1 02 Data Ascii: CB7cG>T\|d9=~<y<Ke8~/@'OkZxpCxD^A)_+L_Zjt{dac\GHYyfN6$$qS\ew$.c4D:=->Pr:r,AK~S5<,<9QBr~~(r
Sep 4, 2024 14:22:55.291469097 CEST	1236	IN	Data Raw: 8d 62 32 f8 28 47 19 b5 58 18 5b b4 e8 da eb 51 30 62 e8 d4 5b 8e 3b 55 30 96 c8 a6 8e 2b b0 9b be 4c cf 3f 42 a4 bd a0 21 e6 71 eb 50 8e 79 6a e3 68 96 cc d5 a1 2a 01 bf 43 c1 05 4f 87 d2 c4 0f 6d 09 7f b6 57 27 38 87 f9 cc 0f 3a 56 34 42 51 7c Data Ascii: b2(GX[Q0b[;U0+L?B!qPyjh*COmW'8:V4BQ\|E=D>%`:((~%j^MoQjQpLvk?r [dV++t0:>PmZ{CJ1DzyZ+cDqZ2RlhKFO#ViC#
Sep 4, 2024 14:22:55.296413898 CEST	1236	IN	Data Raw: b6 a2 0e 3b 55 5c bf 11 f5 57 84 fd 09 83 1d 78 47 d8 92 23 b9 13 f8 1e 51 6f 9d 56 80 f9 4c 69 5d a4 35 ce 4b f1 8b 6e 24 63 63 53 08 ef db af fa 10 d5 03 3d 53 87 90 1d 77 e0 d9 2a 07 9d 10 d6 3a 33 8f 0c a3 b1 e7 de 62 7b e3 10 a3 bf 85 bb 30 Data Ascii: ;U\WxG#QoVLi]5Kn$ccS=Sw:3b{0bh;Dn;=8n3r+-qR \|"+ Z(9yWs$)-W-+_-5$tfjuoUjJSZ)gWx~S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49807	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:56.056577921 CEST	293	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:56.511106014 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:56 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Thu, 06 Apr 2023 06:49:56 GMT Connection: keep-alive ETag: "642e6b94-20f3" Expires: Wed, 18 Sep 2024 12:22:56 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 2a 2f 0d 0a 76 61 72 20 73 68 6f 77 50 6f 70 3d 31 3b 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 53 65 61 72 63 68 54 65 78 74 28 74 29 7b 74 2e 76 61 6c 75 65 3d 22 22 2c 74 2e 73 65 6c 65 63 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 72 65 70 6c 61 63 65 53 74 72 69 6e 67 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 74 2e 72 65 70 6c 61 63 65 28 65 2c 6e 2c 22 67 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 75 62 6d 69 74 53 65 61 72 63 68 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 2b 3d 67 65 6e 65 72 61 74 65 42 72 6f 77 4c 6f 67 55 52 4c 28 22 73 72 63 71 72 79 22 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 74 5d 2c 30 3d 3d 64 2e 65 6c 65 6d 65 6e 74 73 2e 71 2e 76 61 6c 75 65 2e 6c 65 6e 67 74 68 7c 7c 22 45 6e 74 65 72 20 4b 65 79 77 6f 72 64 [TRUNCATED] Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n+=generateBrowLogURL("srcqry"),d=document.forms[t],0==d.elements.q.value.length\|\|"Enter Keyword"==d.elements.q.value?(alert("Please enter a search keyword !"),d.elements.q.focus(),!1):(checkValidURLChars(d.elements.q.value)?(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/display.cfm?s="+newstr+"&"+n+"&kt="+e):(newstr=d.elements.q.value,newstr=getEscapedString(newstr),d.action="/"+newstr+".cfm?"+n+"&kt="+e),"undefined"!=typeof d&&(d.target="_top"),!0)}function is_ie6(){return null==window.XMLHttpRequest&&null!=ActiveXObject&&/msie\|MSIE 6/.test(navigator.userAgent)}function sendRequest(t,e){return!(showPop=0)}function change
Sep 4, 2024 14:22:56.511137009 CEST	565	IN	Data Raw: 53 74 61 74 75 73 28 74 29 7b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 61 64 64 62 6f 6f 6b 6d 61 72 6b 28 74 29 7b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 41 73 48 6f 6d 65 50 61 67 65 28 74 2c 65 29 7b 72 65 Data Ascii: Status(t){return!0}function addbookmark(t){return!1}function setAsHomePage(t,e){return!1}function getDate(){var t=new Array("Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"),e=new Array("January","February","March","April
Sep 4, 2024 14:22:56.511148930 CEST	1236	IN	Data Raw: 30 22 2b 6f 29 2c 6f 3d 22 25 22 2b 6f 2c 28 6f 3d 75 6e 65 73 63 61 70 65 28 6f 29 29 3d 3d 74 29 7b 65 3d 21 31 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 56 61 6c 69 64 55 52 4c 43 68 61 72 73 Data Ascii: 0"+o),o="%"+o,(o=unescape(o))==t){e=!1;break}}return e}function checkValidURLChars(t){var e,n;if(""==t)return!1;if(t.match(/[#&]/))return!0;for(n=t.length,intCur=0;intCur<n&&(chrValue=t.charAt(intCur),1!=(e=checkUTFChar(chrValue)));intCur++);r
Sep 4, 2024 14:22:56.511161089 CEST	1236	IN	Data Raw: 2c 74 68 69 73 2e 69 73 69 6e 66 72 61 6d 65 3d 2d 31 2c 74 68 69 73 2e 62 72 6f 77 73 65 72 64 61 74 61 3d 22 22 2c 74 68 69 73 2e 67 65 74 41 42 50 53 74 61 74 75 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 Data Ascii: ,this.isinframe=-1,this.browserdata="",this.getABPStatus=function(){return void 0!==window.abp&&window.abp?1:0},this.getLocalTimeZone=function(){return(new Date).getTimezoneOffset()/60*-1},this.getScreenHeight=function(){return screen.height},
Sep 4, 2024 14:22:56.511173964 CEST	1236	IN	Data Raw: 70 74 6f 75 74 3d 31 22 2b 74 2b 22 3b 20 70 61 74 68 3d 2f 22 2c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 29 7d 76 61 72 20 6d 58 3d 30 2c 6d 59 3d 30 2c 62 72 5f 64 61 74 61 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: ptout=1"+t+"; path=/",window.location.reload())}var mX=0,mY=0,br_data=!1;function mPos(t){try{mX=window.Event?t.pageX:event.clientX+(document.documentElement.scrollLeft\|\|document.body.scrollLeft),mY=window.Event?t.pageY:event.clientY+(document
Sep 4, 2024 14:22:56.511185884 CEST	1236	IN	Data Raw: 70 3f 6e 75 6c 6c 21 3d 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 4c 65 66 74 3f 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 4c 65 66 74 3a 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 73 Data Ascii: p?null!=this._Top.window.screenLeft?this._Top.window.screenLeft:this._Top.window.screenX:0},doPU:function(url,pw,ph,npf,dr){if(!this._Top&&(this._Top=self,top!=self))try{top.document.location.toString()&&(this._Top=top)}catch(e){}var _npSU=dr?
Sep 4, 2024 14:22:56.511198044 CEST	1236	IN	Data Raw: 6e 64 6f 77 2e 65 76 65 6e 74 7c 7c 77 69 6e 64 6f 77 2e 45 76 65 6e 74 29 2e 63 61 6e 63 65 6c 42 75 62 62 6c 65 3d 21 30 29 2c 74 2e 62 75 74 74 6f 6e 26 26 32 3d 3d 74 2e 62 75 74 74 6f 6e 29 72 65 74 75 72 6e 21 31 3b 69 66 28 76 6f 69 64 20 Data Ascii: ndow.event\|\|window.Event).cancelBubble=!0),t.button&&2==t.button)return!1;if(void 0!==__pp.FACP.u&&0<__pp.FACP.u.length)return __pp.FACP.pd=!0,__pp.FACP.u=__pp.FACP.u+generateBrowLogURL("adclk"),_skPU.doPU(__pp.FACP.u,__pp.FACP.w,__pp.FACP.h,_
Sep 4, 2024 14:22:56.511214018 CEST	795	IN	Data Raw: 63 28 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 5f 5f 70 70 29 74 72 79 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 5f 5f 70 70 2e 6d 73 26 26 76 6f 69 64 20 30 21 3d 3d 5f 5f 70 70 2e 6d 73 2e 75 26 26 5f 5f 70 70 Data Ascii: c(t){if("undefined"!=typeof __pp)try{if(void 0!==__pp.ms&&void 0!==__pp.ms.u&&__pp.ms.u)for(var e=__pp.ms.u.length,n=0;n<e;n++)__pp.ms.u[n]&&_skPU.doPU(__pp.ms.u[n],-1,-1,__pp.ms.p,!0)}catch(t){}}function shdsp(t){try{return void 0!==__pp.dp&&
Sep 4, 2024 14:23:41.515081882 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49806	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:56.056988955 CEST	297	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:56.511306047 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:56 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Wed, 18 Sep 2024 12:22:56 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 30 f2 00 2c c1 00 2c 37 03 90 81 f9 8f 29 b2 13 3b 91 25 a0 9b ae dd a1 ab d6 7a bc 0f e7 7c b7 4e fd b0 ab 8a 28 f1 09 c8 13 96 00 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c 14 06 28 0c 14 06 0a 03 14 06 0a 03 14 06 0a 03 85 01 0a 03 85 81 c2 00 85 81 c2 40 61 80 c2 40 61 a0 30 40 61 a0 30 40 61 a0 30 50 18 a0 30 50 18 28 0c 50 18 28 0c [TRUNCATED] Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((@a@a0@a0P%@a@a0@a0P0P(P(P((@a@a0@a0P0P(P(P((@a@a0@aPeaLt[=ul=HhOnNc=e{l[,lu_cnk,n;~'^a$sbV&aqcm3Ts*l#zXtH+8c/BH1>CXHay/AIl2g}s/Q8{.;R91oeGo-V:;u$5'.lW:Q\v_:z4',l]2z4'e,~O]%>\|v_2U}8u=hL4$7aj;eMhL\>',/]I,{}a91\|Jz
Sep 4, 2024 14:22:56.511323929 CEST	1236	IN	Data Raw: b1 73 e2 d5 85 ed aa 5b 43 07 31 c7 b0 d3 f6 53 17 56 dd 8c e8 20 e6 18 96 72 88 08 4b e8 20 e6 18 96 f8 01 7c 65 61 db 1a 97 d0 8b 98 d7 b0 f2 73 62 f8 8c 1a 3f 6a d3 c2 07 f0 95 33 ce 55 85 55 39 23 1e fd 63 98 c5 54 ba 3f 16 93 15 b6 b5 82 34 Data Ascii: s[C1SV rK \|easb?j3UU9#cT?4JYA)O(W.:+FOQX3DWsn]{d^Va4\>gDbvU1aEjass+e9<lNTX3KVaV\|
Sep 4, 2024 14:22:56.511336088 CEST	1236	IN	Data Raw: 25 2e ef 57 dd a0 c2 fa 1c c0 aa e8 eb 95 1b c5 d4 5b fa 3a 36 49 9f c6 4e 1c c7 e2 da be 36 5d 2d 64 90 a8 9a 5d f2 ed da c6 e2 aa 17 e6 75 3d 7d 75 9d 7f 66 3b cf b2 a2 7d d2 e7 62 71 d3 a3 b0 1e ad de d5 d4 97 a3 98 43 58 c1 c6 de 5f 79 c4 e0 Data Ascii: %.W[:6IN6]-d]u=}uf;}bqCX_y:RHn\nv[U+,UnCX9r}K5G.ek8}`]~y/GXTW=)l`c~yq,%+,~Oaxpz[5$%4
Sep 4, 2024 14:22:56.511348963 CEST	1001	IN	Data Raw: 10 0f 13 06 c6 10 88 d7 f8 3a 4a d8 8a 06 12 02 e1 82 0f 92 73 94 30 94 63 08 c4 a9 02 ec 34 61 e8 40 23 10 49 20 9e a0 e6 0c 61 28 c7 10 88 c3 05 d8 2b 84 a1 1c 43 20 f8 1c 32 27 09 43 39 86 40 01 76 2f 61 60 0c 01 be ee 25 0c e5 18 02 05 d8 ad Data Ascii: :Js0c4a@#I a(+C 2'C9@v/a`%10HE10t7(!~/CZwho[JeGc`G}"(l]P!Pu]6Q!P +1J#fKH>g
Sep 4, 2024 14:22:56.511360884 CEST	1236	IN	Data Raw: 22 53 36 ef 5e 2f 8b 98 b2 4b 8f a1 0e 8c 74 bc ae 11 d5 e3 e0 32 c7 b1 fc 10 16 75 2b 8e 19 a5 0a 33 ea 44 10 06 c2 5e d4 88 51 fd 78 d1 4d 6e e1 41 98 56 62 3a 0c 2c 3c a5 4e 04 61 20 ec 55 8d 28 c6 90 4f 29 4c 78 49 84 f1 36 e7 61 d8 6b cd 8e Data Ascii: "S6^/Kt2u+3D^QxMnAVb:,<Na U(O)LxI6ak/a4$#Wy0DWw)t"a/jD7uB"l\|uUcvDa}Yn,h`Jap$@+)950v(-E<h>3:/\|NlN{Q'"!s7
Sep 4, 2024 14:22:56.511373043 CEST	1236	IN	Data Raw: 75 25 73 6b ed a7 2c 0b a3 3d ab c0 02 92 d8 09 8d 48 cd 6d 46 79 8d db 8e cf 11 9a 1b 20 f2 22 37 3d 7d 69 57 11 b4 66 47 1c 4c 0a 20 30 d8 d1 d7 88 25 77 b1 2e 15 35 bb 48 1b 14 83 87 ac 4a 71 42 66 21 37 db b4 36 96 d9 81 71 0e 0c 76 1c 4d 61 Data Ascii: u%sk,=HmFy "7=}iWfGL 0%w.5HJqBf!76qvMaUsr\^s>l9}0][NG#(Z]LnhD-hvu?@:6(4k%5$FDwR<`{qh>e\|VbM
Sep 4, 2024 14:22:56.511384964 CEST	1236	IN	Data Raw: 83 4b 96 f1 5a 2f 74 f8 21 05 29 ec 8f ff 9a fd a6 d6 48 f4 d2 11 49 0c 31 90 cd 21 a6 c3 5c 24 a3 59 49 2a bb d7 41 44 af 01 bb 59 2e b4 5e 07 b5 73 f6 da 78 fe fe 3d 46 12 43 8c 55 85 91 9b fb d5 eb 87 44 d5 dc ae cf d1 23 2c ee 09 c9 c5 ae 48 Data Ascii: KZ/t!)HI1!\$YIADY.^sx=FCUD#,HnAS1Tc2>wm0LX(Md<#w\|k4AA.nHOy3tjkwv+sD{ck2t%nn.S1b`O$0ML-gu=J2
Sep 4, 2024 14:22:56.511398077 CEST	1236	IN	Data Raw: a1 2c 9c 55 73 0b 63 3b 50 4b b1 26 84 ed 87 49 62 8b b0 5d cd b7 73 10 93 2a 26 1b d9 a3 c9 04 66 26 62 dd 76 64 e9 3a 5e 81 b0 66 f7 b7 6e 78 2c 73 36 4d dd af 90 25 2b 95 f8 90 e7 d8 9e 40 d8 49 e9 16 a2 a9 9a 5d 59 57 ce 70 35 a9 b2 43 a6 03 Data Ascii: ,Usc;PK&Ib]s&f&bvd:^fnx,s6M%+@I]YWp5C:FE\mm\|;p_!/%Z/Vv6\$"uh;)'TaVbz3% IDAT5,a)myVemzEy.XeK(\_e*M6:"]{O ;A{
Sep 4, 2024 14:22:56.511410952 CEST	1236	IN	Data Raw: 42 49 db c8 15 e8 89 57 64 5f 06 c3 b7 a9 14 68 ff 32 c5 7f c6 76 75 85 fc 76 3b 61 db f7 bf 44 58 9d 60 d9 a4 12 53 00 52 37 54 c0 80 14 df fa 3d a5 9e 42 d9 c1 12 9e c4 ce 7d c6 e5 b5 c8 c4 81 ed 30 e4 7e 18 23 3f a7 05 10 8b 24 ac 1f be 5c 4b Data Ascii: BIWd_h2vuv;aDX`SR7T=B}0~#?$\K!LUUWvSFr~Pvm1a5"V]J)DU+R{SzSEU6Jr;Kf(FqefQaeDd]*yP'1Ahnj['m?F%FMuX^u
Sep 4, 2024 14:22:56.511424065 CEST	1120	IN	Data Raw: df 4c a9 d2 95 68 b9 bc e4 db 33 c5 48 bc db 4c f5 ab 22 33 dd c1 8a 61 83 10 26 a5 94 da 6b d7 ab d8 c4 3f ea 33 e1 47 9d 3e 66 f2 4b 2d 3d 7c a0 1d 9d 19 78 6a 75 23 79 e5 a3 bc 6e fb 25 c2 4e 5a 62 f4 6f df bd 43 60 1e 19 57 d8 4e a9 a3 81 c8 Data Ascii: Lh3HL"3a&k?3G>fK-=\|xju#yn%NZboC`WNHq1L^V&Ly*VKo}gM^O\(GT?G\L-]E0<CL,\|10FC)[w=pN@uGi2]Z_a{$a{LN+QlW0^8H0[-geHn-
Sep 4, 2024 14:22:56.516294956 CEST	1236	IN	Data Raw: 54 20 be 99 c2 9b e7 d9 f7 d1 1b 03 ca 0b dc 39 a6 d1 70 0d c2 2d 1a 5c 92 c9 b5 38 11 76 72 0c d3 a8 4f 9b d5 26 72 4d 44 3e 81 4e 9f 64 9d 96 3e d6 21 b8 2a 52 61 75 99 84 11 17 46 a8 ca fc 3a 08 5b db 0d fb 8c b0 b9 34 b1 19 75 06 45 ad c7 cc Data Ascii: T 9p-\8vrO&rMD>Nd>!*RauF:[4uEVjZ,C1-D]w<a1elI_?5vVrL8h7S#,2l3mnm0Ej3>f.2#a<hjAK/$?IJd1!EBe\Jemjd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49808	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:22:56.061641932 CEST	300	OUT	GET /__media__/pics/28905/arrrow.png HTTP/1.1 Host: i3.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:22:56.517153978 CEST	609	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:22:56 GMT Content-Type: image/png Content-Length: 283 Last-Modified: Tue, 04 Jan 2022 14:44:27 GMT Connection: keep-alive ETag: "61d45d4b-11b" Expires: Wed, 18 Sep 2024 12:22:56 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 1b 08 03 00 00 00 ad 28 94 ae 00 00 00 48 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 05 7a f2 f8 00 00 00 17 74 52 4e 53 00 74 db fa 40 1b e0 0e 05 66 55 f4 bd ec 32 27 d1 b0 ca 82 a6 64 67 ff c5 fb 8e 00 00 00 6b 49 44 41 54 18 d3 7d d1 c9 0e 80 20 0c 04 50 c4 a5 e0 86 7b ff ff 4f 35 f4 e0 c8 24 f6 f8 c2 d2 76 9c 93 18 c5 61 89 57 ed 12 4a d4 a7 a6 b9 94 0f 49 97 69 68 5e 4a 46 35 50 eb 8d 7a a0 85 48 b6 4c 7a 02 8d 46 d5 2f 85 d5 68 07 3a 8c a0 89 e0 8b 7b 74 86 de a1 bf 18 ca 9e 69 2e 9a 9d f6 c3 3b bc 68 cf 9c 05 e7 45 99 de f1 b5 0e ae 42 db 93 36 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR(HPLTEGpLztRNSt@fU2'dgkIDAT} P{O5$vaWJIih^JF5PzHLzF/h:{ti.;hEB6IENDB`
Sep 4, 2024 14:23:41.530663967 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49813	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:23:05.793209076 CEST	921	OUT	GET /__media__/js/min.js?v2.3 HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%2B%2Fhu433Xx3PD15ir6ozW6g%2B7%2Fea%2F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%2BqZfXQe%2BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%2F1cxsPrqaFAy6dYLUq7i1pz%2FZiU3zxM84cKvQOfDAD43%2BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%2B%2BVjRyg8N96%2BaJl%2BKUVQpheJlks&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:23:06.229398966 CEST	341	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:23:06 GMT Content-Type: application/javascript Content-Length: 8435 Last-Modified: Thu, 16 Feb 2023 21:03:44 GMT Connection: keep-alive ETag: "63ee9a30-20f3" Expires: Wed, 18 Sep 2024 12:23:06 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Sep 4, 2024 14:23:06.230247021 CEST	1236	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 32 2d 32 30 31 36 20 4d 65 64 69 61 2e 6e 65 74 20 41 64 76 65 72 74 69 73 69 6e 67 20 46 5a 2d 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 0d 0a 20 Data Ascii: /* * Copyright (C) 2012-2016 Media.net Advertising FZ-LLC All Rights Reserved */var showPop=1;function clearSearchText(t){t.value="",t.select()}function replaceString(t,e,n){return t.replace(e,n,"g")}function submitSearch(t,e,n){return n
Sep 4, 2024 14:23:06.230328083 CEST	224	IN	Data Raw: 28 29 3b 6f 3c 31 65 33 26 26 28 6f 2b 3d 31 39 30 30 29 3b 76 61 72 20 72 3d 6e 2e 67 65 74 44 61 79 28 29 2c 69 3d 6e 2e 67 65 74 4d 6f 6e 74 68 28 29 2c 6e 3d 6e 2e 67 65 74 44 61 74 65 28 29 3b 6e 3c 31 30 26 26 28 6e 3d 22 30 22 2b 6e 29 3b Data Ascii: ();o<1e3&&(o+=1900);var r=n.getDay(),i=n.getMonth(),n=n.getDate();n<10&&(n="0"+n);o=t[r]+", "+e[i]+" "+n+", "+o;document.write(o)}function checkUTFChar(t){for(var e=!0,n=0;n<128;++n){var o=n.toString(16);if(1==o.length&&(o="
Sep 4, 2024 14:23:06.230340004 CEST	1236	IN	Data Raw: 30 22 2b 6f 29 2c 6f 3d 22 25 22 2b 6f 2c 28 6f 3d 75 6e 65 73 63 61 70 65 28 6f 29 29 3d 3d 74 29 7b 65 3d 21 31 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 56 61 6c 69 64 55 52 4c 43 68 61 72 73 Data Ascii: 0"+o),o="%"+o,(o=unescape(o))==t){e=!1;break}}return e}function checkValidURLChars(t){var e,n;if(""==t)return!1;if(t.match(/[#&]/))return!0;for(n=t.length,intCur=0;intCur<n&&(chrValue=t.charAt(intCur),1!=(e=checkUTFChar(chrValue)));intCur++);r
Sep 4, 2024 14:23:06.230360985 CEST	1236	IN	Data Raw: 2c 74 68 69 73 2e 69 73 69 6e 66 72 61 6d 65 3d 2d 31 2c 74 68 69 73 2e 62 72 6f 77 73 65 72 64 61 74 61 3d 22 22 2c 74 68 69 73 2e 67 65 74 41 42 50 53 74 61 74 75 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 Data Ascii: ,this.isinframe=-1,this.browserdata="",this.getABPStatus=function(){return void 0!==window.abp&&window.abp?1:0},this.getLocalTimeZone=function(){return(new Date).getTimezoneOffset()/60*-1},this.getScreenHeight=function(){return screen.height},
Sep 4, 2024 14:23:06.230374098 CEST	1236	IN	Data Raw: 70 74 6f 75 74 3d 31 22 2b 74 2b 22 3b 20 70 61 74 68 3d 2f 22 2c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 29 7d 76 61 72 20 6d 58 3d 30 2c 6d 59 3d 30 2c 62 72 5f 64 61 74 61 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 Data Ascii: ptout=1"+t+"; path=/",window.location.reload())}var mX=0,mY=0,br_data=!1;function mPos(t){try{mX=window.Event?t.pageX:event.clientX+(document.documentElement.scrollLeft\|\|document.body.scrollLeft),mY=window.Event?t.pageY:event.clientY+(document
Sep 4, 2024 14:23:06.230384111 CEST	672	IN	Data Raw: 70 3f 6e 75 6c 6c 21 3d 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 4c 65 66 74 3f 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 73 63 72 65 65 6e 4c 65 66 74 3a 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 73 Data Ascii: p?null!=this._Top.window.screenLeft?this._Top.window.screenLeft:this._Top.window.screenX:0},doPU:function(url,pw,ph,npf,dr){if(!this._Top&&(this._Top=self,top!=self))try{top.document.location.toString()&&(this._Top=top)}catch(e){}var _npSU=dr?
Sep 4, 2024 14:23:06.230401993 CEST	1236	IN	Data Raw: 73 65 72 41 67 65 6e 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 65 77 65 62 6b 69 74 22 29 26 26 28 74 68 69 73 2e 5f 54 6f 70 2e 77 69 6e 64 6f 77 2e 62 6c 75 72 28 29 2c 74 68 69 73 2e 5f 54 6f 70 2e Data Ascii: serAgent.toLowerCase().indexOf("applewebkit")&&(this._Top.window.blur(),this._Top.window.focus()),_npW.Init=function(e){with(e)Params=e.Params,Main=function(){void 0===window.mozPaintCount\|\|(t=window.open("about:blank"))&&t.close();var t=Param
Sep 4, 2024 14:23:06.230415106 CEST	224	IN	Data Raw: 6f 77 50 6f 70 26 26 28 73 68 6f 77 50 6f 70 3d 30 29 2c 21 31 3b 31 21 3d 73 68 6f 77 50 6f 70 7c 7c 72 65 6e 64 65 72 46 41 43 50 28 74 29 7c 7c 73 68 70 70 28 74 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 68 70 70 28 Data Ascii: owPop&&(showPop=0),!1;1!=showPop\|\|renderFACP(t)\|\|shpp(t)}catch(t){}}function shpp(t){if("undefined"!=typeof __pp&&1==showPop&&!renderFACP(t))try{if(t\|\|((t=window.event\|\|window.Event).cancelBubble=!0),t.button&&2==t.button)re
Sep 4, 2024 14:23:06.317231894 CEST	1135	IN	Data Raw: 74 75 72 6e 3b 74 72 79 7b 76 61 72 20 65 3d 21 31 3b 69 73 49 45 28 29 26 26 28 65 3d 73 68 64 73 70 28 74 29 29 2c 65 7c 7c 22 6c 64 22 3d 3d 74 7c 7c 28 76 6f 69 64 20 30 21 3d 3d 5f 5f 70 70 2e 6b 70 26 26 76 6f 69 64 20 30 21 3d 3d 5f 5f 70 Data Ascii: turn;try{var e=!1;isIE()&&(e=shdsp(t)),e\|\|"ld"==t\|\|(void 0!==__pp.kp&&void 0!==__pp.kp.u&&__pp.kp.u&&0<__pp.kp.u.length&&0==__pp.kp.pd&&(__pp.kp.pd=!0,"ex"==t&&(__pp.kp.u=__pp.kp.u+"&_onx_=1"),_skPU.doPU(__pp.kp.u,__pp.kp.w,__pp.kp.h,__pp.kp.p
Sep 4, 2024 14:23:06.380865097 CEST	389	OUT	GET /__media__/pics/29590/bg1.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:23:06.475692987 CEST	329	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:23:06 GMT Content-Type: image/png Content-Length: 17986 Last-Modified: Fri, 25 Nov 2022 12:16:35 GMT Connection: keep-alive ETag: "6380b223-4642" Expires: Wed, 18 Sep 2024 12:23:06 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Sep 4, 2024 14:23:06.475845098 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 c2 00 00 03 dc 04 03 00 00 00 09 4e b3 37 00 00 00 0f 50 4c 54 45 1a 23 41 10 16 2c 26 2f 4d 3a 43 61 4d 56 73 32 a1 dd 4a 00 00 20 00 49 44 41 54 78 da ec dd 51 7a 1a c7 b6 80 d1 8d d0 00 Data Ascii: PNGIHDRN7PLTE#A,&/M:CaMVs2J IDATxQz0,,7);%z\|N(@a@a0@a0@a0P0P(P((@a@a0@a0@a0P0P(P((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49814	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:23:06.388266087 CEST	392	OUT	GET /__media__/pics/28905/arrrow.png HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:23:06.854306936 CEST	326	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:23:06 GMT Content-Type: image/png Content-Length: 283 Last-Modified: Tue, 04 Jan 2022 14:44:27 GMT Connection: keep-alive ETag: "61d45d4b-11b" Expires: Wed, 18 Sep 2024 12:23:06 GMT Cache-Control: max-age=1209600 cache-control: public Accept-Ranges: bytes
Sep 4, 2024 14:23:06.986988068 CEST	283	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 1b 08 03 00 00 00 ad 28 94 ae 00 00 00 48 50 4c 54 45 47 70 4c ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: PNGIHDR(HPLTEGpLztRNSt@fU2'dgkIDAT} P{O5$vaWJIih^JF5PzHLzF/h:{t
Sep 4, 2024 14:23:52.000514984 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49815	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:23:06.586361885 CEST	381	OUT	GET /__media__/fonts/montserrat-bold/montserrat-bold.woff HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive Origin: http://ifdnzact.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:23:07.033056974 CEST	278	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:23:06 GMT Content-Type: application/font-woff Content-Length: 17312 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-43a0" Access-Control-Allow-Origin: * Accept-Ranges: bytes
Sep 4, 2024 14:23:07.033154964 CEST	1236	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 a0 00 10 00 00 00 00 73 60 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 01 6c 00 00 00 1c 00 00 00 1c 69 99 f4 2b 47 44 45 46 00 00 01 88 00 00 00 1e 00 00 00 1e 00 27 Data Ascii: wOFFCs`FFTMli+GDEF'GPOSGSUBp ltOS/2T`=cmapugasp\glyfd(G8a?head9p46hhea9!$
Sep 4, 2024 14:23:07.033176899 CEST	1236	IN	Data Raw: e1 9b 59 ab 7e 9e 0c c0 69 90 ef 07 dd 3c 96 a2 60 5e c6 5a 06 6b 45 ac e5 88 9b 6a e2 a6 1c 0b ab c4 cd 37 e4 1d c6 4d ca 2d e2 48 23 fa fa d0 aa 9e d1 01 56 b5 85 99 ad 5c 9e 42 06 fb 2a d8 33 60 5f 04 7b 18 ec 29 b0 c7 c0 1e c5 73 5e bd 3e 00 Data Ascii: Y~i<`^ZkEj7M-H#V\B*3`_{)s^>\ry<9:<G0)mh[Jx+&K<F26<aq,Sf,oY-N[y0/<:9:YV'V~t`%V>
Sep 4, 2024 14:23:07.033186913 CEST	448	IN	Data Raw: f9 28 3c 43 28 18 e6 72 98 6b 2a 7c 92 95 32 ba 3a 96 cb 7b 78 ca e1 69 01 4f 51 5b 2f 67 f0 b2 84 17 07 bd 73 76 c7 cd 69 c7 97 e4 37 07 ab 15 56 95 2c 96 8c 95 22 56 f2 da dd 8d a1 b9 89 61 d3 5b 45 60 67 ce 18 59 46 e7 35 1f f7 6a 6d fe a7 8e Data Ascii: (<C(rk\|2:{xiOQ[/gsvi7V,"Va[E`gYF5jm ;Qqa{>ynhciF0::I$UvI2&hwKs`!\|.v+Cx'Q1i#~Qun?'r3TNWeMcru:~'>V7dRfkuks!
Sep 4, 2024 14:23:07.033195972 CEST	1236	IN	Data Raw: 84 d9 59 66 2f ad 9d 0f 7b f5 1c 6d 7a a7 82 76 3c e3 cc 74 0c 1f ad 03 eb 63 c8 3b f3 44 6d 2d 08 62 21 82 ff 9c 8d 8c 1c 96 56 98 99 b3 e7 84 7a 10 06 c8 dc 16 b8 b7 32 ab 9d fe a5 0b 9d bb 75 0f cc db 7c 4a db d3 88 e9 30 2f 5b fe 71 32 c0 a7 Data Ascii: Yf/{mzv<tc;Dm-b!Vz2u\|J0/[q2jVXaXpYd6c!&oLgqc;DXyo&_}, 9u?}e{~bF-Z{@ g hjR72[O
Sep 4, 2024 14:23:07.033206940 CEST	1236	IN	Data Raw: 1e 1e d4 c7 93 06 6a b2 8d f0 a2 b1 d2 dd 1b 9d 26 34 c5 07 5f fc 68 86 3f cd 69 41 4b 5a d1 9a 36 04 d0 96 76 04 d2 9e 20 3a 10 4c 47 42 08 a5 13 9d e9 42 57 ba a9 bd e8 4e 0f 7a 12 4e 2f 7a d3 87 be 44 d0 8f fe 0c 60 20 83 18 cc 10 86 12 c9 30 Data Ascii: j&4_h?iAKZ6v :LGBBWNzN/zD` 0Af#hX1XDV$R^ 9q;I28ip'\W1)L6ae,`a'TJ9yd&KT#\d)EUf+}r)9d+\|T8oY+^
Sep 4, 2024 14:23:07.033225060 CEST	448	IN	Data Raw: 32 9a 21 d7 a8 0f cb 4e 59 15 df f1 db 2d e6 c2 d5 e0 23 78 bf 0e 9d 45 79 b1 d3 0b 27 96 b4 35 99 9a 8a 37 6c 6f 7f 9b e1 0a 43 5a 7d 11 97 12 71 21 0f 64 c1 80 60 d4 a8 97 86 04 11 b4 d1 5c 04 8f ee b2 4c 7d e0 5f 4b 32 9b 4a 62 d3 f2 d2 55 a9 Data Ascii: 2!NY-#xEy'57loCZ}q!d`\L}_K2JbUsI&WPXHa!`io4FCZWiiO\|7:m8'_#WMnLd:OY2$b;&"7w.y}q<,>yHQC3c0(ez@cV
Sep 4, 2024 14:23:07.033302069 CEST	1236	IN	Data Raw: 99 85 22 1f 42 52 62 23 26 75 c4 4f d1 07 97 c8 94 d9 0d e9 a9 53 92 13 57 57 15 45 af bb be ae 8f 0d 41 c8 06 ef d0 bb a6 ea cc e4 ea 34 86 33 07 f5 e6 07 b4 31 4c ee ed 9a 43 a4 f7 1c a6 41 06 07 3d 82 71 76 75 c2 b9 99 b6 1e ce 8a 73 5d a9 85 Data Ascii: "BRb#&uOSWWEA431LCA=qvus]Z/i0S9(gGg%n]m "B \>pSY}GK5%g}W0(DXq",7#!])'DoAm2nDF.\==4Q3;\|Fv
Sep 4, 2024 14:23:07.033353090 CEST	1236	IN	Data Raw: a7 85 c5 37 3e d3 b1 e2 be a6 f0 8c 70 ef a0 69 2f cf 8b 8b b9 4f dc bf 40 a4 73 3c d3 5b 8e ee 9d 86 fa e9 d5 bd 7f 44 bf 9d 68 bd 4a 12 37 6f c6 31 13 6d 3f 91 93 a2 bc 86 51 21 45 cb 89 36 82 bd 83 69 63 71 ef 69 e1 e7 33 bd 1b 1b 2c b0 5e 58 Data Ascii: 7>pi/O@s<[DhJ7o1m?Q!E6icqi3,^XvYXmfEppoggx(t/HMo'Wl;c?H+,(P76iCJ%4A==p#Du&-!%*'0tw\|p5=
Sep 4, 2024 14:23:07.033431053 CEST	448	IN	Data Raw: 70 07 e3 29 0d 95 fc 30 49 c8 a9 7f d4 13 9d 56 d4 21 34 5b c1 44 a9 80 0f 3b a6 a4 ae 4f cc b6 d4 05 a9 63 6b 62 83 d3 96 3e 57 97 94 b7 2d 66 66 74 70 52 75 7d 74 d4 f4 2c a5 36 34 d0 c7 5b fb c0 f4 cc e6 38 ad dc 37 d4 d3 4b 2d fa 60 38 8b 3e Data Ascii: p)0IV!4[D;Ockb>W-fftpRu}t,64[87K-`8>;W sj9T.D9Qp\|{.=J8tn);/]8*$P{o=on{AS b>'{3gNM_i8<o
Sep 4, 2024 14:23:07.038100958 CEST	1236	IN	Data Raw: 44 dc dd 04 44 97 82 ae 9c e2 8e 86 f8 01 68 bc 06 63 a1 b0 fc c0 0f 7e 81 8f a8 36 41 82 31 51 27 9e 40 d5 2e 4a 1d b3 11 30 43 c5 2f 75 99 98 ac 5e a3 f5 87 25 b2 b2 8c b0 95 70 24 7a e4 e8 d0 8a a2 2c ad 26 ac ac 3c 93 ea 24 42 ba 83 31 1f cb Data Ascii: DDhc~6A1Q'@.J0C/u^%p$z,&<$B1k4Fo98wap^u8mH,)i8\30tM75,*;jdME8]G{>qf1nUp<7#m9&hCYtFg#"&uBT=z{g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49816	208.91.196.253	80	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 4, 2024 14:23:06.587425947 CEST	387	OUT	GET /__media__/fonts/montserrat-regular/montserrat-regular.woff HTTP/1.1 Host: i1.cdn-image.com Connection: keep-alive Origin: http://ifdnzact.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ifdnzact.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 4, 2024 14:23:07.044773102 CEST	278	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 04 Sep 2024 12:23:06 GMT Content-Type: application/font-woff Content-Length: 17264 Last-Modified: Wed, 20 Jan 2021 10:45:11 GMT Connection: keep-alive ETag: "600809b7-4370" Access-Control-Allow-Origin: * Accept-Ranges: bytes
Sep 4, 2024 14:23:07.044856071 CEST	1236	IN	Data Raw: 77 4f 46 46 00 01 00 00 00 00 43 70 00 10 00 00 00 00 71 40 00 02 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 46 54 4d 00 00 43 54 00 00 00 1c 00 00 00 1c 6a aa b6 37 47 44 45 46 00 00 37 84 00 00 00 1e 00 00 00 1e 00 27 Data Ascii: wOFFCpq@FFTMCTj7GDEF7'GPOS7)MsMGSUB7 ltOS/2V`]@cmapugasp7\|glyfx)Gheadl66hhea!$
Sep 4, 2024 14:23:07.044886112 CEST	224	IN	Data Raw: 27 75 10 61 ed e5 79 7b d1 aa 23 ec b5 07 f0 c1 f7 17 31 5c be e6 00 00 78 9c ad 92 57 4c 55 41 10 86 bf bd 5c ae 8a 05 41 44 44 c5 c3 51 40 ac 28 22 82 0d 15 0b 76 11 b1 a1 82 2d c6 5e 12 51 23 24 f6 82 15 b0 c4 96 60 2f 88 1a 1b d8 22 1a 35 21 Data Ascii: 'uay{#1\xWLUA\ADDQ@("v-^Q#$`/"5!`x0A("Lfu#HTV(pMy5I$)E[$:p%F8(--47StWBp-[-Mw]uOKoc>9)ST42`&"E
Sep 4, 2024 14:23:07.044892073 CEST	1236	IN	Data Raw: 8a 7a cb f2 50 51 eb 68 1e 5a 43 4d ab a4 86 fc 45 75 f9 83 3a 49 51 85 a2 3a c8 2f b2 48 de 90 d7 e5 2e 99 2a 53 64 b2 4c 92 89 32 41 c6 cb 18 19 51 e1 5e 61 fb d1 d4 7c 60 de 33 ef 9a 77 cc 1c 33 db cc 32 4f 99 11 85 79 85 b9 46 99 51 6a 94 18 Data Ascii: zPQhZCMEu:IQ:/H.SdL2AQ^a\|`3w32OyFQjS4L#jf8UnOX~{09bU43q:jvuqj&4_h?iAKZ6v :LGBBWNzN/zD` 0Af#hX1
Sep 4, 2024 14:23:07.045001984 CEST	1236	IN	Data Raw: e3 5c 8d ba 30 b3 8f ca 18 0b 06 93 19 31 f2 51 c9 75 61 4a 7d 10 28 64 72 65 06 18 f0 05 91 29 70 00 f8 6f 99 5f 5c 5d bf b0 fb ae f6 ac be 8e ec 9c 72 7e 71 ef aa ce f8 a4 e8 b4 f9 fa f0 a4 a2 e2 49 ad b5 c5 93 5e f7 af 7b b2 cf 35 51 ef 96 db Data Ascii: \01QuaJ}(dre)po_\]r~qI^{5Q>^71a^O"+SsHU4Nk&IvmMZx]N8I$wL\|`CK\|rGk?adXE#2`#BB2U2\|B\|02d4
Sep 4, 2024 14:23:07.045008898 CEST	1236	IN	Data Raw: d8 fd e1 45 6c ad 34 ee 47 62 20 1e 92 2f 44 ed a0 df 69 70 53 70 a3 bf c4 a3 a5 a5 85 c1 2b 43 78 5a 11 1e 28 5d 8d a1 f8 4d b4 42 04 b4 21 c8 b3 ab af 2c 7a d8 fd f0 22 0a 2f 64 f8 3f f0 27 f2 8e e8 49 42 b5 68 cb 33 81 71 53 ae 15 75 50 3e 89 Data Ascii: El4Gb /DipSp+CxZ(]MB!,z"/d?'IBh3qSuP>D;X_wkg,joZ%\<$!.~N{mZb'\!*=\_VDIE1Wt2\jxPUU^BIZY~UglWy5w_]RRxu
Sep 4, 2024 14:23:07.045022011 CEST	672	IN	Data Raw: af b9 b1 74 8f db 9e a5 37 d6 bc 09 3f 09 e3 e0 27 94 a6 4f 05 35 55 7f 9c 8b f8 90 dd e2 5c 35 9d e4 cd eb 55 78 16 e3 bd 61 f8 09 d7 27 f6 5c ff 74 f7 21 d7 43 bb 3f bd 0e 72 e1 67 98 0b d5 df 7d 27 3c 21 1c 60 74 a3 57 e6 c8 72 31 26 41 fb 24 Data Ascii: t7?'O5U\5Uxa'\t!C?rg}'<!`tWr1&A$"KZ(:dNHvIMD=phj<?HIP[?'?TUkYlf@0zg2\wE[T+~r(!Ozx\1!
Sep 4, 2024 14:23:07.045049906 CEST	1236	IN	Data Raw: 14 42 fc 7d f7 95 ce 4c ad 6a c8 8b 4b 1a f8 eb 40 ed 74 e1 ed d6 a6 2d ad 1d a2 bd c0 93 2a 49 25 5f d2 88 d4 9b da 7a 4f 76 66 50 e2 9f 28 1c b2 d7 2c 16 df f6 a4 86 05 96 15 29 35 34 98 21 5f 0a ef 25 24 f5 75 09 2f 42 c8 9e 72 8a 63 2e 42 f9 Data Ascii: B}LjK@t-*I%_zOvfP(,)54!_%$u/Brc.Br.z)))D>E2y=L^TTbJr`sju49o#iar\wlm%XW^8}qqD29@Nu6^nHI,%"SI]]W
Sep 4, 2024 14:23:07.045056105 CEST	224	IN	Data Raw: 18 86 b8 f2 7a e4 27 3e 2a b5 72 29 5d a7 ed 3c ed f2 e2 c6 b7 d7 be 2c 7f 73 cd fb eb 5f e0 5f 7a f9 ee d3 17 4c b2 3a 98 21 bc 02 d9 c2 93 75 32 53 dd aa 55 a2 5d 6d 1c fe 9a 7b 81 c5 79 34 9a 43 a9 e2 f1 b7 b1 a5 a5 05 9e 82 42 e1 05 21 85 3e Data Ascii: z'>*r)]<,s__zL:!u2SU]m{y4CB!>u(S0$F!viw-m4-3/e^sR+6fwKfBz\Ftv2#s'VzxwUG&WNp04!1 j%J
Sep 4, 2024 14:23:07.047862053 CEST	1236	IN	Data Raw: 86 e8 43 42 37 85 e0 63 08 a9 c7 47 ad 3e 54 7c 64 39 3d d3 f0 0d 7e 3c 79 8b cd c5 9d e3 3c c4 04 83 97 07 4b c3 04 9b 65 a3 03 38 7e fc 05 e1 c3 0f 2f 40 f4 a3 27 84 1f 4f fe 01 c6 6b f2 9e 5a b2 fc 99 e4 78 c3 ec d2 d2 f9 b1 70 43 b8 78 f1 02 Data Ascii: CB7cG>T\|d9=~<y<Ke8~/@'OkZxpCxD^A)_+L_Zjt{dac\GHYyfN6$$qS\ew$.c4D:=->Pr:r,AK~S5<,<9QBr~~(r
Sep 4, 2024 14:23:07.049992085 CEST	1236	IN	Data Raw: 8d 62 32 f8 28 47 19 b5 58 18 5b b4 e8 da eb 51 30 62 e8 d4 5b 8e 3b 55 30 96 c8 a6 8e 2b b0 9b be 4c cf 3f 42 a4 bd a0 21 e6 71 eb 50 8e 79 6a e3 68 96 cc d5 a1 2a 01 bf 43 c1 05 4f 87 d2 c4 0f 6d 09 7f b6 57 27 38 87 f9 cc 0f 3a 56 34 42 51 7c Data Ascii: b2(GX[Q0b[;U0+L?B!qPyjh*COmW'8:V4BQ\|E=D>%`:((~%j^MoQjQpLvk?r [dV++t0:>PmZ{CJ1DzyZ+cDqZ2RlhKFO#ViC#

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49716	207.211.211.27	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:21 UTC	569	OUT	GET /delivery/js/cmp_en.min.js HTTP/1.1 Host: cdn.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/?dn=gooel.com&pid=9PO755G95 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-04 12:22:21 UTC	642	IN	HTTP/1.1 200 OK Date: Wed, 04 Sep 2024 12:22:21 GMT Content-Type: application/javascript Content-Length: 445779 Connection: close Last-Modified: Mon, 02 Sep 2024 20:42:26 GMT ETag: "6cd53-62128fa89b080" Cache-Control: max-age=86400 Expires: Tue, 03 Sep 2024 20:43:41 GMT Edge-Control: max-age=86400 X-77-NZT: EgwBz9PTGQH3GNsAAAwBJRPCNAG3eG0AAA X-77-NZT-Ray: 43862e24c56f8093fd50d866af9d612d X-Accel-Expires: @1725482622 X-Accel-Date: 1725396453 X-Accel-Date-Max: 1725309821 X-77-Cache: HIT X-77-Age: 56088 Vary: Accept-Encoding Server: CDN77-Turbo X-Cache: HIT X-Age: 56088 X-77-POP: frankfurtDE Accept-Ranges: bytes
2024-09-04 12:22:21 UTC	15742	IN	Data Raw: 77 69 6e 64 6f 77 2e 63 6d 70 63 63 73 76 65 72 73 69 6f 6e 62 75 69 6c 64 3d 22 32 30 32 34 2d 39 2d 32 2e 32 30 2e 34 31 22 3b 69 66 28 21 28 22 72 70 6c 22 20 69 6e 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 29 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 72 70 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 63 2e 73 70 6c 69 74 28 61 29 2e 6a 6f 69 6e 28 62 29 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 66 61 6c 73 65 7d 29 7d 69 66 28 21 28 22 63 6d 70 5f 75 6e 71 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 75 6e 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 Data Ascii: window.cmpccsversionbuild="2024-9-2.20.41";if(!("rpl" in String.prototype)){Object.defineProperty(String.prototype,"rpl",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("cmp_unq" in window)){window.cmp_unq=function(a){re
2024-09-04 12:22:21 UTC	16384	IN	Data Raw: 6e 67 4e 6f 74 69 63 65 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 53 61 6c 65 4f 70 74 4f 75 74 4e 6f 74 69 63 65 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 54 61 72 67 65 74 65 64 41 64 76 65 72 74 69 73 69 6e 67 4f 70 74 4f 75 74 4e 6f 74 69 63 65 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 53 61 6c 65 4f 70 74 4f 75 74 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 54 61 72 67 65 74 65 64 41 64 76 65 72 74 69 73 69 6e 67 4f 70 74 4f 75 74 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 53 65 6e 73 69 74 69 76 65 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 22 2c 22 6e 62 69 74 73 22 2c 38 2c 30 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 4b 6e 6f 77 6e 43 68 69 6c 64 Data Ascii: ngNotice","int",2).addField("SaleOptOutNotice","int",2).addField("TargetedAdvertisingOptOutNotice","int",2).addField("SaleOptOut","int",2).addField("TargetedAdvertisingOptOut","int",2).addField("SensitiveDataProcessing","nbits",8,0,2).addField("KnownChild
2024-09-04 12:22:21 UTC	16384	IN	Data Raw: 69 65 6c 64 28 74 68 69 73 2e 50 75 72 70 6f 73 65 73 41 6c 6c 6f 77 65 64 2c 32 34 29 3b 6c 2e 77 72 69 74 65 42 69 74 46 69 65 6c 64 28 74 68 69 73 2e 50 75 72 70 6f 73 65 73 4c 49 2c 32 34 29 3b 6c 2e 77 72 69 74 65 42 6f 6f 6c 28 74 68 69 73 2e 50 75 72 70 6f 73 65 4f 6e 65 54 72 65 61 74 6d 65 6e 74 29 3b 69 66 28 74 68 69 73 2e 50 75 62 6c 69 73 68 65 72 43 43 2e 6c 65 6e 67 74 68 21 3d 32 29 7b 74 68 69 73 2e 50 75 62 6c 69 73 68 65 72 43 43 3d 22 45 55 22 7d 6c 2e 77 72 69 74 65 4c 61 6e 67 28 74 68 69 73 2e 50 75 62 6c 69 73 68 65 72 43 43 29 3b 6c 2e 77 72 69 74 65 42 69 74 46 69 65 6c 64 4f 72 52 61 6e 67 65 28 74 68 69 73 2e 56 65 6e 64 6f 72 73 41 6c 6c 6f 77 65 64 29 3b 6c 2e 77 72 69 74 65 42 69 74 46 69 65 6c 64 4f 72 52 61 6e 67 65 28 74 Data Ascii: ield(this.PurposesAllowed,24);l.writeBitField(this.PurposesLI,24);l.writeBool(this.PurposeOneTreatment);if(this.PublisherCC.length!=2){this.PublisherCC="EU"}l.writeLang(this.PublisherCC);l.writeBitFieldOrRange(this.VendorsAllowed);l.writeBitFieldOrRange(t
2024-09-04 12:22:22 UTC	16384	IN	Data Raw: 22 47 41 22 2c 22 48 52 22 2c 22 4c 56 22 2c 22 4c 54 22 2c 22 4d 54 22 2c 22 4e 4c 22 2c 22 50 4c 22 2c 22 53 56 22 2c 22 53 4b 22 2c 22 53 4c 22 2c 22 43 53 22 2c 22 48 55 22 2c 22 52 55 22 2c 22 53 52 22 2c 22 5a 48 22 2c 22 54 52 22 2c 22 55 4b 22 2c 22 41 52 22 2c 22 42 53 22 2c 22 4a 41 22 2c 22 43 59 22 5d 3b 69 66 28 22 63 6d 70 5f 63 75 73 74 6f 6d 6c 61 6e 67 75 61 67 65 73 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 75 73 74 6f 6d 6c 61 6e 67 75 61 67 65 73 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 62 2e 70 75 73 68 28 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 75 73 74 6f 6d 6c 61 6e 67 75 61 67 65 73 5b 61 5d 2e 6c 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7d 7d 72 65 74 75 72 Data Ascii: "GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR","ZH","TR","UK","AR","BS","JA","CY"];if("cmp_customlanguages" in window){for(var a=0;a<window.cmp_customlanguages.length;a++){b.push(window.cmp_customlanguages[a].l.toUpperCase())}}retur
2024-09-04 12:22:22 UTC	16384	IN	Data Raw: 6e 64 6f 72 49 44 28 29 3e 30 29 26 26 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 74 63 66 76 65 72 73 69 6f 6e 3e 30 7c 7c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 74 63 66 63 61 76 65 72 73 69 6f 6e 3d 3d 31 29 29 7b 72 65 74 75 72 6e 20 63 6d 70 5f 66 6e 64 28 74 68 69 73 2e 70 75 72 70 6f 73 65 73 32 6f 72 67 2c 69 29 21 3d 2d 31 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 3b 74 68 69 73 2e 68 61 73 50 75 72 70 6f 73 65 41 73 73 69 67 6e 65 64 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 28 22 2c 22 2b 74 68 69 73 2e 70 75 72 70 6f 73 65 53 65 6c 65 63 74 69 6f 6e 2b 22 2c 22 29 2e 69 6e 64 65 78 4f 66 28 22 2c 22 2b 69 2b 22 2c 22 29 21 3d 2d 31 7d 3b 74 68 69 73 2e 67 65 74 50 75 72 70 6f 73 65 73 3d 66 75 6e 63 74 69 6f 6e 28 6c Data Ascii: ndorID()>0)&&(window.cmpmngr.tcfversion>0\|\|window.cmpmngr.tcfcaversion==1)){return cmp_fnd(this.purposes2org,i)!=-1}return false};this.hasPurposeAssigned=function(i){return(","+this.purposeSelection+",").indexOf(","+i+",")!=-1};this.getPurposes=function(l
2024-09-04 12:22:22 UTC	16384	IN	Data Raw: 78 28 64 2c 65 5b 62 5d 2b 61 29 3b 69 66 28 63 21 3d 2d 31 29 7b 62 72 65 61 6b 7d 7d 69 66 28 63 21 3d 2d 31 29 7b 62 72 65 61 6b 7d 7d 7d 7d 72 65 74 75 72 6e 20 63 7d 3b 74 68 69 73 2e 67 65 74 46 69 65 6c 64 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 61 2c 65 2c 64 2c 67 29 7b 76 61 72 20 66 3d 30 3b 76 61 72 20 62 3d 74 68 69 73 2e 67 65 74 4d 61 74 63 68 65 64 47 50 50 46 69 65 6c 64 49 6e 64 65 78 28 63 2c 61 29 3b 69 66 28 62 3d 3d 2d 31 29 7b 62 3d 74 68 69 73 2e 67 65 74 46 69 65 6c 64 41 6c 69 61 73 49 6e 64 65 78 28 63 2c 64 2c 67 29 7d 69 66 28 65 3d 3d 22 6e 6f 74 69 63 65 22 29 7b 66 3d 62 3d 3d 2d 31 3f 30 3a 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 68 61 73 45 78 69 73 74 69 6e 67 43 68 6f 69 63 65 3f 31 3a 32 29 7d 65 6c Data Ascii: x(d,e[b]+a);if(c!=-1){break}}if(c!=-1){break}}}}return c};this.getFieldValue=function(c,a,e,d,g){var f=0;var b=this.getMatchedGPPFieldIndex(c,a);if(b==-1){b=this.getFieldAliasIndex(c,d,g)}if(e=="notice"){f=b==-1?0:(window.cmpmngr.hasExistingChoice?1:2)}el
2024-09-04 12:22:22 UTC	16384	IN	Data Raw: 29 7d 65 6c 73 65 7b 69 66 28 61 3d 3d 22 74 63 66 63 61 76 31 22 26 26 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 74 63 66 63 61 76 65 72 73 69 6f 6e 3d 3d 31 29 7b 6b 2e 64 61 74 61 3d 66 7d 7d 7d 7d 7d 7d 7d 6b 2e 65 76 65 6e 74 4e 61 6d 65 3d 61 3b 6b 2e 6c 69 73 74 65 6e 65 72 49 64 3d 68 5b 65 5d 2e 69 64 3b 6b 2e 70 69 6e 67 44 61 74 61 3d 74 68 69 73 2e 67 70 70 5f 70 69 6e 67 28 29 3b 63 3d 68 5b 65 5d 2e 6c 69 73 74 65 6e 65 72 28 6b 2c 74 72 75 65 29 7d 65 6c 73 65 7b 63 3d 68 5b 65 5d 2e 6c 69 73 74 65 6e 65 72 28 6a 2c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2c 66 29 7d 7d 7d 63 61 74 63 68 28 64 29 7b 7d 7d 69 66 28 67 26 26 63 3d 3d 3d 74 72 75 65 29 7b 62 72 65 61 6b 7d 7d 7d 69 66 28 77 69 6e 64 6f 77 2e 64 69 73 70 61 74 63 68 45 76 Data Ascii: )}else{if(a=="tcfcav1"&&window.cmpmngr.tcfcaversion==1){k.data=f}}}}}}}k.eventName=a;k.listenerId=h[e].id;k.pingData=this.gpp_ping();c=h[e].listener(k,true)}else{c=h[e].listener(j,window.cmpmngr,f)}}}catch(d){}}if(g&&c===true){break}}}if(window.dispatchEv
2024-09-04 12:22:22 UTC	16384	IN	Data Raw: 72 49 44 22 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 74 55 73 65 72 49 44 28 63 2c 66 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 65 74 55 73 65 72 49 44 32 22 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 74 55 73 65 72 49 44 32 28 63 2c 66 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 65 74 55 73 65 72 49 44 33 22 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 74 55 73 65 72 49 44 33 28 63 2c 66 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 67 65 74 55 73 65 72 49 44 22 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 55 73 65 72 49 44 28 63 2c 66 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 64 73 61 2e 63 6f 6c 6c 65 63 74 22 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 64 73 61 5f 43 6f 6c 6c 65 63 74 28 63 2c 66 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 64 73 61 2e 64 69 73 70 Data Ascii: rID":return this.setUserID(c,f);break;case"setUserID2":return this.setUserID2(c,f);break;case"setUserID3":return this.setUserID3(c,f);break;case"getUserID":return this.getUserID(c,f);break;case"dsa.collect":return this.dsa_Collect(c,f);break;case"dsa.disp
2024-09-04 12:22:22 UTC	16384	IN	Data Raw: 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 67 65 74 56 65 6e 64 6f 72 43 6f 6e 73 65 6e 74 28 63 6d 70 5f 67 63 28 22 68 75 62 73 70 6f 74 22 2c 22 73 30 22 29 29 3b 69 66 28 61 29 7b 77 69 6e 64 6f 77 2e 5f 68 73 71 2e 70 75 73 68 28 5b 22 64 6f 4e 6f 74 54 72 61 63 6b 22 2c 7b 74 72 61 63 6b 3a 74 72 75 65 7d 5d 29 7d 65 6c 73 65 7b 77 69 6e 64 6f 77 2e 5f 68 73 70 2e 70 75 73 68 28 5b 22 72 65 76 6f 6b 65 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 22 5d 29 3b 77 69 6e 64 6f 77 2e 5f 68 73 71 2e 70 75 73 68 28 5b 22 64 6f 4e 6f 74 54 72 61 63 6b 22 5d 29 7d 7d 63 61 74 63 68 28 62 29 7b 7d 7d 7d 3b 74 68 69 73 2e 73 65 6e 64 47 69 6f 73 67 54 72 61 63 6b 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 63 6d 70 5f 68 63 28 22 67 69 Data Ascii: var a=window.cmpmngr.getVendorConsent(cmp_gc("hubspot","s0"));if(a){window._hsq.push(["doNotTrack",{track:true}])}else{window._hsp.push(["revokeCookieConsent"]);window._hsq.push(["doNotTrack"])}}catch(b){}}};this.sendGiosgTracking=function(){if(cmp_hc("gi
2024-09-04 12:22:22 UTC	16384	IN	Data Raw: 70 61 72 65 6e 74 4e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 22 76 69 64 65 6f 22 7c 7c 68 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 22 61 75 64 69 6f 22 7c 7c 68 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 22 70 69 63 74 75 72 65 22 29 29 7b 68 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 75 74 69 6c 73 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 68 2c 22 64 61 74 61 2d 63 6d 70 2d 68 69 64 65 2d 64 69 73 70 6c 61 79 22 29 3f 68 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6d 70 2d 68 69 64 Data Ascii: parentNode.nodeName.toLowerCase()=="video"\|\|h.parentNode.nodeName.toLowerCase()=="audio"\|\|h.parentNode.nodeName.toLowerCase()=="picture")){h.parentNode.style.display=window.cmpmngr.utils.hasAttribute(h,"data-cmp-hide-display")?h.getAttribute("data-cmp-hid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49719	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:22 UTC	675	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dgooel.com%26pid%3D9PO755G95&&l=en&o=1725452540140 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/?dn=gooel.com&pid=9PO755G95 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-04 12:22:23 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:22:23 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=1; Expires=Sat, 04-Oct-2025 12:22:23 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 04 Sep 2024 12:22:23 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-09-04 12:22:23 UTC	1043	IN	Data Raw: 34 30 37 0d 0a 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 7b 0d 0a 20 76 61 72 20 63 76 61 6c 20 3d 20 22 22 3b 0d 0a 20 74 72 79 7b 63 76 61 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3b 7d 63 61 74 63 68 28 65 29 7b 63 76 61 6c 20 3d 20 22 22 3b 7d 0d 0a 20 76 61 72 20 6c 20 3d 20 22 22 3b 20 69 66 28 22 63 6d 70 5f 67 65 74 6c 61 6e 67 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 20 6c 20 3d 20 77 69 6e 64 6f 77 2e 63 6d 70 5f 67 65 74 6c 61 6e 67 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 20 7d 0d 0a 20 76 61 72 20 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 20 73 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 Data Ascii: 407(function (){ var cval = ""; try{cval = document.cookie;}catch(e){cval = "";} var l = ""; if("cmp_getlang" in window){ l = window.cmp_getlang().toLowerCase(); } var s = document.createElement("script"); s.src = "https://a.delivery.consent

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49723	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:23 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-04 12:22:23 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=188597 Date: Wed, 04 Sep 2024 12:22:23 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49731	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:23 UTC	707	OUT	GET /delivery/cmp.php?__cmpcc=1&id=68884&o=1725452543&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dgooel.com%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/?dn=gooel.com&pid=9PO755G95 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=1
2024-09-04 12:22:24 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:22:24 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=2; Expires=Wed, 04-Sep-2024 12:28:24 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 04 Sep 2024 12:22:24 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-09-04 12:22:24 UTC	5469	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c
2024-09-04 12:22:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49735	195.181.170.18	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:24 UTC	371	OUT	GET /delivery/js/cmp_en.min.js HTTP/1.1 Host: cdn.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-04 12:22:24 UTC	642	IN	HTTP/1.1 200 OK Date: Wed, 04 Sep 2024 12:22:24 GMT Content-Type: application/javascript Content-Length: 445779 Connection: close Last-Modified: Mon, 02 Sep 2024 20:42:26 GMT ETag: "6cd53-62128fa89b080" Cache-Control: max-age=86400 Expires: Tue, 03 Sep 2024 20:43:41 GMT Edge-Control: max-age=86400 X-77-NZT: EgwBw7WqEQHXBtEAAAwBJRPCNAG3ZQEAAA X-77-NZT-Ray: 4c156224430c021b0051d8662030d01c X-Accel-Expires: @1725482622 X-Accel-Date: 1725399034 X-Accel-Date-Max: 1725309821 X-77-Cache: HIT X-77-Age: 53510 Vary: Accept-Encoding Server: CDN77-Turbo X-Cache: HIT X-Age: 53510 X-77-POP: frankfurtDE Accept-Ranges: bytes
2024-09-04 12:22:24 UTC	15742	IN	Data Raw: 77 69 6e 64 6f 77 2e 63 6d 70 63 63 73 76 65 72 73 69 6f 6e 62 75 69 6c 64 3d 22 32 30 32 34 2d 39 2d 32 2e 32 30 2e 34 31 22 3b 69 66 28 21 28 22 72 70 6c 22 20 69 6e 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 29 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 72 70 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 63 2e 73 70 6c 69 74 28 61 29 2e 6a 6f 69 6e 28 62 29 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 66 61 6c 73 65 7d 29 7d 69 66 28 21 28 22 63 6d 70 5f 75 6e 71 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 75 6e 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 Data Ascii: window.cmpccsversionbuild="2024-9-2.20.41";if(!("rpl" in String.prototype)){Object.defineProperty(String.prototype,"rpl",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("cmp_unq" in window)){window.cmp_unq=function(a){re
2024-09-04 12:22:24 UTC	16384	IN	Data Raw: 6e 67 4e 6f 74 69 63 65 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 53 61 6c 65 4f 70 74 4f 75 74 4e 6f 74 69 63 65 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 54 61 72 67 65 74 65 64 41 64 76 65 72 74 69 73 69 6e 67 4f 70 74 4f 75 74 4e 6f 74 69 63 65 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 53 61 6c 65 4f 70 74 4f 75 74 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 54 61 72 67 65 74 65 64 41 64 76 65 72 74 69 73 69 6e 67 4f 70 74 4f 75 74 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 53 65 6e 73 69 74 69 76 65 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 22 2c 22 6e 62 69 74 73 22 2c 38 2c 30 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 4b 6e 6f 77 6e 43 68 69 6c 64 Data Ascii: ngNotice","int",2).addField("SaleOptOutNotice","int",2).addField("TargetedAdvertisingOptOutNotice","int",2).addField("SaleOptOut","int",2).addField("TargetedAdvertisingOptOut","int",2).addField("SensitiveDataProcessing","nbits",8,0,2).addField("KnownChild
2024-09-04 12:22:24 UTC	16384	IN	Data Raw: 69 65 6c 64 28 74 68 69 73 2e 50 75 72 70 6f 73 65 73 41 6c 6c 6f 77 65 64 2c 32 34 29 3b 6c 2e 77 72 69 74 65 42 69 74 46 69 65 6c 64 28 74 68 69 73 2e 50 75 72 70 6f 73 65 73 4c 49 2c 32 34 29 3b 6c 2e 77 72 69 74 65 42 6f 6f 6c 28 74 68 69 73 2e 50 75 72 70 6f 73 65 4f 6e 65 54 72 65 61 74 6d 65 6e 74 29 3b 69 66 28 74 68 69 73 2e 50 75 62 6c 69 73 68 65 72 43 43 2e 6c 65 6e 67 74 68 21 3d 32 29 7b 74 68 69 73 2e 50 75 62 6c 69 73 68 65 72 43 43 3d 22 45 55 22 7d 6c 2e 77 72 69 74 65 4c 61 6e 67 28 74 68 69 73 2e 50 75 62 6c 69 73 68 65 72 43 43 29 3b 6c 2e 77 72 69 74 65 42 69 74 46 69 65 6c 64 4f 72 52 61 6e 67 65 28 74 68 69 73 2e 56 65 6e 64 6f 72 73 41 6c 6c 6f 77 65 64 29 3b 6c 2e 77 72 69 74 65 42 69 74 46 69 65 6c 64 4f 72 52 61 6e 67 65 28 74 Data Ascii: ield(this.PurposesAllowed,24);l.writeBitField(this.PurposesLI,24);l.writeBool(this.PurposeOneTreatment);if(this.PublisherCC.length!=2){this.PublisherCC="EU"}l.writeLang(this.PublisherCC);l.writeBitFieldOrRange(this.VendorsAllowed);l.writeBitFieldOrRange(t
2024-09-04 12:22:24 UTC	16384	IN	Data Raw: 22 47 41 22 2c 22 48 52 22 2c 22 4c 56 22 2c 22 4c 54 22 2c 22 4d 54 22 2c 22 4e 4c 22 2c 22 50 4c 22 2c 22 53 56 22 2c 22 53 4b 22 2c 22 53 4c 22 2c 22 43 53 22 2c 22 48 55 22 2c 22 52 55 22 2c 22 53 52 22 2c 22 5a 48 22 2c 22 54 52 22 2c 22 55 4b 22 2c 22 41 52 22 2c 22 42 53 22 2c 22 4a 41 22 2c 22 43 59 22 5d 3b 69 66 28 22 63 6d 70 5f 63 75 73 74 6f 6d 6c 61 6e 67 75 61 67 65 73 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 75 73 74 6f 6d 6c 61 6e 67 75 61 67 65 73 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 62 2e 70 75 73 68 28 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 75 73 74 6f 6d 6c 61 6e 67 75 61 67 65 73 5b 61 5d 2e 6c 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7d 7d 72 65 74 75 72 Data Ascii: "GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR","ZH","TR","UK","AR","BS","JA","CY"];if("cmp_customlanguages" in window){for(var a=0;a<window.cmp_customlanguages.length;a++){b.push(window.cmp_customlanguages[a].l.toUpperCase())}}retur
2024-09-04 12:22:24 UTC	16384	IN	Data Raw: 6e 64 6f 72 49 44 28 29 3e 30 29 26 26 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 74 63 66 76 65 72 73 69 6f 6e 3e 30 7c 7c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 74 63 66 63 61 76 65 72 73 69 6f 6e 3d 3d 31 29 29 7b 72 65 74 75 72 6e 20 63 6d 70 5f 66 6e 64 28 74 68 69 73 2e 70 75 72 70 6f 73 65 73 32 6f 72 67 2c 69 29 21 3d 2d 31 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 3b 74 68 69 73 2e 68 61 73 50 75 72 70 6f 73 65 41 73 73 69 67 6e 65 64 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 28 22 2c 22 2b 74 68 69 73 2e 70 75 72 70 6f 73 65 53 65 6c 65 63 74 69 6f 6e 2b 22 2c 22 29 2e 69 6e 64 65 78 4f 66 28 22 2c 22 2b 69 2b 22 2c 22 29 21 3d 2d 31 7d 3b 74 68 69 73 2e 67 65 74 50 75 72 70 6f 73 65 73 3d 66 75 6e 63 74 69 6f 6e 28 6c Data Ascii: ndorID()>0)&&(window.cmpmngr.tcfversion>0\|\|window.cmpmngr.tcfcaversion==1)){return cmp_fnd(this.purposes2org,i)!=-1}return false};this.hasPurposeAssigned=function(i){return(","+this.purposeSelection+",").indexOf(","+i+",")!=-1};this.getPurposes=function(l
2024-09-04 12:22:24 UTC	16384	IN	Data Raw: 78 28 64 2c 65 5b 62 5d 2b 61 29 3b 69 66 28 63 21 3d 2d 31 29 7b 62 72 65 61 6b 7d 7d 69 66 28 63 21 3d 2d 31 29 7b 62 72 65 61 6b 7d 7d 7d 7d 72 65 74 75 72 6e 20 63 7d 3b 74 68 69 73 2e 67 65 74 46 69 65 6c 64 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 61 2c 65 2c 64 2c 67 29 7b 76 61 72 20 66 3d 30 3b 76 61 72 20 62 3d 74 68 69 73 2e 67 65 74 4d 61 74 63 68 65 64 47 50 50 46 69 65 6c 64 49 6e 64 65 78 28 63 2c 61 29 3b 69 66 28 62 3d 3d 2d 31 29 7b 62 3d 74 68 69 73 2e 67 65 74 46 69 65 6c 64 41 6c 69 61 73 49 6e 64 65 78 28 63 2c 64 2c 67 29 7d 69 66 28 65 3d 3d 22 6e 6f 74 69 63 65 22 29 7b 66 3d 62 3d 3d 2d 31 3f 30 3a 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 68 61 73 45 78 69 73 74 69 6e 67 43 68 6f 69 63 65 3f 31 3a 32 29 7d 65 6c Data Ascii: x(d,e[b]+a);if(c!=-1){break}}if(c!=-1){break}}}}return c};this.getFieldValue=function(c,a,e,d,g){var f=0;var b=this.getMatchedGPPFieldIndex(c,a);if(b==-1){b=this.getFieldAliasIndex(c,d,g)}if(e=="notice"){f=b==-1?0:(window.cmpmngr.hasExistingChoice?1:2)}el
2024-09-04 12:22:24 UTC	16384	IN	Data Raw: 29 7d 65 6c 73 65 7b 69 66 28 61 3d 3d 22 74 63 66 63 61 76 31 22 26 26 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 74 63 66 63 61 76 65 72 73 69 6f 6e 3d 3d 31 29 7b 6b 2e 64 61 74 61 3d 66 7d 7d 7d 7d 7d 7d 7d 6b 2e 65 76 65 6e 74 4e 61 6d 65 3d 61 3b 6b 2e 6c 69 73 74 65 6e 65 72 49 64 3d 68 5b 65 5d 2e 69 64 3b 6b 2e 70 69 6e 67 44 61 74 61 3d 74 68 69 73 2e 67 70 70 5f 70 69 6e 67 28 29 3b 63 3d 68 5b 65 5d 2e 6c 69 73 74 65 6e 65 72 28 6b 2c 74 72 75 65 29 7d 65 6c 73 65 7b 63 3d 68 5b 65 5d 2e 6c 69 73 74 65 6e 65 72 28 6a 2c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2c 66 29 7d 7d 7d 63 61 74 63 68 28 64 29 7b 7d 7d 69 66 28 67 26 26 63 3d 3d 3d 74 72 75 65 29 7b 62 72 65 61 6b 7d 7d 7d 69 66 28 77 69 6e 64 6f 77 2e 64 69 73 70 61 74 63 68 45 76 Data Ascii: )}else{if(a=="tcfcav1"&&window.cmpmngr.tcfcaversion==1){k.data=f}}}}}}}k.eventName=a;k.listenerId=h[e].id;k.pingData=this.gpp_ping();c=h[e].listener(k,true)}else{c=h[e].listener(j,window.cmpmngr,f)}}}catch(d){}}if(g&&c===true){break}}}if(window.dispatchEv
2024-09-04 12:22:24 UTC	16384	IN	Data Raw: 72 49 44 22 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 74 55 73 65 72 49 44 28 63 2c 66 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 65 74 55 73 65 72 49 44 32 22 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 74 55 73 65 72 49 44 32 28 63 2c 66 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 65 74 55 73 65 72 49 44 33 22 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 74 55 73 65 72 49 44 33 28 63 2c 66 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 67 65 74 55 73 65 72 49 44 22 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 55 73 65 72 49 44 28 63 2c 66 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 64 73 61 2e 63 6f 6c 6c 65 63 74 22 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 64 73 61 5f 43 6f 6c 6c 65 63 74 28 63 2c 66 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 64 73 61 2e 64 69 73 70 Data Ascii: rID":return this.setUserID(c,f);break;case"setUserID2":return this.setUserID2(c,f);break;case"setUserID3":return this.setUserID3(c,f);break;case"getUserID":return this.getUserID(c,f);break;case"dsa.collect":return this.dsa_Collect(c,f);break;case"dsa.disp
2024-09-04 12:22:24 UTC	16384	IN	Data Raw: 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 67 65 74 56 65 6e 64 6f 72 43 6f 6e 73 65 6e 74 28 63 6d 70 5f 67 63 28 22 68 75 62 73 70 6f 74 22 2c 22 73 30 22 29 29 3b 69 66 28 61 29 7b 77 69 6e 64 6f 77 2e 5f 68 73 71 2e 70 75 73 68 28 5b 22 64 6f 4e 6f 74 54 72 61 63 6b 22 2c 7b 74 72 61 63 6b 3a 74 72 75 65 7d 5d 29 7d 65 6c 73 65 7b 77 69 6e 64 6f 77 2e 5f 68 73 70 2e 70 75 73 68 28 5b 22 72 65 76 6f 6b 65 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 22 5d 29 3b 77 69 6e 64 6f 77 2e 5f 68 73 71 2e 70 75 73 68 28 5b 22 64 6f 4e 6f 74 54 72 61 63 6b 22 5d 29 7d 7d 63 61 74 63 68 28 62 29 7b 7d 7d 7d 3b 74 68 69 73 2e 73 65 6e 64 47 69 6f 73 67 54 72 61 63 6b 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 63 6d 70 5f 68 63 28 22 67 69 Data Ascii: var a=window.cmpmngr.getVendorConsent(cmp_gc("hubspot","s0"));if(a){window._hsq.push(["doNotTrack",{track:true}])}else{window._hsp.push(["revokeCookieConsent"]);window._hsq.push(["doNotTrack"])}}catch(b){}}};this.sendGiosgTracking=function(){if(cmp_hc("gi
2024-09-04 12:22:24 UTC	16384	IN	Data Raw: 70 61 72 65 6e 74 4e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 22 76 69 64 65 6f 22 7c 7c 68 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 22 61 75 64 69 6f 22 7c 7c 68 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 22 70 69 63 74 75 72 65 22 29 29 7b 68 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 75 74 69 6c 73 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 68 2c 22 64 61 74 61 2d 63 6d 70 2d 68 69 64 65 2d 64 69 73 70 6c 61 79 22 29 3f 68 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6d 70 2d 68 69 64 Data Ascii: parentNode.nodeName.toLowerCase()=="video"\|\|h.parentNode.nodeName.toLowerCase()=="audio"\|\|h.parentNode.nodeName.toLowerCase()=="picture")){h.parentNode.style.display=window.cmpmngr.utils.hasAttribute(h,"data-cmp-hide-display")?h.getAttribute("data-cmp-hid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49736	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:24 UTC	496	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dgooel.com%26pid%3D9PO755G95&&l=en&o=1725452540140 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=1
2024-09-04 12:22:24 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:22:24 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=2; Expires=Wed, 04-Sep-2024 12:28:24 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 04 Sep 2024 12:22:24 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-09-04 12:22:24 UTC	5294	IN	Data Raw: 31 34 41 36 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 14A6window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c
2024-09-04 12:22:24 UTC	181	IN	Data Raw: 41 46 0d 0a 6d 70 5f 61 70 70 65 6e 64 5f 73 63 72 69 70 74 28 77 69 6e 64 6f 77 2e 63 6d 70 5f 70 72 6f 74 6f 2b 22 2f 2f 22 2b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 6e 2b 22 2f 64 65 6c 69 76 65 72 79 2f 63 75 73 74 6f 6d 64 61 74 61 2f 62 56 38 78 4c 6e 64 66 4e 6a 67 34 4f 44 51 75 63 6c 39 53 54 31 63 75 62 46 39 6c 62 69 35 6b 58 7a 49 33 4e 7a 51 32 4c 6e 68 66 4d 54 51 75 64 69 35 77 4c 6e 52 66 4d 6a 63 33 4e 44 59 75 65 48 52 66 4d 7a 49 2e 6a 73 22 2c 22 64 61 74 61 22 29 3b 0a 0a 63 6d 70 5f 6c 6f 61 64 43 53 28 29 3b 0d 0a Data Ascii: AFmp_append_script(window.cmp_proto+"//"+window.cmp_cdn+"/delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfMzI.js","data");cmp_loadCS();
2024-09-04 12:22:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49737	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:24 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-04 12:22:24 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=188650 Date: Wed, 04 Sep 2024 12:22:24 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-04 12:22:24 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49738	207.211.211.27	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:25 UTC	638	OUT	GET /delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfMzI.js HTTP/1.1 Host: cdn.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/?dn=gooel.com&pid=9PO755G95 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-04 12:22:25 UTC	650	IN	HTTP/1.1 200 OK Date: Wed, 04 Sep 2024 12:22:25 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * X-XSS-Protection: 0 Expires: Wed, 04 Sep 2024 12:23:52 GMT Cache-Control: public, max-age=1800 Edge-Control: public, max-age=1800 Last-Modified: Wed, 04 Sep 2024 11:53:52 GMT X-77-NZT: EggBz9PTGQFBDAGckiEnAbexBgAA X-77-NZT-Ray: 43862e24b96165280151d866622d790d X-Accel-Expires: @1725452632 X-Accel-Date: 1725450832 X-Accel-Date-Max: 1725450832 X-77-Cache: HIT X-77-Age: 1713 Vary: Accept-Encoding Server: CDN77-Turbo X-Cache: MISS X-77-POP: frankfurtDE
2024-09-04 12:22:25 UTC	15734	IN	Data Raw: 37 62 62 61 0d 0a 69 66 28 21 28 22 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 7d 3b 7d 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 76 67 5f 6e 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 6d 70 5f 68 74 6d 6c 28 22 73 76 67 22 2c 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 78 6d 6c 6e 73 3a 73 76 67 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 76 69 65 77 42 6f 78 22 3a 22 30 20 30 20 35 31 32 20 32 35 36 22 7d 2c 20 22 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 78 29 7b 78 2e Data Ascii: 7bbaif(!("cmp_config_data" in window)){window.cmp_config_data={};}window.cmp_svg_no=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","viewBox":"0 0 512 256"}, "", function (x){x.
2024-09-04 12:22:25 UTC	16384	IN	Data Raw: 39 39 2c 36 38 2e 32 36 36 39 39 20 2d 39 2e 39 65 2d 34 2c 33 37 2e 36 34 30 39 39 20 2d 33 30 2e 36 32 37 2c 36 38 2e 32 36 37 20 2d 36 38 2e 32 36 36 39 39 2c 36 38 2e 32 36 37 20 7a 22 2c 22 66 69 6c 6c 22 3a 22 23 37 37 37 22 2c 22 63 6c 61 73 73 22 3a 22 63 6d 70 73 76 67 67 72 61 79 66 69 6c 6c 22 7d 29 7d 29 2e 63 68 69 6c 64 28 22 67 22 2c 20 7b 22 69 64 22 3a 22 73 76 67 5f 31 64 22 7d 2c 20 22 22 2c 20 74 72 75 65 2c 20 66 75 6e 63 74 69 6f 6e 20 28 78 29 7b 78 2e 63 68 69 6c 64 28 22 70 61 74 68 22 2c 20 7b 22 69 64 22 3a 22 70 61 74 68 33 37 35 36 22 2c 22 64 22 3a 22 6d 31 31 30 2e 39 33 33 2c 32 33 38 2e 39 33 33 6c 32 34 37 2e 34 36 37 2c 30 63 34 2e 37 31 38 39 39 2c 30 20 38 2e 35 33 32 39 39 2c 2d 33 2e 38 32 33 20 38 2e 35 33 32 39 39 Data Ascii: 99,68.26699 -9.9e-4,37.64099 -30.627,68.267 -68.26699,68.267 z","fill":"#777","class":"cmpsvggrayfill"})}).child("g", {"id":"svg_1d"}, "", true, function (x){x.child("path", {"id":"path3756","d":"m110.933,238.933l247.467,0c4.71899,0 8.53299,-3.823 8.53299
2024-09-04 12:22:25 UTC	16384	IN	Data Raw: 22 3a 22 70 61 74 68 31 22 7d 29 7d 29 7d 29 3b 7d 3b 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 76 67 5f 69 63 6f 70 72 76 35 35 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 6d 70 5f 68 74 6d 6c 28 22 73 76 67 22 2c 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 78 6d 6c 6e 73 3a 73 76 67 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 68 65 69 67 68 74 22 3a 22 33 32 70 78 22 2c 22 76 69 65 77 42 6f 78 22 3a 22 30 20 30 20 33 32 20 33 32 22 2c 22 77 69 64 74 68 22 3a 22 33 32 70 78 22 2c 22 63 6c 61 73 73 22 3a 22 63 6d 70 69 63 6f 73 76 67 66 69 6c 6c 22 7d 2c 20 22 22 2c 20 66 75 6e 63 74 Data Ascii: ":"path1"})})});};window.cmp_svg_icoprv55=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","height":"32px","viewBox":"0 0 32 32","width":"32px","class":"cmpicosvgfill"}, "", funct
2024-09-04 12:22:25 UTC	16384	IN	Data Raw: 30 7d 2c 7b 22 69 64 22 3a 22 73 31 30 35 32 22 2c 22 77 73 69 64 22 3a 36 38 38 38 34 2c 22 6e 22 3a 22 41 6d 61 7a 6f 6e 20 43 6c 6f 75 64 46 72 6f 6e 74 22 2c 22 6e 6f 6e 65 75 22 3a 30 2c 22 6c 22 3a 22 5c 2f 64 65 6c 69 76 65 72 79 5c 2f 69 63 6f 6e 73 5c 2f 69 63 6f 6e 73 5f 76 31 30 35 32 2e 70 6e 67 22 2c 22 70 73 22 3a 22 73 32 2c 63 31 22 2c 22 63 70 22 3a 22 22 2c 22 6c 70 22 3a 22 22 2c 22 66 70 22 3a 22 22 2c 22 73 70 22 3a 22 22 2c 22 66 22 3a 22 22 2c 22 73 66 22 3a 22 22 2c 22 69 33 69 64 22 3a 30 2c 22 67 69 64 22 3a 30 2c 22 66 62 22 3a 30 2c 22 61 76 22 3a 22 22 2c 22 64 76 22 3a 22 22 2c 22 73 76 22 3a 30 2c 22 70 76 22 3a 30 2c 22 63 6f 22 3a 30 2c 22 6c 65 67 52 4f 57 22 3a 30 7d 2c 7b 22 69 64 22 3a 22 73 34 30 22 2c 22 77 73 69 64 Data Ascii: 0},{"id":"s1052","wsid":68884,"n":"Amazon CloudFront","noneu":0,"l":"\/delivery\/icons\/icons_v1052.png","ps":"s2,c1","cp":"","lp":"","fp":"","sp":"","f":"","sf":"","i3id":0,"gid":0,"fb":0,"av":"","dv":"","sv":0,"pv":0,"co":0,"legROW":0},{"id":"s40","wsid
2024-09-04 12:22:25 UTC	16384	IN	Data Raw: 72 20 70 61 67 65 20 6f 72 20 70 61 72 74 20 6f 66 20 74 68 65 20 61 72 74 69 63 6c 65 2e 20 54 6f 20 61 63 68 69 65 76 65 20 74 68 69 73 2c 20 31 5c 75 30 30 62 30 29 20 79 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 64 73 20 61 20 72 65 71 75 65 73 74 20 74 6f 20 61 20 73 65 72 76 65 72 20 6c 69 6e 6b 65 64 20 74 6f 20 74 68 65 20 77 65 62 73 69 74 65 2c 20 32 5c 75 30 30 62 30 29 20 74 68 65 20 73 65 72 76 65 72 20 61 6e 73 77 65 72 73 20 62 61 63 6b 20 28 5c 75 32 30 31 63 68 65 72 65 20 69 73 20 74 68 65 20 61 72 74 69 63 6c 65 20 79 6f 75 20 61 73 6b 65 64 20 66 6f 72 5c 75 32 30 31 64 29 2c 20 75 73 69 6e 67 20 74 65 63 68 6e 69 63 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 69 6e 63 6c 75 64 65 64 20 69 Data Ascii: r page or part of the article. To achieve this, 1\u00b0) your browser sends a request to a server linked to the website, 2\u00b0) the server answers back (\u201chere is the article you asked for\u201d), using technical information automatically included i
2024-09-04 12:22:25 UTC	16384	IN	Data Raw: 65 6e 73 69 74 69 76 65 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 31 2c 2a 2e 53 65 6e 73 69 74 69 76 65 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 4f 70 74 4f 75 74 4e 6f 74 69 63 65 22 2c 22 69 6c 31 22 3a 22 22 2c 22 69 6c 32 22 3a 22 22 2c 22 6f 64 22 3a 31 35 2c 22 63 6f 22 3a 22 22 2c 22 6c 65 67 47 44 50 52 22 3a 31 31 2c 22 6c 65 67 43 43 50 41 22 3a 30 2c 22 6c 65 67 50 49 50 45 44 41 22 3a 30 2c 22 6c 65 67 4c 47 50 44 22 3a 30 2c 22 6c 65 67 52 50 44 4c 22 3a 30 2c 22 6c 65 67 4e 44 50 52 22 3a 30 2c 22 6c 65 67 50 49 50 41 22 3a 30 2c 22 6c 65 67 52 4f 57 22 3a 30 2c 22 6c 65 67 50 4f 50 49 41 22 3a 30 2c 22 6c 65 67 50 44 50 4c 22 3a 30 2c 22 6c 65 67 4c 46 50 44 50 50 50 22 3a 30 2c 22 6c 65 67 50 49 50 4c 22 3a 30 2c 22 6c 65 67 50 44 50 41 Data Ascii: ensitiveDataProcessing1,*.SensitiveDataProcessingOptOutNotice","il1":"","il2":"","od":15,"co":"","legGDPR":11,"legCCPA":0,"legPIPEDA":0,"legLGPD":0,"legRPDL":0,"legNDPR":0,"legPIPA":0,"legROW":0,"legPOPIA":0,"legPDPL":0,"legLFPDPPP":0,"legPIPL":0,"legPDPA
2024-09-04 12:22:25 UTC	14008	IN	Data Raw: 3c 61 20 72 65 6c 3d 5c 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 66 6f 6c 6c 6f 77 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 2f 63 68 72 6f 6d 65 5c 2f 61 6e 73 77 65 72 5c 2f 39 35 36 34 37 3f 68 6c 3d 65 6e 26 61 6d 70 3b 70 3d 63 70 6e 5f 63 6f 6f 6b 69 65 73 5c 22 3e 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 3c 5c 2f 61 3e 3c 5c 2f 6c 69 3e 5c 72 5c 6e 20 20 3c 6c 69 3e 3c 61 20 72 65 6c 3d 5c 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 66 6f 6c 6c 6f 77 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 5c 2f 65 6e 2d 55 Data Ascii: <a rel=\"noopener nofollow\" target=\"_blank\" href=\"https:\/\/support.google.com\/chrome\/answer\/95647?hl=en&p=cpn_cookies\">Google Chrome<\/a><\/li>\r\n <li><a rel=\"noopener nofollow\" target=\"_blank\" href=\"https:\/\/support.mozilla.org\/en-U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49739	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:25 UTC	509	OUT	GET /delivery/cmp.php?__cmpcc=1&id=68884&o=1725452543&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dgooel.com%26pid%3D9PO755G95&&l=en&odw=0&dlt=1&l=en HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=2
2024-09-04 12:22:25 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:22:25 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=3; Expires=Wed, 04-Sep-2024 12:28:25 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 04 Sep 2024 12:22:25 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-09-04 12:22:25 UTC	5294	IN	Data Raw: 31 34 41 36 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 14A6window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c
2024-09-04 12:22:25 UTC	186	IN	Data Raw: 41 46 0d 0a 6d 70 5f 61 70 70 65 6e 64 5f 73 63 72 69 70 74 28 77 69 6e 64 6f 77 2e 63 6d 70 5f 70 72 6f 74 6f 2b 22 2f 2f 22 2b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 6e 2b 22 2f 64 65 6c 69 76 65 72 79 2f 63 75 73 74 6f 6d 64 61 74 61 2f 62 56 38 78 4c 6e 64 66 4e 6a 67 34 4f 44 51 75 63 6c 39 53 54 31 63 75 62 46 39 6c 62 69 35 6b 58 7a 49 33 4e 7a 51 32 4c 6e 68 66 4d 54 51 75 64 69 35 77 4c 6e 52 66 4d 6a 63 33 4e 44 59 75 65 48 52 66 4d 7a 49 2e 6a 73 22 2c 22 64 61 74 61 22 29 3b 0a 0a 63 6d 70 5f 6c 6f 61 64 43 53 28 29 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: AFmp_append_script(window.cmp_proto+"//"+window.cmp_cdn+"/delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfMzI.js","data");cmp_loadCS();0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49740	195.181.170.18	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:26 UTC	440	OUT	GET /delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfMzI.js HTTP/1.1 Host: cdn.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-04 12:22:26 UTC	650	IN	HTTP/1.1 200 OK Date: Wed, 04 Sep 2024 12:22:26 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * X-XSS-Protection: 0 Expires: Wed, 04 Sep 2024 12:23:52 GMT Cache-Control: public, max-age=1800 Edge-Control: public, max-age=1800 Last-Modified: Wed, 04 Sep 2024 11:53:52 GMT X-77-NZT: EggBw7WqEQFBDAGckiEnAbeyBgAA X-77-NZT-Ray: 4c156224e20d87740251d866a40f341a X-Accel-Expires: @1725452632 X-Accel-Date: 1725450832 X-Accel-Date-Max: 1725450832 X-77-Cache: HIT X-77-Age: 1714 Vary: Accept-Encoding Server: CDN77-Turbo X-Cache: MISS X-77-POP: frankfurtDE
2024-09-04 12:22:26 UTC	15734	IN	Data Raw: 65 37 37 0d 0a 69 66 28 21 28 22 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 7d 3b 7d 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 76 67 5f 6e 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 6d 70 5f 68 74 6d 6c 28 22 73 76 67 22 2c 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 78 6d 6c 6e 73 3a 73 76 67 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 76 69 65 77 42 6f 78 22 3a 22 30 20 30 20 35 31 32 20 32 35 36 22 7d 2c 20 22 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 78 29 7b 78 2e 63 Data Ascii: e77if(!("cmp_config_data" in window)){window.cmp_config_data={};}window.cmp_svg_no=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","viewBox":"0 0 512 256"}, "", function (x){x.c
2024-09-04 12:22:26 UTC	16384	IN	Data Raw: 20 36 38 2e 32 36 36 39 39 2c 36 38 2e 32 36 36 39 39 20 2d 39 2e 39 65 2d 34 2c 33 37 2e 36 34 30 39 39 20 2d 33 30 2e 36 32 37 2c 36 38 2e 32 36 37 20 2d 36 38 2e 32 36 36 39 39 2c 36 38 2e 32 36 37 20 7a 22 2c 22 66 69 6c 6c 22 3a 22 23 37 37 37 22 2c 22 63 6c 61 73 73 22 3a 22 63 6d 70 73 76 67 67 72 61 79 66 69 6c 6c 22 7d 29 7d 29 2e 63 68 69 6c 64 28 22 67 22 2c 20 7b 22 69 64 22 3a 22 73 76 67 5f 31 64 22 7d 2c 20 22 22 2c 20 74 72 75 65 2c 20 66 75 6e 63 74 69 6f 6e 20 28 78 29 7b 78 2e 63 68 69 6c 64 28 22 70 61 74 68 22 2c 20 7b 22 69 64 22 3a 22 70 61 74 68 33 37 35 36 22 2c 22 64 22 3a 22 6d 31 31 30 2e 39 33 33 2c 32 33 38 2e 39 33 33 6c 32 34 37 2e 34 36 37 2c 30 63 34 2e 37 31 38 39 39 2c 30 20 38 2e 35 33 32 39 39 2c 2d 33 2e 38 32 33 20 Data Ascii: 68.26699,68.26699 -9.9e-4,37.64099 -30.627,68.267 -68.26699,68.267 z","fill":"#777","class":"cmpsvggrayfill"})}).child("g", {"id":"svg_1d"}, "", true, function (x){x.child("path", {"id":"path3756","d":"m110.933,238.933l247.467,0c4.71899,0 8.53299,-3.823
2024-09-04 12:22:26 UTC	16384	IN	Data Raw: 20 7a 22 2c 22 69 64 22 3a 22 70 61 74 68 31 22 7d 29 7d 29 7d 29 3b 7d 3b 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 76 67 5f 69 63 6f 70 72 76 35 35 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 6d 70 5f 68 74 6d 6c 28 22 73 76 67 22 2c 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 78 6d 6c 6e 73 3a 73 76 67 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 68 65 69 67 68 74 22 3a 22 33 32 70 78 22 2c 22 76 69 65 77 42 6f 78 22 3a 22 30 20 30 20 33 32 20 33 32 22 2c 22 77 69 64 74 68 22 3a 22 33 32 70 78 22 2c 22 63 6c 61 73 73 22 3a 22 63 6d 70 69 63 6f 73 76 67 66 69 6c 6c 22 7d 2c 20 22 22 Data Ascii: z","id":"path1"})})});};window.cmp_svg_icoprv55=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","height":"32px","viewBox":"0 0 32 32","width":"32px","class":"cmpicosvgfill"}, ""
2024-09-04 12:22:26 UTC	16384	IN	Data Raw: 6f 22 3a 22 22 2c 22 6c 65 67 52 4f 57 22 3a 30 7d 2c 7b 22 69 64 22 3a 22 73 31 30 35 32 22 2c 22 77 73 69 64 22 3a 36 38 38 38 34 2c 22 6e 22 3a 22 41 6d 61 7a 6f 6e 20 43 6c 6f 75 64 46 72 6f 6e 74 22 2c 22 6e 6f 6e 65 75 22 3a 30 2c 22 6c 22 3a 22 5c 2f 64 65 6c 69 76 65 72 79 5c 2f 69 63 6f 6e 73 5c 2f 69 63 6f 6e 73 5f 76 31 30 35 32 2e 70 6e 67 22 2c 22 70 73 22 3a 22 73 32 2c 63 31 22 2c 22 63 70 22 3a 22 22 2c 22 6c 70 22 3a 22 22 2c 22 66 70 22 3a 22 22 2c 22 73 70 22 3a 22 22 2c 22 66 22 3a 22 22 2c 22 73 66 22 3a 22 22 2c 22 69 33 69 64 22 3a 30 2c 22 67 69 64 22 3a 30 2c 22 66 62 22 3a 30 2c 22 61 76 22 3a 22 22 2c 22 64 76 22 3a 22 22 2c 22 73 76 22 3a 30 2c 22 70 76 22 3a 30 2c 22 63 6f 22 3a 30 2c 22 6c 65 67 52 4f 57 22 3a 30 7d 2c 7b 22 Data Ascii: o":"","legROW":0},{"id":"s1052","wsid":68884,"n":"Amazon CloudFront","noneu":0,"l":"\/delivery\/icons\/icons_v1052.png","ps":"s2,c1","cp":"","lp":"","fp":"","sp":"","f":"","sf":"","i3id":0,"gid":0,"fb":0,"av":"","dv":"","sv":0,"pv":0,"co":0,"legROW":0},{"
2024-09-04 12:22:26 UTC	16384	IN	Data Raw: 64 20 79 6f 75 20 74 6f 20 61 6e 6f 74 68 65 72 20 70 61 67 65 20 6f 72 20 70 61 72 74 20 6f 66 20 74 68 65 20 61 72 74 69 63 6c 65 2e 20 54 6f 20 61 63 68 69 65 76 65 20 74 68 69 73 2c 20 31 5c 75 30 30 62 30 29 20 79 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 64 73 20 61 20 72 65 71 75 65 73 74 20 74 6f 20 61 20 73 65 72 76 65 72 20 6c 69 6e 6b 65 64 20 74 6f 20 74 68 65 20 77 65 62 73 69 74 65 2c 20 32 5c 75 30 30 62 30 29 20 74 68 65 20 73 65 72 76 65 72 20 61 6e 73 77 65 72 73 20 62 61 63 6b 20 28 5c 75 32 30 31 63 68 65 72 65 20 69 73 20 74 68 65 20 61 72 74 69 63 6c 65 20 79 6f 75 20 61 73 6b 65 64 20 66 6f 72 5c 75 32 30 31 64 29 2c 20 75 73 69 6e 67 20 74 65 63 68 6e 69 63 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 75 74 6f 6d 61 74 69 63 Data Ascii: d you to another page or part of the article. To achieve this, 1\u00b0) your browser sends a request to a server linked to the website, 2\u00b0) the server answers back (\u201chere is the article you asked for\u201d), using technical information automatic
2024-09-04 12:22:26 UTC	16384	IN	Data Raw: 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 31 2c 75 73 6e 61 74 2e 53 65 6e 73 69 74 69 76 65 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 31 2c 2a 2e 53 65 6e 73 69 74 69 76 65 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 4f 70 74 4f 75 74 4e 6f 74 69 63 65 22 2c 22 69 6c 31 22 3a 22 22 2c 22 69 6c 32 22 3a 22 22 2c 22 6f 64 22 3a 31 35 2c 22 63 6f 22 3a 22 22 2c 22 6c 65 67 47 44 50 52 22 3a 31 31 2c 22 6c 65 67 43 43 50 41 22 3a 30 2c 22 6c 65 67 50 49 50 45 44 41 22 3a 30 2c 22 6c 65 67 4c 47 50 44 22 3a 30 2c 22 6c 65 67 52 50 44 4c 22 3a 30 2c 22 6c 65 67 4e 44 50 52 22 3a 30 2c 22 6c 65 67 50 49 50 41 22 3a 30 2c 22 6c 65 67 52 4f 57 22 3a 30 2c 22 6c 65 67 50 4f 50 49 41 22 3a 30 2c 22 6c 65 67 50 44 50 4c 22 3a 30 2c 22 6c 65 67 4c 46 50 44 50 50 50 22 Data Ascii: DataProcessing1,usnat.SensitiveDataProcessing1,*.SensitiveDataProcessingOptOutNotice","il1":"","il2":"","od":15,"co":"","legGDPR":11,"legCCPA":0,"legPIPEDA":0,"legLGPD":0,"legRPDL":0,"legNDPR":0,"legPIPA":0,"legROW":0,"legPOPIA":0,"legPDPL":0,"legLFPDPPP"
2024-09-04 12:22:26 UTC	14031	IN	Data Raw: 3c 5c 2f 70 3e 5c 72 5c 6e 3c 75 6c 3e 5c 72 5c 6e 20 20 3c 6c 69 3e 3c 61 20 72 65 6c 3d 5c 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 66 6f 6c 6c 6f 77 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 2f 63 68 72 6f 6d 65 5c 2f 61 6e 73 77 65 72 5c 2f 39 35 36 34 37 3f 68 6c 3d 65 6e 26 61 6d 70 3b 70 3d 63 70 6e 5f 63 6f 6f 6b 69 65 73 5c 22 3e 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 3c 5c 2f 61 3e 3c 5c 2f 6c 69 3e 5c 72 5c 6e 20 20 3c 6c 69 3e 3c 61 20 72 65 6c 3d 5c 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 66 6f 6c 6c 6f 77 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 75 Data Ascii: <\/p>\r\n<ul>\r\n <li><a rel=\"noopener nofollow\" target=\"_blank\" href=\"https:\/\/support.google.com\/chrome\/answer\/95647?hl=en&p=cpn_cookies\">Google Chrome<\/a><\/li>\r\n <li><a rel=\"noopener nofollow\" target=\"_blank\" href=\"https:\/\/su

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49741	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:26 UTC	788	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2F&o=1725452544847&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ifdnzact.com/?dn=gooel.com&pid=9PO755G95 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=3
2024-09-04 12:22:26 UTC	380	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:22:26 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Wed, 04 Sep 2024 12:22:26 GMT content-length: 43 content-type: image/gif connection: close
2024-09-04 12:22:26 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49742	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:27 UTC	530	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2F&o=1725452544847&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=3
2024-09-04 12:22:27 UTC	380	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:22:27 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Wed, 04 Sep 2024 12:22:27 GMT content-length: 43 content-type: image/gif connection: close
2024-09-04 12:22:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49744	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:31 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=4b8gRcrnwh48DTZ&MD=ooLU+lXc HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-09-04 12:22:31 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: a42ab675-b6c5-4c5d-9e39-f7eafa5eeb57 MS-RequestId: e9da1003-1deb-4089-92f3-088e8f9c14fe MS-CV: yxUf2BuEDUCzJrGK.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 04 Sep 2024 12:22:30 GMT Connection: close Content-Length: 24490
2024-09-04 12:22:31 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-09-04 12:22:31 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49715	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:36 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-09-04 12:22:36 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49756	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:39 UTC	1950	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FDownload_Software.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%252BtlnDJDYgWvUn3IboedbPOeSEd%252F6OHC1l3mjJ49%252BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%252FuHqpKKskJY%252BL5As0rfFpeEoTHkctWlKiXqOaIb0E%252FuKcZZj%252FV46HWlnBlE2vMTEAVy%252BfVJb%252B6xQhBhPJpsebcFrjI%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26%26%26kt%3D246%26%26kbc%3D707%26ki%3D8849840%26ktd%3D0%26kld%3D1063%26kp%3D3%26bd%3D-4%25231024%25231280%25231%25230%2523455%2523509&&l=en&o=1725452557999 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/Download_Software.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=707&ki=8849840&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230%23455%23509 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=3
2024-09-04 12:22:39 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:22:39 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=4; Expires=Wed, 04-Sep-2024 12:28:39 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 04 Sep 2024 12:22:39 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-09-04 12:22:39 UTC	5474	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49755	195.181.170.18	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:39 UTC	1134	OUT	GET /delivery/js/cmp_en.min.js HTTP/1.1 Host: cdn.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/Download_Software.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=707&ki=8849840&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-04 12:22:39 UTC	642	IN	HTTP/1.1 200 OK Date: Wed, 04 Sep 2024 12:22:39 GMT Content-Type: application/javascript Content-Length: 445779 Connection: close Last-Modified: Mon, 02 Sep 2024 20:42:26 GMT ETag: "6cd53-62128fa89b080" Cache-Control: max-age=86400 Expires: Tue, 03 Sep 2024 20:43:41 GMT Edge-Control: max-age=86400 X-77-NZT: EgwBw7WqEQHXFdEAAAwBJRPCNAG3ZQEAAA X-77-NZT-Ray: 4c1562245a0b1ccf0f51d866a5f7c62b X-Accel-Expires: @1725482622 X-Accel-Date: 1725399034 X-Accel-Date-Max: 1725309821 X-77-Cache: HIT X-77-Age: 53525 Vary: Accept-Encoding Server: CDN77-Turbo X-Cache: HIT X-Age: 53525 X-77-POP: frankfurtDE Accept-Ranges: bytes
2024-09-04 12:22:39 UTC	15742	IN	Data Raw: 77 69 6e 64 6f 77 2e 63 6d 70 63 63 73 76 65 72 73 69 6f 6e 62 75 69 6c 64 3d 22 32 30 32 34 2d 39 2d 32 2e 32 30 2e 34 31 22 3b 69 66 28 21 28 22 72 70 6c 22 20 69 6e 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 29 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 72 70 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 63 2e 73 70 6c 69 74 28 61 29 2e 6a 6f 69 6e 28 62 29 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 66 61 6c 73 65 7d 29 7d 69 66 28 21 28 22 63 6d 70 5f 75 6e 71 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 75 6e 71 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 Data Ascii: window.cmpccsversionbuild="2024-9-2.20.41";if(!("rpl" in String.prototype)){Object.defineProperty(String.prototype,"rpl",{value:function(a,b){var c=this;return c.split(a).join(b)},enumerable:false})}if(!("cmp_unq" in window)){window.cmp_unq=function(a){re
2024-09-04 12:22:39 UTC	16384	IN	Data Raw: 6e 67 4e 6f 74 69 63 65 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 53 61 6c 65 4f 70 74 4f 75 74 4e 6f 74 69 63 65 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 54 61 72 67 65 74 65 64 41 64 76 65 72 74 69 73 69 6e 67 4f 70 74 4f 75 74 4e 6f 74 69 63 65 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 53 61 6c 65 4f 70 74 4f 75 74 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 54 61 72 67 65 74 65 64 41 64 76 65 72 74 69 73 69 6e 67 4f 70 74 4f 75 74 22 2c 22 69 6e 74 22 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 53 65 6e 73 69 74 69 76 65 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 22 2c 22 6e 62 69 74 73 22 2c 38 2c 30 2c 32 29 2e 61 64 64 46 69 65 6c 64 28 22 4b 6e 6f 77 6e 43 68 69 6c 64 Data Ascii: ngNotice","int",2).addField("SaleOptOutNotice","int",2).addField("TargetedAdvertisingOptOutNotice","int",2).addField("SaleOptOut","int",2).addField("TargetedAdvertisingOptOut","int",2).addField("SensitiveDataProcessing","nbits",8,0,2).addField("KnownChild
2024-09-04 12:22:39 UTC	16384	IN	Data Raw: 69 65 6c 64 28 74 68 69 73 2e 50 75 72 70 6f 73 65 73 41 6c 6c 6f 77 65 64 2c 32 34 29 3b 6c 2e 77 72 69 74 65 42 69 74 46 69 65 6c 64 28 74 68 69 73 2e 50 75 72 70 6f 73 65 73 4c 49 2c 32 34 29 3b 6c 2e 77 72 69 74 65 42 6f 6f 6c 28 74 68 69 73 2e 50 75 72 70 6f 73 65 4f 6e 65 54 72 65 61 74 6d 65 6e 74 29 3b 69 66 28 74 68 69 73 2e 50 75 62 6c 69 73 68 65 72 43 43 2e 6c 65 6e 67 74 68 21 3d 32 29 7b 74 68 69 73 2e 50 75 62 6c 69 73 68 65 72 43 43 3d 22 45 55 22 7d 6c 2e 77 72 69 74 65 4c 61 6e 67 28 74 68 69 73 2e 50 75 62 6c 69 73 68 65 72 43 43 29 3b 6c 2e 77 72 69 74 65 42 69 74 46 69 65 6c 64 4f 72 52 61 6e 67 65 28 74 68 69 73 2e 56 65 6e 64 6f 72 73 41 6c 6c 6f 77 65 64 29 3b 6c 2e 77 72 69 74 65 42 69 74 46 69 65 6c 64 4f 72 52 61 6e 67 65 28 74 Data Ascii: ield(this.PurposesAllowed,24);l.writeBitField(this.PurposesLI,24);l.writeBool(this.PurposeOneTreatment);if(this.PublisherCC.length!=2){this.PublisherCC="EU"}l.writeLang(this.PublisherCC);l.writeBitFieldOrRange(this.VendorsAllowed);l.writeBitFieldOrRange(t
2024-09-04 12:22:40 UTC	16384	IN	Data Raw: 22 47 41 22 2c 22 48 52 22 2c 22 4c 56 22 2c 22 4c 54 22 2c 22 4d 54 22 2c 22 4e 4c 22 2c 22 50 4c 22 2c 22 53 56 22 2c 22 53 4b 22 2c 22 53 4c 22 2c 22 43 53 22 2c 22 48 55 22 2c 22 52 55 22 2c 22 53 52 22 2c 22 5a 48 22 2c 22 54 52 22 2c 22 55 4b 22 2c 22 41 52 22 2c 22 42 53 22 2c 22 4a 41 22 2c 22 43 59 22 5d 3b 69 66 28 22 63 6d 70 5f 63 75 73 74 6f 6d 6c 61 6e 67 75 61 67 65 73 22 20 69 6e 20 77 69 6e 64 6f 77 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 75 73 74 6f 6d 6c 61 6e 67 75 61 67 65 73 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 62 2e 70 75 73 68 28 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 75 73 74 6f 6d 6c 61 6e 67 75 61 67 65 73 5b 61 5d 2e 6c 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 29 7d 7d 72 65 74 75 72 Data Ascii: "GA","HR","LV","LT","MT","NL","PL","SV","SK","SL","CS","HU","RU","SR","ZH","TR","UK","AR","BS","JA","CY"];if("cmp_customlanguages" in window){for(var a=0;a<window.cmp_customlanguages.length;a++){b.push(window.cmp_customlanguages[a].l.toUpperCase())}}retur
2024-09-04 12:22:40 UTC	16384	IN	Data Raw: 6e 64 6f 72 49 44 28 29 3e 30 29 26 26 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 74 63 66 76 65 72 73 69 6f 6e 3e 30 7c 7c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 74 63 66 63 61 76 65 72 73 69 6f 6e 3d 3d 31 29 29 7b 72 65 74 75 72 6e 20 63 6d 70 5f 66 6e 64 28 74 68 69 73 2e 70 75 72 70 6f 73 65 73 32 6f 72 67 2c 69 29 21 3d 2d 31 7d 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 3b 74 68 69 73 2e 68 61 73 50 75 72 70 6f 73 65 41 73 73 69 67 6e 65 64 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 28 22 2c 22 2b 74 68 69 73 2e 70 75 72 70 6f 73 65 53 65 6c 65 63 74 69 6f 6e 2b 22 2c 22 29 2e 69 6e 64 65 78 4f 66 28 22 2c 22 2b 69 2b 22 2c 22 29 21 3d 2d 31 7d 3b 74 68 69 73 2e 67 65 74 50 75 72 70 6f 73 65 73 3d 66 75 6e 63 74 69 6f 6e 28 6c Data Ascii: ndorID()>0)&&(window.cmpmngr.tcfversion>0\|\|window.cmpmngr.tcfcaversion==1)){return cmp_fnd(this.purposes2org,i)!=-1}return false};this.hasPurposeAssigned=function(i){return(","+this.purposeSelection+",").indexOf(","+i+",")!=-1};this.getPurposes=function(l
2024-09-04 12:22:40 UTC	16384	IN	Data Raw: 78 28 64 2c 65 5b 62 5d 2b 61 29 3b 69 66 28 63 21 3d 2d 31 29 7b 62 72 65 61 6b 7d 7d 69 66 28 63 21 3d 2d 31 29 7b 62 72 65 61 6b 7d 7d 7d 7d 72 65 74 75 72 6e 20 63 7d 3b 74 68 69 73 2e 67 65 74 46 69 65 6c 64 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 61 2c 65 2c 64 2c 67 29 7b 76 61 72 20 66 3d 30 3b 76 61 72 20 62 3d 74 68 69 73 2e 67 65 74 4d 61 74 63 68 65 64 47 50 50 46 69 65 6c 64 49 6e 64 65 78 28 63 2c 61 29 3b 69 66 28 62 3d 3d 2d 31 29 7b 62 3d 74 68 69 73 2e 67 65 74 46 69 65 6c 64 41 6c 69 61 73 49 6e 64 65 78 28 63 2c 64 2c 67 29 7d 69 66 28 65 3d 3d 22 6e 6f 74 69 63 65 22 29 7b 66 3d 62 3d 3d 2d 31 3f 30 3a 28 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 68 61 73 45 78 69 73 74 69 6e 67 43 68 6f 69 63 65 3f 31 3a 32 29 7d 65 6c Data Ascii: x(d,e[b]+a);if(c!=-1){break}}if(c!=-1){break}}}}return c};this.getFieldValue=function(c,a,e,d,g){var f=0;var b=this.getMatchedGPPFieldIndex(c,a);if(b==-1){b=this.getFieldAliasIndex(c,d,g)}if(e=="notice"){f=b==-1?0:(window.cmpmngr.hasExistingChoice?1:2)}el
2024-09-04 12:22:40 UTC	16384	IN	Data Raw: 29 7d 65 6c 73 65 7b 69 66 28 61 3d 3d 22 74 63 66 63 61 76 31 22 26 26 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 74 63 66 63 61 76 65 72 73 69 6f 6e 3d 3d 31 29 7b 6b 2e 64 61 74 61 3d 66 7d 7d 7d 7d 7d 7d 7d 6b 2e 65 76 65 6e 74 4e 61 6d 65 3d 61 3b 6b 2e 6c 69 73 74 65 6e 65 72 49 64 3d 68 5b 65 5d 2e 69 64 3b 6b 2e 70 69 6e 67 44 61 74 61 3d 74 68 69 73 2e 67 70 70 5f 70 69 6e 67 28 29 3b 63 3d 68 5b 65 5d 2e 6c 69 73 74 65 6e 65 72 28 6b 2c 74 72 75 65 29 7d 65 6c 73 65 7b 63 3d 68 5b 65 5d 2e 6c 69 73 74 65 6e 65 72 28 6a 2c 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2c 66 29 7d 7d 7d 63 61 74 63 68 28 64 29 7b 7d 7d 69 66 28 67 26 26 63 3d 3d 3d 74 72 75 65 29 7b 62 72 65 61 6b 7d 7d 7d 69 66 28 77 69 6e 64 6f 77 2e 64 69 73 70 61 74 63 68 45 76 Data Ascii: )}else{if(a=="tcfcav1"&&window.cmpmngr.tcfcaversion==1){k.data=f}}}}}}}k.eventName=a;k.listenerId=h[e].id;k.pingData=this.gpp_ping();c=h[e].listener(k,true)}else{c=h[e].listener(j,window.cmpmngr,f)}}}catch(d){}}if(g&&c===true){break}}}if(window.dispatchEv
2024-09-04 12:22:40 UTC	16384	IN	Data Raw: 72 49 44 22 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 74 55 73 65 72 49 44 28 63 2c 66 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 65 74 55 73 65 72 49 44 32 22 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 74 55 73 65 72 49 44 32 28 63 2c 66 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 65 74 55 73 65 72 49 44 33 22 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 73 65 74 55 73 65 72 49 44 33 28 63 2c 66 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 67 65 74 55 73 65 72 49 44 22 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 55 73 65 72 49 44 28 63 2c 66 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 64 73 61 2e 63 6f 6c 6c 65 63 74 22 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 64 73 61 5f 43 6f 6c 6c 65 63 74 28 63 2c 66 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 64 73 61 2e 64 69 73 70 Data Ascii: rID":return this.setUserID(c,f);break;case"setUserID2":return this.setUserID2(c,f);break;case"setUserID3":return this.setUserID3(c,f);break;case"getUserID":return this.getUserID(c,f);break;case"dsa.collect":return this.dsa_Collect(c,f);break;case"dsa.disp
2024-09-04 12:22:40 UTC	16384	IN	Data Raw: 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 67 65 74 56 65 6e 64 6f 72 43 6f 6e 73 65 6e 74 28 63 6d 70 5f 67 63 28 22 68 75 62 73 70 6f 74 22 2c 22 73 30 22 29 29 3b 69 66 28 61 29 7b 77 69 6e 64 6f 77 2e 5f 68 73 71 2e 70 75 73 68 28 5b 22 64 6f 4e 6f 74 54 72 61 63 6b 22 2c 7b 74 72 61 63 6b 3a 74 72 75 65 7d 5d 29 7d 65 6c 73 65 7b 77 69 6e 64 6f 77 2e 5f 68 73 70 2e 70 75 73 68 28 5b 22 72 65 76 6f 6b 65 43 6f 6f 6b 69 65 43 6f 6e 73 65 6e 74 22 5d 29 3b 77 69 6e 64 6f 77 2e 5f 68 73 71 2e 70 75 73 68 28 5b 22 64 6f 4e 6f 74 54 72 61 63 6b 22 5d 29 7d 7d 63 61 74 63 68 28 62 29 7b 7d 7d 7d 3b 74 68 69 73 2e 73 65 6e 64 47 69 6f 73 67 54 72 61 63 6b 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 63 6d 70 5f 68 63 28 22 67 69 Data Ascii: var a=window.cmpmngr.getVendorConsent(cmp_gc("hubspot","s0"));if(a){window._hsq.push(["doNotTrack",{track:true}])}else{window._hsp.push(["revokeCookieConsent"]);window._hsq.push(["doNotTrack"])}}catch(b){}}};this.sendGiosgTracking=function(){if(cmp_hc("gi
2024-09-04 12:22:40 UTC	16384	IN	Data Raw: 70 61 72 65 6e 74 4e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 22 76 69 64 65 6f 22 7c 7c 68 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 22 61 75 64 69 6f 22 7c 7c 68 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 22 70 69 63 74 75 72 65 22 29 29 7b 68 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 77 69 6e 64 6f 77 2e 63 6d 70 6d 6e 67 72 2e 75 74 69 6c 73 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 68 2c 22 64 61 74 61 2d 63 6d 70 2d 68 69 64 65 2d 64 69 73 70 6c 61 79 22 29 3f 68 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6d 70 2d 68 69 64 Data Ascii: parentNode.nodeName.toLowerCase()=="video"\|\|h.parentNode.nodeName.toLowerCase()=="audio"\|\|h.parentNode.nodeName.toLowerCase()=="picture")){h.parentNode.style.display=window.cmpmngr.utils.hasAttribute(h,"data-cmp-hide-display")?h.getAttribute("data-cmp-hid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49760	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:40 UTC	1922	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FDownload_Software.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%252BtlnDJDYgWvUn3IboedbPOeSEd%252F6OHC1l3mjJ49%252BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%252FuHqpKKskJY%252BL5As0rfFpeEoTHkctWlKiXqOaIb0E%252FuKcZZj%252FV46HWlnBlE2vMTEAVy%252BfVJb%252B6xQhBhPJpsebcFrjI%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26%26%26kt%3D246%26%26kbc%3D707%26ki%3D8849840%26ktd%3D0%26kld%3D1063%26kp%3D3%26bd%3D-4%25231024%25231280%25231%25230&&l=en&o=1725452558155 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/Download_Software.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=707&ki=8849840&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=3
2024-09-04 12:22:40 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:22:40 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=4; Expires=Wed, 04-Sep-2024 12:28:40 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 04 Sep 2024 12:22:40 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-09-04 12:22:40 UTC	5469	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c
2024-09-04 12:22:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49768	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:40 UTC	1175	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FDownload_Software.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%252BtlnDJDYgWvUn3IboedbPOeSEd%252F6OHC1l3mjJ49%252BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%252FuHqpKKskJY%252BL5As0rfFpeEoTHkctWlKiXqOaIb0E%252FuKcZZj%252FV46HWlnBlE2vMTEAVy%252BfVJb%252B6xQhBhPJpsebcFrjI%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26%26%26kt%3D246%26%26kbc%3D707%26ki%3D8849840%26ktd%3D0%26kld%3D1063%26kp%3D3%26bd%3D-4%25231024%25231280%25231%25230%2523455%2523509&&l=en&o=1725452557999 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=4
2024-09-04 12:22:41 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:22:41 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=5; Expires=Wed, 04-Sep-2024 12:28:41 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 04 Sep 2024 12:22:41 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-09-04 12:22:41 UTC	5469	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c
2024-09-04 12:22:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49773	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:40 UTC	1159	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FDownload_Software.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%252BtlnDJDYgWvUn3IboedbPOeSEd%252F6OHC1l3mjJ49%252BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%252FuHqpKKskJY%252BL5As0rfFpeEoTHkctWlKiXqOaIb0E%252FuKcZZj%252FV46HWlnBlE2vMTEAVy%252BfVJb%252B6xQhBhPJpsebcFrjI%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26%26%26kt%3D246%26%26kbc%3D707%26ki%3D8849840%26ktd%3D0%26kld%3D1063%26kp%3D3%26bd%3D-4%25231024%25231280%25231%25230&&l=en&o=1725452558155 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=4
2024-09-04 12:22:41 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:22:41 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=5; Expires=Wed, 04-Sep-2024 12:28:41 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 04 Sep 2024 12:22:41 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-09-04 12:22:41 UTC	5474	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49772	195.181.170.18	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:40 UTC	1203	OUT	GET /delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfMzI.js HTTP/1.1 Host: cdn.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/Download_Software.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=707&ki=8849840&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-04 12:22:41 UTC	650	IN	HTTP/1.1 200 OK Date: Wed, 04 Sep 2024 12:22:41 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * X-XSS-Protection: 0 Expires: Wed, 04 Sep 2024 12:23:52 GMT Cache-Control: public, max-age=1800 Edge-Control: public, max-age=1800 Last-Modified: Wed, 04 Sep 2024 11:53:52 GMT X-77-NZT: EggBw7WqEQFBDAGckiEnAbfBBgAA X-77-NZT-Ray: 4c1562242f0bce141151d866b3a8810a X-Accel-Expires: @1725452632 X-Accel-Date: 1725450832 X-Accel-Date-Max: 1725450832 X-77-Cache: HIT X-77-Age: 1729 Vary: Accept-Encoding Server: CDN77-Turbo X-Cache: MISS X-77-POP: frankfurtDE
2024-09-04 12:22:41 UTC	15734	IN	Data Raw: 31 34 31 66 0d 0a 69 66 28 21 28 22 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 22 20 69 6e 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 7d 3b 7d 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 76 67 5f 6e 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 6d 70 5f 68 74 6d 6c 28 22 73 76 67 22 2c 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 78 6d 6c 6e 73 3a 73 76 67 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 76 69 65 77 42 6f 78 22 3a 22 30 20 30 20 35 31 32 20 32 35 36 22 7d 2c 20 22 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 78 29 7b 78 2e Data Ascii: 141fif(!("cmp_config_data" in window)){window.cmp_config_data={};}window.cmp_svg_no=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","viewBox":"0 0 512 256"}, "", function (x){x.
2024-09-04 12:22:41 UTC	16384	IN	Data Raw: 39 20 36 38 2e 32 36 36 39 39 2c 36 38 2e 32 36 36 39 39 20 2d 39 2e 39 65 2d 34 2c 33 37 2e 36 34 30 39 39 20 2d 33 30 2e 36 32 37 2c 36 38 2e 32 36 37 20 2d 36 38 2e 32 36 36 39 39 2c 36 38 2e 32 36 37 20 7a 22 2c 22 66 69 6c 6c 22 3a 22 23 37 37 37 22 2c 22 63 6c 61 73 73 22 3a 22 63 6d 70 73 76 67 67 72 61 79 66 69 6c 6c 22 7d 29 7d 29 2e 63 68 69 6c 64 28 22 67 22 2c 20 7b 22 69 64 22 3a 22 73 76 67 5f 31 64 22 7d 2c 20 22 22 2c 20 74 72 75 65 2c 20 66 75 6e 63 74 69 6f 6e 20 28 78 29 7b 78 2e 63 68 69 6c 64 28 22 70 61 74 68 22 2c 20 7b 22 69 64 22 3a 22 70 61 74 68 33 37 35 36 22 2c 22 64 22 3a 22 6d 31 31 30 2e 39 33 33 2c 32 33 38 2e 39 33 33 6c 32 34 37 2e 34 36 37 2c 30 63 34 2e 37 31 38 39 39 2c 30 20 38 2e 35 33 32 39 39 2c 2d 33 2e 38 32 33 Data Ascii: 9 68.26699,68.26699 -9.9e-4,37.64099 -30.627,68.267 -68.26699,68.267 z","fill":"#777","class":"cmpsvggrayfill"})}).child("g", {"id":"svg_1d"}, "", true, function (x){x.child("path", {"id":"path3756","d":"m110.933,238.933l247.467,0c4.71899,0 8.53299,-3.823
2024-09-04 12:22:41 UTC	16384	IN	Data Raw: 22 3a 22 70 61 74 68 31 22 7d 29 7d 29 7d 29 3b 7d 3b 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 73 76 67 5f 69 63 6f 70 72 76 35 35 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 63 6d 70 5f 68 74 6d 6c 28 22 73 76 67 22 2c 7b 22 78 6d 6c 6e 73 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 78 6d 6c 6e 73 3a 73 76 67 22 3a 22 68 74 74 70 3a 5c 2f 5c 2f 77 77 77 2e 77 33 2e 6f 72 67 5c 2f 32 30 30 30 5c 2f 73 76 67 22 2c 22 68 65 69 67 68 74 22 3a 22 33 32 70 78 22 2c 22 76 69 65 77 42 6f 78 22 3a 22 30 20 30 20 33 32 20 33 32 22 2c 22 77 69 64 74 68 22 3a 22 33 32 70 78 22 2c 22 63 6c 61 73 73 22 3a 22 63 6d 70 69 63 6f 73 76 67 66 69 6c 6c 22 7d 2c 20 22 22 2c 20 66 75 6e 63 74 Data Ascii: ":"path1"})})});};window.cmp_svg_icoprv55=function(){return new cmp_html("svg",{"xmlns":"http:\/\/www.w3.org\/2000\/svg","xmlns:svg":"http:\/\/www.w3.org\/2000\/svg","height":"32px","viewBox":"0 0 32 32","width":"32px","class":"cmpicosvgfill"}, "", funct
2024-09-04 12:22:41 UTC	16384	IN	Data Raw: 6c 65 67 52 4f 57 22 3a 30 7d 2c 7b 22 69 64 22 3a 22 73 31 30 35 32 22 2c 22 77 73 69 64 22 3a 36 38 38 38 34 2c 22 6e 22 3a 22 41 6d 61 7a 6f 6e 20 43 6c 6f 75 64 46 72 6f 6e 74 22 2c 22 6e 6f 6e 65 75 22 3a 30 2c 22 6c 22 3a 22 5c 2f 64 65 6c 69 76 65 72 79 5c 2f 69 63 6f 6e 73 5c 2f 69 63 6f 6e 73 5f 76 31 30 35 32 2e 70 6e 67 22 2c 22 70 73 22 3a 22 73 32 2c 63 31 22 2c 22 63 70 22 3a 22 22 2c 22 6c 70 22 3a 22 22 2c 22 66 70 22 3a 22 22 2c 22 73 70 22 3a 22 22 2c 22 66 22 3a 22 22 2c 22 73 66 22 3a 22 22 2c 22 69 33 69 64 22 3a 30 2c 22 67 69 64 22 3a 30 2c 22 66 62 22 3a 30 2c 22 61 76 22 3a 22 22 2c 22 64 76 22 3a 22 22 2c 22 73 76 22 3a 30 2c 22 70 76 22 3a 30 2c 22 63 6f 22 3a 30 2c 22 6c 65 67 52 4f 57 22 3a 30 7d 2c 7b 22 69 64 22 3a 22 73 34 Data Ascii: legROW":0},{"id":"s1052","wsid":68884,"n":"Amazon CloudFront","noneu":0,"l":"\/delivery\/icons\/icons_v1052.png","ps":"s2,c1","cp":"","lp":"","fp":"","sp":"","f":"","sf":"","i3id":0,"gid":0,"fb":0,"av":"","dv":"","sv":0,"pv":0,"co":0,"legROW":0},{"id":"s4
2024-09-04 12:22:41 UTC	16384	IN	Data Raw: 6f 20 61 6e 6f 74 68 65 72 20 70 61 67 65 20 6f 72 20 70 61 72 74 20 6f 66 20 74 68 65 20 61 72 74 69 63 6c 65 2e 20 54 6f 20 61 63 68 69 65 76 65 20 74 68 69 73 2c 20 31 5c 75 30 30 62 30 29 20 79 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 64 73 20 61 20 72 65 71 75 65 73 74 20 74 6f 20 61 20 73 65 72 76 65 72 20 6c 69 6e 6b 65 64 20 74 6f 20 74 68 65 20 77 65 62 73 69 74 65 2c 20 32 5c 75 30 30 62 30 29 20 74 68 65 20 73 65 72 76 65 72 20 61 6e 73 77 65 72 73 20 62 61 63 6b 20 28 5c 75 32 30 31 63 68 65 72 65 20 69 73 20 74 68 65 20 61 72 74 69 63 6c 65 20 79 6f 75 20 61 73 6b 65 64 20 66 6f 72 5c 75 32 30 31 64 29 2c 20 75 73 69 6e 67 20 74 65 63 68 6e 69 63 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 69 6e Data Ascii: o another page or part of the article. To achieve this, 1\u00b0) your browser sends a request to a server linked to the website, 2\u00b0) the server answers back (\u201chere is the article you asked for\u201d), using technical information automatically in
2024-09-04 12:22:41 UTC	16384	IN	Data Raw: 63 65 73 73 69 6e 67 31 2c 75 73 6e 61 74 2e 53 65 6e 73 69 74 69 76 65 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 31 2c 2a 2e 53 65 6e 73 69 74 69 76 65 44 61 74 61 50 72 6f 63 65 73 73 69 6e 67 4f 70 74 4f 75 74 4e 6f 74 69 63 65 22 2c 22 69 6c 31 22 3a 22 22 2c 22 69 6c 32 22 3a 22 22 2c 22 6f 64 22 3a 31 35 2c 22 63 6f 22 3a 22 22 2c 22 6c 65 67 47 44 50 52 22 3a 31 31 2c 22 6c 65 67 43 43 50 41 22 3a 30 2c 22 6c 65 67 50 49 50 45 44 41 22 3a 30 2c 22 6c 65 67 4c 47 50 44 22 3a 30 2c 22 6c 65 67 52 50 44 4c 22 3a 30 2c 22 6c 65 67 4e 44 50 52 22 3a 30 2c 22 6c 65 67 50 49 50 41 22 3a 30 2c 22 6c 65 67 52 4f 57 22 3a 30 2c 22 6c 65 67 50 4f 50 49 41 22 3a 30 2c 22 6c 65 67 50 44 50 4c 22 3a 30 2c 22 6c 65 67 4c 46 50 44 50 50 50 22 3a 30 2c 22 6c 65 67 Data Ascii: cessing1,usnat.SensitiveDataProcessing1,*.SensitiveDataProcessingOptOutNotice","il1":"","il2":"","od":15,"co":"","legGDPR":11,"legCCPA":0,"legPIPEDA":0,"legLGPD":0,"legRPDL":0,"legNDPR":0,"legPIPA":0,"legROW":0,"legPOPIA":0,"legPDPL":0,"legLFPDPPP":0,"leg
2024-09-04 12:22:41 UTC	14024	IN	Data Raw: 5c 6e 20 20 3c 6c 69 3e 3c 61 20 72 65 6c 3d 5c 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 66 6f 6c 6c 6f 77 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 2f 63 68 72 6f 6d 65 5c 2f 61 6e 73 77 65 72 5c 2f 39 35 36 34 37 3f 68 6c 3d 65 6e 26 61 6d 70 3b 70 3d 63 70 6e 5f 63 6f 6f 6b 69 65 73 5c 22 3e 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 3c 5c 2f 61 3e 3c 5c 2f 6c 69 3e 5c 72 5c 6e 20 20 3c 6c 69 3e 3c 61 20 72 65 6c 3d 5c 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 66 6f 6c 6c 6f 77 5c 22 20 74 61 72 67 65 74 3d 5c 22 5f 62 6c 61 6e 6b 5c 22 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 75 70 70 6f 72 74 2e 6d 6f 7a 69 6c 6c 61 2e 6f Data Ascii: \n <li><a rel=\"noopener nofollow\" target=\"_blank\" href=\"https:\/\/support.google.com\/chrome\/answer\/95647?hl=en&p=cpn_cookies\">Google Chrome<\/a><\/li>\r\n <li><a rel=\"noopener nofollow\" target=\"_blank\" href=\"https:\/\/support.mozilla.o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49774	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:41 UTC	1386	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FDownload_Software.cfm&o=1725452559622&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ifdnzact.com/Download_Software.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=707&ki=8849840&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230%23455%23509 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=4
2024-09-04 12:22:41 UTC	380	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:22:41 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Wed, 04 Sep 2024 12:22:41 GMT content-length: 43 content-type: image/gif connection: close
2024-09-04 12:22:41 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49775	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:41 UTC	551	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FDownload_Software.cfm&o=1725452559622&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=5
2024-09-04 12:22:42 UTC	380	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:22:42 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Wed, 04 Sep 2024 12:22:42 GMT content-length: 43 content-type: image/gif connection: close
2024-09-04 12:22:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49776	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:42 UTC	1374	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FDownload_Software.cfm&o=1725452560774&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ifdnzact.com/Download_Software.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=707&ki=8849840&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=5
2024-09-04 12:22:42 UTC	380	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:22:42 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Wed, 04 Sep 2024 12:22:42 GMT content-length: 43 content-type: image/gif connection: close
2024-09-04 12:22:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49777	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:43 UTC	551	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FDownload_Software.cfm&o=1725452560774&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=5
2024-09-04 12:22:43 UTC	380	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:22:43 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Wed, 04 Sep 2024 12:22:43 GMT content-length: 43 content-type: image/gif connection: close
2024-09-04 12:22:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49779	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:45 UTC	1925	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FJob_Listings.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%252BtlnDJDYgWvUn3IboedbPOeSEd%252F6OHC1l3mjJ49%252BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%252FuHqpKKskJY%252BL5As0rfFpeEoTHkctWlKiXqOaIb0E%252FuKcZZj%252FV46HWlnBlE2vMTEAVy%252BfVJb%252B6xQhBhPJpsebcFrjI%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26%26%26kt%3D246%26%26kbc%3D754%26ki%3D15912405%26ktd%3D0%26kld%3D1063%26kp%3D2%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1725452564326 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=2&bd=-4%231024%231280%231%230 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=5
2024-09-04 12:22:45 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:22:45 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=6; Expires=Wed, 04-Sep-2024 12:28:45 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 04 Sep 2024 12:22:45 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-09-04 12:22:45 UTC	5474	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49780	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:46 UTC	1365	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FJob_Listings.cfm&o=1725452565250&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=2&bd=-4%231024%231280%231%230 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=6
2024-09-04 12:22:46 UTC	380	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:22:46 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Wed, 04 Sep 2024 12:22:46 GMT content-length: 43 content-type: image/gif connection: close
2024-09-04 12:22:46 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49781	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:46 UTC	1166	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FJob_Listings.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%252BtlnDJDYgWvUn3IboedbPOeSEd%252F6OHC1l3mjJ49%252BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%252FuHqpKKskJY%252BL5As0rfFpeEoTHkctWlKiXqOaIb0E%252FuKcZZj%252FV46HWlnBlE2vMTEAVy%252BfVJb%252B6xQhBhPJpsebcFrjI%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26%26%26kt%3D246%26%26kbc%3D754%26ki%3D15912405%26ktd%3D0%26kld%3D1063%26kp%3D2%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1725452564326 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=6
2024-09-04 12:22:47 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:22:46 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=7; Expires=Wed, 04-Sep-2024 12:28:46 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 04 Sep 2024 12:22:46 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-09-04 12:22:47 UTC	5469	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c
2024-09-04 12:22:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49783	162.247.243.39	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:47 UTC	1151	OUT	GET /nr-spa-1.264.0.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://ifdnzact.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=2&bd=-4%231024%231280%231%230 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-04 12:22:47 UTC	550	IN	HTTP/1.1 200 OK Connection: close Content-Length: 112706 Last-Modified: Tue, 06 Aug 2024 22:33:26 GMT ETag: "d445c6ab99f8d2940df12996faeaccc0" Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 Content-Type: application/javascript Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 04 Sep 2024 12:22:47 GMT X-Served-By: cache-ewr-kewr1740021-EWR X-Cache: HIT X-Cache-Hits: 2 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-09-04 12:22:47 UTC	1378	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6e 72 2d 73 70 61 2d 31 2e 32 36 34 2e 30 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 36 34 2e 30 2e 50 52 4f 44 22 5d 3d 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 36 34 2e 30 2e 50 52 4f 44 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 37 38 5d 2c 7b 39 35 32 37 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 6e 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 73 3d 69 28 39 34 32 32 29 2c 72 3d 69 28 34 37 37 37 29 2c 6e 3d 69 28 34 36 31 38 29 2c 61 3d 69 Data Ascii: /! For license information please see nr-spa-1.264.0.min.js.LICENSE.txt /"use strict";(self["webpackChunk:NRBA-1.264.0.PROD"]=self["webpackChunk:NRBA-1.264.0.PROD"]\|\|[]).push([[478],{9527:(e,t,i)=>{i.d(t,{n:()=>c});var s=i(9422),r=i(4777),n=i(4618),a=i
2024-09-04 12:22:47 UTC	1378	IN	Data Raw: 79 3a 74 2c 2e 2e 2e 65 7d 29 2c 21 72 29 72 65 74 75 72 6e 20 76 6f 69 64 28 74 68 69 73 2e 73 74 61 72 74 65 64 26 26 74 68 69 73 2e 73 63 68 65 64 75 6c 65 48 61 72 76 65 73 74 28 29 29 3b 72 3d 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 72 29 3f 72 3a 5b 72 5d 2c 6e 2e 70 75 73 68 28 2e 2e 2e 72 29 7d 6c 65 74 20 61 3d 65 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 73 65 6e 64 58 28 65 29 3b 6e 2e 6c 65 6e 67 74 68 3f 61 3d 74 68 69 73 2e 6f 70 74 73 2e 72 61 77 3f 65 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 5f 73 65 6e 64 28 65 29 3a 65 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 73 65 6e 64 28 65 29 3a 6e 2e 70 75 73 68 28 76 6f 69 64 20 Data Ascii: y:t,...e}),!r)return void(this.started&&this.scheduleHarvest());r="[object Array]"===Object.prototype.toString.call(r)?r:[r],n.push(...r)}let a=e=>this.harvest.sendX(e);n.length?a=this.opts.raw?e=>this.harvest._send(e):e=>this.harvest.send(e):n.push(void
2024-09-04 12:22:47 UTC	1378	IN	Data Raw: 77 20 75 2e 46 4c 28 74 68 69 73 2e 73 68 61 72 65 64 43 6f 6e 74 65 78 74 29 2c 74 68 69 73 2e 5f 65 76 65 6e 74 73 3d 7b 7d 7d 73 65 6e 64 58 28 29 7b 6c 65 74 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 63 6f 6e 73 74 20 74 3d 6e 2e 6d 6a 28 7b 69 73 46 69 6e 61 6c 48 61 72 76 65 73 74 3a 65 2e 6f 70 74 73 3f 2e 75 6e 6c 6f 61 64 7d 29 2c 69 3d 7b 72 65 74 72 79 3a 21 65 2e 6f 70 74 73 3f 2e 75 6e 6c 6f 61 64 26 26 74 3d 3d 3d 6e 2e 6e 46 2c 69 73 46 69 6e 61 6c 48 61 72 76 65 73 74 3a 21 30 3d 3d 3d 65 2e 6f 70 74 73 3f 2e 75 6e 6c 6f 61 64 7d 2c 73 3d 74 68 69 73 2e 63 72 65 61 74 65 50 61 79 6c 6f 61 64 28 65 2e Data Ascii: w u.FL(this.sharedContext),this._events={}}sendX(){let e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};const t=n.mj({isFinalHarvest:e.opts?.unload}),i={retry:!e.opts?.unload&&t===n.nF,isFinalHarvest:!0===e.opts?.unload},s=this.createPayload(e.
2024-09-04 12:22:47 UTC	1378	IN	Data Raw: 65 79 29 3b 64 26 26 28 45 3d 64 29 2c 6c 26 26 28 45 3d 22 22 2e 63 6f 6e 63 61 74 28 77 2c 22 3a 2f 2f 22 29 2e 63 6f 6e 63 61 74 28 49 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 29 29 3b 63 6f 6e 73 74 20 52 3d 21 6c 26 26 66 3f 74 68 69 73 2e 62 61 73 65 51 75 65 72 79 53 74 72 69 6e 67 28 62 2c 74 29 3a 22 22 3b 6c 65 74 20 78 3d 28 30 2c 73 2e 57 4c 29 28 62 2c 79 2e 6d 61 78 42 79 74 65 73 29 3b 63 7c 7c 28 63 3d 6e 2e 6d 6a 28 7b 69 73 46 69 6e 61 6c 48 61 72 76 65 73 74 3a 61 2e 75 6e 6c 6f 61 64 7d 29 29 2c 22 22 3d 3d 3d 52 26 26 78 2e 73 74 61 72 74 73 57 69 74 68 28 22 26 22 29 26 26 28 78 3d 78 2e 73 75 62 73 74 72 69 6e 67 28 31 29 29 3b 63 6f 6e 73 74 20 41 3d 22 22 2e 63 6f 6e 63 61 74 28 45 2c 22 3f 22 29 2e 63 6f 6e 63 61 74 28 52 29 2e Data Ascii: ey);d&&(E=d),l&&(E="".concat(w,"://").concat(I,"/").concat(t));const R=!l&&f?this.baseQueryString(b,t):"";let x=(0,s.WL)(b,y.maxBytes);c\|\|(c=n.mj({isFinalHarvest:a.unload})),""===R&&x.startsWith("&")&&(x=x.substring(1));const A="".concat(E,"?").concat(R).
2024-09-04 12:22:47 UTC	1378	IN	Data Raw: 2b 28 69 2e 73 65 73 73 69 6f 6e 3f 2e 73 74 61 74 65 2e 76 61 6c 75 65 7c 7c 22 30 22 29 2c 28 30 2c 73 2e 75 52 29 28 22 72 65 66 22 2c 68 29 2c 28 30 2c 73 2e 75 52 29 28 22 70 74 69 64 22 2c 69 2e 70 74 69 64 3f 22 22 2b 69 2e 70 74 69 64 3a 22 22 29 5d 3b 72 65 74 75 72 6e 20 75 26 26 64 2e 70 75 73 68 28 28 30 2c 73 2e 75 52 29 28 22 68 72 22 2c 22 31 22 2c 65 29 29 2c 64 2e 6a 6f 69 6e 28 22 22 29 7d 63 72 65 61 74 65 50 61 79 6c 6f 61 64 28 65 2c 74 29 7b 63 6f 6e 73 74 20 69 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 2c 73 3d 7b 62 6f 64 79 3a 7b 7d 2c 71 73 3a 7b 7d 7d 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 69 29 26 26 69 2e 6c 65 6e 67 74 68 3e 30 29 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 69 2e 6c 65 6e 67 74 68 3b 65 2b Data Ascii: +(i.session?.state.value\|\|"0"),(0,s.uR)("ref",h),(0,s.uR)("ptid",i.ptid?""+i.ptid:"")];return u&&d.push((0,s.uR)("hr","1",e)),d.join("")}createPayload(e,t){const i=this._events[e],s={body:{},qs:{}};if(Array.isArray(i)&&i.length>0)for(let e=0;e<i.length;e+
2024-09-04 12:22:47 UTC	1378	IN	Data Raw: 75 72 6e 22 22 3b 76 61 72 20 61 3d 6e 65 77 20 72 2e 46 4c 28 7b 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 3a 65 7d 29 3b 73 3d 53 74 72 69 6e 67 28 73 29 2c 61 2e 73 68 6f 75 6c 64 4f 62 66 75 73 63 61 74 65 28 29 26 26 28 73 3d 61 2e 6f 62 66 75 73 63 61 74 65 53 74 72 69 6e 67 28 73 29 29 3b 72 65 74 75 72 6e 20 6e 2e 63 61 6c 6c 28 74 2c 73 29 3f 63 28 74 5b 73 5d 2c 21 30 29 3a 28 74 5b 73 5d 3d 69 2b 2b 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 27 22 2b 65 2e 72 65 70 6c 61 63 65 28 64 2c 22 5c 5c 24 31 22 29 7d 28 73 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 76 61 72 20 69 3d 5b 5d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 65 7c 7c 7b 7d 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b Data Ascii: urn"";var a=new r.FL({agentIdentifier:e});s=String(s),a.shouldObfuscate()&&(s=a.obfuscateString(s));return n.call(t,s)?c(t[s],!0):(t[s]=i++,function(e){return"'"+e.replace(d,"\\$1")}(s))}}function u(e,t){var i=[];return Object.entries(e\|\|{}).forEach((e=>{
2024-09-04 12:22:47 UTC	1378	IN	Data Raw: 3d 65 2e 74 79 70 65 29 3f 69 3a 7b 6e 61 76 69 67 61 74 65 3a 76 6f 69 64 20 30 2c 72 65 6c 6f 61 64 3a 31 2c 62 61 63 6b 5f 66 6f 72 77 61 72 64 3a 32 2c 70 72 65 72 65 6e 64 65 72 3a 33 7d 5b 69 5d 2c 74 2c 22 74 79 22 29 2c 67 28 65 2e 72 65 64 69 72 65 63 74 43 6f 75 6e 74 2c 74 2c 22 72 63 22 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 2c 74 2c 69 2c 73 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 3e 30 29 7b 69 66 28 73 29 7b 63 6f 6e 73 74 20 69 3d 74 3f 2e 6f 66 3e 30 3f 74 2e 6f 66 3a 30 3b 65 3d 4d 61 74 68 2e 6d 61 78 28 65 2d 69 2c 30 29 7d 65 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 65 29 2c 74 5b 69 5d 3d 65 2c 66 2e 70 75 73 68 28 65 29 7d 65 6c 73 65 20 66 2e 70 75 73 68 28 76 6f 69 64 20 30 29 7d 7d 2c 32 Data Ascii: =e.type)?i:{navigate:void 0,reload:1,back_forward:2,prerender:3}[i],t,"ty"),g(e.redirectCount,t,"rc"),t}function g(e,t,i,s){if("number"==typeof e&&e>0){if(s){const i=t?.of>0?t.of:0;e=Math.max(e-i,0)}e=Math.round(e),t[i]=e,f.push(e)}else f.push(void 0)}},2
2024-09-04 12:22:47 UTC	1378	IN	Data Raw: 73 28 69 29 2e 69 6e 63 6c 75 64 65 73 28 65 29 3f 22 22 3a 74 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 22 26 22 2b 65 2b 22 3d 22 2b 63 28 74 29 3a 22 22 7d 7d 2c 34 32 38 34 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 70 3a 28 29 3d 3e 72 7d 29 3b 76 61 72 20 73 3d 69 28 36 31 35 34 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 22 66 69 6c 65 3a 22 3d 3d 3d 73 2e 67 6d 3f 2e 6c 6f 63 61 74 69 6f 6e 3f 2e 70 72 6f 74 6f 63 6f 6c 29 7d 7d 2c 34 39 30 33 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 46 4c 3a 28 29 3d 3e 63 2c 51 34 3a 28 29 3d 3e 68 2c 57 48 3a 28 29 3d 3e 75 7d 29 3b 76 61 72 20 73 3d 69 28 32 39 38 33 29 2c 72 3d 69 28 34 37 37 37 29 2c 6e 3d 69 28 34 32 Data Ascii: s(i).includes(e)?"":t&&"string"==typeof t?"&"+e+"="+c(t):""}},4284:(e,t,i)=>{i.d(t,{p:()=>r});var s=i(6154);function r(){return Boolean("file:"===s.gm?.location?.protocol)}},4903:(e,t,i)=>{i.d(t,{FL:()=>c,Q4:()=>h,WH:()=>u});var s=i(2983),r=i(4777),n=i(42
2024-09-04 12:22:47 UTC	1378	IN	Data Raw: 65 3d 3e 7b 61 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 65 2e 6b 65 79 2c 65 2e 76 61 6c 75 65 29 7d 29 29 2c 61 2e 73 65 6e 64 28 69 29 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 6c 65 74 7b 75 72 6c 3a 74 2c 62 6f 64 79 3a 69 7d 3d 65 3b 74 72 79 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 2e 62 69 6e 64 28 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 29 28 74 2c 69 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 7d 2c 31 30 38 33 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 77 3a 28 29 3d 3e 73 7d 29 3b 63 6f 6e 73 74 20 73 3d 7b 46 49 52 53 54 5f 50 41 49 4e 54 3a 22 66 70 22 2c 46 49 52 53 54 5f 43 4f 4e 54 45 4e 54 46 55 4c 5f 50 41 49 4e 54 Data Ascii: e=>{a.setRequestHeader(e.key,e.value)})),a.send(i),a}function a(e){let{url:t,body:i}=e;try{return window.navigator.sendBeacon.bind(window.navigator)(t,i)}catch(e){return!1}}},1083:(e,t,i)=>{i.d(t,{w:()=>s});const s={FIRST_PAINT:"fp",FIRST_CONTENTFUL_PAINT
2024-09-04 12:22:47 UTC	1378	IN	Data Raw: 72 20 73 3d 69 28 36 31 35 34 29 2c 72 3d 69 28 31 30 38 33 29 2c 6e 3d 69 28 36 37 37 33 29 2c 61 3d 69 28 37 32 32 36 29 3b 63 6f 6e 73 74 20 6f 3d 6e 65 77 20 6e 2e 78 28 72 2e 77 2e 54 49 4d 45 5f 54 4f 5f 46 49 52 53 54 5f 42 59 54 45 29 3b 69 66 28 73 2e 52 49 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 50 65 72 66 6f 72 6d 61 6e 63 65 4e 61 76 69 67 61 74 69 6f 6e 54 69 6d 69 6e 67 26 26 21 73 2e 4f 46 26 26 77 69 6e 64 6f 77 3d 3d 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 29 28 30 2c 61 2e 43 6b 29 28 28 65 3d 3e 7b 6c 65 74 7b 76 61 6c 75 65 3a 74 2c 61 74 74 72 69 62 75 74 69 6f 6e 3a 69 7d 3d 65 3b 6f 2e 69 73 56 61 6c 69 64 7c 7c 6f 2e 75 70 64 61 74 65 28 7b 76 61 6c 75 65 3a 74 2c 61 74 74 72 73 3a 7b 6e 61 76 69 67 61 Data Ascii: r s=i(6154),r=i(1083),n=i(6773),a=i(7226);const o=new n.x(r.w.TIME_TO_FIRST_BYTE);if(s.RI&&"undefined"!=typeof PerformanceNavigationTiming&&!s.OF&&window===window.parent)(0,a.Ck)((e=>{let{value:t,attribution:i}=e;o.isValid\|\|o.update({value:t,attrs:{naviga

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49782	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:47 UTC	546	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FJob_Listings.cfm&o=1725452565250&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=6
2024-09-04 12:22:47 UTC	380	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:22:47 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Wed, 04 Sep 2024 12:22:47 GMT content-length: 43 content-type: image/gif connection: close
2024-09-04 12:22:47 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49784	162.247.243.29	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:48 UTC	1699	OUT	POST /1/6bc175e1c8?a=1588455398&v=1.264.0&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=3444&ck=0&s=9efd9e17cf87cb36&ref=http://ifdnzact.com/Job_Listings.cfm&ptid=3c42b75b1b7c8603&af=err,spa,xhr,stn,ins&ap=309&be=457&fe=1916&dc=460&at=QhtZR1lPS08%3D&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1725452563698,%22n%22:0,%22f%22:3,%22dn%22:3,%22dne%22:3,%22c%22:3,%22ce%22:3,%22rq%22:47,%22rp%22:457,%22rpe%22:833,%22di%22:916,%22ds%22:916,%22de%22:917,%22dc%22:2369,%22l%22:2369,%22le%22:2373%7D,%22navigation%22:%7B%7D%7D&fp=934&fcp=934 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: http://ifdnzact.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=2&bd=-4%231024%231280%231%230 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-04 12:22:48 UTC	434	IN	HTTP/1.1 200 Connection: close Content-Length: 150 date: Wed, 04 Sep 2024 12:22:48 GMT content-type: text/plain cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: http://ifdnzact.com access-control-expose-headers: Date timing-allow-origin: http://ifdnzact.com x-served-by: cache-ewr-kewr1740043-EWR
2024-09-04 12:22:48 UTC	150	IN	Data Raw: 7b 22 73 74 6e 22 3a 31 2c 22 65 72 72 22 3a 31 2c 22 69 6e 73 22 3a 31 2c 22 73 70 61 22 3a 31 2c 22 73 72 22 3a 30 2c 22 73 72 73 22 3a 30 2c 22 73 74 22 3a 31 2c 22 73 74 73 22 3a 30 2c 22 61 70 70 22 3a 7b 22 61 67 65 6e 74 73 22 3a 5b 7b 22 65 6e 74 69 74 79 47 75 69 64 22 3a 22 4d 7a 55 34 4d 6a 67 32 66 45 4a 53 54 31 64 54 52 56 4a 38 51 56 42 51 54 45 6c 44 51 56 52 4a 54 30 35 38 4d 54 55 34 4f 44 63 35 4d 44 49 77 4e 41 22 7d 5d 7d 7d Data Ascii: {"stn":1,"err":1,"ins":1,"spa":1,"sr":0,"srs":0,"st":1,"sts":0,"app":{"agents":[{"entityGuid":"MzU4Mjg2fEJST1dTRVJ8QVBQTElDQVRJT058MTU4ODc5MDIwNA"}]}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49785	162.247.243.39	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:48 UTC	366	OUT	GET /nr-spa-1.264.0.min.js HTTP/1.1 Host: js-agent.newrelic.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-04 12:22:48 UTC	550	IN	HTTP/1.1 200 OK Connection: close Content-Length: 112706 Last-Modified: Tue, 06 Aug 2024 22:33:26 GMT ETag: "d445c6ab99f8d2940df12996faeaccc0" Cache-Control: public, max-age=31536000, stale-while-revalidate=86400, stale-if-error=86400 Content-Type: application/javascript Access-Control-Allow-Origin: * Accept-Ranges: bytes Date: Wed, 04 Sep 2024 12:22:48 GMT X-Served-By: cache-ewr-kewr1740050-EWR X-Cache: HIT X-Cache-Hits: 0 Vary: Accept-Encoding Cross-Origin-Resource-Policy: cross-origin Strict-Transport-Security: max-age=300
2024-09-04 12:22:48 UTC	1378	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6e 72 2d 73 70 61 2d 31 2e 32 36 34 2e 30 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 36 34 2e 30 2e 50 52 4f 44 22 5d 3d 73 65 6c 66 5b 22 77 65 62 70 61 63 6b 43 68 75 6e 6b 3a 4e 52 42 41 2d 31 2e 32 36 34 2e 30 2e 50 52 4f 44 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 37 38 5d 2c 7b 39 35 32 37 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 6e 3a 28 29 3d 3e 63 7d 29 3b 76 61 72 20 73 3d 69 28 39 34 32 32 29 2c 72 3d 69 28 34 37 37 37 29 2c 6e 3d 69 28 34 36 31 38 29 2c 61 3d 69 Data Ascii: /! For license information please see nr-spa-1.264.0.min.js.LICENSE.txt /"use strict";(self["webpackChunk:NRBA-1.264.0.PROD"]=self["webpackChunk:NRBA-1.264.0.PROD"]\|\|[]).push([[478],{9527:(e,t,i)=>{i.d(t,{n:()=>c});var s=i(9422),r=i(4777),n=i(4618),a=i
2024-09-04 12:22:48 UTC	1378	IN	Data Raw: 79 3a 74 2c 2e 2e 2e 65 7d 29 2c 21 72 29 72 65 74 75 72 6e 20 76 6f 69 64 28 74 68 69 73 2e 73 74 61 72 74 65 64 26 26 74 68 69 73 2e 73 63 68 65 64 75 6c 65 48 61 72 76 65 73 74 28 29 29 3b 72 3d 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 72 29 3f 72 3a 5b 72 5d 2c 6e 2e 70 75 73 68 28 2e 2e 2e 72 29 7d 6c 65 74 20 61 3d 65 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 73 65 6e 64 58 28 65 29 3b 6e 2e 6c 65 6e 67 74 68 3f 61 3d 74 68 69 73 2e 6f 70 74 73 2e 72 61 77 3f 65 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 5f 73 65 6e 64 28 65 29 3a 65 3d 3e 74 68 69 73 2e 68 61 72 76 65 73 74 2e 73 65 6e 64 28 65 29 3a 6e 2e 70 75 73 68 28 76 6f 69 64 20 Data Ascii: y:t,...e}),!r)return void(this.started&&this.scheduleHarvest());r="[object Array]"===Object.prototype.toString.call(r)?r:[r],n.push(...r)}let a=e=>this.harvest.sendX(e);n.length?a=this.opts.raw?e=>this.harvest._send(e):e=>this.harvest.send(e):n.push(void
2024-09-04 12:22:48 UTC	1378	IN	Data Raw: 77 20 75 2e 46 4c 28 74 68 69 73 2e 73 68 61 72 65 64 43 6f 6e 74 65 78 74 29 2c 74 68 69 73 2e 5f 65 76 65 6e 74 73 3d 7b 7d 7d 73 65 6e 64 58 28 29 7b 6c 65 74 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 7d 3b 63 6f 6e 73 74 20 74 3d 6e 2e 6d 6a 28 7b 69 73 46 69 6e 61 6c 48 61 72 76 65 73 74 3a 65 2e 6f 70 74 73 3f 2e 75 6e 6c 6f 61 64 7d 29 2c 69 3d 7b 72 65 74 72 79 3a 21 65 2e 6f 70 74 73 3f 2e 75 6e 6c 6f 61 64 26 26 74 3d 3d 3d 6e 2e 6e 46 2c 69 73 46 69 6e 61 6c 48 61 72 76 65 73 74 3a 21 30 3d 3d 3d 65 2e 6f 70 74 73 3f 2e 75 6e 6c 6f 61 64 7d 2c 73 3d 74 68 69 73 2e 63 72 65 61 74 65 50 61 79 6c 6f 61 64 28 65 2e Data Ascii: w u.FL(this.sharedContext),this._events={}}sendX(){let e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{};const t=n.mj({isFinalHarvest:e.opts?.unload}),i={retry:!e.opts?.unload&&t===n.nF,isFinalHarvest:!0===e.opts?.unload},s=this.createPayload(e.
2024-09-04 12:22:48 UTC	1378	IN	Data Raw: 65 79 29 3b 64 26 26 28 45 3d 64 29 2c 6c 26 26 28 45 3d 22 22 2e 63 6f 6e 63 61 74 28 77 2c 22 3a 2f 2f 22 29 2e 63 6f 6e 63 61 74 28 49 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 29 29 3b 63 6f 6e 73 74 20 52 3d 21 6c 26 26 66 3f 74 68 69 73 2e 62 61 73 65 51 75 65 72 79 53 74 72 69 6e 67 28 62 2c 74 29 3a 22 22 3b 6c 65 74 20 78 3d 28 30 2c 73 2e 57 4c 29 28 62 2c 79 2e 6d 61 78 42 79 74 65 73 29 3b 63 7c 7c 28 63 3d 6e 2e 6d 6a 28 7b 69 73 46 69 6e 61 6c 48 61 72 76 65 73 74 3a 61 2e 75 6e 6c 6f 61 64 7d 29 29 2c 22 22 3d 3d 3d 52 26 26 78 2e 73 74 61 72 74 73 57 69 74 68 28 22 26 22 29 26 26 28 78 3d 78 2e 73 75 62 73 74 72 69 6e 67 28 31 29 29 3b 63 6f 6e 73 74 20 41 3d 22 22 2e 63 6f 6e 63 61 74 28 45 2c 22 3f 22 29 2e 63 6f 6e 63 61 74 28 52 29 2e Data Ascii: ey);d&&(E=d),l&&(E="".concat(w,"://").concat(I,"/").concat(t));const R=!l&&f?this.baseQueryString(b,t):"";let x=(0,s.WL)(b,y.maxBytes);c\|\|(c=n.mj({isFinalHarvest:a.unload})),""===R&&x.startsWith("&")&&(x=x.substring(1));const A="".concat(E,"?").concat(R).
2024-09-04 12:22:48 UTC	1378	IN	Data Raw: 2b 28 69 2e 73 65 73 73 69 6f 6e 3f 2e 73 74 61 74 65 2e 76 61 6c 75 65 7c 7c 22 30 22 29 2c 28 30 2c 73 2e 75 52 29 28 22 72 65 66 22 2c 68 29 2c 28 30 2c 73 2e 75 52 29 28 22 70 74 69 64 22 2c 69 2e 70 74 69 64 3f 22 22 2b 69 2e 70 74 69 64 3a 22 22 29 5d 3b 72 65 74 75 72 6e 20 75 26 26 64 2e 70 75 73 68 28 28 30 2c 73 2e 75 52 29 28 22 68 72 22 2c 22 31 22 2c 65 29 29 2c 64 2e 6a 6f 69 6e 28 22 22 29 7d 63 72 65 61 74 65 50 61 79 6c 6f 61 64 28 65 2c 74 29 7b 63 6f 6e 73 74 20 69 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 2c 73 3d 7b 62 6f 64 79 3a 7b 7d 2c 71 73 3a 7b 7d 7d 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 69 29 26 26 69 2e 6c 65 6e 67 74 68 3e 30 29 66 6f 72 28 6c 65 74 20 65 3d 30 3b 65 3c 69 2e 6c 65 6e 67 74 68 3b 65 2b Data Ascii: +(i.session?.state.value\|\|"0"),(0,s.uR)("ref",h),(0,s.uR)("ptid",i.ptid?""+i.ptid:"")];return u&&d.push((0,s.uR)("hr","1",e)),d.join("")}createPayload(e,t){const i=this._events[e],s={body:{},qs:{}};if(Array.isArray(i)&&i.length>0)for(let e=0;e<i.length;e+
2024-09-04 12:22:48 UTC	1378	IN	Data Raw: 75 72 6e 22 22 3b 76 61 72 20 61 3d 6e 65 77 20 72 2e 46 4c 28 7b 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 3a 65 7d 29 3b 73 3d 53 74 72 69 6e 67 28 73 29 2c 61 2e 73 68 6f 75 6c 64 4f 62 66 75 73 63 61 74 65 28 29 26 26 28 73 3d 61 2e 6f 62 66 75 73 63 61 74 65 53 74 72 69 6e 67 28 73 29 29 3b 72 65 74 75 72 6e 20 6e 2e 63 61 6c 6c 28 74 2c 73 29 3f 63 28 74 5b 73 5d 2c 21 30 29 3a 28 74 5b 73 5d 3d 69 2b 2b 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 27 22 2b 65 2e 72 65 70 6c 61 63 65 28 64 2c 22 5c 5c 24 31 22 29 7d 28 73 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 74 29 7b 76 61 72 20 69 3d 5b 5d 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 65 7c 7c 7b 7d 29 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b Data Ascii: urn"";var a=new r.FL({agentIdentifier:e});s=String(s),a.shouldObfuscate()&&(s=a.obfuscateString(s));return n.call(t,s)?c(t[s],!0):(t[s]=i++,function(e){return"'"+e.replace(d,"\\$1")}(s))}}function u(e,t){var i=[];return Object.entries(e\|\|{}).forEach((e=>{
2024-09-04 12:22:48 UTC	1378	IN	Data Raw: 3d 65 2e 74 79 70 65 29 3f 69 3a 7b 6e 61 76 69 67 61 74 65 3a 76 6f 69 64 20 30 2c 72 65 6c 6f 61 64 3a 31 2c 62 61 63 6b 5f 66 6f 72 77 61 72 64 3a 32 2c 70 72 65 72 65 6e 64 65 72 3a 33 7d 5b 69 5d 2c 74 2c 22 74 79 22 29 2c 67 28 65 2e 72 65 64 69 72 65 63 74 43 6f 75 6e 74 2c 74 2c 22 72 63 22 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 67 28 65 2c 74 2c 69 2c 73 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 3e 30 29 7b 69 66 28 73 29 7b 63 6f 6e 73 74 20 69 3d 74 3f 2e 6f 66 3e 30 3f 74 2e 6f 66 3a 30 3b 65 3d 4d 61 74 68 2e 6d 61 78 28 65 2d 69 2c 30 29 7d 65 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 65 29 2c 74 5b 69 5d 3d 65 2c 66 2e 70 75 73 68 28 65 29 7d 65 6c 73 65 20 66 2e 70 75 73 68 28 76 6f 69 64 20 30 29 7d 7d 2c 32 Data Ascii: =e.type)?i:{navigate:void 0,reload:1,back_forward:2,prerender:3}[i],t,"ty"),g(e.redirectCount,t,"rc"),t}function g(e,t,i,s){if("number"==typeof e&&e>0){if(s){const i=t?.of>0?t.of:0;e=Math.max(e-i,0)}e=Math.round(e),t[i]=e,f.push(e)}else f.push(void 0)}},2
2024-09-04 12:22:48 UTC	1378	IN	Data Raw: 73 28 69 29 2e 69 6e 63 6c 75 64 65 73 28 65 29 3f 22 22 3a 74 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 3f 22 26 22 2b 65 2b 22 3d 22 2b 63 28 74 29 3a 22 22 7d 7d 2c 34 32 38 34 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 70 3a 28 29 3d 3e 72 7d 29 3b 76 61 72 20 73 3d 69 28 36 31 35 34 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 22 66 69 6c 65 3a 22 3d 3d 3d 73 2e 67 6d 3f 2e 6c 6f 63 61 74 69 6f 6e 3f 2e 70 72 6f 74 6f 63 6f 6c 29 7d 7d 2c 34 39 30 33 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 46 4c 3a 28 29 3d 3e 63 2c 51 34 3a 28 29 3d 3e 68 2c 57 48 3a 28 29 3d 3e 75 7d 29 3b 76 61 72 20 73 3d 69 28 32 39 38 33 29 2c 72 3d 69 28 34 37 37 37 29 2c 6e 3d 69 28 34 32 Data Ascii: s(i).includes(e)?"":t&&"string"==typeof t?"&"+e+"="+c(t):""}},4284:(e,t,i)=>{i.d(t,{p:()=>r});var s=i(6154);function r(){return Boolean("file:"===s.gm?.location?.protocol)}},4903:(e,t,i)=>{i.d(t,{FL:()=>c,Q4:()=>h,WH:()=>u});var s=i(2983),r=i(4777),n=i(42
2024-09-04 12:22:48 UTC	1378	IN	Data Raw: 65 3d 3e 7b 61 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 65 2e 6b 65 79 2c 65 2e 76 61 6c 75 65 29 7d 29 29 2c 61 2e 73 65 6e 64 28 69 29 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 6c 65 74 7b 75 72 6c 3a 74 2c 62 6f 64 79 3a 69 7d 3d 65 3b 74 72 79 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 2e 62 69 6e 64 28 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 29 28 74 2c 69 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 7d 2c 31 30 38 33 3a 28 65 2c 74 2c 69 29 3d 3e 7b 69 2e 64 28 74 2c 7b 77 3a 28 29 3d 3e 73 7d 29 3b 63 6f 6e 73 74 20 73 3d 7b 46 49 52 53 54 5f 50 41 49 4e 54 3a 22 66 70 22 2c 46 49 52 53 54 5f 43 4f 4e 54 45 4e 54 46 55 4c 5f 50 41 49 4e 54 Data Ascii: e=>{a.setRequestHeader(e.key,e.value)})),a.send(i),a}function a(e){let{url:t,body:i}=e;try{return window.navigator.sendBeacon.bind(window.navigator)(t,i)}catch(e){return!1}}},1083:(e,t,i)=>{i.d(t,{w:()=>s});const s={FIRST_PAINT:"fp",FIRST_CONTENTFUL_PAINT
2024-09-04 12:22:48 UTC	1378	IN	Data Raw: 72 20 73 3d 69 28 36 31 35 34 29 2c 72 3d 69 28 31 30 38 33 29 2c 6e 3d 69 28 36 37 37 33 29 2c 61 3d 69 28 37 32 32 36 29 3b 63 6f 6e 73 74 20 6f 3d 6e 65 77 20 6e 2e 78 28 72 2e 77 2e 54 49 4d 45 5f 54 4f 5f 46 49 52 53 54 5f 42 59 54 45 29 3b 69 66 28 73 2e 52 49 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 50 65 72 66 6f 72 6d 61 6e 63 65 4e 61 76 69 67 61 74 69 6f 6e 54 69 6d 69 6e 67 26 26 21 73 2e 4f 46 26 26 77 69 6e 64 6f 77 3d 3d 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 29 28 30 2c 61 2e 43 6b 29 28 28 65 3d 3e 7b 6c 65 74 7b 76 61 6c 75 65 3a 74 2c 61 74 74 72 69 62 75 74 69 6f 6e 3a 69 7d 3d 65 3b 6f 2e 69 73 56 61 6c 69 64 7c 7c 6f 2e 75 70 64 61 74 65 28 7b 76 61 6c 75 65 3a 74 2c 61 74 74 72 73 3a 7b 6e 61 76 69 67 61 Data Ascii: r s=i(6154),r=i(1083),n=i(6773),a=i(7226);const o=new n.x(r.w.TIME_TO_FIRST_BYTE);if(s.RI&&"undefined"!=typeof PerformanceNavigationTiming&&!s.OF&&window===window.parent)(0,a.Ck)((e=>{let{value:t,attribution:i}=e;o.isValid\|\|o.update({value:t,attrs:{naviga

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49786	162.247.243.29	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:49 UTC	869	OUT	GET /1/6bc175e1c8?a=1588455398&v=1.264.0&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=3444&ck=0&s=9efd9e17cf87cb36&ref=http://ifdnzact.com/Job_Listings.cfm&ptid=3c42b75b1b7c8603&af=err,spa,xhr,stn,ins&ap=309&be=457&fe=1916&dc=460&at=QhtZR1lPS08%3D&fsh=1&perf=%7B%22timing%22:%7B%22of%22:1725452563698,%22n%22:0,%22f%22:3,%22dn%22:3,%22dne%22:3,%22c%22:3,%22ce%22:3,%22rq%22:47,%22rp%22:457,%22rpe%22:833,%22di%22:916,%22ds%22:916,%22de%22:917,%22dc%22:2369,%22l%22:2369,%22le%22:2373%7D,%22navigation%22:%7B%7D%7D&fp=934&fcp=934 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-04 12:22:49 UTC	396	IN	HTTP/1.1 200 Connection: close Content-Length: 79 date: Wed, 04 Sep 2024 12:22:49 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: * access-control-expose-headers: Date timing-allow-origin: * x-served-by: cache-nyc-kteb1890068-NYC
2024-09-04 12:22:49 UTC	79	IN	Data Raw: 5b 37 31 2c 20 37 33 2c 20 37 30 2c 20 35 36 2c 20 35 37 2c 20 39 37 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 34 34 2c 20 30 2c 20 30 2c 20 30 2c 20 30 2c 20 31 2c 20 30 2c 20 31 2c 20 30 2c 20 30 2c 20 32 5d Data Ascii: [71, 73, 70, 56, 57, 97, 1, 0, 1, 0, 0, 0, 0, 44, 0, 0, 0, 0, 1, 0, 1, 0, 0, 2]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49787	162.247.243.29	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:49 UTC	1357	OUT	POST /events/1/6bc175e1c8?a=1588455398&v=1.264.0&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=4263&ck=0&s=9efd9e17cf87cb36&ref=http://ifdnzact.com/Job_Listings.cfm&ptid=3c42b75b1b7c8603 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 187 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: http://ifdnzact.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=2&bd=-4%231024%231280%231%230 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-04 12:22:49 UTC	187	OUT	Data Raw: 62 65 6c 2e 37 3b 31 2c 31 2c 2c 33 35 65 2c 32 6e 71 2c 32 6c 2c 27 69 6e 69 74 69 61 6c 50 61 67 65 4c 6f 61 64 2c 27 68 74 74 70 3a 2f 2f 69 66 64 6e 7a 61 63 74 2e 63 6f 6d 2f 4a 6f 62 5f 4c 69 73 74 69 6e 67 73 2e 63 66 6d 2c 31 2c 31 2c 2c 2c 2c 38 6c 2c 21 21 27 65 37 61 34 30 63 30 61 2d 33 61 38 37 2d 34 66 32 37 2d 62 36 34 33 2d 63 30 63 35 35 39 65 63 63 33 31 31 2c 27 31 2c 70 79 2c 70 79 3b 61 2c 27 51 68 74 5a 52 31 6c 50 53 30 38 3d 3b 62 2c 21 21 21 21 33 2c 2c 2c 2c 21 2c 31 38 2c 62 65 2c 61 67 2c 21 32 62 2c 2c 31 2c 31 34 63 2c 2c 34 Data Ascii: bel.7;1,1,,35e,2nq,2l,'initialPageLoad,'http://ifdnzact.com/Job_Listings.cfm,1,1,,,,8l,!!'e7a40c0a-3a87-4f27-b643-c0c559ecc311,'1,py,py;a,'QhtZR1lPS08=;b,!!!!3,,,,!,18,be,ag,!2b,,1,14c,,4
2024-09-04 12:22:49 UTC	309	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 04 Sep 2024 12:22:49 GMT content-type: image/gif access-control-allow-origin: http://ifdnzact.com access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-ewr-kewr1740020-EWR
2024-09-04 12:22:49 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49788	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:49 UTC	1929	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FPublic_Records.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%252BtlnDJDYgWvUn3IboedbPOeSEd%252F6OHC1l3mjJ49%252BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%252FuHqpKKskJY%252BL5As0rfFpeEoTHkctWlKiXqOaIb0E%252FuKcZZj%252FV46HWlnBlE2vMTEAVy%252BfVJb%252B6xQhBhPJpsebcFrjI%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26%26%26kt%3D246%26%26kbc%3D754%26ki%3D23459819%26ktd%3D0%26kld%3D1063%26kp%3D1%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1725452568207 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/Public_Records.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=754&ki=23459819&ktd=0&kld=1063&kp=1&bd=-4%231024%231280%231%230 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=7
2024-09-04 12:22:49 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:22:49 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=8; Expires=Wed, 04-Sep-2024 12:28:49 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 04 Sep 2024 12:22:49 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-09-04 12:22:49 UTC	5469	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c
2024-09-04 12:22:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49789	162.247.243.29	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:49 UTC	525	OUT	GET /events/1/6bc175e1c8?a=1588455398&v=1.264.0&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=4263&ck=0&s=9efd9e17cf87cb36&ref=http://ifdnzact.com/Job_Listings.cfm&ptid=3c42b75b1b7c8603 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-04 12:22:50 UTC	291	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 04 Sep 2024 12:22:49 GMT content-type: image/gif access-control-allow-origin: * access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true x-served-by: cache-ewr-kewr1740052-EWR
2024-09-04 12:22:50 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49790	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:50 UTC	1168	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FPublic_Records.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%252BtlnDJDYgWvUn3IboedbPOeSEd%252F6OHC1l3mjJ49%252BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%252FuHqpKKskJY%252BL5As0rfFpeEoTHkctWlKiXqOaIb0E%252FuKcZZj%252FV46HWlnBlE2vMTEAVy%252BfVJb%252B6xQhBhPJpsebcFrjI%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26%26%26kt%3D246%26%26kbc%3D754%26ki%3D23459819%26ktd%3D0%26kld%3D1063%26kp%3D1%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1725452568207 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=8
2024-09-04 12:22:50 UTC	503	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:22:50 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=9; Expires=Wed, 04-Sep-2024 12:28:50 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 04 Sep 2024 12:22:50 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-09-04 12:22:50 UTC	5469	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c
2024-09-04 12:22:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49791	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:50 UTC	1369	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FPublic_Records.cfm&o=1725452569084&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ifdnzact.com/Public_Records.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=754&ki=23459819&ktd=0&kld=1063&kp=1&bd=-4%231024%231280%231%230 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=8
2024-09-04 12:22:50 UTC	380	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:22:50 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Wed, 04 Sep 2024 12:22:50 GMT content-length: 43 content-type: image/gif connection: close
2024-09-04 12:22:50 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49792	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:51 UTC	548	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FPublic_Records.cfm&o=1725452569084&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=9
2024-09-04 12:22:51 UTC	380	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:22:51 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Wed, 04 Sep 2024 12:22:51 GMT content-length: 43 content-type: image/gif connection: close
2024-09-04 12:22:51 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49795	162.247.243.29	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:53 UTC	1374	OUT	POST /events/1/6bc175e1c8?a=1588455398&v=1.264.0&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=8693&ck=0&s=9efd9e17cf87cb36&ref=http://ifdnzact.com/Job_Listings.cfm&ptid=3c42b75b1b7c8603 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 858 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: http://ifdnzact.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=2&bd=-4%231024%231280%231%230 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-04 12:22:53 UTC	858	OUT	Data Raw: 62 65 6c 2e 36 3b 65 2c 27 66 70 2c 70 79 2c 34 3b 35 2c 27 6e 65 74 2d 65 74 79 70 65 2c 27 33 67 3b 36 2c 27 6e 65 74 2d 72 74 74 2c 35 30 30 2e 3b 36 2c 27 6e 65 74 2d 64 6c 69 6e 6b 2c 31 2e 35 35 3b 36 2c 27 63 6c 73 2c 30 2e 30 31 30 38 30 37 31 33 35 30 39 37 32 34 37 31 30 35 3b 65 2c 27 66 63 70 2c 70 79 2c 37 3b 36 2c 27 74 69 6d 65 54 6f 46 69 72 73 74 42 79 74 65 2c 34 35 37 2e 34 30 30 30 30 30 30 30 30 30 32 33 33 3b 36 2c 27 66 69 72 73 74 42 79 74 65 54 6f 46 43 50 2c 34 37 37 2e 3b 35 2c 27 6c 6f 61 64 53 74 61 74 65 2c 27 64 6f 6d 2d 63 6f 6e 74 65 6e 74 2d 6c 6f 61 64 65 64 3b 35 2c 31 2c 32 3b 36 2c 33 2c 35 30 30 2e 3b 36 2c 34 2c 31 2e 35 35 3b 36 2c 35 2c 30 2e 30 31 30 38 30 37 31 33 35 30 39 37 32 34 37 31 30 35 3b 65 2c 27 6c 63 Data Ascii: bel.6;e,'fp,py,4;5,'net-etype,'3g;6,'net-rtt,500.;6,'net-dlink,1.55;6,'cls,0.010807135097247105;e,'fcp,py,7;6,'timeToFirstByte,457.4000000000233;6,'firstByteToFCP,477.;5,'loadState,'dom-content-loaded;5,1,2;6,3,500.;6,4,1.55;6,5,0.010807135097247105;e,'lc
2024-09-04 12:22:53 UTC	353	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 04 Sep 2024 12:22:53 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: http://ifdnzact.com x-served-by: cache-ewr-kewr1740030-EWR
2024-09-04 12:22:53 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49796	162.247.243.29	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:53 UTC	1376	OUT	POST /jserrors/1/6bc175e1c8?a=1588455398&v=1.264.0&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=8696&ck=0&s=9efd9e17cf87cb36&ref=http://ifdnzact.com/Job_Listings.cfm&ptid=3c42b75b1b7c8603 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 722 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: http://ifdnzact.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=2&bd=-4%231024%231280%231%230 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-04 12:22:53 UTC	722	OUT	Data Raw: 7b 22 73 6d 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 44 69 73 74 4d 65 74 68 6f 64 2f 43 44 4e 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 52 75 6e 74 69 6d 65 2f 42 72 6f 77 73 65 72 2f 44 65 74 65 63 74 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 63 22 3a 31 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 2f 56 69 64 65 6f 45 6c 65 6d 65 6e 74 2f 41 64 64 65 64 22 7d 2c 22 73 74 61 74 73 22 3a 7b 22 74 22 3a 30 7d 7d 2c 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6e 61 6d 65 22 3a 22 41 6a 61 78 2f 45 76 65 6e 74 73 2f 45 78 63 6c 75 64 65 64 2f 41 67 Data Ascii: {"sm":[{"params":{"name":"Generic/DistMethod/CDN/Detected"},"stats":{"c":1}},{"params":{"name":"Generic/Runtime/Browser/Detected"},"stats":{"c":1}},{"params":{"name":"Generic/VideoElement/Added"},"stats":{"t":0}},{"params":{"name":"Ajax/Events/Excluded/Ag
2024-09-04 12:22:53 UTC	353	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 04 Sep 2024 12:22:53 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: http://ifdnzact.com x-served-by: cache-ewr-kewr1740061-EWR
2024-09-04 12:22:53 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49797	162.247.243.29	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:53 UTC	1376	OUT	POST /jserrors/1/6bc175e1c8?a=1588455398&v=1.264.0&to=blxaMRFVWEFSUENfWVcWbRcKG19cV1ZPGEZRSQ%3D%3D&rst=8699&ck=0&s=9efd9e17cf87cb36&ref=http://ifdnzact.com/Job_Listings.cfm&ptid=3c42b75b1b7c8603 HTTP/1.1 Host: bam.nr-data.net Connection: keep-alive Content-Length: 546 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: http://ifdnzact.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=2&bd=-4%231024%231280%231%230 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-04 12:22:53 UTC	546	OUT	Data Raw: 7b 22 78 68 72 22 3a 5b 7b 22 70 61 72 61 6d 73 22 3a 7b 22 6d 65 74 68 6f 64 22 3a 22 50 4f 53 54 22 2c 22 68 6f 73 74 6e 61 6d 65 22 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 2c 22 70 6f 72 74 22 3a 22 34 34 33 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 73 22 2c 22 68 6f 73 74 22 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 3a 34 34 33 22 2c 22 70 61 74 68 6e 61 6d 65 22 3a 22 2f 31 2f 36 62 63 31 37 35 65 31 63 38 22 2c 22 73 74 61 74 75 73 22 3a 32 30 30 7d 2c 22 6d 65 74 72 69 63 73 22 3a 7b 22 63 6f 75 6e 74 22 3a 31 2c 22 72 78 53 69 7a 65 22 3a 7b 22 74 22 3a 31 35 30 7d 2c 22 64 75 72 61 74 69 6f 6e 22 3a 7b 22 74 22 3a 36 33 31 7d 2c 22 63 62 54 69 6d 65 22 3a 7b 22 74 22 3a 30 7d 2c 22 74 69 6d 65 22 3a 7b 22 74 22 Data Ascii: {"xhr":[{"params":{"method":"POST","hostname":"bam.nr-data.net","port":"443","protocol":"https","host":"bam.nr-data.net:443","pathname":"/1/6bc175e1c8","status":200},"metrics":{"count":1,"rxSize":{"t":150},"duration":{"t":631},"cbTime":{"t":0},"time":{"t"
2024-09-04 12:22:53 UTC	353	IN	HTTP/1.1 200 Connection: close Content-Length: 24 date: Wed, 04 Sep 2024 12:22:53 GMT content-type: image/gif cross-origin-resource-policy: cross-origin access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS access-control-allow-credentials: true access-control-allow-origin: http://ifdnzact.com x-served-by: cache-ewr-kewr1740058-EWR
2024-09-04 12:22:53 UTC	24	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 Data Ascii: GIF89a,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49799	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:54 UTC	694	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dgooel.com%26pid%3D9PO755G95&&l=en&o=1725452573124 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/?dn=gooel.com&pid=9PO755G95 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=9
2024-09-04 12:22:54 UTC	504	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:22:54 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=10; Expires=Wed, 04-Sep-2024 12:28:54 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 04 Sep 2024 12:22:54 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-09-04 12:22:54 UTC	5469	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c
2024-09-04 12:22:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49754	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:54 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-09-04 12:22:54 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49804	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:55 UTC	789	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2F&o=1725452574177&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ifdnzact.com/?dn=gooel.com&pid=9PO755G95 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=10
2024-09-04 12:22:56 UTC	380	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:22:56 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Wed, 04 Sep 2024 12:22:56 GMT content-length: 43 content-type: image/gif connection: close
2024-09-04 12:22:56 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49805	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:56 UTC	497	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2F%3Fdn%3Dgooel.com%26pid%3D9PO755G95&&l=en&o=1725452573124 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=10
2024-09-04 12:22:56 UTC	504	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:22:56 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=11; Expires=Wed, 04-Sep-2024 12:28:56 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 04 Sep 2024 12:22:56 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-09-04 12:22:56 UTC	5474	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49809	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:22:56 UTC	531	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2F&o=1725452574177&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=10
2024-09-04 12:22:57 UTC	380	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:22:57 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Wed, 04 Sep 2024 12:22:57 GMT content-length: 43 content-type: image/gif connection: close
2024-09-04 12:22:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49812	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:23:06 UTC	1952	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FJob_Listings.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%252B%252Fhu433Xx3PD15ir6ozW6g%252B7%252Fea%252F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%252BqZfXQe%252BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%252F1cxsPrqaFAy6dYLUq7i1pz%252FZiU3zxM84cKvQOfDAD43%252BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%252B%252BVjRyg8N96%252BaJl%252BKUVQpheJlks%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26%26kt%3D251%26%26kbc%3D754%26ki%3D15912405%26ktd%3D0%26kld%3D1063%26kp%3D3%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1725452584931 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%2B%2Fhu433Xx3PD15ir6ozW6g%2B7%2Fea%2F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%2BqZfXQe%2BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%2F1cxsPrqaFAy6dYLUq7i1pz%2FZiU3zxM84cKvQOfDAD43%2BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%2B%2BVjRyg8N96%2BaJl%2BKUVQpheJlks&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=11
2024-09-04 12:23:06 UTC	504	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:23:06 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=12; Expires=Wed, 04-Sep-2024 12:29:06 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 04 Sep 2024 12:23:06 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-09-04 12:23:06 UTC	5474	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49817	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:23:07 UTC	1184	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FJob_Listings.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%252B%252Fhu433Xx3PD15ir6ozW6g%252B7%252Fea%252F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%252BqZfXQe%252BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%252F1cxsPrqaFAy6dYLUq7i1pz%252FZiU3zxM84cKvQOfDAD43%252BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%252B%252BVjRyg8N96%252BaJl%252BKUVQpheJlks%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26%26kt%3D251%26%26kbc%3D754%26ki%3D15912405%26ktd%3D0%26kld%3D1063%26kp%3D3%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1725452584931 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=12
2024-09-04 12:23:07 UTC	504	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:23:07 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=13; Expires=Wed, 04-Sep-2024 12:29:07 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 04 Sep 2024 12:23:07 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-09-04 12:23:07 UTC	3844	IN	Data Raw: 45 46 44 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 64 Data Ascii: EFDwindow.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","cd
2024-09-04 12:23:07 UTC	1631	IN	Data Raw: 36 35 38 0d 0a 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 6c 6f 61 64 43 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 3b 76 61 72 20 68 3d 30 3b 76 61 72 20 63 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 62 2e 63 6d 70 5f 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 69 66 28 21 62 2e 63 6d 70 5f 73 63 72 69 70 74 73 5b 69 5d 2e 64 6f 6e 65 29 7b 68 2b 2b 3b 63 2e 70 75 73 68 28 62 2e 63 6d 70 5f 73 63 72 69 70 74 73 5b 69 5d 29 7d 7d 76 61 72 20 61 3d 66 61 6c 73 65 3b 69 66 28 22 63 6d 70 6d 6e 67 72 22 20 69 6e 20 62 29 7b 69 66 28 68 3e 30 29 7b 69 66 28 21 28 22 63 6d 70 5f 74 69 6d 65 72 22 20 69 6e 20 62 29 29 7b 62 2e 63 6d 70 5f 74 69 6d 65 72 3d 6e 65 77 20 44 61 74 65 28 Data Ascii: 658 window)){window.cmp_loadCS=function(){var b=window;var h=0;var c=[];for(var i=0;i<b.cmp_scripts.length;i++){if(!b.cmp_scripts[i].done){h++;c.push(b.cmp_scripts[i])}}var a=false;if("cmpmngr" in b){if(h>0){if(!("cmp_timer" in b)){b.cmp_timer=new Date(
2024-09-04 12:23:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49818	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:23:08 UTC	1375	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FJob_Listings.cfm&o=1725452586974&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%2B%2Fhu433Xx3PD15ir6ozW6g%2B7%2Fea%2F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%2BqZfXQe%2BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%2F1cxsPrqaFAy6dYLUq7i1pz%2FZiU3zxM84cKvQOfDAD43%2BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%2B%2BVjRyg8N96%2BaJl%2BKUVQpheJlks&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=12
2024-09-04 12:23:08 UTC	380	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:23:08 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Wed, 04 Sep 2024 12:23:08 GMT content-length: 43 content-type: image/gif connection: close
2024-09-04 12:23:08 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49819	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:23:09 UTC	547	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FJob_Listings.cfm&o=1725452586974&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=13
2024-09-04 12:23:09 UTC	380	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:23:09 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Wed, 04 Sep 2024 12:23:09 GMT content-length: 43 content-type: image/gif connection: close
2024-09-04 12:23:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49820	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:23:10 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=4b8gRcrnwh48DTZ&MD=ooLU+lXc HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-09-04 12:23:10 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: aee270b4-8f27-490a-9c0f-344480802818 MS-RequestId: 96669f45-7882-4baa-b651-4b3a9b0414ba MS-CV: 3ZMyciPKI0+YeK2o.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 04 Sep 2024 12:23:10 GMT Connection: close Content-Length: 30005
2024-09-04 12:23:10 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-09-04 12:23:10 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49821	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:23:12 UTC	1954	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FWeb_Directory.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%252B%252Fhu433Xx3PD15ir6ozW6g%252B7%252Fea%252F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%252BqZfXQe%252BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%252F1cxsPrqaFAy6dYLUq7i1pz%252FZiU3zxM84cKvQOfDAD43%252BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%252B%252BVjRyg8N96%252BaJl%252BKUVQpheJlks%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26%26kt%3D251%26%26kbc%3D754%26ki%3D30468440%26ktd%3D0%26kld%3D1063%26kp%3D2%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1725452590938 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/Web_Directory.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%2B%2Fhu433Xx3PD15ir6ozW6g%2B7%2Fea%2F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%2BqZfXQe%2BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%2F1cxsPrqaFAy6dYLUq7i1pz%2FZiU3zxM84cKvQOfDAD43%2BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%2B%2BVjRyg8N96%2BaJl%2BKUVQpheJlks&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=754&ki=30468440&ktd=0&kld=1063&kp=2&bd=-4%231024%231280%231%230 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=13
2024-09-04 12:23:12 UTC	504	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:23:12 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=14; Expires=Wed, 04-Sep-2024 12:29:12 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 04 Sep 2024 12:23:12 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-09-04 12:23:12 UTC	5474	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49822	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:23:13 UTC	1185	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FWeb_Directory.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%252B%252Fhu433Xx3PD15ir6ozW6g%252B7%252Fea%252F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%252BqZfXQe%252BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%252F1cxsPrqaFAy6dYLUq7i1pz%252FZiU3zxM84cKvQOfDAD43%252BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%252B%252BVjRyg8N96%252BaJl%252BKUVQpheJlks%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26%26kt%3D251%26%26kbc%3D754%26ki%3D30468440%26ktd%3D0%26kld%3D1063%26kp%3D2%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1725452590938 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=14
2024-09-04 12:23:13 UTC	504	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:23:13 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=15; Expires=Wed, 04-Sep-2024 12:29:13 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 04 Sep 2024 12:23:13 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-09-04 12:23:13 UTC	3844	IN	Data Raw: 45 46 44 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 64 Data Ascii: EFDwindow.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","cd
2024-09-04 12:23:13 UTC	1631	IN	Data Raw: 36 35 38 0d 0a 20 77 69 6e 64 6f 77 29 29 7b 77 69 6e 64 6f 77 2e 63 6d 70 5f 6c 6f 61 64 43 53 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 3b 76 61 72 20 68 3d 30 3b 76 61 72 20 63 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 62 2e 63 6d 70 5f 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 69 66 28 21 62 2e 63 6d 70 5f 73 63 72 69 70 74 73 5b 69 5d 2e 64 6f 6e 65 29 7b 68 2b 2b 3b 63 2e 70 75 73 68 28 62 2e 63 6d 70 5f 73 63 72 69 70 74 73 5b 69 5d 29 7d 7d 76 61 72 20 61 3d 66 61 6c 73 65 3b 69 66 28 22 63 6d 70 6d 6e 67 72 22 20 69 6e 20 62 29 7b 69 66 28 68 3e 30 29 7b 69 66 28 21 28 22 63 6d 70 5f 74 69 6d 65 72 22 20 69 6e 20 62 29 29 7b 62 2e 63 6d 70 5f 74 69 6d 65 72 3d 6e 65 77 20 44 61 74 65 28 Data Ascii: 658 window)){window.cmp_loadCS=function(){var b=window;var h=0;var c=[];for(var i=0;i<b.cmp_scripts.length;i++){if(!b.cmp_scripts[i].done){h++;c.push(b.cmp_scripts[i])}}var a=false;if("cmpmngr" in b){if(h>0){if(!("cmp_timer" in b)){b.cmp_timer=new Date(
2024-09-04 12:23:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49823	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:23:13 UTC	1377	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FWeb_Directory.cfm&o=1725452592147&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ifdnzact.com/Web_Directory.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%2B%2Fhu433Xx3PD15ir6ozW6g%2B7%2Fea%2F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%2BqZfXQe%2BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%2F1cxsPrqaFAy6dYLUq7i1pz%2FZiU3zxM84cKvQOfDAD43%2BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%2B%2BVjRyg8N96%2BaJl%2BKUVQpheJlks&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=754&ki=30468440&ktd=0&kld=1063&kp=2&bd=-4%231024%231280%231%230 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=14
2024-09-04 12:23:13 UTC	380	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:23:13 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Wed, 04 Sep 2024 12:23:13 GMT content-length: 43 content-type: image/gif connection: close
2024-09-04 12:23:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49824	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:23:14 UTC	548	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FWeb_Directory.cfm&o=1725452592147&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=15
2024-09-04 12:23:14 UTC	380	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:23:14 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Wed, 04 Sep 2024 12:23:14 GMT content-length: 43 content-type: image/gif connection: close
2024-09-04 12:23:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49825	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:23:15 UTC	1956	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FYouTube_Videos.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%252B%252Fhu433Xx3PD15ir6ozW6g%252B7%252Fea%252F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%252BqZfXQe%252BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%252F1cxsPrqaFAy6dYLUq7i1pz%252FZiU3zxM84cKvQOfDAD43%252BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%252B%252BVjRyg8N96%252BaJl%252BKUVQpheJlks%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26%26kt%3D251%26%26kbc%3D707%26ki%3D31510203%26ktd%3D0%26kld%3D1063%26kp%3D1%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1725452594454 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/YouTube_Videos.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%2B%2Fhu433Xx3PD15ir6ozW6g%2B7%2Fea%2F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%2BqZfXQe%2BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%2F1cxsPrqaFAy6dYLUq7i1pz%2FZiU3zxM84cKvQOfDAD43%2BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%2B%2BVjRyg8N96%2BaJl%2BKUVQpheJlks&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=707&ki=31510203&ktd=0&kld=1063&kp=1&bd=-4%231024%231280%231%230 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=15
2024-09-04 12:23:16 UTC	504	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:23:15 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=16; Expires=Wed, 04-Sep-2024 12:29:15 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 04 Sep 2024 12:23:15 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-09-04 12:23:16 UTC	5474	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49827	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:23:16 UTC	1186	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FYouTube_Videos.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%252B%252Fhu433Xx3PD15ir6ozW6g%252B7%252Fea%252F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%252BqZfXQe%252BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%252F1cxsPrqaFAy6dYLUq7i1pz%252FZiU3zxM84cKvQOfDAD43%252BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%252B%252BVjRyg8N96%252BaJl%252BKUVQpheJlks%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26%26kt%3D251%26%26kbc%3D707%26ki%3D31510203%26ktd%3D0%26kld%3D1063%26kp%3D1%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1725452594454 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=16
2024-09-04 12:23:17 UTC	504	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:23:16 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=17; Expires=Wed, 04-Sep-2024 12:29:16 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 04 Sep 2024 12:23:16 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-09-04 12:23:17 UTC	5469	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c
2024-09-04 12:23:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49828	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:23:16 UTC	1379	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FYouTube_Videos.cfm&o=1725452595333&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ifdnzact.com/YouTube_Videos.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%2B%2Fhu433Xx3PD15ir6ozW6g%2B7%2Fea%2F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%2BqZfXQe%2BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%2F1cxsPrqaFAy6dYLUq7i1pz%2FZiU3zxM84cKvQOfDAD43%2BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%2B%2BVjRyg8N96%2BaJl%2BKUVQpheJlks&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=707&ki=31510203&ktd=0&kld=1063&kp=1&bd=-4%231024%231280%231%230 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=16
2024-09-04 12:23:17 UTC	380	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:23:16 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Wed, 04 Sep 2024 12:23:16 GMT content-length: 43 content-type: image/gif connection: close
2024-09-04 12:23:17 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49829	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:23:17 UTC	549	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FYouTube_Videos.cfm&o=1725452595333&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=17
2024-09-04 12:23:18 UTC	380	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:23:17 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Wed, 04 Sep 2024 12:23:17 GMT content-length: 43 content-type: image/gif connection: close
2024-09-04 12:23:18 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49810	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:23:21 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-09-04 12:23:21 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49833	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:23:27 UTC	1916	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FJob_Listings.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrBW%252FAjMs%252FNGJHN8sjAkMbUyPA4lQy18GJwdXaa56Nx8FGV28Q4K8x%252FkPKHovFYYvKzb22HErRerJiRw8YBGlrdJFjUzcWiP%252FvdHkp4tNeMNWH516OLWtRI4V4GYSvqIEqi7MqVMIGNM6yQ841mUTySbs0Ur2meguR4lTPre7TGsFHPmKEjM8%252B8tfKPoNS6cOzC0jkEdxYpU8E6PFCshC1Lraq6GFCiEI5iEufbp%252B8m0OE8bd0CyMIR3hu65lpnMI94eACkNWx%252Bo5c%252FDD5yErOuL%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26%26kt%3D251%26%26kbc%3D754%26ki%3D15912405%26ktd%3D0%26kld%3D1063%26kp%3D3%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1725452606139 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBW%2FAjMs%2FNGJHN8sjAkMbUyPA4lQy18GJwdXaa56Nx8FGV28Q4K8x%2FkPKHovFYYvKzb22HErRerJiRw8YBGlrdJFjUzcWiP%2FvdHkp4tNeMNWH516OLWtRI4V4GYSvqIEqi7MqVMIGNM6yQ841mUTySbs0Ur2meguR4lTPre7TGsFHPmKEjM8%2B8tfKPoNS6cOzC0jkEdxYpU8E6PFCshC1Lraq6GFCiEI5iEufbp%2B8m0OE8bd0CyMIR3hu65lpnMI94eACkNWx%2Bo5c%2FDD5yErOuL&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=17
2024-09-04 12:23:28 UTC	504	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:23:28 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=18; Expires=Wed, 04-Sep-2024 12:29:28 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 04 Sep 2024 12:23:28 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-09-04 12:23:28 UTC	5469	IN	Data Raw: 31 35 35 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 1555window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c
2024-09-04 12:23:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49834	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:23:28 UTC	1363	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FJob_Listings.cfm&o=1725452607382&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBW%2FAjMs%2FNGJHN8sjAkMbUyPA4lQy18GJwdXaa56Nx8FGV28Q4K8x%2FkPKHovFYYvKzb22HErRerJiRw8YBGlrdJFjUzcWiP%2FvdHkp4tNeMNWH516OLWtRI4V4GYSvqIEqi7MqVMIGNM6yQ841mUTySbs0Ur2meguR4lTPre7TGsFHPmKEjM8%2B8tfKPoNS6cOzC0jkEdxYpU8E6PFCshC1Lraq6GFCiEI5iEufbp%2B8m0OE8bd0CyMIR3hu65lpnMI94eACkNWx%2Bo5c%2FDD5yErOuL&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=18
2024-09-04 12:23:29 UTC	380	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:23:29 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Wed, 04 Sep 2024 12:23:29 GMT content-length: 43 content-type: image/gif connection: close
2024-09-04 12:23:29 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49835	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:23:28 UTC	1160	OUT	GET /delivery/cmp.php?&cdid=21fdca2281833&h=http%3A%2F%2Fifdnzact.com%2FJob_Listings.cfm%3Fdomain%3Dgooel.com%26fp%3DBxt50nkAAORG%252FA7FAY7pFKD9hGzJd0u25mmywDOURrBW%252FAjMs%252FNGJHN8sjAkMbUyPA4lQy18GJwdXaa56Nx8FGV28Q4K8x%252FkPKHovFYYvKzb22HErRerJiRw8YBGlrdJFjUzcWiP%252FvdHkp4tNeMNWH516OLWtRI4V4GYSvqIEqi7MqVMIGNM6yQ841mUTySbs0Ur2meguR4lTPre7TGsFHPmKEjM8%252B8tfKPoNS6cOzC0jkEdxYpU8E6PFCshC1Lraq6GFCiEI5iEufbp%252B8m0OE8bd0CyMIR3hu65lpnMI94eACkNWx%252Bo5c%252FDD5yErOuL%26kbetu%3D1%26maxads%3D0%26kld%3D1063%26_opnslfp%3D1%26prvtof%3DqPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%252Fj4c2s%253D%26yprpnd%3DUHM6ofc%252BmzTMdphcWy%252Bzzw%253D%253D%26%26kt%3D251%26%26kbc%3D754%26ki%3D15912405%26ktd%3D0%26kld%3D1063%26kp%3D3%26bd%3D-4%25231024%25231280%25231%25230&&__cmpfcc=1&l=en&o=1725452606139 HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=18
2024-09-04 12:23:29 UTC	504	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:23:29 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 set-cookie: __cmpcc=19; Expires=Wed, 04-Sep-2024 12:29:29 GMT; Path=/; SameSite=None; Secure last-modified: Wed, 04 Sep 2024 12:23:29 GMT transfer-encoding: chunked content-type: text/javascript; charset=utf-8 connection: close
2024-09-04 12:23:29 UTC	5293	IN	Data Raw: 31 34 41 35 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 5f 63 73 3d 22 22 3b 0d 0a 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 6f 6e 66 69 67 5f 64 61 74 61 3d 7b 22 69 6e 74 49 44 22 3a 36 38 38 38 34 2c 22 75 69 64 22 3a 34 31 33 32 31 2c 22 64 62 67 64 65 73 69 67 6e 69 64 22 3a 32 37 37 34 36 2c 22 63 6f 6f 6b 69 65 66 72 65 65 22 3a 30 2c 22 73 61 76 65 70 72 65 66 22 3a 30 2c 22 6c 76 74 22 3a 2d 31 2c 22 62 6e 63 22 3a 30 2c 22 62 6e 63 32 22 3a 30 2c 22 62 6e 63 64 22 3a 30 2c 22 69 61 62 69 64 22 3a 33 31 2c 22 68 6f 73 74 22 3a 22 61 2e 64 65 6c 69 76 65 72 79 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 68 6f 73 74 32 22 3a 22 77 77 77 2e 63 6f 6e 73 65 6e 74 6d 61 6e 61 67 65 72 2e 6e 65 74 22 2c 22 63 Data Ascii: 14A5window.cmp_config_data_cs="";window.cmp_config_data={"intID":68884,"uid":41321,"dbgdesignid":27746,"cookiefree":0,"savepref":0,"lvt":-1,"bnc":0,"bnc2":0,"bncd":0,"iabid":31,"host":"a.delivery.consentmanager.net","host2":"www.consentmanager.net","c
2024-09-04 12:23:29 UTC	182	IN	Data Raw: 42 30 0d 0a 63 6d 70 5f 61 70 70 65 6e 64 5f 73 63 72 69 70 74 28 77 69 6e 64 6f 77 2e 63 6d 70 5f 70 72 6f 74 6f 2b 22 2f 2f 22 2b 77 69 6e 64 6f 77 2e 63 6d 70 5f 63 64 6e 2b 22 2f 64 65 6c 69 76 65 72 79 2f 63 75 73 74 6f 6d 64 61 74 61 2f 62 56 38 78 4c 6e 64 66 4e 6a 67 34 4f 44 51 75 63 6c 39 53 54 31 63 75 62 46 39 6c 62 69 35 6b 58 7a 49 33 4e 7a 51 32 4c 6e 68 66 4d 54 51 75 64 69 35 77 4c 6e 52 66 4d 6a 63 33 4e 44 59 75 65 48 52 66 4d 7a 49 2e 6a 73 22 2c 22 64 61 74 61 22 29 3b 0a 0a 63 6d 70 5f 6c 6f 61 64 43 53 28 29 3b 0d 0a Data Ascii: B0cmp_append_script(window.cmp_proto+"//"+window.cmp_cdn+"/delivery/customdata/bV8xLndfNjg4ODQucl9ST1cubF9lbi5kXzI3NzQ2LnhfMTQudi5wLnRfMjc3NDYueHRfMzI.js","data");cmp_loadCS();
2024-09-04 12:23:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49836	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:23:30 UTC	547	OUT	GET /delivery/info/?id=68884&did=1&cfdid=1&t=pv.cn.d_reg0.oonv.d_dnsx&h=http%3A%2F%2Fifdnzact.com%2FJob_Listings.cfm&o=1725452607382&l=EN&lv=0&d=1&ct=14&e=&e2=&e3=&i=&sv=32&dv=14& HTTP/1.1 Host: a.delivery.consentmanager.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cmpcc=19
2024-09-04 12:23:30 UTC	380	IN	HTTP/1.1 200 OK date: Wed, 04 Sep 2024 12:23:30 GMT cache-control: no-store, no-cache, must-revalidate edge-control: no-store, no-cache, must-revalidate expires: Thu, 01 Dec 1994 16:00:00 GMT pragma: no-cache access-control-allow-origin: * x-xss-protection: 0 last-modified: Wed, 04 Sep 2024 12:23:30 GMT content-length: 43 content-type: image/gif connection: close
2024-09-04 12:23:30 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 04 02 04 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49831	87.230.98.78	443	2956	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-04 12:23:42 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-09-04 12:23:42 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Target ID:	0
Start time:	08:22:11
Start date:	04/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	08:22:14
Start date:	04/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2308 --field-trial-handle=2248,i,12398436667138726223,12833074406393657,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	08:22:17
Start date:	04/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://gooel.com"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: http://gooel.com/	HTTP Parser: No favicon
Source: http://gooel.com/	HTTP Parser: No favicon
Source: http://gooel.com/	HTTP Parser: No favicon
Source: http://gooel.com/	HTTP Parser: No favicon
Source: http://ifdnzact.com/Download_Software.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=707&ki=8849840&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230%23455%23509	HTTP Parser: No favicon
Source: http://ifdnzact.com/Download_Software.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=707&ki=8849840&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230	HTTP Parser: No favicon
Source: http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=2&bd=-4%231024%231280%231%230	HTTP Parser: No favicon
Source: http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=2&bd=-4%231024%231280%231%230	HTTP Parser: No favicon
Source: http://ifdnzact.com/Public_Records.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrAIpkfipPRVwopsAu7WH0wWO4NSubvjgHBG8ujezzMU7zL923MgqHA5SexJx5pQYrIIdyzGaEepZ6c7IHZzx5TKEDYoej8%2BtlnDJDYgWvUn3IboedbPOeSEd%2F6OHC1l3mjJ49%2BjmwqP1LT0Bk4GSRn5hdBhbmHV3B5V4ner3aVCH8sKbB079VJmgcf5Je%2FuHqpKKskJY%2BL5As0rfFpeEoTHkctWlKiXqOaIb0E%2FuKcZZj%2FV46HWlnBlE2vMTEAVy%2BfVJb%2B6xQhBhPJpsebcFrjI&kbetu=1&maxads=0&kld=1063&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&&&kt=246&&kbc=754&ki=23459819&ktd=0&kld=1063&kp=1&bd=-4%231024%231280%231%230	HTTP Parser: No favicon
Source: http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%2B%2Fhu433Xx3PD15ir6ozW6g%2B7%2Fea%2F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%2BqZfXQe%2BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%2F1cxsPrqaFAy6dYLUq7i1pz%2FZiU3zxM84cKvQOfDAD43%2BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%2B%2BVjRyg8N96%2BaJl%2BKUVQpheJlks&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230	HTTP Parser: No favicon
Source: http://ifdnzact.com/Web_Directory.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%2B%2Fhu433Xx3PD15ir6ozW6g%2B7%2Fea%2F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%2BqZfXQe%2BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%2F1cxsPrqaFAy6dYLUq7i1pz%2FZiU3zxM84cKvQOfDAD43%2BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%2B%2BVjRyg8N96%2BaJl%2BKUVQpheJlks&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=754&ki=30468440&ktd=0&kld=1063&kp=2&bd=-4%231024%231280%231%230	HTTP Parser: No favicon
Source: http://ifdnzact.com/YouTube_Videos.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBeu2hMH7pMQ7wY09L3uM3RYhIVVOQZ8ae%2B%2Fhu433Xx3PD15ir6ozW6g%2B7%2Fea%2F805RDZxnFeedZrdmUj4BAn92Z4j11j5hJVrF9%2BqZfXQe%2BQguxAh4tqRpjPiClcS6lOd1ED1SINP5YoaWjH1r55lgnMUUKos1C0w1a99FLMCh81xbFP%2F1cxsPrqaFAy6dYLUq7i1pz%2FZiU3zxM84cKvQOfDAD43%2BjrATJIa5mvyJGXEwIEpacQ6zEETRq5V%2B%2BVjRyg8N96%2BaJl%2BKUVQpheJlks&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=707&ki=31510203&ktd=0&kld=1063&kp=1&bd=-4%231024%231280%231%230	HTTP Parser: No favicon
Source: http://ifdnzact.com/Job_Listings.cfm?domain=gooel.com&fp=Bxt50nkAAORG%2FA7FAY7pFKD9hGzJd0u25mmywDOURrBW%2FAjMs%2FNGJHN8sjAkMbUyPA4lQy18GJwdXaa56Nx8FGV28Q4K8x%2FkPKHovFYYvKzb22HErRerJiRw8YBGlrdJFjUzcWiP%2FvdHkp4tNeMNWH516OLWtRI4V4GYSvqIEqi7MqVMIGNM6yQ841mUTySbs0Ur2meguR4lTPre7TGsFHPmKEjM8%2B8tfKPoNS6cOzC0jkEdxYpU8E6PFCshC1Lraq6GFCiEI5iEufbp%2B8m0OE8bd0CyMIR3hu65lpnMI94eACkNWx%2Bo5c%2FDD5yErOuL&kbetu=1&maxads=0&kld=1063&_opnslfp=1&prvtof=qPLfR4JpcaXXFUCnKJX6INQkBoTUwIWpBZnV6%2Fj4c2s%3D&yprpnd=UHM6ofc%2BmzTMdphcWy%2Bzzw%3D%3D&&kt=251&&kbc=754&ki=15912405&ktd=0&kld=1063&kp=3&bd=-4%231024%231280%231%230	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86

Source: global traffic	DNS traffic detected: DNS query: gooel.com
Source: global traffic	DNS traffic detected: DNS query: ifdnzact.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: delivery.consentmanager.net
Source: global traffic	DNS traffic detected: DNS query: cdn.consentmanager.net
Source: global traffic	DNS traffic detected: DNS query: i1.cdn-image.com
Source: global traffic	DNS traffic detected: DNS query: a.delivery.consentmanager.net
Source: global traffic	DNS traffic detected: DNS query: i2.cdn-image.com
Source: global traffic	DNS traffic detected: DNS query: i4.cdn-image.com
Source: global traffic	DNS traffic detected: DNS query: js-agent.newrelic.com
Source: global traffic	DNS traffic detected: DNS query: bam.nr-data.net
Source: global traffic	DNS traffic detected: DNS query: i3.cdn-image.com

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://gooel.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Windows Analysis Report
http://gooel.com