Edit tour

Windows Analysis Report
http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran

Overview

General Information

Sample URL:	http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran
Analysis ID:	1508803
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

HTML page contains obfuscated javascript

HTML page contains suspicious base64 encoded javascript

Connects to several IPs in different countries

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6224 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3692 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1856,i,17599355910779306083,14515011359913216872,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6532 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: http://football-booster.freevisit1.com/contact.php

LLM: Score: 8 Reasons: The website's use of a free web hosting service (freevisit1.com) and a minimalistic design could be attempts to keep the focus on the form and away from security concerns. The presence of a contact form with fields for sensitive information (name, email, and message) on a potentially insecure website raises red flags. However, the domain name 'football-booster' seems appropriate for the identified brand, which suggests a possible legitimate connection. Nevertheless, the overall suspicious elements and potential security concerns warrant a high phishing score. DOM: 35.24.pages.csv

HTML page contains obfuscated javascript

Source: https://aqfer.lijit.com/samples/empty.js

HTTP Parser: (function(){})()

HTML page contains suspicious base64 encoded javascript

Source: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran

HTTP Parser: Base64 decoded: <script>

Source: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran

HTTP Parser: Base64 decoded: <!DOCTYPE html><body><script>(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var d=this||self;function g(a){return a};var h;/* Copyright Google LLC SPDX-License-Identifier: Apache-2.0*/func...

Source: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran	HTTP Parser: No favicon
Source: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran	HTTP Parser: No favicon
Source: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran	HTTP Parser: No favicon
Source: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran	HTTP Parser: No favicon
Source: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran	HTTP Parser: No favicon
Source: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran	HTTP Parser: No favicon
Source: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran	HTTP Parser: No favicon
Source: http://football-booster.freevisit1.com/dmca.php	HTTP Parser: No favicon
Source: http://football-booster.freevisit1.com/contact.php	HTTP Parser: No favicon
Source: http://football-booster.freevisit1.com/register-hsfootball.php	HTTP Parser: No favicon
Source: http://football-booster.freevisit1.com/register-hsfootball.php	HTTP Parser: No favicon
Source: http://football-booster.freevisit1.com/register-hsfootball.php	HTTP Parser: No favicon
Source: http://football-booster.freevisit1.com/register-hsfootball.php	HTTP Parser: No favicon
Source: http://ww38.watchdogsecurity.online/	HTTP Parser: No favicon
Source: http://ww38.watchdogsecurity.online/	HTTP Parser: No favicon
Source: http://ww38.watchdogsecurity.online/	HTTP Parser: No favicon
Source: http://ww38.watchdogsecurity.online/	HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49815 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49737 version: TLS 1.2

Source: unknown

Network traffic detected: IP country count 10

Source: global traffic

TCP traffic: 192.168.2.5:49780 -> 1.1.1.1:53

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: api.powerafftrky.com to https://go.greenlinknow.com/t/clk?id=qmhyezqt7wsvn3ty&s1=46e1fe29-1a9b-46f3-b58f-9a54bdf046ed&s2=1576&s7=pecinta%20sholawat&s8=
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: go.greenlinknow.com to https://gametimepulse.com/en_us/sport-now4?&subid=e867b4a6-d17c-4afb-a008-7068b00cf775&networkid=200749&publisher=1576&isnewtr=1&stream=&subsource=pecinta%20sholawat&sign=5be114f181be643eb22ead33c755e020

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49815 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/8.0.30content-type: text/html; charset=UTF-8content-length: 2907content-encoding: gzipvary: Accept-Encoding,User-Agentdate: Tue, 10 Sep 2024 16:10:27 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 1a 6b 6f db 38 f2 73 0d f4 3f cc a9 c0 d9 de 5a af 36 af da 96 8b 24 4d 9b dc a5 49 b7 49 77 f7 6e b1 08 68 89 96 98 50 a4 40 52 76 bc 69 7f d0 fd 8d fb 65 07 8a 92 5f f5 ab 69 17 e7 b4 89 28 0e 39 c3 79 73 c6 b5 6e a2 52 0a 14 b1 38 b0 30 b3 3f 5d 59 90 09 3c 20 f7 81 c5 e3 36 24 4a 65 6d d7 e5 71 e6 a4 d8 65 f2 99 d5 ab 75 13 8c a2 5e 0d ca 4f 37 c5 0a 41 98 20 21 b1 0a ac 5c 0d ec 03 6b 71 9a a1 14 07 d6 90 e0 51 c6 85 b2 20 e4 4c 61 a6 c1 25 16 b6 0c 11 45 7d 8a 03 c6 5b 30 22 91 4a 82 08 0f 49 88 ed 62 d0 02 c2 88 22 88 16 80 38 f0 5b f3 ab fc 15 e8 04 ef 73 25 67 90 5d 5c 9e 5d bc 39 f9 ad 05 17 97 6f 2f cf cf 2f 7f d5 4f 87 1f 8f 4f cf 7e 39 d1 8f 97 6f 3e e8 3f 67 ef 0f df 9d 4c 20 af 2e ce 3e 7c 38 b9 9e c5 a1 88 a2 b8 77 4a e2 04 ae c2 84 73 0a 6f 39 57 7d 44 29 9c 93 21 06 1b de 09 8c 59 84 28 86 a1 84 f7 84 8e 50 7e 87 31 9c e7 2a c1 02 31 e8 ba 66 8f e9 9e 94 b0 3b 10 98 06 96 54 63 8a 65 82 b1 b2 20 11 78 10 58 2e 92 12 2b e9 86 52 ba c5 ac 13 4a 39 4b 90 0c 05 c9 14 48 11 4e 81 6f a5 9b f2 08 0b 46 fe 14 ce ad b4 7a 5d d7 80 2d 22 35 38 4a 49 0f 38 53 d2 89 39 8f 29 46 19 91 4e c8 53 8d f7 f5 00 a5 84 8e 83 cb 0c b3 e7 57 88 c9 f6 8e e7 b5 f6 3c af b5 ef 79 d6 57 84 7f 17 8e 37 82 93 68 8a 64 29 02 50 e3 0c 07 96 c2 f7 ca 5d 60 c6 0c 27 13 2e 54 98 2b 20 21 67 d6 0c 11 b2 ed ba c4 21 69 9c 8b 02 f9 27 75 f2 0a ff 1b 3b 19 8b 2d 70 b7 94 4a 79 9a 14 dd 87 11 73 fa 9c 2b a9 04 ca f4 40 ef a9 4f 69 a3 11 96 3c c5 ee 8e b3 ef 78 85 fc 66 5f 3b 29 61 85 28 d7 9c a6 c0 3b 1d eb 4f 9f 47 63 78 98 7b 55 bc 46 e1 5d 2c 78 ce a2 36 50 c2 30 12 76 2c 50 44 30 53 0d 11 f7 51 c3 6b e9 1f c7 6f b6 e6 87 cd 16 e4 82 36 96 31 86 c4 47 d9 d1 cb 81 73 9b c5 4d 60 dc 16 38 c3 48 41 88 99 c2 a2 fa 33 20 f7 38 ea ac a1 c7 96 e4 4f dc 86 90 0f b1 98 87 fb 32 37 d2 8e 05 8b 0d 47 5b 45 ea c5 a7 f0 1f ff fa a7 2a 48 5d 87 c4 c9 78 96 67 b6 22 29 7e 24 a6 db 5f e5 cf c7 07 7b 6b 99 f2 23 d8 51 52 aa dd 17 22 6c 23 63 d6 c9 7c 6f 5e e6 7b eb 64 7e 71 f6 1b 3d f8 f9 f4 2f 3d 5e d7 9d d1 eb ae 3b 8d 28 5d ad dc 33 ea ff 37 db 86 63 e3 bf c1 b6 67 26 22 32 84 90 22 29 03 4b 2f b1 23 32 b4 e6 cd a4 5b aa 13 89 02 cb 3c 5a d5 8a 90 53 2e 6c 99 21 b6 b0 66 71 6b c1 47 4b 20 16 a1 28 12 31 b6 fd 17 10 72 9a a7 4c ae 58 b2 fd e6 4b 91 f0 98 83 fe 65 2b 41 10 8b 29 de b0 b8 d8 80 a4 b1 09 0b cb 24 8d df c9 f8 cd ed 07 e7 36 c3 b1 05 88 aa c0 Data Ascii: ko8s?Z6$MIIwnhP@Rvie_i(9ysnR80?]Y< 6$Jemqeu^O7A !\kq
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100content-type: text/javascriptlast-modified: Fri, 30 Aug 2024 10:56:23 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encoding,User-Agentcontent-length: 4631date: Tue, 10 Sep 2024 16:10:28 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 3a 6b 77 db b6 92 df fb 2b 28 24 57 06 22 98 92 f3 b8 dd 52 41 74 13 27 69 d2 26 b7 39 75 da 7e 50 9c 7b 40 12 7c d8 24 41 03 a0 64 c7 d4 fe f6 3d 03 3e 44 c9 72 37 7b ce 7e 91 08 cc 60 06 18 cc 0b 03 4c 1f 8d 7e 70 1e 39 1f 65 28 54 91 7e 53 ce ea b1 fb a3 7b 02 7d eb f5 da cd bb 7e 37 90 f9 0f ce 23 e8 3f 95 e5 8d 4a e3 c4 38 38 20 ce 5b ae aa 4b e7 a5 11 9a 3a 9f 78 95 39 ef 55 aa 13 ea bc cc c4 b5 73 26 ae 8d 2c 60 d0 cb 15 4f 33 ee 67 c2 a9 8a 50 28 c7 24 c2 79 75 f6 da e1 45 e8 7c 7c ff d9 c9 d2 40 14 5a 68 ef 2e db 69 0b 9b fe e0 3c 9a fe b0 4e 8b 50 ae dd 7e c2 2c aa 8a c0 a4 b2 c0 9c fa 34 20 b7 5d db 09 31 27 b7 c6 0d b4 fe 2c ae 0d e3 9b 1e 22 00 97 dc 2a 61 2a 05 78 d7 ee 85 4c 0b cc 27 68 8e c8 04 fb 75 8d 10 21 5b fc 68 07 df dc 94 42 46 0e 67 8c f9 5b 9c 78 88 33 1a fd 37 46 68 c2 89 9b 16 a1 b8 fe 2d c2 fe 80 5c d2 a0 46 52 e1 15 57 4e e8 a4 85 c3 c9 2d 7c 0b c6 97 e1 f9 3c 8d f0 28 c6 82 a2 63 44 c6 63 b3 14 e7 23 c6 02 d2 10 47 65 74 8d 18 f3 17 c2 1b cd 36 2d c3 93 2d f9 d4 4a 22 dc 32 10 03 06 31 f3 97 7c 29 ce 2d 8f 78 40 d5 09 19 63 a3 93 05 00 bd 08 c7 14 75 04 11 59 c4 ae 9f 16 21 0e eb da 27 5e 7c 80 e7 45 27 7d bb 20 c6 dd 20 e1 ea a5 c1 33 e2 1a f9 47 59 0a 75 ca b5 c0 64 c2 5d 0d db 89 4f 08 15 0c 24 ee a0 c9 b7 46 fc 21 34 c8 24 24 ae 2e b3 d4 60 68 cd db c9 45 d8 a7 48 1b 95 16 31 22 75 6d 9b a0 48 51 5a 88 10 91 45 82 05 f5 89 87 7b 9a 2f ef a7 49 53 40 a6 c1 70 87 2f 31 b9 95 6e 5a 94 95 d9 2a 54 30 d8 23 36 a3 82 05 6e 26 8a d8 24 73 f1 22 9c 87 93 09 79 b3 0c 96 e1 f9 39 1b 8d 30 7c a4 85 53 f5 53 7e e3 66 a9 36 e3 31 6e 3e d8 08 8f 7c 37 50 82 1b f1 26 13 b9 28 0c 46 21 37 1c 80 b0 a6 11 77 df 7d fe f8 e1 35 37 fc 43 aa 4d 8b 43 08 7d b3 c1 88 57 46 06 32 2f 33 61 84 03 8d 48 06 95 76 60 ac 53 66 3c 10 89 cc c0 ac 72 7e ed e4 69 e1 e4 55 66 d2 32 13 4e c9 8d 11 aa 70 94 b8 aa 52 25 42 47 1b 51 a2 81 34 08 6d d7 0d 6a ad 07 d6 34 58 3c 15 34 a2 31 9b d1 84 f1 4e 04 c9 8b 78 1e 4f 26 a4 72 b5 30 2f 8d 51 a9 5f 19 81 11 90 41 14 f4 38 3e 27 34 64 c8 88 6b 83 46 8c 55 2e 80 68 38 1e e3 ca 5d f1 ac 12 6c 45 2b 57 9b 9b 4c f4 46 8a 4a a9 53 e0 ef 71 5f cb ac 32 62 be 4a 75 ea a7 59 6a 6e bc 24 0d 43 51 cc 11 9d 7e 55 bc 88 c5 c3 a9 6b 84 36 58 90 f1 b8 a3 f4 97 f0 2f 53 f3 b2 2c 05 57 bc 08 04 a8 Data Ascii: :kw+($W"RAt'i&9u~P{@\|$Ad=>Dr7{~`L~p9e(T~S{}~7#?J88 [K:x9Us&,`O3gP($yuE\|\|@Zh.i<NP~,
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100content-type: text/javascriptlast-modified: Fri, 30 Aug 2024 10:56:23 GMTaccept-ranges: bytescontent-encoding: gzipvary: Accept-Encoding,User-Agentcontent-length: 4631date: Tue, 10 Sep 2024 16:10:32 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 3a 6b 77 db b6 92 df fb 2b 28 24 57 06 22 98 92 f3 b8 dd 52 41 74 13 27 69 d2 26 b7 39 75 da 7e 50 9c 7b 40 12 7c d8 24 41 03 a0 64 c7 d4 fe f6 3d 03 3e 44 c9 72 37 7b ce 7e 91 08 cc 60 06 18 cc 0b 03 4c 1f 8d 7e 70 1e 39 1f 65 28 54 91 7e 53 ce ea b1 fb a3 7b 02 7d eb f5 da cd bb 7e 37 90 f9 0f ce 23 e8 3f 95 e5 8d 4a e3 c4 38 38 20 ce 5b ae aa 4b e7 a5 11 9a 3a 9f 78 95 39 ef 55 aa 13 ea bc cc c4 b5 73 26 ae 8d 2c 60 d0 cb 15 4f 33 ee 67 c2 a9 8a 50 28 c7 24 c2 79 75 f6 da e1 45 e8 7c 7c ff d9 c9 d2 40 14 5a 68 ef 2e db 69 0b 9b fe e0 3c 9a fe b0 4e 8b 50 ae dd 7e c2 2c aa 8a c0 a4 b2 c0 9c fa 34 20 b7 5d db 09 31 27 b7 c6 0d b4 fe 2c ae 0d e3 9b 1e 22 00 97 dc 2a 61 2a 05 78 d7 ee 85 4c 0b cc 27 68 8e c8 04 fb 75 8d 10 21 5b fc 68 07 df dc 94 42 46 0e 67 8c f9 5b 9c 78 88 33 1a fd 37 46 68 c2 89 9b 16 a1 b8 fe 2d c2 fe 80 5c d2 a0 46 52 e1 15 57 4e e8 a4 85 c3 c9 2d 7c 0b c6 97 e1 f9 3c 8d f0 28 c6 82 a2 63 44 c6 63 b3 14 e7 23 c6 02 d2 10 47 65 74 8d 18 f3 17 c2 1b cd 36 2d c3 93 2d f9 d4 4a 22 dc 32 10 03 06 31 f3 97 7c 29 ce 2d 8f 78 40 d5 09 19 63 a3 93 05 00 bd 08 c7 14 75 04 11 59 c4 ae 9f 16 21 0e eb da 27 5e 7c 80 e7 45 27 7d bb 20 c6 dd 20 e1 ea a5 c1 33 e2 1a f9 47 59 0a 75 ca b5 c0 64 c2 5d 0d db 89 4f 08 15 0c 24 ee a0 c9 b7 46 fc 21 34 c8 24 24 ae 2e b3 d4 60 68 cd db c9 45 d8 a7 48 1b 95 16 31 22 75 6d 9b a0 48 51 5a 88 10 91 45 82 05 f5 89 87 7b 9a 2f ef a7 49 53 40 a6 c1 70 87 2f 31 b9 95 6e 5a 94 95 d9 2a 54 30 d8 23 36 a3 82 05 6e 26 8a d8 24 73 f1 22 9c 87 93 09 79 b3 0c 96 e1 f9 39 1b 8d 30 7c a4 85 53 f5 53 7e e3 66 a9 36 e3 31 6e 3e d8 08 8f 7c 37 50 82 1b f1 26 13 b9 28 0c 46 21 37 1c 80 b0 a6 11 77 df 7d fe f8 e1 35 37 fc 43 aa 4d 8b 43 08 7d b3 c1 88 57 46 06 32 2f 33 61 84 03 8d 48 06 95 76 60 ac 53 66 3c 10 89 cc c0 ac 72 7e ed e4 69 e1 e4 55 66 d2 32 13 4e c9 8d 11 aa 70 94 b8 aa 52 25 42 47 1b 51 a2 81 34 08 6d d7 0d 6a ad 07 d6 34 58 3c 15 34 a2 31 9b d1 84 f1 4e 04 c9 8b 78 1e 4f 26 a4 72 b5 30 2f 8d 51 a9 5f 19 81 11 90 41 14 f4 38 3e 27 34 64 c8 88 6b 83 46 8c 55 2e 80 68 38 1e e3 ca 5d f1 ac 12 6c 45 2b 57 9b 9b 4c f4 46 8a 4a a9 53 e0 ef 71 5f cb ac 32 62 be 4a 75 ea a7 59 6a 6e bc 24 0d 43 51 cc 11 9d 7e 55 bc 88 c5 c3 a9 6b 84 36 58 90 f1 b8 a3 f4 97 f0 2f 53 f3 b2 2c 05 57 bc 08 04 a8 Data Ascii: :kw+($W"RAt'i&9u~P{@\|$Ad=>Dr7{~`L~p9e(T~S{}~7#?J88 [K:x9Us&,`O3gP($yuE\|\|@Zh.i<NP~,
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/8.0.30content-type: text/html; charset=UTF-8content-length: 1115content-encoding: gzipvary: Accept-Encoding,User-Agentdate: Tue, 10 Sep 2024 16:11:09 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 56 6d 6b 1c 47 0c fe dc fc 0a d5 14 9c 80 59 93 42 29 84 eb 81 39 9b f4 20 7e a1 71 08 f9 a8 9b d5 ee 2a 9e 9d d9 8e b4 b7 d9 fe fa a2 d9 bd 17 87 38 24 2d a5 fe 70 e0 9b 39 cd a3 47 8f 1e 69 f1 e3 e5 ed ea fe c3 dd 15 34 da fa e5 b3 45 b7 5c 88 a6 18 ea e5 e5 fa f5 fa fe e2 0d 5c af df bc b9 ba b9 59 bf bb 86 d5 ed dd 87 3f d6 af 7f bf 87 8b d5 3d 3c bf bc 5e 5d bc 80 9b db fb f5 ea 6a 71 3e ff 6c 71 8e cb b3 67 8b f3 6e f9 0c 3e fb fb 61 d1 2d df 13 60 22 e0 00 2e b6 9d 67 0c 8e 60 60 6d e0 e5 af f0 ae 78 5b ac 0a f8 09 7e 79 f9 33 60 28 41 1b 82 4b ae 59 d1 c3 35 7b 4f 21 70 df c2 2a 76 63 e2 ba 51 b8 70 3a e3 28 60 ad c0 02 b1 4f d0 45 cf 6e 04 8d 90 48 ba 68 81 22 60 18 81 43 95 38 d4 d4 52 50 08 51 d9 91 4c 0f e1 03 01 76 5d 8a 5d 62 54 02 74 ca 31 08 f4 a1 a4 f4 6d 38 56 a7 13 21 16 2f 6a 43 c9 02 7a 76 b8 f1 96 b0 92 f7 e4 b4 47 0f f6 0c 25 1d c1 e3 20 c5 93 5c ad 2b 18 2d 1d b7 7b 86 4a 68 51 29 31 7a 68 50 60 43 14 a0 8b 62 07 31 e4 d4 07 da 08 2b 41 4c c0 15 34 63 47 c9 73 78 10 63 e0 e9 60 56 92 44 da a7 40 46 7a 8a 7d dd e4 70 42 98 5c 03 14 6a 0e 94 33 1b 63 0f 03 06 05 6d 58 0e 11 12 b5 71 4b e5 59 3e 6f 7b 51 4b 72 cb 25 01 c2 90 58 95 72 c5 db 3e b0 43 a3 16 b4 41 85 92 14 d9 4b 26 98 43 15 53 3b 1d 7a ce 49 71 c8 27 55 f4 3e 0e 1c 6a 10 ca 75 29 e0 ce 13 0a c1 86 00 07 43 9f a3 65 6c ec bd 7d ed 39 f3 5e c5 04 25 b6 58 93 c0 73 0e ce f7 a5 c5 71 51 74 aa 3c aa c6 14 68 94 53 a8 88 e4 85 d1 96 73 60 49 d4 25 12 93 ca 17 a0 cd 7c 67 b2 f3 e3 2c 3b 79 d9 03 31 7c 46 b7 14 f0 9e 40 fa ba 26 d1 03 dc 8a 93 28 b8 18 14 9d 02 86 3d 9e 8c dc 53 6d d5 11 61 d1 dc 29 99 b7 89 77 a5 f4 b4 74 ee 1f b1 46 3e 2b 5e a6 c2 6c 8c 6a 23 62 22 f8 31 cc c7 2d e2 3c 72 fb ea c9 57 76 56 71 37 97 9a ec 33 c3 ac 72 dd b0 d7 26 26 fe 8b 4a e8 28 89 81 8f d6 59 96 c6 86 1a f4 d5 ee 66 1c 02 25 fb 07 03 d0 27 e7 7b e1 2d c1 84 68 c7 2e 7a 4f 35 95 fe d0 c6 65 71 64 3b df 88 51 fa aa 62 c7 39 bb 99 f5 e3 ea 4a 9c de 1b 08 5a 1c f7 57 c6 d8 17 f0 61 27 6d f4 12 77 1c 02 c2 16 3d 97 40 2d b2 07 2c cb 44 22 df 01 6c 1f d5 b8 53 ae 2c bd 63 94 53 8b 64 96 8e 7b 77 88 e9 61 aa 0f 65 7b 6b 70 4b 93 21 ec d9 c9 fa 3e 68 1e 15 ac 69 8c 7d da 35 b6 52 6a 67 8f 1b 1a b6 2f 1a 3a b2 85 ae 23 4c a6 eb 63 33 48 24 bd d7 ef 49 f1 02 44 51 27 49 65 76 a7 64 da ce 23 07 83 d6 a1 b9 a1 59 1a 42 1d 63 09 15 da 48 d8 90 67 aa a6 9f f4 b2 97 d5 1e df Data Ascii: VmkGYB)9 ~q*8$-p9Gi4E\\Y?=<^]jq>
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/8.0.30content-type: text/html; charset=UTF-8content-length: 312content-encoding: gzipvary: Accept-Encoding,User-Agentdate: Tue, 10 Sep 2024 16:11:11 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 95 91 3f 4f 03 31 0c c5 f7 fb 14 c6 13 0c c7 81 18 90 d0 25 03 05 31 b6 52 bb 74 cc 25 29 8d 9a 3f 55 e2 00 e5 d3 a3 dc e5 40 15 62 60 89 e4 f8 bd 9f 9f ec fe e2 69 b9 d8 6c 57 cf b0 27 67 79 d3 40 03 00 d0 ef 42 74 00 42 92 09 9e 21 82 d3 b4 0f 8a e1 6a b9 de 20 68 2f e9 74 d4 0c 5d b6 64 8e 22 52 57 0c ad 12 24 90 57 84 f1 c7 4c 30 e9 f6 46 29 ed 11 bc 70 9a e1 84 45 78 13 36 6b 86 29 0f ce d0 ec db 86 1c 47 dd 43 3f c4 73 d6 e4 2e 2f 56 2e e9 0f fa e6 20 24 f3 a9 19 de dd 60 c7 7f cc 23 50 3b 61 ec 5f c4 b1 f9 6f a4 d3 29 89 d7 b3 98 c5 2b a2 16 95 5b 15 08 31 bc 27 86 f7 08 32 d8 34 d2 78 df cd 62 fe 2b d5 14 a4 ae 65 8e b2 d6 5e 61 37 0b c7 7d d7 a2 be e5 7b c8 44 c1 57 c0 54 20 48 2b 52 62 38 90 87 81 7c ab f4 4e 64 4b 08 e5 5a ad 32 c9 99 d2 3e 9b 3d 5b eb ec 97 00 8f 42 1e 10 82 97 d6 c8 43 39 68 a2 10 4f d7 83 90 87 cb f6 f6 0a a1 e3 0b 1b 92 ee bb c9 cb 9b 2f 17 16 fb 1a 5b 02 00 00 Data Ascii: ?O1%1Rt%)?U@b`ilW'gy@BtB!j h/t]d"RW$WL0F)pEx6k)GC?s./V. $`#P;a_o)+[1'24xb+e^a7}{DWT H+Rb8\|NdKZ2>=[BC9hO/[
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKConnection: Keep-AliveKeep-Alive: timeout=5, max=100x-powered-by: PHP/8.0.30content-type: text/html; charset=UTF-8content-length: 1057content-encoding: gzipvary: Accept-Encoding,User-Agentdate: Tue, 10 Sep 2024 16:11:13 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffData Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 56 5d 6f db 36 14 7d 37 90 ff 70 a3 a2 b1 0d 84 fa 48 93 b4 93 25 b7 5d 9a a2 7b 58 37 b4 49 b0 21 08 02 9a ba 92 18 53 a4 46 d2 76 bc 26 ff 7d a0 64 a7 b6 13 27 93 1f 2c f2 1c 9d 7b c8 7b 79 a5 64 f7 d3 1f 27 67 7f ff 79 0a a5 ad c4 b0 93 b8 3f 10 54 16 a9 87 92 9c 7f f7 a0 d6 98 f3 db d4 53 45 0c a5 b5 75 1c 04 aa a8 fd 0a 03 69 5e 79 ee 11 a4 d9 b0 03 00 90 54 68 29 b0 92 6a 83 36 f5 ce cf 3e 93 77 de 2a 24 69 85 a9 37 e5 38 ab 95 b6 1e 30 25 2d 4a 9b 7a 33 9e d9 32 cd 70 ca 19 92 66 b0 0f 5c 72 cb a9 20 86 51 81 69 e4 87 6b 52 ce 0a c1 7f 26 7c 9a 7a 7f 91 f3 8f e4 44 55 35 b5 7c 24 70 45 97 63 8a 59 81 4f 98 d0 6a a4 ac 59 a1 4a c5 65 86 b7 4b aa e5 56 e0 f0 1b 16 dc 58 d4 49 d0 8e b7 18 d0 98 6b 34 e5 8a 5a 38 98 68 91 3a 8e 89 83 80 d6 dc af d5 0c 35 cd 73 ab c7 73 9f a9 2a b0 01 13 e3 f7 3c 4b 47 85 fd bd fa ed 42 5e b0 e3 7f eb c3 cf 17 7b 26 4a 6b 64 5c 5a 0a a6 54 82 ce a8 dd 33 07 8f e6 96 56 8d 9d 2f ad b9 cb 17 8a 66 5c 16 44 63 c6 35 32 0b 3f 1e 30 77 95 c8 8b d2 c6 10 85 e1 b4 1c ac 41 19 37 b5 a0 f3 18 c8 0c 47 63 6e c9 48 dd 6e 63 54 86 e4 02 6f b7 33 1c ba 0e ad a8 12 2a 78 21 63 60 28 2d ea 0d da 42 fa 39 4e 03 11 6e b1 32 5b 44 56 62 d5 94 8d 5f 08 b5 9d 72 33 31 96 e7 73 b2 48 ed cb d1 94 e6 0d 6f 8a da 72 46 c5 76 66 9b 1e ae 64 0c 52 e9 ea 11 75 69 6e 85 c7 94 98 54 72 9d f7 12 e7 fe 67 69 58 bc b5 a4 5d c0 46 55 34 c8 da 86 ef f2 ca 9d 52 2a ed 93 52 22 33 24 9b 50 41 34 97 c5 86 d8 43 0d 70 29 b8 44 32 12 8a 8d d7 4d 37 87 3c 86 e3 c3 7a a3 48 96 e5 b9 8e 6c 0b 1c d3 fc f1 5a 1e 52 e5 81 b7 a5 38 b7 3b 3a 3c de e6 e8 31 52 51 5d 70 19 43 b4 09 8c 94 ce 50 13 4d 33 3e 31 31 1c 85 af 9f c2 63 38 aa 6f c1 28 c1 33 78 75 70 70 f0 a4 06 53 42 e9 b8 c1 c1 6a 2a 4d 4d 35 4a fb 68 62 e3 7c 48 5e d1 b6 1c d6 13 15 f9 07 06 5c 52 a8 06 2e 73 d7 64 f1 a9 6d fe 30 c6 79 ae 69 85 06 9e cb 74 f8 7a 63 c2 5d 8d ab 5c e9 2a 06 ad 2c b5 d8 0b 33 2c fa eb 0e ef d7 46 51 f8 3f 95 de 1c 3f ab d5 de 25 c1 a2 27 26 41 fb 76 4a 46 2a 9b 03 13 d4 98 d4 5b 3d 04 9b bd 72 d9 53 33 3e 5d d2 d7 96 ef 0d 93 20 e3 53 a7 ec 24 87 9d 45 64 17 a9 7d 83 ee 12 02 5f b8 b1 d4 1a d7 e6 01 be 9f 7d fc 76 06 d0 a3 73 c9 fa 84 0c 77 3a 89 61 9a d7 16 ec bc c6 d6 4e 70 43 a7 b4 9d f5 86 53 aa e1 fa 0b 35 73 c9 d2 e5 cd dd 1d 5c 5e 0d 76 3a 8b a1 5f 4f 4c d9 bb ec 2e 03 19 4b b5 ed ee 43 37 da 3f 7c f7 4b f4 f6 ed 9b fd c3 fd b0 fd 85 61 Data Ascii: V]o6}7pH%]{X7I!SFv&}d',{{yd'gy?TSEui^yTh)j6>

Source: global traffic	HTTP traffic detected: GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /NUcJYKt.jpg HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /igBpB3f.jpg HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eGsgDjP.jpeg HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: http://football-booster.freevisit1.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1Host: translate.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /NUcJYKt.jpg HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eGsgDjP.jpeg HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /igBpB3f.jpg HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1Host: translate.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /stats/0.php?4891773&@f16&@g1&@h1&@i1&@j1725984633543&@k0&@l1&@mHigh%20School%20Football%20Live%20-%20Greendale%20vs%20Milwaukee%20Lutheran&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-16114489&@b3:1725984634&@b4:js15_as.js&@b5:-240&@a-_0.2.1&@vhttp%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%20vs%20Milwaukee%20Lutheran&@w HTTP/1.1Host: s4.histats.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/cleardot.gif HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/?v=1a&pid=5200&site=1&l=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&j= HTTP/1.1Host: e.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /stats/0.php?4891773&@f16&@g1&@h1&@i1&@j1725984633543&@k0&@l1&@mHigh%20School%20Football%20Live%20-%20Greendale%20vs%20Milwaukee%20Lutheran&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-16114489&@b3:1725984634&@b4:js15_as.js&@b5:-240&@a-_0.2.1&@vhttp%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%20vs%20Milwaukee%20Lutheran&@w HTTP/1.1Host: s4.histats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/cleardot.gif HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=football-booster.freevisit1.com&_ss=1mx4vkpben&_pv=1&_ls=0&_u1=1&_u3=1&_cc=us&_pl=d&_cbid=6g49&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=1; st=1; df=1725984635; l=10401725984635D685D944936F64E5C9
Source: global traffic	HTTP traffic detected: GET /idg/?su=10401725984635D685D944936F64E5C9 HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=1; st=1; df=1725984635; l=10401725984635D685D944936F64E5C9
Source: global traffic	HTTP traffic detected: GET /e/?v=1a&pid=5200&site=1&l=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&j= HTTP/1.1Host: e.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=1; st=1; df=1725984635; l=10401725984635D685D944936F64E5C9
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=football-booster.freevisit1.com&_ss=1mx4vkpben&_pv=1&_ls=0&_u1=1&_u3=1&_cc=us&_pl=d&_cbid=6g49&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: m=1; st=1; df=1725984635; l=10401725984635D685D944936F64E5C9
Source: global traffic	HTTP traffic detected: GET /b/p?id=wu!&lm=0&ts=1725984636046&dn=AFWU&iso=0&pu=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&t=High%20School%20Football%20Live%20-%20Greendale%20vs%20Milwaukee%20Lutheran HTTP/1.1Host: ic.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20LutheranAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=wu!&dn=AFWU&cc=1&r=&pu=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran HTTP/1.1Host: de.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20LutheranAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&event_source=dtscout&rnd=0.26782430717848005&exptid=ZHkABGbgb30AAAAIC72MAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGbgb30AAAAIC72MAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /jWsQC86.jpg HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1725984637878.1&ref= HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20LutheranAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1725984637878.3&ref= HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20LutheranAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=wu!&dn=AFWU&cc=1&r=&pu=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran HTTP/1.1Host: de.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=NEZ+Lmbgb333KZLeVeB0Lg==; pids=%5B%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1725984637878%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A2%2C%22ts%22%3A1725984637878%7D%5D
Source: global traffic	HTTP traffic detected: GET /b/p?id=wu!&lm=0&ts=1725984636046&dn=AFWU&iso=0&pu=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&t=High%20School%20Football%20Live%20-%20Greendale%20vs%20Milwaukee%20Lutheran HTTP/1.1Host: ic.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=NEZ+Lmbgb333KZLeVeB0Lg==; pids=%5B%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1725984637878%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A2%2C%22ts%22%3A1725984637878%7D%5D
Source: global traffic	HTTP traffic detected: GET /widget/?d=10401725984635D685D944936F64E5C9&nid=300&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&r= HTTP/1.1Host: t.dtscdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?partner=137085098&mapped=10401725984635D685D944936F64E5C9 HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lt/c/3825/lt.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lt/c/16311/sync.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://cdn-tc.33across.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGbgb30AAAAIC72MAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&event_source=dtscout&rnd=0.26782430717848005&exptid=ZHkABGbgb30AAAAIC72MAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGbgb30AAAAIC72MAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /widget/?d=10401725984635D685D944936F64E5C9&nid=300&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&r= HTTP/1.1Host: t.dtscdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=10401725984635D685D944936F64E5C9
Source: global traffic	HTTP traffic detected: GET /?partner=236&icm&cver&gdpr=0&smartmap=1&redirect=ps.eyeota.net%2Fpixel%3Fgdpr%3D0%26gdpr_consent%3D%26pid%3D3b2cb90%26t%3Dgif%26uid%3D%25m HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lt/c/3825/lt.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lt/c/16311/sync.min.js HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?gdpr=0&gdpr_consent=&pid=3b2cb90&t=gif&uid=1b06b4f8f0e4d452 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utsync.ashx?eid=50131&et=13&cid=lr&fp=ZHkABGbgb30AAAAIC72MAw%3D%3D&gdpr=0&gdpr_consent=&return=https%3A%2F%2Fidsync.rlcdn.com%2F395886.gif%3Fpartner_uid%3D%5BPersonID%5D HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /386076.gif?partner_uid=ZHkABGbgb30AAAAIC72MAw%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=1h1y1a7&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?pid=1mpb5m0&t=gif&gdpr=0&gdpr_consent= HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/bounce/?gdpr=0&gdpr_consent=&pid=3b2cb90&t=gif&uid=1b06b4f8f0e4d452 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=191dcb394a5-46de0000010f4e56; SERVERID=20054~DM
Source: global traffic	HTTP traffic detected: GET /395886.gif?partner_uid=3646915315069091854 HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=1h1y1a7&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d; TDCPM=CAEYBSgCMgsIlvG_nLvvqD0QBTgB
Source: global traffic	HTTP traffic detected: GET /pixel/bounce/?pid=1mpb5m0&t=gif&gdpr=0&gdpr_consent= HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
Source: global traffic	HTTP traffic detected: GET /6/map HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CO6UGBIeChoIARCuXxoTMzY0NjkxNTMxNTA2OTA5MTg1NBAAGg0Ig9-BtwYSBQjoBxAAQgBKAA HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=eoJsdBdMNcmD9f6en3GPUemBOgLNz1qh6LEZENe/0jM=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=eye&google_cm&google_sc&google_hm=MlJSR0VDcmVKNWE0ZTNlTHRoeUVZaTdqYXVaOFFQMmg4VVlubjJhNmhLdFU&gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&dc_rc=1&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ttd?uid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGbgb30AAAAIC72MAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /csync.ashx?fp=9ab07dfad034f7723914d4ce2ab29b55dbc36667c21b22244884257e4ed5b600f4cb09cee1a4f8eb&person_id=3646915315069091854&eid=50082 HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pi=3646915315069091854
Source: global traffic	HTTP traffic detected: GET /eyeota?uid=2zNGfM6M0n4nvawNYmpiYRMKrP1tNziyTM96hsIIdUZE&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://t.sharethis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGbgb30AAAAIC72MAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=eye&google_cm=&google_sc=&google_hm=MlJSR0VDcmVKNWE0ZTNlTHRoeUVZaTdqYXVaOFFQMmg4VVlubjJhNmhLdFU&gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&dc_rc=1&dc_mr=5&dc_orig=3b2cb90&referrer_pid=3b2cb90&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ttd?uid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGbgb30AAAAIC72MAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /csync.ashx?fp=9ab07dfad034f7723914d4ce2ab29b55dbc36667c21b22244884257e4ed5b600f4cb09cee1a4f8eb&person_id=3646915315069091854&eid=50082 HTTP/1.1Host: ml314.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pi=3646915315069091854
Source: global traffic	HTTP traffic detected: GET /eyeota?uid=2zNGfM6M0n4nvawNYmpiYRMKrP1tNziyTM96hsIIdUZE&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGbgb30AAAAIC72MAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /match?gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&dc_rc=1&dc_mr=5&dc_orig=3b2cb90&referrer_pid=3b2cb90&google_gid=CAESEApLpYBv_zenZq4oueaADl8&google_cver=1 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
Source: global traffic	HTTP traffic detected: GET /NIXl8QH.jpg HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/dd/id/L2NzaWQvMS9jaWQvMjg0NTA1NDYvdC8w/url/https://ps.eyeota.net/match?bid=1mpjpn0&turn_id=$!{TURN_UUID}&newuser=1&dc_rc=2&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 HTTP/1.1Host: d.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /NIXl8QH.jpg HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?bid=1mpjpn0&turn_id=9140754838064038298&newuser=1&dc_rc=2&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
Source: global traffic	HTTP traffic detected: GET /match?uid=ZuBviAABs8yDBgAa&bid=0rijhbu&dc_rc=3&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90&_test=ZuBviAABs8yDBgAa HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fuid%3D%24UID%26bid%3D2cr76e1%26dc_rc%3D4%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5/c=5436/tp=SVRN/tpid=na/pv=y?https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D5001%263pid%3D%24%7Bprofile_id%7D HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1725984650877 HTTP/1.1Host: api.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/76929?bidder_id=204553&bidder_uuid=na&rnd=1725984650927 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/1540_03681?id=na HTTP/1.1Host: track2.securedvisit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=7002&vxii_pdid=na HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fps.eyeota.net%252Fmatch%253Fuid%253D%2524UID%2526bid%253D2cr76e1%2526dc_rc%253D4%2526dc_mr%253D5%2526dc_orig%253D3b2cb90%2526%2526referrer_pid%253D3b2cb90 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=AGe-chE4gIXCHkuKkLW3ZzUyy0dGVvapTwn6CdVHqWe5yMCgGOxHNpePXVMQldz3xAm-WOL542kLUQGvZmXeINxLYdxevZUFkhuKMwn6pHk.; receive-cookie-deprecation=1; uuid2=5768470956374677316
Source: global traffic	HTTP traffic detected: GET /merge?pid=5&3pid=1qan3v856tzbu&us_privacy=$(US_PRIVACY) HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1
Source: global traffic	HTTP traffic detected: GET /s/76929?bidder_id=204553&bidder_uuid=na&rnd=1725984650927&_li_chk=true&previous_uuid=90fc4aa8e5c94ce0a7cc9ff564524752 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=90fc4aa8-e5c9-4ce0-a7cc-9ff564524752
Source: global traffic	HTTP traffic detected: GET /sync?_reach=1&vxii_pdid=na&vxii_pid=12&vxii_pid1=7002&vxii_rcid=bb6d1780-42bc-4797-8768-f25b0bae1973&vxii_rmax=1 HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImJiNmQxNzgwLTQyYmMtNDc5Ny04NzY4LWYyNWIwYmFlMTk3MyIsImwiOjE3MjU5ODQ2NTI3NzgsInQiOjF9
Source: global traffic	HTTP traffic detected: GET /merge?pid=5001&3pid=3bdb359c63037044d87658cfcb77131 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1
Source: global traffic	HTTP traffic detected: GET /sync/1540_03681?id=na HTTP/1.1Host: track2.securedvisit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Agent/Hints/IIQUniversalID-sync.js HTTP/1.1Host: agent.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://api.intentiq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9
Source: global traffic	HTTP traffic detected: GET /pixel?pid=51md42u&t=ajs&e_pc=3&e_mr=0 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
Source: global traffic	HTTP traffic detected: GET /match?uid=5768470956374677316&bid=2cr76e1&dc_rc=4&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=liveintent&ttd_tpi=1&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d; TDCPM=CAEYBSABKAIyCwiW8b-cu--oPRAFOAE.
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=THROTLE HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /merge?pid=5&3pid=1qan3v856tzbu&us_privacy=%24%28US_PRIVACY%29&dnr=1 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=JTyKAQZH4g9W4GFYRPmN1ske
Source: global traffic	HTTP traffic detected: GET /merge?pid=5001&3pid=3bdb359c63037044d87658cfcb77131&dnr=1 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; ljt_reader=JTyKAQZHM4-7zcR_Qvazq_dw
Source: global traffic	HTTP traffic detected: GET /s/35759?bidder_id=44489&bidder_uuid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CgcKBQgKEOwY; lidid=90fc4aa8-e5c9-4ce0-a7cc-9ff564524752
Source: global traffic	HTTP traffic detected: GET /ups/58773/cms?partner_id=Eyeot&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Agent/Hints/IIQUniversalID-sync.js HTTP/1.1Host: agent.intentiq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=182772995&iiqidtype=2&iiqpcid=820734d2-60db-e66e-29d4-41fda1749e8a&iiqpciddate=1725984653272&tsrnd=585_1725984653273&vrref=https%3A%2F%2Fpxdrop.lijit.com%2F&jsver=5.088&gdpr=0 HTTP/1.1Host: sync.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://api.intentiq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9
Source: global traffic	HTTP traffic detected: GET /pixel?pid=51md42u&t=ajs&e_pc=3&e_mr=0 HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
Source: global traffic	HTTP traffic detected: GET /ups/58691/cms?partner_id=THROTLE HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /merge?pid=5&3pid=1qan3v856tzbu&us_privacy=%24%28US_PRIVACY%29&dnr=1 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; _ljtrtb_5=1qan3v856tzbu; ljt_reader=JTyKAQZH4g9W4GFYRPmN1ske
Source: global traffic	HTTP traffic detected: GET /merge?pid=5001&3pid=3bdb359c63037044d87658cfcb77131&dnr=1 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; _ljtrtb_5=1qan3v856tzbu; _ljtrtb_5001=3bdb359c63037044d87658cfcb77131; ljt_reader=JTyKAQZHM4-7zcR_Qvazq_dw
Source: global traffic	HTTP traffic detected: GET /s/35759?bidder_id=44489&bidder_uuid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d HTTP/1.1Host: i6.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=90fc4aa8-e5c9-4ce0-a7cc-9ff564524752
Source: global traffic	HTTP traffic detected: GET /ups/58773/cms?partner_id=Eyeot&gdpr=0&gdpr_consent=&verify=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBI5v4GYCENH2dhjDonMGKosfW-g1qA4FEgEBAQHB4WbqZtxA0iMA_eMAAA&S=AQAAAjXPHqPvucJVUCdrrqu_DWY
Source: global traffic	HTTP traffic detected: GET /ups/58691/cms?partner_id=THROTLE&verify=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBI9v4GYCEPMnfFxEes9LkDUaE6u1nB8FEgEBAQHB4WbqZtxA0iMA_eMAAA&S=AQAAAtOV8JsgcfZvfG_Sm56cLqc
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=182772995&iiqidtype=2&iiqpcid=820734d2-60db-e66e-29d4-41fda1749e8a&iiqpciddate=1725984653272&tsrnd=585_1725984653273&vrref=https%3A%2F%2Fpxdrop.lijit.com%2F&jsver=5.088&gdpr=&ckls=true&ci=84fU2HUVpr&nc=false&trid=314520096 HTTP/1.1Host: sync.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://api.intentiq.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9; intentIQ=84fU2HUVpr
Source: global traffic	HTTP traffic detected: GET /s/35759?bidder_id=44489&bidder_uuid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d HTTP/1.1Host: i6.liadm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lidid=90fc4aa8-e5c9-4ce0-a7cc-9ff564524752
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=5038&vxii_pdid=y-aNlCHMZE2oRTc9CQhgWXt2sCk_2ZJ6aGgcRwmw--~A HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImJiNmQxNzgwLTQyYmMtNDc5Ny04NzY4LWYyNWIwYmFlMTk3MyIsImwiOjE3MjU5ODQ2NTMzNzksInQiOjF9; sc=eyJpIjoiYmI2ZDE3ODAtNDJiYy00Nzk3LTg3NjgtZjI1YjBiYWUxOTczIiwic2lkIjoic2lkLTQxMDc4MjU0LTZmOGYtMTFlZi1hZmQ3LTAyNDIwYTAwMDRmMyIsIm1zIjoxLCJ0cyI6MSwicHMiOjEsInNwIjo1MDM4LCJwcCI6MSwidHNlIjoxLCJpciI6dHJ1ZSwibHRzZSI6MTcyNTk4NDY1MzM3OSwiXyI6dHJ1ZX0=
Source: global traffic	HTTP traffic detected: GET /match?bid=bhc9gd0&yahoo_ver=2&yahoo_id=y-avDHyJhE2pU7_inbFoc6KAd_kDNVy9CkRxg-~A&gdpr=0 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=182772995&iiqidtype=2&iiqpcid=820734d2-60db-e66e-29d4-41fda1749e8a&iiqpciddate=1725984653272&tsrnd=585_1725984653273&vrref=https%3A%2F%2Fpxdrop.lijit.com%2F&jsver=5.088&gdpr=&ckls=true&ci=84fU2HUVpr&nc=false&trid=314520096 HTTP/1.1Host: sync.intentiq.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9; intentIQ=84fU2HUVpr; ASDT=0; IQPData=137263905#1725984656555#0#1725984656555; CSDT=UEQ6MTEzMDRfMCZVTnpMaXNv; IQMID=137263905#1725984656574; IQadv=1725984656574; intentIQCDate=1725984656561
Source: global traffic	HTTP traffic detected: GET /UtE9eZe.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?bid=bhc9gd0&yahoo_ver=2&yahoo_id=y-avDHyJhE2pU7_inbFoc6KAd_kDNVy9CkRxg-~A&gdpr=0 HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=5038&vxii_pdid=y-aNlCHMZE2oRTc9CQhgWXt2sCk_2ZJ6aGgcRwmw--~A HTTP/1.1Host: thrtle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImJiNmQxNzgwLTQyYmMtNDc5Ny04NzY4LWYyNWIwYmFlMTk3MyIsImwiOjE3MjU5ODQ2NTcwMjgsInQiOjJ9; sc=eyJpIjoiYmI2ZDE3ODAtNDJiYy00Nzk3LTg3NjgtZjI1YjBiYWUxOTczIiwic2lkIjoic2lkLTQzMzQ0YTljLTZmOGYtMTFlZi05ZWQ0LTAyNDIwYTAwMDQyMiIsIm1zIjoxLCJwcyI6MSwic3AiOjUwMzgsInBwIjoxLCJ0c2UiOjEsImx0c2UiOjE3MjU5ODQ2NTMzNzl9
Source: global traffic	HTTP traffic detected: GET /lt/c/3825/optimus_rules.json HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: /Origin: http://football-booster.freevisit1.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i.match?p=b31&redirect=https%3A%2F%2Fthrtle.com%2Fsync%3Fvxii_pid%3D5042%26vxii_pdid%3D%24TF_USER_ID_ENC%24%26vxii_ts%3D3%26_t%3D1725984658&u=bb6d1780-42bc-4797-8768-f25b0bae1973 HTTP/1.1Host: a.tribalfusion.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /UtE9eZe.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /z/i.match?p=b31&redirect=https%3A%2F%2Fthrtle.com%2Fsync%3Fvxii_pid%3D5042%26vxii_pdid%3D%24TF_USER_ID_ENC%24%26vxii_ts%3D3%26_t%3D1725984658&u=bb6d1780-42bc-4797-8768-f25b0bae1973 HTTP/1.1Host: s.tribalfusion.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ANON_ID=a3noeUM0inw9PBmUVHvwrVgoIBYTXMFcea54ZaMgC; ANON_ID_old=a3noeUM0inw9PBmUVHvwrVgoIBYTXMFcea54ZaMgC
Source: global traffic	HTTP traffic detected: GET /lt/c/3825/optimus_rules.json HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BT3f%2Fv%2F%2Fz88AA7z3Plgy7dFi%2BM%2FIuL0eRDL82DiFBVVk%2BZ9CVIFzRw8xo4rs3ndZAFXk8OI5aMa0r3vKjSrS8F8TVeDJ45uGqCL3urRQBS6desSGKvJuCbpNb2YeYEIVAQAwK2BU"; _cc_aud="ABR4nGNgYGBIe5DfwwADrAwMXDNADEat2RBqFojic3cAUfw6%2B4EkAKzGBgM%3D"
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=5042&vxii_pdid=18072662055787220129&vxii_ts=3&_t=1725984658 HTTP/1.1Host: thrtle.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImJiNmQxNzgwLTQyYmMtNDc5Ny04NzY4LWYyNWIwYmFlMTk3MyIsImwiOjE3MjU5ODQ2NTgxMjIsInQiOjN9; sc=eyJpIjoiYmI2ZDE3ODAtNDJiYy00Nzk3LTg3NjgtZjI1YjBiYWUxOTczIiwic2lkIjoic2lkLTQzMzQ0YTljLTZmOGYtMTFlZi05ZWQ0LTAyNDIwYTAwMDQyMiIsIm1zIjoxLCJ0cyI6MSwicHMiOjIsInNwIjo1MDQyLCJwcCI6MiwidHNlIjoyLCJpciI6dHJ1ZSwibHRzZSI6MTcyNTk4NDY1ODEyM30=
Source: global traffic	HTTP traffic detected: GET /6/data HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /lt/shared/2/lt.iframe.html?c=3825 HTTP/1.1Host: tags.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /pixels?src=LTJS&s=7%2C92%2C49%2C136%2C135%2C153%2C33%2C78%2C122%2C26%2C22%2C148%2C116%2C61%2C106%2C104%2C8%2C54%2C100%2C145%2C3%2C2%2C94&c=3825 HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://tags.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /dcm?pid=a8acf3b3-7ede-4e18-8405-edaf41005f97&id=3bdb359c63037044d87658cfcb77131 HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /connectors/lotame/usersync?gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D1389%2Ftp%3DSTSC%2Ftpid%3D%24UUID%2Fgdpr%3D0 HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/UCookieSetPug?gdpr=0&rd=https%3A%2F%2Fsync.crwdcntrl.net%2Fqmap%3Fc%3D240%26tp%3DPUBM%26tpid%3D%23PM_USER_ID%26gdpr%3D0 HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?bid=51mdg9u&uid=3bdb359c63037044d87658cfcb77131&gdpr=0 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=lotameddp&google_hm=M2JkYjM1OWM2MzAzNzA0NGQ4NzY1OGNmY2I3NzEzMQ&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk-Gebn0Hd5mLGjhQdfrUeXXyHSeZ6OCbnE3ZI6fFtZ_Zt63_b5z9KX7UCjPZo
Source: global traffic	HTTP traffic detected: GET /s/19/9.gif?puid=3bdb359c63037044d87658cfcb77131&gdpr=0 HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adscores/g.json?sid=9202507693 HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /connectors/lotame/usersync?cookieQ=1&gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D1389%2Ftp%3DSTSC%2Ftpid%3D%24UUID%2Fgdpr%3D0 HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=d749f97f-6ea6-4942-b1cb-0bef3a6cb3ef#1725984662727
Source: global traffic	HTTP traffic detected: GET /dcm?pid=a8acf3b3-7ede-4e18-8405-edaf41005f97&id=3bdb359c63037044d87658cfcb77131&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A8Ft7vQG6UnTpqRZ8io_U1M\|t
Source: global traffic	HTTP traffic detected: GET /AdServer/UCookieSetPug?gdpr=0&rd=https%3A%2F%2Fsync.crwdcntrl.net%2Fqmap%3Fc%3D240%26tp%3DPUBM%26tpid%3D%23PM_USER_ID%26gdpr%3D0&rdf=1 HTTP/1.1Host: image6.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KTPCACOOKIE=YES
Source: global traffic	HTTP traffic detected: GET /c/19/19/9/1.gif?puid=3bdb359c63037044d87658cfcb77131&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=7fde7386-0d5f-76e7-804e-39dabf23e935#1725984662999#1
Source: global traffic	HTTP traffic detected: GET /s/41715?bidder_id=127211&bidder_uuid=3bdb359c63037044d87658cfcb77131 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=ChIKBQgKEOwYCgkI_____wcQ9hg; lidid=90fc4aa8-e5c9-4ce0-a7cc-9ff564524752
Source: global traffic	HTTP traffic detected: GET /adscores/g.json?sid=9202507693 HTTP/1.1Host: aa.agkn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3ALF1HRF2bdm4XRZ0QMMXbrZwbqbvnhQQS
Source: global traffic	HTTP traffic detected: GET /dcm?pid=a8acf3b3-7ede-4e18-8405-edaf41005f97&id=3bdb359c63037044d87658cfcb77131&dcc=t HTTP/1.1Host: s.amazon-adsystem.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ad-id=A8Ft7vQG6UnTpqRZ8io_U1M; ad-privacy=0
Source: global traffic	HTTP traffic detected: GET /image.sbxx?go=262106&pid=420&xid=3bdb359c63037044d87658cfcb77131 HTTP/1.1Host: global.ib-ibi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=lotame_dmp&google_hm=M2JkYjM1OWM2MzAzNzA0NGQ4NzY1OGNmY2I3NzEzMQ&gdpr=0 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk-Gebn0Hd5mLGjhQdfrUeXXyHSeZ6OCbnE3ZI6fFtZ_Zt63_b5z9KX7UCjPZo
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?st=EYEOTA&rurl=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D9sn4omv%26uid%3D_wfivefivec_%26newuser%3D1%26dc_rc%3D1%26dc_mr%3D5%26dc_orig%3D51mdg9u%26 HTTP/1.1Host: i.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/c=1389/tp=STSC/tpid=d749f97f-6ea6-4942-b1cb-0bef3a6cb3ef-66e06f96-5553/gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=0&url=https%3A%2F%2Fbcp.crwdcntrl.net%2Fqmap%3Fc%3D16236%26tp%3DSMAD%26tpid%3D[sas_uid]%26gdpr%3D0 HTTP/1.1Host: sync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=8h9u11h&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d; TDCPM=CAESGQoKbGl2ZWludGVudBILCPyA4t-l76g9EAUYASABKAIyCwjO9-SMvO-oPRAFOAFaCmxpdmVpbnRlbnRgAg..
Source: global traffic	HTTP traffic detected: GET /s/41715?bidder_id=127211&bidder_uuid=3bdb359c63037044d87658cfcb77131 HTTP/1.1Host: i.liadm.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=ChIKBQgKEOwYCgkI_____wcQ9hg; lidid=90fc4aa8-e5c9-4ce0-a7cc-9ff564524752
Source: global traffic	HTTP traffic detected: GET /qmap?c=240&tp=PUBM&tpid=6CCACE81-3E9F-4932-AE9D-F8064F4F357C&gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /map/c=1811/tp=TBMG/tpid=ZuBviAABs8yDBgAa/gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /image.sbxx?go=262106&pid=420&xid=3bdb359c63037044d87658cfcb77131 HTTP/1.1Host: ib.mookie1.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utsync.ashx?eid=50146&et=0&fp=3bdb359c63037044d87658cfcb77131&gdpr=0 HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pi=3646915315069091854
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=lotame&ttd_tpi=1&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d; TDCPM=CAESGQoKbGl2ZWludGVudBILCPyA4t-l76g9EAUYASABKAIyCwjO9-SMvO-oPRAFOAFaCmxpdmVpbnRlbnRgAg..
Source: global traffic	HTTP traffic detected: GET /ping_match.gif?scc=1&st=EYEOTA&rurl=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D9sn4omv%26uid%3D_wfivefivec_%26newuser%3D1%26dc_rc%3D1%26dc_mr%3D5%26dc_orig%3D51mdg9u%26 HTTP/1.1Host: pm.w55c.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wfivefivec=GkIO9st71SO3sk5
Source: global traffic	HTTP traffic detected: GET /k/264.gif?puid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d&ttl=%%TTL%% HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=7fde7386-0d5f-76e7-804e-39dabf23e935#1725984662999#2; 3pi=19#1725984663905#556237189#3bdb359c63037044d87658cfcb77131; cf=gif; cip=19; cnac=8; car=2; gdpr=0\|
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=0&url=https://bcp.crwdcntrl.net/qmap?c=16236&tp=SMAD&tpid=[sas_uid]&gdpr=0&cklb=1 HTTP/1.1Host: sync.smartadserver.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TestIfCookieP=ok; pbw=%24b%3d16999%3b%24o%3d11100
Source: global traffic	HTTP traffic detected: GET /map/c=1389/tp=STSC/tpid=d749f97f-6ea6-4942-b1cb-0bef3a6cb3ef-66e06f96-5553/gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=LOTAME&partner_device_id=3bdb359c63037044d87658cfcb77131&gdpr=0&partner_url=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10158%2Ftp%3DTPAD%2Ftpid%3D%24%7BTA_DEVICE_ID%7D&ch= HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /utsync.ashx?eid=50146&et=0&fp=3bdb359c63037044d87658cfcb77131&gdpr=0 HTTP/1.1Host: ml314.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pi=3646915315069091854
Source: global traffic	HTTP traffic detected: GET /f2d2e39fc16bc9cc/sync.gif?cbp=tpid&cbk=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10832%2Ftp%3DTRUP HTTP/1.1Host: dmp.truoptik.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/c=10620/tp=TRAD/tpid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d/gdpr=0/gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /sync?nid=lotame&gdpr=0 HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /image.sbxx?go=262106&pid=420&xid=3bdb359c63037044d87658cfcb77131 HTTP/1.1Host: ib.mookie1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=vkrvcngmqwab4tpzrdcywub5; ibkukiuno=s=0f5b6b6d-d380-47a2-a5a4-4ea3abfee606&h=&v=0&l=-8584756222204935465&op=&hl=0&vlu=0&tcs=1&dcc=-8584756222204935465; ibkukinet=137263905=-8584756222204935465
Source: global traffic	HTTP traffic detected: GET /qmap?c=240&tp=PUBM&tpid=6CCACE81-3E9F-4932-AE9D-F8064F4F357C&gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /match?bid=9sn4omv&uid=GkIO9st71SO3sk5&newuser=1&dc_rc=1&dc_mr=5&dc_orig=51mdg9u& HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
Source: global traffic	HTTP traffic detected: GET /load/?p=204&g=260&buid=3bdb359c63037044d87658cfcb77131&j=0&gdpr=0 HTTP/1.1Host: loadus.exelator.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive/check?partner_id=LOTAME&partner_device_id=3bdb359c63037044d87658cfcb77131&gdpr=0&partner_url=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10158%2Ftp%3DTPAD%2Ftpid%3D%24%7BTA_DEVICE_ID%7D&ch= HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1725984665492; TapAd_DID=5a494773-b3c5-4363-89b4-d92c8335b5ac
Source: global traffic	HTTP traffic detected: GET /map/c=1811/tp=TBMG/tpid=ZuBviAABs8yDBgAa/gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /getuid?https://id5-sync.com/c/19/2/7/3.gif?puid=$UID&gdpr=0&gdpr_consent= HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=AGe-chE4gIXCHkuKkLW3ZzUyy0dGVvapTwn6CdVHqWe5yMCgGOxHNpePXVMQldz3xAm-WOL542kLUQGvZmXeINxLYdxevZUFkhuKMwn6pHk.; receive-cookie-deprecation=1; uuid2=5768470956374677316
Source: global traffic	HTTP traffic detected: GET /getuid?gdpr=0&url=https://bcp.crwdcntrl.net/qmap?c=16236&tp=SMAD&tpid=[sas_uid]&gdpr=0&cklb=1 HTTP/1.1Host: sync.smartadserver.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TestIfCookieP=ok; pbw=%24b%3d16999%3b%24o%3d11100; pid=285704107085073378
Source: global traffic	HTTP traffic detected: GET /map/c=10832/tp=TRUP/tpid=b9bdb847e735edc7495bcfea37bdb579 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /qmap?c=6569&tp=STKA&tpid=0-44ef61b2-fe37-563b-497a-08aac775d996$ip$8.46.123.33&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /map/c=10620/tp=TRAD/tpid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d/gdpr=0/gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /r/dd/id/L2NzaWQvMS9jaWQvMzQ4ODM4MC90LzI/dpuid/3bdb359c63037044d87658cfcb77131/url/https://sync.crwdcntrl.net/map/c=10915/tp=TRNN/tpid=$!%7BTURN_UUID%7D/gdpr=0 HTTP/1.1Host: d.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=9140754838064038298
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=tapad&ttd_tpi=1&ttd_puid=5a494773-b3c5-4363-89b4-d92c8335b5ac%252Chttps%25253A%25252F%25252Fsync.crwdcntrl.net%25252Fmap%25252Fc%25253D10158%25252Ftp%25253DTPAD%25252Ftpid%25253D5a494773-b3c5-4363-89b4-d92c8335b5ac%252C&gdpr=0&gdpr_consent= HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d; TDCPM=CAESGQoKbGl2ZWludGVudBILCPyA4t-l76g9EAUYASABKAIyCwiy4aP0vO-oPRAFOAFaBmxvdGFtZWAC
Source: global traffic	HTTP traffic detected: GET /utsync.ashx?eid=50052&et=0&fp=2T2-mNqUG1drQPluPV9nu6x6V21WgW7nwuat1VybN494&gdpr=0&gdpr_consent=&return=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dr8hrb20%26uid%3Dnil%26dc_rc%3D2%26dc_mr%3D5%26dc_orig%3D51mdg9u%26 HTTP/1.1Host: ml314.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: pi=3646915315069091854
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D281%2Ftp%3DANXS%2Ftpid%3D%24UID%2Fgdpr%3D0%2Frand=576822339 HTTP/1.1Host: secure.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=AGe-chE4gIXCHkuKkLW3ZzUyy0dGVvapTwn6CdVHqWe5yMCgGOxHNpePXVMQldz3xAm-WOL542kLUQGvZmXeINxLYdxevZUFkhuKMwn6pHk.; receive-cookie-deprecation=1; uuid2=5768470956374677316
Source: global traffic	HTTP traffic detected: GET /c/19/2/7/3.gif?puid=5768470956374677316&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=7fde7386-0d5f-76e7-804e-39dabf23e935#1725984662999#2; 3pi=19#1725984663905#556237189#3bdb359c63037044d87658cfcb77131\|264#1725984665487#16965150#f0a1ede8-7d6d-410e-a1ab-ae4515680a4d
Source: global traffic	HTTP traffic detected: GET /map/c=10832/tp=TRUP/tpid=b9bdb847e735edc7495bcfea37bdb579 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=121998&dpuuid=3bdb359c63037044d87658cfcb77131&gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D9828%2Ftp%3DADBE%2Ftpid%3D%24%7BDD_UUID%7D%2Fgdpr=0 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qmap?c=6569&tp=STKA&tpid=0-44ef61b2-fe37-563b-497a-08aac775d996$ip$8.46.123.33&gdpr=0&gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /idsync/ex/receive?partner_id=1830&partner_device_id=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d&ttd_puid=5a494773-b3c5-4363-89b4-d92c8335b5ac%2Chttps%253A%252F%252Fsync.crwdcntrl.net%252Fmap%252Fc%253D10158%252Ftp%253DTPAD%252Ftpid%253D5a494773-b3c5-4363-89b4-d92c8335b5ac%2C HTTP/1.1Host: pixel.tapad.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TapAd_TS=1725984665492; TapAd_DID=5a494773-b3c5-4363-89b4-d92c8335b5ac; TapAd_3WAY_SYNCS=
Source: global traffic	HTTP traffic detected: GET /map/c=10915/tp=TRNN/tpid=9140754838064038298/gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /match?bid=r8hrb20&uid=nil&dc_rc=2&dc_mr=5&dc_orig=51mdg9u& HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
Source: global traffic	HTTP traffic detected: GET /map/c=281/tp=ANXS/tpid=5768470956374677316/gdpr=0/rand=576822339 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /r/dd/id/L2NzaWQvMS9jaWQvMTc0ODM4ODY2Ni90LzI/dpuid/ID5-6fe5uDkUeg6pvrVeqEHERleL9xsJupDlKU665UueJw/url/https%3A%2F%2Fid5-sync.com%2Fc%2F19%2F224%2F6%2F4.gif%3Fpuid%3D%24%21%7BTURN_UUID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: d.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=9140754838064038298
Source: global traffic	HTTP traffic detected: GET /demconf.jpg?et:ibs%7cdata:dpid=121998&dpuuid=3bdb359c63037044d87658cfcb77131&gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D9828%2Ftp%3DADBE%2Ftpid%3D%24%7BDD_UUID%7D%2Fgdpr=0 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=89173485197164091184073779632394813746
Source: global traffic	HTTP traffic detected: GET /map/c=10158/tp=TPAD/tpid=5a494773-b3c5-4363-89b4-d92c8335b5ac HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /map/c=6466/tp=ADFM/tpid=4076780037107709958/gdpr=/gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /map/c=10915/tp=TRNN/tpid=9140754838064038298/gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9202273308&_puid=2U9ULEsvsFvlgF5nYotK0vjQmUHiC5XKBmCmA8FnLX-0&_redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dc9gd69u%26dc_rc%3D3%26dc_mr%3D5%26dc_orig%3D51mdg9u%26%26uid%3D HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3ALF1HRF2bdm4XRZ0QMMXbrZwbqbvnhQQS
Source: global traffic	HTTP traffic detected: GET /map/c=281/tp=ANXS/tpid=5768470956374677316/gdpr=0/rand=576822339 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /c/19/224/6/4.gif?puid=9140754838064038298&gdpr=0&gdpr_consent=&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=7fde7386-0d5f-76e7-804e-39dabf23e935#1725984662999#2; 3pi=2#1725984667309#-1248441247#5768470956374677316\|19#1725984663905#556237189#3bdb359c63037044d87658cfcb77131\|264#1725984665487#16965150#f0a1ede8-7d6d-410e-a1ab-ae4515680a4d
Source: global traffic	HTTP traffic detected: GET /map/c=9828/tp=ADBE/tpid=89173485197164091184073779632394813746/gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /map/c=10158/tp=TPAD/tpid=5a494773-b3c5-4363-89b4-d92c8335b5ac HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /map/c=6466/tp=ADFM/tpid=4076780037107709958/gdpr=/gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /pixel/10751/?che=&ip=8.46.123.33&l1=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dc9gd69u%26uid%3D216623105001003118731 HTTP/1.1Host: d.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3ALF1HRF2bdm4XRZ0QMMXbrZwbqbvnhQQS
Source: global traffic	HTTP traffic detected: GET /map/c=9828/tp=ADBE/tpid=89173485197164091184073779632394813746/gdpr=0 HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /match?bid=c9gd69u&uid=216623105001003118731 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
Source: global traffic	HTTP traffic detected: GET /c/19/136/5/5.gif?puid=ZuBviAABs8yDBgAa&gdpr=0&gdpr_consent= HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=7fde7386-0d5f-76e7-804e-39dabf23e935#1725984662999#2; 3pi=224#1725984669114#784924303#9140754838064038298\|2#1725984667309#-1248441247#5768470956374677316\|19#1725984663905#556237189#3bdb359c63037044d87658cfcb77131\|264#1725984665487#16965150#f0a1ede8-7d6d-410e-a1ab-ae4515680a4d
Source: global traffic	HTTP traffic detected: GET /match?bid=c9gd69u&uid=216623105001003118731 HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
Source: global traffic	HTTP traffic detected: GET /id5?uid=ID5-6fe5uDkUeg6pvrVeqEHERleL9xsJupDlKU665UueJw&gdpr=0&gdpr_consent=&rurl=https%3A%2F%2Fid5-sync.com%2Fa%2F19%2F121%2F4%2F6%2Fgif%2F0%2F0%2F0%2F0%2F HTTP/1.1Host: sync.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGbgb30AAAAIC72MAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /a/19/121/4/6/gif/0/0/0/0/ZHkABGbgb30AAAAIC72MAw== HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=7fde7386-0d5f-76e7-804e-39dabf23e935#1725984662999#2; 3pi=224#1725984669114#784924303#9140754838064038298\|2#1725984667309#-1248441247#5768470956374677316\|19#1725984663905#556237189#3bdb359c63037044d87658cfcb77131\|264#1725984665487#16965150#f0a1ede8-7d6d-410e-a1ab-ae4515680a4d\|136#1725984670842#-818453539
Source: global traffic	HTTP traffic detected: GET /map/c=1882/tp=BKAI/gdpr=0/gdpr_consent=?https://tags.bluekai.com/site/5907?limit=0&id=${masked_profileid}&redir=https%3A%2F%2Fid5-sync.com%2Fc%2F19%2F321%2F3%2F7.gif%3Fpuid%3D%24_BK_UUID%26gdpr%3D0%26gdpr_consent%3D&gdpr_consent=&gdpr=0 HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /stats/0.php?4891773&@f16&@g0&@h2&@i1&@j1725984674016&@k40473&@l2&@mRegister&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:73742532&@b3:1725984674&@b4:js15_as.js&@b5:-240&@a-_0.2.1&@vhttp%3A%2F%2Ffootball-booster.freevisit1.com%2Fregister-hsfootball.php&@w HTTP/1.1Host: s4.histats.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /e/?v=1a&pid=5200&site=1&l=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fregister-hsfootball.php&j= HTTP/1.1Host: e.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1725984635; l=10401725984635D685D944936F64E5C9; m=2; st=2
Source: global traffic	HTTP traffic detected: GET /c/19/321/3/7.gif?puid=$_BK_UUID HTTP/1.1Host: id5-sync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: id5=7fde7386-0d5f-76e7-804e-39dabf23e935#1725984662999#2; 3pi=224#1725984669114#784924303#9140754838064038298\|2#1725984667309#-1248441247#5768470956374677316\|19#1725984663905#556237189#3bdb359c63037044d87658cfcb77131\|264#1725984665487#16965150#f0a1ede8-7d6d-410e-a1ab-ae4515680a4d\|136#1725984670842#-818453539\|121#1725984672871#2050451965
Source: global traffic	HTTP traffic detected: GET /stats/0.php?4891773&@f16&@g0&@h2&@i1&@j1725984674016&@k40473&@l2&@mRegister&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:73742532&@b3:1725984674&@b4:js15_as.js&@b5:-240&@a-_0.2.1&@vhttp%3A%2F%2Ffootball-booster.freevisit1.com%2Fregister-hsfootball.php&@w HTTP/1.1Host: s4.histats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=football-booster.freevisit1.com&_ss=1mx4vkpben&_pv=2&_ls=40&_cc=us&_pl=d&_b=chrome%40117&_cbid=35m8&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1725984635; l=10401725984635D685D944936F64E5C9; m=3; st=3
Source: global traffic	HTTP traffic detected: GET /widget/?d=10401725984635D685D944936F64E5C9&nid=300&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fregister-hsfootball.php&r= HTTP/1.1Host: t.dtscdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=10401725984635D685D944936F64E5C9
Source: global traffic	HTTP traffic detected: GET /b/p?id=wu!&lm=0&ts=1725984675539&dn=AFWU&iso=0&pu=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fregister-hsfootball.php&t=Register HTTP/1.1Host: ic.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/register-hsfootball.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=NEZ+Lmbgb333KZLeVeB0Lg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1725984637878%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A2%2C%22ts%22%3A1725984637878%7D%5D
Source: global traffic	HTTP traffic detected: GET /?partner=137085098&mapped=10401725984635D685D944936F64E5C9 HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /5/c=3825/tp=DTSC/tpid=10401725984635D685D944936F64E5C9 HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGbgb30AAAAIC72MAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=wu!&dn=AFWU&cc=1&r=&pu=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fregister-hsfootball.php HTTP/1.1Host: de.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://football-booster.freevisit1.com/register-hsfootball.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=NEZ+Lmbgb333KZLeVeB0Lg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1725984637878%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A2%2C%22ts%22%3A1725984637878%7D%5D
Source: global traffic	HTTP traffic detected: GET /e/?v=1a&pid=5200&site=1&l=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fregister-hsfootball.php&j= HTTP/1.1Host: e.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1725984635; l=10401725984635D685D944936F64E5C9; m=3; st=3
Source: global traffic	HTTP traffic detected: GET /pv/?_a=v&_h=football-booster.freevisit1.com&_ss=1mx4vkpben&_pv=2&_ls=40&_cc=us&_pl=d&_b=chrome%40117&_cbid=35m8&_cb=_dtspv.c HTTP/1.1Host: t.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1725984635; l=10401725984635D685D944936F64E5C9; m=3; st=3
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=lotame&ttd_tpi=1&gdpr=0&gdpr_consent=&id5=ID5-6fe5uDkUeg6pvrVeqEHERleL9xsJupDlKU665UueJw HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d; TDCPM=CAESGQoKbGl2ZWludGVudBILCPyA4t-l76g9EAUSFAoFdGFwYWQSCwjYrpbZpu-oPRAFGAEgASgCMgsIpqSZhr3vqD0QBTgBWgV0YXBhZGAC
Source: global traffic	HTTP traffic detected: GET /widget/?d=10401725984635D685D944936F64E5C9&nid=300&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fregister-hsfootball.php&r= HTTP/1.1Host: t.dtscdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=10401725984635D685D944936F64E5C9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=xksw9la&ttd_tpi=1&gdpr=0 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d; TDCPM=CAESGQoKbGl2ZWludGVudBILCPyA4t-l76g9EAUSFAoFdGFwYWQSCwjYrpbZpu-oPRAFGAEgASgCMgsIpqSZhr3vqD0QBTgBWgV0YXBhZGAC
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fregister-hsfootball.php&event_source=dtscout&rnd=0.8260556535268637&exptid=ZHkABGbgb30AAAAIC72MAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGbgb30AAAAIC72MAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /ps/?tt=iframe&pid=1198&us_privacy=&random=1725984677676.4 HTTP/1.1Host: dp2.33across.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://football-booster.freevisit1.com/register-hsfootball.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/c=10620/tp=TRAD/tpid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d/gdpr=0/gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bcp.crwdcntrl.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1725984677676.1 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/register-hsfootball.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=NEZ%2BLmbgb333KZLeVeB0Lg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fregister-hsfootball.php&us_privacy=&cache_buster=1725984677676.3 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/register-hsfootball.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=wu!&dn=AFWU&cc=1&r=&pu=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fregister-hsfootball.php HTTP/1.1Host: de.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=NEZ+Lmbgb333KZLeVeB0Lg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1725984677676%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1725984637878%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A2%2C%22ts%22%3A1725984677676%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22cb5617b0e3%22%2C%22f%22%3A1%2C%22ts%22%3A1725984677676%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A2%2C%22ts%22%3A1725984677676%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A3%2C%22ts%22%3A1725984677676%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1725984677676%7D%5D
Source: global traffic	HTTP traffic detected: GET /b/p?id=wu!&lm=0&ts=1725984675539&dn=AFWU&iso=0&pu=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fregister-hsfootball.php&t=Register HTTP/1.1Host: ic.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=NEZ+Lmbgb333KZLeVeB0Lg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1725984677676%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1725984637878%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A2%2C%22ts%22%3A1725984677676%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22cb5617b0e3%22%2C%22f%22%3A1%2C%22ts%22%3A1725984677676%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A2%2C%22ts%22%3A1725984677676%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A3%2C%22ts%22%3A1725984677676%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1725984677676%7D%5D
Source: global traffic	HTTP traffic detected: GET /?partner=147&mapped=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d&icm&gdpr=0&gdpr_consent=&cver HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGbgb30AAAAIC72MAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /5/c=3825/tp=DTSC/tpid=10401725984635D685D944936F64E5C9 HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1725984677676.6&ref= HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/register-hsfootball.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fregister-hsfootball.php&event_source=dtscout&rnd=0.8260556535268637&exptid=ZHkABGbgb30AAAAIC72MAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGbgb30AAAAIC72MAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /map/c=10620/tp=TRAD/tpid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d/gdpr=0/gdpr_consent= HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /adscores/rem.pixel?sid=9112301738&us_privacy=&33random=1725984677676.5 HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/register-hsfootball.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3ALF1HRF2bdm4XRZ0QMMXbrZwbqbvnhQQS; u=C\|0AAAAAAAALnMsHQAAAAAA
Source: global traffic	HTTP traffic detected: GET /?partner=282&icm&cver&gdpr=0&smartmap=1&redirect=stags.bluekai.com%2Fsite%2F52799%3Fid%3D%25m HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adscores/rem.pixel?sid=9112301738&us_privacy=&33random=1725984677676.5 HTTP/1.1Host: aa.agkn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3ALF1HRF2bdm4XRZ0QMMXbrZwbqbvnhQQS; u=C\|0AAAAAAAALnMsHQAAAAAA
Source: global traffic	HTTP traffic detected: GET /match?uid=5142336730419127316&bid=omt9pi0 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/register-hsfootball.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
Source: global traffic	HTTP traffic detected: GET /stats/e.php?4891773&@Ab&@R57951&@w HTTP/1.1Host: s4.histats.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5124322333652738385&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3D0c27f139-f657-4f03-af87-ff8cbd65acfa%253A1725984678.962527%26pid%3D500040%26it%3D1%26iv%3D0c27f139-f657-4f03-af87-ff8cbd65acfa%253A1725984678.962527%26_%3D1725984678.9646904 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/register-hsfootball.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=0c27f139-f657-4f03-af87-ff8cbd65acfa:1725984678.962527; sd-session-id=eyJfcGVybWFuZW50Ijp0cnVlLCJzZXNzaW9uX2lkIjoiMGMyN2YxMzktZjY1Ny00ZjAzLWFmODctZmY4Y2JkNjVhY2ZhOjE3MjU5ODQ2NzguOTYyNTI3In0.ZuBvpg.u-w5RH9tHyUfE-ajQ4Q3AtBzGaE
Source: global traffic	HTTP traffic detected: GET /e/?v=1a&pid=5200&site=1&l=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&j= HTTP/1.1Host: e.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1725984635; l=10401725984635D685D944936F64E5C9; m=4; st=4
Source: global traffic	HTTP traffic detected: GET /match?uid=5142336730419127316&bid=omt9pi0 HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
Source: global traffic	HTTP traffic detected: GET /stats/e.php?4891773&@Ab&@R57951&@w HTTP/1.1Host: s4.histats.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=bluekai&google_cm&google_sc&google_hm=cDNxa2FnUno5OTlzam1PWg%3D%3D HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUk-Gebn0Hd5mLGjhQdfrUeXXyHSeZ6OCbnE3ZI6fFtZ_Zt63_b5z9KX7UCjPZo
Source: global traffic	HTTP traffic detected: GET /widget/?d=10401725984635D685D944936F64E5C9&nid=300&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&r= HTTP/1.1Host: t.dtscdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=10401725984635D685D944936F64E5C9
Source: global traffic	HTTP traffic detected: GET /e/?v=1a&pid=5200&site=1&l=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&j= HTTP/1.1Host: e.dtscout.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: df=1725984635; l=10401725984635D685D944936F64E5C9; m=5; st=5
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=0c27f139-f657-4f03-af87-ff8cbd65acfa%3A1725984678.962527&pid=500040&it=1&iv=0c27f139-f657-4f03-af87-ff8cbd65acfa%3A1725984678.962527&_=1725984678.9646904 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/register-hsfootball.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=ChIKBQgKEOwYCgkI_____wcQ9hg; lidid=90fc4aa8-e5c9-4ce0-a7cc-9ff564524752
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGbgb30AAAAIC72MAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /5/c=3825/tp=DTSC/tpid=10401725984635D685D944936F64E5C9 HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1725984678.9646904&iv=0c27f139-f657-4f03-af87-ff8cbd65acfa:1725984678.962527 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/register-hsfootball.phpAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /widget/?d=10401725984635D685D944936F64E5C9&nid=300&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&r= HTTP/1.1Host: t.dtscdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=10401725984635D685D944936F64E5C9
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=wu!&dn=AFWU&cc=2&r=&pu=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran HTTP/1.1Host: de.tynt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20LutheranAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=NEZ+Lmbgb333KZLeVeB0Lg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1725984677676%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1725984637878%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A4%2C%22ts%22%3A1725984678924%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22cb5617b0e3%22%2C%22f%22%3A2%2C%22ts%22%3A1725984678924%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A4%2C%22ts%22%3A1725984678924%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A4%2C%22ts%22%3A1725984678924%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1725984677676%7D%5D
Source: global traffic	HTTP traffic detected: GET /?partner=137085098&mapped=10401725984635D685D944936F64E5C9 HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pd/dtscout HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGbgb30AAAAIC72MAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /5/c=3825/tp=DTSC/tpid=10401725984635D685D944936F64E5C9 HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1725984678.9646904&iv=0c27f139-f657-4f03-af87-ff8cbd65acfa:1725984678.962527 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: did=hdw_hOY400_jndDK; didts=1725984683; nnls=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /deb/v2?id=wu!&dn=AFWU&cc=2&r=&pu=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran HTTP/1.1Host: de.tynt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=NEZ+Lmbgb333KZLeVeB0Lg==; pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A2%2C%22ts%22%3A1725984677676%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1725984637878%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A6%2C%22ts%22%3A1725984683334%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22cb5617b0e3%22%2C%22f%22%3A3%2C%22ts%22%3A1725984683334%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A6%2C%22ts%22%3A1725984683334%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A5%2C%22ts%22%3A1725984683334%7D%2C%7B%22p%22%3A%227361b0e8e4%22%2C%22f%22%3A1%2C%22ts%22%3A1725984677676%7D%5D
Source: global traffic	HTTP traffic detected: GET /t/clk?id=bgtMmIVnVc6zp4FV&s1=pecinta%20sholawat&s2=pecinta%20sholawat HTTP/1.1Host: api.powerafftrky.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t/clk?id=QRI80sQlSRod0cm&s1=pecinta%20sholawat&s2=pecinta%20sholawat&rl=M72gB&redirect-from=bgtMmIVnVc6zp4FV&rcode=R01&rseq=R01 HTTP/1.1Host: api.powerafftrky.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ydt_72aa7e49d0184dc5b640b72f927f5822="[]:1so3Sf:mZw8mDIBOxMvUW_tR55y1IeSvm8"
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&event_source=dtscout&rnd=0.01281231268995775&exptid=ZHkABGbgb30AAAAIC72MAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGbgb30AAAAIC72MAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /adscores/rem.pixel?sid=9112301738&us_privacy=&33random=1725984683334.1 HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20LutheranAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3ALF1HRF2bdm4XRZ0QMMXbrZwbqbvnhQQS; u=C\|0AAAAAAAALnMsHQAAAAAA
Source: global traffic	HTTP traffic detected: GET /?partner=109&icm&cver&gdpr=0&smartmap=1&redirect=tags.bluekai.com%2Fsite%2F33141%3F%26id%3D%25m HTTP/1.1Host: pixel.onaudience.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t/clk?id=qMHYEZQT7WSvn3tY&s1=46e1fe29-1a9b-46f3-b58f-9a54bdf046ed&s2=1576&s7=pecinta%20sholawat&s8= HTTP/1.1Host: go.greenlinknow.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/1540_03681?id=JTyKAQZHM4-7zcR_Qvazq_dw HTTP/1.1Host: track2.securedvisit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=7002&vxii_pdid=JTyKAQZHM4-7zcR_Qvazq_dw HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImJiNmQxNzgwLTQyYmMtNDc5Ny04NzY4LWYyNWIwYmFlMTk3MyIsImwiOjE3MjU5ODQ2NjAxODQsInQiOjR9; sc=eyJpIjoiYmI2ZDE3ODAtNDJiYy00Nzk3LTg3NjgtZjI1YjBiYWUxOTczIiwic2lkIjoic2lkLTQ1MTVmNzVlLTZmOGYtMTFlZi05ZWQ0LTAyNDIwYTAwMDQyMiIsIm1zIjoxLCJwcyI6Miwic3AiOjUwNDIsInBwIjoyLCJ0c2UiOjIsImx0c2UiOjE3MjU5ODQ2NTgxMjN9
Source: global traffic	HTTP traffic detected: GET /dpx?cid=11411&us_privacy=&33random=1725984683334.2&ref= HTTP/1.1Host: i.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20LutheranAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adscores/rem.pixel?sid=9112301738&us_privacy=&33random=1725984683334.1 HTTP/1.1Host: aa.agkn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3ALF1HRF2bdm4XRZ0QMMXbrZwbqbvnhQQS; u=C\|0AAAAAAAALnMsHQAAAAAA
Source: global traffic	HTTP traffic detected: GET /s/76929?bidder_id=204553&bidder_uuid=JTyKAQZHM4-7zcR_Qvazq_dw&rnd=1725984685767 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=ChIKBQgKEOwYCgkI_____wcQ9hg; lidid=90fc4aa8-e5c9-4ce0-a7cc-9ff564524752
Source: global traffic	HTTP traffic detected: GET /pd/dtscout?_t_=px&url=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&event_source=dtscout&rnd=0.01281231268995775&exptid=ZHkABGbgb30AAAAIC72MAw%3D%3D&fcmp=false HTTP/1.1Host: pd.sharethis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __stid=ZHkABGbgb30AAAAIC72MAw==; __stidv=2
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1725984683334.3 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20LutheranAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1725984685757 HTTP/1.1Host: api.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9; intentIQ=84fU2HUVpr; ASDT=0; IQMID=137263905#1725984656574; IQadv=1725984656574; intentIQCDate=1725984656561; CSDT=UEQ6MTEzMDRfMCZVTnpMakFR; IQPData=137263905#1725984657656#0#1725984656555
Source: global traffic	HTTP traffic detected: GET /lj_match?r=1725984685757 HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1725984683334.5 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20LutheranAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=NEZ%2BLmbgb333KZLeVeB0Lg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&us_privacy=&cache_buster=1725984683334.4 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20LutheranAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=0c27f139-f657-4f03-af87-ff8cbd65acfa:1725984678.962527; sd-session-id=.eJwNzE0KwyAQQOG7zDqWOOPP6GWCNQ5IG1tismnI3evywce7YPmWfUuttAPisZ9lgvyuozrEC3r9beUFEaxGQ4hE5Cx6YmIL9wS99F4_banrMHNGL5qCEme9MjKTSsJeiXB-rs6mLClqjzawcZ4fweF4wf0HlS8mEw.ZuBvqQ.qGix4qxlyXcLyTgPOCaNdguGc0g
Source: global traffic	HTTP traffic detected: GET /sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=NEZ%2BLmbgb333KZLeVeB0Lg%3D%3D&pcat=&pdev=&pctry=US&referrer=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&us_privacy=&cache_buster=1725984683334.6 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20LutheranAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=0c27f139-f657-4f03-af87-ff8cbd65acfa:1725984678.962527; sd-session-id=.eJwNzE0KwyAQQOG7zDqWOOPP6GWCNQ5IG1tismnI3evywce7YPmWfUuttAPisZ9lgvyuozrEC3r9beUFEaxGQ4hE5Cx6YmIL9wS99F4_banrMHNGL5qCEme9MjKTSsJeiXB-rs6mLClqjzawcZ4fweF4wf0HlS8mEw.ZuBvqQ.qGix4qxlyXcLyTgPOCaNdguGc0g
Source: global traffic	HTTP traffic detected: GET /en_us/sport-now4?&subid=e867b4a6-d17c-4afb-a008-7068b00cf775&networkid=200749&publisher=1576&isNewTr=1&stream=&subsource=pecinta%20sholawat&sign=5BE114F181BE643EB22EAD33C755E020 HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync/1540_03681?id=JTyKAQZHM4-7zcR_Qvazq_dw HTTP/1.1Host: track2.securedvisit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /connectors/throtle/usersync?redir=https%3A%2F%2Fthrtle.com%2Fsync%3Fvxii_pid%3D5026%26vxii_pdid%3D%7BuserId%7D%26vxii_ts%3D5%26_t%3D1725984687%26_reach%3D1 HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=d749f97f-6ea6-4942-b1cb-0bef3a6cb3ef#1725984662727; _ssuma=eyI3IjoxNzI1OTg0NjYzMzIxfQ
Source: global traffic	HTTP traffic detected: GET /connectors/eyeota/usersync?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dm51mhg1%26uid%3D%7BuserId%7D HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20LutheranAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=d749f97f-6ea6-4942-b1cb-0bef3a6cb3ef#1725984662727; _ssuma=eyI3IjoxNzI1OTg0NjYzMzIxfQ
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=bluekai HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d; TDCPM=CAESGQoKbGl2ZWludGVudBILCPyA4t-l76g9EAUSFAoFdGFwYWQSCwjYrpbZpu-oPRAFGAEgASgCMgsI6uzk773vqD0QBTgBWgd4a3N3OWxhYAI.
Source: global traffic	HTTP traffic detected: GET /r/dd/id/L21rdC8xOTcxL2NpZC8xNzQ5ODczMjc1L3QvMg/url/https://i.liadm.com/s/53233?bidder_id=183658&bidder_uuid=$!%7BTURN_UUID%7D HTTP/1.1Host: d.turn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uid=9140754838064038298
Source: global traffic	HTTP traffic detected: GET /merge?pid=2&3pid=D3906400314B4851A32EF9C9F854F2C1 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; _ljtrtb_5=1qan3v856tzbu; _ljtrtb_5001=3bdb359c63037044d87658cfcb77131; ljtrtb=eJyrVjI1MDBUslIyTkpJMja1TDYzNjA2NzAxSbEwNzO1SE5LTjI3NzQ2VNJRMgWqMixMzDMuszA1K6lKKlWqBQDeAxAn; ljt_reader=JTyKAQZHM4-7zcR_Qvazq_dw
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gametimepulse.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://gametimepulse.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /match?bid=m51mhg1&uid=d749f97f-6ea6-4942-b1cb-0bef3a6cb3ef-66e06f96-5553 HTTP/1.1Host: ps.eyeota.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20LutheranAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
Source: global traffic	HTTP traffic detected: GET /assets/hl-347bfac4.js HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gametimepulse.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://gametimepulse.com/en_us/sport-now4?&subid=e867b4a6-d17c-4afb-a008-7068b00cf775&networkid=200749&publisher=1576&isNewTr=1&stream=&subsource=pecinta%20sholawat&sign=5BE114F181BE643EB22EAD33C755E020Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5124322333652738385&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3D0c27f139-f657-4f03-af87-ff8cbd65acfa%253A1725984678.962527%26pid%3D500040%26it%3D1%26iv%3D0c27f139-f657-4f03-af87-ff8cbd65acfa%253A1725984678.962527%26_%3D1725984688.1257787 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20LutheranAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=0c27f139-f657-4f03-af87-ff8cbd65acfa:1725984678.962527; sd-session-id=.eJwNzE0KwyAQQOG7zDqWOOPP6GWCNQ5IG1tismnI3evywce7YPmWfUuttAPisZ9lgvyuozrEC3r9beUFEaxGQ4hE5Cx6YmIL9wS99F4_banrMHNGL5qCEme9MjKTSsJeiXB-rs6mLClqjzawcZ4fweF4wf0HlS8mEw.ZuBvsA.DJx_L4l8KgbfsYPvVaU649vR5tI
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5124322333652738385&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3D0c27f139-f657-4f03-af87-ff8cbd65acfa%253A1725984678.962527%26pid%3D500040%26it%3D1%26iv%3D0c27f139-f657-4f03-af87-ff8cbd65acfa%253A1725984678.962527%26_%3D1725984688.1525216 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20LutheranAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=0c27f139-f657-4f03-af87-ff8cbd65acfa:1725984678.962527; sd-session-id=.eJwNzE0KwyAQQOG7zDqWOOPP6GWCNQ5IG1tismnI3evywce7YPmWfUuttAPisZ9lgvyuozrEC3r9beUFEaxGQ4hE5Cx6YmIL9wS99F4_banrMHNGL5qCEme9MjKTSsJeiXB-rs6mLClqjzawcZ4fweF4wf0HlS8mEw.ZuBvsA.DJx_L4l8KgbfsYPvVaU649vR5tI
Source: global traffic	HTTP traffic detected: GET /match?bid=m51mhg1&uid=d749f97f-6ea6-4942-b1cb-0bef3a6cb3ef-66e06f96-5553 HTTP/1.1Host: ps.eyeota.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=0c27f139-f657-4f03-af87-ff8cbd65acfa%3A1725984678.962527&pid=500040&it=1&iv=0c27f139-f657-4f03-af87-ff8cbd65acfa%3A1725984678.962527&_=1725984688.1257787 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20LutheranAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=ChoKBQgKEOwYCgkI_____wcQ9hgKBgjSARDsGA; lidid=90fc4aa8-e5c9-4ce0-a7cc-9ff564524752
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=0c27f139-f657-4f03-af87-ff8cbd65acfa%3A1725984678.962527&pid=500040&it=1&iv=0c27f139-f657-4f03-af87-ff8cbd65acfa%3A1725984678.962527&_=1725984688.1525216 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20LutheranAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=ChoKBQgKEOwYCgkI_____wcQ9hgKBgjSARDsGA; lidid=90fc4aa8-e5c9-4ce0-a7cc-9ff564524752
Source: global traffic	HTTP traffic detected: GET /visit/get-data?landingId=8661&subid=e867b4a6-d17c-4afb-a008-7068b00cf775&networkid=200749&publisher=1576&isNewTr=1&stream=&subsource=pecinta+sholawat&sign=5BE114F181BE643EB22EAD33C755E020 HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /baggage: sentry-environment=production,sentry-public_key=ea92c90613274edc9285425b24e28c74,sentry-trace_id=789cd7c3f8a84291b999df26c6e6a4d7,sentry-sample_rate=0.1,sentry-sampled=falsesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sentry-trace: 789cd7c3f8a84291b999df26c6e6a4d7-961472a7ca6299af-0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gametimepulse.com/en_us/sport-now4?&subid=e867b4a6-d17c-4afb-a008-7068b00cf775&networkid=200749&publisher=1576&isNewTr=1&stream=&subsource=pecinta%20sholawat&sign=5BE114F181BE643EB22EAD33C755E020Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gametimepulse.com/en_us/sport-now4?&subid=e867b4a6-d17c-4afb-a008-7068b00cf775&networkid=200749&publisher=1576&isNewTr=1&stream=&subsource=pecinta%20sholawat&sign=5BE114F181BE643EB22EAD33C755E020Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/hl-347bfac4.js HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1725984688.1257787&iv=0c27f139-f657-4f03-af87-ff8cbd65acfa:1725984678.962527 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20LutheranAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: did=hdw_hOY400_jndDK; didts=1725984683; nnls=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1725984688.1525216&iv=0c27f139-f657-4f03-af87-ff8cbd65acfa:1725984678.962527 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20LutheranAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: did=hdw_hOY400_jndDK; didts=1725984683; nnls=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1725984688.1257787&iv=0c27f139-f657-4f03-af87-ff8cbd65acfa:1725984678.962527 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: did=hdw_hOY400_jndDK; didts=1725984683; nnls=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1725984688.1525216&iv=0c27f139-f657-4f03-af87-ff8cbd65acfa:1725984678.962527 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: did=hdw_hOY400_jndDK; didts=1725984683; nnls=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/hl-f95c6502.js HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gametimepulse.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Source: global traffic	HTTP traffic detected: GET /assets/hl-1d626e0c.js HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gametimepulse.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Source: global traffic	HTTP traffic detected: GET /assets/hl-6c0c41ea.js HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gametimepulse.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://gametimepulse.com/assets/hl-347bfac4.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Source: global traffic	HTTP traffic detected: GET /assets/hl-c3ed2271.js HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gametimepulse.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Source: global traffic	HTTP traffic detected: GET /assets/hl-35a77ba0.js HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gametimepulse.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Source: global traffic	HTTP traffic detected: GET /assets/hl-de833af9.js HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gametimepulse.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Source: global traffic	HTTP traffic detected: GET /visit/get-data?landingId=8661&subid=e867b4a6-d17c-4afb-a008-7068b00cf775&networkid=200749&publisher=1576&isNewTr=1&stream=&subsource=pecinta+sholawat&sign=5BE114F181BE643EB22EAD33C755E020 HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Source: global traffic	HTTP traffic detected: GET /sync/1540_03681?id=JTyKAQZHM4-7zcR_Qvazq_dw HTTP/1.1Host: track2.securedvisit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lj_match?r=1725984691537 HTTP/1.1Host: um.simpli.fiConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: suid=D3906400314B4851A32EF9C9F854F2C1
Source: global traffic	HTTP traffic detected: GET /profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1725984691538 HTTP/1.1Host: api.intentiq.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IQver=1.9; intentIQ=84fU2HUVpr; ASDT=0; IQMID=137263905#1725984656574; IQadv=1725984656574; intentIQCDate=1725984656561; CSDT=UEQ6MTEzMDRfMCZVTnpMakFR; IQPData=137263905#1725984657656#0#1725984656555
Source: global traffic	HTTP traffic detected: GET /scripts/push/script/02eyoyxdkz?url=gametimepulse.com HTTP/1.1Host: secureanalytic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gametimepulse.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/hl-d98910d4.css HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gametimepulse.com/en_us/sport-now4?&subid=e867b4a6-d17c-4afb-a008-7068b00cf775&networkid=200749&publisher=1576&isNewTr=1&stream=&subsource=pecinta%20sholawat&sign=5BE114F181BE643EB22EAD33C755E020Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Source: global traffic	HTTP traffic detected: GET /assets/hl-f95c6502.js HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Source: global traffic	HTTP traffic detected: GET /assets/hl-6c0c41ea.js HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Source: global traffic	HTTP traffic detected: GET /assets/hl-ab41fdaa.js HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gametimepulse.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Source: global traffic	HTTP traffic detected: GET /assets/hl-1d626e0c.js HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Source: global traffic	HTTP traffic detected: GET /assets/hl-de833af9.js HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Source: global traffic	HTTP traffic detected: GET /assets/hl-c3ed2271.js HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Source: global traffic	HTTP traffic detected: GET /prod/images/ecd315d794b5b9c0ec3cd15a1589747c.png HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gametimepulse.com/en_us/sport-now4?&subid=e867b4a6-d17c-4afb-a008-7068b00cf775&networkid=200749&publisher=1576&isNewTr=1&stream=&subsource=pecinta%20sholawat&sign=5BE114F181BE643EB22EAD33C755E020Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Source: global traffic	HTTP traffic detected: GET /assets/hl-35a77ba0.js HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Source: global traffic	HTTP traffic detected: GET /s/76929?bidder_id=204553&bidder_uuid=JTyKAQZHM4-7zcR_Qvazq_dw&rnd=1725984691630 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=ChoKBQgKEOwYCgkI_____wcQ9hgKBgjSARDsGA; lidid=90fc4aa8-e5c9-4ce0-a7cc-9ff564524752
Source: global traffic	HTTP traffic detected: GET /sync/1540_03681?id=JTyKAQZHM4-7zcR_Qvazq_dw HTTP/1.1Host: track2.securedvisit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.watchdogsecurity.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /merge?pid=2&3pid=D3906400314B4851A32EF9C9F854F2C1 HTTP/1.1Host: ce.lijit.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; _ljtrtb_5=1qan3v856tzbu; _ljtrtb_5001=3bdb359c63037044d87658cfcb77131; ljtrtb=eJyrVjI1MDBUslIyTkpJMja1TDYzNjA2NzAxSbEwNzO1SE5LTjI3NzQ2VNJRMgWqMixMzDMuszA1K6lKKlWqBQDeAxAn; ljt_reader=JTyKAQZHM4-7zcR_Qvazq_dw
Source: global traffic	HTTP traffic detected: GET /sync?c=0aa2530f29e4f4a05b5d5d9bb35d60c2&p=93c1662463a616a7155169889dd99651&pid=90fc4aa8-e5c9-4ce0-a7cc-9ff564524752 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=0c27f139-f657-4f03-af87-ff8cbd65acfa:1725984678.962527; sd-session-id=.eJwNzE0KwyAQQOG7zDqWOOPP6GWCNQ5IG1tismnI3evywce7YPmWfUuttAPisZ9lgvyuozrEC3r9beUFEaxGQ4hE5Cx6YmIL9wS99F4_banrMHNGL5qCEme9MjKTSsJeiXB-rs6mLClqjzawcZ4fweF4wf0HlS8mEw.ZuBvsg.Gr4PF-SaS1fi03R9STKpiuzCvvc
Source: global traffic	HTTP traffic detected: GET /merge?pid=2&3pid=D3906400314B4851A32EF9C9F854F2C1 HTTP/1.1Host: ce.lijit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: lijitAcc3PC=1; _ljtrtb_5=1qan3v856tzbu; _ljtrtb_5001=3bdb359c63037044d87658cfcb77131; ljtrtb=eJyrVjI1MDBUslIyTkpJMja1TDYzNjA2NzAxSbEwNzO1SE5LTjI3NzQ2VNJRMgWqMixMzDMuszA1K6lKKlWqBQDeAxAn; ljt_reader=JTyKAQZHM4-7zcR_Qvazq_dw; _ljtrtb_2=D3906400314B4851A32EF9C9F854F2C1
Source: global traffic	HTTP traffic detected: GET /prod/images/ecd315d794b5b9c0ec3cd15a1589747c.png HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Source: global traffic	HTTP traffic detected: GET /assets/hl-ab41fdaa.js HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Source: global traffic	HTTP traffic detected: GET /sentry HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Source: global traffic	HTTP traffic detected: GET /scripts/push/script/02eyoyxdkz?url=gametimepulse.com HTTP/1.1Host: secureanalytic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?vxii_pid=7002&vxii_pdid=JTyKAQZHM4-7zcR_Qvazq_dw HTTP/1.1Host: thrtle.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: mc=eyJpZCI6ImJiNmQxNzgwLTQyYmMtNDc5Ny04NzY4LWYyNWIwYmFlMTk3MyIsImwiOjE3MjU5ODQ2ODc0ODQsInQiOjV9; sc=eyJpIjoiYmI2ZDE3ODAtNDJiYy00Nzk3LTg3NjgtZjI1YjBiYWUxOTczIiwic2lkIjoic2lkLTQ1MTVmNzVlLTZmOGYtMTFlZi05ZWQ0LTAyNDIwYTAwMDQyMiIsIm1zIjoxLCJ0cyI6MSwicHMiOjMsInNwIjo1MDI2LCJwcCI6MywidHNlIjozLCJpciI6dHJ1ZSwibHRzZSI6MTcyNTk4NDY4NzQ4NH0=
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: http://ww38.watchdogsecurity.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/hl-b2170ae6.css HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gametimepulse.com/en_us/sport-now4?&subid=e867b4a6-d17c-4afb-a008-7068b00cf775&networkid=200749&publisher=1576&isNewTr=1&stream=&subsource=pecinta%20sholawat&sign=5BE114F181BE643EB22EAD33C755E020Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Source: global traffic	HTTP traffic detected: GET /pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5124322333652738385&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3D0c27f139-f657-4f03-af87-ff8cbd65acfa%253A1725984678.962527%26pid%3D500040%26it%3D1%26iv%3D0c27f139-f657-4f03-af87-ff8cbd65acfa%253A1725984678.962527%26_%3D1725984695.3619437 HTTP/1.1Host: live.rezync.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: zync-uuid=0c27f139-f657-4f03-af87-ff8cbd65acfa:1725984678.962527; sd-session-id=.eJwNzE0KwyAQQOG7zDqWOOPP6GWCNQ5IG1tismnI3evywce7YPmWfUuttAPisZ9lgvyuozrEC3r9beUFEaxGQ4hE5Cx6YmIL9wS99F4_banrMHNGL5qCEme9MjKTSsJeiXB-rs6mLClqjzawcZ4fweF4wf0HlS8mEw.ZuBvtw.VLQZxyVcrP4FMg-y_Uap8xo1tJ8
Source: global traffic	HTTP traffic detected: GET /assets/hl-9a2c2edf.css HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://gametimepulse.com/en_us/sport-now4?&subid=e867b4a6-d17c-4afb-a008-7068b00cf775&networkid=200749&publisher=1576&isNewTr=1&stream=&subsource=pecinta%20sholawat&sign=5BE114F181BE643EB22EAD33C755E020Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Source: global traffic	HTTP traffic detected: GET /assets/hl-d212a6f4.js HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gametimepulse.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D
Source: global traffic	HTTP traffic detected: GET /afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2Cbucket064&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww38.watchdogsecurity.online%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NmUwNmZiNzk1ZjIzfHx8MTcyNTk4NDY5NS42NDh8ZGMxYzZiOWMxNjEyOTNlNTI2ZmQyNGRmNGE3NjNjMGNhZWJlOTcxN3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDdiMmYxZDVlZWI1Yzg5M2FiMmM2YThhM2ZhYjBjNjg3MzAzZTBiODN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfDc4NDAzOTYwMzd8fA%253D%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2558334540730768&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266&format=r3%7Cs&nocache=1331725984696941&num=0&output=afd_ads&domain_name=ww38.watchdogsecurity.online&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1725984696945&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=670534788&rurl=http%3A%2F%2Fww38.watchdogsecurity.online%2F HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://ww38.watchdogsecurity.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?abp=1&adsdeli=true HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/hl-f2333577.js HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gametimepulse.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /s/56409?bidder_id=200442&bidder_uuid=0c27f139-f657-4f03-af87-ff8cbd65acfa%3A1725984678.962527&pid=500040&it=1&iv=0c27f139-f657-4f03-af87-ff8cbd65acfa%3A1725984678.962527&_=1725984695.3619437 HTTP/1.1Host: i.liadm.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _li_ss=CiIKBQgKEOwYCgkI_____wcQ9hgKBgjSARDsGAoGCKIBEOwY; lidid=90fc4aa8-e5c9-4ce0-a7cc-9ff564524752
Source: global traffic	HTTP traffic detected: GET /assets/hl-2dfa470a.js HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gametimepulse.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /assets/hl-d212a6f4.js HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=2 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/hl-543ebdf2.js HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gametimepulse.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /assets/hl-f2333577.js HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1725984695.3619437&iv=0c27f139-f657-4f03-af87-ff8cbd65acfa:1725984678.962527 HTTP/1.1Host: pippio.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pxdrop.lijit.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: did=hdw_hOY400_jndDK; didts=1725984683; nnls=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /assets/hl-054a7ece.js HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gametimepulse.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /api/sync?it=1&pid=500040&_=1725984695.3619437&iv=0c27f139-f657-4f03-af87-ff8cbd65acfa:1725984678.962527 HTTP/1.1Host: pippio.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: did=hdw_hOY400_jndDK; didts=1725984683; nnls=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /assets/hl-2dfa470a.js HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /assets/hl-543ebdf2.js HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /assets/hl-ea83f4be.js HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gametimepulse.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /assets/hl-054a7ece.js HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /assets/hl-6c50209e.js HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gametimepulse.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /assets/hl-5cd68a50.js HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gametimepulse.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /adsense/domains/caf.js?pac=2 HTTP/1.1Host: syndicatedsearch.googConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://syndicatedsearch.goog/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=g5fjpv9lfybk&aqid=um_gZti2JPaLmLAPt4jc-AY&psid=7840396037&pbt=bs&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=670534788&csala=17%7C0%7C1047%7C1415%7C228&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ww38.watchdogsecurity.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/hl-ea83f4be.js HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /assets/hl-6c50209e.js HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1Host: afs.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/hl-574d21d7.js HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gametimepulse.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /assets/hl-b435eeec.js HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gametimepulse.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /assets/hl-5cd68a50.js HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /assets/hl-947b317e.js HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gametimepulse.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=xji4quufdnj3&aqid=um_gZti2JPaLmLAPt4jc-AY&psid=7840396037&pbt=bv&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=670534788&csala=17%7C0%7C1047%7C1415%7C228&lle=0&ifv=1&hpt=1 HTTP/1.1Host: syndicatedsearch.googConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://ww38.watchdogsecurity.online/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/hl-b435eeec.js HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /assets/hl-947b317e.js HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /assets/hl-574d21d7.js HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /lead/prefill HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /assets/hl-af3b3cbe.woff2 HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gametimepulse.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://gametimepulse.com/assets/hl-9a2c2edf.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /assets/hl-44fc4fed.woff2 HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gametimepulse.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://gametimepulse.com/assets/hl-9a2c2edf.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /assets/hl-fc33c920.js HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://gametimepulse.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /assets/hl-fc33c920.js HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /prod/images/049e565e1d2c7c5dfe23f67b2ba95105.jpg HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gametimepulse.com/en_us/sport-now4?&subid=e867b4a6-d17c-4afb-a008-7068b00cf775&networkid=200749&publisher=1576&isNewTr=1&stream=&subsource=pecinta%20sholawat&sign=5BE114F181BE643EB22EAD33C755E020Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /assets/hl-16c5d058.svg HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gametimepulse.com/assets/hl-9a2c2edf.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /assets/hl-40928f15.svg HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gametimepulse.com/assets/hl-9a2c2edf.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /assets/hl-16c5d058.svg HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /prod/images/b32438bfc8ff3c596a43efbc29d32bae.png HTTP/1.1Host: gametimepulse.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gametimepulse.com/en_us/sport-now4?&subid=e867b4a6-d17c-4afb-a008-7068b00cf775&networkid=200749&publisher=1576&isNewTr=1&stream=&subsource=pecinta%20sholawat&sign=5BE114F181BE643EB22EAD33C755E020Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /assets/hl-40928f15.svg HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /prod/images/049e565e1d2c7c5dfe23f67b2ba95105.jpg HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /prod/images/b32438bfc8ff3c596a43efbc29d32bae.png HTTP/1.1Host: gametimepulse.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitInfo::8661=ddc38a2a9cadfcf258461567fd288ddaaf1aaaf8d20bbfc496f06248c3c61570a%3A2%3A%7Bi%3A0%3Bs%3A15%3A%22visitInfo%3A%3A8661%22%3Bi%3A1%3Ba%3A6%3A%7Bs%3A8%3A%22cookieId%22%3Bs%3A32%3A%22fcda16921ce4038b78957c88b293ab14%22%3Bs%3A7%3A%22network%22%3Bs%3A6%3A%22200749%22%3Bs%3A9%3A%22publisher%22%3Bs%3A4%3A%221576%22%3Bs%3A10%3A%22externalId%22%3Bs%3A36%3A%22e867b4a6-d17c-4afb-a008-7068b00cf775%22%3Bs%3A11%3A%22trSubSource%22%3Bs%3A16%3A%22pecinta%20sholawat%22%3Bs%3A7%3A%22isNewTr%22%3Bb%3A1%3B%7D%7D; _gid=GA1.2.950952133.1725984697; _gat_gtag_UA_195162716_5=1; _ga_JGGRR9PHG6=GS1.1.1725984696.1.0.1725984696.0.0.0; _ga=GA1.1.425939937.1725984697
Source: global traffic	HTTP traffic detected: GET /hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran HTTP/1.1Host: football-booster.freevisit1.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/css/style.css HTTP/1.1Host: football-booster.freevisit1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20LutheranAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/modernizr.js HTTP/1.1Host: football-booster.freevisit1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20LutheranAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/hd.png HTTP/1.1Host: football-booster.freevisit1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20LutheranAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/bg.jpg HTTP/1.1Host: football-booster.freevisit1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://football-booster.freevisit1.com/assets/css/style.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/video-throbber.gif HTTP/1.1Host: football-booster.freevisit1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20LutheranAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/red-dot.png HTTP/1.1Host: football-booster.freevisit1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20LutheranAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/js.js HTTP/1.1Host: football-booster.freevisit1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20LutheranAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/header.jpg HTTP/1.1Host: football-booster.freevisit1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://football-booster.freevisit1.com/assets/css/style.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1Host: translate.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://football-booster.freevisit1.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /circle_green.png HTTP/1.1Host: football-booster.freevisit1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20LutheranAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/modernizr.js HTTP/1.1Host: football-booster.freevisit1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/js/js.js HTTP/1.1Host: football-booster.freevisit1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dmca.php HTTP/1.1Host: football-booster.freevisit1.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: HstCfa4891773=1725984633543; HstCla4891773=1725984633543; HstCmu4891773=1725984633543; HstPn4891773=1; HstPt4891773=1; HstCnv4891773=1; HstCns4891773=1; __dtsu=10401725984635D685D944936F64E5C9; _cc_id=3bdb359c63037044d87658cfcb77131; panoramaId_expiry=1726589459946; panoramaId=315f174c42660a13ed5d4e932d8916d53938705fe5cdfc20b678eec38452d311; panoramaIdType=panoIndiv
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: football-booster.freevisit1.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://football-booster.freevisit1.com/dmca.phpAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: HstCfa4891773=1725984633543; HstCla4891773=1725984633543; HstCmu4891773=1725984633543; HstPn4891773=1; HstPt4891773=1; HstCnv4891773=1; HstCns4891773=1; __dtsu=10401725984635D685D944936F64E5C9; _cc_id=3bdb359c63037044d87658cfcb77131; panoramaId_expiry=1726589459946; panoramaId=315f174c42660a13ed5d4e932d8916d53938705fe5cdfc20b678eec38452d311; panoramaIdType=panoIndiv
Source: global traffic	HTTP traffic detected: GET /contact.php HTTP/1.1Host: football-booster.freevisit1.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: HstCfa4891773=1725984633543; HstCla4891773=1725984633543; HstCmu4891773=1725984633543; HstPn4891773=1; HstPt4891773=1; HstCnv4891773=1; HstCns4891773=1; __dtsu=10401725984635D685D944936F64E5C9; _cc_id=3bdb359c63037044d87658cfcb77131; panoramaId_expiry=1726589459946; panoramaId=315f174c42660a13ed5d4e932d8916d53938705fe5cdfc20b678eec38452d311; panoramaIdType=panoIndiv
Source: global traffic	HTTP traffic detected: GET /register-hsfootball.php HTTP/1.1Host: football-booster.freevisit1.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: HstCfa4891773=1725984633543; HstCla4891773=1725984633543; HstCmu4891773=1725984633543; HstPn4891773=1; HstPt4891773=1; HstCnv4891773=1; HstCns4891773=1; __dtsu=10401725984635D685D944936F64E5C9; _cc_id=3bdb359c63037044d87658cfcb77131; panoramaId_expiry=1726589459946; panoramaId=315f174c42660a13ed5d4e932d8916d53938705fe5cdfc20b678eec38452d311; panoramaIdType=panoIndiv
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ww38.watchdogsecurity.onlineConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=watchdogsecurity.online&toggle=browserjs&uid=MTcyNTk4NDY5NS42MTQzOjA2Y2FlNmM1NTY4MzUwZmYyZjAzNjY1NTNiMGI5MjA1ZTA2MjNkYmIwY2QwMzc1MTA0NjNiMTdkNjA5NzIzNDE6NjZlMDZmYjc5NWY3OQ%3D%3D HTTP/1.1Host: ww38.watchdogsecurity.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww38.watchdogsecurity.online/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww38.watchdogsecurity.online/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ls.php?t=66e06fb7&token=7b2f1d5eeb5c893ab2c6a8a3fab0c687303e0b83 HTTP/1.1Host: ww38.watchdogsecurity.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww38.watchdogsecurity.online/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=watchdogsecurity.online&toggle=browserjs&uid=MTcyNTk4NDY5NS42MTQzOjA2Y2FlNmM1NTY4MzUwZmYyZjAzNjY1NTNiMGI5MjA1ZTA2MjNkYmIwY2QwMzc1MTA0NjNiMTdkNjA5NzIzNDE6NjZlMDZmYjc5NWY3OQ%3D%3D HTTP/1.1Host: ww38.watchdogsecurity.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1Host: d38psrni17bvxu.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track.php?domain=watchdogsecurity.online&caf=1&toggle=answercheck&answer=yes&uid=MTcyNTk4NDY5NS42MTQzOjA2Y2FlNmM1NTY4MzUwZmYyZjAzNjY1NTNiMGI5MjA1ZTA2MjNkYmIwY2QwMzc1MTA0NjNiMTdkNjA5NzIzNDE6NjZlMDZmYjc5NWY3OQ%3D%3D HTTP/1.1Host: ww38.watchdogsecurity.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://ww38.watchdogsecurity.online/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=d82d484fdf919dea:T=1725984698:RT=1725984698:S=ALNI_MZG0j4eLkBIBLaXlE2oaKhPnP0tAQ
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ww38.watchdogsecurity.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://ww38.watchdogsecurity.online/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=d82d484fdf919dea:T=1725984698:RT=1725984698:S=ALNI_MZG0j4eLkBIBLaXlE2oaKhPnP0tAQ
Source: global traffic	HTTP traffic detected: GET /track.php?domain=watchdogsecurity.online&caf=1&toggle=answercheck&answer=yes&uid=MTcyNTk4NDY5NS42MTQzOjA2Y2FlNmM1NTY4MzUwZmYyZjAzNjY1NTNiMGI5MjA1ZTA2MjNkYmIwY2QwMzc1MTA0NjNiMTdkNjA5NzIzNDE6NjZlMDZmYjc5NWY3OQ%3D%3D HTTP/1.1Host: ww38.watchdogsecurity.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: __gsas=ID=d82d484fdf919dea:T=1725984698:RT=1725984698:S=ALNI_MZG0j4eLkBIBLaXlE2oaKhPnP0tAQ

Source: chromecache_289.2.dr, chromecache_359.2.dr, chromecache_258.2.dr, chromecache_371.2.dr

String found in binary or memory: return b}uC.H="internal.enableAutoEventOnTimer";var hc=ka(["data-gtm-yt-inspected-"]),wC=["www.youtube.com","www.youtube-nocookie.com"],xC,yC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: football-booster.freevisit1.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: i.imgur.com
Source: global traffic	DNS traffic detected: DNS query: s7.addthis.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: translate.google.com
Source: global traffic	DNS traffic detected: DNS query: s10.histats.com
Source: global traffic	DNS traffic detected: DNS query: s4.histats.com
Source: global traffic	DNS traffic detected: DNS query: e.dtscout.com
Source: global traffic	DNS traffic detected: DNS query: t.dtscout.com
Source: global traffic	DNS traffic detected: DNS query: pxdrop.lijit.com
Source: global traffic	DNS traffic detected: DNS query: pd.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: cdn.tynt.com
Source: global traffic	DNS traffic detected: DNS query: ic.tynt.com
Source: global traffic	DNS traffic detected: DNS query: de.tynt.com
Source: global traffic	DNS traffic detected: DNS query: t.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: cdn-tc.33across.com
Source: global traffic	DNS traffic detected: DNS query: i.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: tags.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: t.dtscdn.com
Source: global traffic	DNS traffic detected: DNS query: pixel.onaudience.com
Source: global traffic	DNS traffic detected: DNS query: bcp.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: ps.eyeota.net
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: ml314.com
Source: global traffic	DNS traffic detected: DNS query: sync.sharethis.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: d.turn.com
Source: global traffic	DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: api.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: idpix.media6degrees.com
Source: global traffic	DNS traffic detected: DNS query: track2.securedvisit.com
Source: global traffic	DNS traffic detected: DNS query: i.liadm.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: thrtle.com
Source: global traffic	DNS traffic detected: DNS query: aqfer.lijit.com
Source: global traffic	DNS traffic detected: DNS query: ce.lijit.com
Source: global traffic	DNS traffic detected: DNS query: agent.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: cms.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: sync.intentiq.com
Source: global traffic	DNS traffic detected: DNS query: i6.liadm.com
Source: global traffic	DNS traffic detected: DNS query: a.tribalfusion.com
Source: global traffic	DNS traffic detected: DNS query: s.tribalfusion.com
Source: global traffic	DNS traffic detected: DNS query: a.dtssrv.com
Source: global traffic	DNS traffic detected: DNS query: c.cintnetworks.com
Source: global traffic	DNS traffic detected: DNS query: aa.agkn.com
Source: global traffic	DNS traffic detected: DNS query: image6.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: id5-sync.com
Source: global traffic	DNS traffic detected: DNS query: s.amazon-adsystem.com
Source: global traffic	DNS traffic detected: DNS query: pixel-sync.sitescout.com
Source: global traffic	DNS traffic detected: DNS query: i.w55c.net
Source: global traffic	DNS traffic detected: DNS query: global.ib-ibi.com
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: sync.smartadserver.com
Source: global traffic	DNS traffic detected: DNS query: ib.mookie1.com
Source: global traffic	DNS traffic detected: DNS query: pm.w55c.net
Source: global traffic	DNS traffic detected: DNS query: pixel.tapad.com
Source: global traffic	DNS traffic detected: DNS query: dmp.truoptik.com
Source: global traffic	DNS traffic detected: DNS query: sync.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: loadus.exelator.com
Source: global traffic	DNS traffic detected: DNS query: c1.adform.net
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: d.agkn.com
Source: global traffic	DNS traffic detected: DNS query: rtd-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: tags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: dp2.33across.com
Source: global traffic	DNS traffic detected: DNS query: live.rezync.com
Source: global traffic	DNS traffic detected: DNS query: p.rfihub.com
Source: global traffic	DNS traffic detected: DNS query: stags.bluekai.com
Source: global traffic	DNS traffic detected: DNS query: pippio.com
Source: global traffic	DNS traffic detected: DNS query: api.powerafftrky.com
Source: global traffic	DNS traffic detected: DNS query: go.greenlinknow.com
Source: global traffic	DNS traffic detected: DNS query: um.simpli.fi
Source: global traffic	DNS traffic detected: DNS query: gametimepulse.com
Source: global traffic	DNS traffic detected: DNS query: token.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: secureanalytic.com
Source: global traffic	DNS traffic detected: DNS query: www.watchdogsecurity.online
Source: global traffic	DNS traffic detected: DNS query: ww38.watchdogsecurity.online
Source: global traffic	DNS traffic detected: DNS query: d38psrni17bvxu.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: syndicatedsearch.goog
Source: global traffic	DNS traffic detected: DNS query: afs.googleusercontent.com

Source: unknown

HTTP traffic detected: POST /6/map HTTP/1.1Host: bcp.crwdcntrl.netConnection: keep-aliveContent-Length: 65sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://cdn-tc.33across.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://cdn-tc.33across.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1242date: Tue, 10 Sep 2024 16:10:28 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffvary: User-AgentData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 33 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 46 6f 72 62 69 64 64 65 6e 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 20 6f 6e 20 74 68 65 20 73 65 72 76 65 72 20 69 73 20 64 65 6e 69 65 64 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 403 Forbidden</title><style
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1242date: Tue, 10 Sep 2024 16:10:29 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffvary: User-AgentData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 33 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 46 6f 72 62 69 64 64 65 6e 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 20 6f 6e 20 74 68 65 20 73 65 72 76 65 72 20 69 73 20 64 65 6e 69 65 64 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 403 Forbidden</title><style
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1242date: Tue, 10 Sep 2024 16:10:29 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffvary: User-AgentData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 33 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 46 6f 72 62 69 64 64 65 6e 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 20 6f 6e 20 74 68 65 20 73 65 72 76 65 72 20 69 73 20 64 65 6e 69 65 64 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 403 Forbidden</title><style
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1242date: Tue, 10 Sep 2024 16:10:29 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffvary: User-AgentData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 33 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 46 6f 72 62 69 64 64 65 6e 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 20 6f 6e 20 74 68 65 20 73 65 72 76 65 72 20 69 73 20 64 65 6e 69 65 64 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 403 Forbidden</title><style
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1242date: Tue, 10 Sep 2024 16:10:30 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffvary: User-AgentData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 33 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 46 6f 72 62 69 64 64 65 6e 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 20 6f 6e 20 74 68 65 20 73 65 72 76 65 72 20 69 73 20 64 65 6e 69 65 64 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 403 Forbidden</title><style
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1242date: Tue, 10 Sep 2024 16:10:32 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffvary: User-AgentData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 33 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 46 6f 72 62 69 64 64 65 6e 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 41 63 63 65 73 73 20 74 6f 20 74 68 69 73 20 72 65 73 6f 75 72 63 65 20 6f 6e 20 74 68 65 20 73 65 72 76 65 72 20 69 73 20 64 65 6e 69 65 64 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 73 74 79 6c 65 3d Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 403 Forbidden</title><style
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: Keep-AliveKeep-Alive: timeout=5, max=100cache-control: private, no-cache, no-store, must-revalidate, max-age=0pragma: no-cachecontent-type: text/htmlcontent-length: 1251date: Tue, 10 Sep 2024 16:11:10 GMTserver: LiteSpeedplatform: hostingerstrict-transport-security: max-age=31536000; includeSubDomains; preloadx-xss-protection: 1; mode=blockx-content-type-options: nosniffvary: User-AgentData Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 22 3e 0a 3c 64 69 76 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 61 75 74 6f 3b 20 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 20 22 3e 20 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 34 30 34 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 68 32 3e 0a 3c 70 3e 54 68 65 20 72 65 73 6f 75 72 63 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 21 3c 2f 70 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title><style

Source: chromecache_390.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_390.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_245.2.dr	String found in binary or memory: http://football-booster.freevisit1.com/
Source: chromecache_387.2.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: chromecache_286.2.dr, chromecache_257.2.dr, chromecache_330.2.dr, chromecache_184.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_264.2.dr, chromecache_365.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_167.2.dr	String found in binary or memory: https://a.dtssrv.com/a?i=
Source: chromecache_230.2.dr	String found in binary or memory: https://aa.agkn.com/adscores/g.json?sid=9202507693
Source: chromecache_258.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_243.2.dr, chromecache_152.2.dr, chromecache_145.2.dr	String found in binary or memory: https://agent.intentiq.com/Agent/Hints/IIQUniversalID-sync.js
Source: chromecache_252.2.dr, chromecache_360.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_270.2.dr, chromecache_249.2.dr	String found in binary or memory: https://bcp.crwdcntrl.net/5/c=3825/tp=DTSC/tpid=
Source: chromecache_230.2.dr	String found in binary or memory: https://c.cintnetworks.com/identity?a=5461&gdpr=0&id=Lotame:3bdb359c63037044d87658cfcb77131
Source: chromecache_230.2.dr	String found in binary or memory: https://c1.adform.net/serving/cookie/match?party=1040
Source: chromecache_289.2.dr, chromecache_359.2.dr, chromecache_258.2.dr, chromecache_371.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_190.2.dr, chromecache_182.2.dr	String found in binary or memory: https://cdn.pushflow.net/scripts/current/sdk/pushflowSDK.js
Source: chromecache_270.2.dr, chromecache_249.2.dr, chromecache_167.2.dr, chromecache_195.2.dr	String found in binary or memory: https://cdn.tynt.com/afwu.js
Source: chromecache_230.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=lotame_dmp&google_hm=M2JkYjM1OWM2MzAzNzA0NGQ4NzY1OGNmY
Source: chromecache_230.2.dr	String found in binary or memory: https://cm.g.doubleclick.net/pixel?google_nid=lotameddp&google_hm=M2JkYjM1OWM2MzAzNzA0NGQ4NzY1OGNmY2
Source: chromecache_230.2.dr	String found in binary or memory: https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMzQ4ODM4MC90LzI/dpuid/3bdb359c63037044d87658cfcb77131/url
Source: chromecache_230.2.dr	String found in binary or memory: https://dmp.truoptik.com/f2d2e39fc16bc9cc/sync.gif?cbp=tpid&cbk=https%3A%2F%2Fsync.crwdcntrl.net%2Fm
Source: chromecache_230.2.dr	String found in binary or memory: https://dpm.demdex.net/ibs:dpid=121998&dpuuid=3bdb359c63037044d87658cfcb77131&gdpr=0&redir=https%3A%
Source: chromecache_264.2.dr, chromecache_365.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_353.2.dr, chromecache_352.2.dr, chromecache_356.2.dr, chromecache_361.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=
Source: chromecache_304.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:300
Source: chromecache_264.2.dr, chromecache_365.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_224.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_304.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_230.2.dr	String found in binary or memory: https://global.ib-ibi.com/image.sbxx?go=262106&pid=420&xid=3bdb359c63037044d87658cfcb77131
Source: chromecache_230.2.dr	String found in binary or memory: https://i.liadm.com/s/41715?bidder_id=127211&bidder_uuid=3bdb359c63037044d87658cfcb77131
Source: chromecache_230.2.dr	String found in binary or memory: https://id5-sync.com/s/19/9.gif?puid=3bdb359c63037044d87658cfcb77131&gdpr=0
Source: chromecache_230.2.dr	String found in binary or memory: https://image6.pubmatic.com/AdServer/UCookieSetPug?gdpr=0&rd=https%3A%2F%2Fsync.crwdcntrl.net%2Fqmap
Source: chromecache_230.2.dr	String found in binary or memory: https://loadus.exelator.com/load/?p=204&g=260&buid=3bdb359c63037044d87658cfcb77131&j=0&gdpr=0
Source: chromecache_387.2.dr	String found in binary or memory: https://lodash.com/
Source: chromecache_387.2.dr	String found in binary or memory: https://lodash.com/license
Source: chromecache_230.2.dr	String found in binary or memory: https://match.adsrvr.org/track/cmf/generic?ttd_pid=lotame&ttd_tpi=1&gdpr=0
Source: chromecache_230.2.dr	String found in binary or memory: https://ml314.com/utsync.ashx?eid=50146&et=0&fp=3bdb359c63037044d87658cfcb77131&gdpr=0
Source: chromecache_387.2.dr, chromecache_327.2.dr	String found in binary or memory: https://npms.io/search?q=ponyfill.
Source: chromecache_387.2.dr	String found in binary or memory: https://openjsf.org/
Source: chromecache_258.2.dr, chromecache_371.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_353.2.dr, chromecache_352.2.dr, chromecache_289.2.dr, chromecache_359.2.dr, chromecache_258.2.dr, chromecache_356.2.dr, chromecache_361.2.dr, chromecache_371.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_353.2.dr, chromecache_352.2.dr, chromecache_356.2.dr, chromecache_361.2.dr	String found in binary or memory: https://partner.googleadservices.com/gampad/cookie.js
Source: chromecache_270.2.dr, chromecache_249.2.dr, chromecache_167.2.dr, chromecache_195.2.dr	String found in binary or memory: https://pd.sharethis.com/pd/dtscout
Source: chromecache_200.2.dr, chromecache_284.2.dr	String found in binary or memory: https://pd.sharethis.com/pd/dtscout?_t_=px&url=
Source: chromecache_200.2.dr, chromecache_284.2.dr	String found in binary or memory: https://pd.sharethis.com/pd/error?e=
Source: chromecache_230.2.dr	String found in binary or memory: https://pixel-sync.sitescout.com/connectors/lotame/usersync?gdpr=0&redir=https%3A%2F%2Fsync.crwdcntr
Source: chromecache_270.2.dr, chromecache_249.2.dr, chromecache_167.2.dr, chromecache_195.2.dr	String found in binary or memory: https://pixel.onaudience.com/?partner=137085098&mapped=
Source: chromecache_230.2.dr	String found in binary or memory: https://pixel.tapad.com/idsync/ex/receive?partner_id=LOTAME&partner_device_id=3bdb359c63037044d87658
Source: chromecache_365.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_230.2.dr	String found in binary or memory: https://ps.eyeota.net/match?bid=51mdg9u&uid=3bdb359c63037044d87658cfcb77131&gdpr=0
Source: chromecache_190.2.dr, chromecache_182.2.dr	String found in binary or memory: https://pushflow.net/api/log/
Source: chromecache_230.2.dr	String found in binary or memory: https://s.amazon-adsystem.com/dcm?pid=a8acf3b3-7ede-4e18-8405-edaf41005f97&id=3bdb359c63037044d87658
Source: chromecache_230.2.dr	String found in binary or memory: https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D281%2Ftp%3DANXS%2Ftpid%
Source: chromecache_285.2.dr, chromecache_194.2.dr	String found in binary or memory: https://secureanalytic.com/scripts/push/script/02eyoyxdkz
Source: chromecache_245.2.dr	String found in binary or memory: https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
Source: chromecache_359.2.dr, chromecache_258.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_360.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_230.2.dr	String found in binary or memory: https://sync-tm.everesttech.net/upi/pid/bsTd8NdE?gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap
Source: chromecache_230.2.dr	String found in binary or memory: https://sync.crwdcntrl.net/
Source: chromecache_230.2.dr	String found in binary or memory: https://sync.smartadserver.com/getuid?gdpr=0&url=https%3A%2F%2Fbcp.crwdcntrl.net%2Fqmap%3Fc%3D16236%
Source: chromecache_230.2.dr	String found in binary or memory: https://sync.srv.stackadapt.com/sync?nid=lotame&gdpr=0
Source: chromecache_353.2.dr, chromecache_352.2.dr, chromecache_356.2.dr, chromecache_361.2.dr	String found in binary or memory: https://syndicatedsearch.goog
Source: chromecache_270.2.dr, chromecache_249.2.dr, chromecache_167.2.dr, chromecache_195.2.dr	String found in binary or memory: https://t.dtscdn.com/widget/?d=
Source: chromecache_270.2.dr, chromecache_249.2.dr, chromecache_167.2.dr, chromecache_195.2.dr	String found in binary or memory: https://t.dtscout.com/idg/?su=
Source: chromecache_270.2.dr, chromecache_249.2.dr, chromecache_167.2.dr, chromecache_195.2.dr	String found in binary or memory: https://t.dtscout.com/pv/
Source: chromecache_270.2.dr, chromecache_249.2.dr, chromecache_167.2.dr, chromecache_195.2.dr	String found in binary or memory: https://t.dtscout.com/udg/?su=
Source: chromecache_200.2.dr, chromecache_284.2.dr	String found in binary or memory: https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=
Source: chromecache_252.2.dr, chromecache_360.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_306.2.dr	String found in binary or memory: https://tags.crwdcntrl.net/lt/c/16311/sync.min.js
Source: chromecache_167.2.dr	String found in binary or memory: https://tags.crwdcntrl.net/lt/c/3825/lt.min.js
Source: chromecache_289.2.dr, chromecache_359.2.dr, chromecache_258.2.dr, chromecache_371.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_365.2.dr	String found in binary or memory: https://translate.google.com
Source: chromecache_264.2.dr, chromecache_365.2.dr	String found in binary or memory: https://translate.googleapis.com/element/log?format=json&hasfast=true
Source: chromecache_289.2.dr, chromecache_371.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_252.2.dr, chromecache_360.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_252.2.dr, chromecache_360.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_252.2.dr, chromecache_360.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_258.2.dr, chromecache_371.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_252.2.dr, chromecache_360.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_365.2.dr	String found in binary or memory: https://www.google.com/images/cleardot.gif
Source: chromecache_353.2.dr, chromecache_352.2.dr, chromecache_356.2.dr, chromecache_361.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5
Source: chromecache_264.2.dr, chromecache_365.2.dr	String found in binary or memory: https://www.google.com/support/translate
Source: chromecache_289.2.dr, chromecache_359.2.dr, chromecache_258.2.dr, chromecache_371.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_353.2.dr, chromecache_352.2.dr, chromecache_356.2.dr, chromecache_361.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/16521530460/?gad_source=1&adview_type=3
Source: chromecache_371.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_252.2.dr, chromecache_360.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_293.2.dr, chromecache_256.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=$
Source: chromecache_365.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
Source: chromecache_264.2.dr, chromecache_365.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png
Source: chromecache_264.2.dr, chromecache_365.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/1x/translate_24dp.png
Source: chromecache_359.2.dr, chromecache_258.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50151 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50073
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50261
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50230 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50271
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 50242 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50041
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50040
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50285
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50284
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50288
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50292
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50294
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50237 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50181 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 50112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50075 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50158 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50217 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50284 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49737 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@38/397@330/100

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1856,i,17599355910779306083,14515011359913216872,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1856,i,17599355910779306083,14515011359913216872,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	5 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	6 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	4 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	0%	URL Reputation	safe
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
https://syndicatedsearch.goog	0%	Avira URL Cloud	safe
https://pixel-sync.sitescout.com/connectors/eyeota/usersync?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dm51mhg1%26uid%3D%7BuserId%7D	0%	Avira URL Cloud	safe
https://secureanalytic.com/scripts/push/script/02eyoyxdkz	0%	Avira URL Cloud	safe
https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true	0%	Avira URL Cloud	safe
https://s4.histats.com/stats/e.php?4891773&@Ab&@R57951&@w	0%	Avira URL Cloud	safe
https://pixel.tapad.com/idsync/ex/receive?partner_id=LOTAME&partner_device_id=3bdb359c63037044d87658	0%	Avira URL Cloud	safe
https://i.simpli.fi/dpx?cid=11411&us_privacy=&33random=1725984637878.3&ref=	0%	Avira URL Cloud	safe
https://pixel.onaudience.com/?partner=137085098&mapped=10401725984635D685D944936F64E5C9	0%	Avira URL Cloud	safe
https://gametimepulse.com/prod/images/b32438bfc8ff3c596a43efbc29d32bae.png	0%	Avira URL Cloud	safe
https://dpm.demdex.net/ibs:dpid=121998&dpuuid=3bdb359c63037044d87658cfcb77131&gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D9828%2Ftp%3DADBE%2Ftpid%3D%24%7BDD_UUID%7D%2Fgdpr=0	0%	Avira URL Cloud	safe
https://idsync.rlcdn.com/395886.gif?partner_uid=3646915315069091854	0%	Avira URL Cloud	safe
https://gametimepulse.com/assets/hl-b2170ae6.css	0%	Avira URL Cloud	safe
https://i.imgur.com/NIXl8QH.jpg	0%	Avira URL Cloud	safe
https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=182772995&iiqidtype=2&iiqpcid=820734d2-60db-e66e-29d4-41fda1749e8a&iiqpciddate=1725984653272&tsrnd=585_1725984653273&vrref=https%3A%2F%2Fpxdrop.lijit.com%2F&jsver=5.088&gdpr=0	0%	Avira URL Cloud	safe
https://sync.crwdcntrl.net/map/c=10915/tp=TRNN/tpid=9140754838064038298/gdpr=0	0%	Avira URL Cloud	safe
https://pushflow.net/api/log/	0%	Avira URL Cloud	safe
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fps.eyeota.net%252Fmatch%253Fuid%253D%2524UID%2526bid%253D2cr76e1%2526dc_rc%253D4%2526dc_mr%253D5%2526dc_orig%253D3b2cb90%2526%2526referrer_pid%253D3b2cb90	0%	Avira URL Cloud	safe
https://gametimepulse.com/assets/hl-de833af9.js	0%	Avira URL Cloud	safe
https://t.dtscout.com/pv/?_a=v&_h=football-booster.freevisit1.com&_ss=1mx4vkpben&_pv=1&_ls=0&_u1=1&_u3=1&_cc=us&_pl=d&_cbid=6g49&_cb=_dtspv.c	0%	Avira URL Cloud	safe
https://ps.eyeota.net/pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1725984683334.3	0%	Avira URL Cloud	safe
https://ps.eyeota.net/pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1725984683334.5	0%	Avira URL Cloud	safe
https://sync.crwdcntrl.net/map/c=10158/tp=TPAD/tpid=5a494773-b3c5-4363-89b4-d92c8335b5ac	0%	Avira URL Cloud	safe
https://match.adsrvr.org/track/cmf/generic?ttd_pid=lotame&ttd_tpi=1&gdpr=0	0%	Avira URL Cloud	safe
https://live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5124322333652738385&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3D0c27f139-f657-4f03-af87-ff8cbd65acfa%253A1725984678.962527%26pid%3D500040%26it%3D1%26iv%3D0c27f139-f657-4f03-af87-ff8cbd65acfa%253A1725984678.962527%26_%3D1725984678.9646904	0%	Avira URL Cloud	safe
https://dpm.demdex.net/ibs:dpid=121998&dpuuid=3bdb359c63037044d87658cfcb77131&gdpr=0&redir=https%3A%	0%	Avira URL Cloud	safe
https://ps.eyeota.net/match?bid=c9gd69u&uid=216623105001003118731	0%	Avira URL Cloud	safe
https://sync.crwdcntrl.net/map/c=281/tp=ANXS/tpid=5768470956374677316/gdpr=0/rand=576822339	0%	Avira URL Cloud	safe
https://id5-sync.com/c/19/2/7/3.gif?puid=5768470956374677316&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://ib.mookie1.com/image.sbxx?go=262106&pid=420&xid=3bdb359c63037044d87658cfcb77131	0%	Avira URL Cloud	safe
https://match.adsrvr.org/track/cmf/generic?ttd_pid=bluekai	0%	Avira URL Cloud	safe
https://bcp.crwdcntrl.net/pixels?src=LTJS&s=7%2C92%2C49%2C136%2C135%2C153%2C33%2C78%2C122%2C26%2C22%2C148%2C116%2C61%2C106%2C104%2C8%2C54%2C100%2C145%2C3%2C2%2C94&c=3825	0%	Avira URL Cloud	safe
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel?google_nid=bluekai&google_cm&google_sc&google_hm=cDNxa2FnUno5OTlzam1PWg%3D%3D	0%	Avira URL Cloud	safe
https://thrtle.com/sync?_reach=1&vxii_pdid=na&vxii_pid=12&vxii_pid1=7002&vxii_rcid=bb6d1780-42bc-4797-8768-f25b0bae1973&vxii_rmax=1	0%	Avira URL Cloud	safe
https://ups.analytics.yahoo.com/ups/58773/cms?partner_id=Eyeot&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://ml314.com/csync.ashx?fp=9ab07dfad034f7723914d4ce2ab29b55dbc36667c21b22244884257e4ed5b600f4cb09cee1a4f8eb&person_id=3646915315069091854&eid=50082	0%	Avira URL Cloud	safe
https://pd.sharethis.com/pd/dtscout	0%	Avira URL Cloud	safe
https://sync.smartadserver.com/getuid?gdpr=0&url=https://bcp.crwdcntrl.net/qmap?c=16236&tp=SMAD&tpid=[sas_uid]&gdpr=0&cklb=1	0%	Avira URL Cloud	safe
http://football-booster.freevisit1.com/assets/css/style.css	0%	Avira URL Cloud	safe
https://match.adsrvr.org/track/cmf/generic?ttd_pid=lotame&ttd_tpi=1&gdpr=0&gdpr_consent=&id5=ID5-6fe5uDkUeg6pvrVeqEHERleL9xsJupDlKU665UueJw	0%	Avira URL Cloud	safe
https://id5-sync.com/c/19/321/3/7.gif?puid=$_BK_UUID	0%	Avira URL Cloud	safe
https://gametimepulse.com/assets/hl-6c0c41ea.js	0%	Avira URL Cloud	safe
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=g5fjpv9lfybk&aqid=um_gZti2JPaLmLAPt4jc-AY&psid=7840396037&pbt=bs&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=670534788&csala=17%7C0%7C1047%7C1415%7C228&lle=0&ifv=1&hpt=1	0%	Avira URL Cloud	safe
https://i.w55c.net/ping_match.gif?st=EYEOTA&rurl=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D9sn4omv%26uid%3D_wfivefivec_%26newuser%3D1%26dc_rc%3D1%26dc_mr%3D5%26dc_orig%3D51mdg9u%26	0%	Avira URL Cloud	safe
http://football-booster.freevisit1.com/favicon.ico	0%	Avira URL Cloud	safe
https://i.imgur.com/jWsQC86.jpg	0%	Avira URL Cloud	safe
https://cdn.pushflow.net/scripts/current/sdk/pushflowSDK.js	0%	Avira URL Cloud	safe
http://ww38.watchdogsecurity.online/favicon.ico	0%	Avira URL Cloud	safe
https://gametimepulse.com/assets/hl-5cd68a50.js	0%	Avira URL Cloud	safe
https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMTc0ODM4ODY2Ni90LzI/dpuid/ID5-6fe5uDkUeg6pvrVeqEHERleL9xsJupDlKU665UueJw/url/https%3A%2F%2Fid5-sync.com%2Fc%2F19%2F224%2F6%2F4.gif%3Fpuid%3D%24%21%7BTURN_UUID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=	0%	Avira URL Cloud	safe
https://pippio.com/api/sync?it=1&pid=500040&_=1725984695.3619437&iv=0c27f139-f657-4f03-af87-ff8cbd65acfa:1725984678.962527	0%	Avira URL Cloud	safe
https://i.simpli.fi/dpx?cid=11411&us_privacy=&33random=1725984677676.6&ref=	0%	Avira URL Cloud	safe
https://sync.smartadserver.com/getuid?gdpr=0&url=https%3A%2F%2Fbcp.crwdcntrl.net%2Fqmap%3Fc%3D16236%26tp%3DSMAD%26tpid%3D[sas_uid]%26gdpr%3D0	0%	Avira URL Cloud	safe
https://pd.sharethis.com/pd/dtscout?_t_=px&url=	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel?google_nid=lotame_dmp&google_hm=M2JkYjM1OWM2MzAzNzA0NGQ4NzY1OGNmY2I3NzEzMQ&gdpr=0	0%	Avira URL Cloud	safe
https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D281%2Ftp%3DANXS%2Ftpid%3D%24UID%2Fgdpr%3D0%2Frand=576822339	0%	Avira URL Cloud	safe
https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMjg0NTA1NDYvdC8w/url/https://ps.eyeota.net/match?bid=1mpjpn0&turn_id=$!{TURN_UUID}&newuser=1&dc_rc=2&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90	0%	Avira URL Cloud	safe
http://underscorejs.org/LICENSE	0%	Avira URL Cloud	safe
https://ps.eyeota.net/match?bid=9sn4omv&uid=GkIO9st71SO3sk5&newuser=1&dc_rc=1&dc_mr=5&dc_orig=51mdg9u&	0%	Avira URL Cloud	safe
https://thrtle.com/sync?vxii_pid=7002&vxii_pdid=na	0%	Avira URL Cloud	safe
https://cm.g.doubleclick.net/pixel?google_nid=eye&google_cm&google_sc&google_hm=MlJSR0VDcmVKNWE0ZTNlTHRoeUVZaTdqYXVaOFFQMmg4VVlubjJhNmhLdFU&gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&dc_rc=1&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90	0%	Avira URL Cloud	safe
https://gametimepulse.com/assets/hl-fc33c920.js	0%	Avira URL Cloud	safe
https://live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5124322333652738385&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3D0c27f139-f657-4f03-af87-ff8cbd65acfa%253A1725984678.962527%26pid%3D500040%26it%3D1%26iv%3D0c27f139-f657-4f03-af87-ff8cbd65acfa%253A1725984678.962527%26_%3D1725984688.1525216	0%	Avira URL Cloud	safe
https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=6CCACE81-3E9F-4932-AE9D-F8064F4F357C&gdpr=0	0%	Avira URL Cloud	safe
https://t.dtscdn.com/widget/?d=10401725984635D685D944936F64E5C9&nid=300&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fregister-hsfootball.php&r=	0%	Avira URL Cloud	safe
https://gametimepulse.com/assets/hl-44fc4fed.woff2	0%	Avira URL Cloud	safe
https://loadus.exelator.com/load/?p=204&g=260&buid=3bdb359c63037044d87658cfcb77131&j=0&gdpr=0	0%	Avira URL Cloud	safe
https://e.dtscout.com/e/?v=1a&pid=5200&site=1&l=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fregister-hsfootball.php&j=	0%	Avira URL Cloud	safe
https://gametimepulse.com/assets/hl-574d21d7.js	0%	Avira URL Cloud	safe
https://t.dtscout.com/idg/?su=10401725984635D685D944936F64E5C9	0%	Avira URL Cloud	safe
https://syndicatedsearch.goog/adsense/domains/caf.js?pac=2	0%	Avira URL Cloud	safe
https://dp2.33across.com/ps/?tt=iframe&pid=1198&us_privacy=&random=1725984677676.4	0%	Avira URL Cloud	safe
https://i.liadm.com/s/35759?bidder_id=44489&bidder_uuid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d	0%	Avira URL Cloud	safe
https://sync.crwdcntrl.net/map/c=10832/tp=TRUP/tpid=b9bdb847e735edc7495bcfea37bdb579	0%	Avira URL Cloud	safe
https://pippio.com/api/sync?it=1&pid=500040&_=1725984688.1525216&iv=0c27f139-f657-4f03-af87-ff8cbd65acfa:1725984678.962527	0%	Avira URL Cloud	safe
https://s.tribalfusion.com/z/i.match?p=b31&redirect=https%3A%2F%2Fthrtle.com%2Fsync%3Fvxii_pid%3D5042%26vxii_pdid%3D%24TF_USER_ID_ENC%24%26vxii_ts%3D3%26_t%3D1725984658&u=bb6d1780-42bc-4797-8768-f25b0bae1973	0%	Avira URL Cloud	safe
https://gametimepulse.com/assets/hl-f95c6502.js	0%	Avira URL Cloud	safe
https://s.amazon-adsystem.com/dcm?pid=a8acf3b3-7ede-4e18-8405-edaf41005f97&id=3bdb359c63037044d87658cfcb77131&dcc=t	0%	Avira URL Cloud	safe
https://ps.eyeota.net/match?bid=bhc9gd0&yahoo_ver=2&yahoo_id=y-avDHyJhE2pU7_inbFoc6KAd_kDNVy9CkRxg-~A&gdpr=0	0%	Avira URL Cloud	safe
https://live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5124322333652738385&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3D0c27f139-f657-4f03-af87-ff8cbd65acfa%253A1725984678.962527%26pid%3D500040%26it%3D1%26iv%3D0c27f139-f657-4f03-af87-ff8cbd65acfa%253A1725984678.962527%26_%3D1725984688.1257787	0%	Avira URL Cloud	safe
https://gametimepulse.com/sentry	0%	Avira URL Cloud	safe
https://thrtle.com/sync?vxii_pid=7002&vxii_pdid=JTyKAQZHM4-7zcR_Qvazq_dw	0%	Avira URL Cloud	safe
https://sync.sharethis.com/id5?uid=ID5-6fe5uDkUeg6pvrVeqEHERleL9xsJupDlKU665UueJw&gdpr=0&gdpr_consent=&rurl=https%3A%2F%2Fid5-sync.com%2Fa%2F19%2F121%2F4%2F6%2Fgif%2F0%2F0%2F0%2F0%2F	0%	Avira URL Cloud	safe
https://go.greenlinknow.com/t/clk?id=qMHYEZQT7WSvn3tY&s1=46e1fe29-1a9b-46f3-b58f-9a54bdf046ed&s2=1576&s7=pecinta%20sholawat&s8=	0%	Avira URL Cloud	safe
https://pixel.onaudience.com/?partner=147&mapped=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d&icm&gdpr=0&gdpr_consent=&cver	0%	Avira URL Cloud	safe
https://i.liadm.com/s/76929?bidder_id=204553&bidder_uuid=na&rnd=1725984650927&_li_chk=true&previous_uuid=90fc4aa8e5c94ce0a7cc9ff564524752	0%	Avira URL Cloud	safe
https://www.google.com/images/cleardot.gif	0%	Avira URL Cloud	safe
https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D281%2Ftp%3DANXS%2Ftpid%	0%	Avira URL Cloud	safe
https://ups.analytics.yahoo.com/ups/58773/cms?partner_id=Eyeot&gdpr=0&gdpr_consent=&verify=true	0%	Avira URL Cloud	safe
https://thrtle.com/sync?vxii_pid=5042&vxii_pdid=18072662055787220129&vxii_ts=3&_t=1725984658	0%	Avira URL Cloud	safe
https://pixel.tapad.com/idsync/ex/receive/check?partner_id=LOTAME&partner_device_id=3bdb359c63037044d87658cfcb77131&gdpr=0&partner_url=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10158%2Ftp%3DTPAD%2Ftpid%3D%24%7BTA_DEVICE_ID%7D&ch=	0%	Avira URL Cloud	safe
https://npms.io/search?q=ponyfill.	0%	Avira URL Cloud	safe
https://ups.analytics.yahoo.com/ups/58691/cms?partner_id=THROTLE	0%	Avira URL Cloud	safe
https://sync.srv.stackadapt.com/sync?nid=lotame&gdpr=0	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
d1hmmdgobu85y9.cloudfront.net	18.239.69.119	true	false	unknown
um.simpli.fi	35.204.74.118	true	false	unknown
id5-sync.com	141.95.98.64	true	false	unknown
d-ams1.turn.com	46.228.164.13	true	false	unknown
live.rezync.com	13.32.27.83	true	false	unknown
cdn.w55c.net	3.120.50.134	true	false	unknown
httplogserver-lb.global.unified-prod.sharethis.net	3.71.234.132	true	false	unknown
api.intentiq.com	52.85.49.17	true	false	unknown
ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	3.75.62.37	true	false	unknown
sync.crwdcntrl.net	34.247.104.223	true	false	unknown
rtb-csync-euw1.smartadserver.com	81.17.55.173	true	false	unknown
s4.histats.com	149.56.240.127	true	false	unknown
cm.g.doubleclick.net	142.250.186.98	true	false	unknown
idaas-ext.cph.liveintent.com	3.212.66.47	true	false	unknown
www.google.com	142.250.185.196	true	false	unknown
sync.intentiq.com	18.165.140.91	true	false	unknown
idaas6.cph.liveintent.com	3.214.14.27	true	false	unknown
bcp.crwdcntrl.net	18.202.126.138	true	false	unknown
match.adsrvr.org	52.223.40.198	true	false	unknown
pugm-lhrc.pubmnet.com	185.64.190.78	true	false	unknown
mo-prod-700625618.us-east-1.elb.amazonaws.com	44.214.62.67	true	false	unknown
syndicatedsearch.goog	142.250.185.206	true	false	unknown
ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com	18.195.6.136	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	unknown
api.powerafftrky.com	172.67.210.92	true	false	unknown
t.dtscout.com	141.101.120.11	true	false	unknown
pixel.onaudience.com	54.38.113.8	true	false	unknown
pixel-sync.sitescout.com	34.36.216.150	true	false	unknown
gametimepulse.com	172.67.221.214	true	false	unknown
212218.parkingcrew.net	13.248.148.254	true	false	unknown
ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com	54.72.64.168	true	false	unknown
www3.l.google.com	142.250.185.142	true	false	unknown
a.tribalfusion.com	104.18.37.193	true	false	unknown
ml314.com	34.117.77.79	true	false	unknown
googlehosted.l.googleusercontent.com	142.250.185.193	true	false	unknown
a.dtssrv.com	104.21.34.180	true	false	unknown
s.tribalfusion.com	172.64.150.63	true	false	unknown
static.cloudflareinsights.com	104.16.79.73	true	false	unknown
www.watchdogsecurity.online	103.224.182.253	true	false	unknown
de.tynt.com	67.202.105.32	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
ps.eyeota.net	3.120.214.218	true	false	unknown
idsync.rlcdn.com	35.244.174.68	true	false	unknown
dmp.truoptik.com	104.17.111.254	true	false	unknown
i.simpli.fi	35.234.162.151	true	false	unknown
football-booster.freevisit1.com	217.21.73.115	true	false	unknown
m.ib-ibi.com	64.58.232.177	true	false	unknown
sync.srv.stackadapt.com	52.71.88.198	true	false	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	54.170.228.31	true	false	unknown
thrtle.com	34.195.102.92	true	false	unknown
d38psrni17bvxu.cloudfront.net	18.66.121.135	true	false	unknown
ipv4.imgur.map.fastly.net	199.232.192.193	true	false	unknown
raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com	34.243.51.30	true	false	unknown
pixel.tapad.com	34.111.113.62	true	false	unknown
pippio.com	107.178.254.65	true	false	unknown
s.amazon-adsystem.com	52.46.130.91	true	false	unknown
secureanalytic.com	188.114.97.3	true	false	unknown
tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	3.120.46.195	true	false	unknown
dp2.33across.com	67.202.105.22	true	false	unknown
track2.securedvisit.com	3.221.132.94	true	false	unknown
global.ib-ibi.com	216.46.185.182	true	false	unknown
tags.crwdcntrl.net	18.239.18.12	true	false	unknown
thirdparty-logserver-lb.global.unified-prod.sharethis.net	54.93.159.243	true	false	unknown
t.dtscdn.com	104.26.12.60	true	false	unknown
e.dtscout.com	141.101.120.10	true	false	unknown
ic.tynt.com	67.202.105.31	true	false	unknown
ib.anycast.adnxs.com	185.89.210.244	true	false	unknown
load-euw1.exelator.com	34.254.143.3	true	false	unknown
pm.w55c.net	unknown	unknown	false	unknown
idpix.media6degrees.com	unknown	unknown	false	unknown
secure.adnxs.com	unknown	unknown	false	unknown
ib.mookie1.com	unknown	unknown	false	unknown
token.rubiconproject.com	unknown	unknown	false	unknown
sync.smartadserver.com	unknown	unknown	false	unknown
i6.liadm.com	unknown	unknown	false	unknown
afs.googleusercontent.com	unknown	unknown	false	unknown
c1.adform.net	unknown	unknown	false	unknown
ce.lijit.com	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
d.turn.com	unknown	unknown	false	unknown
cms.analytics.yahoo.com	unknown	unknown	false	unknown
stags.bluekai.com	unknown	unknown	false	unknown
c.cintnetworks.com	unknown	unknown	false	unknown
i.w55c.net	unknown	unknown	false	unknown
sync-tm.everesttech.net	unknown	unknown	false	unknown
p.rfihub.com	unknown	unknown	false	unknown
sync.sharethis.com	unknown	unknown	false	unknown
t.sharethis.com	unknown	unknown	false	unknown
image6.pubmatic.com	unknown	unknown	false	unknown
ups.analytics.yahoo.com	unknown	unknown	false	unknown
d.agkn.com	unknown	unknown	false	unknown
go.greenlinknow.com	unknown	unknown	false	unknown
cdn-tc.33across.com	unknown	unknown	false	unknown
loadus.exelator.com	unknown	unknown	false	unknown
aqfer.lijit.com	unknown	unknown	false	unknown
cdn.tynt.com	unknown	unknown	false	unknown
agent.intentiq.com	unknown	unknown	false	unknown
s10.histats.com	unknown	unknown	false	unknown
aa.agkn.com	unknown	unknown	false	unknown
dpm.demdex.net	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true	false	Avira URL Cloud: safe	unknown
https://gametimepulse.com/prod/images/b32438bfc8ff3c596a43efbc29d32bae.png	false	Avira URL Cloud: safe	unknown
https://s4.histats.com/stats/e.php?4891773&@Ab&@R57951&@w	false	Avira URL Cloud: safe	unknown
https://pixel-sync.sitescout.com/connectors/eyeota/usersync?gdpr=0&gdpr_consent=&redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3Dm51mhg1%26uid%3D%7BuserId%7D	false	Avira URL Cloud: safe	unknown
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	false	URL Reputation: safe	unknown
https://dpm.demdex.net/ibs:dpid=121998&dpuuid=3bdb359c63037044d87658cfcb77131&gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D9828%2Ftp%3DADBE%2Ftpid%3D%24%7BDD_UUID%7D%2Fgdpr=0	false	Avira URL Cloud: safe	unknown
https://i.simpli.fi/dpx?cid=11411&us_privacy=&33random=1725984637878.3&ref=	false	Avira URL Cloud: safe	unknown
https://pixel.onaudience.com/?partner=137085098&mapped=10401725984635D685D944936F64E5C9	false	Avira URL Cloud: safe	unknown
https://idsync.rlcdn.com/395886.gif?partner_uid=3646915315069091854	false	Avira URL Cloud: safe	unknown
https://i.imgur.com/NIXl8QH.jpg	false	Avira URL Cloud: safe	unknown
http://ww38.watchdogsecurity.online/	false		unknown
https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=182772995&iiqidtype=2&iiqpcid=820734d2-60db-e66e-29d4-41fda1749e8a&iiqpciddate=1725984653272&tsrnd=585_1725984653273&vrref=https%3A%2F%2Fpxdrop.lijit.com%2F&jsver=5.088&gdpr=0	false	Avira URL Cloud: safe	unknown
https://gametimepulse.com/assets/hl-de833af9.js	false	Avira URL Cloud: safe	unknown
https://gametimepulse.com/assets/hl-b2170ae6.css	false	Avira URL Cloud: safe	unknown
https://sync.crwdcntrl.net/map/c=10915/tp=TRNN/tpid=9140754838064038298/gdpr=0	false	Avira URL Cloud: safe	unknown
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fps.eyeota.net%252Fmatch%253Fuid%253D%2524UID%2526bid%253D2cr76e1%2526dc_rc%253D4%2526dc_mr%253D5%2526dc_orig%253D3b2cb90%2526%2526referrer_pid%253D3b2cb90	false	Avira URL Cloud: safe	unknown
https://t.dtscout.com/pv/?_a=v&_h=football-booster.freevisit1.com&_ss=1mx4vkpben&_pv=1&_ls=0&_u1=1&_u3=1&_cc=us&_pl=d&_cbid=6g49&_cb=_dtspv.c	false	Avira URL Cloud: safe	unknown
https://ps.eyeota.net/pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1725984683334.3	false	Avira URL Cloud: safe	unknown
https://ps.eyeota.net/pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1725984683334.5	false	Avira URL Cloud: safe	unknown
https://sync.crwdcntrl.net/map/c=10158/tp=TPAD/tpid=5a494773-b3c5-4363-89b4-d92c8335b5ac	false	Avira URL Cloud: safe	unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=lotame&ttd_tpi=1&gdpr=0	false	Avira URL Cloud: safe	unknown
https://id5-sync.com/c/19/2/7/3.gif?puid=5768470956374677316&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5124322333652738385&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3D0c27f139-f657-4f03-af87-ff8cbd65acfa%253A1725984678.962527%26pid%3D500040%26it%3D1%26iv%3D0c27f139-f657-4f03-af87-ff8cbd65acfa%253A1725984678.962527%26_%3D1725984678.9646904	false	Avira URL Cloud: safe	unknown
https://ps.eyeota.net/match?bid=c9gd69u&uid=216623105001003118731	false	Avira URL Cloud: safe	unknown
https://sync.crwdcntrl.net/map/c=281/tp=ANXS/tpid=5768470956374677316/gdpr=0/rand=576822339	false	Avira URL Cloud: safe	unknown
https://ib.mookie1.com/image.sbxx?go=262106&pid=420&xid=3bdb359c63037044d87658cfcb77131	false	Avira URL Cloud: safe	unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=bluekai	false	Avira URL Cloud: safe	unknown
https://bcp.crwdcntrl.net/pixels?src=LTJS&s=7%2C92%2C49%2C136%2C135%2C153%2C33%2C78%2C122%2C26%2C22%2C148%2C116%2C61%2C106%2C104%2C8%2C54%2C100%2C145%2C3%2C2%2C94&c=3825	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=bluekai&google_cm&google_sc&google_hm=cDNxa2FnUno5OTlzam1PWg%3D%3D	false	Avira URL Cloud: safe	unknown
https://sync.smartadserver.com/getuid?gdpr=0&url=https://bcp.crwdcntrl.net/qmap?c=16236&tp=SMAD&tpid=[sas_uid]&gdpr=0&cklb=1	false	Avira URL Cloud: safe	unknown
https://ml314.com/csync.ashx?fp=9ab07dfad034f7723914d4ce2ab29b55dbc36667c21b22244884257e4ed5b600f4cb09cee1a4f8eb&person_id=3646915315069091854&eid=50082	false	Avira URL Cloud: safe	unknown
https://thrtle.com/sync?_reach=1&vxii_pdid=na&vxii_pid=12&vxii_pid1=7002&vxii_rcid=bb6d1780-42bc-4797-8768-f25b0bae1973&vxii_rmax=1	false	Avira URL Cloud: safe	unknown
https://ups.analytics.yahoo.com/ups/58773/cms?partner_id=Eyeot&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://pd.sharethis.com/pd/dtscout	false	Avira URL Cloud: safe	unknown
http://football-booster.freevisit1.com/assets/css/style.css	false	Avira URL Cloud: safe	unknown
https://match.adsrvr.org/track/cmf/generic?ttd_pid=lotame&ttd_tpi=1&gdpr=0&gdpr_consent=&id5=ID5-6fe5uDkUeg6pvrVeqEHERleL9xsJupDlKU665UueJw	false	Avira URL Cloud: safe	unknown
https://id5-sync.com/c/19/321/3/7.gif?puid=$_BK_UUID	false	Avira URL Cloud: safe	unknown
https://gametimepulse.com/assets/hl-6c0c41ea.js	false	Avira URL Cloud: safe	unknown
https://syndicatedsearch.goog/afs/gen_204?client=dp-teaminternet09_3ph&output=uds_ads_only&zx=g5fjpv9lfybk&aqid=um_gZti2JPaLmLAPt4jc-AY&psid=7840396037&pbt=bs&adbx=375&adby=130&adbh=496&adbw=530&adbah=160%2C160%2C160&adbn=master-1&eawp=partner-dp-teaminternet09_3ph&errv=670534788&csala=17%7C0%7C1047%7C1415%7C228&lle=0&ifv=1&hpt=1	false	Avira URL Cloud: safe	unknown
http://ww38.watchdogsecurity.online/favicon.ico	false	Avira URL Cloud: safe	unknown
https://i.imgur.com/jWsQC86.jpg	false	Avira URL Cloud: safe	unknown
https://pippio.com/api/sync?it=1&pid=500040&_=1725984695.3619437&iv=0c27f139-f657-4f03-af87-ff8cbd65acfa:1725984678.962527	false	Avira URL Cloud: safe	unknown
http://football-booster.freevisit1.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://gametimepulse.com/assets/hl-5cd68a50.js	false	Avira URL Cloud: safe	unknown
https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMTc0ODM4ODY2Ni90LzI/dpuid/ID5-6fe5uDkUeg6pvrVeqEHERleL9xsJupDlKU665UueJw/url/https%3A%2F%2Fid5-sync.com%2Fc%2F19%2F224%2F6%2F4.gif%3Fpuid%3D%24%21%7BTURN_UUID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=	false	Avira URL Cloud: safe	unknown
https://i.w55c.net/ping_match.gif?st=EYEOTA&rurl=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D9sn4omv%26uid%3D_wfivefivec_%26newuser%3D1%26dc_rc%3D1%26dc_mr%3D5%26dc_orig%3D51mdg9u%26	false	Avira URL Cloud: safe	unknown
https://i.simpli.fi/dpx?cid=11411&us_privacy=&33random=1725984677676.6&ref=	false	Avira URL Cloud: safe	unknown
https://sync.smartadserver.com/getuid?gdpr=0&url=https%3A%2F%2Fbcp.crwdcntrl.net%2Fqmap%3Fc%3D16236%26tp%3DSMAD%26tpid%3D[sas_uid]%26gdpr%3D0	false	Avira URL Cloud: safe	unknown
https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D281%2Ftp%3DANXS%2Ftpid%3D%24UID%2Fgdpr%3D0%2Frand=576822339	false	Avira URL Cloud: safe	unknown
https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMjg0NTA1NDYvdC8w/url/https://ps.eyeota.net/match?bid=1mpjpn0&turn_id=$!{TURN_UUID}&newuser=1&dc_rc=2&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=lotame_dmp&google_hm=M2JkYjM1OWM2MzAzNzA0NGQ4NzY1OGNmY2I3NzEzMQ&gdpr=0	false	Avira URL Cloud: safe	unknown
https://ps.eyeota.net/match?bid=9sn4omv&uid=GkIO9st71SO3sk5&newuser=1&dc_rc=1&dc_mr=5&dc_orig=51mdg9u&	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=eye&google_cm&google_sc&google_hm=MlJSR0VDcmVKNWE0ZTNlTHRoeUVZaTdqYXVaOFFQMmg4VVlubjJhNmhLdFU&gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&dc_rc=1&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90	false	Avira URL Cloud: safe	unknown
https://thrtle.com/sync?vxii_pid=7002&vxii_pdid=na	false	Avira URL Cloud: safe	unknown
https://live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5124322333652738385&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3D0c27f139-f657-4f03-af87-ff8cbd65acfa%253A1725984678.962527%26pid%3D500040%26it%3D1%26iv%3D0c27f139-f657-4f03-af87-ff8cbd65acfa%253A1725984678.962527%26_%3D1725984688.1525216	false	Avira URL Cloud: safe	unknown
https://gametimepulse.com/assets/hl-fc33c920.js	false	Avira URL Cloud: safe	unknown
https://loadus.exelator.com/load/?p=204&g=260&buid=3bdb359c63037044d87658cfcb77131&j=0&gdpr=0	false	Avira URL Cloud: safe	unknown
https://gametimepulse.com/assets/hl-574d21d7.js	false	Avira URL Cloud: safe	unknown
https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=6CCACE81-3E9F-4932-AE9D-F8064F4F357C&gdpr=0	false	Avira URL Cloud: safe	unknown
https://t.dtscout.com/idg/?su=10401725984635D685D944936F64E5C9	false	Avira URL Cloud: safe	unknown
https://e.dtscout.com/e/?v=1a&pid=5200&site=1&l=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fregister-hsfootball.php&j=	false	Avira URL Cloud: safe	unknown
https://syndicatedsearch.goog/adsense/domains/caf.js?pac=2	false	Avira URL Cloud: safe	unknown
https://gametimepulse.com/assets/hl-44fc4fed.woff2	false	Avira URL Cloud: safe	unknown
https://t.dtscdn.com/widget/?d=10401725984635D685D944936F64E5C9&nid=300&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fregister-hsfootball.php&r=	false	Avira URL Cloud: safe	unknown
https://dp2.33across.com/ps/?tt=iframe&pid=1198&us_privacy=&random=1725984677676.4	false	Avira URL Cloud: safe	unknown
https://i.liadm.com/s/35759?bidder_id=44489&bidder_uuid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d	false	Avira URL Cloud: safe	unknown
https://sync.crwdcntrl.net/map/c=10832/tp=TRUP/tpid=b9bdb847e735edc7495bcfea37bdb579	false	Avira URL Cloud: safe	unknown
https://gametimepulse.com/assets/hl-f95c6502.js	false	Avira URL Cloud: safe	unknown
https://pippio.com/api/sync?it=1&pid=500040&_=1725984688.1525216&iv=0c27f139-f657-4f03-af87-ff8cbd65acfa:1725984678.962527	false	Avira URL Cloud: safe	unknown
https://ps.eyeota.net/match?bid=bhc9gd0&yahoo_ver=2&yahoo_id=y-avDHyJhE2pU7_inbFoc6KAd_kDNVy9CkRxg-~A&gdpr=0	false	Avira URL Cloud: safe	unknown
https://s.amazon-adsystem.com/dcm?pid=a8acf3b3-7ede-4e18-8405-edaf41005f97&id=3bdb359c63037044d87658cfcb77131&dcc=t	false	Avira URL Cloud: safe	unknown
https://live.rezync.com/pixel?c=bd8618c307ae9885a12561b7191e2cea&cid=5124322333652738385&referrer={encSite}&forward=https%3A%2F%2Fi.liadm.com%2Fs%2F56409%3Fbidder_id%3D200442%26bidder_uuid%3D0c27f139-f657-4f03-af87-ff8cbd65acfa%253A1725984678.962527%26pid%3D500040%26it%3D1%26iv%3D0c27f139-f657-4f03-af87-ff8cbd65acfa%253A1725984678.962527%26_%3D1725984688.1257787	false	Avira URL Cloud: safe	unknown
https://s.tribalfusion.com/z/i.match?p=b31&redirect=https%3A%2F%2Fthrtle.com%2Fsync%3Fvxii_pid%3D5042%26vxii_pdid%3D%24TF_USER_ID_ENC%24%26vxii_ts%3D3%26_t%3D1725984658&u=bb6d1780-42bc-4797-8768-f25b0bae1973	false	Avira URL Cloud: safe	unknown
https://thrtle.com/sync?vxii_pid=7002&vxii_pdid=JTyKAQZHM4-7zcR_Qvazq_dw	false	Avira URL Cloud: safe	unknown
https://gametimepulse.com/sentry	false	Avira URL Cloud: safe	unknown
https://sync.sharethis.com/id5?uid=ID5-6fe5uDkUeg6pvrVeqEHERleL9xsJupDlKU665UueJw&gdpr=0&gdpr_consent=&rurl=https%3A%2F%2Fid5-sync.com%2Fa%2F19%2F121%2F4%2F6%2Fgif%2F0%2F0%2F0%2F0%2F	false	Avira URL Cloud: safe	unknown
https://go.greenlinknow.com/t/clk?id=qMHYEZQT7WSvn3tY&s1=46e1fe29-1a9b-46f3-b58f-9a54bdf046ed&s2=1576&s7=pecinta%20sholawat&s8=	false	Avira URL Cloud: safe	unknown
https://i.liadm.com/s/76929?bidder_id=204553&bidder_uuid=na&rnd=1725984650927&_li_chk=true&previous_uuid=90fc4aa8e5c94ce0a7cc9ff564524752	false	Avira URL Cloud: safe	unknown
https://pixel.onaudience.com/?partner=147&mapped=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d&icm&gdpr=0&gdpr_consent=&cver	false	Avira URL Cloud: safe	unknown
https://pixel.tapad.com/idsync/ex/receive/check?partner_id=LOTAME&partner_device_id=3bdb359c63037044d87658cfcb77131&gdpr=0&partner_url=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10158%2Ftp%3DTPAD%2Ftpid%3D%24%7BTA_DEVICE_ID%7D&ch=	false	Avira URL Cloud: safe	unknown
https://ups.analytics.yahoo.com/ups/58773/cms?partner_id=Eyeot&gdpr=0&gdpr_consent=&verify=true	false	Avira URL Cloud: safe	unknown
https://thrtle.com/sync?vxii_pid=5042&vxii_pdid=18072662055787220129&vxii_ts=3&_t=1725984658	false	Avira URL Cloud: safe	unknown
https://www.google.com/images/cleardot.gif	false	Avira URL Cloud: safe	unknown
https://sync.srv.stackadapt.com/sync?nid=lotame&gdpr=0	false	Avira URL Cloud: safe	unknown
https://ups.analytics.yahoo.com/ups/58691/cms?partner_id=THROTLE	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_359.2.dr, chromecache_258.2.dr	false	URL Reputation: safe	unknown
https://syndicatedsearch.goog	chromecache_353.2.dr, chromecache_352.2.dr, chromecache_356.2.dr, chromecache_361.2.dr	false	Avira URL Cloud: safe	unknown
https://pixel.tapad.com/idsync/ex/receive?partner_id=LOTAME&partner_device_id=3bdb359c63037044d87658	chromecache_230.2.dr	false	Avira URL Cloud: safe	unknown
https://secureanalytic.com/scripts/push/script/02eyoyxdkz	chromecache_285.2.dr, chromecache_194.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_252.2.dr, chromecache_360.2.dr	false	URL Reputation: safe	unknown
https://pushflow.net/api/log/	chromecache_190.2.dr, chromecache_182.2.dr	false	Avira URL Cloud: safe	unknown
https://dpm.demdex.net/ibs:dpid=121998&dpuuid=3bdb359c63037044d87658cfcb77131&gdpr=0&redir=https%3A%	chromecache_230.2.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_360.2.dr	false	URL Reputation: safe	unknown
https://openjsf.org/	chromecache_387.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5	chromecache_353.2.dr, chromecache_352.2.dr, chromecache_356.2.dr, chromecache_361.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.pushflow.net/scripts/current/sdk/pushflowSDK.js	chromecache_190.2.dr, chromecache_182.2.dr	false	Avira URL Cloud: safe	unknown
https://pd.sharethis.com/pd/dtscout?_t_=px&url=	chromecache_200.2.dr, chromecache_284.2.dr	false	Avira URL Cloud: safe	unknown
http://underscorejs.org/LICENSE	chromecache_387.2.dr	false	Avira URL Cloud: safe	unknown
https://npms.io/search?q=ponyfill.	chromecache_387.2.dr, chromecache_327.2.dr	false	Avira URL Cloud: safe	unknown
https://secure.adnxs.com/getuid?https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D281%2Ftp%3DANXS%2Ftpid%	chromecache_230.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.16.80.73	unknown	United States	13335	CLOUDFLARENETUS	false
64.58.232.177	m.ib-ibi.com	United States	13649	ASN-VINSUS	false
69.169.86.39	unknown	United States	29838	AMCUS	false
3.120.50.134	cdn.w55c.net	United States	16509	AMAZON-02US	false
3.73.251.164	unknown	United States	16509	AMAZON-02US	false
3.124.210.90	unknown	United States	16509	AMAZON-02US	false
3.221.1.219	unknown	United States	14618	AMAZON-AESUS	false
52.6.40.178	unknown	United States	14618	AMAZON-AESUS	false
18.66.121.135	d38psrni17bvxu.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
104.21.67.116	unknown	United States	13335	CLOUDFLARENETUS	false
34.254.143.3	load-euw1.exelator.com	United States	16509	AMAZON-02US	false
18.202.126.138	bcp.crwdcntrl.net	United States	16509	AMAZON-02US	false
18.239.69.3	unknown	United States	16509	AMAZON-02US	false
34.243.51.30	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
52.3.139.193	unknown	United States	14618	AMAZON-AESUS	false
104.17.111.254	dmp.truoptik.com	United States	13335	CLOUDFLARENETUS	false
199.232.192.193	ipv4.imgur.map.fastly.net	United States	54113	FASTLYUS	false
18.239.18.33	unknown	United States	16509	AMAZON-02US	false
52.71.88.198	sync.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
107.178.254.65	pippio.com	United States	15169	GOOGLEUS	false
142.250.185.193	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false
142.250.185.194	unknown	United States	15169	GOOGLEUS	false
142.250.186.142	unknown	United States	15169	GOOGLEUS	false
44.199.36.5	unknown	United States	14618	AMAZON-AESUS	false
67.202.105.22	dp2.33across.com	United States	32748	STEADFASTUS	false
35.244.174.68	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
143.204.98.21	unknown	United States	16509	AMAZON-02US	false
63.34.80.245	unknown	United States	16509	AMAZON-02US	false
141.95.98.64	id5-sync.com	Germany	680	DFNVereinzurFoerderungeinesDeutschenForschungsnetzese	false
142.250.185.206	syndicatedsearch.goog	United States	15169	GOOGLEUS	false
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
54.93.159.243	thirdparty-logserver-lb.global.unified-prod.sharethis.net	United States	16509	AMAZON-02US	false
18.165.140.91	sync.intentiq.com	United States	3	MIT-GATEWAYSUS	false
34.195.102.92	thrtle.com	United States	14618	AMAZON-AESUS	false
46.228.164.13	d-ams1.turn.com	United Kingdom	56396	TURNGB	false
185.89.210.180	unknown	Germany	29990	ASN-APPNEXUS	false
3.212.66.47	idaas-ext.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
104.16.79.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
34.36.216.150	pixel-sync.sitescout.com	United States	2686	ATGS-MMD-ASUS	false
185.64.190.78	pugm-lhrc.pubmnet.com	United Kingdom	62713	AS-PUBMATICUS	false
44.214.62.67	mo-prod-700625618.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
104.21.34.180	a.dtssrv.com	United States	13335	CLOUDFLARENETUS	false
52.85.49.17	api.intentiq.com	United States	16509	AMAZON-02US	false
142.250.181.225	unknown	United States	15169	GOOGLEUS	false
142.250.181.228	unknown	United States	15169	GOOGLEUS	false
188.114.96.3	unknown	European Union	13335	CLOUDFLARENETUS	false
52.46.130.91	s.amazon-adsystem.com	United States	16509	AMAZON-02US	false
54.77.7.79	unknown	United States	16509	AMAZON-02US	false
217.21.73.115	football-booster.freevisit1.com	United Kingdom	12491	IPPLANET-ASIL	false
172.217.16.132	unknown	United States	15169	GOOGLEUS	false
104.18.37.193	a.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
81.17.55.173	rtb-csync-euw1.smartadserver.com	Netherlands	24588	NETPROVODOV-ASRU	false
3.120.46.195	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
172.67.221.214	gametimepulse.com	United States	13335	CLOUDFLARENETUS	false
35.234.162.151	i.simpli.fi	United States	15169	GOOGLEUS	false
142.250.185.142	www3.l.google.com	United States	15169	GOOGLEUS	false
18.184.216.10	unknown	United States	16509	AMAZON-02US	false
142.250.186.110	unknown	United States	15169	GOOGLEUS	false
3.221.132.94	track2.securedvisit.com	United States	14618	AMAZON-AESUS	false
216.46.185.182	global.ib-ibi.com	United States	13649	ASN-VINSUS	false
149.56.240.127	s4.histats.com	Canada	16276	OVHFR	false
34.117.77.79	ml314.com	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
13.32.27.83	live.rezync.com	United States	7018	ATT-INTERNET4US	false
13.248.148.254	212218.parkingcrew.net	United States	16509	AMAZON-02US	false
142.250.185.68	unknown	United States	15169	GOOGLEUS	false
3.75.62.37	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud	United States	16509	AMAZON-02US	false
185.89.210.244	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
34.232.35.140	unknown	United States	14618	AMAZON-AESUS	false
103.224.182.253	www.watchdogsecurity.online	Australia	133618	TRELLIAN-AS-APTrellianPtyLimitedAU	false
18.239.18.78	unknown	United States	16509	AMAZON-02US	false
172.64.150.63	s.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
54.39.128.162	unknown	Canada	16276	OVHFR	false
3.120.214.218	ps.eyeota.net	United States	16509	AMAZON-02US	false
54.170.228.31	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
188.114.97.3	secureanalytic.com	European Union	13335	CLOUDFLARENETUS	false
104.26.12.60	t.dtscdn.com	United States	13335	CLOUDFLARENETUS	false
52.223.40.198	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
3.71.234.132	httplogserver-lb.global.unified-prod.sharethis.net	United States	16509	AMAZON-02US	false
141.101.120.11	t.dtscout.com	European Union	13335	CLOUDFLARENETUS	false
141.101.120.10	e.dtscout.com	European Union	13335	CLOUDFLARENETUS	false
35.204.74.118	um.simpli.fi	United States	15169	GOOGLEUS	false
81.17.55.116	unknown	Netherlands	24588	NETPROVODOV-ASRU	false
18.239.69.119	d1hmmdgobu85y9.cloudfront.net	United States	16509	AMAZON-02US	false
34.247.104.223	sync.crwdcntrl.net	United States	16509	AMAZON-02US	false
54.38.113.8	pixel.onaudience.com	France	16276	OVHFR	false
67.202.105.32	de.tynt.com	United States	32748	STEADFASTUS	false
67.202.105.31	ic.tynt.com	United States	32748	STEADFASTUS	false
18.195.6.136	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.184.206	unknown	United States	15169	GOOGLEUS	false
3.214.14.27	idaas6.cph.liveintent.com	United States	14618	AMAZON-AESUS	false
142.250.186.98	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
67.202.105.34	unknown	United States	32748	STEADFASTUS	false
172.67.210.92	api.powerafftrky.com	United States	13335	CLOUDFLARENETUS	false
18.239.18.12	tags.crwdcntrl.net	United States	16509	AMAZON-02US	false
34.111.113.62	pixel.tapad.com	United States	15169	GOOGLEUS	false
54.76.106.86	unknown	United States	16509	AMAZON-02US	false
54.72.64.168	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1508803
Start date and time:	2024-09-10 18:09:27 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@38/397@330/100
Cookbook Comments:	Browse: http://football-booster.freevisit1.com/dmca.php Browse: http://football-booster.freevisit1.com/contact.php Browse: http://football-booster.freevisit1.com/register-hsfootball.php Browse: https://www.watchdogsecurity.online/

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.131, 142.250.185.110, 64.233.166.84, 34.104.35.123, 142.250.186.170, 142.250.184.195, 23.35.237.174, 2.19.225.248, 172.217.18.3, 172.217.23.106, 172.66.132.114, 172.66.132.118, 142.250.185.170, 172.217.18.10, 216.58.212.138, 142.250.186.106, 142.250.185.202, 142.250.185.138, 142.250.185.234, 216.58.212.170, 142.250.185.74, 142.250.184.202, 216.58.206.74, 142.250.185.106, 172.217.16.202, 142.250.186.74, 216.58.206.42, 142.250.186.35, 142.250.181.234, 142.250.74.202, 142.250.186.42, 142.250.184.234, 172.217.18.106, 142.250.186.131, 142.250.186.138, 2.19.97.59, 2.19.97.33, 172.64.153.173, 104.18.34.83, 95.101.111.145, 95.101.111.167, 95.101.111.153, 95.101.111.166, 95.101.111.156, 104.18.35.167, 172.64.152.89, 20.114.59.183, 2.19.97.25, 2.19.97.97, 93.184.221.240, 192.229.221.95, 13.85.23.206, 151.101.194.49, 151.101.66.49, 151.101.2.49, 151.101.130.49, 104.18.41.39, 172.64.146.217, 13.107.42.14, 52.165.164.15, 51.144.7.192, 37.157.5.87, 37.157.5.84, 37.157.4
Excluded domains from analysis (whitelisted): tags.bluekai.com.edgekey.net, slscr.update.microsoft.com, partner.googleadservices.com, clientservices.googleapis.com, e213908.b.akamaiedge.net, l-0005.l-msedge.net, e9126.x.akamaiedge.net, clients2.google.com, ocsp.digicert.com, e167121.b.akamaiedge.net, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, s10.histats.com.cdn.cloudflare.net, rtb-csync-geo.usersync-prod-sas.akadns.net, wu-b-net.trafficmanager.net, www.google-analytics.com, waws-prod-am2-241.westeurope.cloudapp.azure.com, fonts.googleapis.com, fs.microsoft.com, content-autofill.googleapis.com, e4016.a.akamaiedge.net, a-emea.rfihub.com.akadns.net, edgedl.me.gvt1.com, translate.googleapis.com, map.media6degrees.com.cdn.cloudflare.net, clients.l.google.com, h2.shared.global.fastly.net, pixel.rubiconproject.net.akadns.net, cdn-tc.33across.com.cdn.cloudflare.net, cdn.tynt.com.cdn.cloudflare.net, track.adformnet.akadns.net, translate-pa.googleapis.com, wu.azureedge.net, www.googletagm
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Sep 10 15:10:26 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9823268452552854
Encrypted:	false
SSDEEP:	48:8+d4T8Is4H6idAKZdA19ehwiZUklqehLy+3:8pv28y
MD5:	355200FD534B59C38BD8902E594206A8
SHA1:	09E312459AAF9AEF2ECE309EA5601411DA8367B8
SHA-256:	B509755AA1A6FAE52EA3012191C0D142325A5693F50675A836CE984A6F2FD8CB
SHA-512:	F19CE9CEA1431763ACEA5D9FC0181F9599A1F9EDB599832EFF612C269809F5A9071199CDC79BC031DE00008604876987E6037930B62DA142639B6CC6AEBBDAC4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,..........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IYK.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VYK.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VYK.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VYK............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VYN............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........r..4.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Sep 10 15:10:26 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.999048205918007
Encrypted:	false
SSDEEP:	48:8vd4T8Is4H6idAKZdA1weh/iZUkAQkqehsy+2:8avU9Qly
MD5:	583A62DFA3BC9D295B0F7BF9D44CB308
SHA1:	A81C9C75AC97A503741FC82A2BFE61EDC79C50A4
SHA-256:	8264449FD60C85EFE4ACACA10941DDAB51E3B92C2F34DC176AE376D20AB8043E
SHA-512:	90629D611F360575AF19F9F4C1829445A30DD5C6BA77E3C3D7C0E1F77AB5F8495CED7C51CCB16CAF82CB018348EF2189E2BA3195A7C92097FCCF8D9F0DD2E918
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IYK.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VYK.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VYK.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VYK............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VYN............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........r..4.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.008823809725616
Encrypted:	false
SSDEEP:	48:8xBd4T8IsH6idAKZdA14tseh7sFiZUkmgqeh7s+y+BX:8xMv7nwy
MD5:	F43D5C244FC6F52408759EF27AE271F3
SHA1:	10078B08C08F5E682A7E63B6A57AB8506E6AE39D
SHA-256:	80FAF97FEB642748763351F9B63C6D3A8C99698290B7496EF4A4989401918AC6
SHA-512:	B5710C2A10A4B5A6A59CA6F61D6E39822EA36D6844F9C4A1D47A109FC03299214A100060DD82D26A2F0122A15694F6BA49104E88DD3639FA060787EBCBB7C38E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IYK.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VYK.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VYK.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VYK............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........r..4.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Sep 10 15:10:26 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.997447965468218
Encrypted:	false
SSDEEP:	48:8td4T8Is4H6idAKZdA1vehDiZUkwqeh4y+R:8Yv/Gy
MD5:	7786972C000F750BB2F577D0B686182A
SHA1:	B036E2E21FCA921BF22600F6382ED630250A03C0
SHA-256:	625F5055A9A8C85AB2E0C77FF06F03F63F789555489EF72FD42ED5DE6D8FEF08
SHA-512:	8E73B3D42DA86AFCE277C3ECEE990E98149970AEE6AA6A663D662146A1E6B58AA90D032BE199EA5DCC9F87DAEF01717B6CB1991C07D763185FEF23361362876A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....3......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IYK.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VYK.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VYK.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VYK............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VYN............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........r..4.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Sep 10 15:10:26 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9859433834567772
Encrypted:	false
SSDEEP:	48:8nd4T8Is4H6idAKZdA1hehBiZUk1W1qehyy+C:8Sv/9Sy
MD5:	CBDD8C21098A6E1594027DFFC12D4ED7
SHA1:	F8E682999BBA352CD61D6E60063F38B94F9C1FC0
SHA-256:	EB9458C2061E817B2164412685ED5EC744FF4EAF6A20892EBEA25EB0B631B572
SHA-512:	801DFB620C6AFC2B950CDE382FBD94FD1C229D733FFE6000A21926EA64407FE75CEBDEA1438F1DE73DC5C286F467E3A46608691DA7F28080243DADDD1F4ACD1D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....XN.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IYK.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VYK.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VYK.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VYK............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VYN............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........r..4.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Sep 10 15:10:26 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.996381857945884
Encrypted:	false
SSDEEP:	48:8Cld4T8Is4H6idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbwy+yT+:8CQv3T/TbxWOvTbwy7T
MD5:	DC2C1A0015F09E7CF721FF80FD4B6466
SHA1:	330903FD1C82F09D6F1EADD592EF0C697CF74890
SHA-256:	89B206D9C6639289DE1B236DEE655697217438F300C9081BFF2AE06644038362
SHA-512:	C84D5B85BB26565102CCE3A896A91DBAF62AEA2935ED94D44741D8D15C574FA3E78758587668B11FCC24F98811BF5638EE5405B9D0F7010C105B19120E3881D3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....=......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IYK.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VYK.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VYK.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VYK............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VYN............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........r..4.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 24732
Category:	dropped
Size (bytes):	9706
Entropy (8bit):	7.974244330200313
Encrypted:	false
SSDEEP:	192:sdfLzIYp/TqA9pWKOtmld+fBOApnSbGbZAsCQSu98xpZi2:sdffIeecIKameOsnSbeCsCu98xpM2
MD5:	373CEF3A03E2AAB544B1645A96E1557D
SHA1:	789BB2E7E291CE40587D62BDB821934E0F7B736D
SHA-256:	A9DCEB91B28EDD0CE446F678E2117ECE68191D4C2E609B07F4910D2F93F58226
SHA-512:	9DF97EEAC20A806BDDAAC955EA39554040D9B5A38A5C7432C4BC0347FFB4C8C14F1E923082D9B227D6421996AEE238B0A027038FBDC381EA3365616544B94388
Malicious:	false
Reputation:	low
Preview:	...........m[.8.0.......+."..^mD.R..@y...Q.m".YIKq...5..8.t..=.9...C.i43..H..,y..Z.-.n,..5{I.....g....Z....if26..@...... _..Y..]..z/...Kk.W..I.....Y;.`PG.[k.J...G.%&"........mG.\..>.TZ;...K.\|.d.X^v/.5K.Nj......$...{d.Y.....EY.K}0.._...f.e..!.....5..:...O.H..@p.#...{k..O...w.....:.lZ.U.@..3J./w.......1....[k...66-.,.U.vn.u...bg...uuyn.X#.&.....IW..k/jnVS.&.o...t].{Y.'{...&.........u..h2~...e...;..M.J.U...4.Sj.Y.G...=.......h.....\.....i..O..g~`.X.u.........*..>...........U.u.I._}:..xXr..7\|....Q=.x.s P.....yG^08..#..'kg....U.......N..Z.<w..3.._..O..]r{.&..._...u.U.to"j.^....oA.4....g..g..2.f..Q&uW^.....D.z.....}.o}gm.V...Y.........._76......D.G....b..n.%z..k;.......?.$.D.....:[..:...a.....fk{[........}k....zv...........?.d>...Xcn...\|....^i..k.............n.Y.G.8..9<>..f......a.<.......Ok.:...'K.f...c(8....%<....<........6.<....B..x...3..L.:..3...(...9.6..;....Z.>...j.........A..uz...8>.}..............@....O......H>A..`...p....d....4M..

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (345), with no line terminators
Category:	downloaded
Size (bytes):	345
Entropy (8bit):	5.164872571408998
Encrypted:	false
SSDEEP:	6:haELnV8mgO9l3YId5LffCY2s4cMhMVRHM7C+hM7h5XgOal8cy+Xi/XLbcGdYI:haEiu3Nd5r72hcZ7HICKIHXgP8YEb3yI
MD5:	5B07CA30C87A02593C83C8872DD8DF42
SHA1:	27E6B236F3264BE10D02CBCA60C53C97171F5B5B
SHA-256:	1235A9B4D659D2E83BDE4F1FEC855F46C4647D57E17EED1EFD0C08498E5D1443
SHA-512:	5550035D9A974B92291B0F45A92DE69D8ABCA760F24961AFD816DC6FE96FD7026288E522720EFACD338B5071AF4F84E42E2205DA624C263AB6B4F05A869C8AC3
Malicious:	false
Reputation:	low
URL:	https://api.intentiq.com/profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1725984691538
Preview:	<!DOCTYPE html><html><body><script>const script=document.createElement('script');script.src='https://agent.intentiq.com/Agent/Hints/IIQUniversalID-sync.js';script.async=true;script.defer=true;script.onload=function(){const intentIq_182772995=new IntentIqSyncObject({partner:182772995});};document.head.appendChild(script);</script></body></html>

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2302), with no line terminators
Category:	downloaded
Size (bytes):	2302
Entropy (8bit):	5.24451023097325
Encrypted:	false
SSDEEP:	48:q+WXAFEcCYHX/UCDMnvbRgXK8DHXBiCgrn:q6DPPsRgX/2
MD5:	43B17C7B81B6281CA01991A2E5CAE3A7
SHA1:	53C5AFCE279E067ED8C78A08A1A80ED2AC1AC27A
SHA-256:	A865904878986BA6CAF73C5416DB4B7E04B947546446E04F0BE94C2308A9A275
SHA-512:	1C0DA777D0163874117680B29BBD2C2229E20D6EFC0521A4C019E7CF34FBB001C2AEA07EBFBA742C420FC0C43AA83A1637A2AB48CA43B89E802DD0787D332A71
Malicious:	false
Reputation:	low
URL:	https://tags.crwdcntrl.net/lt/shared/2/lt.iframe.html?c=3825
Preview:	<div style="background-color:transparent; width: 100%; text-align: center;"> <script type="text/javascript"> var ltIframe;function ltIframea(a){return"[object Array]"===Object.prototype.toString.call(a)}function ltIframeb(a,d){if("undefined"!==typeof d){var b=!1,e;for(e in d)b?a+="\x26":(a+="?",b=!0),a+=e+"\x3d"+encodeURIComponent(""+d[e])}return a} function ltIframec(a){var d="https://"+(a.bcpPrefix+".crwdcntrl.net")+"/pixels",b={src:"LTJS"};ltIframea(a.syncPixels)&&0<a.syncPixels.length&&(b.s=a.syncPixels);ltIframea(a.exportBeacons)&&0<a.exportBeacons.length&&(b.b=a.exportBeacons);a.tcString&&(b.db=a.tcString);var e="lt_3p_px_";"undefined"===typeof a.clientId\|\|isNaN(parseInt(a.clientId,10))?e+=(new Date).getTime():(e+=parseInt(a.clientId,10),b.c=a.clientId);a.clientHints&&(b.ch=JSON.stringify(a.clientHints));var c=document.createElement("iframe"); c.setAttribute("id",e);c.setAttribute("src",ltIframeb(d,b));c.setAttribute("title","empty");c.setAttribute("tabindex","-1");c.setAttribute

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1396), with no line terminators
Category:	dropped
Size (bytes):	1396
Entropy (8bit):	5.276668957206945
Encrypted:	false
SSDEEP:	24:4vHUiAldZGRe4W5lVzbZmZD05eJXd/gVUVUZNng4j0DjxJv30GOP28nRXJUd0DQn:qU/z4W5fzbZmZD0kd/gGGZdg80DDv30Y
MD5:	023AC8164F64A33710DEA3B56658DB16
SHA1:	31C3595EEA61588AFF6F032CC9070D89ACE1888C
SHA-256:	23D230C58207F6B9A465CCF534603D22EDA96CDFC6F0A095D2391DBF7FC8725D
SHA-512:	30E19281C0B0009B0FAE46F1777B54B33503DD43E82D3D78F26363A683B2AC4887786210D8E0D8FACC2426C89BDE9C85FB043462B8FFCC8ECC389B71C002DD49
Malicious:	false
Reputation:	low
Preview:	import{u as g,r as i,w as u,b as _,c as h,C as v,D as S,g as f,n as s,F as w}from"./hl-347bfac4.js";const k={class:"spinner-wrap js-spinner-wrap"},y=s("svg",{class:"spinner"},[s("circle",{cx:"20",cy:"20",r:"18"})],-1),T=[y],C={class:"spinner-wrap js-progress-circle-wrap"},x=s("div",{class:"left-half-clipper"},[s("div",{class:"first50-bar"}),s("div",{class:"value-bar"})],-1),b={__name:"Spinner",setup(P){const e=g(),a=i(!0),t=i(!1),n=i(null),c=i(null);let o=0;const m=()=>{e.landing.isGatewayPage&&e.paymentStore.getCardinalSettings()&&e.paymentStore.getSpinnerProcessTime()?(a.value=!1,t.value=!0,o=e.paymentStore.getSpinnerProcessTime()):(t.value=!1,a.value=!0)},p=()=>{if(e.formStore.isSpinnerWorking&&(m(),t.value)){let r=0;const l=o10;let d=setInterval(()=>{r<101?(r>50?(n.value.className="",n.value.classList.add("over50","p"+r)):(n.value.className="",n.value.classList.add("p"+r)),c.value.textContent=Math.ceil(o-l/1e3r),r++):clearInterval(d)},l)}};return u(()=>e.formStore.isSpinnerWorkin

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 1200x800, components 3
Category:	downloaded
Size (bytes):	169779
Entropy (8bit):	7.980738089316568
Encrypted:	false
SSDEEP:	3072:oHa4WD8xvRx1V0N6xv5UZ4wb4MJI4uhOsVonEeP4Ax+fna3B/5oqy5qSP/B:o61D8xoNG+4wb4MC4uhOBd7xSaYN5qSB
MD5:	BF3983E44C982A8BFCE433C2575F3122
SHA1:	E1A1EE3F137F58E37754AD973422E8A1CB06803B
SHA-256:	947C24A48340BD3282B046456A6316E06020EF973A80CC8B5F17A6E080A62000
SHA-512:	4B11877D7E48A5519C3ABBF3A29ED567AA9C7909ED685EB4B4F493C3CF6E6A39AE13EBA5AC430F1BBDE99B193C2494F6AAD4C7B05E35573A778037D0F54AD98E
Malicious:	false
Reputation:	low
URL:	https://i.imgur.com/igBpB3f.jpg
Preview:	.....@ICC_PROFILE......0ADBE....mntrRGB XYZ ............acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 1999 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...... ...."...............................................................................{UF....rl.D.=....W...U]=.5...........sX....{e......m.N@.Nb.(r..r.s..j.L....i.l).......Z...P.J....$...NxcDD...I^o4.o1...sP..@r...%Ax\|............`.\....*.bPG..D......pN.....]....Ei.

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2320
Category:	downloaded
Size (bytes):	1384
Entropy (8bit):	7.808118802355832
Encrypted:	false
SSDEEP:	24:XX9sBxG/OsaCezrBbGlCG/Labdy1t6oEPjZsuIPJE+nfLNZD:XX+BfsaxzSCIUy1t6oEsukJnJt
MD5:	20272454D2D6C9F0FEF2AAB9A7CA0514
SHA1:	F11FFE17485758FACC6BBEAE5AC42A9775968B94
SHA-256:	E16EEE2C2F198F221EC9237D2283D8A69B0E76BB09B8B35F18F03B9A866D39AF
SHA-512:	B4DE9D9E6D19B7FCF9FA14299340A499B241260A41A4758DA3B10C1AEA2F86B4C01E98D5F43CA87B0AA688C62C01DF874536AAA5AC7D38FA98D1ABD76042E908
Malicious:	false
Reputation:	low
URL:	https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=0.26782430717848005&stid=ZHkABGbgb30AAAAIC72MAw%3D%3D
Preview:	...........V.S...W..G.6rB..W..%p.Ci../.........J.....#;....~I...Z.....B..,..3S..T9.;..W.A...j...:.jQ...e;.\\&....x..q....plW.s..T.m.8.P.K......4.S...oT.hk.3'..........O..."......-+c..0#.M1qS...RnZ...L...r.....6..9.=...APWy....."5.0)..\.'...6y.m..;...m..8.....frj..r.&N....e>.....(..q...n..;....2....).......!...1.s.^.68.Y\'M..w..C..LN..5.o=<8x.m\..k..j..."..f.z...I.....C.#a........8K...m3..Y.M......}.O.>.$..o..H...6~p..QVe.8...D..Se....9....}....z........(..\|..CsZ.E......B/...gg...2..a.W)[.....E.9...RR..Wu^....o.p.#..].9A..~.K0...........o4.n.....k...d.L{.(......+Z.'..^.....F;.]S\..k.t~..R..f.$./...+2..Sssuv\..0.cW..0.?..=_...b.y....8H.........4.&I...A.Q....Q.@.\|W....A..8....BD.!(8..q....l<.q#.aP4L...&.V.r^8......M=...S.%b.wq.g.~.A......)N.....G.p.f;.+Y..jg..~....Y. . ......w..}.-....... ...d..Q[.O.....yK.i....p..\|...5.i."...kY..)....s.G........{....W:............y...<..G.J-.R..^..A..(5.q..;f.i..b+Yg.WG.O.G..6g)`..c.U...[...K.n...fu..%AQ.

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (345), with no line terminators
Category:	downloaded
Size (bytes):	345
Entropy (8bit):	5.164872571408998
Encrypted:	false
SSDEEP:	6:haELnV8mgO9l3YId5LffCY2s4cMhMVRHM7C+hM7h5XgOal8cy+Xi/XLbcGdYI:haEiu3Nd5r72hcZ7HICKIHXgP8YEb3yI
MD5:	5B07CA30C87A02593C83C8872DD8DF42
SHA1:	27E6B236F3264BE10D02CBCA60C53C97171F5B5B
SHA-256:	1235A9B4D659D2E83BDE4F1FEC855F46C4647D57E17EED1EFD0C08498E5D1443
SHA-512:	5550035D9A974B92291B0F45A92DE69D8ABCA760F24961AFD816DC6FE96FD7026288E522720EFACD338B5071AF4F84E42E2205DA624C263AB6B4F05A869C8AC3
Malicious:	false
Reputation:	low
URL:	https://api.intentiq.com/profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1725984685757
Preview:	<!DOCTYPE html><html><body><script>const script=document.createElement('script');script.src='https://agent.intentiq.com/Agent/Hints/IIQUniversalID-sync.js';script.async=true;script.defer=true;script.onload=function(){const intentIq_182772995=new IntentIqSyncObject({partner:182772995});};document.head.appendChild(script);</script></body></html>

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (11440), with no line terminators
Category:	dropped
Size (bytes):	11440
Entropy (8bit):	5.405413454337748
Encrypted:	false
SSDEEP:	192:TixaOdP2DahLeKkda6nGvCvsojELj2n04UwXNAfLwUW1WuYx6jomrYZJp2XmIR2z:mxaOdWyLwaAWj2nvUwXNAfLwUWAuYx6e
MD5:	E959FBDD13DEF4B9A9D0A5FC9A7DE4D4
SHA1:	1E39712307E3673B40C0BDB8C7D3E86A3E8B60A0
SHA-256:	2DEFE59E357A7D0683C8283AC42841DB404A0884CAE2EAECEBF4B676E559DEDE
SHA-512:	590B22282634411002C9467C6C0D20D27979F841BFFCF893E715A2B61301A873457A9CBE0A765A11592E7F5CB81FC50D5BD436BD5D47DC93BFB776515B02E2C9
Malicious:	false
Reputation:	low
Preview:	(function(){var n="undefined",t=function(t){return typeof t!==n},e="js15_as.js",r="",i=!1,o=!1,a=!1,s=!1,c="0.2.1",u=25,_="-",f="_HISTATS_SID",d="histats_custom_destDivProducer",p=function(n){_+="_"+n};p(c);var v=function(){i&&console.log.apply(this,arguments)},l=function(n,r){var i=n\|\|{};try{var o=r.document,a=r.navigator,s=r.screen,c=r.Date,f=r.Math,d=function(){return o},p=function(){return d().getElementsByTagName("body")[0]\|\|d().getElementsByTagName("head")[0]},l=function(n){return"function"==typeof n},h=function(n){return t(n)&&n instanceof Array},m=function(n){return t(n)&&!!d().getElementById(n)},y=function(n){var e=!1;if(t(n)){if("NaN"==parseInt(n))return!1;e=parseInt(n)>0}return e},g=function(n){return y(n)?parseInt(n):0},w=function(n){return"string"!=typeof n\|\|n.length<1?n:n.replace(/^['"]?(.)['"]$/,"$1")},T=t(window["_DEBUG_HISTATS_ASYNCR_DO_NOT_AUTOSTART"]),I=function(){return parseInt(1e4f.random())+1},H=function(){return Math.floor(4e8*Math.random())-2e8},C=I(),E="hist

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://track2.securedvisit.com/sync/1540_03681?id=na
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2320
Category:	dropped
Size (bytes):	1384
Entropy (8bit):	7.808118802355832
Encrypted:	false
SSDEEP:	24:XX9sBxG/OsaCezrBbGlCG/Labdy1t6oEPjZsuIPJE+nfLNZD:XX+BfsaxzSCIUy1t6oEsukJnJt
MD5:	20272454D2D6C9F0FEF2AAB9A7CA0514
SHA1:	F11FFE17485758FACC6BBEAE5AC42A9775968B94
SHA-256:	E16EEE2C2F198F221EC9237D2283D8A69B0E76BB09B8B35F18F03B9A866D39AF
SHA-512:	B4DE9D9E6D19B7FCF9FA14299340A499B241260A41A4758DA3B10C1AEA2F86B4C01E98D5F43CA87B0AA688C62C01DF874536AAA5AC7D38FA98D1ABD76042E908
Malicious:	false
Reputation:	low
Preview:	...........V.S...W..G.6rB..W..%p.Ci../.........J.....#;....~I...Z.....B..,..3S..T9.;..W.A...j...:.jQ...e;.\\&....x..q....plW.s..T.m.8.P.K......4.S...oT.hk.3'..........O..."......-+c..0#.M1qS...RnZ...L...r.....6..9.=...APWy....."5.0)..\.'...6y.m..;...m..8.....frj..r.&N....e>.....(..q...n..;....2....).......!...1.s.^.68.Y\'M..w..C..LN..5.o=<8x.m\..k..j..."..f.z...I.....C.#a........8K...m3..Y.M......}.O.>.$..o..H...6~p..QVe.8...D..Se....9....}....z........(..\|..CsZ.E......B/...gg...2..a.W)[.....E.9...RR..Wu^....o.p.#..].9A..~.K0...........o4.n.....k...d.L{.(......+Z.'..^.....F;.]S\..k.t~..R..f.$./...+2..Sssuv\..0.cW..0.?..=_...b.y....8H.........4.&I...A.Q....Q.@.\|W....A..8....BD.!(8..q....l<.q#.aP4L...&.V.r^8......M=...S.%b.wq.g.~.A......)N.....G.p.f;.+Y..jg..~....Y. . ......w..}.-....... ...d..Q[.O.....yK.i....p..\|...5.i."...kY..)....s.G........{....W:............y...<..G.J-.R..^..A..(5.q..;f.i..b+Yg.WG.O.G..6g)`..c.U...[...K.n...fu..%AQ.

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	53
Entropy (8bit):	4.174360144607777
Encrypted:	false
SSDEEP:	3:TMQ9GLl96O+:AcGnx+
MD5:	6BFF4CBB47835C6F55726A136A75FB91
SHA1:	AB896B47258231D2F7F893C4F470E568E82CC242
SHA-256:	930AE703338F5136ABC55EA7292BD35E5FA387A321038992200428140D223E25
SHA-512:	DDC53C76FAE661177D4C7878FC318C466890FC0EEC9A94B93902F10AB77C5A0B9432EF14713B0999148EB9A64C98D58906D791F9E02A463C4761F0405C1C4823
Malicious:	false
Reputation:	low
URL:	https://secureanalytic.com/scripts/push/script/02eyoyxdkz?url=gametimepulse.com
Preview:	function push_init(){}; function push_subscribe(){};

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	377
Entropy (8bit):	5.221939068801587
Encrypted:	false
SSDEEP:	6:51bQdhb13LkVVXI8mgO9lVhnmUqZzwGdDVTYqL1+LD+mMkuc1zlCBbAm+RbDRWP/:51bO513QvuHnmVZkGdDJH10D+xc15CZj
MD5:	A591F1753586053E662B09E65F7F486C
SHA1:	8076F19D8B57036AFED609FBAA10C4AD1A1D2C55
SHA-256:	228B0DE25E3387C3CE7C37A38E2BE677D1D040B405951ACC0412AE48E44156CC
SHA-512:	355BDAB99AE62215C3BBDD1F49EC83AE67DAD7BFC59755B0AE83A546FD3B898695E6F4AE9697045D4C25EAFA745C978C31CA7E5C87CCB77BC8FB1357F2498679
Malicious:	false
Reputation:	low
URL:	https://s4.histats.com/stats/e.php?4891773&@Ab&@R57951&@w
Preview:	_HST_cntval="#3Vis. today=9";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);.b.async="async";b.type="text/javascript";var a=document.getElementsByTagName("script")[0];a.parentNode.insertBefore(b,a);}catch(e){}}();

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 486 x 329, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	108663
Entropy (8bit):	7.988017902990421
Encrypted:	false
SSDEEP:	3072:cw9gF/IWdTGWzaoQjT9KHZnc2Gna36NNjj:cpFndTFzAf9BFjj
MD5:	241D8E5F4E4A56D31060FD979FDEC8C8
SHA1:	87C5E0CECC0AFFAC87DD9754D7BD7D04C8E0A478
SHA-256:	F0F26CCBB94EC1E943C43A53B948C7DB81E28A1F8F14E8D86D757FF0376C206D
SHA-512:	A05DFEC1CBE2508655532F36AA892F48DE753B8D79AFDB6606851505EE64C8A2FD9B0E409307DDB8DACB9BFF1788EB1BEF0B5DF6B250F80715625A3D5124551C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......I.....N......gAMA....\|.Q.... cHRM..z%..............u0...`..:....o._.F....IDATx..w.\g}..~.S.n..V.Z.l..^.m.h...!.$po.&.$7!7!..'.cp....^.{.+m.}..9.y~......B~.._..V..3.y>.................?.>>>>>>.0........................./.>>>>>>.0........................./.>>>>>>.0........................./.>>>>>>>.0......................../.>>>>>>>.0......................../.>>>>>>>.0......................../.>>>>>>>.0........................./.>>>>>>.0........................./.>>>>>>.0........................./.>>>>>>.i..)....'a..@.].vq..1............n2..s..E..m.h..~.mv.....$.....ofhh.L&.........r,.".L".@..J)B..{..!........add..3g.o.>.[.9s.<.-[..\p..VSS.Rj.^}.U..9.e.].#.<B ..S...{..%.L"........p..wc.......5k....j>p.I..?o....#..^...n..Xb.l<..:d<..d...0..5....!.$...?/ZH".MIi..h.CZ.\....2...&........~....>...y...0..'.\|.....kikk....T.eY...1..\|..>.c.3g.;w..}.{...CJY..:;;../^..d2...N...y...kx.........d.....K\s.5TTT...B!B..B.^x...R.!......c.&ZkZ[

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (529), with no line terminators
Category:	dropped
Size (bytes):	529
Entropy (8bit):	5.139838433488378
Encrypted:	false
SSDEEP:	12:PPL5zU2X5M5dk4JwaUOklfqaSoRh0fdeWiBJ0lBPEBOn:HL5zUs5M55waUVq801eWU0lFEQn
MD5:	D5A3D90D62C1D476DC4859169856F194
SHA1:	CD8BC4E1BA4F4411157046A47D793E69555C023C
SHA-256:	9ED6313135AA9762592DB1FC82208053C37040A022CA4DF7F731FED6AF81DB67
SHA-512:	E3E434C5759F57DAA43E990D8C9CED7AD37EAC79E41EE7AAAA5204B5A150B1A639F5CF2EC509ACAB91D2ACB1D39C198CB9F70BD660ABC1DC545FC2FE999DE659
Malicious:	false
Reputation:	low
Preview:	import{t as s,b as o,c as i,y as c,B as l,g as r}from"./hl-347bfac4.js";const u=["onContextmenu","innerHTML"],x={__name:"SpanEditableBlock",props:{textData:Object,defaultValue:Object,classes:String},setup(t){const e=t,n=s("isAdmin"),a=()=>{n&&window.parent.postMessage({textSettings:e.textData,defaultValue:e.defaultValue},"*")};return(d,m)=>(o(),i("span",{onContextmenu:c(a,["stop","prevent"]),class:l([t.classes,r(n)?"lp-builder":"",t.textData.isShow?"":"hide-content"]),innerHTML:t.textData.text},null,42,u))}};export{x as _};

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (1788)
Category:	downloaded
Size (bytes):	1789
Entropy (8bit):	5.358465847559074
Encrypted:	false
SSDEEP:	48:p/0CU94kpX8XWs1As9G1ldyl3cE/MkbM0UJr35n6Qc:p/0Cer2wdy51p6Jn7c
MD5:	ED6DD2AD7462133000C8D9F6F0E98A33
SHA1:	B4E4B1CD66066D458F34121D83DCA21C6E962479
SHA-256:	B4A5B606AF8DA75217BC148077871E15BC05C193E28EF4A21A9586A06BB705E6
SHA-512:	CD8BC11AEE43A1536245E857A0A8701C675609EDDCD808EA3AC4AB6F41271E9E526AEC1ACCEC8201BF57D15563FEA3AA6EBAD7E643BF2E8E092DAA0713D55BB5
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-1d626e0c.js
Preview:	import{s as v}from"./hl-347bfac4.js";/! js-cookie v3.0.5 \| MIT /function d(e){for(var r=1;r<arguments.length;r++){var t=arguments[r];for(var s in t)e[s]=t[s]}return e}var C={read:function(e){return e[0]==='"'&&(e=e.slice(1,-1)),e.replace(/(%[\dA-F]{2})+/gi,decodeURIComponent)},write:function(e){return encodeURIComponent(e).replace(/%(2[346BF]\|3[AC-F]\|40\|5[BDE]\|60\|7[BCD])/g,decodeURIComponent)}};function f(e,r){function t(o,a,n){if(!(typeof document>"u")){n=d({},r,n),typeof n.expires=="number"&&(n.expires=new Date(Date.now()+n.expires*864e5)),n.expires&&(n.expires=n.expires.toUTCString()),o=encodeURIComponent(o).replace(/%(2[346B]\|5E\|60\|7C)/g,decodeURIComponent).replace(/[()]/g,escape);var i="";for(var c in n)n[c]&&(i+="; "+c,n[c]!==!0&&(i+="="+n[c].split(";")[0]));return document.cookie=o+"="+e.write(a,o)+i}}function s(o){if(!(typeof document>"u"\|\|arguments.length&&!o)){for(var a=document.cookie?document.cookie.split("; "):[],n={},i=0;i<a.length;i++){var c=a[i].split("="),l=c.slice(1

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (574)
Category:	dropped
Size (bytes):	19456
Entropy (8bit):	5.368070514046372
Encrypted:	false
SSDEEP:	384:QlRIR3d1518qUT2nq+ZMOF1JXCtRgyeiyMQ6gTHwufvzlpszzLX1pDox4prZPGOb:QyJ18qUCFXXHkgphEfX1Fox4BZuOp1dt
MD5:	3F62449B84EE9485831C4C1726CDDD3B
SHA1:	8211B1E0C4DFB4D3AD7EE8A53D02F12B9503B06A
SHA-256:	3DB5FC063868D3CA5FC3CC2695F483266CFFEA00BEF68DFFD7E4944B947AACC8
SHA-512:	6ECEC6EC6AB4DF78BDA57C1873ED9B88B2CEBCBCDA730B5E2FDE6A68576798DA60A4006DD3E941A8CE0E48CE64236E1411C6435363BC420897E502B20ACE3977
Malicious:	false
Reputation:	low
Preview:	//v185 Copyright (c) 2008-2023 33Across Inc. All Rights Reserved..Tynt=window.Tynt\|\|[];.(function(){var d=window,m=document,h={distro:"AFWU",id:"AFWU-"+(new Date).getTime()};Tynt.AFWUL=!0;Date.now\|\|(Date.now=function(){return(new Date).getTime()});var e={_maxRef:600,_idMacro:"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",init:function(){this._icUrl=h.protocol+(Tynt.e\|\|"")+"ic.tynt.com";this._debUrl=h.protocol+(Tynt.e\|\|"")+"de.tynt.com/deb/v2";this._sicUrl=h.protocol+(Tynt.e\|\|"")+"cdn-sic.33across.com/1/javascripts/sic.js";this._apUrl=h.protocol+(Tynt.e\|\|"")+"cdn-ap.33across.com/javascripts/ap.js";.this._chmob=this._chua=this._chuav=this._chm=this._chpv=this._chp="";this.init.fbl=function(a,c){if(c)for(var g=0;g<c.length;++g)0<g&&(e[a]+=", "),e[a]+=c[g].brand+";v="+c[g].version};var a=navigator.userAgentData;"undefined"!=typeof a&&("undefined"!=typeof a.getHighEntropyValues&&(this._chpv="pending",a.getHighEntropyValues(["model","platformVersion","fullVersionList"]).then(function(a

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (1583)
Category:	downloaded
Size (bytes):	1584
Entropy (8bit):	5.1504098310688216
Encrypted:	false
SSDEEP:	48:K59UYjhnbiv2Mz0u5gSlFp14khL3j3KfCzQ8/pE11UiH:oUYVHg5nx3j6YQMk9
MD5:	5088543315AABC2A375B8128634A748B
SHA1:	71B11BA8A0D278073BB415FCC1BE83E440E00C0E
SHA-256:	E1950AA4A332C516F2563EDD84C4E57721B70DD8CCFB2AFEF30229467A720468
SHA-512:	113778F1CCAA0C7A88776D46BC8ABD55ECAF80C2AE8A10AD8A76F50FC3B7B12BCE7F6D4BDA017B47F080C356478B1697963022954737B4646AEC2846667B8488
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-fc33c920.js
Preview:	import{u as s,t as p,A as a,M as S,k as w,v as n}from"./hl-347bfac4.js";const h=()=>{const t=s(),o=p("isAdmin"),d=()=>{if(typeof gtag<"u"&&t.landing.gtmTrackId&&t.landing.isGa4Track){const r=n(t.formHiddenParams,"externalId");n(t.formHiddenParams,"ga4ClientId")\|\|gtag("get",t.landing.gtmTrackId,"client_id",async m=>{const f=document.cookie.split(";").filter(g=>g.match(/_ga=GA/)).length;await a.setGaClient(m,r,f)})}},l=async()=>{let r=!1;if(!t.formStore.isSpinnerWorking&&!o&&t.formStore.validate()){t.formStore.setSpinnerState(!0);try{const e=await i(c());e.success===!0?(r=!0,e.isCreateAction&&await a.trackFb("CompleteRegistration"),e.redirect&&(window.sessionStorage.setItem("redirectUrl",e.redirect),t.landing.isFitFlow?(t.setRedirectUrl(e.redirect),t.setLeadId(e.leadId)):window.location=e.redirect),window.scrollTo(0,0)):e.redirect?window.location=e.redirect:e.errors&&Object.keys(e.errors).length>0?t.formStore.setValidationErrors(e.errors):e.decline===!0&&t.modalStore.setModal("DuplicateM

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2077)
Category:	dropped
Size (bytes):	8165
Entropy (8bit):	5.171855611352115
Encrypted:	false
SSDEEP:	192:Jo1qcmiE3CEIFt7NSymyDWAZPp0yCEFXTfcbyLaC5TFkY0yW/GaKdgH:CUIxSymDAZJFDfRLaOTO3ll7
MD5:	3F3EBC0B8E2C0EBE33B13A817535DFF4
SHA1:	7943F98E99CBE27665E371672A861131633D8A34
SHA-256:	BC3940D384124D03BFE9CEE3F9AF9DADADD78390A38A718E016D45C8B8369640
SHA-512:	E10494C566C0441B17F8C87E67753B4C5947EAF35489322F15C309D71D2E5FCED0F101DAA7E6141FD26170E1B5A9D29FF6E06C6116BCB024D2A14A5310D0793C
Malicious:	false
Reputation:	low
Preview:	(function() {. var dc = {};. var gu = "10401725984635D685D944936F64E5C9";. var su = "6D001725984677F7F7166CFD74745BDC";. var gm = false;. var cn = "__dtsu";. var lg = {cv:"US",cs:"C",rv:"NY",rs:"C"};.. String.prototype.dts_hash_code=function(){var hash=0;if(this.length==0)return hash;for(i=0;i<this.length;i++){char=this.charCodeAt(i);hash=((hash<<5)-hash)+char;hash=hash&hash} return hash;};.. function _dtsi() {. a = document.createElement("a"), a.href = window.location.href, _dts.host = a.hostname, "undefined" != typeof document.referrer && document.referrer.length > 0 ? (_dts.r = document.referrer, _dts.p = _dts_gp(_dts.r), "q" in _dts.p ? _dts.q = _dts.p.q : "query" in _dts.p ? _dts.q = _dts.p.query : "p" in _dts.p ? _dts.q = _dts.p.p : "text" in _dts.p ? _dts.q = _dts.p.text : "wd" in _dts.p ? _dts.q = _dts.p.wd : _dts.q = 0) : (_dts.r = 0, _dts.q = 0). }. var _dts = {};. _dtsi();.. function __dtsinit() {. var c = document.cookie.spl

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 11251
Category:	downloaded
Size (bytes):	4631
Entropy (8bit):	7.949000450990983
Encrypted:	false
SSDEEP:	96:EtzftOowKVgykncTR6Tp84HRpSl8MkusZx4QTPPRUU:EpfwlKqyk3C4HKl8MkusZ2EJ1
MD5:	06B74D6C3C900A84BB439200F827A359
SHA1:	6520BB116553F9CAD18842597B4810BF602E074E
SHA-256:	046938AD2E5C711DD3EA05C3BC4D9F9BE468E74EC24BFABB31A89B912EDCAE69
SHA-512:	5B06A6B9268C5B4759BFE76F3F6B82AFC41FA7C5290846F622CF029DAD4C660DA3164EE79B5CFB5A41546C860B2275DDCFF713ECEB4DF309976C5F1EAC55D2BA
Malicious:	false
Reputation:	low
URL:	http://football-booster.freevisit1.com/assets/js/modernizr.js
Preview:	...........:kw....+($W."....RAt.'i.&.9u.~P.{@.\|.$A..d....=.>D.r7{.~...`.....L..~p.9.e(T.~S....{.}....~7....#.?..J..88 .[..K...:.x.9.U.....s&..,`...O3.g..P(.$.yu...E.\|\|....@.Zh...i....<...N.P..~.,........4 .]..1'.....,...."...a.x..L..'h....u..![.h...BF.g..[.x.3..7Fh......-...\.FR..WN...-\|....<..(..cD.c...#....Get.......6-.-..J".2...1.\|).-.x@...c........u..Y...!...'^\|..E'}. .. ...3...GY.u..d.]..O...$..F.!4.$$....`h...E.H...1"um..HQZ...E.....{./.IS@..p./1..nZ...T0.#6...n&..$s."....y.....9..0\|..S.S~.f.6.1n>...\|7P...&..(.F!7.....w.}...57.C.M.C.}...WF.2/3a...H..v`.Sf<.....r~..i..Uf.2.N...p...R%BG.Q..4.m..j...4X<.4.1...N..x.O&.r.0/.Q._....A..8>'4d.k.F.U..h8...]..lE+W..L.F.J.S..q_.2b.Ju.Yjn.$.CQ...~U....k.6X...../S.,.W......_..,E..&i....n("^e..T.i."7..T.eeDx...c;.(.Y.+...+ZTYF.p..gv.2..0...Kz....&A..W..WAR....r...l..W.E..!lQ.A"..?y.......t`b-.k.<b+B..%l.hj.)...F.w..T.X^N.0i....$.Z.K...L.<s...r.~8.....(PFsZ0d#....nh.F3z.. .....w...?....

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	271663
Entropy (8bit):	5.427600595613372
Encrypted:	false
SSDEEP:	6144:rEnjNomBDT1GkWze2GwOo1uJj3QeoA7Y/BiGb:rajhJgzxrOo1uJj3RoA8r
MD5:	DADDFD47844F3A3C18BC641B9C760302
SHA1:	067D398238615007C8FC96D14D01EC3CC661E954
SHA-256:	BCC2187FE20DCD933A0DF7C359461D48BC05228C16354829B21FE97DFA804973
SHA-512:	FEC06F7A511EC96FF69C08756650D62B8FC21BBE16B2E66AC7064FB716285FFCC24AD5029F51B22B4AAA1F72F667F59A7B82F7BBD43DC0885B3668DB8A6D5974
Malicious:	false
Reputation:	low
Preview:	(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const s of document.querySelectorAll('link[rel="modulepreload"]'))r(s);new MutationObserver(s=>{for(const i of s)if(i.type==="childList")for(const o of i.addedNodes)o.tagName==="LINK"&&o.rel==="modulepreload"&&r(o)}).observe(document,{childList:!0,subtree:!0});function n(s){const i={};return s.integrity&&(i.integrity=s.integrity),s.referrerPolicy&&(i.referrerPolicy=s.referrerPolicy),s.crossOrigin==="use-credentials"?i.credentials="include":s.crossOrigin==="anonymous"?i.credentials="omit":i.credentials="same-origin",i}function r(s){if(s.ep)return;s.ep=!0;const i=n(s);fetch(s.href,i)}})();function Ro(e,t){const n=Object.create(null),r=e.split(",");for(let s=0;s<r.length;s++)n[r[s]]=!0;return t?s=>!!n[s.toLowerCase()]:s=>!!n[s]}const Ee={},Tn=[],ft=()=>{},ed=()=>!1,td=/^on[^a-z]/,ws=e=>td.test(e),wo=e=>e.startsWith("onUpdate:"),Oe=Object.assign,Io=(e,t)=>{const n=e.indexOf(t

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
Reputation:	low
URL:	http://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 15955
Category:	downloaded
Size (bytes):	5994
Entropy (8bit):	7.969933497845118
Encrypted:	false
SSDEEP:	96:CxX/IMk2BAoHAXiOt/78pxvq7DalkT2ZZpR4t2O7010D+lnnMeOKHUHtnN+oJyQc:AIMkKqSCozcDalkT2nO410D+1wlFvdsl
MD5:	0DD7004380A66AAEF2DED33A9CCAB701
SHA1:	965D3B215ADD097CC090352B37E154DDC1132895
SHA-256:	41495A754D54D8448E49A8FF0479438FE75113E1E32B8E33B071823EBBB598B6
SHA-512:	B692B08895C62306CC9E07B0A8E5D17A7428542EAD2C1FBA67DF93901C884B3323C1CE0532684ABC479E8A2225B87E8F46F28FD49E84B51657356CE54CAE1313
Malicious:	false
Reputation:	low
URL:	http://ww38.watchdogsecurity.online/
Preview:	...........[.[......EJ.#..K.).i..........'$..B.N.......53.Aq..<...rl.d.k.Y..3..i\.w.N.a0..o......=..=.5.c.......q}...m...v.........7......g....'G=..r.....Eg..q.\M>...e.a\...:w..)3..e.}a.w.;.........1..F...../W...z.Z..9...0.p.\..u..`z...=.....R.....#.....Q..;..:......ecr~0e......:....k...1......%.A0..r..<;/f]o.........b..@K0'A.b..~[....:..L3.....%.]'`N..,.,...MK.l...RM1...@...L%...r.......O]/.M.[f0.L.`.,._..X......m...?.,g...L..4.`.V`..s=0..;.1.`.u..r.aNt.....f....%\|.c\|.Y.....@.T..n...;s.2..T2.3....9V~....e...}...:,..C6a~...s.Nv`.....f<6ez..`..j.[\|}U%_...6d.`..._M.......................$..o"...'.....n..3.xr..h...>.m.}.....^......A37.....mh..z`...&c2....u....A& ...U...D..Nto`9UUQ..RP#....].d.a.C3.2....S.3..V.....1v5#.B)}...J\FC...qmy.......R.(U..fII...,p......2=....O7.._U....}..i..!4....[...?`.u......=.\...E..y..W...P.L_.X6t...?.3...*.O....P..O.GV.{l"v..,....RA...P.D.....C.4...I.i..........'0e..pe8yb.Jj...>)./:6c%U1..4c......I.

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 333028
Category:	downloaded
Size (bytes):	95054
Entropy (8bit):	7.9972441911609975
Encrypted:	true
SSDEEP:	1536:bWUvFMyUql6tK2zwinY9kwZ938GtDd6qCMCZX2dxouzRr78SEGWeZweEYej7c1PV:bv+/BtK2wiJ9GRKdIzV7egweErj7o7Px
MD5:	A6826DC8114B81F848B56BFABE99AB80
SHA1:	CB7B97067980A6E4EA7D37C07484E771E7F3931C
SHA-256:	338FF02EC40B475ACD883FEA984FB61FD6D83A58F09E2912BC83F49F31BADCE8
SHA-512:	F7B456B1AC8F9FCC79443393CD2B596517B158D16037C2776F43FCBE4EEA6A93798777CFF2EB9F41494D027A9A19AA4FA015CA7C84C1F87421D426D0EC6A65DD
Malicious:	false
Reputation:	low
URL:	http://football-booster.freevisit1.com/assets/js/js.js
Preview:	...........i..F.6.}".?.h5...,R......%/.".-...`G.H. A.E.T%....9. ...g.{#.T ..z....q...>..........`0.x8....<...y#v.....5....G;.{7x.h2.<.D..a._\..!.$.6P.C......D.......1Y...{\|...<...vy.<..M.......n...M..C^....x....R..qU.vyts.v...D!.^$..2...a).?>.3(.X.{...j.]X_1.3~.>6a<.?...7.........?.c..1...4"... .8...w...I!..1K....Vx..w.p.+.i4....eR.z.,.3....J.w[..b8.....w.c,.kG.....].2..v.M$v.cPI.."......g...pr4.K..UQ.Cv...$x...d....[F....Z=..}..!.N..FM..#./.....D.y)^....y.e...<^.v..Sz...oJ$......H(..w[^&...z........7....D...1.S/..p..H.<..s.~.cg.Ovb[.Xx..:..3.L.....=.{...0>...\S...:.../.f..r...O.s.......+..^...NyS...<..d.....E......,.{...d.w{.%.O.1..J..h.....(.b..H.X..Ff.r8m......m...R.Lx\|.......A......R..ys.3.D!q.....Y.....n...5......f.e;........a4.yQ.;..,.#...).@A.......>.....T.J.ui^...(.y.Z......N@.K6..h......]{.7...9...q].=,.f....m...O.y.P.s.............:..J.9$..u.'\|..e..<>.nK.{V.7.i...?.a2...=.x.1.V;...Fr.C..pF2)..*....l~.{2.YW.BU......To.I.v.U.

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=6CCACE81-3E9F-4932-AE9D-F8064F4F357C&gdpr=0
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2320
Category:	dropped
Size (bytes):	1384
Entropy (8bit):	7.808118802355832
Encrypted:	false
SSDEEP:	24:XX9sBxG/OsaCezrBbGlCG/Labdy1t6oEPjZsuIPJE+nfLNZD:XX+BfsaxzSCIUy1t6oEsukJnJt
MD5:	20272454D2D6C9F0FEF2AAB9A7CA0514
SHA1:	F11FFE17485758FACC6BBEAE5AC42A9775968B94
SHA-256:	E16EEE2C2F198F221EC9237D2283D8A69B0E76BB09B8B35F18F03B9A866D39AF
SHA-512:	B4DE9D9E6D19B7FCF9FA14299340A499B241260A41A4758DA3B10C1AEA2F86B4C01E98D5F43CA87B0AA688C62C01DF874536AAA5AC7D38FA98D1ABD76042E908
Malicious:	false
Reputation:	low
Preview:	...........V.S...W..G.6rB..W..%p.Ci../.........J.....#;....~I...Z.....B..,..3S..T9.;..W.A...j...:.jQ...e;.\\&....x..q....plW.s..T.m.8.P.K......4.S...oT.hk.3'..........O..."......-+c..0#.M1qS...RnZ...L...r.....6..9.=...APWy....."5.0)..\.'...6y.m..;...m..8.....frj..r.&N....e>.....(..q...n..;....2....).......!...1.s.^.68.Y\'M..w..C..LN..5.o=<8x.m\..k..j..."..f.z...I.....C.#a........8K...m3..Y.M......}.O.>.$..o..H...6~p..QVe.8...D..Se....9....}....z........(..\|..CsZ.E......B/...gg...2..a.W)[.....E.9...RR..Wu^....o.p.#..].9A..~.K0...........o4.n.....k...d.L{.(......+Z.'..^.....F;.]S\..k.t~..R..f.$./...+2..Sssuv\..0.cW..0.?..=_...b.y....8H.........4.&I...A.Q....Q.@.\|W....A..8....BD.!(8..q....l<.q#.aP4L...&.V.r^8......M=...S.%b.wq.g.~.A......)N.....G.p.f;.+Y..jg..~....Y. . ......w..}.-....... ...d..Q[.O.....yK.i....p..\|...5.i."...kY..)....s.G........{....W:............y...<..G.J-.R..^..A..(5.q..;f.i..b+Yg.WG.O.G..6g)`..c.U...[...K.n...fu..%AQ.

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16600), with no line terminators
Category:	dropped
Size (bytes):	16600
Entropy (8bit):	5.106011935059437
Encrypted:	false
SSDEEP:	384:wE3QyMp8WeOzzXlNo19PuSFoo4t3JML84v7K1LqVT4FbN0sI:wE3QyMp8Wf419PuSFoo4t3SL84zK1Lqd
MD5:	26A760EB1716CF6B311E16ED82D0EEB5
SHA1:	345DA68966B17C4A0415765B62C755107BA2E01B
SHA-256:	F3EE00626500892F28D8EF92B554D64F2EF43A54B9F2AA9F167262F28DB339C6
SHA-512:	2E49E019D026BB278E83377C5EC1C603FB1E36D971253BCADEB9C9EE5867110CC4E2ED9B3E59286DE659119C52191685764F9799584C85ECD07609B374AF2259
Malicious:	false
Reputation:	low
Preview:	(() => { var i = { d: (e, t) => { for (var r in t) i.o(t, r) && !i.o(e, r) && Object.defineProperty(e, r, { enumerable: !0, get: t[r] }) }, o: (e, t) => Object.prototype.hasOwnProperty.call(e, t) }, e = {}, t = (i.d(e, { default: () => u }), { JS: "js", PIXEL: "pixel" }); let s = { brands: 0, mobile: 1, platform: 2, architecture: 3, bitness: 4, model: 5, platformVersion: 6, wow64: 7, fullVersionList: 8 }; let a = { chrome: 2097152, safari: 8e4, opera: 2097152, edge: 2048, firefox: 65536, ie: 2048 }; class r { constructor(e = !0) { this.isSync = e } collect() { return new Promise((e, t) => { e(this.getDeviceInfo()) }) } getDeviceInfo() { return { screenWidth: window.screen.width, screenHeight: window.screen.height, devicePixelRatio: window.devicePixelRatio, language: navigator.language } } } class n { constructor(e) { this.allLevels = { FATAL: { value: 10, color: "magenta", secondaryColor: "magenta" }, INFO: { value: 20, color: "green", secondaryColor: "green" }, ERROR: { value: 30, col

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://ml314.com/csync.ashx?fp=9ab07dfad034f7723914d4ce2ab29b55dbc36667c21b22244884257e4ed5b600f4cb09cee1a4f8eb&person_id=3646915315069091854&eid=50082
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=lotameddp&google_hm=M2JkYjM1OWM2MzAzNzA0NGQ4NzY1OGNmY2I3NzEzMQ&gdpr=0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 11251
Category:	dropped
Size (bytes):	4631
Entropy (8bit):	7.949000450990983
Encrypted:	false
SSDEEP:	96:EtzftOowKVgykncTR6Tp84HRpSl8MkusZx4QTPPRUU:EpfwlKqyk3C4HKl8MkusZ2EJ1
MD5:	06B74D6C3C900A84BB439200F827A359
SHA1:	6520BB116553F9CAD18842597B4810BF602E074E
SHA-256:	046938AD2E5C711DD3EA05C3BC4D9F9BE468E74EC24BFABB31A89B912EDCAE69
SHA-512:	5B06A6B9268C5B4759BFE76F3F6B82AFC41FA7C5290846F622CF029DAD4C660DA3164EE79B5CFB5A41546C860B2275DDCFF713ECEB4DF309976C5F1EAC55D2BA
Malicious:	false
Reputation:	low
Preview:	...........:kw....+($W."....RAt.'i.&.9u.~P.{@.\|.$A..d....=.>D.r7{.~...`.....L..~p.9.e(T.~S....{.}....~7....#.?..J..88 .[..K...:.x.9.U.....s&..,`...O3.g..P(.$.yu...E.\|\|....@.Zh...i....<...N.P..~.,........4 .]..1'.....,...."...a.x..L..'h....u..![.h...BF.g..[.x.3..7Fh......-...\.FR..WN...-\|....<..(..cD.c...#....Get.......6-.-..J".2...1.\|).-.x@...c........u..Y...!...'^\|..E'}. .. ...3...GY.u..d.]..O...$..F.!4.$$....`h...E.H...1"um..HQZ...E.....{./.IS@..p./1..nZ...T0.#6...n&..$s."....y.....9..0\|..S.S~.f.6.1n>...\|7P...&..(.F!7.....w.}...57.C.M.C.}...WF.2/3a...H..v`.Sf<.....r~..i..Uf.2.N...p...R%BG.Q..4.m..j...4X<.4.1...N..x.O&.r.0/.Q._....A..8>'4d.k.F.U..h8...]..lE+W..L.F.J.S..q_.2b.Ju.Yjn.$.CQ...~U....k.6X...../S.,.W......_..,E..&i....n("^e..T.i."7..T.eeDx...c;.(.Y.+...+ZTYF.p..gv.2..0...Kz....&A..W..WAR....r...l..W.E..!lQ.A"..?y.......t`b-.k.<b+B..%l.hj.)...F.w..T.X^N.0i....$.Z.K...L.<s...r.~8.....(PFsZ0d#....nh.F3z.. .....w...?....

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1015
Entropy (8bit):	7.585849226459838
Encrypted:	false
SSDEEP:	24:wcQj9vwl5uqa9ypakn6ebAbPsIZjXNojfbO7R:wcUh9ypwelIZjA8R
MD5:	41AC5A1232E6E82F95896C31ACEE8E11
SHA1:	DF51F1B51A5F096839DB54AAED13344E4A353FC6
SHA-256:	693900FD2CA0E9D23E2AAD17C374648531FFD0015DC43FFE97C2628F44D1143E
SHA-512:	7D9686253683D1994CBE924B4F663B13447EDAE2292C613E666A795DEB22AB4FB1E3E8AB8C30B7ECD3EC7AB0C96C81373643EDA71DFA6EB797F06603EFD48CFC
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/prod/images/ecd315d794b5b9c0ec3cd15a1589747c.png
Preview:	.PNG........IHDR... ... .....szz.....gAMA......a....8eXIfMM........i........................... ........... .....N@....jIDATX...K.Mq...0f..1Xx/d%4B.5.5..`1).S...3J.L.......D,.W..1ba.#..a...=....s.=..[......s....... ....a.....;..v.s..E._PI...........p......0m.a\..[`........^....l.+a.l.?.......T."....x.#.eE..7....t.W.Dh.oC.x5....KA.9..ZE.Cs~(H....7.Z.i.L..D+....X\|....T.=K....a.^..3......#c{.....>...N4.Q.O........v...H..B.GgK....h..[.)(.r.W{..d...:/...0... ..G.p._?...0*.E...[......-w.6.b0....%Z{....$.yW........d/>B.:..=4.v8..K...^.%hO..9..Z...X...m.K...7~S......$..q.....U...;...a9Z.....!.......ou...Pc...="w.....Z........5V..v-...x...G.......Xc`3u....%.jOpV.20....VG..6..V...4.....M..`5IV..9A..t.a.."..K..$eQ...s..Ar..w"....VY.>..i98M..Q...Q...>..-E[..3.@....VC....v....y1?HnF........Z.....B.q...=..a`..5.......jk.......s...A.G.VM......z. ..0.Z,].....k.\....p..'9...u.....C......c.K.>...H4OK`.Y.v.=..a.9.W......L..sb...B.E.22.j.i..up....}}....`7.`K./.^.L.

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (3912)
Category:	downloaded
Size (bytes):	3913
Entropy (8bit):	5.233069317211865
Encrypted:	false
SSDEEP:	96:TNcnSNntt57InenMB2UHMtpBg50gi5vHT/L4:GSpv57tnMBTstfg50gi5vTj4
MD5:	83012F8D5A4ACA2387E8B0A53DA71D7B
SHA1:	E819508611772B1CDB3A6A6829DAADC2A4980A83
SHA-256:	6D85DAC224164ED1D867FCB65BC89379F7D779FC7FBD7CCC57AB111B246A1722
SHA-512:	B5D78BEAA7336911FBCDF14D41DCFE6116F2686DAD9462E5C6944CFC3C089DFD0701C334BC512CA0370187E8A0E7018C6F4693F93DF288853F54E234A6204D15
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-6c0c41ea.js
Preview:	import{u as l,o as f,r as S,b,e as N,f as _}from"./hl-347bfac4.js";let r;const p=1,y="/web-push/track",v=2e3,d=({value:i,count:o})=>{try{window.localStorage.setItem("currentNotificationState",JSON.stringify({value:i,count:o}))}catch{r=i}},m=()=>{let i={};try{i=JSON.parse(window.localStorage.getItem("currentNotificationState")),i\|\|(i.value=window.Notification.permission,i.count=window.Notification.maxActions\|\|p,d(i))}catch{i={value:window.Notification.permission,count:window.Notification.maxActions\|\|p}}return i},g=()=>"PushManager"in window,h=()=>"Notification"in window,P=i=>{const o=JSON.parse(window.atob(i));r=h()?m():void 0;let t=!1;function e(n){return fetch(y,{method:"post",headers:{"Content-type":"application/json"},body:JSON.stringify({...o,webPushPermission:n})})}return{checkNotificationPermissions:()=>{g()&&t&&h()&&setInterval(()=>{r=m(),r.value!==window.Notification.permission&&e(window.Notification.permission).then(()=>{d({value:window.Notification.permission,count:window.Not

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	377
Entropy (8bit):	5.221939068801587
Encrypted:	false
SSDEEP:	6:51bKGRhb13LkVVXI8mgO9lVhnmUqZzwGdDVTYqL1+LD+mMkuc1zlCBbAm+RbDRWX:51bz513QvuHnmVZkGdDJH10D+xc15CZj
MD5:	27A96FE02E3A6B0B39D819D4B1DB95D0
SHA1:	C796F17858B168A92BB1C6CB17C142B976C3B24D
SHA-256:	B19F68F57975D8AC6A70B4B20D9E7801BE7F6BA47ED0C1C5C93AAC934C4F958E
SHA-512:	F25BE13E1063F178D99A1FB0AF37341CA3099F6988A5B6AB6C8EE47862C59F0F58919D85621E57399D545281E20005CC59C21B4C5DBCE054FB1D9A24EB4BA1A0
Malicious:	false
Reputation:	low
URL:	https://s4.histats.com/stats/0.php?4891773&@f16&@g1&@h1&@i1&@j1725984633543&@k0&@l1&@mHigh%20School%20Football%20Live%20-%20Greendale%20vs%20Milwaukee%20Lutheran&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-16114489&@b3:1725984634&@b4:js15_as.js&@b5:-240&@a-_0.2.1&@vhttp%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%20vs%20Milwaukee%20Lutheran&@w
Preview:	_HST_cntval="#3Vis. today=8";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);.b.async="async";b.type="text/javascript";var a=document.getElementsByTagName("script")[0];a.parentNode.insertBefore(b,a);}catch(e){}}();

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1121
Entropy (8bit):	4.838692932124968
Encrypted:	false
SSDEEP:	24:2d6oPhLwRLFmEnpeaxM2zuBVRCJWxXKHkakrJW+NRs:c68pwRLFmKuV3carJ4
MD5:	4D5139D8277153DAEBD28124272D3C01
SHA1:	19B7C85E498C07E34239238507D017F9E0762585
SHA-256:	40928F15C77934F3E8D22550ADC5C8FFD101604D4A1FBF14CAD3C6D0E7CA0919
SHA-512:	D4151246883FAF99E24C93B612A6F32C82F3B77F40F60D6468FD99EA7D4C8D52B197DA394D2C342D64DF605A0DCEAC12D674D93B7CF543E6792D0C49C20CD5DF
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="30px" height="30px" viewBox="0 0 30 30" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 52.6 (67491) - http://www.bohemiancoding.com/sketch -->. <title>point</title>. <desc>Created with Sketch.</desc>. <g id="..-Pages" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Sport-lp-dymanic-text-(desktop)" transform="translate(-987.000000, -407.000000)" fill="#888888">. <g id="Intro" transform="translate(450.000000, 211.000000)">. <g id="list" transform="translate(534.000000, 196.000000)">. <g id="line" transform="translate(3.000000, 0.000000)">. <g id="point">. <path d="M15,0 C6.72,0 0,6.72 0,15 C0,23.28 6.72,30 15,30 C23.28,30 30,23.28 30,15 C30,6.72 23.28,0 15,0 L15,0 Z M12,21.75 L12,8.25 L21,15 L12,21.75 L12,21.75 Z" id="Mask"></path>

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5494), with no line terminators
Category:	dropped
Size (bytes):	5494
Entropy (8bit):	5.340436343480289
Encrypted:	false
SSDEEP:	96:0zwRxUK+izbI/TeSMVH2WLCseAcRvP+nvIDbkMoUoHuteDlgTB6l4ax/b6wrsuuw:0sbUK1WTVMh2WLCXAcZWvgbkMoUauteL
MD5:	1FAB7DFBA0AA607E53FCE6FBB8F00A1D
SHA1:	E34B16D0DEF25D0DE358DAEFA41F2684EC34141D
SHA-256:	7BC1664AB674D7A2CBFA7054EDC7673EB4C4A40DDFA1C82814C81B10CF32CD0D
SHA-512:	4B6D84467CC3656E84A4040D5A3DABCF0A9C074798D095A789ED807B367F6BBA653B1968BD45D244B15CDE9E05FC6C277EECB3609C72BFC275F29B481C72FAB5
Malicious:	false
Reputation:	low
Preview:	import{G as R,b as r,c as i,p as P,H as g,I as E,B as A,t as T,u as D,J as w,o as V,F as d,K as c,e as I,f as O,g as p,y,d as C,i as k,_ as e,L as x,N as b,n as u}from"./hl-347bfac4.js";import{_ as f}from"./hl-35a77ba0.js";const h={__name:"RecursiveWrapper",props:{wrapper:Object},setup(t){return(m,s)=>{const n=R("RecursiveWrapper",!0);return Object.keys(t.wrapper).length>0?(r(),i("div",{key:0,class:A(Object.keys(t.wrapper)[0])},[P(n,{wrapper:t.wrapper[Object.keys(t.wrapper)[0]]},{wrapperContent:g(()=>[E(m.$slots,"wrapperContent")]),_:3},8,["wrapper"])],2)):E(m.$slots,"wrapperContent",{key:1})}}};const S=(t,m)=>{const s=t.__vccOpts\|\|t;for(const[n,l]of m)s[n]=l;return s},B=t=>(x("data-v-b7d2fe63"),t=t(),b(),t),F=["id","onContextmenu"],j={key:0,class:"col"},N=B(()=>u("div",{class:"row row-sm username"},[u("div",{class:"col"},[u("label",{for:"username"},"Username"),u("input",{type:"text",name:"username",id:"username",autocomplete:"off",tabindex:"1"})])],-1)),M={__name:"FormBlock",props:{se

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1015
Entropy (8bit):	7.585849226459838
Encrypted:	false
SSDEEP:	24:wcQj9vwl5uqa9ypakn6ebAbPsIZjXNojfbO7R:wcUh9ypwelIZjA8R
MD5:	41AC5A1232E6E82F95896C31ACEE8E11
SHA1:	DF51F1B51A5F096839DB54AAED13344E4A353FC6
SHA-256:	693900FD2CA0E9D23E2AAD17C374648531FFD0015DC43FFE97C2628F44D1143E
SHA-512:	7D9686253683D1994CBE924B4F663B13447EDAE2292C613E666A795DEB22AB4FB1E3E8AB8C30B7ECD3EC7AB0C96C81373643EDA71DFA6EB797F06603EFD48CFC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....gAMA......a....8eXIfMM........i........................... ........... .....N@....jIDATX...K.Mq...0f..1Xx/d%4B.5.5..`1).S...3J.L.......D,.W..1ba.#..a...=....s.=..[......s....... ....a.....;..v.s..E._PI...........p......0m.a\..[`........^....l.+a.l.?.......T."....x.#.eE..7....t.W.Dh.oC.x5....KA.9..ZE.Cs~(H....7.Z.i.L..D+....X\|....T.=K....a.^..3......#c{.....>...N4.Q.O........v...H..B.GgK....h..[.)(.r.W{..d...:/...0... ..G.p._?...0*.E...[......-w.6.b0....%Z{....$.yW........d/>B.:..=4.v8..K...^.%hO..9..Z...X...m.K...7~S......$..q.....U...;...a9Z.....!.......ou...Pc...="w.....Z........5V..v-...x...G.......Xc`3u....%.jOpV.20....VG..6..V...4.....M..`5IV..9A..t.a.."..K..$eQ...s..Ar..w"....VY.>..i98M..Q...Q...>..-E[..3.@....VC....v....y1?HnF........Z.....B.q...=..a`..5.......jk.......s...A.G.VM......z. ..0.Z,].....k.\....p..'9...u.....C......c.K.>...H4OK`.Y.v.=..a.9.W......L..sb...B.E.22.j.i..up....}}....`7.`K./.^.L.

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	dropped
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
Reputation:	low
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3912), with no line terminators
Category:	dropped
Size (bytes):	3912
Entropy (8bit):	5.230987645239354
Encrypted:	false
SSDEEP:	96:TNcnSNntt57InenMB2UHMtpBg50gi5vHT/LG:GSpv57tnMBTstfg50gi5vTjG
MD5:	D2E24A8D128B1DCC211A8A74556E08B0
SHA1:	65FEE5E06FBDD8A5743795851F7A9177BF40BC86
SHA-256:	AA5B72820EF52D01577B2A38DBC83FE82FD54FA288A920A40B6F3746110B180A
SHA-512:	BACF6A0964C1F3AAAAA9C1F5C9A79B467EE25B0B38DC8D077E0BF2F34FDC558D50C5FE61038B285BC62043CC55B5209EE3E22220F510F7F92220090B42D7F969
Malicious:	false
Reputation:	low
Preview:	import{u as l,o as f,r as S,b,e as N,f as _}from"./hl-347bfac4.js";let r;const p=1,y="/web-push/track",v=2e3,d=({value:i,count:o})=>{try{window.localStorage.setItem("currentNotificationState",JSON.stringify({value:i,count:o}))}catch{r=i}},m=()=>{let i={};try{i=JSON.parse(window.localStorage.getItem("currentNotificationState")),i\|\|(i.value=window.Notification.permission,i.count=window.Notification.maxActions\|\|p,d(i))}catch{i={value:window.Notification.permission,count:window.Notification.maxActions\|\|p}}return i},g=()=>"PushManager"in window,h=()=>"Notification"in window,P=i=>{const o=JSON.parse(window.atob(i));r=h()?m():void 0;let t=!1;function e(n){return fetch(y,{method:"post",headers:{"Content-type":"application/json"},body:JSON.stringify({...o,webPushPermission:n})})}return{checkNotificationPermissions:()=>{g()&&t&&h()&&setInterval(()=>{r=m(),r.value!==window.Notification.permission&&e(window.Notification.permission).then(()=>{d({value:window.Notification.permission,count:window.Not

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (400), with no line terminators
Category:	downloaded
Size (bytes):	400
Entropy (8bit):	5.524473490196421
Encrypted:	false
SSDEEP:	6:xWzPl6PYf2dHrdV2HrJ7uPGblRLG7M+duVJ6hmapNOHJV2HrJ7uPGblRLGAen:xW4PFrd+J7fllG7HumcapN4+J7fllG7n
MD5:	7EC9AEA69812AA064C2A7B6669D84E3F
SHA1:	1454FC37DE37C65119398D27C5187ED969EE2DCB
SHA-256:	DD2DDD652CDC8F4C920AA8EBD1159E3E4FE6D731E0E1A761498617778BC547E6
SHA-512:	8420F4DA248470449E5B57EB6E1C6EFDD4E91F115EE0BDDCA8FAB06E82AAB0AEB83995F0063639FF1D7E3E90D691A5F80220D0CB366AAB0DBBE88FD9829D4F1E
Malicious:	false
Reputation:	low
URL:	https://partner.googleadservices.com/gampad/cookie.js?domain=ww38.watchdogsecurity.online&client=dp-teaminternet09_3ph&product=SAS&callback=__sasCookie&cookie_types=v1%2Cv2
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=d82d484fdf919dea:T=1725984698:RT=1725984698:S=ALNI_MZG0j4eLkBIBLaXlE2oaKhPnP0tAQ","_expires_":1759680698,"_path_":"/","_domain_":"watchdogsecurity.online","_version_":1},{"_value_":"UID=00000ee5ade0e38b:T=1725984698:RT=1725984698:S=ALNI_MY2agIv-n4yqKZmKRSKhOvapT-hZQ","_expires_":1759680698,"_path_":"/","_domain_":"watchdogsecurity.online","_version_":2}]});

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 486 x 329, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	108663
Entropy (8bit):	7.988017902990421
Encrypted:	false
SSDEEP:	3072:cw9gF/IWdTGWzaoQjT9KHZnc2Gna36NNjj:cpFndTFzAf9BFjj
MD5:	241D8E5F4E4A56D31060FD979FDEC8C8
SHA1:	87C5E0CECC0AFFAC87DD9754D7BD7D04C8E0A478
SHA-256:	F0F26CCBB94EC1E943C43A53B948C7DB81E28A1F8F14E8D86D757FF0376C206D
SHA-512:	A05DFEC1CBE2508655532F36AA892F48DE753B8D79AFDB6606851505EE64C8A2FD9B0E409307DDB8DACB9BFF1788EB1BEF0B5DF6B250F80715625A3D5124551C
Malicious:	false
Reputation:	low
URL:	https://i.imgur.com/UtE9eZe.png
Preview:	.PNG........IHDR.......I.....N......gAMA....\|.Q.... cHRM..z%..............u0...`..:....o._.F....IDATx..w.\g}..~.S.n..V.Z.l..^.m.h...!.$po.&.$7!7!..'.cp....^.{.+m.}..9.y~......B~.._..V..3.y>.................?.>>>>>>.0........................./.>>>>>>.0........................./.>>>>>>.0........................./.>>>>>>>.0......................../.>>>>>>>.0......................../.>>>>>>>.0......................../.>>>>>>>.0........................./.>>>>>>.0........................./.>>>>>>.0........................./.>>>>>>.i..)....'a..@.].vq..1............n2..s..E..m.h..~.mv.....$.....ofhh.L&.........r,.".L".@..J)B..{..!........add..3g.o.>.[.9s.<.-[..\p..VSS.Rj.^}.U..9.e.].#.<B ..S...{..%.L"........p..wc.......5k....j>p.I..?o....#..^...n..Xb.l<..:d<..d...0..5....!.$...?/ZH".MIi..h.CZ.\....2...&........~....>...y...0..'.\|.....kikk....T.eY...1..\|..>.c.3g.;w..}.{...CJY..:;;../^..d2...N...y...kx.........d.....K\s.5TTT...B!B..B.^x...R.!......c.&ZkZ[

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	14453
Entropy (8bit):	5.493928833104971
Encrypted:	false
SSDEEP:	384:2G4w8CGLgZ+kwoKGLF6WQCBkKEmoI8+6yaYrHm8spM4c+5/iwvgCiz5yiHHAXCtf:2G4w8CwooT/2tTG2vB
MD5:	79E89095783A140F51E9AD3EE60C033D
SHA1:	70822591AF477E503E8C1E48A625748808119FEA
SHA-256:	7A715647CA2415BEDD32FE31369DA582B0ED747C5A41DA1C6126C3E9D53388A9
SHA-512:	E3F1CDC620ACC644485E88E76F7FE839166AED43C546DFDD240B14F273D1BE979D0919304D21F8CFA5AFDA529C4636FE469539C33D1A2761468CBF77ED292445
Malicious:	false
Reputation:	low
Preview:	{"landing":{"id":8661,"name":"*CC US - Sport Streaming (Unlimited) - SIGNUP page ($69,99)","title":"Watch your favorite sports live - now!","aliasHeaderText":"","isFitFlow":false,"webPushSettings":{"isWebPushAllowed":true,"importSecureAnalytic":true,"webPushVersion":"widget","options":{"urlScript":"https://secureanalytic.com/scripts/push/script/02eyoyxdkz"}},"isHotJarAvailable":false,"hotJarKey":3126190,"isGoogleOptimizeAvailable":false,"goTrack":"","isGtmTrackAvailable":true,"isGa4Track":false,"gtmTrackId":"UA-195162716-5","isGoogleTrafficType":false,"skinName":"Match","layoutName":"layout23","isGatewayPage":false,"isCoveryFingerPrintAllowed":true,"isPaymentFormCrossSellPlace":true,"isPaymentFormUpsellPlace":true,"isFooterCrossSellPlace":false,"isFooterUpsellPlace":false,"isCrossSellPossible":false,"isUpsellPossible":false,"crossSellPackageId":0,"isThreatmetrixAvailable":false,"threatmetrix":[],"isRegForm":true,"isGatewayForm":false,"landingTopicId":1,"landingTemplateIsExisted":1,"not

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2077)
Category:	dropped
Size (bytes):	7582
Entropy (8bit):	5.136283338234071
Encrypted:	false
SSDEEP:	192:Jq1qcmiE3CEIFfymyDWAZPp0yCEFXTfcbyLaC5TFkY0yW/GaKdgH:8UIhymDAZJFDfRLaOTO3ll7
MD5:	15F8F15D35C28E18AC918EF2F0DF2643
SHA1:	031D53EC10BD0CEC5250B179CE7E2CBDB4320253
SHA-256:	92CDA8DC1255F99DF341F745300FA38A18F144CB4C656E25E424871EE6E50902
SHA-512:	9BD3AEA22D6D28EA188BBEE5EB42E155022E2E5C7E4D90B11A66C7344DA86B4BA61DC2EE3431DB5EEBD514EEF8B0699FE0E03939F25BE4DC6E3DF3B45EF59229
Malicious:	false
Reputation:	low
Preview:	(function() {. var dc = {};. var gu = "10401725984635D685D944936F64E5C9";. var su = "104017259846826D967D8EC149D51A2D";. var gm = false;. var cn = "__dtsu";. var lg = {cv:"US",cs:"C",rv:"NY",rs:"C"};.. String.prototype.dts_hash_code=function(){var hash=0;if(this.length==0)return hash;for(i=0;i<this.length;i++){char=this.charCodeAt(i);hash=((hash<<5)-hash)+char;hash=hash&hash} return hash;};.. function _dtsi() {. a = document.createElement("a"), a.href = window.location.href, _dts.host = a.hostname, "undefined" != typeof document.referrer && document.referrer.length > 0 ? (_dts.r = document.referrer, _dts.p = _dts_gp(_dts.r), "q" in _dts.p ? _dts.q = _dts.p.q : "query" in _dts.p ? _dts.q = _dts.p.query : "p" in _dts.p ? _dts.q = _dts.p.p : "text" in _dts.p ? _dts.q = _dts.p.text : "wd" in _dts.p ? _dts.q = _dts.p.wd : _dts.q = 0) : (_dts.r = 0, _dts.q = 0). }. var _dts = {};. _dtsi();.. function __dtsinit() {. var c = document.cookie.spl

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
URL:	https://thrtle.com/sync?vxii_pid=5038&vxii_pdid=y-aNlCHMZE2oRTc9CQhgWXt2sCk_2ZJ6aGgcRwmw--~A
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (722), with no line terminators
Category:	dropped
Size (bytes):	722
Entropy (8bit):	5.294950105273349
Encrypted:	false
SSDEEP:	12:lENqfUv8Y15mRRZWl8mowOwlIJlfZf/fP2UsdWE3Lly99GjTHn7KOn:eAfUd15evW2nwOw6vZnAWE7+9Gvn71n
MD5:	44B7337674BF0F2253DBD06BB7F97C6E
SHA1:	9E908A9A4DEC377DF23B20CA5ACD42BD589392FE
SHA-256:	69D14CA000A10BDD5AED45B1725EFC838A3A25A8942E77544C3116F595271024
SHA-512:	F42BAD9D73214E396D99A46175EE1A064361885D5D0C0369CD5B33AE8559408703C0C73D44A9BCCC3ABFE31DD45B18854B5C1A3A7D71C298F80E38E4DFB9644A
Malicious:	false
Reputation:	low
Preview:	import{t as r,b as c,c as d,I as u,y as b,g as a,B as f,E as y}from"./hl-347bfac4.js";const x={__name:"ImageBgBlock",props:{classes:String,imageData:Object,disableContextMenu:{type:Boolean,default:!1},style:Object},setup(e){const t=e,s=r("isAdmin"),n=t.disableContextMenu?void 0:()=>{s&&window.parent.postMessage({imageSettings:t.imageData},"*")};return(m,i)=>{var l,o;return c(),d("div",{onContextmenu:i[0]\|\|(i[0]=b((...g)=>a(n)&&a(n)(...g),["stop","prevent"])),class:f([e.classes,a(s)&&!e.disableContextMenu?"lp-builder-image-bg":""]),style:y({...e.style\|\|{},backgroundImage:`url(${(l=e.imageData)!=null&&l.base64?e.imageData.base64:(o=e.imageData)==null?void 0:o.url})`})},[u(m.$slots,"default")],38)}}};export{x as _};

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
URL:	https://tags.bluekai.com/site/5386?id=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 9993
Category:	downloaded
Size (bytes):	2907
Entropy (8bit):	7.933921319577512
Encrypted:	false
SSDEEP:	48:XXoPY6OH4yxkPhz7Ra4qQOBxJFD5VWB5akjKViWm/mlRV9VFk5XUsWW8MiTI:HoPYzHtkZhaZJJTQjKPumlnCXUs38Mik
MD5:	1E34487B28E3BDC3EDEF6DBA1A6093CD
SHA1:	5982105F588F32BD49F5244B242C786F6161B963
SHA-256:	A350F5D88A2744C097173BD6CF071927197C5D8A4C626E4231F787B0637FAD29
SHA-512:	1E26A9F375C7FFC906421D8268DD31BA68B8680C5A46F70290616FEF381229EEB47F6528EB90C64F048F642B79F500372C8065BD7B08C58A933F592C7400A5EE
Malicious:	false
Reputation:	low
URL:	http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran
Preview:	............ko.8.s..?....Z.6...$M..I.Iw.n..h...P.@Rv.i.....e..._..i..(.9.ys.n.R...8.0.?]Y..< ....6$Jem..q..e..u...^..O7..A. !...\...kq......Q.. .La..%....E}...[0".J...I..b..."...8.[......s%g.]\.].9.....o/../..O...O.~9..o>.?g...L ...>\|8......wJ....s.o9W}D)..!.....Y.(......P~.1....1.f...;....Tc.e... .x.X...+.R...J9K.....H.N.o.....F....z].-"58JI.8S.9.)F..N.S............W......<...y.W....7..h.d).P.......]`..'..T.+ !g......!i....'u....;..-p..Jy....s..+....@.Oi...<...x..f_;)a.(...;..O.Gcx.{U.F.],x.6P.0.v,PD0S...Q.k...o.....6.1..G...s..M`..8.HA....3 .8...O.......27....G[E.......H]...x.g.")~$.._....{k..#.QR..."l#c..\|o^.{.d~q..=.../=^...;.(]..3..7.c...g&"2..").K/.#2...[.....<Z..S.l.!..fqk.GK ..(.1....r..L.X...K...e+A..)........$........6.......k.}.^W.o.8[./.wz.o//...........{]7.pV7".. .....D,.D....dI6.. q..b.]..^.T....d.4B.E.;.1a]....j.VL.z=#...#.2X..v.+..5.[G..q~.kc.X,..cG..6X.D....4Nj.07*..vi.U.+...pl.."..f+..}/..\|..V9.IQ...D&3),t.

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2444
Entropy (8bit):	4.677942804691667
Encrypted:	false
SSDEEP:	48:GuHi4KtlT+YU9MpRa/zcFhxpLKiu/lHpegj5y72a4ukvzLx:zi4KtlTla/szp6yqaIvzLx
MD5:	FF7C60D6CC2190141AE1EA6605A2C08F
SHA1:	D32F89C5CB67445A23FA66864E6218CC213558EF
SHA-256:	30C099F0967C0CD04DE21CDB0077467B1908BD5677B0BE53EF348631943A1B9D
SHA-512:	603DF68B53B02E6B72A1DBC449BA24A4CFA8B7424B7CAAFBFE8CA518EC37BCB1E792D4B2BC33705AC8D45449E17B4AC0E398AD2FE9DFFCBA607665FC07AD109D
Malicious:	false
Reputation:	low
URL:	https://pd.sharethis.com/pd/dtscout
Preview:	(function () {. try {.. // set up our pixel. var fcmp = typeof __cmp == 'function';. var fcmpv2 = typeof __tcfapi == 'function';. var rnd = Math.random();. var img = document.createElement('img');. var exptid = encodeURIComponent('ZHkABGbgb30AAAAIC72MAw==');. var url = window.top.location === window.location ? window.location.toString() : document.referrer;. var img_src = 'https://pd.sharethis.com/pd/dtscout?_t_=px&url=' + encodeURIComponent(url) + '&event_source=dtscout' + '&rnd=' + rnd + '&exptid=' + exptid + '&fcmp=' + fcmp;. img.async = true;.. // set up the aqfer script. var pxscrpt = document.createElement('script');. pxscrpt.id = 'pxscrpt';. pxscrpt.async = true;. var pxscrpt_src = 'https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=' + rnd + '&stid=' + exptid;.. var done = false;. function load() {. img.src = img_src;. document.body.appendChild(img);. pxscrpt.src = pxscrpt_src;. document.body.appendChild(pxs

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.sharethis.com/ttd?uid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 16761
Category:	downloaded
Size (bytes):	1662
Entropy (8bit):	7.860767000051284
Encrypted:	false
SSDEEP:	48:Xu8+Yf5jBK0eo2MCi2l+Ko0/CKorXCk9S:VW0eri6ToRryCS
MD5:	C137AC7E4E51968F0A4FCE17C62B133D
SHA1:	343FFB5F0AC7B83E82F58EFD0DCD46F975960FEE
SHA-256:	53D7C2287C7A85FD38C37A5D1558269598836BFF487E63190F9BCDDDC5BC2305
SHA-512:	D82117E769C8E725B66EE2744FE13D3D91E0F185A7832B6DFFF00161C246DBA29FCE47F7FB5EB6CF8623995E423CAFEB6E7362A450D9F7ECAB5276BD6CB6D1E7
Malicious:	false
Reputation:	low
URL:	"http://fonts.googleapis.com/css?family=Open+Sans:400,600,700"
Preview:	...........XKo.7...W.R8i.._.]:..K2...!M..&.k[.$..l.(..;C...!.....{!..1$....~;..o...b^...&.N....^....u4..Z-.......z.z....,m....?...7..r_{./..v....G=7.n~u:.}.....tr.Y>....N..k..r.........t;....0..V.._..2{..B............w....wq....?.n........ajX...q...q..b~.[_mf.KX....b..'.x.....`N...V..S.....6.. B.I\|y...........\J.O...8Uu.. 0.............1..S.#P.c...2.2......4'.X..d....@Gy.J.-LZ.`O.U......x8.5..:.].......l"Q.]"1:..T..D_.....?.p...!&.A....+..$...5.8l..x..k..:..V..%.a.:.FP.l2.)...1.e.8.5T.._...$.%..8..^Sn..g ..-.`&\...@.-%..&.....U..d`......-...z..#r......V...G..h.d......Y..rX..Y..0......45..........[..zT...6.^;IyC..c.)..X.:.j.+H........._X...J8..Ihq.r1..c.(O.s..-.$...0....._._/..8.o^=.,3...n....`<.%.......A..1..t,j4.6~....=......zFI6.A.F..M.##DCP2.P....>.Pd".E.q..8.-.$.4..Wf.lD.z..............\|....38...m h.4.A..S}...D@(.....&..CS.^....v...bd.'.'..BZZ%.......]).*..#E....M[.4.l....!....B[......Q.LL...&X..Sk.0,.I...T.X'.d..M.....y....d.

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.141565412858599
Encrypted:	false
SSDEEP:	3:RFeBBbBjjHxBAe2FYDxW8:jetdBv2Fp8
MD5:	DE3701EECB9340AE075E05B04BB05A6B
SHA1:	1262474193BC31E859367DF01C4B2B26214A375C
SHA-256:	F475C34186022BA531EBC8BBA97FC10DF7E4C3EA854F314A18AB0644C851620D
SHA-512:	4CCE11ABF10DF2640900C923B0CAC9AE1B80890F52701D5B57AB937C4752E91AEA392ED9439EE24357A6F88AC6F0F79B160A9C080F5670220C29C81B5148C69E
Malicious:	false
Reputation:	low
URL:	https://s7.addthis.com/js/300/addthis_widget.js
Preview:	// AddThis services have been deprecated as of 5/31/23.

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2323
Category:	downloaded
Size (bytes):	1396
Entropy (8bit):	7.851397425314581
Encrypted:	false
SSDEEP:	24:XmJxD6QTBP4CADUACL7KwqjOk+B2hd0FDikTxS5CXX4kc0gEjHOYRiUKIsZ:XIxDBBDAYMuFJTxS5zQg70K
MD5:	876C54EB7BA06C8F2DA9CA076754CBA4
SHA1:	79D8F4747AC0176F816C1A44B7325277C459AF69
SHA-256:	417F1430130C675AC46DD0A735B15DCE88C1C1A56C7C24F1FBE475071643E3D7
SHA-512:	DBA58DA4DD4C4F0BDAF0D7B3E7231546CDC79E0B5595247D4C789554CF4515E900C90AEA6DE15232817042F1FF0F20FFBDDDBF4D6B12DF9A58507700632BD1F6
Malicious:	false
Reputation:	low
URL:	https://pxdrop.lijit.com/1/d/t.dhj?cls=sync&dmn=football-booster.freevisit1.com&GDPR_v2=&us_privacy=&pubid=dt_scout&gpp=&gpp_sid=
Preview:	..........tV.s...W.>.#U..i.M...ir.L.vH.K.7#......-...7..Ko......Z...Of..Nm^j.....!.V.....Wh.D..{_'e.....4.M6c..\|.<..$fP..Pql-..B.J......U.tv:..i.u....Q..B...9.T..au....3Y......R..k.B..f...3-..."0.d..'...'.<YZ...........:S.\..pI6.c.E...:5..........%p\.t.....Q.Z...yZ&x8).sG\|.._+i.YT.,..1...p.1!..T9.4.?J+..f..5d;........^...l.[..<..&......'4.gem..y.o..6.).Zo.>2..DE...lX...,...=F.c..p.R?...8...6.G...q.B..S.1...1..x.o..@.......\|.b..._....4.e.N,..-.{..,....q.c.....IAM.....84...U."...Gi.w......J.Z]h....sL.4.H.n^M...s.n....1..Y...{.......~......\.....A.h....2..'...\|.~......)..b...5..J-.-.......\|....z.OVl..mLJ.e.n....*...y.`T....k..7.9E..5 .....B[..}E..<...[A.Q...?Yv.\..84..A..8...p.BD..H.:.@..\|2.q+..P4\...@.?-....'.+M...=Eu,...gQ..g....~..E1>S?\|~.....]...Im.{..<\|.........E.79..{.~...oUm.b.Bo.....CP...a[...2..p."O..co..~s........Y..7~..gl..{....^..q;.....I\..lieA ....gM.n.....1y..#B%WE)..'i. .y..BY.q...6.w.......3..U..y.....8..x.R.....]

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 24732
Category:	downloaded
Size (bytes):	9706
Entropy (8bit):	7.974244330200313
Encrypted:	false
SSDEEP:	192:sdfLzIYp/TqA9pWKOtmld+fBOApnSbGbZAsCQSu98xpZi2:sdffIeecIKameOsnSbeCsCu98xpM2
MD5:	373CEF3A03E2AAB544B1645A96E1557D
SHA1:	789BB2E7E291CE40587D62BDB821934E0F7B736D
SHA-256:	A9DCEB91B28EDD0CE446F678E2117ECE68191D4C2E609B07F4910D2F93F58226
SHA-512:	9DF97EEAC20A806BDDAAC955EA39554040D9B5A38A5C7432C4BC0347FFB4C8C14F1E923082D9B227D6421996AEE238B0A027038FBDC381EA3365616544B94388
Malicious:	false
Reputation:	low
URL:	https://t.sharethis.com/1.1523.23404/a/US/t_.js?cid=c010&cls=C
Preview:	...........m[.8.0.......+."..^mD.R..@y...Q.m".YIKq...5..8.t..=.9...C.i43..H..,y..Z.-.n,..5{I.....g....Z....if26..@...... _..Y..]..z/...Kk.W..I.....Y;.`PG.[k.J...G.%&"........mG.\..>.TZ;...K.\|.d.X^v/.5K.Nj......$...{d.Y.....EY.K}0.._...f.e..!.....5..:...O.H..@p.#...{k..O...w.....:.lZ.U.@..3J./w.......1....[k...66-.,.U.vn.u...bg...uuyn.X#.&.....IW..k/jnVS.&.o...t].{Y.'{...&.........u..h2~...e...;..M.J.U...4.Sj.Y.G...=.......h.....\.....i..O..g~`.X.u.........*..>...........U.u.I._}:..xXr..7\|....Q=.x.s P.....yG^08..#..'kg....U.......N..Z.<w..3.._..O..]r{.&..._...u.U.to"j.^....oA.4....g..g..2.f..Q&uW^.....D.z.....}.o}gm.V...Y.........._76......D.G....b..n.%z..k;.......?.$.D.....:[..:...a.....fk{[........}k....zv...........?.d>...Xcn...\|....^i..k.............n.Y.G.8..9<>..f......a.<.......Ok.:...'K.f...c(8....%<....<........6.<....B..x...3..L.:..3...(...9.6..;....Z.>...j.........A..uz...8>.}..............@....O......H>A..`...p....d....4M..

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2320
Category:	downloaded
Size (bytes):	1384
Entropy (8bit):	7.808118802355832
Encrypted:	false
SSDEEP:	24:XX9sBxG/OsaCezrBbGlCG/Labdy1t6oEPjZsuIPJE+nfLNZD:XX+BfsaxzSCIUy1t6oEsukJnJt
MD5:	20272454D2D6C9F0FEF2AAB9A7CA0514
SHA1:	F11FFE17485758FACC6BBEAE5AC42A9775968B94
SHA-256:	E16EEE2C2F198F221EC9237D2283D8A69B0E76BB09B8B35F18F03B9A866D39AF
SHA-512:	B4DE9D9E6D19B7FCF9FA14299340A499B241260A41A4758DA3B10C1AEA2F86B4C01E98D5F43CA87B0AA688C62C01DF874536AAA5AC7D38FA98D1ABD76042E908
Malicious:	false
Reputation:	low
URL:	https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=0.8260556535268637&stid=ZHkABGbgb30AAAAIC72MAw%3D%3D
Preview:	...........V.S...W..G.6rB..W..%p.Ci../.........J.....#;....~I...Z.....B..,..3S..T9.;..W.A...j...:.jQ...e;.\\&....x..q....plW.s..T.m.8.P.K......4.S...oT.hk.3'..........O..."......-+c..0#.M1qS...RnZ...L...r.....6..9.=...APWy....."5.0)..\.'...6y.m..;...m..8.....frj..r.&N....e>.....(..q...n..;....2....).......!...1.s.^.68.Y\'M..w..C..LN..5.o=<8x.m\..k..j..."..f.z...I.....C.#a........8K...m3..Y.M......}.O.>.$..o..H...6~p..QVe.8...D..Se....9....}....z........(..\|..CsZ.E......B/...gg...2..a.W)[.....E.9...RR..Wu^....o.p.#..].9A..~.K0...........o4.n.....k...d.L{.(......+Z.'..^.....F;.]S\..k.t~..R..f.$./...+2..Sssuv\..0.cW..0.?..=_...b.y....8H.........4.&I...A.Q....Q.@.\|W....A..8....BD.!(8..q....l<.q#.aP4L...&.V.r^8......M=...S.%b.wq.g.~.A......)N.....G.p.f;.+Y..jg..~....Y. . ......w..}.-....... ...d..Q[.O.....yK.i....p..\|...5.i."...kY..)....s.G........{....W:............y...<..G.J-.R..^..A..(5.q..;f.i..b+Yg.WG.O.G..6g)`..c.U...[...K.n...fu..%AQ.

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (779)
Category:	downloaded
Size (bytes):	780
Entropy (8bit):	5.1307594837401735
Encrypted:	false
SSDEEP:	24:YqmC9UEaDxEjJ/UCBzX1nhiMP6qUn4VJlTF7bjO7:UC9URtESItDU4VJlTFbU
MD5:	FB5E69E19664E6282C2722E1C591B494
SHA1:	A4B946C91441F8F69255F7EF900173E00E7D4A2A
SHA-256:	1E77917ED1DF4E049B684DBA82F3B94F21B94AEA17B7E4FF7CD249D4EB71EEE6
SHA-512:	B7AC4D2E7A058D970F5EC78D71F729F99D4EA861DBEDF343988DA31B7A3E0711883759C0CDE0638056AC45745AD3A59D5486D67E4F8077049BCA36FE3C59DBBA
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-b435eeec.js
Preview:	import{U as c,b as a,c as l,n as s,Q as d,C as p,W as i,g as o,h as m,B as u}from"./hl-347bfac4.js";const f={for:"portalPassword"},w={class:"form-control-wrap"},_=["placeholder"],h={key:0,class:"error-text"},b={__name:"PortalPassword",props:{params:Object,texts:Object},setup(t){const e=c().getFormElement("portalPassword");return(P,r)=>(a(),l("div",{class:u(["form-group passwordField",{error:!o(e).isValid}])},[s("label",f,d(t.texts["portalPassword.label"]),1),s("div",w,[p(s("input",{id:"portalPassword",type:"password",class:"form-control",placeholder:t.texts["portalPassword.placeholder"],"onUpdate:modelValue":r[0]\|\|(r[0]=n=>o(e).value=n),maxlength:"32"},null,8,_),[[i,o(e).value]])]),o(e).isValid?m("",!0):(a(),l("span",h,d(o(e).errorText),1))],2))}};export{b as default};.

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (11440), with no line terminators
Category:	downloaded
Size (bytes):	11440
Entropy (8bit):	5.405413454337748
Encrypted:	false
SSDEEP:	192:TixaOdP2DahLeKkda6nGvCvsojELj2n04UwXNAfLwUW1WuYx6jomrYZJp2XmIR2z:mxaOdWyLwaAWj2nvUwXNAfLwUWAuYx6e
MD5:	E959FBDD13DEF4B9A9D0A5FC9A7DE4D4
SHA1:	1E39712307E3673B40C0BDB8C7D3E86A3E8B60A0
SHA-256:	2DEFE59E357A7D0683C8283AC42841DB404A0884CAE2EAECEBF4B676E559DEDE
SHA-512:	590B22282634411002C9467C6C0D20D27979F841BFFCF893E715A2B61301A873457A9CBE0A765A11592E7F5CB81FC50D5BD436BD5D47DC93BFB776515B02E2C9
Malicious:	false
Reputation:	low
URL:	https://s10.histats.com/js15_as.js
Preview:	(function(){var n="undefined",t=function(t){return typeof t!==n},e="js15_as.js",r="",i=!1,o=!1,a=!1,s=!1,c="0.2.1",u=25,_="-",f="_HISTATS_SID",d="histats_custom_destDivProducer",p=function(n){_+="_"+n};p(c);var v=function(){i&&console.log.apply(this,arguments)},l=function(n,r){var i=n\|\|{};try{var o=r.document,a=r.navigator,s=r.screen,c=r.Date,f=r.Math,d=function(){return o},p=function(){return d().getElementsByTagName("body")[0]\|\|d().getElementsByTagName("head")[0]},l=function(n){return"function"==typeof n},h=function(n){return t(n)&&n instanceof Array},m=function(n){return t(n)&&!!d().getElementById(n)},y=function(n){var e=!1;if(t(n)){if("NaN"==parseInt(n))return!1;e=parseInt(n)>0}return e},g=function(n){return y(n)?parseInt(n):0},w=function(n){return"string"!=typeof n\|\|n.length<1?n:n.replace(/^['"]?(.)['"]$/,"$1")},T=t(window["_DEBUG_HISTATS_ASYNCR_DO_NOT_AUTOSTART"]),I=function(){return parseInt(1e4f.random())+1},H=function(){return Math.floor(4e8*Math.random())-2e8},C=I(),E="hist

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	3.4289655345950862
Encrypted:	false
SSDEEP:	48:i3H5R5hLOR4kt38PduMoglJrd6qTrp9hweFC0+6Ga:ipHFUs4MLBvuyCda
MD5:	1BA2AE710D927F13D483FD5D1E548C9B
SHA1:	C0605EFED936EE2600284E6480521D06FA64F872
SHA-256:	DB74AB0B78338C1F778F8398C45F4103C99AEA0E845A3118A7750B4EEAFD3445
SHA-512:	F933CD352EABA92F509B3863353DDFEFADFADA26A4152ECDC4727D450BBF35E7B10FB3038FE8DB340D5C63D74E608C1560EC84D0F6FFC8CCD940C9E0D7533544
Malicious:	false
Reputation:	low
Preview:	...... .... .........(... ...@..... ...................................................................................................................................................................................................................A...A...A...A...............................................................................................................A...A...A3..A3..A...A...........................................................................................................A...A...A...A...A...A.......................................................................................................A...A...AZ..A...A...AZ..A...A...................................................................................................A...A...A..A...A...A..A...A...............................................................................................A...A...Az..A...A...A...A...Az..A...A.......................................................................................

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	3.4289655345950862
Encrypted:	false
SSDEEP:	48:i3H5R5hLOR4kt38PduMoglJrd6qTrp9hweFC0+6Ga:ipHFUs4MLBvuyCda
MD5:	1BA2AE710D927F13D483FD5D1E548C9B
SHA1:	C0605EFED936EE2600284E6480521D06FA64F872
SHA-256:	DB74AB0B78338C1F778F8398C45F4103C99AEA0E845A3118A7750B4EEAFD3445
SHA-512:	F933CD352EABA92F509B3863353DDFEFADFADA26A4152ECDC4727D450BBF35E7B10FB3038FE8DB340D5C63D74E608C1560EC84D0F6FFC8CCD940C9E0D7533544
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/favicon.ico
Preview:	...... .... .........(... ...@..... ...................................................................................................................................................................................................................A...A...A...A...............................................................................................................A...A...A3..A3..A...A...........................................................................................................A...A...A...A...A...A.......................................................................................................A...A...AZ..A...A...AZ..A...A...................................................................................................A...A...A..A...A...A..A...A...............................................................................................A...A...Az..A...A...A...A...Az..A...A.......................................................................................

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=9828/tp=ADBE/tpid=89173485197164091184073779632394813746/gdpr=0
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://ww38.watchdogsecurity.online/track.php?domain=watchdogsecurity.online&caf=1&toggle=answercheck&answer=yes&uid=MTcyNTk4NDY5NS42MTQzOjA2Y2FlNmM1NTY4MzUwZmYyZjAzNjY1NTNiMGI5MjA1ZTA2MjNkYmIwY2QwMzc1MTA0NjNiMTdkNjA5NzIzNDE6NjZlMDZmYjc5NWY3OQ%3D%3D
Preview:	....................

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 778 x 74, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4340
Entropy (8bit):	7.799046607812443
Encrypted:	false
SSDEEP:	96:GiQXXGuas4AVFGLRzI+m2Xs4DIeBnX606P2UtRhK+i:GiVyGLVU284ceB0Pdrfi
MD5:	346055B003AFE7EF3E394DAE9BD3DAC6
SHA1:	8EC69CAC74F754260D9E6C06238DF86B69D07792
SHA-256:	B3044EF2E52443BEB9CB09849FE8E2FC4646337F0CAFB63D8D7412D580D1A75E
SHA-512:	CE57CF9C3E6FB10C196EF9E8A4C377762B68880BC6A1EDB6851D3664C2D0E1F0DB09F5F7BCB6594B427853205C5DD192FA2AB0360FEDE29552F6CE0FDDCBA735
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/prod/images/b32438bfc8ff3c596a43efbc29d32bae.png
Preview:	.PNG........IHDR.......J.....,VS.....PLTE.....................................................................................................................,,,..........................................wwwQQQ......\|\|\|..................ccc...000YYYAAA...III.B.....HtRNS...w.O.....KmTx.i-.H. fZ...42._...C..8..)\|=.......&..Q..$.....Xd...P...........IDATx....n.@....6f......1...up...U.J}.g.8M....!..\|..1....h`Y.euA..NW...e..~.eN..@(.Ads....n!9.pM.. "Y....d. 9...ez..:..P....{...vX.((.z1...c.x.B.(.cs38...._../.."......+.>.....lI... .Y.........,/E..J.e{.v].CC.%..\|r..?._6E.@Le...4Jk.~.....%.+......@.T.....Tr.....\@.QOI.....BB...p`Z<`.)Z..I.....+c..............\|.!...X.'.S..C]...L.^.%..On3..~.;...0....).:GM...Jq.W..F...d....!....~j..\VS.=S...N.bK.5....V.....(......k...F~v;...;iLR.Q.P.,.\|.n`..m.....]N....v;..P.........%J.'qr0..0Q...?&.R.M.(v.N..U.O....kh.O....s......`S.)..I.2.....g7..I...).......t..P..l...S..l....&%.8..._.../+.R...E....z...I.........

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1842
Entropy (8bit):	7.844880044441599
Encrypted:	false
SSDEEP:	48:CpBmStVyR9tjRq82OyNFQVYhMyTkRJO05Z:OuRP9q82OyNFQVY3CJOaZ
MD5:	C69C796362406F9E11C7F4BF5BB628DA
SHA1:	E489CE95AB56208090868882113D7416ABF46775
SHA-256:	4DAC0026FBFA2615DCE30C0AF12830863FE885F84387A0147B9E338F548D5D82
SHA-512:	D3AD560ED0FD29BE7D2CC434694F09E5A6FBEA8B29C0611AECB54A1B73B4D722C53F42A19DAE9E3D5D358444E50FB8FFFBC39D67CE751BDBC8C861F6F95D3162
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Uw.X...........b.....pb.Sfff.6....3o.wvF.(..r.u..9_\|...Is%..D......Xz.c....;...y;.....&#.l......H...X..s..]}..5`aZ..D.m....uk.c..i.\|.H... I#yB.7.0..._E.".h..Xt.....9.4.......0:y.....F.ua^.\|.....K..G..b&2;.z."...B/l$..s3.@..G..Z..`...p..EUU.hni...aZZZT......."...H.Z.....H....<..g.......U.........f."../...Gg...$....<YTU.p.....ND"$^.5!..@.8....Nhj.f.]......"..B..i..,...oh.5.....F.L........;"C...bO....Qa.G..!.....4.._....l..N.].....g...PoD....1r{......X.1..!.....}.o....=..^6i.{.......9`i...\~...Dyy9..`..D...n>.....7:.....1...t.(.D.=>....DH.0...K.Mx....,....$..1.1.P.T.............@'..6...Kv..e...D.?.X...k.2..\|l.$m&...K/.c......Vn....V ...`I......8al.zT.=..+Wr..%?.X.`..g....,..[...nc..:!..$.@2..3.\|....sB...&...a.<..}).zX.Q.)5....X.1..bk.....Vn...C#.c......mx.=.[...,.r.G....OMS....e.06.#.+..8Fne......B!...%..,........W...*.F..x#.Vv....I..c(...x5..u.....`hP.......&>......8...D#Cg.v.{Hyb.v..8.K7X`.....\|O.z.

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63965), with no line terminators
Category:	dropped
Size (bytes):	63965
Entropy (8bit):	5.415839533934785
Encrypted:	false
SSDEEP:	768:Sa+O7y8yVCWTXTnkbnErQJe+ISMnfI2gpyrJZa6Dx76H1W7XAW2vr3:Sa+ZCkDiEcJe+ISMnxJjDy1EXAj3
MD5:	2AFD7A7856345176E1C9C378191AE043
SHA1:	5E2C23320DDC06A4B00BBD81DC58D9D6A897401D
SHA-256:	3029A59A3EB78E1675C02962B4C2EFA72C770B73C3336F95F14B4C73B7465397
SHA-512:	139CB12A253E234E52C8B0E3F3FD6932E04250D2B8818EDC525939546B06852E26B17C1269AD5967FA2B9DCB965976C79EA9090168B04A457E769E2CC9457158
Malicious:	false
Reputation:	low
Preview:	var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== 'undefined' && typeof console.log !== 'undefined' && typeof document.createElement !== 'undefined' ); }; if(!lotameIsCompatible()){ if(console && console.error){ console.error('Lotame: This browser does not meet the minimum requirements.'); } } else { function lt3825_aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function lt3825_a(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:lt3825_aa(a)}}var lt3825_ba="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},lt3825_b; if("function"==typeof Object.setPrototypeOf)lt3825_b=Object.setPrototypeOf;else{var lt3825_c;a:{var lt3825_ca={Vb:!0},lt3825_da={};try{lt38

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (400), with no line terminators
Category:	dropped
Size (bytes):	400
Entropy (8bit):	5.478931024554393
Encrypted:	false
SSDEEP:	12:xWUJSEu3pQ804JllG7H+lLfEut8/dJllG7n:qEu5T7Ez8LfEut81E7n
MD5:	03634A14C28F5FEFE65938B3F62B5298
SHA1:	A440AA271BD09FF0D396DB2DF88FE4AD258BC8ED
SHA-256:	7B4F34CF02F5E1F1DB84124563AD59B386F6D378DF9DF29E0B527286B6B2256B
SHA-512:	42764F9C803561DFB7D2EA141751C4695F474D0ACDE3ED98F218AE12D81239B3D7E18F3F2CAA6239AF3867FCA44AA953267FFD6EE85D2FED0B9B6227C46F9271
Malicious:	false
Reputation:	low
Preview:	__sasCookie({"_cookies_":[{"_value_":"ID=4ac4087e9eeac7f2:T=1725984699:RT=1725984699:S=ALNI_MYyCpTdqhq4aG4_ZDZagkg3G-JeZQ","_expires_":1759680699,"_path_":"/","_domain_":"watchdogsecurity.online","_version_":1},{"_value_":"UID=00000ee5ad51b32a:T=1725984699:RT=1725984699:S=ALNI_Ma03Wm2Csq0jRP_8JGs9ggUmoD_Pw","_expires_":1759680699,"_path_":"/","_domain_":"watchdogsecurity.online","_version_":2}]});

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 84 x 19
Category:	dropped
Size (bytes):	1412
Entropy (8bit):	6.655913841871148
Encrypted:	false
SSDEEP:	24:qA8GPBvwAywLHhH/WCHGFDwtlSNUK4a68VrmibPTAMaE7WE:N8GKbwFfWmyctlSmKVLArE
MD5:	9AFE50090C0BC612953D081295EAB5B1
SHA1:	71A4DA2A622879C29176ECFA5AFE1BBE3E8CFA40
SHA-256:	D228D0256370863119C043F1E5CA8F3930F6999BD9F250434B6D8935F45DC171
SHA-512:	D7290B951CEC51994F3480C32B70DE0FAECA433B5D99209B044E1D4C12327768DE8C344B6BDED806D993251E0EE6F98F0DD64F4480E999FBC06ABFE3DD8056FA
Malicious:	false
Reputation:	low
Preview:	GIF89aT.........A..E..G..L..T..U..W..Y..Z.!_.#d.&..&j.&l.)..+x.0}!2u.3..3. 5..7`.9..;.E<..=l.>..@..Au.A..A..B..Cg.E.aE.RFm.Gp.Gq.I..I..J.-KKKK..P..Q..S..V..W..XX.[.F[..\.S_.,e..g..i..m..n..o..o..r..zzz~...e...........~................................................%.....&......................'..-3.~.).....".#..........VL...6.)........9?......p.X^...N.`.jn.......XL...........r..h..h..........................................................................................................................................................................................................................................................................................................................................................................!.......,....T..........H......(\.P. .#J.......>...F .u.....(S.PA$..0cF!.d..A,..3#.....C.O.F#U.\..e.0i.....jzV..+......K6..J..u...T.#k.QM..].h......r.C.0.?..ra..1..M..\|.....r#r..(.G].t.p......T..o..\|

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=1389/tp=STSC/tpid=d749f97f-6ea6-4942-b1cb-0bef3a6cb3ef-66e06f96-5553/gdpr=0
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	56
Entropy (8bit):	4.141565412858599
Encrypted:	false
SSDEEP:	3:RFeBBbBjjHxBAe2FYDxW8:jetdBv2Fp8
MD5:	DE3701EECB9340AE075E05B04BB05A6B
SHA1:	1262474193BC31E859367DF01C4B2B26214A375C
SHA-256:	F475C34186022BA531EBC8BBA97FC10DF7E4C3EA854F314A18AB0644C851620D
SHA-512:	4CCE11ABF10DF2640900C923B0CAC9AE1B80890F52701D5B57AB937C4752E91AEA392ED9439EE24357A6F88AC6F0F79B160A9C080F5670220C29C81B5148C69E
Malicious:	false
Reputation:	low
Preview:	// AddThis services have been deprecated as of 5/31/23.

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=1811/tp=TBMG/tpid=ZuBviAABs8yDBgAa/gdpr=0
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	8732
Entropy (8bit):	5.394992540059779
Encrypted:	false
SSDEEP:	192:pNY5N+NRNY3qNkN+XNWNPQNNNiNk3XNPN8qNYrNm7NCNRNS3sNEN8NNtNF1NHNU/:vYfUH2QiScPeD4CdFFwmBYHAaCijF7tS
MD5:	491071B193CBF66E4DC49AA6557107CB
SHA1:	BC94B425EB19BB3E858540767782B3A55BBE2DF8
SHA-256:	4DD49D1F89345B2F261EE71D4CE0020EC9ABCEECF6048B443F3BC4D6386C546F
SHA-512:	290733E1E1D07CB4AB72BFA051539679915EC2A33D38866E2E20AE7722A1471EF3E44EADD84EBCABFCCF2E631B6356ED7F44CD42FBA592D73474A464EAE4B123
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto:300,400,500,700"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2) format('woff2');. unicode-ra

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 438x389, components 3
Category:	dropped
Size (bytes):	29351
Entropy (8bit):	7.911718313481693
Encrypted:	false
SSDEEP:	768:65UunzJLihtBq6S/gTd6b+egDI/6XGYYq:6GezxihY/gdEgDwgpYq
MD5:	629E995E18415BEF426C612D6262EE74
SHA1:	DCB558BB3F72188A48E88036164F1D4BC8E734C0
SHA-256:	55D600D6E00926B5743C4F576EA593DA8511DE0A0436C3FAD35B4C636D172616
SHA-512:	1BC5377FD7D95A30B2C8C3BAEDEFCCEFA83FBC6483F8E48260490F75BF5920AE6AFA1471B4BF71C7A8ACEB69C1C661F1D67D2F59254D938E0BC3C37138893118
Malicious:	false
Reputation:	low
Preview:	.....C....................................................................C............................................................................"..........................................t.................................!#..13AQSW...$4CUVXacqs........"%Tr......25BDRYbtv.....&6Ed..789u....F..GHefgw.....................................@.........................#..3CS...."$2Tcs.....4..BRUr...%Da...............?...................................................................................................................................................................................................................................98an.A..v5G.YQ.....c..=.;.....q...xA~0...@....`9.8.`....._.8..... ...x...<z.w....0x..../...............=.;.....q...xA~0...@....`9.8.`....._.8..... ...x...<z.w....0x..../...............=.;.....q...xA~0...@....`9.8.`....._.8..... ...x...<z.w....0x..../...............=.;.....q...xA~0...@....`9.8.`....._.8..... ...x...<z.w....0x..../....

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pd.sharethis.com/pd/dtscout?_t_=px&url=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&event_source=dtscout&rnd=0.26782430717848005&exptid=ZHkABGbgb30AAAAIC72MAw%3D%3D&fcmp=false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=281/tp=ANXS/tpid=5768470956374677316/gdpr=0/rand=576822339
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (574)
Category:	downloaded
Size (bytes):	19456
Entropy (8bit):	5.368070514046372
Encrypted:	false
SSDEEP:	384:QlRIR3d1518qUT2nq+ZMOF1JXCtRgyeiyMQ6gTHwufvzlpszzLX1pDox4prZPGOb:QyJ18qUCFXXHkgphEfX1Fox4BZuOp1dt
MD5:	3F62449B84EE9485831C4C1726CDDD3B
SHA1:	8211B1E0C4DFB4D3AD7EE8A53D02F12B9503B06A
SHA-256:	3DB5FC063868D3CA5FC3CC2695F483266CFFEA00BEF68DFFD7E4944B947AACC8
SHA-512:	6ECEC6EC6AB4DF78BDA57C1873ED9B88B2CEBCBCDA730B5E2FDE6A68576798DA60A4006DD3E941A8CE0E48CE64236E1411C6435363BC420897E502B20ACE3977
Malicious:	false
Reputation:	low
URL:	https://cdn.tynt.com/afwu.js
Preview:	//v185 Copyright (c) 2008-2023 33Across Inc. All Rights Reserved..Tynt=window.Tynt\|\|[];.(function(){var d=window,m=document,h={distro:"AFWU",id:"AFWU-"+(new Date).getTime()};Tynt.AFWUL=!0;Date.now\|\|(Date.now=function(){return(new Date).getTime()});var e={_maxRef:600,_idMacro:"aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",init:function(){this._icUrl=h.protocol+(Tynt.e\|\|"")+"ic.tynt.com";this._debUrl=h.protocol+(Tynt.e\|\|"")+"de.tynt.com/deb/v2";this._sicUrl=h.protocol+(Tynt.e\|\|"")+"cdn-sic.33across.com/1/javascripts/sic.js";this._apUrl=h.protocol+(Tynt.e\|\|"")+"cdn-ap.33across.com/javascripts/ap.js";.this._chmob=this._chua=this._chuav=this._chm=this._chpv=this._chp="";this.init.fbl=function(a,c){if(c)for(var g=0;g<c.length;++g)0<g&&(e[a]+=", "),e[a]+=c[g].brand+";v="+c[g].version};var a=navigator.userAgentData;"undefined"!=typeof a&&("undefined"!=typeof a.getHighEntropyValues&&(this._chpv="pending",a.getHighEntropyValues(["model","platformVersion","fullVersionList"]).then(function(a

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
URL:	https://ps.eyeota.net/match?bid=bhc9gd0&yahoo_ver=2&yahoo_id=y-avDHyJhE2pU7_inbFoc6KAd_kDNVy9CkRxg-~A&gdpr=0
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2475)
Category:	downloaded
Size (bytes):	3978
Entropy (8bit):	5.545834862281054
Encrypted:	false
SSDEEP:	96:1gBnJemgfZEIWBXjjIyOXBB5ZZ5FDLyoHQ7zqc0QH1vwhdpXXBF:uBJemgxEIWBXXIdXBBDFDLyow72c0QHo
MD5:	FEFD1597C5C69032F7F63344131BE35C
SHA1:	C848D853BF9618890861A18C1F16777BDD6DA471
SHA-256:	706083F09B4BE3D9CF5E61976F624985F8E46BAC8F5E1426BF79C82075D4A9F9
SHA-512:	18C65177E3A1804880E06817C79460711BEBD7557A0D24F48F04BC6DD11C3671B21B52351682E3A090DC2610F1C0EE603633E01CD181324A9FB27860381B0926
Malicious:	false
Reputation:	low
URL:	https://bcp.crwdcntrl.net/pixels?src=LTJS&s=7%2C92%2C49%2C136%2C135%2C153%2C33%2C78%2C122%2C26%2C22%2C148%2C116%2C61%2C106%2C104%2C8%2C54%2C100%2C145%2C3%2C2%2C94&c=3825
Preview:	<html><body><div><img src="https://cm.g.doubleclick.net/pixel?google_nid=lotameddp&google_hm=M2JkYjM1OWM2MzAzNzA0NGQ4NzY1OGNmY2I3NzEzMQ&gdpr=0" height="1" width="1" /><img src="https://c.cintnetworks.com/identity?a=5461&gdpr=0&id=Lotame:3bdb359c63037044d87658cfcb77131" width="1" height="1" /><img src="https://ps.eyeota.net/match?bid=51mdg9u&uid=3bdb359c63037044d87658cfcb77131&gdpr=0" width="1" height="1"/><img src="https://image6.pubmatic.com/AdServer/UCookieSetPug?gdpr=0&rd=https%3A%2F%2Fsync.crwdcntrl.net%2Fqmap%3Fc%3D240%26tp%3DPUBM%26tpid%3D%23PM_USER_ID%26gdpr%3D0" height="1" width="1"><img src="https://id5-sync.com/s/19/9.gif?puid=3bdb359c63037044d87658cfcb77131&gdpr=0" width="0" height="0" /><img src="https://s.amazon-adsystem.com/dcm?pid=a8acf3b3-7ede-4e18-8405-edaf41005f97&id=3bdb359c63037044d87658cfcb77131" height="1" width="1" /><img src="https://pixel-sync.sitescout.com/connectors/lotame/usersync?gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D1389%2Ftp%3DSTSC%2Ft

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6225
Entropy (8bit):	5.976934819783072
Encrypted:	false
SSDEEP:	96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33
MD5:	2BD5C073A88B83ED74DB88282A56DDFB
SHA1:	D0EBFC376F8C6A44A8D4CD216817DCD7D0C33650
SHA-256:	AB5C23A05E39DEED14D9D8262B0DCE9F024F86105A27196CAD37D14A3F516E09
SHA-512:	5C6C4A92E93FC0F6A675658CC84F6187FDEBD3EEE94EFD07E24658736CBA598F3BC7156B19834B13FB44C1D43FCB7DF9FCCA7F0A453037E30DA76BA8F4B23B89
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/productlogos/translate/v14/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><defs><path d="M21.5 5h-9.17L11 1H2.5C1.68 1 1 1.68 1 2.5v15c0 .83.68 1.5 1.5 1.5h9.17L13 23h8.5c.82 0 1.5-.68 1.5-1.5v-15c0-.83-.68-1.5-1.5-1.5z" id="a"/></defs><clipPath id="b"><use overflow="visible" xlink:href="#a"/></clipPath><g clip-path="url(#b)"><image height="31" opacity=".2" overflow="visible" transform="translate(3 1)" width="29" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAB0AAAAfCAYAAAAbW8YEAAAACXBIWXMAAAsSAAALEgHS3X78AAAA GXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAABQBJREFUeNq8V8tu20YUvXdm+LCk RKiMwI1TFEXhVZJd1gW66xekv9DPqPsvXdU/UaDroJskKy+CInCcGpKtFy2SM/f2DEXZia0odtKW AkFJ8zhzzn3S0Ycvps+79EMDbj3Yfgv4EM+XTN/fEOb3Zg3AXmq7j64D5/e/x/EfzZMnX5jx+LFZ LLyp6yNDOzskYb6RubFdpbdvKUl2Jc+d9PvP5dmzUyH6TVoYXQOq+H5g9vb+cONsO9maLpIyyZPU kZNAppmh9Vpg5kSXwCSVJ5/Vi/r8Tl73y2F9ePidJ3oaga+B4vkUgF+6EW1ndz11gvNdDdL1bDN

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
URL:	https://ps.eyeota.net/match?uid=5142336730419127316&bid=omt9pi0
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1500 x 600, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	11375
Entropy (8bit):	7.645494653990172
Encrypted:	false
SSDEEP:	192:Wg3JLNIdFb540f7mqTiLHrBjcCTN1MbaJD/RBse6ogkORdLv2Ha/:vD4N54IsHVjdN1tD7lODL/
MD5:	0CB2E5165DC9324EB462199F04E1FFA9
SHA1:	9E0F89847EC8A98D98A6020BC5C4ED32B7A48BF8
SHA-256:	67DFF0AAD873050F12609885F2264417CCDD0D438311000A704C89F0865F7865
SHA-512:	7A285C4A87B9F9093B7BA720D8FE08E0AD7E2EBDE9EF8C8D11B70AFA08245AF8F8A7281C7B3FBE8BAD21C3AFDE4F32634D3BD416822892AA47BA82C12F4B8191
Malicious:	false
Reputation:	low
URL:	http://d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.png
Preview:	.PNG........IHDR.......X.....Om......tEXtSoftware.Adobe ImageReadyq.e<....PLTE......cdtIK^IK]IK\03IHK_acsceubdtcet..0=@SHK]IL]HK\MPbNQbORc.....0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes..-..0. 5.!6."7.#8."6.$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.....-../.....0../.....0../..1..1..2..3..4. 5.!6.#8.$9.%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.....0.!5."6.#7.$8.%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs..-.....0..1. 4.!5."6.#7.$8 '< ';*0B.4F06H06G..-..0.!5 (< (;...................................................................................................................................................................................................................................................t....tRNS..............................................................................................................................................

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.202819531114783
Encrypted:	false
SSDEEP:	3:YWQRAW64:YWQmq
MD5:	7363E85FE9EDEE6F053A4B319588C086
SHA1:	A15E2127145548437173FC17F3E980E3F3DEE2D0
SHA-256:	C955E57777EC0D73639DCA6748560D00AA5EB8E12F13EBB2ED9656ADD3908F97
SHA-512:	A2FD24056E3EC2F1628F89EB2F1B36A9FC2437AE58D34190630FE065DF2BBEDAF9BD8AEE5F8949A002070052CA68CC6C0167214DD55DF289783CFF682B808D85
Malicious:	false
Reputation:	low
URL:	http://ww38.watchdogsecurity.online/ls.php?t=66e06fb7&token=7b2f1d5eeb5c893ab2c6a8a3fab0c687303e0b83
Preview:	{"success":true}

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22367), with no line terminators
Category:	downloaded
Size (bytes):	22367
Entropy (8bit):	5.542626302580642
Encrypted:	false
SSDEEP:	384:gM78SUevMTjuFzouWaqWAlpTpdHjPtcnG:p7oevMX5HjPwG
MD5:	B0B46B807EEE39AF0AAD8F5FEFC9B3A2
SHA1:	0FB04F15599BC0844063A6AB776C86E73CB9FBFC
SHA-256:	71CA2652E2B3FFD3C0EC966958604714CE6C7AF01D961B44ADC438518EB58CB3
SHA-512:	4EEC49904A5480940124A1C1B9C9DAE764EBB115829CBCE4356E66A1D7F077DFD204A4634B0622FFB14CC6EBFF7062D7F30502BF0BC7D998A1A55FC8C876DA8E
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.26tY-h6gH9w.L.W.O/am=SDA/d=0/rs=AN8SPfpp4qw4h5AyW9QTA5jYnqCsyFmXiA/m=el_main_css
Preview:	.VIpgJd-ZVi9od-ORHb-OEVmcd{left:0;top:0;height:39px;width:100%;z-index:10000001;position:fixed;border:none;border-bottom:1px solid #6B90DA;margin:0;box-shadow:0 0 8px 1px #999}.VIpgJd-ZVi9od-xl07Ob-OEVmcd{z-index:10000002;border:none;position:fixed;box-shadow:0 3px 8px 2px #999}.VIpgJd-ZVi9od-SmfZ-OEVmcd{z-index:10000000;border:none;margin:0}.goog-te-gadget{font-family:arial;font-size:11px;color:#666;white-space:nowrap}.goog-te-gadget img{vertical-align:middle;border:none}.goog-te-gadget-simple{background-color:#FFF;border-left:1px solid #D5D5D5;border-top:1px solid #9B9B9B;border-bottom:1px solid #E8E8E8;border-right:1px solid #D5D5D5;font-size:10pt;display:inline-block;padding-top:1px;padding-bottom:2px;cursor:pointer}.goog-te-gadget-icon{margin-left:2px;margin-right:2px;width:19px;height:19px;border:none;vertical-align:middle}.goog-te-combo{margin-left:4px;margin-right:4px;vertical-align:baseline}.goog-te-gadget .goog-te-combo{margin:4px 0}.VIpgJd-ZVi9od-l4eHX-hSRGPd,.VIpgJd-ZVi9od-

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
URL:	https://ps.eyeota.net/match?bid=c9gd69u&uid=216623105001003118731
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2320
Category:	dropped
Size (bytes):	1384
Entropy (8bit):	7.808118802355832
Encrypted:	false
SSDEEP:	24:XX9sBxG/OsaCezrBbGlCG/Labdy1t6oEPjZsuIPJE+nfLNZD:XX+BfsaxzSCIUy1t6oEsukJnJt
MD5:	20272454D2D6C9F0FEF2AAB9A7CA0514
SHA1:	F11FFE17485758FACC6BBEAE5AC42A9775968B94
SHA-256:	E16EEE2C2F198F221EC9237D2283D8A69B0E76BB09B8B35F18F03B9A866D39AF
SHA-512:	B4DE9D9E6D19B7FCF9FA14299340A499B241260A41A4758DA3B10C1AEA2F86B4C01E98D5F43CA87B0AA688C62C01DF874536AAA5AC7D38FA98D1ABD76042E908
Malicious:	false
Reputation:	low
Preview:	...........V.S...W..G.6rB..W..%p.Ci../.........J.....#;....~I...Z.....B..,..3S..T9.;..W.A...j...:.jQ...e;.\\&....x..q....plW.s..T.m.8.P.K......4.S...oT.hk.3'..........O..."......-+c..0#.M1qS...RnZ...L...r.....6..9.=...APWy....."5.0)..\.'...6y.m..;...m..8.....frj..r.&N....e>.....(..q...n..;....2....).......!...1.s.^.68.Y\'M..w..C..LN..5.o=<8x.m\..k..j..."..f.z...I.....C.#a........8K...m3..Y.M......}.O.>.$..o..H...6~p..QVe.8...D..Se....9....}....z........(..\|..CsZ.E......B/...gg...2..a.W)[.....E.9...RR..Wu^....o.p.#..].9A..~.K0...........o4.n.....k...d.L{.(......+Z.'..^.....F;.]S\..k.t~..R..f.$./...+2..Sssuv\..0.cW..0.?..=_...b.y....8H.........4.&I...A.Q....Q.@.\|W....A..8....BD.!(8..q....l<.q#.aP4L...&.V.r^8......M=...S.%b.wq.g.~.A......)N.....G.p.f;.+Y..jg..~....Y. . ......w..}.-....... ...d..Q[.O.....yK.i....p..\|...5.i."...kY..)....s.G........{....W:............y...<..G.J-.R..^..A..(5.q..;f.i..b+Yg.WG.O.G..6g)`..c.U...[...K.n...fu..%AQ.

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
URL:	https://ic.tynt.com/b/p?id=wu!&lm=0&ts=1725984675539&dn=AFWU&iso=0&pu=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fregister-hsfootball.php&t=Register
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	377
Entropy (8bit):	5.221939068801587
Encrypted:	false
SSDEEP:	6:51bKGRhb13LkVVXI8mgO9lVhnmUqZzwGdDVTYqL1+LD+mMkuc1zlCBbAm+RbDRWX:51bz513QvuHnmVZkGdDJH10D+xc15CZj
MD5:	27A96FE02E3A6B0B39D819D4B1DB95D0
SHA1:	C796F17858B168A92BB1C6CB17C142B976C3B24D
SHA-256:	B19F68F57975D8AC6A70B4B20D9E7801BE7F6BA47ED0C1C5C93AAC934C4F958E
SHA-512:	F25BE13E1063F178D99A1FB0AF37341CA3099F6988A5B6AB6C8EE47862C59F0F58919D85621E57399D545281E20005CC59C21B4C5DBCE054FB1D9A24EB4BA1A0
Malicious:	false
Reputation:	low
Preview:	_HST_cntval="#3Vis. today=8";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);.b.async="async";b.type="text/javascript";var a=document.getElementsByTagName("script")[0];a.parentNode.insertBefore(b,a);}catch(e){}}();

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HpMyY:OL
MD5:	090F4A72412E061ABEE19287B36C8DB6
SHA1:	5289857BA869A3CBD6EF85463C8555905E95756E
SHA-256:	52D8DC69C1BED6EBBD7A7F99715ABD94BD631CD663734AD63096E0510319A353
SHA-512:	3CEB8E7DC76AE9D247FC77714CF3BDD17DA9C3117D835EB07CF10D0F621A1214CD1F2534865A045F8D909861387760B86D244103D8A304D0720BDB95ABE55BF1
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAloLac5Fi0jcRIFDeeNQA4=?alt=proto
Preview:	CgkKBw3njUAOGgA=

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.5841837197791895
Encrypted:	false
SSDEEP:	3:fp9+hyhcTW4Dt:R9kba45
MD5:	9F219E507C1FE3EE49C5F01699C41E44
SHA1:	359A22A96A6181C947352056128DBA0FAA0BA1E8
SHA-256:	E9164AF84FF1DD9BF2C7272051CB21F7416F5900548C85C373E0AB42CD598947
SHA-512:	D7BB02A0B1848F9A0FF964C5F5B0B75CC447D1267212BFD0DF108DBADEA3EF987F52114C6C413FFB0093C11ECF9FD2C8A99C7725A852FDE2ED1A0D1582B7EC34
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-b2170ae6.css
Preview:	.username[data-v-b7d2fe63]{display:none}

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (345), with no line terminators
Category:	downloaded
Size (bytes):	345
Entropy (8bit):	5.164872571408998
Encrypted:	false
SSDEEP:	6:haELnV8mgO9l3YId5LffCY2s4cMhMVRHM7C+hM7h5XgOal8cy+Xi/XLbcGdYI:haEiu3Nd5r72hcZ7HICKIHXgP8YEb3yI
MD5:	5B07CA30C87A02593C83C8872DD8DF42
SHA1:	27E6B236F3264BE10D02CBCA60C53C97171F5B5B
SHA-256:	1235A9B4D659D2E83BDE4F1FEC855F46C4647D57E17EED1EFD0C08498E5D1443
SHA-512:	5550035D9A974B92291B0F45A92DE69D8ABCA760F24961AFD816DC6FE96FD7026288E522720EFACD338B5071AF4F84E42E2205DA624C263AB6B4F05A869C8AC3
Malicious:	false
Reputation:	low
URL:	https://api.intentiq.com/profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1725984650877
Preview:	<!DOCTYPE html><html><body><script>const script=document.createElement('script');script.src='https://agent.intentiq.com/Agent/Hints/IIQUniversalID-sync.js';script.async=true;script.defer=true;script.onload=function(){const intentIq_182772995=new IntentIqSyncObject({partner:182772995});};document.head.appendChild(script);</script></body></html>

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63965), with no line terminators
Category:	downloaded
Size (bytes):	63965
Entropy (8bit):	5.415839533934785
Encrypted:	false
SSDEEP:	768:Sa+O7y8yVCWTXTnkbnErQJe+ISMnfI2gpyrJZa6Dx76H1W7XAW2vr3:Sa+ZCkDiEcJe+ISMnxJjDy1EXAj3
MD5:	2AFD7A7856345176E1C9C378191AE043
SHA1:	5E2C23320DDC06A4B00BBD81DC58D9D6A897401D
SHA-256:	3029A59A3EB78E1675C02962B4C2EFA72C770B73C3336F95F14B4C73B7465397
SHA-512:	139CB12A253E234E52C8B0E3F3FD6932E04250D2B8818EDC525939546B06852E26B17C1269AD5967FA2B9DCB965976C79EA9090168B04A457E769E2CC9457158
Malicious:	false
Reputation:	low
URL:	https://tags.crwdcntrl.net/lt/c/3825/lt.min.js
Preview:	var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== 'undefined' && typeof console.log !== 'undefined' && typeof document.createElement !== 'undefined' ); }; if(!lotameIsCompatible()){ if(console && console.error){ console.error('Lotame: This browser does not meet the minimum requirements.'); } } else { function lt3825_aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function lt3825_a(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:lt3825_aa(a)}}var lt3825_ba="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},lt3825_b; if("function"==typeof Object.setPrototypeOf)lt3825_b=Object.setPrototypeOf;else{var lt3825_c;a:{var lt3825_ca={Vb:!0},lt3825_da={};try{lt38

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (432)
Category:	downloaded
Size (bytes):	909
Entropy (8bit):	5.436066727665556
Encrypted:	false
SSDEEP:	24:hY0c6tqCMPWvVNERLDtYn1gKLSB3T1UhkdhmM14j:R60uDtqL6T1Uhq0pj
MD5:	FEB2E4E1BBFDB0A7B6E8CAF8E8CE952D
SHA1:	3F977FF8CF9B274021878BB04EE0D0239165537F
SHA-256:	85E01BE001B6E3C6EA761B4EE6FFF2A46063577655F0142F8C437C2DEC4C985D
SHA-512:	F377217ADBC08824DF18FA6A3EC0240319A9D887B4BDE6F14F45D91A62CE90E53DCFD073EA5FA91FEAE89557D9B95B022CA663F976B1729F4971CED2260F8081
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/en_us/sport-now4?&subid=e867b4a6-d17c-4afb-a008-7068b00cf775&networkid=200749&publisher=1576&isNewTr=1&stream=&subsource=pecinta%20sholawat&sign=5BE114F181BE643EB22EAD33C755E020
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8">. <link rel="icon" href="/favicon.ico">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Vite App</title>. <script type="module" crossorigin src="/assets/hl-347bfac4.js"></script>. </head>. <body>. <div id="app" data-landing-id="8661" data-http-referrer="http://football-booster.freevisit1.com/"></div>. <div id="modal" class=""></div>. . <script defer src="https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015" integrity="sha512-ZpsOmlRQV6y907TI0dKBHq9Md29nnaEIPlkf84rnaERnq6zvWvPUqr2ft8M1aS28oN72PdrCzSjY4U6VaAw1EQ==" data-cf-beacon='{"rayId":"8c10b1adb9e018ee","version":"2024.8.0","r":1,"token":"bbe23e6b6f584cef9cdf148c73f5fbcb","serverTiming":{"name":{"cfExtPri":true,"cfL4":true}}}' crossorigin="anonymous"></script>.</body>.</html>.

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36347), with no line terminators
Category:	downloaded
Size (bytes):	36347
Entropy (8bit):	5.1753865960472005
Encrypted:	false
SSDEEP:	384:MT2DwkjJMd3OXdCzMJxdZgexRDYr4RkJwvCX6:iUWd8m4REX6
MD5:	5639CD263989C69B59B26A525F06C6FD
SHA1:	CB07DC5D73B99567DF238698A431DCD00E5756A0
SHA-256:	8C9AEB1D5762851B18066B46815587EEEFE137AF650007C666E7B20CD7658A1F
SHA-512:	8D85AA58BDF8D7920787D0B70EC99112AC09ABAE182BA556A35C478DA4464FF0DF2CCE3996F4188B7EB49A722ED0370B02A32AE2F1AE1CF632F2AD8317F5EFA5
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-9a2c2edf.css
Preview:	.container{width:100%;padding-right:15px;padding-left:15px;margin-right:auto;margin-left:auto}@media(min-width:576px){.container{max-width:540px}}@media(min-width:992px){.container{max-width:960px}}@media(min-width:1300px){.container{max-width:1260px}}@media(max-width:991.98px){.container{padding-left:20px;padding-right:20px}}.background-wrap{position:relative;background-size:100% auto;background-repeat:repeat;background-attachment:fixed}.background{background-size:100% auto;background-repeat:repeat;background-attachment:fixed}.background:before{opacity:1}.background:after{content:"";position:absolute;left:0;right:0;bottom:0;height:450px;background:linear-gradient(180deg,rgba(0,0,0,0) 0%,#000000 100%)}@media(max-width:991.98px){.background:after{display:none}}strong{font-weight:800}.header{padding:20px 0;min-height:0;margin-bottom:0;font-size:15px;line-height:25px;-webkit-box-flex:0 auto;-moz-box-flex:0 auto;-webkit-flex:0 auto;-ms-flex:0 auto;flex:0 auto}@media(max-width:991.98px){.he

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (517), with no line terminators
Category:	downloaded
Size (bytes):	517
Entropy (8bit):	5.26957627222705
Encrypted:	false
SSDEEP:	12:+dQQ/N8YQDO5Q8xXHUQVkyrFcU7xjLWzQOhaBv:+djWYb5J04tBc6xjizhaBv
MD5:	71FD6E76DAA3B9D253FCDC4F8596C677
SHA1:	D9C066CE1B3F9DE7CE27ED6D63E04264087D1AC8
SHA-256:	BD4A4E1C48BE317340D1E304B15C6A8D6639989FDBE27FDC4EEF88810F9028E4
SHA-512:	29FA33A11AAE327F39913B28555ED954266F51ACD818C3AF7B941A11F7DACF5024B7309D81F24DEA02F7E4458F4FE093593DB8213466D5A41C301D3965BC57BA
Malicious:	false
Reputation:	low
URL:	https://ps.eyeota.net/pixel?pid=51md42u&t=ajs&e_pc=3&e_mr=0
Preview:	(new Image()).src = "https:\/\/match.adsrvr.org\/track\/cmf\/generic?ttd_pid=eyeota&ttd_tpi=1&gdpr=0&gdpr_consent=";(new Image()).src = "https:\/\/dmp.adform.net\/serving\/cookie\/match\/?party=1009";(new Image()).src = "https:\/\/sync.srv.stackadapt.com\/sync?nid=eyeota";(new Image()).src = "https:\/\/eyeota-match.dotomi.com\/match\/bounce\/current?networkId=41703&version=1&nuid=281ViNVo4TBEdB7AuFHS__z-57AlQjzVXxbg5TDfJ4Uo&gdpr=0&gdpr_consent=";(new Image()).src = "https:\/\/trc.taboola.com\/sg\/eyeota\/1\/cm";

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2077)
Category:	downloaded
Size (bytes):	7880
Entropy (8bit):	5.151822556129842
Encrypted:	false
SSDEEP:	192:JO1qcmiE3CEIFdVrAymyDWAZPp0yCEFXTfcbyLaC5TFkY0yW/GaKdgH:UUIHVrAymDAZJFDfRLaOTO3ll7
MD5:	DCE12013D01AB3BDE9E43484BB7CA6C3
SHA1:	7D29CF5024C852FD946DEFBADECF9A6862A4B8BC
SHA-256:	9EDDC44846A4BEA4177A95C5E8995CBB07B887D76FDD649478992938F968A855
SHA-512:	451563BFA0968AA4A4B70BCEF5D87DA3E353BEE26CC4B7131CD77112BDD7EBB9D632803235E56DC6661B8C2332C7884918C74921C1D4E9A1481C26904F23F295
Malicious:	false
Reputation:	low
URL:	https://e.dtscout.com/e/?v=1a&pid=5200&site=1&l=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&j=
Preview:	(function() {. var dc = {};. var gu = "10401725984635D685D944936F64E5C9";. var su = "1040172598468144B44AC4D585F50FBE";. var gm = false;. var cn = "__dtsu";. var lg = {cv:"US",cs:"C",rv:"NY",rs:"C"};.. String.prototype.dts_hash_code=function(){var hash=0;if(this.length==0)return hash;for(i=0;i<this.length;i++){char=this.charCodeAt(i);hash=((hash<<5)-hash)+char;hash=hash&hash} return hash;};.. function _dtsi() {. a = document.createElement("a"), a.href = window.location.href, _dts.host = a.hostname, "undefined" != typeof document.referrer && document.referrer.length > 0 ? (_dts.r = document.referrer, _dts.p = _dts_gp(_dts.r), "q" in _dts.p ? _dts.q = _dts.p.q : "query" in _dts.p ? _dts.q = _dts.p.query : "p" in _dts.p ? _dts.q = _dts.p.p : "text" in _dts.p ? _dts.q = _dts.p.text : "wd" in _dts.p ? _dts.q = _dts.p.wd : _dts.q = 0) : (_dts.r = 0, _dts.q = 0). }. var _dts = {};. _dtsi();.. function __dtsinit() {. var c = document.cookie.spl

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1280x720, components 3
Category:	downloaded
Size (bytes):	121151
Entropy (8bit):	7.96321334734524
Encrypted:	false
SSDEEP:	3072:7Z4tbyzsnhT2mV45pojgwVhdN0e+uhxJXQ1Nky2:KtbRp2mV45QhD0Oab32
MD5:	DC530487A5BAA6FFEFECFD4883F67576
SHA1:	34B4A90530E4214909B07AADA49F0D7B16285D21
SHA-256:	2BC255E209104D49886BA5AEE4CA0705DC4903A484A7EA725E5A0CE93A434B9F
SHA-512:	BD25BEE822F747315D3704D6A7663A1124F9F56121AF1ABF8B01F9A847CCCBF81483555019CAAF79E10CDE179E29BBF6D52C94E9FCF5DAC8EDAB02DBEA7CC658
Malicious:	false
Reputation:	low
URL:	https://i.imgur.com/NIXl8QH.jpg
Preview:	......Adobe.d........C....................................................................C......................................................................................................................V.........................!..1A.Q."2aq..U......#B...356RVbrst..$47.%CES.&cDFTd..'....................................0........................!1.A.Q."2a.BR..#q.b3..............?..[.PE...........................................jC.U...=....6.5<..W......4t...3.o..=.....P.....U.y..L......C>H2.j....J.L..{.....\|..hn.@.a...G.F......0..;Ex..[..T....%.>ey.:v.M...ON.....4td..3.*....0..b..v...E98....^.....c.K.w.W...n..T..vv.V,r.K.n.....v.......H7.o...c.>.\3..y~..fm..:R..#......i.. .rI[.R;..piq.,.W....\|.^betW:gKOR.L0......`..Au.u0...d.c...-......W=.{G.<..(.........................".c.{$......Md....R.Q....j...Y3.j.....T.Q.8J.....jx..d.?.>X.U....~....].{........6...VC....fG.....UR..$q..Tvc................M...%_:^X..VV/yq.Q.........V......q.vUEV..."......UkQIE...........

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=6466/tp=ADFM/tpid=4076780037107709958/gdpr=/gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	dropped
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 778 x 74, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4340
Entropy (8bit):	7.799046607812443
Encrypted:	false
SSDEEP:	96:GiQXXGuas4AVFGLRzI+m2Xs4DIeBnX606P2UtRhK+i:GiVyGLVU284ceB0Pdrfi
MD5:	346055B003AFE7EF3E394DAE9BD3DAC6
SHA1:	8EC69CAC74F754260D9E6C06238DF86B69D07792
SHA-256:	B3044EF2E52443BEB9CB09849FE8E2FC4646337F0CAFB63D8D7412D580D1A75E
SHA-512:	CE57CF9C3E6FB10C196EF9E8A4C377762B68880BC6A1EDB6851D3664C2D0E1F0DB09F5F7BCB6594B427853205C5DD192FA2AB0360FEDE29552F6CE0FDDCBA735
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......J.....,VS.....PLTE.....................................................................................................................,,,..........................................wwwQQQ......\|\|\|..................ccc...000YYYAAA...III.B.....HtRNS...w.O.....KmTx.i-.H. fZ...42._...C..8..)\|=.......&..Q..$.....Xd...P...........IDATx....n.@....6f......1...up...U.J}.g.8M....!..\|..1....h`Y.euA..NW...e..~.eN..@(.Ads....n!9.pM.. "Y....d. 9...ez..:..P....{...vX.((.z1...c.x.B.(.cs38...._../.."......+.>.....lI... .Y.........,/E..J.e{.v].CC.%..\|r..?._6E.@Le...4Jk.~.....%.+......@.T.....Tr.....\@.QOI.....BB...p`Z<`.)Z..I.....+c..............\|.!...X.'.S..C]...L.^.%..On3..~.;...0....).:GM...Jq.W..F...d....!....~j..\VS.=S...N.bK.5....V.....(......k...F~v;...;iLR.Q.P.,.\|.n`..m.....]N....v;..P.........%J.'qr0..0Q...?&.R.M.(v.N..U.O....kh.O....s......`S.)..I.2.....g7..I...).......t..P..l...S..l....&%.8..._.../+.R...E....z...I.........

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (14122)
Category:	downloaded
Size (bytes):	14931
Entropy (8bit):	5.47657478266478
Encrypted:	false
SSDEEP:	96:2E/yk2iIlb5lphMzwronSc86Lgh3hvLNYrWp6aOPMVD5w96Do66MVDVw96DZ6JMZ:2E12iMpgnLLgh3VLWr1aOGkatbF/wy
MD5:	209056E42B13DAFF5F754C7DEB5668E7
SHA1:	9B1C931804771BF74FF07F4D97A46482DC172E3B
SHA-256:	E9B37C27E165B73518E966A29E69CA57F24B6B6B2F023475A3F1DF1BEBA02A6B
SHA-512:	DF7285005EAFAB7CB935542A06FDA98DB1D66071522A6F2E8E7C66CA5207D210E646C36923E816F01395A487523AADB975F998140172FA4E01450C0F6AA7E9E3
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/afs/ads?adtest=off&psid=7840396037&pcsa=false&channel=bucket007%2Cbucket064&client=dp-teaminternet09_3ph&r=m&hl=en&rpbu=http%3A%2F%2Fww38.watchdogsecurity.online%2F%3Fts%3DfENsZWFuUGVwcGVybWludEJsYWNrfHw1Y2U4NHxidWNrZXQwNjR8fHx8fHw2NmUwNmZiNzk1ZjIzfHx8MTcyNTk4NDY5NS42NDh8ZGMxYzZiOWMxNjEyOTNlNTI2ZmQyNGRmNGE3NjNjMGNhZWJlOTcxN3x8fHx8MXx8MHwwfHx8fDF8fHx8fDB8MHx8fHx8fHx8fHwwfDB8fDB8fHwwfDB8VzEwPXx8MXxXMTA9fDdiMmYxZDVlZWI1Yzg5M2FiMmM2YThhM2ZhYjBjNjg3MzAzZTBiODN8MHxkcC10ZWFtaW50ZXJuZXQwOV8zcGh8MHwwfDc4NDAzOTYwMzd8fA%253D%253D&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2558334540730768&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300002%2C17301437%2C17301439%2C17301442%2C17301511%2C17301516%2C17301266&format=r3%7Cs&nocache=1331725984696941&num=0&output=afd_ads&domain_name=ww38.watchdogsecurity.online&v=3&bsl=8&pac=2&u_his=1&u_tz=-240&dt=1725984696945&u_w=1280&u_h=1024&biw=1280&bih=907&psw=1280&psh=791&frm=0&uio=--&cont=tc&drt=0&jsid=caf&nfp=1&jsv=670534788&rurl=http%3A%2F%2Fww38.watchdogsecurity.online%2F
Preview:	<!doctype html><html lang="en"> <head> <style id="ssr-boilerplate">body{-webkit-text-size-adjust:100%; font-family:arial,sans-serif; margin:0;}.div{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;max-width:100%;}.span:last-child, .div:last-child{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.a{text-decoration:none; text-transform:none; color:inherit; display:inline-block;}.span{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;display:inline-block; overflow:hidden; text-transform:none;}.img{border:none; max-width:100%; max-height:100%;}.i_{display:-ms-flexbox; display:-webkit-box; display:-webkit-flex; display:flex;-ms-flex-align:start; -webkit-box-align:start; -webkit-align-items:flex-start; align-items:flex-start;box-sizing:border-box; overflow:hidden;}.v_{-webkit-box-flex:1 0; -webkit-flex-shrink:1; flex-shrink:1;}.j_>span:last-child, .j_>div:last-child, .w_, .w_:last-child{-webkit-box-flex:0 0; -webkit-flex-shrink:0; flex-shrink:0;}.l_{-ms-overflow

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (305)
Category:	dropped
Size (bytes):	1285
Entropy (8bit):	5.090620723188345
Encrypted:	false
SSDEEP:	24:4U8Sc+4sjipPmkiuHZpA9BpKM/jne8/NsNwNGovuH17FxuHuvsXJJr:R8SJupPcjZVEwGoqiXJB
MD5:	4990FA37BBF3A038844EF4F039A9AD00
SHA1:	253124C5C27E0F8C350628C5BF68083CE368528A
SHA-256:	668D5C065A7F9F12C2E4BD790569D4A4F04659E31853AF1489226DAB49BE17E8
SHA-512:	70553886B6C0C382F4BEF45650D1776E11CB851BBFF64DC3390FB302A94396F196C83D7EAD46AFEF48548AA594E7457BA953AA4D28E062A959A1A3B93309C62B
Malicious:	false
Reputation:	low
Preview:	import{u as i,a as d}from"./hl-347bfac4.js";import"./hl-35a77ba0.js";import"./hl-de833af9.js";const g={__name:"GtmTrack",setup(o){const a=i();if(d().isOwnCookieConsentAvailable\|\|d().isIubendaCookieConsentAvailable){const t=document.createElement("script");t.type="text/javascript",t.async=!0,t.innerHTML=`. window.dataLayer = window.dataLayer \|\| [];. function gtag(){dataLayer.push(arguments);}.. // Set default consent to 'denied' as a placeholder. // Determine actual values based on your own requirements. if (!document.cookie.match(/_ga=GA/)) {. gtag('consent', 'default', {. 'ad_storage': 'denied',. 'ad_user_data': 'denied',. 'ad_personalization': 'denied',. 'analytics_storage': 'denied'. });. }.`,document.head.appendChild(t)}const n=document.createElement("script");n.src=`https://www.googletagmanager.com/gtag/js?id=${a.landing.gtmTrackId}`,document.head.appendChild(n);const e=document.createElement("script");ret

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1146
Entropy (8bit):	5.163420119917784
Encrypted:	false
SSDEEP:	24:2d6OVsiLwRLwEnpeaxM2zu0RgJFiWffijkTBlL2G1T:c6QFwRLwKnJfjkTB92G1T
MD5:	3A041AB34846A03A722253732BE6B6D0
SHA1:	4E22A45FDB2A6CEBDD87C7F19343B7F0A63C1B2E
SHA-256:	16C5D058AFA19D470C9ACA69872D9906607F6EFDD8B1251C79BA7107C3381CC8
SHA-512:	4FE8AD447447D16B57589E5640F38466FAC4078FC41469205E2CC8E23DC2C8903B8BD3815BCE6193001480461160596306AE3ED67F93607ABBCC8D0BC7D80091
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-16c5d058.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="203px" height="98px" viewBox="0 0 203 98" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 52.6 (67491) - http://www.bohemiancoding.com/sketch -->. <title>tag-bg</title>. <desc>Created with Sketch.</desc>. <g id="..-Pages" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Sport-lp-dymanic-text-(desktop)" transform="translate(-1227.000000, -251.000000)" fill="#EFE06F">. <g id="Intro" transform="translate(450.000000, 211.000000)">. <g id="price-tag" transform="translate(776.000000, 35.000000)">. <path d="M42.3728019,5 L199,5 C201.761424,5 204,7.23857625 204,10 L204,98 C204,100.761424 201.761424,103 199,103 L42.3728019,103 C40.8711884,103 39.4490809,102.325124 38.4994959,101.161882 L2.58112853,57.1618824 C1.07886986,55.3216156 1.07886986,52.6783844 2.58112853,50.8381176 L38.4994959,6.8

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	268764
Entropy (8bit):	5.5751552595548635
Encrypted:	false
SSDEEP:	6144:XzF0v4165pwBt83QYkvBfBxafPOXLK+N5gnDW:Deve65iBt8RCgnq
MD5:	BD427680A69D169192151AC178E819E3
SHA1:	9E79C3C940D7943CE3E39241B02EFF690CC034D8
SHA-256:	73484C0DDEDCE5792B6063C53E4F3C884259C804BF3767700DD88511290B90F4
SHA-512:	72768DB32B1C906FABC36D74D14CDF19DF225BFB60FF7BF4BD552F876F4CAD81D2C44C1056CECC2F2EB2F9D27FE6E758260D8851E1A4EBE8148F95C067350E2F
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-JGGRR9PHG6&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":7,"vtp_value":true,"tag_id":17},{"function":"__ogt_referral_exclusion","priority":7,"vtp_includeConditions":["list","sports\\-stream\\.live"],"tag_id":19},{"function":"__ogt_session_timeout","priority":7,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":20},{"function":"__ogt_dma","priority":7,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":21},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEm

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	377
Entropy (8bit):	5.221939068801587
Encrypted:	false
SSDEEP:	6:51bQdhb13LkVVXI8mgO9lVhnmUqZzwGdDVTYqL1+LD+mMkuc1zlCBbAm+RbDRWP/:51bO513QvuHnmVZkGdDJH10D+xc15CZj
MD5:	A591F1753586053E662B09E65F7F486C
SHA1:	8076F19D8B57036AFED609FBAA10C4AD1A1D2C55
SHA-256:	228B0DE25E3387C3CE7C37A38E2BE677D1D040B405951ACC0412AE48E44156CC
SHA-512:	355BDAB99AE62215C3BBDD1F49EC83AE67DAD7BFC59755B0AE83A546FD3B898695E6F4AE9697045D4C25EAFA745C978C31CA7E5C87CCB77BC8FB1357F2498679
Malicious:	false
Reputation:	low
Preview:	_HST_cntval="#3Vis. today=9";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);.b.async="async";b.type="text/javascript";var a=document.getElementsByTagName("script")[0];a.parentNode.insertBefore(b,a);}catch(e){}}();

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.2806390622295662
Encrypted:	false
SSDEEP:	3:2LGffo:2LGXo
MD5:	1B9BFBE209FD6BDB0DAE667C8956FA63
SHA1:	309E9A6B919D5CD697834855382244FC06E21A55
SHA-256:	2C6F0C2E544B26A69E4BCE070D3EAB8647CAF5C92770E2596C14CD28E1AA3F05
SHA-512:	4A4A78CCFF839AE4916AF4715D315947BED1798C8C9A1A558305050D0A68FA507EF7E760379394F5207445F5C672D28EE5F32183934142AB47B0267394F0199C
Malicious:	false
Reputation:	low
URL:	https://aqfer.lijit.com/samples/empty.js
Preview:	(function(){})()

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (591)
Category:	downloaded
Size (bytes):	592
Entropy (8bit):	5.223172250309003
Encrypted:	false
SSDEEP:	12:4aLBqW/Ie7AdUC8h/Doo/ThaQtpFkwCZg/7V+xXSG0Inut7Po7:4acirAdUC2/Uo/Bfk5eTVISjWutzo7
MD5:	BF18538CBB14D8A98A24C658CC68609B
SHA1:	F96AA8875D6D817A67B68C53AAEBF2C8C4125486
SHA-256:	A4D03C497D8EEB23F48594A9C8F1DDC3111891FC9C3A98E48E239CCCD4EED621
SHA-512:	F7EF04D9B1654B9BE44866B91182EA65E49115D68CD095CCACE43D7F7C73F574A93DACC5BC79346902DDB0926B35A0F1DCF4BD79AC84321632BABF1E3CB9AAE2
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-947b317e.js
Preview:	import{u as r}from"./hl-fc33c920.js";import{u as i,b as l,c as u,Q as b,g as t,B as c,E as m}from"./hl-347bfac4.js";const y={__name:"Button",props:{params:Object,texts:Object},setup(s){const o=i(),{submit:e}=r();return(p,n)=>(l(),u("button",{id:"button",onClick:n[0]\|\|(n[0]=(...a)=>t(e)&&t(e)(...a)),class:c(t(o).landing.isFitFlow?"w-full block rounded-full font-bold tracking-wide bg-primary-400 text-white hover:bg-primary-500 transition-colors py-3":"button submit pay-button"),type:"button",style:m(t(o).settingStore.getBtnStyle())},b(s.texts["button.label"]),7))}};export{y as default};.

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (2881)
Category:	downloaded
Size (bytes):	2882
Entropy (8bit):	5.294203855162291
Encrypted:	false
SSDEEP:	48:ydZ6cDYSwJ1LxQZ6/416JVkDqflngkqA9bZDU/nmDu:yLBDYSwnxO16/pliKVSV
MD5:	FC6D61E6AD8C4FE4385B22D79B768905
SHA1:	8B6FE8BDCC9942C482BF1F814728B22F79043BB4
SHA-256:	096C995E5633478A076B0FF3372E0D8A57F1843FECCFE6904E72ABFC41A76B6C
SHA-512:	7E9898BACE28700BA2C2BDAC3A1E21EF48430B5B73ED4C267A9E8CC94F0FAFCE19A665EFA193029B4AB9EE69405EB04CD01E50D8E1D38D53E6A62D01D93A4E5F
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-574d21d7.js
Preview:	import{U as g,u as p,o as v,b as u,c,n as m,Q as h,C as w,W as y,g as l,B as f,h as S}from"./hl-347bfac4.js";class b{constructor(t,i){if(this.dom={el:t},typeof t=="string"?this.dom.el=document.querySelector(t):t.jquery&&(this.dom.el=t[0]),this.dom.el===null)throw new Error("EmailAutocomplete: No input defined");this.originalSettings={id:`emailGenie-${this.uuidv4}`,domains:[]},i&&i.domains&&(i.domains=[...this.originalSettings.domains,...i.domains]),this.settings={...this.originalSettings,...i},this.init()}init(){this.createDataList(),this.bindEvents()}createDataList(){this.dom.el.setAttribute("list",this.settings.id);const t=`<datalist id="${this.settings.id}"></datalist>`;this.dom.el.insertAdjacentHTML("afterend",t),this.dom.list=document.querySelector(`#${this.settings.id}`)}bindEvents(){this.dom.el.addEventListener("keyup",t=>this.handleKeyup(t))}handleKeyup(t){if(this.dom.el.value.length){this.dom.el.value.includes("@")?this.user=this.dom.el.value.substring(0,this.dom.el.value.last

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2537)
Category:	dropped
Size (bytes):	213211
Entropy (8bit):	5.568848715708852
Encrypted:	false
SSDEEP:	3072:feB4w3MbZE3+AiLuRdU+C2VhqFJO9fuUuxp8yTma0DGfHNHhk34:FzAczFJEPBDs44
MD5:	949EE03CD6C688DF80BF2E0254D6A8A1
SHA1:	5BE59D9DD64A9C6BE48A2EC8B75AB15B6E5D3A0C
SHA-256:	530F4B2648F5D7E57829A619F23EAF0ED50A3E91C8B804515892976EBC45025D
SHA-512:	A90329F638C69EE6CAE0C8F4C6E29416BC9B209C1A866AC950E7657BFE399C39292E8FA4B5659EEF6F2F5BE8B2C96E5C618BC0BE481CD22E052127EEBEA904EF
Malicious:	false
Reputation:	low
Preview:	"use strict";this.default_tr=this.default_tr\|\|{};(function(_){var window=this;.try{.var Lh,Mh,Nh,Vh,ai,bi,hi,ii,ji,ki,oi,ni,Rh;Lh=function(a){return _.Xa?_.Ya?_.Ya.brands.some(function(b){return(b=b.brand)&&b.indexOf(a)!=-1}):!1:!1};Mh=function(){return _.v("Firefox")\|\|_.v("FxiOS")};Nh=function(){return _.Za()?Lh("Chromium"):(_.v("Chrome")\|\|_.v("CriOS"))&&!(_.Za()?0:_.v("Edge"))\|\|_.v("Silk")};._.Oh=function(){return _.v("Safari")&&!(Nh()\|\|(_.Za()?0:_.v("Coast"))\|\|_.$a()\|\|(_.Za()?0:_.v("Edge"))\|\|(_.Za()?Lh("Microsoft Edge"):_.v("Edg/"))\|\|(_.Za()?Lh("Opera"):_.v("OPR"))\|\|Mh()\|\|_.v("Silk")\|\|_.v("Android"))};_.Ph=function(){return _.v("Android")&&!(Nh()\|\|Mh()\|\|_.$a()\|\|_.v("Silk"))};_.Qh=function(a){if(a instanceof _.Xb)return a.g;throw Error("t");};_.Sh=function(a){if(Rh.test(a))return a};_.Th=function(a){return a instanceof _.Xb?_.Qh(a):_.Sh(a)};_.Uh=function(a){return Array.prototype.slice.call(a)};.Vh=function(a){return typeof Symbol==="function"&&typeof Symbol()==="symbol"?Symbol():a};

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 603
Category:	downloaded
Size (bytes):	312
Entropy (8bit):	7.277044766786616
Encrypted:	false
SSDEEP:	6:XtRFMtMByB85RG1Mck10imv6rWJDWo1BBGCF9T3+cL2YUXTnXKUAGtuvxnj:XbGtkSv1M2imSKYIfGCz0DXKEytj
MD5:	C4D7F245BA3C905684D0DD9B7D19FE47
SHA1:	735A48E30775D6F40F11F39B0AA6144B89919EF3
SHA-256:	4E053B69F0829C63932183075C713FECF1F6E441D45F374DDC1BFFD93DB9DC83
SHA-512:	3E839F31087F29996329E190C2676E8C46A494010511E5F07EF3FB7F55A28D7ACFB2F539A02AA0F1ED4D920362645BBFF009EFE464403FD23B7AE8222BFEA983
Malicious:	false
Reputation:	low
URL:	http://football-booster.freevisit1.com/contact.php
Preview:	............?O.1............%..1.R.t.%)..?U......@.b`.........i..lW.'gy.@....Bt.B...!.....j.. h/.t..].d."RW...$.W...L0..F)...p..Ex.6k.)......G.C?.s.../V..... $....`...#P;a._..o..)....+...[..1.'...2.4.x..b.+....e...^a7..}...{.D.W.T H+Rb8...\|..NdK..Z.2..>.=[....B......C9h..O.............../....[...

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	120
Entropy (8bit):	4.580924306000003
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM+wMLts7CX9/gm6Kpgsyx9yGFF7vWGlp:6v/lhPfZM+wMR/C+Ody27Omp
MD5:	0E3A6096212EFDFFD9BE6C2DBEA24B1E
SHA1:	2771486BD2EF00F2DF8CF863758CF2C2879CEBB4
SHA-256:	42B601BC0D93DFCA6E350B46D113BF8E7FF9E40A87A0C57AB9B3C9C219062423
SHA-512:	D20B09E40CFE7A516141E85F33AEA53A31B1B03648171874CC660E90841583C06B41FAE334EC0F3157F14752DC3F4EA7E1B5920CB17C5A37499FAAC7F54A2ABC
Malicious:	false
Reputation:	low
URL:	https://ib.mookie1.com/image.sbxx?go=262106&pid=420&xid=3bdb359c63037044d87658cfcb77131
Preview:	.PNG........IHDR....................sRGB.........gAMA......a.....pHYs..........o.d....IDAT.Wc````.......3......IEND.B`.

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (365), with no line terminators
Category:	dropped
Size (bytes):	365
Entropy (8bit):	5.152617122183088
Encrypted:	false
SSDEEP:	6:7DVEzoQl/7bQrBDyQOnMoQptPwoQooQU8SzoQ9e3QvH3xMoQr77GQCKeyhH0eE1+:vViz6YnMpPRMGCXxQnUFyhH0eEXRer
MD5:	34CEAA426566BC165C383847DF4AF7E1
SHA1:	7AD1205613AA4D7619CEE21CB30E4D678F7D8A49
SHA-256:	ADFB67EF4A2E6AECC2DA5657DCA34600C1A14D6F45DB9C7798BBD839EED17253
SHA-512:	E1CD4ACD6E2942F0750294CF4CFBE6ABB7233EFF7241E290E58557EE473FF9681720E0AB3E29BAEE6E29CDD18BA783AF796FCDF8D9E3F4E10012F2BFE266F147
Malicious:	false
Reputation:	low
Preview:	import{_ as t}from"./hl-f2333577.js";import{b as o,e as r}from"./hl-347bfac4.js";import"./hl-2dfa470a.js";import"./hl-543ebdf2.js";import"./hl-054a7ece.js";import"./hl-ea83f4be.js";import"./hl-35a77ba0.js";import"./hl-de833af9.js";import"./hl-6c50209e.js";import"./hl-5cd68a50.js";const h={__name:"MatchSkin",setup(_){return(e,p)=>(o(),r(t))}};export{h as default};

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
URL:	https://ic.tynt.com/b/p?id=wu!&lm=0&ts=1725984636046&dn=AFWU&iso=0&pu=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&t=High%20School%20Football%20Live%20-%20Greendale%20vs%20Milwaukee%20Lutheran
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 26521
Category:	dropped
Size (bytes):	10009
Entropy (8bit):	7.97147130080863
Encrypted:	false
SSDEEP:	192:8RruTpN/AGimTQsBR2VVb9jDUwR769+7jtmHuY+K5R0gXB:8Rrytdim8sBR2D11NkOL+RLx
MD5:	CA8329380F5C715D25CDB3706F420709
SHA1:	FF0A48066F6875E287B21234979F2F2CBA59D17E
SHA-256:	C54E3085C1AB549CEEE23F88B0B3CDA051C96C299A167BB5FFD723D4D5767B77
SHA-512:	0A431797CF237B46D299062D970B0986C31C0B8A41F387685066643F0637176846425825AE6F48E0B113835CF2D754E228323FCE70199BE036ED84C9D2AFC3F4
Malicious:	false
Reputation:	low
Preview:	...........{{..8...U.U.".e....s.d.$..]E.2N..HF.ib...< .s..g.<.<....Gc.f.a.......2........C..t6..c6..z.UP.g......'.N!..m...^....z..c..xV.C..8..s.b.B.U.W>...S.}6........{.....s,>.{v.V.dU.0..\|.........W............W:]......"^...W\.....W....o..8.\|.~...{.....u..Q.Uu..9.Uu.T..Yx...D.....5.H...G..,.$8.....c}.>M.....2]..y1....z%..L.YU2..U.P=QJ..M%..A}#.....=.;..........5.z.Z.E.O..{....&.......^}.@R.k..0...q8..{k.A{...lu... 9.... ...0.q.-......o......f..9..u?...+......^....,....?n.......f...>Nq4....-U{u......*._.(.).l...G6.=9.?..?~......G......._....<..\|\r...{..v.P=..G. ].7J.fOt=.'S.z..)..p^..j...+.. .j..T.4>..z...m%....n+.......H^.> ...I.<...b....Y....W...i...m..3(..]e..=...C...Zw.+...O..{.z0..W.\|.......\.V...A...U.Z...y'&U._..1`j..Qv(G.....y.......$<x.........Z..Y......6{.+~}.......K.>..L...../....O...U.>$.S+.....r.8..`\....\^^^...tX...sP.sTyx...L.......P&......t..N.?U.?y..=....ln..t\|...bo........H+a.;q.`..z..H%..<\|U.....`.h..

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2077)
Category:	downloaded
Size (bytes):	7880
Entropy (8bit):	5.152130153232889
Encrypted:	false
SSDEEP:	192:JX1qcmiE3CEIFdVrAymyDWAZPp0yCEFXTfcbyLaC5TFkY0yW/GaKdgH:LUIHVrAymDAZJFDfRLaOTO3ll7
MD5:	B4839ABBA2A9FD63FD23C4506F11B5AB
SHA1:	80F0E4ACBAF0F19F8A7B18356DEF71BFDF6AC5D7
SHA-256:	B93C6158DC504B2ED2C4F004199DB00A1522A8DFFBF3B95609A0B8F4814DFE03
SHA-512:	28492A293BFA1032E6788010C6D4232A100E10F3DFFD6AE9162C8E1B213A860EED8AEE0B379E8A48BF6584AE1ACD9C20E239FAC983AD291D5C706EFDC3361B46
Malicious:	false
Reputation:	low
URL:	https://e.dtscout.com/e/?v=1a&pid=5200&site=1&l=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fregister-hsfootball.php&j=
Preview:	(function() {. var dc = {};. var gu = "10401725984635D685D944936F64E5C9";. var su = "104017259846768396E5CE940B7CAEF6";. var gm = false;. var cn = "__dtsu";. var lg = {cv:"US",cs:"C",rv:"NY",rs:"C"};.. String.prototype.dts_hash_code=function(){var hash=0;if(this.length==0)return hash;for(i=0;i<this.length;i++){char=this.charCodeAt(i);hash=((hash<<5)-hash)+char;hash=hash&hash} return hash;};.. function _dtsi() {. a = document.createElement("a"), a.href = window.location.href, _dts.host = a.hostname, "undefined" != typeof document.referrer && document.referrer.length > 0 ? (_dts.r = document.referrer, _dts.p = _dts_gp(_dts.r), "q" in _dts.p ? _dts.q = _dts.p.q : "query" in _dts.p ? _dts.q = _dts.p.query : "p" in _dts.p ? _dts.q = _dts.p.p : "text" in _dts.p ? _dts.q = _dts.p.text : "wd" in _dts.p ? _dts.q = _dts.p.wd : _dts.q = 0) : (_dts.r = 0, _dts.q = 0). }. var _dts = {};. _dtsi();.. function __dtsinit() {. var c = document.cookie.spl

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5151), with no line terminators
Category:	dropped
Size (bytes):	5151
Entropy (8bit):	5.188719500310377
Encrypted:	false
SSDEEP:	96:mHnlRIIY1Zsl2Dxb4MzJoHOYVMb1DJUb2DJ6bhbcbMBGKGDdDJoYVV+iC5:mHlRIIYslqxb4MzJoH1MbFJUbqJ6bhbd
MD5:	FAF6CA8E33227AAB3DA5BEC44ED35649
SHA1:	0EF57BE5CA6FDF24E7F68F51B0CB06D86445443F
SHA-256:	00B5AE98DBED3360E7C5D68F76F6C492925A71FB8456F56A7CAC53246FAA38AC
SHA-512:	7C0B84EA010FF0488664F2AABCC24C4F8A9623CDC39D4F6E5A2A63A0B24DABAEEB38D71665B5A593F33F2CB4505E3F2539355CE46C6EFF65B2436893ECF5DE08
Malicious:	false
Reputation:	low
Preview:	import{u as s,d as n,_ as t,r as I,w as d,a as p,o as v,b as u,c as y,e as a,f as E,g as c,h as g,F as S,i as P}from"./hl-347bfac4.js";import{i as x}from"./hl-1d626e0c.js";const R={__name:"SignInPage",setup(A){const o=s(),r=()=>n(()=>P(Object.assign({"./layouts/layout11/SignInIndex.vue":()=>t(()=>import("./hl-ad019383.js"),["/assets/hl-ad019383.js","/assets/hl-347bfac4.js","/assets/hl-d98910d4.css"],import.meta.url),"./layouts/layout15/SignInIndex.vue":()=>t(()=>import("./hl-bf9d7a67.js"),["/assets/hl-bf9d7a67.js","/assets/hl-054a7ece.js","/assets/hl-347bfac4.js","/assets/hl-fa6da16c.js","/assets/hl-de833af9.js","/assets/hl-5f4e63ec.js","/assets/hl-ea83f4be.js","/assets/hl-35a77ba0.js","/assets/hl-b2170ae6.css","/assets/hl-6c50209e.js","/assets/hl-8117d12d.css"],import.meta.url),"./layouts/layout20/SignInIndex.vue":()=>t(()=>import("./hl-573b2ec2.js"),["/assets/hl-573b2ec2.js","/assets/hl-347bfac4.js","/assets/hl-d98910d4.css"],import.meta.url),"./layouts/layout23/SignInIndex.vue":()=>

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.477567157116929
Encrypted:	false
SSDEEP:	3:mSgGunS6winPepWnYn:mS6SWPyn
MD5:	4AB51530BC8FB09FD6800EA9BC8EC365
SHA1:	37BE4112E8B722215C99B9EF2703C8889FD5FC7D
SHA-256:	2B20CBC9C17A9D8EB0A107D80107001C8BA45520D5FDCEB5CFEF755BFED5E2A1
SHA-512:	36066BDF73DC88134DB919D80A06534C9C8B7A1D93E95F2BBC18D8193DCD82B6C56AEBCB7C2BED17DDF270AAD26C60424B86FD273E653BAC929232D03B604EA1
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgleC7jXG-v8uBIFDZRU-s8SBQ14bxIZEgUNxmiw_A==?alt=proto
Preview:	ChsKBw2UVPrPGgAKBw14bxIZGgAKBw3GaLD8GgA=

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 16904, version 1.0
Category:	downloaded
Size (bytes):	16904
Entropy (8bit):	7.988798899456811
Encrypted:	false
SSDEEP:	384:BRVQuN05kZJQhFzCGSz5GYRcdfbgtKUe+wi4L8Z1RGQr:BRVdjkQ9RGbke+wiaEXr
MD5:	AE3BDEA1A1337E878E00C40D5BE1E8A4
SHA1:	99AD803462294F0CFCE54995572D6CAF8D955028
SHA-256:	44FC4FED0B7984A791C7EF112D59885B3F891FAE11859F465AD236B9A5D28FB3
SHA-512:	F665DE4B4E1944E33BC6ECD9AF180AA24D192C241B5D14BE69CEE7BB9A2D06B64F7532473845D12DA19A19A932ECE9EC9994E6FF0AE51421A38EFBEEA11A94CE
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-44fc4fed.woff2
Preview:	wOF2......B...........A...........................>..... .`?STAT$..\.....D.......6.$..8. .... .......g....PtY.B+.......m.........3......L.Kx..".j.Y.UU...V.K.S.T...g.......\6....^U.g.../..k..e....C.b...6...N.-q..j.3k...+56N.a@..".p....}..D.).a..q...+.?Co-.b.3.m.O.K.<._...U}z..B.$..Hb.0.z...7.9...\B.D...B......DL..H)...Y...!kY.""k.....E_@.H....S...T."F....j......<....t.....`h#M.PE.ki.....%.......%.(....?..p.;95...."nP....s.....P...J/m[.ieWwyee.7;...%#P..........'.MZ.O..........;.$.kbm...'7...\|2B.. Bfp>r2..9?"..~.'.B.....{{7..JHQ.j2...o......&Y........u....o5..8\|..H%.~X.jo.....x.o.xcQ4.'...b.....XI........t..<<W...Q..h........5.....:7./..1.;.L....1H..dQ.n......v;y.....p.n..'.?.Yi...M.8mX`.v.x.S?.q4..d.6;....V..VKmhM.<nk.w\|{..$..J.....4..f.\|..-D.3.......Y.....{..N...]6....}(UE.....Hd.Zk.G.....H.v....H.K/{&...'..Ba.I4n.h4J....'..rs.`...-K.\|,.x0...h......~.i.s..~....[..a.$.sK...0.z....H."=....93%v.Bn...!.. """"i.........I...3.........~.....#...

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	3605
Entropy (8bit):	5.075622390478209
Encrypted:	false
SSDEEP:	24:meRNNE1uyjLGLfh1ADA6V89sOPSejl6kHN4ynxmIvx9riqYniKL/bbzmc:duxLkSs629saW/+9WqQZL/qc
MD5:	F16E89FD08A708A6BD2E69BE50FD30AB
SHA1:	530FEF7EFD42A36908F40C87114A28C1398E1367
SHA-256:	08B479C3EEB1CB4D44354E6BF17322CD7ACD38AE9A33EE5956898447ED43FAB6
SHA-512:	94722AF96B830015C2515BD537E8610A25B61AC7C66C990D41565CD87AB50667E8CBFAB347188E98BA7793EF5AB48F0B3115C40DE55F4791D2CD1B2321405295
Malicious:	false
Reputation:	low
URL:	https://tags.crwdcntrl.net/lt/c/3825/optimus_rules.json
Preview:	[{"id":16472,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"twitter\"]}}","event":"click","behaviorType":"act","template":"Click On Twitter Link"},{"id":16473,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"youtube\"]}}","event":"click","behaviorType":"act","template":"Click On YouTube Link"},{"id":16474,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"hulu\"]}}","event":"click","behaviorType":"act","template":"Click On Hulu Link"},{"id":16475,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"digg.com/submit\"]}}","event":"click","behaviorType":"act","template":"Share Content On Digg"},{"id":16476,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"del.icio.us\"]}}","event":"click","behaviorType":"act","template":"Share Content On Delicious"},{"id":16477,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"facebook\"]}}","event":"click","behaviorType":"act","template":"Click On Facebook Link"},{"id":16478,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[hre

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://bcp.crwdcntrl.net/5/c=3825/tp=DTSC/tpid=10401725984635D685D944936F64E5C9
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16600), with no line terminators
Category:	downloaded
Size (bytes):	16600
Entropy (8bit):	5.106011935059437
Encrypted:	false
SSDEEP:	384:wE3QyMp8WeOzzXlNo19PuSFoo4t3JML84v7K1LqVT4FbN0sI:wE3QyMp8Wf419PuSFoo4t3SL84zK1Lqd
MD5:	26A760EB1716CF6B311E16ED82D0EEB5
SHA1:	345DA68966B17C4A0415765B62C755107BA2E01B
SHA-256:	F3EE00626500892F28D8EF92B554D64F2EF43A54B9F2AA9F167262F28DB339C6
SHA-512:	2E49E019D026BB278E83377C5EC1C603FB1E36D971253BCADEB9C9EE5867110CC4E2ED9B3E59286DE659119C52191685764F9799584C85ECD07609B374AF2259
Malicious:	false
Reputation:	low
URL:	https://agent.intentiq.com/Agent/Hints/IIQUniversalID-sync.js
Preview:	(() => { var i = { d: (e, t) => { for (var r in t) i.o(t, r) && !i.o(e, r) && Object.defineProperty(e, r, { enumerable: !0, get: t[r] }) }, o: (e, t) => Object.prototype.hasOwnProperty.call(e, t) }, e = {}, t = (i.d(e, { default: () => u }), { JS: "js", PIXEL: "pixel" }); let s = { brands: 0, mobile: 1, platform: 2, architecture: 3, bitness: 4, model: 5, platformVersion: 6, wow64: 7, fullVersionList: 8 }; let a = { chrome: 2097152, safari: 8e4, opera: 2097152, edge: 2048, firefox: 65536, ie: 2048 }; class r { constructor(e = !0) { this.isSync = e } collect() { return new Promise((e, t) => { e(this.getDeviceInfo()) }) } getDeviceInfo() { return { screenWidth: window.screen.width, screenHeight: window.screen.height, devicePixelRatio: window.devicePixelRatio, language: navigator.language } } } class n { constructor(e) { this.allLevels = { FATAL: { value: 10, color: "magenta", secondaryColor: "magenta" }, INFO: { value: 20, color: "green", secondaryColor: "green" }, ERROR: { value: 30, col

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (2473)
Category:	downloaded
Size (bytes):	2474
Entropy (8bit):	5.085464399597875
Encrypted:	false
SSDEEP:	48:LE7AniIMBzE3BLVER/EGTF0AkTWKTFyAkTH7z5TFsSAkT6muTFcAkTWYXe7TFeC/:wAn/Ao1VER/ZmOuDzYXwe68WeVAv
MD5:	3851E4C0B7F1151FBF48625BD1FCD8FF
SHA1:	2EF70679BE4814FDF2630BDFC1B4A3B6521FFE25
SHA-256:	DE2602316534C5286A30094592D4E67B58F167F1A4FBF13EB9B1B8E4649DE916
SHA-512:	D342520E5C92F102D60FD3062F79837EA33E79E2733B44AC1C14F44674C28B800D9752FBF4B102AAD3BBC20E3E69ED4C25D010C79E2372A5A4458810CA44BEA8
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-f2333577.js
Preview:	import{j as f,b as i,c as n,n as e,p as a,H as u,g as t,F as x,K as v}from"./hl-347bfac4.js";import{_ as m}from"./hl-2dfa470a.js";import{_ as o}from"./hl-543ebdf2.js";import{_ as b}from"./hl-054a7ece.js";import{F as k}from"./hl-ea83f4be.js";import{_ as g}from"./hl-6c50209e.js";import{_ as r}from"./hl-5cd68a50.js";const p={class:"form-step form-step1"},h={class:"main-block-wrap"},$={class:"content"},C={class:"container"},w={class:"main-block"},B={class:"left"},F={class:"form-wrap"},I={class:"underform-image"},M={class:"right"},N={class:"unlimited-inform"},T={class:"unlimited-inform-top"},V={class:"unlimited-inform-label"},j={class:"num"},y={class:"unlimited-list"},J={__name:"MatchCommon",setup(D){const{getCurrentImage:d,getCurrentText:s,getDefaultText:l}=f(),_=[{text:"text.block.5"},{text:"text.block.6"},{text:"text.block.7"},{text:"text.block.3"},{text:"text.block.4"}];return(E,H)=>(i(),n("div",p,[e("div",h,[a(r,{classes:"background-wrap","image-data":t(d)("background"),"disable-contex

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	391
Entropy (8bit):	4.7474201749507134
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6qFPUPkHSt1UiT6i6jUs8b0I0C
MD5:	8959DDCD9712196961D93F58064ED655
SHA1:	62AB1E38E7E9FBF58A04381B76C2D96A9C829F24
SHA-256:	17C7A89BF169C2EE400E31B042CEA68513F06B9CD7D1E8990DBEC800F0D771C7
SHA-512:	5E9EFFA313C30B351345DB963238B4AFD0728CA302FD79A853C80C89F042266D44CC1D29492520FB0FA80B47135E54E6963DFC21972F6B236B84C1DA2FAD809D
Malicious:	false
Reputation:	low
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	60
Entropy (8bit):	4.663070754223673
Encrypted:	false
SSDEEP:	3:Px6WT3XWZNTscRG/gCXArTNkYYn:/X2scRQAtk1n
MD5:	FC4E62298B1375916043841E7F15C09E
SHA1:	03A61537022D7CB35CBA958006C54976AF7B1A5A
SHA-256:	E0319CE328471BF25501B0774E26AE5868B24E5CC1A0129683BC3991E20A12A6
SHA-512:	DA8D48D093C114157A34BBCCC39B465C2DC0B5A85FD4EB8B35B3CD1CA5220628624C894FACA5069BCE7BCFC7250374FC35CFFADBCB9F9818F756426B5A0EAF20
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHglTLqPYv3JEyBIFDYOoWz0SBQ3K1wgSEgUN541ADg==?alt=proto
Preview:	CikKEQ2DqFs9GgQICRgBGgQIVhgCCgsNytcIEhoECEsYAgoHDeeNQA4aAA==

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (779), with no line terminators
Category:	dropped
Size (bytes):	779
Entropy (8bit):	5.12316212729484
Encrypted:	false
SSDEEP:	24:YqmC9UEaDxEjJ/UCBzX1nhiMP6qUn4VJlTF7bjOr:UC9URtESItDU4VJlTFbq
MD5:	CBC1F69EA8C010181ED4DC932D04FB04
SHA1:	DD0651E0128B61723282CD01A8544EBB78FE8996
SHA-256:	8AACA06EE3D3BA31FC27454DA0B68526F9CD08D26C59187F098E483804770906
SHA-512:	D304CE20993299E91FDCA6E3E9C39B3E38631A4F36C7FC9C81F0BC9ABBA0E2C4EF4A8A66993DF078E71EC6EFBDD28844D67170AD317FB47A95021B031A802C3F
Malicious:	false
Reputation:	low
Preview:	import{U as c,b as a,c as l,n as s,Q as d,C as p,W as i,g as o,h as m,B as u}from"./hl-347bfac4.js";const f={for:"portalPassword"},w={class:"form-control-wrap"},_=["placeholder"],h={key:0,class:"error-text"},b={__name:"PortalPassword",props:{params:Object,texts:Object},setup(t){const e=c().getFormElement("portalPassword");return(P,r)=>(a(),l("div",{class:u(["form-group passwordField",{error:!o(e).isValid}])},[s("label",f,d(t.texts["portalPassword.label"]),1),s("div",w,[p(s("input",{id:"portalPassword",type:"password",class:"form-control",placeholder:t.texts["portalPassword.placeholder"],"onUpdate:modelValue":r[0]\|\|(r[0]=n=>o(e).value=n),maxlength:"32"},null,8,_),[[i,o(e).value]])]),o(e).isValid?m("",!0):(a(),l("span",h,d(o(e).errorText),1))],2))}};export{b as default};

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	30
Entropy (8bit):	3.8150610122030697
Encrypted:	false
SSDEEP:	3:YWQRAW6pJxpY:YWQmD/2
MD5:	50C63A134CF3E84CDF7C629573982FCF
SHA1:	A08D19550860215F7EF41B869941195B4E676AF7
SHA-256:	1CE4658A139CF5690752A1E0EC2AB9615F866480C951A22B4768BB381D8D35F1
SHA-512:	8ED131B0EFB17AA39C643E0F59645DC528197CE00FBC5DBF8D56D95A23B123326456A2C2B9A0992504781351070DFF2461C1ADDCEFDF34FB2B41BBF12BF51BC5
Malicious:	false
Reputation:	low
Preview:	{"success":true,"controls":[]}

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	2444
Entropy (8bit):	4.677942804691667
Encrypted:	false
SSDEEP:	48:GuHi4KtlT+YU9MpRa/zcFhxpLKiu/lHpegj5y72a4ukvzLx:zi4KtlTla/szp6yqaIvzLx
MD5:	FF7C60D6CC2190141AE1EA6605A2C08F
SHA1:	D32F89C5CB67445A23FA66864E6218CC213558EF
SHA-256:	30C099F0967C0CD04DE21CDB0077467B1908BD5677B0BE53EF348631943A1B9D
SHA-512:	603DF68B53B02E6B72A1DBC449BA24A4CFA8B7424B7CAAFBFE8CA518EC37BCB1E792D4B2BC33705AC8D45449E17B4AC0E398AD2FE9DFFCBA607665FC07AD109D
Malicious:	false
Reputation:	low
Preview:	(function () {. try {.. // set up our pixel. var fcmp = typeof __cmp == 'function';. var fcmpv2 = typeof __tcfapi == 'function';. var rnd = Math.random();. var img = document.createElement('img');. var exptid = encodeURIComponent('ZHkABGbgb30AAAAIC72MAw==');. var url = window.top.location === window.location ? window.location.toString() : document.referrer;. var img_src = 'https://pd.sharethis.com/pd/dtscout?_t_=px&url=' + encodeURIComponent(url) + '&event_source=dtscout' + '&rnd=' + rnd + '&exptid=' + exptid + '&fcmp=' + fcmp;. img.async = true;.. // set up the aqfer script. var pxscrpt = document.createElement('script');. pxscrpt.id = 'pxscrpt';. pxscrpt.async = true;. var pxscrpt_src = 'https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=' + rnd + '&stid=' + exptid;.. var done = false;. function load() {. img.src = img_src;. document.body.appendChild(img);. pxscrpt.src = pxscrpt_src;. document.body.appendChild(pxs

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	14453
Entropy (8bit):	5.493546570983517
Encrypted:	false
SSDEEP:	384:2G4w8CGLgZ+kwoKGLF6WQCBkKEmoI8+6yaYrHm8spM4c+5/iwvgCiz5yiHHAXCtO:2G4w8CwooT/2tTG2vM
MD5:	5FD1AF0B68DC6B43BC900A74B4D19831
SHA1:	5EFE14DAB690CB60779D01E80F4D81FE1916BB47
SHA-256:	0F7D8D47F0A05D27689570A5ECE906B4FB6117DF4671481569445004DF68AAF2
SHA-512:	41F8A136DC307701CE22749F1AE13532411270AE4E7042DB7995AE7CE40D02EE796890D3054B60DFA55C2471EDDD5011DE391CBE34FEB22179B59E31A3C395C8
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/visit/get-data?landingId=8661&subid=e867b4a6-d17c-4afb-a008-7068b00cf775&networkid=200749&publisher=1576&isNewTr=1&stream=&subsource=pecinta+sholawat&sign=5BE114F181BE643EB22EAD33C755E020
Preview:	{"landing":{"id":8661,"name":"*CC US - Sport Streaming (Unlimited) - SIGNUP page ($69,99)","title":"Watch your favorite sports live - now!","aliasHeaderText":"","isFitFlow":false,"webPushSettings":{"isWebPushAllowed":true,"importSecureAnalytic":true,"webPushVersion":"widget","options":{"urlScript":"https://secureanalytic.com/scripts/push/script/02eyoyxdkz"}},"isHotJarAvailable":false,"hotJarKey":3126190,"isGoogleOptimizeAvailable":false,"goTrack":"","isGtmTrackAvailable":true,"isGa4Track":false,"gtmTrackId":"UA-195162716-5","isGoogleTrafficType":false,"skinName":"Match","layoutName":"layout23","isGatewayPage":false,"isCoveryFingerPrintAllowed":true,"isPaymentFormCrossSellPlace":true,"isPaymentFormUpsellPlace":true,"isFooterCrossSellPlace":false,"isFooterUpsellPlace":false,"isCrossSellPossible":false,"isUpsellPossible":false,"crossSellPackageId":0,"isThreatmetrixAvailable":false,"threatmetrix":[],"isRegForm":true,"isGatewayForm":false,"landingTopicId":1,"landingTemplateIsExisted":1,"not

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1121
Entropy (8bit):	4.838692932124968
Encrypted:	false
SSDEEP:	24:2d6oPhLwRLFmEnpeaxM2zuBVRCJWxXKHkakrJW+NRs:c68pwRLFmKuV3carJ4
MD5:	4D5139D8277153DAEBD28124272D3C01
SHA1:	19B7C85E498C07E34239238507D017F9E0762585
SHA-256:	40928F15C77934F3E8D22550ADC5C8FFD101604D4A1FBF14CAD3C6D0E7CA0919
SHA-512:	D4151246883FAF99E24C93B612A6F32C82F3B77F40F60D6468FD99EA7D4C8D52B197DA394D2C342D64DF605A0DCEAC12D674D93B7CF543E6792D0C49C20CD5DF
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-40928f15.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="30px" height="30px" viewBox="0 0 30 30" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 52.6 (67491) - http://www.bohemiancoding.com/sketch -->. <title>point</title>. <desc>Created with Sketch.</desc>. <g id="..-Pages" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Sport-lp-dymanic-text-(desktop)" transform="translate(-987.000000, -407.000000)" fill="#888888">. <g id="Intro" transform="translate(450.000000, 211.000000)">. <g id="list" transform="translate(534.000000, 196.000000)">. <g id="line" transform="translate(3.000000, 0.000000)">. <g id="point">. <path d="M15,0 C6.72,0 0,6.72 0,15 C0,23.28 6.72,30 15,30 C23.28,30 30,23.28 30,15 C30,6.72 23.28,0 15,0 L15,0 Z M12,21.75 L12,8.25 L21,15 L12,21.75 L12,21.75 Z" id="Mask"></path>

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x540, components 3
Category:	downloaded
Size (bytes):	94466
Entropy (8bit):	7.983282758275081
Encrypted:	false
SSDEEP:	1536:MiqJsKT43klnobW86Yey+bHcoOtiEtxlMMGqOHXtza4V4hC5/Oo/4c46QKSHrq3s:9KT4GwW86Fy+b1OtiEvltOHXrV4k5/O3
MD5:	EDDCC7867DEA5BE352455819227D7EA1
SHA1:	4DA77FCCC76539E1F00112869BDC4F9FFBDDC68E
SHA-256:	1A18A039FF4BBC689EBF9BE648102DD0698B658807B737AD563C4A8DF135F140
SHA-512:	7EAB595D7407BD1282F87C5648DAF9B53D7D0DF8C5FC83109CAEAE89191B38140977A65461EFEC0E35E5D55DA7038F5E9EB837AE4B3C00C576EADD32D76CC0B0
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/prod/images/049e565e1d2c7c5dfe23f67b2ba95105.jpg
Preview:	......JFIF.............C...........................#.%$"."!&+7/&)4)!"0A149;>>>%.DIC<H7=>;...C...........;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;...........".................................................................................}..l.D...9.Yum{.4.W}g.}g..@h...fZ........a78..J...iqT...Y2............r?^k...H#.. ...\|K...5.'..`...L..Q5.....H.../...........!<o.O..\|k.....f..m@x.@.1....!..._....x.d...d\|..p......-z.o.q...H...+^.N...j...3$W.epJ...=.......).H...!.r.........w.........IZ...hd.Z1...+)<q.....^.f>.c..:...2c.Bu(...EA.ji.g..Gz.A<.O-..r.#.B.K. ...j.....u.R}H....X.mP...KM$>-..~....&.....,........K...YT.....qbsO3..qMo ..Y...'..<.y'9..G.XO.k..aa.I..._..a.....y.o$..8.l......L...=[c.5qt.L.m>.=..\-..lx......x...:..F&r*F$.I._.#.mP.....ip....n.v.~.b6`...n.\...+...}.l..m1v.l9.T....F~M..U..{..'..E9.:i.jW..$).~.....p.p$.5.J.\.y...xN}R.Y.Y.nu...0...inH...:.d...Z.;...Q..eh.T9c...H....:..o.`.[.R..X.......\|.z......w...p..

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=10620/tp=TRAD/tpid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d/gdpr=0/gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	dropped
Size (bytes):	216119
Entropy (8bit):	5.545648439106311
Encrypted:	false
SSDEEP:	3072:Ut8hx8g4165O0Nucawo0u+kOY53GlU/8KvfGKHBfBxafP8NqMC:y0v4165pVh30DBfBxafPEqb
MD5:	2B6953F601D76531575279353BBAB029
SHA1:	5F852804D831E672A607051F8063792B91AE634E
SHA-256:	DCE090CF22EA4D82083225DA8C6F2FBB7CB1040C6A1F31A60EF88A197102E609
SHA-512:	2000B4C5C1796391CAC8C9C2D94D29F0AD1DB944D9F5E1B71388F784211FA85EA4D985733185A0B419993B6DC66CEDF2962E781DAA93DBAE59A112B4E74210DE
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__ccd_ga_first","priority":1,"vtp_instanceDestinationId":"UA-195162716-5","tag_id":9},{"function":"__rep","vtp_containerId":"UA-195162716-5","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__zone","vtp_childContainers":["list",["map","publicId","G-JGGRR9PHG6"]],"vtp_enableConfiguration":false,"tag_id":3},{"function":"__ccd_ga_last","priority":0,"vtp_instanceDestinationId":"UA-195162716-5","tag_id":8}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":"_eq","arg0":["macro",0],"arg1"

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2881), with no line terminators
Category:	dropped
Size (bytes):	2881
Entropy (8bit):	5.291551617924223
Encrypted:	false
SSDEEP:	48:ydZ6cDYSwJ1LxQZ6/416JVkDqflngkqA9bZDU/nmDM:yLBDYSwnxO16/pliKVSF
MD5:	F7686CC41C983879654399052CEEDD47
SHA1:	E2B3F8864D57A6ADA058E42057F5D46965CC7169
SHA-256:	07DFC7ACB4FF80E3559BB0FF92244F9CDAB589F3228CD267D1895AE936B3069C
SHA-512:	B72264C0282F8532715C02C2C64D4D95FFA5ABC818B4F418B7AB6E87EA8BB6F1AD1899FE2D23E90DF21FF6B84A4CCACB91BD509291024752C7689AA74C78A488
Malicious:	false
Reputation:	low
Preview:	import{U as g,u as p,o as v,b as u,c,n as m,Q as h,C as w,W as y,g as l,B as f,h as S}from"./hl-347bfac4.js";class b{constructor(t,i){if(this.dom={el:t},typeof t=="string"?this.dom.el=document.querySelector(t):t.jquery&&(this.dom.el=t[0]),this.dom.el===null)throw new Error("EmailAutocomplete: No input defined");this.originalSettings={id:`emailGenie-${this.uuidv4}`,domains:[]},i&&i.domains&&(i.domains=[...this.originalSettings.domains,...i.domains]),this.settings={...this.originalSettings,...i},this.init()}init(){this.createDataList(),this.bindEvents()}createDataList(){this.dom.el.setAttribute("list",this.settings.id);const t=`<datalist id="${this.settings.id}"></datalist>`;this.dom.el.insertAdjacentHTML("afterend",t),this.dom.list=document.querySelector(`#${this.settings.id}`)}bindEvents(){this.dom.el.addEventListener("keyup",t=>this.handleKeyup(t))}handleKeyup(t){if(this.dom.el.value.length){this.dom.el.value.includes("@")?this.user=this.dom.el.value.substring(0,this.dom.el.value.last

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (690)
Category:	downloaded
Size (bytes):	691
Entropy (8bit):	5.005744503248356
Encrypted:	false
SSDEEP:	12:DKp/6KF5SYzRQi7D/O86AKpqWX3GbGnmDPNEs5Mcdd3zJrxKqIZUCI:mj37D/OlqW3GbGnOPNFDdd3ztxKqIZU1
MD5:	E2BE7F3E66571D8F9280CAF91C5E9B86
SHA1:	1ACD9CF02A33B85CFC1D0A55DBE2D1C6FD20CF94
SHA-256:	E64E15372AF890DA288AE5D1661661822AB8D9A199360D2C24CBC38ED14FFFFB
SHA-512:	77A8A7A6A939DB9F74C7BBB61132FC5062F49ED9B9C86D2A30A1180EE3B3D8D2E04D9C62B3264FD52A09BD001B7082E6DFD74FC5245E52C24575516A9FD396E0
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-de833af9.js
Preview:	var u=typeof globalThis<"u"?globalThis:typeof window<"u"?window:typeof global<"u"?global:typeof self<"u"?self:{};function f(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}function l(e){if(e.__esModule)return e;var r=e.default;if(typeof r=="function"){var t=function o(){return this instanceof o?Reflect.construct(r,arguments,this.constructor):r.apply(this,arguments)};t.prototype=r.prototype}else t={};return Object.defineProperty(t,"__esModule",{value:!0}),Object.keys(e).forEach(function(o){var n=Object.getOwnPropertyDescriptor(e,o);Object.defineProperty(t,o,n.get?n:{enumerable:!0,get:function(){return e[o]}})}),t}export{l as a,u as c,f as g};.

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (305)
Category:	downloaded
Size (bytes):	1286
Entropy (8bit):	5.091361196776086
Encrypted:	false
SSDEEP:	24:4U8Sc+4sjipPmkiuHZpA9BpKM/jne8/NsNwNGovuH17FxuHuvsXJJ7:R8SJupPcjZVEwGoqiXJZ
MD5:	51BDA49D96CA57BF83437F127CB8FABB
SHA1:	DE9B52741F6737E5D55346BF5223E549406680A3
SHA-256:	61EC35D4F9490F13D8FEF6CECDCCF41C01B5903BA57B18FB65F1EE23B6098CA3
SHA-512:	BE4310268CCFA7BDA32B413EBA1606B69800D0FA5BA742437BA2791B116A3C36B50DF85144D15A8E023D4761EEB97BA633009E5B6060983C9B09F7AA3E6C65DF
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-c3ed2271.js
Preview:	import{u as i,a as d}from"./hl-347bfac4.js";import"./hl-35a77ba0.js";import"./hl-de833af9.js";const g={__name:"GtmTrack",setup(o){const a=i();if(d().isOwnCookieConsentAvailable\|\|d().isIubendaCookieConsentAvailable){const t=document.createElement("script");t.type="text/javascript",t.async=!0,t.innerHTML=`. window.dataLayer = window.dataLayer \|\| [];. function gtag(){dataLayer.push(arguments);}.. // Set default consent to 'denied' as a placeholder. // Determine actual values based on your own requirements. if (!document.cookie.match(/_ga=GA/)) {. gtag('consent', 'default', {. 'ad_storage': 'denied',. 'ad_user_data': 'denied',. 'ad_personalization': 'denied',. 'analytics_storage': 'denied'. });. }.`,document.head.appendChild(t)}const n=document.createElement("script");n.src=`https://www.googletagmanager.com/gtag/js?id=${a.landing.gtmTrackId}`,document.head.appendChild(n);const e=document.createElement("script");ret

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2097
Category:	downloaded
Size (bytes):	1190
Entropy (8bit):	7.831312491646247
Encrypted:	false
SSDEEP:	24:XwmOHj7FVa/ZK+kNJuGiSdAzvMuUMeXhDFW82swoydY/:Xn4a/ZK1Tj+vMzTW82sLP
MD5:	80D8F4DD25F0D41FC0638E5641734EFE
SHA1:	9348E64DC4784919748B31B2EFBF2AFF3CCA21C8
SHA-256:	5E4217B5E343E7F92E36EF0FD485DCDEC6D9801076EDADCED8F6756C94CCA7AA
SHA-512:	3C674DFD3A8E2586AA80B41B03889C9D6E9E522881F8ABE255838FCE1828D309F6C83824504541AC54F813312F80C79471F5EF9A95912BDD6FE791373FB081B9
Malicious:	false
Reputation:	low
URL:	https://t.sharethis.com/a/t_.htm?ver=1.1523.23404&cid=c010&cls=C
Preview:	..........tV.w...."..c$.......!...x@...n.....b.P....g..,t...#......E&M..u..O.,..@..Ir.8.x..m.3C..T.....&..R.....B.....f.KN....x...%_.D..ZjQ.".&6q\...<j..\...h.)1B..}...#..,t8.^..@..k.kS..[j.-..SeY...yyp....K..^tUO.Dg....1.o.v.'.4..9Q/...<.."../!....g.*m...zk4.Df.c..&/...0....M.....".+.+\.U..Ya_../.Sq..Y^....xz.&._ .. ..<....d....!.:...1....+.....;.^../..v..W.q..$q+...@..&.<-.Lg....?.\|".....z;..}zRdK.F._..T....2O.m.....8.)..:..X.]..P.(O'...............D......(.K.m`......0....mdQ.w.$W.wo.ft.R.....7..P.U.jB.Xx.....1...t..^7...7....<.U...)ov.....:..[.F.s..0.FQ..dJ.uR...E..z..[.o.@)..Pyftf>.Y........E..p..E.6..j.\|y..'LTf.h..j........U...N.g.....u....H.ad.e.7....L..\|-s'.....2.k.6.mjs..q}93FJ....8....W..0.....8...d........8.o...+n~C..8.H..7....{......X....#.'d^..c...y.1..G..o.......4G-#D...}.......j.X.F....Sp.@..\|..."..L.F.OuoH?C......F.~.W(..5...)....c..(\|.,.O..s..2E..\|,.b9.....~9.+......2.1...__.qE.}{.sEdR..;.z...2...1<.rq...1.vm3.hjJ..`...p

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (944)
Category:	downloaded
Size (bytes):	945
Entropy (8bit):	5.287350537899199
Encrypted:	false
SSDEEP:	24:8QMUD2M5aAIliM1snohwkYCNZN6EpWnZM0dQ3+okSoEq8qKQBbSMzI0uvFv:8QMUDslKodWnZlqOolov9bkL
MD5:	C493092C7325C4D00DA88AA9329C26DD
SHA1:	602772DD2B046ADDF3DB4F2059D890A62B88072F
SHA-256:	F409A9D5243ED09F7E3CFB21608AB63C4A3D8E8405F26398BADB702BC73BEC07
SHA-512:	997D483277F702837EB28B28812B3A2BA6C3428E36AD90D699DB7F4F9B2AC893DBEA830667D3F00ABBFB7B3593ACFB0EA8F4AD818F0F30EA4364E4C874BC6E8B
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-054a7ece.js
Preview:	import{t as y,j as S,O as i,b as p,c as v,y as x,B as f,g as h,E as b}from"./hl-347bfac4.js";const w=["onContextmenu","src","srcset","alt"],C={__name:"ImageEditableBlock",props:{imageKey:String,imageKey2x:String,imageData:Object,classes:String,alt:String,style:{type:Object,default:()=>({})}},setup(s){const t=s,o=y("isAdmin"),{getCurrentImage:l}=S(),c=e=>e!=null&&e.base64?e.base64:e==null?void 0:e.url,n=i(()=>t.imageData??l(t.imageKey)),g=i(()=>c(n.value)),a=i(()=>t.imageKey2x?l(t.imageKey2x):void 0),m=i(()=>c(a.value)),u=()=>{o&&window.parent.postMessage({imageSettings:{...n.value,...!!a.value&&{img2x:a.value}}},"*")};return(e,d)=>{var r;return p(),v("img",{onContextmenu:x(u,["stop","prevent"]),class:f([s.classes,{"lp-builder-image":h(o),"hide-content":((r=n.value)==null?void 0:r.hasOwnProperty("isShow"))&&!n.value.isShow}]),style:b(s.style),src:g.value,srcset:m.value?`${m.value} 2x`:void 0,alt:s.alt},null,46,w)}}};export{C as _};.

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (365)
Category:	downloaded
Size (bytes):	366
Entropy (8bit):	5.1657422726330395
Encrypted:	false
SSDEEP:	6:7DVEzoQl/7bQrBDyQOnMoQptPwoQooQU8SzoQ9e3QvH3xMoQr77GQCKeyhH0eE1Q:vViz6YnMpPRMGCXxQnUFyhH0eEXRe7
MD5:	289E58EA8DA779BED6AC38C878D74CE4
SHA1:	39B1FB24FFB81DBEE446D45430E1A52E36E6D13B
SHA-256:	AE1F0BD19630BEF6A17532F5717346B30E96CC1556E7EB3D7354D3232F370BBD
SHA-512:	D940BAE2CB1CC20A328DB8EA23CCE8CB78B0919744D150E6147D7BBA6E496ABCF8DC29F3FABA7CEA222B531ED51CE663BB8D923778556599EA097B71EB66C44F
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-d212a6f4.js
Preview:	import{_ as t}from"./hl-f2333577.js";import{b as o,e as r}from"./hl-347bfac4.js";import"./hl-2dfa470a.js";import"./hl-543ebdf2.js";import"./hl-054a7ece.js";import"./hl-ea83f4be.js";import"./hl-35a77ba0.js";import"./hl-de833af9.js";import"./hl-6c50209e.js";import"./hl-5cd68a50.js";const h={__name:"MatchSkin",setup(_){return(e,p)=>(o(),r(t))}};export{h as default};.

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2320
Category:	downloaded
Size (bytes):	1384
Entropy (8bit):	7.808118802355832
Encrypted:	false
SSDEEP:	24:XX9sBxG/OsaCezrBbGlCG/Labdy1t6oEPjZsuIPJE+nfLNZD:XX+BfsaxzSCIUy1t6oEsukJnJt
MD5:	20272454D2D6C9F0FEF2AAB9A7CA0514
SHA1:	F11FFE17485758FACC6BBEAE5AC42A9775968B94
SHA-256:	E16EEE2C2F198F221EC9237D2283D8A69B0E76BB09B8B35F18F03B9A866D39AF
SHA-512:	B4DE9D9E6D19B7FCF9FA14299340A499B241260A41A4758DA3B10C1AEA2F86B4C01E98D5F43CA87B0AA688C62C01DF874536AAA5AC7D38FA98D1ABD76042E908
Malicious:	false
Reputation:	low
URL:	https://t.sharethis.com/1/k/t.dhj?cid=c010&cls=C&rnd=0.01281231268995775&stid=ZHkABGbgb30AAAAIC72MAw%3D%3D
Preview:	...........V.S...W..G.6rB..W..%p.Ci../.........J.....#;....~I...Z.....B..,..3S..T9.;..W.A...j...:.jQ...e;.\\&....x..q....plW.s..T.m.8.P.K......4.S...oT.hk.3'..........O..."......-+c..0#.M1qS...RnZ...L...r.....6..9.=...APWy....."5.0)..\.'...6y.m..;...m..8.....frj..r.&N....e>.....(..q...n..;....2....).......!...1.s.^.68.Y\'M..w..C..LN..5.o=<8x.m\..k..j..."..f.z...I.....C.#a........8K...m3..Y.M......}.O.>.$..o..H...6~p..QVe.8...D..Se....9....}....z........(..\|..CsZ.E......B/...gg...2..a.W)[.....E.9...RR..Wu^....o.p.#..].9A..~.K0...........o4.n.....k...d.L{.(......+Z.'..^.....F;.]S\..k.t~..R..f.$./...+2..Sssuv\..0.cW..0.?..=_...b.y....8H.........4.&I...A.Q....Q.@.\|W....A..8....BD.!(8..q....l<.q#.aP4L...&.V.r^8......M=...S.%b.wq.g.~.A......)N.....G.p.f;.+Y..jg..~....Y. . ......w..}.-....... ...d..Q[.O.....yK.i....p..\|...5.i."...kY..)....s.G........{....W:............y...<..G.J-.R..^..A..(5.q..;f.i..b+Yg.WG.O.G..6g)`..c.U...[...K.n...fu..%AQ.

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43601), with no line terminators
Category:	dropped
Size (bytes):	43601
Entropy (8bit):	5.362094585622624
Encrypted:	false
SSDEEP:	768:HiS1YxfHfIcITa4P5+23ex/BVQOXGsWIYTHpji7J:HioYxfyTaW5KVQpsEHpgJ
MD5:	9B991FC4E41448221BE02744748EC589
SHA1:	47DF0B75614D17D1E94D61FC4006849EA8E1E13D
SHA-256:	FFE8AC1AD574101276F7BA3BF6CFB95D55ACE8486BF60329ADBF843C64A2EBCE
SHA-512:	FA4E263114DBC0BFE29FB7C1A39F7A0D36178D0BD6B6075B99D1183315F1FE6A23D1AB8ACC49710E2165D945135B5AEDC685A723F0DBC5C7E0F6EBE6E878DBDB
Malicious:	false
Reputation:	low
Preview:	var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== 'undefined' && typeof console.log !== 'undefined' && typeof document.createElement !== 'undefined' ); }; if(!lotameIsCompatible()){ if(console && console.error){ console.error('Lotame: This browser does not meet the minimum requirements.'); } } else { function sync16311_a(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function sync16311_b(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:sync16311_a(a)}}var sync16311_aa="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},sync16311_c; if("function"==typeof Object.setPrototypeOf)sync16311_c=Object.setPrototypeOf;else{var sync16311_d;a:{var sync16311_ba={Ua:!0}

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
URL:	https://ps.eyeota.net/match?bid=m51mhg1&uid=d749f97f-6ea6-4942-b1cb-0bef3a6cb3ef-66e06f96-5553
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (722)
Category:	downloaded
Size (bytes):	723
Entropy (8bit):	5.302757295588491
Encrypted:	false
SSDEEP:	12:lENqfUv8Y15mRRZWl8mowOwlIJlfZf/fP2UsdWE3Lly99GjTHn7KOvn:eAfUd15evW2nwOw6vZnAWE7+9Gvn71v
MD5:	F5C6202FD4ECB7264EC49652B28DDC4C
SHA1:	5D395C52870B11850953662C1D16584E3C6B78F3
SHA-256:	4FAB4A02B1DEC6AAED349D7ACE53FE9711DB57B6EDB0FE6AB9457F300D313F39
SHA-512:	959A3C11C023F71CE7700BDAE5601A557D63C1DD6E69EC418F0B0025F3F3459097425B2024F475F5B3DA94F2BA56E7D8441DE01FF1A8D6F4596E03A723AF5FD5
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-5cd68a50.js
Preview:	import{t as r,b as c,c as d,I as u,y as b,g as a,B as f,E as y}from"./hl-347bfac4.js";const x={__name:"ImageBgBlock",props:{classes:String,imageData:Object,disableContextMenu:{type:Boolean,default:!1},style:Object},setup(e){const t=e,s=r("isAdmin"),n=t.disableContextMenu?void 0:()=>{s&&window.parent.postMessage({imageSettings:t.imageData},"*")};return(m,i)=>{var l,o;return c(),d("div",{onContextmenu:i[0]\|\|(i[0]=b((...g)=>a(n)&&a(n)(...g),["stop","prevent"])),class:f([e.classes,a(s)&&!e.disableContextMenu?"lp-builder-image-bg":""]),style:y({...e.style\|\|{},backgroundImage:`url(${(l=e.imageData)!=null&&l.base64?e.imageData.base64:(o=e.imageData)==null?void 0:o.url})`})},[u(m.$slots,"default")],38)}}};export{x as _};.

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Category:	downloaded
Size (bytes):	77160
Entropy (8bit):	7.996509451516447
Encrypted:	true
SSDEEP:	1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2
MD5:	AF7AE505A9EED503F8B8E6982036873E
SHA1:	D6F48CBA7D076FB6F2FD6BA993A75B9DC1ECBF0C
SHA-256:	2ADEFCBC041E7D18FCF2D417879DC5A09997AA64D675B7A3C4B6CE33DA13F3FE
SHA-512:	838FEFDBC14901F41EDF995A78FDAC55764CD4912CCB734B8BEA4909194582904D8F2AFDF2B6C428667912CE4D65681A1044D045D1BC6DE2B14113F0315FC892
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
Preview:	wOF2......-h..........-.........................?FFTM.. .`..r.....(..X.6.$..p..... .....u[R.rGa......'.=.:..&..=r........].t..E.n.......1F...@....\|....f.m.`.$..@d[BQ.$([U<+(..@P.5..`....>.P..;.(..1..l..h...)..Yy..Ji......\|%..^..G..3..n........D..p\Yr .L.P.....t.)......6R.^"S.L~.YR.CXR...4...F.y\[..7n..\|.s.q..M..%K......,.....L.t.'....M.,..c..+b....O.s.^.$...z...m...h&gb...v.....'..6.:....s.m.b.1.m0"....*V.....c.$,0ATPT.1.....<..;...`..'.H.?.s.:..ND.....I..$..T..[..b4........,....bl6...IL.i}.&.4.m,'....#....Rw..bu..,K......v....m_-...\H....HH.......?...m..9P...)9.J..$.....8......~.;.r..n.=$.....Nddn.!'....;...8..'.N...!.-..J.........X.=.,......"`:....... {......K!'...-FH....#$~.Z_.......N5VU8F....%.P..........Cp..$.Q.......r.....k.k...3...:R.%....2{.....h%.)8..........ILK.6v.#......,;.6..N.2.hv...........OO..t#....xT..Bf....q^.#....?{.5b.I..%-WZ..b.A...^.1..n5.....NQ.Y'.........S.....!t" .`b3..%....35....fv;....l..9.:jgf?gr..p.x. ..\|.. $. e.

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65329)
Category:	downloaded
Size (bytes):	77513
Entropy (8bit):	5.358699014001405
Encrypted:	false
SSDEEP:	768:nGndr7D0JzdsfhhbGKwUMsiIUBZwOkSwz:nedjNfhRGr6
MD5:	A1713C7A8FB53E78BBD5A1C76068791D
SHA1:	C15CA4F1E62BDE996F9C72FB4A3E3F584B966741
SHA-256:	CD7E4B31039BF939306AB3D38291F59E92069A24744E4B359B557ABA0EB5B219
SHA-512:	14AAA3B0F2D77C973E885BAC8762CA631A2FAD2277CE6D3742E15335B738BCD610C16F3EF9DE370EF240FA32A570EBAB686743C22294B4B6D56D2AA92D76453E
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-d98910d4.css
Preview:	@import"https://fonts.googleapis.com/css?family=Roboto:300,400,500,700";/! Bootstrap Grid v4.1.1 (https://getbootstrap.com/).* Copyright 2011-2018 The Bootstrap Authors.* Copyright 2011-2018 Twitter, Inc..* Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE)/@-ms-viewport{width:device-width}html{box-sizing:border-box;-ms-overflow-style:scrollbar},:before,:after{box-sizing:inherit}.container{width:100%;padding-right:20px;padding-left:20px;margin-right:auto;margin-left:auto}@media(min-width:576px){.container{max-width:540px}}@media(min-width:992px){.container{max-width:960px}}@media(min-width:1300px){.container{max-width:1260px}}.container-fluid{width:100%;padding-right:20px;padding-left:20px;margin-right:auto;margin-left:auto}.row{display:flex;flex-wrap:wrap;margin-right:-20px;margin-left:-20px}.row-sm{margin-right:-10px;margin-left:-10px}.row-sm>.col,.row-sm>[class*=col-]{padding-right:10px;padding-left:10px}.row-xs{margin-right:-5px;margin-left:-5px}.row-x

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://sync.sharethis.com/eyeota?uid=2zNGfM6M0n4nvawNYmpiYRMKrP1tNziyTM96hsIIdUZE&gdpr=0&gdpr_consent=
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	343
Entropy (8bit):	5.126114190832608
Encrypted:	false
SSDEEP:	6:qTjxO96Ko6J+RRRF7FYKLIYAB3gbQ5IyG5IFHwFYfJWDq/czid0NVaXz:qTjxPKl+3RFBYKLIYM38Q5RG5IFQqfWo
MD5:	46561D0DA55B6E4549B48BFEE1D82F23
SHA1:	279544278D2D63B78F801B146C95117CA236C929
SHA-256:	70170E469D8D05527ACAB7E3335C6FE91E2966DDBB6E9EA6211260B8F717D120
SHA-512:	A7EC69BBF71466264C6AF1F08771F9F03CCD1EE16E5F6CB57C2D21839E438774B3BE15DBE000D7654BCF99680CE0747DACBAA86EE117A887837308AB514E61AD
Malicious:	false
Reputation:	low
URL:	https://cdn-tc.33across.com/lotame-sync.html
Preview:	<!doctype html><html><head></head><body>..<script>.(function() {. var o = (window['lotame_sync_16311'] = {});. o.config = {onProfileReady: function(){}};. o.data = {};. o.cmd = [function(){window.lotame_sync_16311.sync();}];.})();.</script>..<script async src="https://tags.crwdcntrl.net/lt/c/16311/sync.min.js"></script>..</body></html>..

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	3605
Entropy (8bit):	5.075622390478209
Encrypted:	false
SSDEEP:	24:meRNNE1uyjLGLfh1ADA6V89sOPSejl6kHN4ynxmIvx9riqYniKL/bbzmc:duxLkSs629saW/+9WqQZL/qc
MD5:	F16E89FD08A708A6BD2E69BE50FD30AB
SHA1:	530FEF7EFD42A36908F40C87114A28C1398E1367
SHA-256:	08B479C3EEB1CB4D44354E6BF17322CD7ACD38AE9A33EE5956898447ED43FAB6
SHA-512:	94722AF96B830015C2515BD537E8610A25B61AC7C66C990D41565CD87AB50667E8CBFAB347188E98BA7793EF5AB48F0B3115C40DE55F4791D2CD1B2321405295
Malicious:	false
Reputation:	low
Preview:	[{"id":16472,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"twitter\"]}}","event":"click","behaviorType":"act","template":"Click On Twitter Link"},{"id":16473,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"youtube\"]}}","event":"click","behaviorType":"act","template":"Click On YouTube Link"},{"id":16474,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"hulu\"]}}","event":"click","behaviorType":"act","template":"Click On Hulu Link"},{"id":16475,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"digg.com/submit\"]}}","event":"click","behaviorType":"act","template":"Share Content On Digg"},{"id":16476,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"del.icio.us\"]}}","event":"click","behaviorType":"act","template":"Share Content On Delicious"},{"id":16477,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"facebook\"]}}","event":"click","behaviorType":"act","template":"Click On Facebook Link"},{"id":16478,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[hre

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 26521
Category:	downloaded
Size (bytes):	10009
Entropy (8bit):	7.97147130080863
Encrypted:	false
SSDEEP:	192:8RruTpN/AGimTQsBR2VVb9jDUwR769+7jtmHuY+K5R0gXB:8Rrytdim8sBR2D11NkOL+RLx
MD5:	CA8329380F5C715D25CDB3706F420709
SHA1:	FF0A48066F6875E287B21234979F2F2CBA59D17E
SHA-256:	C54E3085C1AB549CEEE23F88B0B3CDA051C96C299A167BB5FFD723D4D5767B77
SHA-512:	0A431797CF237B46D299062D970B0986C31C0B8A41F387685066643F0637176846425825AE6F48E0B113835CF2D754E228323FCE70199BE036ED84C9D2AFC3F4
Malicious:	false
Reputation:	low
URL:	https://pxdrop.lijit.com/1.1523.808/a/US/t_.js?cid=c026&cls=sync
Preview:	...........{{..8...U.U.".e....s.d.$..]E.2N..HF.ib...< .s..g.<.<....Gc.f.a.......2........C..t6..c6..z.UP.g......'.N!..m...^....z..c..xV.C..8..s.b.B.U.W>...S.}6........{.....s,>.{v.V.dU.0..\|.........W............W:]......"^...W\.....W....o..8.\|.~...{.....u..Q.Uu..9.Uu.T..Yx...D.....5.H...G..,.$8.....c}.>M.....2]..y1....z%..L.YU2..U.P=QJ..M%..A}#.....=.;..........5.z.Z.E.O..{....&.......^}.@R.k..0...q8..{k.A{...lu... 9.... ...0.q.-......o......f..9..u?...+......^....,....?n.......f...>Nq4....-U{u......*._.(.).l...G6.=9.?..?~......G......._....<..\|\r...{..v.P=..G. ].7J.fOt=.'S.z..)..p^..j...+.. .j..T.4>..z...m%....n+.......H^.> ...I.<...b....Y....W...i...m..3(..]e..=...C...Zw.+...O..{.z0..W.\|.......\.V...A...U.Z...y'&U._..1`j..Qv(G.....y.......$<x.........Z..Y......6{.+~}.......K.>..L...../....O...U.>$.S+.....r.8..`\....\^^^...tX...sP.sTyx...L.......P&......t..N.?U.?y..=....ln..t\|...bo........H+a.;q.`..z..H%..<\|U.....`.h..

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 84 x 19
Category:	downloaded
Size (bytes):	1412
Entropy (8bit):	6.655913841871148
Encrypted:	false
SSDEEP:	24:qA8GPBvwAywLHhH/WCHGFDwtlSNUK4a68VrmibPTAMaE7WE:N8GKbwFfWmyctlSmKVLArE
MD5:	9AFE50090C0BC612953D081295EAB5B1
SHA1:	71A4DA2A622879C29176ECFA5AFE1BBE3E8CFA40
SHA-256:	D228D0256370863119C043F1E5CA8F3930F6999BD9F250434B6D8935F45DC171
SHA-512:	D7290B951CEC51994F3480C32B70DE0FAECA433B5D99209B044E1D4C12327768DE8C344B6BDED806D993251E0EE6F98F0DD64F4480E999FBC06ABFE3DD8056FA
Malicious:	false
Reputation:	low
URL:	https://translate.googleapis.com/translate_static/img/te_ctrl3.gif
Preview:	GIF89aT.........A..E..G..L..T..U..W..Y..Z.!_.#d.&..&j.&l.)..+x.0}!2u.3..3. 5..7`.9..;.E<..=l.>..@..Au.A..A..B..Cg.E.aE.RFm.Gp.Gq.I..I..J.-KKKK..P..Q..S..V..W..XX.[.F[..\.S_.,e..g..i..m..n..o..o..r..zzz~...e...........~................................................%.....&......................'..-3.~.).....".#..........VL...6.)........9?......p.X^...N.`.jn.......XL...........r..h..h..........................................................................................................................................................................................................................................................................................................................................................................!.......,....T..........H......(\.P. .#J.......>...F .u.....(S.PA$..0cF!.d..A,..3#.....C.O.F#U.\..e.0i.....jzV..+......K6..J..u...T.#k.QM..].h......r.C.0.?..ra..1..M..\|.....r#r..(.G].t.p......T..o..\|

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Reputation:	low
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (665), with no line terminators
Category:	dropped
Size (bytes):	665
Entropy (8bit):	5.566919861700082
Encrypted:	false
SSDEEP:	12:+dQfZUae/0F0yQsJe3WY5e/jeQQoZI8JBQshUwEQJG71XQzs:+deU3/06yRqfs/jeQI83yyYX1
MD5:	66A592D0481D2149AAF6C34252AA2D10
SHA1:	07ED7844579A8ACE08C969C7F5D77E817F724A1A
SHA-256:	A46C07B3D53835047689FCD53FB93C248FE5F586DC94A86658CB545F1C120B8C
SHA-512:	7A2210C9F98E09EA3CE0A3BE7D470A30DC6FD734E659A0541EC17FA352D27A8F536ED5A8685FEE4214D05254227CCAA2701A391C6D309B5339F8171AFFB407F4
Malicious:	false
Reputation:	low
Preview:	(new Image()).src = "https:\/\/dpm.demdex.net\/ibs:dpid=30064&dpuuid=191dcb39652-58e00000010f4c67&redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D6j5b2cv%26uid%3D%24%7BDD_UUID%7D%26referrer_pid%3D51md42u";(new Image()).src = "https:\/\/image6.pubmatic.com\/AdServer\/UCookieSetPug?gdpr=0&gdpr_consent=&rd=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D7ri0rgu%26uid%3D%23PM_USER_ID";(new Image()).src = "https:\/\/cm.mgid.com\/m?cdsp=737575&gdpr=0&gdpr_consent=";(new Image()).src = "https:\/\/sync.crwdcntrl.net\/qmap?c=6387&gdpr=0&gdpr_consent=";(new Image()).src = "https:\/\/idsync.rlcdn.com\/423476.gif?partner_uid=2qpeiUVdtz6SXLBOGhs2PnjqMFlWFFr2uXDKsnqC6Mks";

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19948), with no line terminators
Category:	downloaded
Size (bytes):	19948
Entropy (8bit):	5.261902742187293
Encrypted:	false
SSDEEP:	384:XriNpnjyMkg8XMtExRN1w29JIOzahXtO2nJ65:GijgSWuanfJ65
MD5:	EC18AF6D41F6F278B6AED3BDABFFA7BC
SHA1:	62C9E2CAB76B888829F3C5335E91C320B22329AE
SHA-256:	8A18D13015336BC184819A5A768447462202EF3105EC511BF42ED8304A7ED94F
SHA-512:	669B0E9A545057ACBDD3B4C8D1D2811EAF4C776F679DA1083E591FF38AE7684467ABACEF5AF3D4AABD9FB7C335692DBCA0DEF63DDAC2CD28D8E14E95680C3511
Malicious:	false
Reputation:	low
URL:	https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015
Preview:	!function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]]].join("")}},944:function(e){"use strict";var t="undefined"!=typeof crypto&&crypto.getRandomValues&&crypto.getRandomValues.bind(crypto)\|\|"undefined"!=typeof msCrypto&&"function"==typeof window.msCrypto.getRandomValues&&msCrypto.getRandomValues.bind(msCrypto);if(t){var n=new Uint8Array(16);e.exports=function(){return t(n),n}}else{var r=new Array(16);e.exports=function(){for(var e,t=0;t<16;t++)0==(3&t)&&(e=4294967296*Math.random()),r[t]=e>>>((3&t)<<3)&255;return r}}},508:function(e,t,n){"use strict";var r=n(944),i=n(343);e.exports=function(e,t,n){var o=t&&n\|\|0;"string"==typeof e&&(t="binary"===e?new Array(16):null,e=null);var a=(e=e\|\|{}).random\|\|(e.rng\|\|r)();if(

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43601), with no line terminators
Category:	downloaded
Size (bytes):	43601
Entropy (8bit):	5.362094585622624
Encrypted:	false
SSDEEP:	768:HiS1YxfHfIcITa4P5+23ex/BVQOXGsWIYTHpji7J:HioYxfyTaW5KVQpsEHpgJ
MD5:	9B991FC4E41448221BE02744748EC589
SHA1:	47DF0B75614D17D1E94D61FC4006849EA8E1E13D
SHA-256:	FFE8AC1AD574101276F7BA3BF6CFB95D55ACE8486BF60329ADBF843C64A2EBCE
SHA-512:	FA4E263114DBC0BFE29FB7C1A39F7A0D36178D0BD6B6075B99D1183315F1FE6A23D1AB8ACC49710E2165D945135B5AEDC685A723F0DBC5C7E0F6EBE6E878DBDB
Malicious:	false
Reputation:	low
URL:	https://tags.crwdcntrl.net/lt/c/16311/sync.min.js
Preview:	var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== 'undefined' && typeof console.log !== 'undefined' && typeof document.createElement !== 'undefined' ); }; if(!lotameIsCompatible()){ if(console && console.error){ console.error('Lotame: This browser does not meet the minimum requirements.'); } } else { function sync16311_a(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function sync16311_b(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:sync16311_a(a)}}var sync16311_aa="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},sync16311_c; if("function"==typeof Object.setPrototypeOf)sync16311_c=Object.setPrototypeOf;else{var sync16311_d;a:{var sync16311_ba={Ua:!0}

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (690)
Category:	dropped
Size (bytes):	691
Entropy (8bit):	5.005744503248356
Encrypted:	false
SSDEEP:	12:DKp/6KF5SYzRQi7D/O86AKpqWX3GbGnmDPNEs5Mcdd3zJrxKqIZUCI:mj37D/OlqW3GbGnOPNFDdd3ztxKqIZU1
MD5:	E2BE7F3E66571D8F9280CAF91C5E9B86
SHA1:	1ACD9CF02A33B85CFC1D0A55DBE2D1C6FD20CF94
SHA-256:	E64E15372AF890DA288AE5D1661661822AB8D9A199360D2C24CBC38ED14FFFFB
SHA-512:	77A8A7A6A939DB9F74C7BBB61132FC5062F49ED9B9C86D2A30A1180EE3B3D8D2E04D9C62B3264FD52A09BD001B7082E6DFD74FC5245E52C24575516A9FD396E0
Malicious:	false
Reputation:	low
Preview:	var u=typeof globalThis<"u"?globalThis:typeof window<"u"?window:typeof global<"u"?global:typeof self<"u"?self:{};function f(e){return e&&e.__esModule&&Object.prototype.hasOwnProperty.call(e,"default")?e.default:e}function l(e){if(e.__esModule)return e;var r=e.default;if(typeof r=="function"){var t=function o(){return this instanceof o?Reflect.construct(r,arguments,this.constructor):r.apply(this,arguments)};t.prototype=r.prototype}else t={};return Object.defineProperty(t,"__esModule",{value:!0}),Object.keys(e).forEach(function(o){var n=Object.getOwnPropertyDescriptor(e,o);Object.defineProperty(t,o,n.get?n:{enumerable:!0,get:function(){return e[o]}})}),t}export{l as a,u as c,f as g};.

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1350
Entropy (8bit):	4.46186024732366
Encrypted:	false
SSDEEP:	24:koTVblq2ydFpLclLSxtio5/6LKdaLZuCqLLZ5QaLZq8LZRcnZvD0lfyqE:vZU755qRmiGzuZvQty3
MD5:	6E7FA3152478073B9EC67B34E4BB4E99
SHA1:	B5997E7C15B2FAB2700A83275084FDC6456DCBDE
SHA-256:	F22070BA5CA86420CC6EAC765F4B1107B902A16F193AC22D9951C7BF0203A051
SHA-512:	B63E864A8676400A73E6DC88C8D59C4EA03D24F9B4B01CD1343C08E733F92576AC7D6F9BE0583512F3017C4F316A1C63AA99C6041FCB1DE067E074F24B6F8075
Malicious:	false
Reputation:	low
URL:	https://t.dtscout.com/idg/?su=10401725984635D685D944936F64E5C9
Preview:	<html><head></head><body><script>.window.onload = function() {. var uid_g = '10401725984635D685D944936F64E5C9'; . var uid_s = '104017259846368B9134A7270CB55FA5'; . var uid_su = '10401725984635D685D944936F64E5C9';.. var debug = {};. var pass_uid = false;. var method = false;.. if(uid_g && uid_g.length > 0) {. method = "got";. pass_uid = uid_g;. } else if(uid_su && uid_su.length > 0) {. method = "setu";. pass_uid = uid_su;. } else if(uid_s.length > 0) {. method = "set";. pass_uid = uid_s;. }.. debug.pass_method = method;. debug.pass_uid = pass_uid;.. var ls_uid = null;. try {. var ls_uid = localStorage.getItem('uid');. debug.ls_uid = ls_uid;.. var uid = false. if(method == 'got') {. uid = pass_uid;. debug.uid_src = 'got';. } else if(ls_uid) {. uid = ls_uid;. debug.uid_src = 'ls';. } else {. uid = pass_uid;.

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 94853
Category:	downloaded
Size (bytes):	15639
Entropy (8bit):	7.983521124463633
Encrypted:	false
SSDEEP:	384:+nAbWV9GvDF/612SvaDyBFBUaqWKRKy/I:+nA6UdyaDy7aaHC5Q
MD5:	2ACB3C4D9AF20DDA4CDB16CC3EA23FFB
SHA1:	66DA192AFCC6D8708DC0BCFDF53A7FF7773AED4B
SHA-256:	12837DFD9367429C8B43F6B757BD58034CF12577FD1E07996A07F57BAE2B37D8
SHA-512:	0C73D1D74DB2C81E15A343E7FEA5BA4193390580F42D2551B3B09054E20C9C298C61D73B6BF95579D97DEDF0707105C2F6D694C022AB0942F850468DC5AAC6E0
Malicious:	false
Reputation:	low
URL:	http://football-booster.freevisit1.com/assets/css/style.css
Preview:	...........}.s.8...S5......9.@..25S+.N .IHB..elc................og.....V..-.$.rt.P/..A.u..UTG........&K+G7.....S.tT....f..x..,s......Kis.....U..b!Y.....C&..(..2..ufb.........~.AZ+.y......H..FWT.../.}.f...K...7.\:.i........6Sum.\g...o3]Q...?...!9.._.-}.0Kd...X..#-....Y.A..t.Si....--.Z.......s....f%.cm;.. .5(.U's.....ML%..B.4}..S.2&.<.].T.3.%-.d.!.....vP.\;....g./3..8....dG..s=37.EU.p.... ...... 5W...........C.=.....NL.1...j..4...X.R..n.>..FPR..q....^gtG2t9 ;lQva~f'..../....5u.......rI.[H..!..N...l..u... ..d....r...+w8..b....4.$...T......we."...u+^gV...Z../.-(.mm:.}.....B.........../..YH....Z(......Q.Z.F.;.C>..+.....X.!Aq.36Tm....][^g&..B.!...c..3Y!W..a.'..y...r.....p..:..h.6..L......S..^g<m....o.Nu.Pl.!QA..MCW2....K..La...JR.W$.\...V.R..V........E..`.......r.v\]o....#Y..H}9S-.a.b..H.....$,Mk!.dy......tu....>.k...E._..\|.r...`..-.V..^O...%TT...V+U..%.N..`t.-.../....M.mib...8]ar.%...Sim.*..K...\|b..fH.n~A.k..B%K.....J.<.o9.+..lwP..`.R.1d

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 600x150, components 3
Category:	dropped
Size (bytes):	25333
Entropy (8bit):	7.975582641394476
Encrypted:	false
SSDEEP:	768:ThHEZiKkJV2xf7kzn2H/7qbIv/IjUMpOXtZtCp0ub/E:2ZiKkGO2HzqkvgUMpOXDwprbc
MD5:	4717CCB2D20F3B63D6B9206BD27C2BCF
SHA1:	DA79FCAA0AFB1018A343C42B8A0E6153D08A3607
SHA-256:	232E14B982CEC26D0157C3890EEC0729F693253CCA750895C515BC58F842A08E
SHA-512:	DE83AE15F723EC2018FCC327E619FAC8755AFD37C423F4202DB795CFCECB342477F706CDCB75A67FD2E48471C2EA74E7F6DF7E4A8BE36A7378C69AB53EF4488B
Malicious:	false
Reputation:	low
Preview:	..................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}........X.."..........6...................................................................x5o..xzT..)u8.....KO7O..b.x..38..7..D.#rK9?D....i....q.."%..!c..Q..L...S.d.....jEhN.m...er&.DG......G.T...wT.-..OX.Q...97..I.e....iH....x...L.....(.2d.#a%.,..A.R...o....E.P....4j_%...@.]..,<.o.0...s9.?+.&...};%MD.Zm.u.....u...r".i.,:...Hc1...0=...k.-..U........W......]..E\..vs.......+....[..t...<OEZ....bNRC..luV1..r_;..X..].].g.=}.M.....a.N.q.gt.M....P....F.=x...]'..o\|..t..D^6.l..n..w.o......-.....rt.r.?..n]5..u......Y.FVm'.]...y.@.l.p.).ojO..S.........R!...M.}e..4.=j.fi..`....D.2#.k..M.y...:G<........+.Z.%..l.%..O.+.......=4......[...(-....Of.uA....S#0Y..up.\|.L..e..#*..k..I.[...zv-'..l..;.x.SDr.^H..fD.%......\|g.c........s2.....\.iZ..."5.....F.4L..._4.J.p......I<..~..].{.......s...Hb.U]....h.6...Y......^...m...&.....ib.].s?-.

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	6225
Entropy (8bit):	5.976934819783072
Encrypted:	false
SSDEEP:	96:+R2K3Z4n7tyVwip82hezk6227gLFoXhu1XuE20ot+pVY3YptWDzOzgXK3Zx:ql3KnxyGGMzb7noR20NTww33
MD5:	2BD5C073A88B83ED74DB88282A56DDFB
SHA1:	D0EBFC376F8C6A44A8D4CD216817DCD7D0C33650
SHA-256:	AB5C23A05E39DEED14D9D8262B0DCE9F024F86105A27196CAD37D14A3F516E09
SHA-512:	5C6C4A92E93FC0F6A675658CC84F6187FDEBD3EEE94EFD07E24658736CBA598F3BC7156B19834B13FB44C1D43FCB7DF9FCCA7F0A453037E30DA76BA8F4B23B89
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><defs><path d="M21.5 5h-9.17L11 1H2.5C1.68 1 1 1.68 1 2.5v15c0 .83.68 1.5 1.5 1.5h9.17L13 23h8.5c.82 0 1.5-.68 1.5-1.5v-15c0-.83-.68-1.5-1.5-1.5z" id="a"/></defs><clipPath id="b"><use overflow="visible" xlink:href="#a"/></clipPath><g clip-path="url(#b)"><image height="31" opacity=".2" overflow="visible" transform="translate(3 1)" width="29" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAB0AAAAfCAYAAAAbW8YEAAAACXBIWXMAAAsSAAALEgHS3X78AAAA GXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAABQBJREFUeNq8V8tu20YUvXdm+LCk RKiMwI1TFEXhVZJd1gW66xekv9DPqPsvXdU/UaDroJskKy+CInCcGpKtFy2SM/f2DEXZia0odtKW AkFJ8zhzzn3S0Ycvps+79EMDbj3Yfgv4EM+XTN/fEOb3Zg3AXmq7j64D5/e/x/EfzZMnX5jx+LFZ LLyp6yNDOzskYb6RubFdpbdvKUl2Jc+d9PvP5dmzUyH6TVoYXQOq+H5g9vb+cONsO9maLpIyyZPU kZNAppmh9Vpg5kSXwCSVJ5/Vi/r8Tl73y2F9ePidJ3oaga+B4vkUgF+6EW1ndz11gvNdDdL1bDN

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:H+uZYn:euZYn
MD5:	46DF3E5E2D15256CA16616EBFDA5427F
SHA1:	BE8F9B307E458075DA0D43585A05F1D451469182
SHA-256:	AF3248D0B278571EFF9A22F8ED1CEB54B70D202B44FD70ECA4CA13A5771CECC3
SHA-512:	88FBCC0A92317A0BADE7D4B72C023A16792F3728443075BF4B1767C8A55258836B54D56B24EABE36AE4EF240F796B58B8F1EA10C7E3C146BDE89882FC9ADE302
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlv8NqyXrWplRIFDZFhlU4=?alt=proto
Preview:	CgkKBw2RYZVOGgA=

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	200
Entropy (8bit):	5.025855206845441
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slhohC/vmI4SmK0xhFELE47zF:t6qnoU/vmRI0xQTF
MD5:	11B3089D616633CA6B73B57AA877EEB4
SHA1:	07632F63E06B30D9B63C97177D3A8122629BDA9B
SHA-256:	809FB4619D2A2F1A85DBDA8CC69A7F1659215212D708A098D62150EEE57070C1
SHA-512:	079B0E35B479DFDBE64A987661000F4A034B10688E26F2A5FE6AAA807E81CCC5593D40609B731AB3340E687D83DD08DE4B8B1E01CDAC9D4523A9F6BB3ACFCBA0
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M0 0h24v24H0z" fill="none"/><path d="M5.88 4.12L13.76 12l-7.88 7.88L8 22l10-10L8 2z"/></svg>

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=10915/tp=TRNN/tpid=9140754838064038298/gdpr=0
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1786), with no line terminators
Category:	dropped
Size (bytes):	1786
Entropy (8bit):	5.354624937833966
Encrypted:	false
SSDEEP:	48:pNaCU94kpX8XWs1As9G1ldyl3cE/MkbM0UJr35n6QS:pNaCer2wdy51p6Jn7S
MD5:	4EB4D864CD8BFBADF410DBFEA963486F
SHA1:	2AE6C7649098DBA4080BB9319B70E2F59422259F
SHA-256:	2B31844220BF67B584A2EBB4F98FD35FB6BB6F9C1FB90738DDA853D4F41B3108
SHA-512:	93A5DF25D2F13F867F759D715147F9EF1F697C5701B7780785F55781714D71501B8B75B1D133DD6745716BD5FC97EF8B94AD431F0A9122000DDB6FCF9C426DBF
Malicious:	false
Reputation:	low
Preview:	import{s as v}from"./hl-347bfac4.js";/!js-cookie v3.0.5 \| MIT/function d(e){for(var r=1;r<arguments.length;r++){var t=arguments[r];for(var s in t)e[s]=t[s]}return e}var C={read:function(e){return e[0]==='"'&&(e=e.slice(1,-1)),e.replace(/(%[\dA-F]{2})+/gi,decodeURIComponent)},write:function(e){return encodeURIComponent(e).replace(/%(2[346BF]\|3[AC-F]\|40\|5[BDE]\|60\|7[BCD])/g,decodeURIComponent)}};function f(e,r){function t(o,a,n){if(!(typeof document>"u")){n=d({},r,n),typeof n.expires=="number"&&(n.expires=new Date(Date.now()+n.expires*864e5)),n.expires&&(n.expires=n.expires.toUTCString()),o=encodeURIComponent(o).replace(/%(2[346B]\|5E\|60\|7C)/g,decodeURIComponent).replace(/[()]/g,escape);var i="";for(var c in n)n[c]&&(i+="; "+c,n[c]!==!0&&(i+="="+n[c].split(";")[0]));return document.cookie=o+"="+e.write(a,o)+i}}function s(o){if(!(typeof document>"u"\|\|arguments.length&&!o)){for(var a=document.cookie?document.cookie.split("; "):[],n={},i=0;i<a.length;i++){var c=a[i].split("="),l=c.slice(1).

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 800
Category:	downloaded
Size (bytes):	313
Entropy (8bit):	7.2824244049599
Encrypted:	false
SSDEEP:	6:Xtfi490IcHi9bL0VKdIkAV3WPpaQP8iSnvMqZqNhhHt76//Xll:X/WoMVKSkAtIpxnSnUiqZx63ll
MD5:	317B31D8DB4777F9962B987E2B4BCD18
SHA1:	A6B19C549B6457057738D752A2FCF316DC95E81B
SHA-256:	A7042FD0EDC4E2BAE2BE716F8B7C5B6B0641640E6680C05FF04EB7566EB67D9D
SHA-512:	7E6474EFC0927EEBA7B3B288018DD8C0C0E383ADFB4974A3D8B4A4009E79D8A41ECBDD3C3679FD9BB183F020CAB93DA814DEBF3F74F19F7A85CEB224CC823554
Malicious:	false
Reputation:	low
URL:	"http://fonts.googleapis.com/css?family=Droid+Sans:400,700"
Preview:	...........;O.0.....oi...'m.t!m0e(R.AQ...Hb../!.;v..X....sm.s..'..y...nr.r#....k.........U...e....K.y..]....SV.%..........G%.o....3..mb&....r8......{j..............y.^B.D.....p.#...X...*.iftq[.....8.B.\Ka.........!.Z..L1.......sE...r<F3...(..'la......X\..J.[..!$Xj....4._....F.-.,`..............@4. ...

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (37102)
Category:	dropped
Size (bytes):	71682
Entropy (8bit):	5.376716366501736
Encrypted:	false
SSDEEP:	1536:TBPQMdY3qFLbx+Gc6YZSmd8N9poPekUtHCIVTC:+zGbma9poPtoI
MD5:	F87DA472E47DC575B6CB8DC377D18916
SHA1:	BFF262654AE71F3BE0A658CFBE5A53C787C05D55
SHA-256:	5C38207C92F3650EAEF6616521C8B1E0A03CEB384030F1C2B67CB75E25925CA8
SHA-512:	AB95E18632CF6D9A1D2DED963BB26DD988356F8B23C84FB2FE3FC5E6D0347205196343C874891DF45CD3A800BA60A2F2E96BD5745B941AF7FB8C301453F592DD
Malicious:	false
Reputation:	low
Preview:	import{c as jt,g as rp}from"./hl-de833af9.js";var Je={exports:{}};Je.exports;(function(Qe,Ve){(function(){var o,rl="4.17.21",ke=200,il="Unsupported core-js use. Try https://npms.io/search?q=ponyfill.",sn="Expected a function",ul="Invalid `variable` option passed into `_.template`",je="__lodash_hash_undefined__",fl=500,ne="__lodash_placeholder__",qn=1,Ii=2,at=4,ct=1,te=2,an=1,jn=2,Si=4,Tn=8,ht=16,Ln=32,gt=64,Wn=128,Ot=256,nr=512,ll=30,ol="...",sl=800,al=16,Ei=1,cl=2,hl=3,nt=1/0,Kn=9007199254740991,gl=17976931348623157e292,ee=0/0,yn=4294967295,_l=yn-1,pl=yn>>>1,vl=[["ary",Wn],["bind",an],["bindKey",jn],["curry",Tn],["curryRight",ht],["flip",nr],["partial",Ln],["partialRight",gt],["rearg",Ot]],_t="[object Arguments]",re="[object Array]",dl="[object AsyncFunction]",Wt="[object Boolean]",Pt="[object Date]",wl="[object DOMException]",ie="[object Error]",ue="[object Function]",Ti="[object GeneratorFunction]",xn="[object Map]",Bt="[object Number]",xl="[object Null]",Pn="[object Object]",Li="[o

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2323
Category:	dropped
Size (bytes):	1396
Entropy (8bit):	7.851397425314581
Encrypted:	false
SSDEEP:	24:XmJxD6QTBP4CADUACL7KwqjOk+B2hd0FDikTxS5CXX4kc0gEjHOYRiUKIsZ:XIxDBBDAYMuFJTxS5zQg70K
MD5:	876C54EB7BA06C8F2DA9CA076754CBA4
SHA1:	79D8F4747AC0176F816C1A44B7325277C459AF69
SHA-256:	417F1430130C675AC46DD0A735B15DCE88C1C1A56C7C24F1FBE475071643E3D7
SHA-512:	DBA58DA4DD4C4F0BDAF0D7B3E7231546CDC79E0B5595247D4C789554CF4515E900C90AEA6DE15232817042F1FF0F20FFBDDDBF4D6B12DF9A58507700632BD1F6
Malicious:	false
Reputation:	low
Preview:	..........tV.s...W.>.#U..i.M...ir.L.vH.K.7#......-...7..Ko......Z...Of..Nm^j.....!.V.....Wh.D..{_'e.....4.M6c..\|.<..$fP..Pql-..B.J......U.tv:..i.u....Q..B...9.T..au....3Y......R..k.B..f...3-..."0.d..'...'.<YZ...........:S.\..pI6.c.E...:5..........%p\.t.....Q.Z...yZ&x8).sG\|.._+i.YT.,..1...p.1!..T9.4.?J+..f..5d;........^...l.[..<..&......'4.gem..y.o..6.).Zo.>2..DE...lX...,...=F.c..p.R?...8...6.G...q.B..S.1...1..x.o..@.......\|.b..._....4.e.N,..-.{..,....q.c.....IAM.....84...U."...Gi.w......J.Z]h....sL.4.H.n^M...s.n....1..Y...{.......~......\.....A.h....2..'...\|.~......)..b...5..J-.-.......\|....z.OVl..mLJ.e.n....*...y.`T....k..7.9E..5 .....B[..}E..<...[A.Q...?Yv.\..84..A..8...p.BD..H.:.@..\|2.q+..P4\...@.?-....'.+M...=Eu,...gQ..g....~..E1>S?\|~.....]...Im.{..<\|.........E.79..{.~...oUm.b.Bo.....CP...a[...2..p."O..co..~s........Y..7~..gl..{....^..q;.....I\..lieA ....gM.n.....1y..#B%WE)..'i. .y..BY.q...6.w.......3..U..y.....8..x.R.....]

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 2552
Category:	downloaded
Size (bytes):	1057
Entropy (8bit):	7.814823379550711
Encrypted:	false
SSDEEP:	24:XC/2dl6fHmWd0Boc3gx66QmklMNH+3PTaLLr/Hnv7+CB:XC/2z0G5oJXQmkE+32fr/HjpB
MD5:	5A0814A665502854E1FDEE6A88F283B6
SHA1:	98A21871B6CC969562C8EBE9A7C020D03F22B2E5
SHA-256:	F3109C54C01B9DBF8C7CAC7008C5D03897BEF6F7D1A93A8A37806AAFDFF8EBE3
SHA-512:	A5BC2B03A546B8275B7FAFE809FC2D49ED54C7B2D4E9F637565459C1D7FFFD77C6F424630ABA305625956473549178A1F04AD98B9B3398DAFAE2B49F862108D6
Malicious:	false
Reputation:	low
URL:	http://football-booster.freevisit1.com/register-hsfootball.php
Preview:	...........V]o.6.}7..p......H...%.]..{X7.I.!......S.F.v.&.}.d...'..,...{.{y.d...'g..y......?.T............SE...u.......i^y.......Th)..j.6...>.w.$i..7.8....0%-J.z3..2.p...f..\r. .Q.i.kR....&\|.z....DU5.\|$pE.c.Y.O..j..Y.J.e..K..V.....X.I....k4.Z8.h.:........5.s..s.......<KG.....B^.......{&Jkd\Z..T...3...V../.....f\.Dc.52.?.0w.........A.7......Gcn.H.ncT...o.3......x!c`(-...B.9N..n.2[DVb.._...r31..s.H.....o..rF.vf...d.R...uin...Tr.....giX...].FU4.....R.R"3$.PA4...C.p).D2....M7.<...z.H..l.....Z.R..8.;:<...1RQ]p.C.....P.M3>11.....c8.o.(.3xupp..SB...jMM5J.hb.\|H^........\R...s.d.m.0.y.i....t.zc.]..\...,...3,.....FQ.?...?...%..'&A.vJF*.....[=...r.S3>]..... .S..$..Ed..}...._.........}.v..s....w:.a......NpC.....S....5s......\^.v:.._OL.....K...C7.?\|.K.........a..a..o.>..7.?....u.q...'..;.>...8..2.&.J.3...@7.u.Ev..(..6.R.nlA..........tJ....n..(..........t.S..........-...{]W...ex.ww......}Z.(.....W..........2+..>.Pj.S/..R]....r...^..F.....V.Y...

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1146
Entropy (8bit):	5.163420119917784
Encrypted:	false
SSDEEP:	24:2d6OVsiLwRLwEnpeaxM2zu0RgJFiWffijkTBlL2G1T:c6QFwRLwKnJfjkTB92G1T
MD5:	3A041AB34846A03A722253732BE6B6D0
SHA1:	4E22A45FDB2A6CEBDD87C7F19343B7F0A63C1B2E
SHA-256:	16C5D058AFA19D470C9ACA69872D9906607F6EFDD8B1251C79BA7107C3381CC8
SHA-512:	4FE8AD447447D16B57589E5640F38466FAC4078FC41469205E2CC8E23DC2C8903B8BD3815BCE6193001480461160596306AE3ED67F93607ABBCC8D0BC7D80091
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="203px" height="98px" viewBox="0 0 203 98" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. Generator: Sketch 52.6 (67491) - http://www.bohemiancoding.com/sketch -->. <title>tag-bg</title>. <desc>Created with Sketch.</desc>. <g id="..-Pages" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Sport-lp-dymanic-text-(desktop)" transform="translate(-1227.000000, -251.000000)" fill="#EFE06F">. <g id="Intro" transform="translate(450.000000, 211.000000)">. <g id="price-tag" transform="translate(776.000000, 35.000000)">. <path d="M42.3728019,5 L199,5 C201.761424,5 204,7.23857625 204,10 L204,98 C204,100.761424 201.761424,103 199,103 L42.3728019,103 C40.8711884,103 39.4490809,102.325124 38.4994959,101.161882 L2.58112853,57.1618824 C1.07886986,55.3216156 1.07886986,52.6783844 2.58112853,50.8381176 L38.4994959,6.8

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 333028
Category:	dropped
Size (bytes):	95054
Entropy (8bit):	7.9972441911609975
Encrypted:	true
SSDEEP:	1536:bWUvFMyUql6tK2zwinY9kwZ938GtDd6qCMCZX2dxouzRr78SEGWeZweEYej7c1PV:bv+/BtK2wiJ9GRKdIzV7egweErj7o7Px
MD5:	A6826DC8114B81F848B56BFABE99AB80
SHA1:	CB7B97067980A6E4EA7D37C07484E771E7F3931C
SHA-256:	338FF02EC40B475ACD883FEA984FB61FD6D83A58F09E2912BC83F49F31BADCE8
SHA-512:	F7B456B1AC8F9FCC79443393CD2B596517B158D16037C2776F43FCBE4EEA6A93798777CFF2EB9F41494D027A9A19AA4FA015CA7C84C1F87421D426D0EC6A65DD
Malicious:	false
Reputation:	low
Preview:	...........i..F.6.}".?.h5...,R......%/.".-...`G.H. A.E.T%....9. ...g.{#.T ..z....q...>..........`0.x8....<...y#v.....5....G;.{7x.h2.<.D..a._\..!.$.6P.C......D.......1Y...{\|...<...vy.<..M.......n...M..C^....x....R..qU.vyts.v...D!.^$..2...a).?>.3(.X.{...j.]X_1.3~.>6a<.?...7.........?.c..1...4"... .8...w...I!..1K....Vx..w.p.+.i4....eR.z.,.3....J.w[..b8.....w.c,.kG.....].2..v.M$v.cPI.."......g...pr4.K..UQ.Cv...$x...d....[F....Z=..}..!.N..FM..#./.....D.y)^....y.e...<^.v..Sz...oJ$......H(..w[^&...z........7....D...1.S/..p..H.<..s.~.cg.Ovb[.Xx..:..3.L.....=.{...0>...\S...:.../.f..r...O.s.......+..^...NyS...<..d.....E......,.{...d.w{.%.O.1..J..h.....(.b..H.X..Ff.r8m......m...R.Lx\|.......A......R..ys.3.D!q.....Y.....n...5......f.e;........a4.yQ.;..,.#...).@A.......>.....T.J.ui^...(.y.Z......N@.K6..h......]{.7...9...q].=,.f....m...O.y.P.s.............:..J.9$..u.'\|..e..<>.nK.{V.7.i...?.a2...=.x.1.V;...Fr.C..pF2)..*....l~.{2.YW.BU......To.I.v.U.

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1842
Entropy (8bit):	7.844880044441599
Encrypted:	false
SSDEEP:	48:CpBmStVyR9tjRq82OyNFQVYhMyTkRJO05Z:OuRP9q82OyNFQVY3CJOaZ
MD5:	C69C796362406F9E11C7F4BF5BB628DA
SHA1:	E489CE95AB56208090868882113D7416ABF46775
SHA-256:	4DAC0026FBFA2615DCE30C0AF12830863FE885F84387A0147B9E338F548D5D82
SHA-512:	D3AD560ED0FD29BE7D2CC434694F09E5A6FBEA8B29C0611AECB54A1B73B4D722C53F42A19DAE9E3D5D358444E50FB8FFFBC39D67CE751BDBC8C861F6F95D3162
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/images/branding/product/2x/translate_24dp.png
Preview:	.PNG........IHDR...0...0.....W.......IDATx..Uw.X...........b.....pb.Sfff.6....3o.wvF.(..r.u..9_\|...Is%..D......Xz.c....;...y;.....&#.l......H...X..s..]}..5`aZ..D.m....uk.c..i.\|.H... I#yB.7.0..._E.".h..Xt.....9.4.......0:y.....F.ua^.\|.....K..G..b&2;.z."...B/l$..s3.@..G..Z..`...p..EUU.hni...aZZZT......."...H.Z.....H....<..g.......U.........f."../...Gg...$....<YTU.p.....ND"$^.5!..@.8....Nhj.f.]......"..B..i..,...oh.5.....F.L........;"C...bO....Qa.G..!.....4.._....l..N.].....g...PoD....1r{......X.1..!.....}.o....=..^6i.{.......9`i...\~...Dyy9..`..D...n>.....7:.....1...t.(.D.=>....DH.0...K.Mx....,....$..1.1.P.T.............@'..6...Kv..e...D.?.X...k.2..\|l.$m&...K/.c......Vn....V ...`I......8al.zT.=..+Wr..%?.X.`..g....,..[...nc..:!..$.@2..3.\|....sB...&...a.<..}).zX.Q.)5....X.1..bk.....Vn...C#.c......mx.=.[...,.r.G....OMS....e.06.#.+..8Fne......B!...%..,........W...*.F..x#.Vv....I..c(...x5..u.....`hP.......&>......8...D#Cg.v.{Hyb.v..8.K7X`.....\|O.z.

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	271686
Entropy (8bit):	5.42763806611894
Encrypted:	false
SSDEEP:	6144:rEnjNomBnL1GkWFe2MwOo1uJj3QeoA7Y/BqGL:raj5BgFxdOo1uJj3RoA8j
MD5:	A25C202C42E1158A0175D4F99A2478E1
SHA1:	EE6279B8BA242E46E96524165E928491FD1DA8C3
SHA-256:	561857A14F88D815F5A39826E46E927BB51C84869888B0A5EBDCE86BBA6962E4
SHA-512:	0EC7BD01D8D64D34AE01ED7B05BE1B7291AC4D3CFF38649B0D22CE8CB6CBD8C6963D7E85137673595CFE57BE1E92F42A2F523BD1DEDB3D6CE201E1A03A328441
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-347bfac4.js
Preview:	(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const s of document.querySelectorAll('link[rel="modulepreload"]'))r(s);new MutationObserver(s=>{for(const i of s)if(i.type==="childList")for(const o of i.addedNodes)o.tagName==="LINK"&&o.rel==="modulepreload"&&r(o)}).observe(document,{childList:!0,subtree:!0});function n(s){const i={};return s.integrity&&(i.integrity=s.integrity),s.referrerPolicy&&(i.referrerPolicy=s.referrerPolicy),s.crossOrigin==="use-credentials"?i.credentials="include":s.crossOrigin==="anonymous"?i.credentials="omit":i.credentials="same-origin",i}function r(s){if(s.ep)return;s.ep=!0;const i=n(s);fetch(s.href,i)}})();function Ro(e,t){const n=Object.create(null),r=e.split(",");for(let s=0;s<r.length;s++)n[r[s]]=!0;return t?s=>!!n[s.toLowerCase()]:s=>!!n[s]}const Ee={},Tn=[],ft=()=>{},ed=()=>!1,td=/^on[^a-z]/,ws=e=>td.test(e),wo=e=>e.startsWith("onUpdate:"),Oe=Object.assign,Io=(e,t)=>{const n=e.indexOf(t

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
URL:	http://ww38.watchdogsecurity.online/track.php?domain=watchdogsecurity.online&toggle=browserjs&uid=MTcyNTk4NDY5NS42MTQzOjA2Y2FlNmM1NTY4MzUwZmYyZjAzNjY1NTNiMGI5MjA1ZTA2MjNkYmIwY2QwMzc1MTA0NjNiMTdkNjA5NzIzNDE6NjZlMDZmYjc5NWY3OQ%3D%3D
Preview:	....................

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2473), with no line terminators
Category:	dropped
Size (bytes):	2473
Entropy (8bit):	5.082379252482783
Encrypted:	false
SSDEEP:	48:LE7AniIMBzE3BLVER/EGTF0AkTWKTFyAkTH7z5TFsSAkT6muTFcAkTWYXe7TFeCX:wAn/Ao1VER/ZmOuDzYXwe68WeVAn
MD5:	4558930A6247A45B156E6751C1D08796
SHA1:	23DE1FFF32E6692391522AD6CE5593ED8015E822
SHA-256:	C33AF674BCE98F679857DC2BA8FE90F64F04D7C892E49AA95A79E6DE79827690
SHA-512:	D6E7750DAFFDF71853D8D8E4586E8AA13BC058E2A0C4C508307E8ABB630E0574E84D0CD085F89A60F6088A5367055120AB1F056076C39A4D1D10FD5E14F15205
Malicious:	false
Reputation:	low
Preview:	import{j as f,b as i,c as n,n as e,p as a,H as u,g as t,F as x,K as v}from"./hl-347bfac4.js";import{_ as m}from"./hl-2dfa470a.js";import{_ as o}from"./hl-543ebdf2.js";import{_ as b}from"./hl-054a7ece.js";import{F as k}from"./hl-ea83f4be.js";import{_ as g}from"./hl-6c50209e.js";import{_ as r}from"./hl-5cd68a50.js";const p={class:"form-step form-step1"},h={class:"main-block-wrap"},$={class:"content"},C={class:"container"},w={class:"main-block"},B={class:"left"},F={class:"form-wrap"},I={class:"underform-image"},M={class:"right"},N={class:"unlimited-inform"},T={class:"unlimited-inform-top"},V={class:"unlimited-inform-label"},j={class:"num"},y={class:"unlimited-list"},J={__name:"MatchCommon",setup(D){const{getCurrentImage:d,getCurrentText:s,getDefaultText:l}=f(),_=[{text:"text.block.5"},{text:"text.block.6"},{text:"text.block.7"},{text:"text.block.3"},{text:"text.block.4"}];return(E,H)=>(i(),n("div",p,[e("div",h,[a(r,{classes:"background-wrap","image-data":t(d)("background"),"disable-contex

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=10158/tp=TPAD/tpid=5a494773-b3c5-4363-89b4-d92c8335b5ac
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 438x389, components 3
Category:	downloaded
Size (bytes):	29351
Entropy (8bit):	7.911718313481693
Encrypted:	false
SSDEEP:	768:65UunzJLihtBq6S/gTd6b+egDI/6XGYYq:6GezxihY/gdEgDwgpYq
MD5:	629E995E18415BEF426C612D6262EE74
SHA1:	DCB558BB3F72188A48E88036164F1D4BC8E734C0
SHA-256:	55D600D6E00926B5743C4F576EA593DA8511DE0A0436C3FAD35B4C636D172616
SHA-512:	1BC5377FD7D95A30B2C8C3BAEDEFCCEFA83FBC6483F8E48260490F75BF5920AE6AFA1471B4BF71C7A8ACEB69C1C661F1D67D2F59254D938E0BC3C37138893118
Malicious:	false
Reputation:	low
URL:	https://i.imgur.com/eGsgDjP.jpeg
Preview:	.....C....................................................................C............................................................................"..........................................t.................................!#..13AQSW...$4CUVXacqs........"%Tr......25BDRYbtv.....&6Ed..789u....F..GHefgw.....................................@.........................#..3CS...."$2Tcs.....4..BRUr...%Da...............?...................................................................................................................................................................................................................................98an.A..v5G.YQ.....c..=.;.....q...xA~0...@....`9.8.`....._.8..... ...x...<z.w....0x..../...............=.;.....q...xA~0...@....`9.8.`....._.8..... ...x...<z.w....0x..../...............=.;.....q...xA~0...@....`9.8.`....._.8..... ...x...<z.w....0x..../...............=.;.....q...xA~0...@....`9.8.`....._.8..... ...x...<z.w....0x..../....

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
URL:	https://track2.securedvisit.com/sync/1540_03681?id=JTyKAQZHM4-7zcR_Qvazq_dw
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1280x720, components 3
Category:	downloaded
Size (bytes):	161648
Entropy (8bit):	7.97995516752938
Encrypted:	false
SSDEEP:	3072:7TNSsr7OT60PCA9KI8ezGX9fgqRWjKj7D8LbALEGiLVQkjBAEBd71C1:VSOy59nKX++lMbLJtAERe
MD5:	D0842F6501EAA1171659498C17E99240
SHA1:	E482310A26AA7CB97D080AD72D7DC7CD44A2A678
SHA-256:	C8AC88EB796354974A360EDE43A4DBFE73721849DE40272B7EB178B78AC2882D
SHA-512:	8F9834CAD7B10F31F8DBAC1C0B9B625264B6128DB92B3DA42968314CF3A1121A5EEFCC60F044A95AA78C6EFA4A422642B00503307CE6617110BBF63129689395
Malicious:	false
Reputation:	low
URL:	https://i.imgur.com/jWsQC86.jpg
Preview:	......Adobe.d........C....................................................................C......................................................................................................................j.........................!..1."AQ..2aq#BR...b......37Urtu.......$6CVs....%'45FSWc.......DETde..&..Gf....................................?........................!1..."2AQ.BRa#bqr.....3...C...4S................?..c~....e..k.F.F.L.0.(!A.H....X..../....L.`vH...N...L....0....p.T.KB .F.\... .U.vR..j4.5..".>(.....#.L..P.p.)..........8.@p....H....K`..-..Q..WW.wQk......v.pf.F:m.5nG^.....n{.J.mgLA.).q.(.WI..28...l..W....M_......dMN)dw....;.5J......3....[mu.6rA.0.m-..l..F..S..vz6.<...9.....'.9.....K.....c.2.N....9x.W......G.\|.h}.+n .F.W....kP.S-...uI.E~..h.....+........{@..Ydu.a9O.{.$..~...)m.......[......{.......#..}^..Gx..,.K..l..........P...Q.._...r2:.Rq.y_.x.....C..w`.9.^m..DB.b.L..........@...l&.c%o.=...[....(W...L..(pJ.a.`..RR...s1."j.#..n..<...)...:.

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	80
Entropy (8bit):	4.8315212271721295
Encrypted:	false
SSDEEP:	3:InEwpCkoSySv6yukbbkpBthrNQRY:wpoSySv6yF8pbNNQ+
MD5:	6C3CB0C896FB3EF4240F3E18D219E72E
SHA1:	E48A6E571CBFEE22F895E1670B9E78EFB8986CE9
SHA-256:	DEE40C1BA41B4078CD546F45D94CBDAABF099C24C547F9A72E4AE41F7E3CA548
SHA-512:	716B28433B67BB17ACBBB86514F6828928CAE2237730533E505126CFDD034C512084887228E37D0A62E3F82C64CDD7BF054284AD75503292F2E78D3FB422FAF2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISLAkRhkGy71Il3xIFDRVQj_4SBQ1a3e0uEgUNUopJoxIFDUC-9V0SBQ1AWQ9bEhAJb_Dasl61qZUSBQ2RYZVO?alt=proto
Preview:	Ci0KBw0VUI/+GgAKBw1a3e0uGgAKBw1SikmjGgAKBw1AvvVdGgAKBw1AWQ9bGgAKCQoHDZFhlU4aAA==

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3086), with no line terminators
Category:	dropped
Size (bytes):	3086
Entropy (8bit):	4.936965043296761
Encrypted:	false
SSDEEP:	96:qOU6betHDxD3cD8DJxvDJRy2zDJlzDJnPD:qB6bEjR3EkJVJI2/Jl/JPD
MD5:	DBFA8CC77F579801D76DE0F66884FEFB
SHA1:	5A7BB24128A121D9888F18D007AF73BE7EFDF253
SHA-256:	19DB809573714F509D3DD9575627BF79F17A28414F8EC774B6096C03D2FC5C41
SHA-512:	095BC8E58BD9CA5146534F9E335620C90259A5120400EF2B51E49CA7981B574C3213347C69E01814E93CD9EA710C7F5F344A6F60E18CB71F5F23AB5016E4A7D4
Malicious:	false
Reputation:	low
Preview:	import{u as _,b as n,e as r,f as o,d as s,i as m,_ as e}from"./hl-347bfac4.js";const k={__name:"SignInIndex",setup(a){const i=_(),t=()=>s(()=>m(Object.assign({"./skins/Afforce1Skin.vue":()=>e(()=>import("./hl-66f7ef28.js"),["/assets/hl-66f7ef28.js","/assets/hl-347bfac4.js","/assets/hl-2dfa470a.js","/assets/hl-543ebdf2.js","/assets/hl-054a7ece.js","/assets/hl-ea83f4be.js","/assets/hl-35a77ba0.js","/assets/hl-de833af9.js","/assets/hl-b2170ae6.css","/assets/hl-8d3e332a.css"],import.meta.url),"./skins/Afforce2Skin.vue":()=>e(()=>import("./hl-6705b6e8.js"),["/assets/hl-6705b6e8.js","/assets/hl-347bfac4.js","/assets/hl-2dfa470a.js","/assets/hl-ea83f4be.js","/assets/hl-35a77ba0.js","/assets/hl-de833af9.js","/assets/hl-b2170ae6.css","/assets/hl-0f2964b7.css"],import.meta.url),"./skins/Afforce3Skin.vue":()=>e(()=>import("./hl-4f5e375b.js"),["/assets/hl-4f5e375b.js","/assets/hl-347bfac4.js","/assets/hl-2dfa470a.js","/assets/hl-543ebdf2.js","/assets/hl-054a7ece.js","/assets/hl-ea83f4be.js","/asse

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 1200x800, components 3
Category:	dropped
Size (bytes):	169779
Entropy (8bit):	7.980738089316568
Encrypted:	false
SSDEEP:	3072:oHa4WD8xvRx1V0N6xv5UZ4wb4MJI4uhOsVonEeP4Ax+fna3B/5oqy5qSP/B:o61D8xoNG+4wb4MC4uhOBd7xSaYN5qSB
MD5:	BF3983E44C982A8BFCE433C2575F3122
SHA1:	E1A1EE3F137F58E37754AD973422E8A1CB06803B
SHA-256:	947C24A48340BD3282B046456A6316E06020EF973A80CC8B5F17A6E080A62000
SHA-512:	4B11877D7E48A5519C3ABBF3A29ED567AA9C7909ED685EB4B4F493C3CF6E6A39AE13EBA5AC430F1BBDE99B193C2494F6AAD4C7B05E35573A778037D0F54AD98E
Malicious:	false
Reputation:	low
Preview:	.....@ICC_PROFILE......0ADBE....mntrRGB XYZ ............acspAPPL....none...........................-ADBE................................................cprt.......2desc...0...kwtpt........bkpt........rTRC........gTRC........bTRC........rXYZ........gXYZ........bXYZ........text....Copyright 1999 Adobe Systems Incorporated...desc........Adobe RGB (1998)................................................................................XYZ .......Q........XYZ ................curv.........3..curv.........3..curv.........3..XYZ ..........O.....XYZ ......4....,....XYZ ......&1.../.......C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((...... ...."...............................................................................{UF....rl.D.=....W...U]=.5...........sX....{e......m.N@.Nb.(r..r.s..j.L....i.l).......Z...P.J....$...NxcDD...I^o4.o1...sP..@r...%Ax\|............`.\....*.bPG..D......pN.....]....Ei.

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (561), with no line terminators
Category:	dropped
Size (bytes):	561
Entropy (8bit):	5.15675789090985
Encrypted:	false
SSDEEP:	12:FaGHUxHNXdUM5dk4JTxobbOklfqaSonSTwh18Jf+iWBIDlBOjAxomKn:MYU7tUM55aHVqvsh18JtWBal7oPn
MD5:	82C05A88085D9AF63D207E855740A4F8
SHA1:	8021DD1A073D8DAFDE69FE4FAAB9BEDFFFA4D4DC
SHA-256:	065BE96E2AB363414B77164A1B150A3EA23BFFA1BCDAD135B6F1052167A99E8B
SHA-512:	D69D3CA89BB4E55121D9BA1B4C579FD840C5863EE8A73252BBCF95AF4AAA4858E6B71F218E5A2023A8B5A248283D3C634881E64E09938C5124FE22D8626CC1DB
Malicious:	false
Reputation:	low
Preview:	import{t as a,b as i,c as l,y as o,B as c,g as r,E as u}from"./hl-347bfac4.js";const d=["onContextmenu","innerHTML"],b={__name:"DivEditableBlock",props:{textData:Object,defaultValue:Object,classes:String,style:Object},setup(t){const e=t,n=a("isAdmin"),s=()=>{n&&window.parent.postMessage({textSettings:e.textData,defaultValue:e.defaultValue},"*")};return(m,x)=>(i(),l("div",{onContextmenu:o(s,["stop","prevent"]),class:c([t.classes,{"lp-builder":r(n),"hide-content":!t.textData.isShow}]),innerHTML:t.textData.text,style:u(t.style)},null,46,d))}};export{b as _};

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	3.9237100146972455
Encrypted:	false
SSDEEP:	3:CUHl/RPlr02mxhl/E5lmfpse:f9x0Rl/HBse
MD5:	3F386F5061436A0338A64E0910DB495D
SHA1:	599FE4A552C991A2B3CE5A1660732BF7B21FB901
SHA-256:	0AF3AAE90B7DE9FDCEEE2AB421378EA2F54C74BE81EF43FC6C1790A032755D80
SHA-512:	235479F42CBBE0A4B0100167FECE0D14C9B47D272B3BA8322BCFE8539F055BF31D500E7B2995CC968EBF73034E039F59C5F0F9410428663034BF119D74B5672C
Malicious:	false
Reputation:	low
URL:	https://tags.bluekai.com/site/2981?id=&google_gid=CAESEBOIyhDGTm3m62e39JhaVEE&google_cver=1
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........L..;

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	391
Entropy (8bit):	4.7474201749507134
Encrypted:	false
SSDEEP:	6:t6wfDpmc4slzTPl2O4UYaeLIT4W+KS4S1UpMTQpi6jUs8sh6B+BSmK0C:t6qFPUPkHSt1UiT6i6jUs8b0I0C
MD5:	8959DDCD9712196961D93F58064ED655
SHA1:	62AB1E38E7E9FBF58A04381B76C2D96A9C829F24
SHA-256:	17C7A89BF169C2EE400E31B042CEA68513F06B9CD7D1E8990DBEC800F0D771C7
SHA-512:	5E9EFFA313C30B351345DB963238B4AFD0728CA302FD79A853C80C89F042266D44CC1D29492520FB0FA80B47135E54E6963DFC21972F6B236B84C1DA2FAD809D
Malicious:	false
Reputation:	low
URL:	https://afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/search.svg?c=%23ffffff
Preview:	<svg fill='#ffffff' xmlns="http://www.w3.org/2000/svg" width="200" height="200" viewBox="0 0 24 24"><path d="M15.5 14h-.79l-.28-.27C15.41 12.59 16 11.11 16 9.5 16 5.91 13.09 3 9.5 3S3 5.91 3 9.5 5.91 16 9.5 16c1.61 0 3.09-.59 4.23-1.57l.27.28v.79l5 4.99L20.49 19l-4.99-5zm-6 0C7.01 14 5 11.99 5 9.5S7.01 5 9.5 5 14 7.01 14 9.5 11.99 14 9.5 14z"/><path d="M0 0h24v24H0z" fill="none"/></svg>.

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
URL:	https://cm.g.doubleclick.net/pixel?google_nid=lotame_dmp&google_hm=M2JkYjM1OWM2MzAzNzA0NGQ4NzY1OGNmY2I3NzEzMQ&gdpr=0
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	51
Entropy (8bit):	4.804490783020705
Encrypted:	false
SSDEEP:	3:QBRgyNq/HG9AikQvCwTRGfwY:IgymGfkQvvdGfwY
MD5:	249E99B53E1DE1399660CC58001D0119
SHA1:	632D3E79D045B398781031871BD66942C5CDF8DC
SHA-256:	A0327D5B1440C3E51A5D37E3E096BC71E4322EB355773469F8045383B7DE8818
SHA-512:	30EB2C23B50E55AA5889FB3DB4CDF5BC9E30067F4EC450202DDD1D444C9BD1F9D8541F373A4C9FCDF3A8A31AE38F8B92337E61E68C13D4D704FFC39FE16845C9
Malicious:	false
Reputation:	low
Preview:	try{_dtspv.c({"b":"chrome@117"},'6g49');}catch(e){}

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	120
Entropy (8bit):	4.580924306000003
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM+wMLts7CX9/gm6Kpgsyx9yGFF7vWGlp:6v/lhPfZM+wMR/C+Ody27Omp
MD5:	0E3A6096212EFDFFD9BE6C2DBEA24B1E
SHA1:	2771486BD2EF00F2DF8CF863758CF2C2879CEBB4
SHA-256:	42B601BC0D93DFCA6E350B46D113BF8E7FF9E40A87A0C57AB9B3C9C219062423
SHA-512:	D20B09E40CFE7A516141E85F33AEA53A31B1B03648171874CC660E90841583C06B41FAE334EC0F3157F14752DC3F4EA7E1B5920CB17C5A37499FAAC7F54A2ABC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sRGB.........gAMA......a.....pHYs..........o.d....IDAT.Wc````.......3......IEND.B`.

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1618)
Category:	dropped
Size (bytes):	153162
Entropy (8bit):	5.544303917583678
Encrypted:	false
SSDEEP:	1536:TR7h1tBtgm1xZPyjWDcrELdLk2GBlwJR2lUSI9YLvvG2H0gqHlcwXc/i5dOm/N9W:F+wulZlUSq0HHM15dHONkFka7g
MD5:	8BA8D4D551BDF4629B9018F4AA4E3704
SHA1:	ABD4604143E5D61A56536B22F18381565168DF8B
SHA-256:	B953CED324301FC1BABBD025A2F6459BF97E5A60A64072C80D9D2D6C393EB5C5
SHA-512:	40999FF8C79A5BC90AFED94789C17F693481EFDE672E016ADAE4F0DF6585F4DE56AB0B00B3BB38B501C4A0D5D8C47EE4BB3BD713983B3FA0F8D6D76A35A758B4
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"10378014824223738540",packages:"domains",module:"ads",version:"1",m:{cei:"17301431,17301433,17301436,17301511,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog"}};var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ca=typeof Object

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1618)
Category:	downloaded
Size (bytes):	153171
Entropy (8bit):	5.5444400637928615
Encrypted:	false
SSDEEP:	1536:1R7h1tBtgm1xZPyjWDcrELdLk2GBlwJR2lUSI9YLvvG2H0gqHlcwXc/i5dOm/N9W:X+wulZlUSq0HHM15dHONkFka7g
MD5:	F7E2F3423A5F70D24D44972F07467C97
SHA1:	EEB2133F8BDA6C755CA440CB04E83C5E8BCF8B55
SHA-256:	2CF5A1475F52E60AD607D1C9DA7C6C5B251329D68B3D076DFC35FA661E58944E
SHA-512:	575EC76406EF46CDB00B827497865231DA832217A77FA77F7C244660FF28BC4EFF6084B49A2F36470C7C706BEF6C1C2338915613F2C2707AB2D05F1DA5AD680E
Malicious:	false
Reputation:	low
URL:	https://www.google.com/adsense/domains/caf.js?abp=1&adsdeli=true
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"www.google.com",hash:"10378014824223738540",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,17301439,17301442,17301511,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog"}};var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ca=type

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	30328
Entropy (8bit):	3.663461882867988
Encrypted:	false
SSDEEP:	192:STvohNZo/O8HniPVcLUcizrTvoUNZo/O8HniPVcLUciT:Goh/8CPCLYznoU/8CPCLYT
MD5:	C03E1DA7F3C40AF33A117DC869FBB1AF
SHA1:	97CA127397C88DBEFE5859452311BF28E90ADE5D
SHA-256:	301F62F5421CC8F7AD0CFD70C257D4A7983BFC49C0CE8CDD99204BBA72B2F79D
SHA-512:	29B4A178B69370FA420132BD0720BAE52D7BFC6F0706F08CB03A2D6FE823DC7E3A673141CC17CA4CC0C3809354D155F5844F23AA57FFE281047EEFFB52BE791D
Malicious:	false
Reputation:	low
Preview:	// API callback.callback({. "sourceLanguages": [. {. "language": "auto",. "name": "Detect language". },. {. "language": "ab",. "name": "Abkhaz". },. {. "language": "ace",. "name": "Acehnese". },. {. "language": "ach",. "name": "Acholi". },. {. "language": "aa",. "name": "Afar". },. {. "language": "af",. "name": "Afrikaans". },. {. "language": "sq",. "name": "Albanian". },. {. "language": "alz",. "name": "Alur". },. {. "language": "am",. "name": "Amharic". },. {. "language": "ar",. "name": "Arabic". },. {. "language": "hy",. "name": "Armenian". },. {. "language": "as",. "name": "Assamese". },. {. "language": "av",. "name": "Avar". },. {. "language": "awa",. "name": "Awadhi". },. {. "language": "ay",. "name": "Aymara". },. {. "language": "az",

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (5494)
Category:	downloaded
Size (bytes):	5495
Entropy (8bit):	5.341987941511565
Encrypted:	false
SSDEEP:	96:0zwRxUK+izbI/TeSMVH2WLCseAcRvP+nvIDbkMoUoHuteDlgTB6l4ax/b6wrsuua:0sbUK1WTVMh2WLCXAcZWvgbkMoUauteb
MD5:	FAD677F38F0CD5C903985132F689F88F
SHA1:	20DADB99599100CDC6F4A4B26F3A8C841B19443C
SHA-256:	80D53788EE7131E72EF98AF73BF7738E45BC69BD277B3276AC5A4E13DA1DE96B
SHA-512:	F1CC036522D82E5D24D421B566E97D34FF0BD1F3701E9111EDCCFF12CC2569D51058E36CB0A0E930DD307BE7258A522ABA1F5C5FFD1DCB792024A5C4FA702EA1
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-ea83f4be.js
Preview:	import{G as R,b as r,c as i,p as P,H as g,I as E,B as A,t as T,u as D,J as w,o as V,F as d,K as c,e as I,f as O,g as p,y,d as C,i as k,_ as e,L as x,N as b,n as u}from"./hl-347bfac4.js";import{_ as f}from"./hl-35a77ba0.js";const h={__name:"RecursiveWrapper",props:{wrapper:Object},setup(t){return(m,s)=>{const n=R("RecursiveWrapper",!0);return Object.keys(t.wrapper).length>0?(r(),i("div",{key:0,class:A(Object.keys(t.wrapper)[0])},[P(n,{wrapper:t.wrapper[Object.keys(t.wrapper)[0]]},{wrapperContent:g(()=>[E(m.$slots,"wrapperContent")]),_:3},8,["wrapper"])],2)):E(m.$slots,"wrapperContent",{key:1})}}};const S=(t,m)=>{const s=t.__vccOpts\|\|t;for(const[n,l]of m)s[n]=l;return s},B=t=>(x("data-v-b7d2fe63"),t=t(),b(),t),F=["id","onContextmenu"],j={key:0,class:"col"},N=B(()=>u("div",{class:"row row-sm username"},[u("div",{class:"col"},[u("label",{for:"username"},"Username"),u("input",{type:"text",name:"username",id:"username",autocomplete:"off",tabindex:"1"})])],-1)),M={__name:"FormBlock",props:{se

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1618)
Category:	dropped
Size (bytes):	153187
Entropy (8bit):	5.544509551631531
Encrypted:	false
SSDEEP:	1536:RR7h1tBtgm1xZPyjWDcrELdLk2GBlwJR2lUSI9YLvvG2H0gqHlcwXc/i5dOm/N9W:b+wulZlUSq0HHM15dHONkFka7g
MD5:	CD506111102CFE8A699325FE3290278E
SHA1:	461869A2B65D5CAC0F9EDA4C8D5BE6A4B21361F2
SHA-256:	82F1976A2A2C72F9BFD4D69E616782C2AD5B241AEF5C61E2EA45B0DCEAAC7113
SHA-512:	3C2BDBC6DE813DD172CA4724D405018D1A967D1C2275EA9ACB7EF00A285AA79A507F4846A70A68BF8E8B24C9351BBF14CA2D26B903582A90536A3DCCA12A0A95
Malicious:	false
Reputation:	low
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"10378014824223738540",packages:"domains",module:"ads",version:"1",m:{cei:"17300002,17301437,17301439,17301442,17301511,17301515,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog"}};var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	377
Entropy (8bit):	5.221939068801587
Encrypted:	false
SSDEEP:	6:51bQdhb13LkVVXI8mgO9lVhnmUqZzwGdDVTYqL1+LD+mMkuc1zlCBbAm+RbDRWP/:51bO513QvuHnmVZkGdDJH10D+xc15CZj
MD5:	A591F1753586053E662B09E65F7F486C
SHA1:	8076F19D8B57036AFED609FBAA10C4AD1A1D2C55
SHA-256:	228B0DE25E3387C3CE7C37A38E2BE677D1D040B405951ACC0412AE48E44156CC
SHA-512:	355BDAB99AE62215C3BBDD1F49EC83AE67DAD7BFC59755B0AE83A546FD3B898695E6F4AE9697045D4C25EAFA745C978C31CA7E5C87CCB77BC8FB1357F2498679
Malicious:	false
Reputation:	low
URL:	https://s4.histats.com/stats/0.php?4891773&@f16&@g0&@h2&@i1&@j1725984674016&@k40473&@l2&@mRegister&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:73742532&@b3:1725984674&@b4:js15_as.js&@b5:-240&@a-_0.2.1&@vhttp%3A%2F%2Ffootball-booster.freevisit1.com%2Fregister-hsfootball.php&@w
Preview:	_HST_cntval="#3Vis. today=9";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);.b.async="async";b.type="text/javascript";var a=document.getElementsByTagName("script")[0];a.parentNode.insertBefore(b,a);}catch(e){}}();

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 2784
Category:	downloaded
Size (bytes):	1115
Entropy (8bit):	7.827402788785614
Encrypted:	false
SSDEEP:	24:XMZIJNLIesHpKlKHQIg25lv4EgjZuCaAAMdG9tmZTPbONBj4aDo1:XBJNkJKoQIx5lv4buCAuTTEE1
MD5:	8F0262270625132D5408B7A0549922CF
SHA1:	0C2C97F9E54564E514A5B5923E914CFE8F8772C9
SHA-256:	F10FE48FF60E5921122D90AC7375F2A504792B3C27997A88C62D47C8DAECDF9E
SHA-512:	7E6EA338E3AA52EA09138671FAE7B3FF83BC3C290F6CA4CB25867F653B8A7BCB560CEBBA27280C0EFEF133CA95C7EA052CCF1CC0FD6F7C44C611D971A8751762
Malicious:	false
Reputation:	low
URL:	http://football-booster.freevisit1.com/dmca.php
Preview:	...........Vmk.G.........Y.B)..9.. ~.q..................8$-..p..9.G..i.........4...E.\............\.....Y......?......=<..^].......jq>.lq..g..n..>..a.-..`".....g..``m...x[....~y.3`(A..K.Y..5{O!p..vc.Q.p:.(`....O.E.n...H.h."`..C.8..RP.Q.L....v].]bT.t.1.....m8V..!./jC..zv.....G...%... .\.+.-..{.JhQ)1zhP`C...b.1.....+AL..4cG.sx.c..`V.D.@Fz.}..pB.\..j..3.c....mX....qK.Y>o{QKr.%..X.r..>.C...A....K&.C.S;.z.Iq.'U.>..j..u)........C..el.}.9.^..%.X..s.....qQt.<...h.S....s`I.%......\|g...,;y..1\|F...@..&....(......=...Sm..a..)...w...t...F>+^..l.j#b".1..-.<r...WvVq7...3.r..&&..J.(....Y......f..%....'.{.-..h..zO5....eqd;.Q..b.9.....J....Z..W....a'm..w....=.@-..,.D"..l..S.,.c.S.d..{w..a..e{kpK.!....>h...i.}.5.Rjg..../.:...#L..c3H$...I..DQ'Iev.d..#.....Y.B.c...H.g.........l.-.S...5ge..Q.%....8.......g.v...o.;.....M.s?.s}B..\......:Z....}...E9$..5...+.u80._........-.K.....2...IT.v.v...\|..b@uM.k!.'...s...W.m....[.`5.N.er\.7..)..i].X.\|g..4....F...DvN=G:..O.=OI.A.}..

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	dropped
Size (bytes):	268764
Entropy (8bit):	5.57517703391306
Encrypted:	false
SSDEEP:	6144:XzF0v4165pwBT83QYkvBfBxafPOXLK+N5gnDW:Deve65iBT8RCgnq
MD5:	B3AC3B723A6B4DFC028105C1EA80A8A8
SHA1:	2D2B8266FC4C8F079B95D1FC87FDC58A4F3450D2
SHA-256:	3BACD134A8AA493C041355A9CD9BDFFB7B00952EEBD41A253187B931E7008386
SHA-512:	0B7CC361AB1FAB4D8921AE3B646A897252B05AB6C65C60328050AF4F009105C85B5E15C47D08D0BF85A1F35CB4D4CD858BBECC68C0726320576C1759FA0A1F04
Malicious:	false
Reputation:	low
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":7,"vtp_value":true,"tag_id":17},{"function":"__ogt_referral_exclusion","priority":7,"vtp_includeConditions":["list","sports\\-stream\\.live"],"tag_id":19},{"function":"__ogt_session_timeout","priority":7,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":20},{"function":"__ogt_dma","priority":7,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":21},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEm

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1618)
Category:	downloaded
Size (bytes):	153187
Entropy (8bit):	5.544500781057
Encrypted:	false
SSDEEP:	1536:LR7h1tBtgm1xZPyjWDcrELdLk2GBlwJR2lUSI9YLvvG2H0gqHlcwXc/i5dOm/N9W:d+wulZlUSq0HHM15dHONkFka7g
MD5:	C876E20CB2E79F48A909D47CA7DB0DD9
SHA1:	2B180552CD788FF0B7D7449737BD5F6AE4477E9D
SHA-256:	7ABBE231ED1DD4A24BBB716766454AB23F1FCC56C7900F739263CC4FCC082628
SHA-512:	AB657E74B95463B7E758CF43AD7695E35A53E6A31477448584F34B88E78BCC997B44A2E5C607EFC305119076733B72331B05804C9726806F4A73D212682E32F5
Malicious:	false
Reputation:	low
URL:	https://syndicatedsearch.goog/adsense/domains/caf.js?pac=2
Preview:	if(!window['googleNDT_']){window['googleNDT_']=(new Date()).getTime();}(function() {window.googleAltLoader=3;var sffeData_={service_host:"syndicatedsearch.goog",hash:"10378014824223738540",packages:"domains",module:"ads",version:"1",m:{cei:"17300003,17301431,17301433,17301436,17301511,17301515,17301516,17301266",ah:true,uatm:500,ecfc2:true,llrm:1000,lldl:"bS5zZWFycy5jb20=",abf:{"_disableAdRequestForNewConsentStrategy":true,"_enableNewConsentStrategy":true,"_fixCtcLinksOnIos":true,"_googEnableQup":true,"_switchGwsRequestToUseAdsenseDomain":true,"_useServerProvidedDomain":true,"_waitOnConsentForFirstPartyCookie":true,"enableEnhancedTargetingRsonc":true,"enableNonblockingSasCookie":true},mdp:1800000,ssdl:"YXBwc3BvdC5jb20sYmxvZ3Nwb3QuY29tLGJyLmNvbSxjby5jb20sY2xvdWRmcm9udC5uZXQsZXUuY29tLGhvcHRvLm9yZyxpbi5uZXQsdHJhbnNsYXRlLmdvb2csdWsuY29tLHVzLmNvbSx3ZWIuYXBw",cdl:false,cdh:"syndicatedsearch.goog"}};var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 1280x720, components 3
Category:	dropped
Size (bytes):	121151
Entropy (8bit):	7.96321334734524
Encrypted:	false
SSDEEP:	3072:7Z4tbyzsnhT2mV45pojgwVhdN0e+uhxJXQ1Nky2:KtbRp2mV45QhD0Oab32
MD5:	DC530487A5BAA6FFEFECFD4883F67576
SHA1:	34B4A90530E4214909B07AADA49F0D7B16285D21
SHA-256:	2BC255E209104D49886BA5AEE4CA0705DC4903A484A7EA725E5A0CE93A434B9F
SHA-512:	BD25BEE822F747315D3704D6A7663A1124F9F56121AF1ABF8B01F9A847CCCBF81483555019CAAF79E10CDE179E29BBF6D52C94E9FCF5DAC8EDAB02DBEA7CC658
Malicious:	false
Reputation:	low
Preview:	......Adobe.d........C....................................................................C......................................................................................................................V.........................!..1A.Q."2aq..U......#B...356RVbrst..$47.%CES.&cDFTd..'....................................0........................!1.A.Q."2a.BR..#q.b3..............?..[.PE...........................................jC.U...=....6.5<..W......4t...3.o..=.....P.....U.y..L......C>H2.j....J.L..{.....\|..hn.@.a...G.F......0..;Ex..[..T....%.>ey.:v.M...ON.....4td..3.*....0..b..v...E98....^.....c.K.w.W...n..T..vv.V,r.K.n.....v.......H7.o...c.>.\3..y~..fm..:R..#......i.. .rI[.R;..piq.,.W....\|.^betW:gKOR.L0......`..Au.u0...d.c...-......W=.{G.<..(.........................".c.{$......Md....R.Q....j...Y3.j.....T.Q.8J.....jx..d.?.>X.U....~....].{........6...VC....fG.....UR..$q..Tvc................M...%_:^X..VV/yq.Q.........V......q.vUEV..."......UkQIE...........

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/qmap?c=6569&tp=STKA&tpid=0-44ef61b2-fe37-563b-497a-08aac775d996$ip$8.46.123.33&gdpr=0&gdpr_consent=
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	53
Entropy (8bit):	4.174360144607777
Encrypted:	false
SSDEEP:	3:TMQ9GLl96O+:AcGnx+
MD5:	6BFF4CBB47835C6F55726A136A75FB91
SHA1:	AB896B47258231D2F7F893C4F470E568E82CC242
SHA-256:	930AE703338F5136ABC55EA7292BD35E5FA387A321038992200428140D223E25
SHA-512:	DDC53C76FAE661177D4C7878FC318C466890FC0EEC9A94B93902F10AB77C5A0B9432EF14713B0999148EB9A64C98D58906D791F9E02A463C4761F0405C1C4823
Malicious:	false
Reputation:	low
Preview:	function push_init(){}; function push_subscribe(){};

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2537)
Category:	downloaded
Size (bytes):	213211
Entropy (8bit):	5.568848715708852
Encrypted:	false
SSDEEP:	3072:feB4w3MbZE3+AiLuRdU+C2VhqFJO9fuUuxp8yTma0DGfHNHhk34:FzAczFJEPBDs44
MD5:	949EE03CD6C688DF80BF2E0254D6A8A1
SHA1:	5BE59D9DD64A9C6BE48A2EC8B75AB15B6E5D3A0C
SHA-256:	530F4B2648F5D7E57829A619F23EAF0ED50A3E91C8B804515892976EBC45025D
SHA-512:	A90329F638C69EE6CAE0C8F4C6E29416BC9B209C1A866AC950E7657BFE399C39292E8FA4B5659EEF6F2F5BE8B2C96E5C618BC0BE481CD22E052127EEBEA904EF
Malicious:	false
Reputation:	low
URL:	https://translate.googleapis.com/_/translate_http/_/js/k=translate_http.tr.en_US.Zdg8ahyydCc.O/am=AAAB/d=1/exm=el_conf/ed=1/rs=AN8SPfqf2KHxVtwjGzGwgTBaUOp51MWORw/m=el_main
Preview:	"use strict";this.default_tr=this.default_tr\|\|{};(function(_){var window=this;.try{.var Lh,Mh,Nh,Vh,ai,bi,hi,ii,ji,ki,oi,ni,Rh;Lh=function(a){return _.Xa?_.Ya?_.Ya.brands.some(function(b){return(b=b.brand)&&b.indexOf(a)!=-1}):!1:!1};Mh=function(){return _.v("Firefox")\|\|_.v("FxiOS")};Nh=function(){return _.Za()?Lh("Chromium"):(_.v("Chrome")\|\|_.v("CriOS"))&&!(_.Za()?0:_.v("Edge"))\|\|_.v("Silk")};._.Oh=function(){return _.v("Safari")&&!(Nh()\|\|(_.Za()?0:_.v("Coast"))\|\|_.$a()\|\|(_.Za()?0:_.v("Edge"))\|\|(_.Za()?Lh("Microsoft Edge"):_.v("Edg/"))\|\|(_.Za()?Lh("Opera"):_.v("OPR"))\|\|Mh()\|\|_.v("Silk")\|\|_.v("Android"))};_.Ph=function(){return _.v("Android")&&!(Nh()\|\|Mh()\|\|_.$a()\|\|_.v("Silk"))};_.Qh=function(a){if(a instanceof _.Xb)return a.g;throw Error("t");};_.Sh=function(a){if(Rh.test(a))return a};_.Th=function(a){return a instanceof _.Xb?_.Qh(a):_.Sh(a)};_.Uh=function(a){return Array.prototype.slice.call(a)};.Vh=function(a){return typeof Symbol==="function"&&typeof Symbol()==="symbol"?Symbol():a};

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, progressive, precision 8, 600x150, components 3
Category:	downloaded
Size (bytes):	25333
Entropy (8bit):	7.975582641394476
Encrypted:	false
SSDEEP:	768:ThHEZiKkJV2xf7kzn2H/7qbIv/IjUMpOXtZtCp0ub/E:2ZiKkGO2HzqkvgUMpOXDwprbc
MD5:	4717CCB2D20F3B63D6B9206BD27C2BCF
SHA1:	DA79FCAA0AFB1018A343C42B8A0E6153D08A3607
SHA-256:	232E14B982CEC26D0157C3890EEC0729F693253CCA750895C515BC58F842A08E
SHA-512:	DE83AE15F723EC2018FCC327E619FAC8755AFD37C423F4202DB795CFCECB342477F706CDCB75A67FD2E48471C2EA74E7F6DF7E4A8BE36A7378C69AB53EF4488B
Malicious:	false
Reputation:	low
URL:	https://i.imgur.com/NUcJYKt.jpg
Preview:	..................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}........X.."..........6...................................................................x5o..xzT..)u8.....KO7O..b.x..38..7..D.#rK9?D....i....q.."%..!c..Q..L...S.d.....jEhN.m...er&.DG......G.T...wT.-..OX.Q...97..I.e....iH....x...L.....(.2d.#a%.,..A.R...o....E.P....4j_%...@.]..,<.o.0...s9.?+.&...};%MD.Zm.u.....u...r".i.,:...Hc1...0=...k.-..U........W......]..E\..vs.......+....[..t...<OEZ....bNRC..luV1..r_;..X..].].g.=}.M.....a.N.q.gt.M....P....F.=x...]'..o\|..t..D^6.l..n..w.o......-.....rt.r.?..n]5..u......Y.FVm'.]...y.@.l.p.).ojO..S.........R!...M.}e..4.=j.fi..`....D.2#.k..M.y...:G<........+.Z.%..l.%..O.+.......=4......[...(-....Of.uA....S#0Y..up.\|.L..e..#*..k..I.[...zv-'..l..;.x.SDr.^H..fD.%......\|g.c........s2.....\.iZ..."5.....F.4L..._4.J.p......I<..~..].{.......s...Hb.U]....h.6...Y......^...m...&.....ib.].s?-.

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	377
Entropy (8bit):	5.221939068801587
Encrypted:	false
SSDEEP:	6:51bQdhb13LkVVXI8mgO9lVhnmUqZzwGdDVTYqL1+LD+mMkuc1zlCBbAm+RbDRWP/:51bO513QvuHnmVZkGdDJH10D+xc15CZj
MD5:	A591F1753586053E662B09E65F7F486C
SHA1:	8076F19D8B57036AFED609FBAA10C4AD1A1D2C55
SHA-256:	228B0DE25E3387C3CE7C37A38E2BE677D1D040B405951ACC0412AE48E44156CC
SHA-512:	355BDAB99AE62215C3BBDD1F49EC83AE67DAD7BFC59755B0AE83A546FD3B898695E6F4AE9697045D4C25EAFA745C978C31CA7E5C87CCB77BC8FB1357F2498679
Malicious:	false
Reputation:	low
Preview:	_HST_cntval="#3Vis. today=9";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);.b.async="async";b.type="text/javascript";var a=document.getElementsByTagName("script")[0];a.parentNode.insertBefore(b,a);}catch(e){}}();

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!.......,...........T..;

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (561)
Category:	downloaded
Size (bytes):	562
Entropy (8bit):	5.166400380539241
Encrypted:	false
SSDEEP:	12:FaGHUxHNXdUM5dk4JTxobbOklfqaSonSTwh18Jf+iWBIDlBOjAxomKvn:MYU7tUM55aHVqvsh18JtWBal7oPv
MD5:	BC812C6DBADAFDAA6860CBC7A78E11AF
SHA1:	BE0908B4712DDB11B1C08F29FF2AEEFB48EC5FB9
SHA-256:	BA8A31B967C3830D9A68A530F5DE31B149242CC6A7BC9951439654C4CF8E5595
SHA-512:	32D349C37D62F51C8C21CCE2CD82EECC6DC5CD5ABA4C8D4ACD8D75603B3799E95BB3F28F99767CB7C57B9E48520A1340EE0D6367E5C09B6351630A0A64C2341A
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-543ebdf2.js
Preview:	import{t as a,b as i,c as l,y as o,B as c,g as r,E as u}from"./hl-347bfac4.js";const d=["onContextmenu","innerHTML"],b={__name:"DivEditableBlock",props:{textData:Object,defaultValue:Object,classes:String,style:Object},setup(t){const e=t,n=a("isAdmin"),s=()=>{n&&window.parent.postMessage({textSettings:e.textData,defaultValue:e.defaultValue},"*")};return(m,x)=>(i(),l("div",{onContextmenu:o(s,["stop","prevent"]),class:c([t.classes,{"lp-builder":r(n),"hide-content":!t.textData.isShow}]),innerHTML:t.textData.text,style:u(t.style)},null,46,d))}};export{b as _};.

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	216111
Entropy (8bit):	5.545473328462882
Encrypted:	false
SSDEEP:	3072:Ut8hx8g4165O0O5Dawo0u+kOY53GlU/8KvfGKHBfBxafP8NqMS:y0v4165pCh30DBfBxafPEqP
MD5:	2DF57B0188695CB56752FE0347491E5D
SHA1:	E5849C9FAE5F1AC5A631EF39A514D9AD2A28F1CD
SHA-256:	CA20BE79A636E7C23F99BBF67B311A5BCC4E62A03C509D7DB9E8EAE23D6299BE
SHA-512:	A04024FD928340FCDEB9C705DCF78A7C91246A1FD00386F1617732D017001F75953812267E5CC59FE4A83BD71D2C058A51AE5E0633A6B58A50790B00A0EAD6DF
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-195162716-5
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":2,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":6},{"function":"__ccd_ga_first","priority":1,"vtp_instanceDestinationId":"UA-195162716-5","tag_id":9},{"function":"__rep","vtp_containerId":"UA-195162716-5","vtp_remoteConfig":["map"],"tag_id":1},{"function":"__zone","vtp_childContainers":["list",["map","publicId","G-JGGRR9PHG6"]],"vtp_enableConfiguration":false,"tag_id":3},{"function":"__ccd_ga_last","priority":0,"vtp_instanceDestinationId":"UA-195162716-5","tag_id":8}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"},{"function":"_eq","arg0":["macro",0],"arg1"

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (5151)
Category:	downloaded
Size (bytes):	5152
Entropy (8bit):	5.190385795418395
Encrypted:	false
SSDEEP:	96:mHnlRIIY1Zsl2Dxb4MzJoHOYVMb1DJUb2DJ6bhbcbMBGKGDdDJoYVV+iCx:mHlRIIYslqxb4MzJoH1MbFJUbqJ6bhbt
MD5:	6FD12A4DF4919A6D5311528A4E39E62A
SHA1:	940B4DD102E8CACAEC83BE3126A49E96A2F2B349
SHA-256:	365E25CCDBC1D63D37E9C08CF50C79C9253416E5335CF25CB7686F5A7BBA3AEC
SHA-512:	EC267ECC0498271FCE1D9748375CA6C1ED142C2B61EE0946BF87263D3F4AA8F547E8E2285F2B421C7CF301F81EAA61F3B449B8D283B16E13A6EA81D56D09F6B0
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-f95c6502.js
Preview:	import{u as s,d as n,_ as t,r as I,w as d,a as p,o as v,b as u,c as y,e as a,f as E,g as c,h as g,F as S,i as P}from"./hl-347bfac4.js";import{i as x}from"./hl-1d626e0c.js";const R={__name:"SignInPage",setup(A){const o=s(),r=()=>n(()=>P(Object.assign({"./layouts/layout11/SignInIndex.vue":()=>t(()=>import("./hl-ad019383.js"),["/assets/hl-ad019383.js","/assets/hl-347bfac4.js","/assets/hl-d98910d4.css"],import.meta.url),"./layouts/layout15/SignInIndex.vue":()=>t(()=>import("./hl-bf9d7a67.js"),["/assets/hl-bf9d7a67.js","/assets/hl-054a7ece.js","/assets/hl-347bfac4.js","/assets/hl-fa6da16c.js","/assets/hl-de833af9.js","/assets/hl-5f4e63ec.js","/assets/hl-ea83f4be.js","/assets/hl-35a77ba0.js","/assets/hl-b2170ae6.css","/assets/hl-6c50209e.js","/assets/hl-8117d12d.css"],import.meta.url),"./layouts/layout20/SignInIndex.vue":()=>t(()=>import("./hl-573b2ec2.js"),["/assets/hl-573b2ec2.js","/assets/hl-347bfac4.js","/assets/hl-d98910d4.css"],import.meta.url),"./layouts/layout23/SignInIndex.vue":()=>

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 960x540, components 3
Category:	dropped
Size (bytes):	94466
Entropy (8bit):	7.983282758275081
Encrypted:	false
SSDEEP:	1536:MiqJsKT43klnobW86Yey+bHcoOtiEtxlMMGqOHXtza4V4hC5/Oo/4c46QKSHrq3s:9KT4GwW86Fy+b1OtiEvltOHXrV4k5/O3
MD5:	EDDCC7867DEA5BE352455819227D7EA1
SHA1:	4DA77FCCC76539E1F00112869BDC4F9FFBDDC68E
SHA-256:	1A18A039FF4BBC689EBF9BE648102DD0698B658807B737AD563C4A8DF135F140
SHA-512:	7EAB595D7407BD1282F87C5648DAF9B53D7D0DF8C5FC83109CAEAE89191B38140977A65461EFEC0E35E5D55DA7038F5E9EB837AE4B3C00C576EADD32D76CC0B0
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C...........................#.%$"."!&+7/&)4)!"0A149;>>>%.DIC<H7=>;...C...........;("(;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;...........".................................................................................}..l.D...9.Yum{.4.W}g.}g..@h...fZ........a78..J...iqT...Y2............r?^k...H#.. ...\|K...5.'..`...L..Q5.....H.../...........!<o.O..\|k.....f..m@x.@.1....!..._....x.d...d\|..p......-z.o.q...H...+^.N...j...3$W.epJ...=.......).H...!.r.........w.........IZ...hd.Z1...+)<q.....^.f>.c..:...2c.Bu(...EA.ji.g..Gz.A<.O-..r.#.B.K. ...j.....u.R}H....X.mP...KM$>-..~....&.....,........K...YT.....qbsO3..qMo ..Y...'..<.y'9..G.XO.k..aa.I..._..a.....y.o$..8.l......L...=[c.5qt.L.m>.=..\-..lx......x...:..F&r*F$.I._.#.mP.....ip....n.v.~.b6`...n.\...+...}.l..m1v.l9.T....F~M..U..{..'..E9.:i.jW..$).~.....p.p$.5.J.\.y...xN}R.Y.Y.nu...0...inH...:.d...Z.;...Q..eh.T9c...H....:..o.`.[.R..X.......\|.z......w...p..

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 17924, version 1.0
Category:	downloaded
Size (bytes):	17924
Entropy (8bit):	7.987876148490114
Encrypted:	false
SSDEEP:	384:BtF3Wz5SDj+fml9KIWr82nG2MCRerjbZWMQga4ZOoXSs/ae:DFGzQrKIWr82niCRmjbZWsZVis/ae
MD5:	334D1833A21EAC00610249BCAFFF9C3B
SHA1:	2156E3FA9E17345564EFE9C5C46BB9D4660B4B66
SHA-256:	AF3B3CBE273DE7C79ED7FB4A85ABDB5FB60A391302828284C9035D3A407F7CD9
SHA-512:	732E2D372EC8DA18E52CF1E05535F8E193CA086771F385534F8DA7718876FCA0BB6CF44A7DA90BEC28FF087ACB23B7325D102132BB691B599CE02B34778C2FEC
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-af3b3cbe.woff2
Preview:	wOF2......F........@..E...........................>..... .`?STAT$..\.....p.x.....6.$..8. ..r. .....5..@...........qw.D0.GQ.I......1.+.S.....Tqk....i.v.f.2.\37o...A.S/DjQ(O..R...&.-..A+E%..gMt.L....lx$.XVA0$-\|nh.9.g(].P.E....)T..5........W$..sX.?........V._.={.c........VqHBF(va...E.T.....,.#..CNl+$cR..qe.`.b..!r."W........)@&j.n.......wHBr^..3..33s..1b..q/w..\...J.t.r.JI.]R......C.]TFM/.....<.t...&..DH........0.U..q..?../...S.C..S.3...Ec..Gb.e..j.P0..1...,&....t....S..OM......y...}.....S.T....]...G.PFDB...~....<.-..;cL...s.........h...].....lrS6.b...\|ES."$ZTe...Y.[......7.1v.....^.P...b..7...p..6m..>..o........y&...J%.F....S]......_.8.q.S9.$M...K....\P$..E...Kii..;\)YNiTZ-..:L......LY.V....9...e..,q.........!.........!1vp'.x.....s.....`.~}?...j1.i.P,....?.{...z...5......K..!...r..A-..iXf...\..D0G....T.wb....i.C.."........Q..v.....Y.mYWQ(.g..3...t..i4m<.>....*..."....q...R".....H'...B..4H.HD./...d.X$N.2.Hd.1.8.). .LGf..,..Yj

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	170
Entropy (8bit):	5.335916817166796
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnM5OCAadCmy42/uDlhlbGlo+4/iRXTECLrlxyxtyaC/tIlsg1B:6v/lhPfZMQC19s/6TdKXTECL6yR/iVB
MD5:	E7673C60AF825466F83D46DA72CA1635
SHA1:	FC0FCBEE0835709BA2D28798A612BFD687903FB5
SHA-256:	0B8A20373C6DD04E091902226D922B3688143A8938AFB9D283D889DE7B55CEB5
SHA-512:	F1C33E72643CE366FD578E3B5D393799E8C9EA27B180987826AF43B4FC00B65A4EAAE5E6426A23448956FEE99E3108C6A86F32FB4896C156E24AF0571A11C498
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................bKGD..............pHYs.................tIME......-Q.7n....tEXtComment.Created with The GIMP.d%n....IDAT..c.iy......+........IEND.B`..

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.2806390622295662
Encrypted:	false
SSDEEP:	3:2LGffo:2LGXo
MD5:	1B9BFBE209FD6BDB0DAE667C8956FA63
SHA1:	309E9A6B919D5CD697834855382244FC06E21A55
SHA-256:	2C6F0C2E544B26A69E4BCE070D3EAB8647CAF5C92770E2596C14CD28E1AA3F05
SHA-512:	4A4A78CCFF839AE4916AF4715D315947BED1798C8C9A1A558305050D0A68FA507EF7E760379394F5207445F5C672D28EE5F32183934142AB47B0267394F0199C
Malicious:	false
Reputation:	low
Preview:	(function(){})()

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (3086)
Category:	downloaded
Size (bytes):	3087
Entropy (8bit):	4.939588135641205
Encrypted:	false
SSDEEP:	96:qOU6betHDxD3cD8DJxvDJRy2zDJlzDJnPz:qB6bEjR3EkJVJI2/Jl/JPz
MD5:	1F0F95DF5D8F330B5E6F5BB91BB52613
SHA1:	30BFEC9B4CD9C491E2A7F910F44DA17FFFF8C4FC
SHA-256:	1CB20A25B507832389CEB21F00223A15FACC062DE4C67B31590C96416813747F
SHA-512:	272E98F6C7CD8C5D78A15BE6D4216B34FBE5EE90B8C5CDEA0872027256B30EDBA68F889BFC797F368F5B7C34399B524A2DF6A14E2589B1D6D56E3B169CA87454
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-ab41fdaa.js
Preview:	import{u as _,b as n,e as r,f as o,d as s,i as m,_ as e}from"./hl-347bfac4.js";const k={__name:"SignInIndex",setup(a){const i=_(),t=()=>s(()=>m(Object.assign({"./skins/Afforce1Skin.vue":()=>e(()=>import("./hl-66f7ef28.js"),["/assets/hl-66f7ef28.js","/assets/hl-347bfac4.js","/assets/hl-2dfa470a.js","/assets/hl-543ebdf2.js","/assets/hl-054a7ece.js","/assets/hl-ea83f4be.js","/assets/hl-35a77ba0.js","/assets/hl-de833af9.js","/assets/hl-b2170ae6.css","/assets/hl-8d3e332a.css"],import.meta.url),"./skins/Afforce2Skin.vue":()=>e(()=>import("./hl-6705b6e8.js"),["/assets/hl-6705b6e8.js","/assets/hl-347bfac4.js","/assets/hl-2dfa470a.js","/assets/hl-ea83f4be.js","/assets/hl-35a77ba0.js","/assets/hl-de833af9.js","/assets/hl-b2170ae6.css","/assets/hl-0f2964b7.css"],import.meta.url),"./skins/Afforce3Skin.vue":()=>e(()=>import("./hl-4f5e375b.js"),["/assets/hl-4f5e375b.js","/assets/hl-347bfac4.js","/assets/hl-2dfa470a.js","/assets/hl-543ebdf2.js","/assets/hl-054a7ece.js","/assets/hl-ea83f4be.js","/asse

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:YGK1:YGK1
MD5:	40BBAD5C81762E00F27D5AF7D0F3510A
SHA1:	5E0D90903C718424D50DAA6268038D286C53DCA1
SHA-256:	A33CCE758CE2067B497FCE82A60CBA41E3AF5099513969DD77F6C1D9CCEEDF3A
SHA-512:	AD1FF5D3F59BB2DF46877DB94103702731B2E51E56603F4A58BC170456206ED11D3A1F17A3703667EADE3020836AD7E6FAC26DEFED2F32CEDB5D2785A38B9F9F
Malicious:	false
Reputation:	low
Preview:	{"code":204}

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (1396)
Category:	downloaded
Size (bytes):	1397
Entropy (8bit):	5.281403120350211
Encrypted:	false
SSDEEP:	24:4vHUiAldZGRe4W5lVzbZmZD05eJXd/gVUVUZNng4j0DjxJv30GOP28nRXJUd0DQv:qU/z4W5fzbZmZD0kd/gGGZdg80DDv30C
MD5:	7C50EEE95CCAE5B033968B4AA6E1FC96
SHA1:	3AF8D2EB1B1AF34F042A2342973638F4296EEFB6
SHA-256:	D88FC4075308F71E073EF6FA2BF94DF3FC03756BDCE2528BF2101CEE2D2CD0DA
SHA-512:	C814A8D3E1EC0D9EA2CB980BB778B84497276044E8B9612513B915170ED8AC6E164A9B5F96991667F746240506AB718C21FCB8C51C245B28E0E7D01C158908E5
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-6c50209e.js
Preview:	import{u as g,r as i,w as u,b as _,c as h,C as v,D as S,g as f,n as s,F as w}from"./hl-347bfac4.js";const k={class:"spinner-wrap js-spinner-wrap"},y=s("svg",{class:"spinner"},[s("circle",{cx:"20",cy:"20",r:"18"})],-1),T=[y],C={class:"spinner-wrap js-progress-circle-wrap"},x=s("div",{class:"left-half-clipper"},[s("div",{class:"first50-bar"}),s("div",{class:"value-bar"})],-1),b={__name:"Spinner",setup(P){const e=g(),a=i(!0),t=i(!1),n=i(null),c=i(null);let o=0;const m=()=>{e.landing.isGatewayPage&&e.paymentStore.getCardinalSettings()&&e.paymentStore.getSpinnerProcessTime()?(a.value=!1,t.value=!0,o=e.paymentStore.getSpinnerProcessTime()):(t.value=!1,a.value=!0)},p=()=>{if(e.formStore.isSpinnerWorking&&(m(),t.value)){let r=0;const l=o10;let d=setInterval(()=>{r<101?(r>50?(n.value.className="",n.value.classList.add("over50","p"+r)):(n.value.className="",n.value.classList.add("p"+r)),c.value.textContent=Math.ceil(o-l/1e3r),r++):clearInterval(d)},l)}};return u(()=>e.formStore.isSpinnerWorkin

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pd.sharethis.com/pd/dtscout?_t_=px&url=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&event_source=dtscout&rnd=0.01281231268995775&exptid=ZHkABGbgb30AAAAIC72MAw%3D%3D&fcmp=false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text, with very long lines (529)
Category:	downloaded
Size (bytes):	530
Entropy (8bit):	5.149935307577039
Encrypted:	false
SSDEEP:	12:PPL5zU2X5M5dk4JwaUOklfqaSoRh0fdeWiBJ0lBPEBOvn:HL5zUs5M55waUVq801eWU0lFEQv
MD5:	DED45AB57932E8C2F929DF4E8FE9A54D
SHA1:	AFD7A981DEC63DCBC9C6046C12C6D76FAB83743A
SHA-256:	17581A9E65A90A6C65E4BCE80FE73BDA8F2CBC75F465951CF66D1BB2DF5AF718
SHA-512:	9D07CC108014FBDBA9C0609FAFA895A76497D355DB268A63BCE4F09028BFC0401BBED97042B5AF75AEA450A9A95BA2DB017C1A560868E49B56D2AAA39DA96C72
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-2dfa470a.js
Preview:	import{t as s,b as o,c as i,y as c,B as l,g as r}from"./hl-347bfac4.js";const u=["onContextmenu","innerHTML"],x={__name:"SpanEditableBlock",props:{textData:Object,defaultValue:Object,classes:String},setup(t){const e=t,n=s("isAdmin"),a=()=>{n&&window.parent.postMessage({textSettings:e.textData,defaultValue:e.defaultValue},"*")};return(d,m)=>(o(),i("span",{onContextmenu:c(a,["stop","prevent"]),class:l([t.classes,r(n)?"lp-builder":"",t.textData.isShow?"":"hide-content"]),innerHTML:t.textData.text},null,42,u))}};export{x as _};.

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (591), with no line terminators
Category:	dropped
Size (bytes):	591
Entropy (8bit):	5.213988228351124
Encrypted:	false
SSDEEP:	12:4aLBqW/Ie7AdUC8h/Doo/ThaQtpFkwCZg/7V+xXSG0Inut7Por:4acirAdUC2/Uo/Bfk5eTVISjWutzor
MD5:	33DF496D49163088503CBFC18A0E7CE8
SHA1:	50AB03EFE3BB696181C3FDBA7BAF8F3EC27E70FF
SHA-256:	3BEF25BEA570D6B06298958D55C27BE4CA87A6429BB5E57A31EF3B885AD3CFED
SHA-512:	5AA8DC6294DAEC9E0B8568946D32DFAC2EF37EA1658175FEB886A109AEA654368336BF051AA29E8E8F26F6DBD5B8C4380B8A88D7E86CCBA5F7E5C77B7A5700D1
Malicious:	false
Reputation:	low
Preview:	import{u as r}from"./hl-fc33c920.js";import{u as i,b as l,c as u,Q as b,g as t,B as c,E as m}from"./hl-347bfac4.js";const y={__name:"Button",props:{params:Object,texts:Object},setup(s){const o=i(),{submit:e}=r();return(p,n)=>(l(),u("button",{id:"button",onClick:n[0]\|\|(n[0]=(...a)=>t(e)&&t(e)(...a)),class:c(t(o).landing.isFitFlow?"w-full block rounded-full font-bold tracking-wide bg-primary-400 text-white hover:bg-primary-500 transition-colors py-3":"button submit pay-button"),type:"button",style:m(t(o).settingStore.getBtnStyle())},b(s.texts["button.label"]),7))}};export{y as default};

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1583), with no line terminators
Category:	dropped
Size (bytes):	1583
Entropy (8bit):	5.146037635024682
Encrypted:	false
SSDEEP:	48:K59UYjhnbiv2Mz0u5gSlFp14khL3j3KfCzQ8/pE11Uif:oUYVHg5nx3j6YQMkN
MD5:	6D3E038E78E7E378FC140E678EB43A96
SHA1:	F2D0F6723D391A19639E0ECE4A8B78D2F6D2293F
SHA-256:	295FEB1649C6B41F44D6F5C0913A16A1F98AA3AB0D41460CA6DAE2312E255A7D
SHA-512:	4839F7A9263CCC948ADCEB54CE4CDF70480808D270711C23F0A197AFBA93078C4E1C32B4DBBB6CB571BFDA3DF2A0D82D3A1E3BC8A0075F428E9B6F92940F9F6D
Malicious:	false
Reputation:	low
Preview:	import{u as s,t as p,A as a,M as S,k as w,v as n}from"./hl-347bfac4.js";const h=()=>{const t=s(),o=p("isAdmin"),d=()=>{if(typeof gtag<"u"&&t.landing.gtmTrackId&&t.landing.isGa4Track){const r=n(t.formHiddenParams,"externalId");n(t.formHiddenParams,"ga4ClientId")\|\|gtag("get",t.landing.gtmTrackId,"client_id",async m=>{const f=document.cookie.split(";").filter(g=>g.match(/_ga=GA/)).length;await a.setGaClient(m,r,f)})}},l=async()=>{let r=!1;if(!t.formStore.isSpinnerWorking&&!o&&t.formStore.validate()){t.formStore.setSpinnerState(!0);try{const e=await i(c());e.success===!0?(r=!0,e.isCreateAction&&await a.trackFb("CompleteRegistration"),e.redirect&&(window.sessionStorage.setItem("redirectUrl",e.redirect),t.landing.isFitFlow?(t.setRedirectUrl(e.redirect),t.setLeadId(e.leadId)):window.location=e.redirect),window.scrollTo(0,0)):e.redirect?window.location=e.redirect:e.errors&&Object.keys(e.errors).length>0?t.formStore.setValidationErrors(e.errors):e.decline===!0&&t.modalStore.setModal("DuplicateM

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	70
Entropy (8bit):	3.577769619550495
Encrypted:	false
SSDEEP:	3:CUuaaat/DemxhkYltxlzeze:bR1Nize
MD5:	14D1707EDA790F543C6FB8D0DCFF6359
SHA1:	CF7049298A876447C2854CF2BC4DF2987587AAC5
SHA-256:	DE9D3FD0EB948BD294477D0EDA60A73B85CAFF1794803530D0463193A113DA98
SHA-512:	27656D6106A6DA0C84174BA7A6307E6F1C4B3F2CC085C8466B6A25D54331035DABC7081AAC208D960D8D37C5577547628C0D1C4B77BB4CF254C71859673FEEC1
Malicious:	false
Reputation:	low
Preview:	GIF89a...................!..NETSCAPE2.0.....!.......,................;

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 2097
Category:	downloaded
Size (bytes):	1190
Entropy (8bit):	7.831312491646247
Encrypted:	false
SSDEEP:	24:XwmOHj7FVa/ZK+kNJuGiSdAzvMuUMeXhDFW82swoydY/:Xn4a/ZK1Tj+vMzTW82sLP
MD5:	80D8F4DD25F0D41FC0638E5641734EFE
SHA1:	9348E64DC4784919748B31B2EFBF2AFF3CCA21C8
SHA-256:	5E4217B5E343E7F92E36EF0FD485DCDEC6D9801076EDADCED8F6756C94CCA7AA
SHA-512:	3C674DFD3A8E2586AA80B41B03889C9D6E9E522881F8ABE255838FCE1828D309F6C83824504541AC54F813312F80C79471F5EF9A95912BDD6FE791373FB081B9
Malicious:	false
Reputation:	low
URL:	https://pxdrop.lijit.com/a/t_.htm?ver=1.1523.808&cid=c026&cls=sync
Preview:	..........tV.w...."..c$.......!...x@...n.....b.P....g..,t...#......E&M..u..O.,..@..Ir.8.x..m.3C..T.....&..R.....B.....f.KN....x...%_.D..ZjQ.".&6q\...<j..\...h.)1B..}...#..,t8.^..@..k.kS..[j.-..SeY...yyp....K..^tUO.Dg....1.o.v.'.4..9Q/...<.."../!....g.*m...zk4.Df.c..&/...0....M.....".+.+\.U..Ya_../.Sq..Y^....xz.&._ .. ..<....d....!.:...1....+.....;.^../..v..W.q..$q+...@..&.<-.Lg....?.\|".....z;..}zRdK.F._..T....2O.m.....8.)..:..X.]..P.(O'...............D......(.K.m`......0....mdQ.w.$W.wo.ft.R.....7..P.U.jB.Xx.....1...t..^7...7....<.U...)ov.....:..[.F.s..0.FQ..dJ.uR...E..z..[.o.@)..Pyftf>.Y........E..p..E.6..j.\|y..'LTf.h..j........U...N.g.....u....H.ad.e.7....L..\|-s'.....2.k.6.mjs..q}93FJ....8....W..0.....8...d........8.o...+n~C..8.H..7....{......X....#.'d^..c...y.1..G..o.......4G-#D...}.......j.X.F....Sp.@..\|..."..L.F.OuoH?C......F.~.W(..5...)....c..(\|.,.O..s..2E..\|,.b9.....~9.+......2.1...__.qE.}{.sEdR..;.z...2...1<.rq...1.vm3.hjJ..`...p

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (37039)
Category:	downloaded
Size (bytes):	72018
Entropy (8bit):	5.3807538528666825
Encrypted:	false
SSDEEP:	1536:PPQMdY3qFLbx+Gc6YZSmd8N9poPekUtHCIVTs:wzGbma9poPtoS
MD5:	0F8923447CF084C84C6D1F3003BF353B
SHA1:	BA74D829CAE9B7BAC7FFB52E87AA3C5F34BAC3C4
SHA-256:	7A8063835D60CCBF1E50E4FD451279046BEBB84E78F156624842559997134B90
SHA-512:	5FB3D41A963F93932BF18D3DDFF6A35E5391DE655DF8AD6DA3C5C37AEB0CC2F84CA185567116F582CAB2D538760F5764B358DB5D0BD963FB6B60BA4B108878CD
Malicious:	false
Reputation:	low
URL:	https://gametimepulse.com/assets/hl-35a77ba0.js
Preview:	import{c as jt,g as rp}from"./hl-de833af9.js";var Je={exports:{}};/*. @license. * Lodash <https://lodash.com/>. * Copyright OpenJS Foundation and other contributors <https://openjsf.org/>. * Released under MIT license <https://lodash.com/license>. * Based on Underscore.js 1.8.3 <http://underscorejs.org/LICENSE>. * Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors. */Je.exports;(function(Qe,Ve){(function(){var o,rl="4.17.21",ke=200,il="Unsupported core-js use. Try https://npms.io/search?q=ponyfill.",sn="Expected a function",ul="Invalid `variable` option passed into `_.template`",je="__lodash_hash_undefined__",fl=500,ne="__lodash_placeholder__",qn=1,Ii=2,at=4,ct=1,te=2,an=1,jn=2,Si=4,Tn=8,ht=16,Ln=32,gt=64,Wn=128,Ot=256,nr=512,ll=30,ol="...",sl=800,al=16,Ei=1,cl=2,hl=3,nt=1/0,Kn=9007199254740991,gl=17976931348623157e292,ee=0/0,yn=4294967295,_l=yn-1,pl=yn>>>1,vl=[["ary",Wn],["bind",an],["bindKey",jn],["curry",Tn],["curryRight",ht],["flip",nr],["partial",Ln]

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (944), with no line terminators
Category:	dropped
Size (bytes):	944
Entropy (8bit):	5.280953555460648
Encrypted:	false
SSDEEP:	24:8QMUD2M5aAIliM1snohwkYCNZN6EpWnZM0dQ3+okSoEq8qKQBbSMzI0uvFn:8QMUDslKodWnZlqOolov9bkb
MD5:	506A9E6CE370EDE2CBC9492168529811
SHA1:	CF39BB661ACC09840C76889A6C859CF33042C88F
SHA-256:	436D9C47E26931D6AC6A46210999066E8A889413ADC1D8E5CE7D6C13AD7C7338
SHA-512:	D23F382E891CFED40B8F848F15D92D9F965EDFF950E6934C6FCF586499FC181AA27C224BAF3DA1329392D394FD5FEB048FDCB39129A405F293E8D08880990F19
Malicious:	false
Reputation:	low
Preview:	import{t as y,j as S,O as i,b as p,c as v,y as x,B as f,g as h,E as b}from"./hl-347bfac4.js";const w=["onContextmenu","src","srcset","alt"],C={__name:"ImageEditableBlock",props:{imageKey:String,imageKey2x:String,imageData:Object,classes:String,alt:String,style:{type:Object,default:()=>({})}},setup(s){const t=s,o=y("isAdmin"),{getCurrentImage:l}=S(),c=e=>e!=null&&e.base64?e.base64:e==null?void 0:e.url,n=i(()=>t.imageData??l(t.imageKey)),g=i(()=>c(n.value)),a=i(()=>t.imageKey2x?l(t.imageKey2x):void 0),m=i(()=>c(a.value)),u=()=>{o&&window.parent.postMessage({imageSettings:{...n.value,...!!a.value&&{img2x:a.value}}},"*")};return(e,d)=>{var r;return p(),v("img",{onContextmenu:x(u,["stop","prevent"]),class:f([s.classes,{"lp-builder-image":h(o),"hide-content":((r=n.value)==null?void 0:r.hasOwnProperty("isShow"))&&!n.value.isShow}]),style:b(s.style),src:g.value,srcset:m.value?`${m.value} 2x`:void 0,alt:s.alt},null,46,w)}}};export{C as _};

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://pd.sharethis.com/pd/dtscout?_t_=px&url=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fregister-hsfootball.php&event_source=dtscout&rnd=0.8260556535268637&exptid=ZHkABGbgb30AAAAIC72MAw%3D%3D&fcmp=false
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30837)
Category:	downloaded
Size (bytes):	31000
Entropy (8bit):	4.746143404849733
Encrypted:	false
SSDEEP:	384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf
MD5:	269550530CC127B6AA5A35925A7DE6CE
SHA1:	512C7D79033E3028A9BE61B540CF1A6870C896F8
SHA-256:	799AEB25CC0373FDEE0E1B1DB7AD6C2F6A0E058DFADAA3379689F583213190BD
SHA-512:	49F4E24E55FA924FAA8AD7DEBE5FFB2E26D439E25696DF6B6F20E7F766B50EA58EC3DBD61B6305A1ACACD2C80E6E659ACCEE4140F885B9C9E71008E9001FBF4B
Malicious:	false
Reputation:	low
URL:	https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, truncated
Category:	dropped
Size (bytes):	20
Entropy (8bit):	1.5567796494470394
Encrypted:	false
SSDEEP:	3:FttTll:XtTll
MD5:	A4745ABC5E7FDB89CC6DF3069F3C6E69
SHA1:	74789F7DDBEBD5B7323F6F8174005B4BF8C1F1ED
SHA-256:	D1111B245F685176180E6F1631E6DC49BADF6672368E9CE260C71355165EFFDF
SHA-512:	849461CB54ECDE577246AAD993D1ECABB879913E353AE322561C7C57605F571E23210FE12BDCEF49FAA99B5B003611976FF64348F620968271E38BBA1C7D7F62
Malicious:	false
Reputation:	low
Preview:	....................

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	51
Entropy (8bit):	4.804490783020705
Encrypted:	false
SSDEEP:	3:QBRgyNq/HG9AikQvCwTRGfwY:IgymGfkQvvdGfwY
MD5:	249E99B53E1DE1399660CC58001D0119
SHA1:	632D3E79D045B398781031871BD66942C5CDF8DC
SHA-256:	A0327D5B1440C3E51A5D37E3E096BC71E4322EB355773469F8045383B7DE8818
SHA-512:	30EB2C23B50E55AA5889FB3DB4CDF5BC9E30067F4EC450202DDD1D444C9BD1F9D8541F373A4C9FCDF3A8A31AE38F8B92337E61E68C13D4D704FFC39FE16845C9
Malicious:	false
Reputation:	low
URL:	https://t.dtscout.com/pv/?_a=v&_h=football-booster.freevisit1.com&_ss=1mx4vkpben&_pv=1&_ls=0&_u1=1&_u3=1&_cc=us&_pl=d&_cbid=6g49&_cb=_dtspv.c
Preview:	try{_dtspv.c({"b":"chrome@117"},'6g49');}catch(e){}

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	49
Entropy (8bit):	3.176789192964165
Encrypted:	false
SSDEEP:	3:CUVAae/XExlHrfx/n:8aOUJ/n
MD5:	56398E76BE6355AD5999B262208A17C9
SHA1:	A1FDEE122B95748D81CEE426D717C05B5174FE96
SHA-256:	2F561B02A49376E3679ACD5975E3790ABDFF09ECBADFA1E1858C7BA26E3FFCEF
SHA-512:	FD8B021F0236E487BFEE13BF8F0AE98760ABC492F7CA3023E292631979E135CB4CCB0C89B6234971B060AD72C0CA4474CBB5092C6C7A3255D81A54A36277B486
Malicious:	false
Reputation:	low
URL:	https://sync.crwdcntrl.net/map/c=10832/tp=TRUP/tpid=b9bdb847e735edc7495bcfea37bdb579
Preview:	GIF89a...................!.......,...........T..;

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 10, 2024 18:10:17.023473978 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 10, 2024 18:10:17.023627043 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 10, 2024 18:10:17.148447037 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 10, 2024 18:10:26.637777090 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 10, 2024 18:10:26.637778044 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 10, 2024 18:10:26.751269102 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 10, 2024 18:10:27.024755955 CEST	49709	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:27.025192976 CEST	49710	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:27.029912949 CEST	80	49709	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:27.030093908 CEST	80	49710	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:27.030205965 CEST	49709	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:27.030205965 CEST	49710	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:27.030462980 CEST	49709	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:27.035378933 CEST	80	49709	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:27.983243942 CEST	80	49709	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:27.983299971 CEST	80	49709	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:27.983330965 CEST	80	49709	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:27.983365059 CEST	80	49709	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:27.983472109 CEST	49709	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:27.983473063 CEST	49709	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:28.070081949 CEST	49713	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:28.070328951 CEST	49710	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:28.071873903 CEST	80	49709	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:28.073179007 CEST	49709	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:28.077529907 CEST	80	49713	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:28.077620983 CEST	49713	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:28.077876091 CEST	80	49710	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:28.081017971 CEST	80	49709	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:28.101183891 CEST	49716	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:28.101213932 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.101269007 CEST	49716	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:28.101933002 CEST	49716	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:28.101950884 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.397903919 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 10, 2024 18:10:28.398061991 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 10, 2024 18:10:28.421462059 CEST	80	49709	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:28.421480894 CEST	80	49709	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:28.421494007 CEST	80	49709	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:28.421504021 CEST	80	49709	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:28.421515942 CEST	80	49709	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:28.421662092 CEST	49709	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:28.421662092 CEST	49709	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:28.428636074 CEST	80	49710	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:28.428919077 CEST	80	49710	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:28.428935051 CEST	80	49710	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:28.428946972 CEST	80	49710	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:28.428997040 CEST	49710	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:28.429033041 CEST	49710	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:28.429050922 CEST	80	49710	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:28.429066896 CEST	80	49710	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:28.429081917 CEST	80	49710	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:28.429099083 CEST	80	49710	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:28.429119110 CEST	49710	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:28.429150105 CEST	49710	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:28.429438114 CEST	80	49710	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:28.429455042 CEST	80	49710	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:28.429508924 CEST	49710	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:28.434053898 CEST	80	49710	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:28.434072971 CEST	80	49710	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:28.434087038 CEST	80	49710	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:28.434123039 CEST	49710	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:28.479161024 CEST	49710	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:28.575867891 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.621408939 CEST	49716	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:28.640480995 CEST	49716	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:28.640502930 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.643605947 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.643677950 CEST	49716	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:28.656861067 CEST	49716	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:28.657202005 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.660919905 CEST	49716	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:28.660928011 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.686332941 CEST	80	49710	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:28.686374903 CEST	80	49710	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:28.686407089 CEST	80	49710	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:28.686460972 CEST	49710	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:28.703929901 CEST	49716	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:28.733592033 CEST	49710	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:28.767250061 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.767316103 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.767370939 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.767422915 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.767431974 CEST	49716	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:28.767462969 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.767484903 CEST	49716	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:28.767761946 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.767821074 CEST	49716	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:28.767834902 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.768297911 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.768357038 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.768357038 CEST	49716	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:28.768378019 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.768423080 CEST	49716	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:28.768429995 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.772340059 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.772420883 CEST	49716	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:28.772429943 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.809720039 CEST	49710	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:28.814815044 CEST	80	49710	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:28.820493937 CEST	49717	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:28.820537090 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:28.820611954 CEST	49717	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:28.820895910 CEST	49717	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:28.820909977 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:28.827373981 CEST	49716	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:28.854031086 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.854182005 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.854218006 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.854244947 CEST	49716	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:28.854264021 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.854301929 CEST	49716	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:28.854306936 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.854321957 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.854374886 CEST	49716	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:28.854381084 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.855160952 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.855206013 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.855217934 CEST	49716	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:28.855226040 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.855273962 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.855315924 CEST	49716	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:28.855325937 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.855369091 CEST	49716	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:28.855376005 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.855412006 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:28.855499983 CEST	49716	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:28.855720997 CEST	49716	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:28.855734110 CEST	443	49716	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:29.166678905 CEST	80	49710	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:29.166807890 CEST	80	49710	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:29.166856050 CEST	49710	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:29.222598076 CEST	49710	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:29.227621078 CEST	80	49710	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:29.253034115 CEST	49709	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:29.253304958 CEST	49713	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:29.254971981 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:29.255964994 CEST	49720	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.256016970 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.256141901 CEST	49720	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.256196976 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.256292105 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.256401062 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.256572962 CEST	49722	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:29.258066893 CEST	80	49709	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:29.258428097 CEST	80	49713	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:29.259886026 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:29.260087967 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:29.261657000 CEST	80	49722	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:29.261889935 CEST	49722	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:29.310352087 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.310395002 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.310687065 CEST	49720	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.310704947 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.310775995 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:29.310785055 CEST	49722	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:29.316164970 CEST	80	49722	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:29.316644907 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:29.379864931 CEST	49724	443	192.168.2.5	142.250.185.196
Sep 10, 2024 18:10:29.379933119 CEST	443	49724	142.250.185.196	192.168.2.5
Sep 10, 2024 18:10:29.380126953 CEST	49724	443	192.168.2.5	142.250.185.196
Sep 10, 2024 18:10:29.380574942 CEST	49724	443	192.168.2.5	142.250.185.196
Sep 10, 2024 18:10:29.380608082 CEST	443	49724	142.250.185.196	192.168.2.5
Sep 10, 2024 18:10:29.402318954 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.402867079 CEST	49717	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.402899981 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.404582024 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.404670000 CEST	49717	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.408191919 CEST	49717	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.408293009 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.408813953 CEST	49717	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.408833027 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.450793028 CEST	49717	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.508500099 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.508683920 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.508760929 CEST	49717	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.508765936 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.508795977 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.508949041 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.508981943 CEST	49717	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.509001970 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.509066105 CEST	49717	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.511765957 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.511919022 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.512022018 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.512079000 CEST	49717	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.512098074 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.512137890 CEST	49717	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.512145996 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.518908024 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.518996000 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.519001007 CEST	49717	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.519021034 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.519321918 CEST	49717	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.576589108 CEST	80	49710	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:29.576617002 CEST	80	49710	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:29.576724052 CEST	49710	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:29.596568108 CEST	80	49709	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:29.596601963 CEST	80	49709	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:29.596765995 CEST	49709	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:29.596956015 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.597132921 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.597194910 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.597198009 CEST	49717	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.597230911 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.597526073 CEST	49717	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.597537994 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.597599030 CEST	49717	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.597620964 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.597670078 CEST	49717	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.597919941 CEST	80	49713	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:29.597995996 CEST	80	49713	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:29.598220110 CEST	49713	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:29.688412905 CEST	49717	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.688458920 CEST	443	49717	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.862540007 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.864967108 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.864994049 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.869091988 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.869182110 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.870573997 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.870757103 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.871354103 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.871375084 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.901284933 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.919691086 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.944052935 CEST	49720	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.972161055 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.972487926 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.972536087 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.972568989 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.972610950 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.972667933 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.972870111 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.973417044 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.973479986 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.973484039 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.973500967 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.973546982 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.973568916 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.973582029 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.973927021 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.974385023 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.977700949 CEST	49720	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.977716923 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.979343891 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.979429007 CEST	49720	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.986274958 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.986349106 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.986361027 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.998147964 CEST	49720	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.998261929 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:29.999609947 CEST	49720	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:29.999628067 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.025960922 CEST	443	49724	142.250.185.196	192.168.2.5
Sep 10, 2024 18:10:30.028526068 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.044975996 CEST	49724	443	192.168.2.5	142.250.185.196
Sep 10, 2024 18:10:30.045056105 CEST	443	49724	142.250.185.196	192.168.2.5
Sep 10, 2024 18:10:30.046421051 CEST	49720	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.048868895 CEST	443	49724	142.250.185.196	192.168.2.5
Sep 10, 2024 18:10:30.049001932 CEST	49724	443	192.168.2.5	142.250.185.196
Sep 10, 2024 18:10:30.064835072 CEST	49724	443	192.168.2.5	142.250.185.196
Sep 10, 2024 18:10:30.064918041 CEST	443	49724	142.250.185.196	192.168.2.5
Sep 10, 2024 18:10:30.067015886 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.067102909 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.067137957 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.067188025 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.067205906 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.067249060 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.067302942 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.067398071 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.067491055 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.067497015 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.068222046 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.068264008 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.068268061 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.068276882 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.068326950 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.068340063 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.069700003 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.069730997 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.069756985 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.069766998 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.069818020 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.069972992 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.070039034 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.070123911 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.070131063 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.070693970 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.070746899 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.070779085 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.070801973 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.070810080 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.070837975 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.071707964 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.071743011 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.071773052 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.071779013 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.071791887 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.071827888 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.106549978 CEST	49724	443	192.168.2.5	142.250.185.196
Sep 10, 2024 18:10:30.106610060 CEST	443	49724	142.250.185.196	192.168.2.5
Sep 10, 2024 18:10:30.109412909 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.109518051 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.109663010 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.109708071 CEST	49720	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.109733105 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.109843016 CEST	49720	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.109946012 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.114249945 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.114329100 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.114357948 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.116766930 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.116803885 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.116837025 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.116859913 CEST	49720	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.116873980 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.116906881 CEST	49720	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.117155075 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.117187977 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.117229939 CEST	49720	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.117238045 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.117398024 CEST	49720	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.123534918 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.146533012 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.146601915 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.146648884 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.146661043 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.146677017 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.146694899 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.146734953 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.146773100 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.146821976 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.146830082 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.146872997 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.147170067 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.148781061 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.148814917 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.148833990 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.148871899 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.148874044 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.148896933 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.148910046 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.148921967 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.148932934 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.148956060 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.148982048 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.159254074 CEST	49724	443	192.168.2.5	142.250.185.196
Sep 10, 2024 18:10:30.169198990 CEST	49720	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.202018976 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.202090025 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.202147961 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.202168941 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.202183008 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.202214956 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.202236891 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.202270031 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.202316046 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.202318907 CEST	49720	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.202342987 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.202394009 CEST	49720	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.203008890 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.203032970 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.203083038 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.203118086 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.203126907 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.203176022 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.203227043 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.203274965 CEST	49720	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.203284025 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.203795910 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.203839064 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.203851938 CEST	49720	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.203860044 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.203942060 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.203977108 CEST	49720	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.204016924 CEST	49720	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.215095997 CEST	80	49722	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.215110064 CEST	80	49722	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.215154886 CEST	49722	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.233588934 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.233620882 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.233717918 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.233741999 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.233786106 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.233807087 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.234478951 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.234499931 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.234667063 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.234682083 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.234786034 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.236062050 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.236084938 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.236151934 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.236162901 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.236191034 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.236208916 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.236247063 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.236263037 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.236298084 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.245260954 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.245342016 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.245413065 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.245414019 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.245424986 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.245436907 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.245481968 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.245516062 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.245527029 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.245536089 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.245546103 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.245557070 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.245562077 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.245588064 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.245618105 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.250284910 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.250328064 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.250438929 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.367919922 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.504239082 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.504251957 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.504265070 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.504321098 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.504513025 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.504564047 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.504575968 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.504582882 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.504611969 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.504623890 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.504635096 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.504646063 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.504657030 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.504673958 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.504693031 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.505464077 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.505546093 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.505557060 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.505594969 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.505630970 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.505644083 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.505682945 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.506403923 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.506413937 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.506424904 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.506454945 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.506472111 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.506484985 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.506500006 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.506534100 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.507262945 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.507272005 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.507313013 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.587507010 CEST	49720	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.587534904 CEST	443	49720	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.588726044 CEST	49721	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:30.588778019 CEST	443	49721	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:30.591069937 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.591106892 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.591119051 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.591169119 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.762552023 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.762573004 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.762584925 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.762644053 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.762670994 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.762685061 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.762696981 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.762746096 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.762772083 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.762783051 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.762794018 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.762804985 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.762835026 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.762866020 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.763561964 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.763634920 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.763645887 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.763658047 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.763667107 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.763676882 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.763726950 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.764050961 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.764060974 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.764071941 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.764101982 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.764136076 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.764137030 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.764147997 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.764158010 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.764168024 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.764182091 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.764218092 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.764920950 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.764931917 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.764944077 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.764982939 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.765042067 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.765053034 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.765063047 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.765074968 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.765084028 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.765152931 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.765825033 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.765842915 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.765852928 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.765863895 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.765867949 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.765876055 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.765886068 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.765891075 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.765897989 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.765949011 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.766719103 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.766736031 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.766746998 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.766760111 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.766771078 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.766773939 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.766781092 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.766791105 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.766799927 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.766839981 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.767580986 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.767594099 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:30.767627001 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:30.809777021 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:31.025351048 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:31.035773993 CEST	49726	80	192.168.2.5	142.250.185.142
Sep 10, 2024 18:10:31.040709972 CEST	80	49726	142.250.185.142	192.168.2.5
Sep 10, 2024 18:10:31.040925026 CEST	49726	80	192.168.2.5	142.250.185.142
Sep 10, 2024 18:10:31.041079998 CEST	49726	80	192.168.2.5	142.250.185.142
Sep 10, 2024 18:10:31.046020031 CEST	80	49726	142.250.185.142	192.168.2.5
Sep 10, 2024 18:10:31.152441025 CEST	49727	443	192.168.2.5	184.28.90.27
Sep 10, 2024 18:10:31.152518034 CEST	443	49727	184.28.90.27	192.168.2.5
Sep 10, 2024 18:10:31.152600050 CEST	49727	443	192.168.2.5	184.28.90.27
Sep 10, 2024 18:10:31.155133009 CEST	49727	443	192.168.2.5	184.28.90.27
Sep 10, 2024 18:10:31.155170918 CEST	443	49727	184.28.90.27	192.168.2.5
Sep 10, 2024 18:10:31.599276066 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:31.599317074 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:31.599391937 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:31.600301027 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:31.600312948 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:31.668049097 CEST	80	49726	142.250.185.142	192.168.2.5
Sep 10, 2024 18:10:31.708357096 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:31.708395958 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:31.709120035 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:31.717534065 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:31.717559099 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:31.805741072 CEST	49726	80	192.168.2.5	142.250.185.142
Sep 10, 2024 18:10:31.818957090 CEST	443	49727	184.28.90.27	192.168.2.5
Sep 10, 2024 18:10:31.819072962 CEST	49727	443	192.168.2.5	184.28.90.27
Sep 10, 2024 18:10:31.952276945 CEST	49731	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:31.955523968 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:31.957643986 CEST	80	49731	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:31.957776070 CEST	49731	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:31.958472967 CEST	49731	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:31.960508108 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:31.963888884 CEST	80	49731	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:31.969628096 CEST	49727	443	192.168.2.5	184.28.90.27
Sep 10, 2024 18:10:31.969679117 CEST	443	49727	184.28.90.27	192.168.2.5
Sep 10, 2024 18:10:31.970113993 CEST	443	49727	184.28.90.27	192.168.2.5
Sep 10, 2024 18:10:32.021753073 CEST	49727	443	192.168.2.5	184.28.90.27
Sep 10, 2024 18:10:32.070470095 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.112339020 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.113754034 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.113768101 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.117142916 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.117223024 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.140762091 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.141014099 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.150132895 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.150162935 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.204416990 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.294585943 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.294720888 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.294812918 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.294863939 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.294898987 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.294986963 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.294990063 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.295020103 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.295064926 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.295103073 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.295268059 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.295325041 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.295331955 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.299618006 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.299702883 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.299707890 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.299730062 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.299870014 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.299875975 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.305392027 CEST	49727	443	192.168.2.5	184.28.90.27
Sep 10, 2024 18:10:32.306981087 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:32.307019949 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:32.307100058 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:32.345009089 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.347420931 CEST	443	49727	184.28.90.27	192.168.2.5
Sep 10, 2024 18:10:32.367018938 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.375072956 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.375085115 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.375663996 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.375746965 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.376868010 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.376924038 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.381781101 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.381988049 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.382077932 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.382081985 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.382107973 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.382229090 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.382235050 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.382577896 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.382639885 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.382644892 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.382740974 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.382797956 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.382802963 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.383264065 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.383326054 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.383331060 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.383419991 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.383436918 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.383503914 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.383542061 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.383548021 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.384088039 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.384121895 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.384129047 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.384145021 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.384150028 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.384228945 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.384310007 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.384326935 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.384335995 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.384464025 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.384907007 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.385098934 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.385149956 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.385155916 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.385855913 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.385911942 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.385916948 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.386497974 CEST	49732	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:32.386543989 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:32.386704922 CEST	49732	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:32.387015104 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:32.387065887 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:32.387240887 CEST	49734	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:32.387253046 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:32.387275934 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:32.387311935 CEST	49734	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:32.387784004 CEST	49734	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:32.387799025 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:32.388092041 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:32.388103008 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:32.388576031 CEST	49732	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:32.388593912 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:32.408853054 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:32.414650917 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:32.414760113 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:32.415057898 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:32.420689106 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:32.437141895 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.437153101 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.469537020 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.469640017 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.469681025 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.469715118 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.469826937 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.469872952 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.469883919 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.469918966 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.469933987 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.469944000 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.469965935 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.470036030 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.470086098 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.470093966 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.470141888 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.470146894 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.470205069 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.470251083 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.470257044 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.470304966 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.471009970 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.471101999 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.471133947 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.471139908 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.471153975 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.471206903 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.471252918 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.471316099 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.479736090 CEST	49728	443	192.168.2.5	104.18.10.207
Sep 10, 2024 18:10:32.479753971 CEST	443	49728	104.18.10.207	192.168.2.5
Sep 10, 2024 18:10:32.495609045 CEST	443	49727	184.28.90.27	192.168.2.5
Sep 10, 2024 18:10:32.495692015 CEST	443	49727	184.28.90.27	192.168.2.5
Sep 10, 2024 18:10:32.495763063 CEST	49727	443	192.168.2.5	184.28.90.27
Sep 10, 2024 18:10:32.567567110 CEST	49727	443	192.168.2.5	184.28.90.27
Sep 10, 2024 18:10:32.567620039 CEST	443	49727	184.28.90.27	192.168.2.5
Sep 10, 2024 18:10:32.591414928 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.591504097 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.631084919 CEST	49737	443	192.168.2.5	184.28.90.27
Sep 10, 2024 18:10:32.631131887 CEST	443	49737	184.28.90.27	192.168.2.5
Sep 10, 2024 18:10:32.631215096 CEST	49737	443	192.168.2.5	184.28.90.27
Sep 10, 2024 18:10:32.631866932 CEST	49737	443	192.168.2.5	184.28.90.27
Sep 10, 2024 18:10:32.631882906 CEST	443	49737	184.28.90.27	192.168.2.5
Sep 10, 2024 18:10:32.656985044 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.657051086 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.657092094 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.657139063 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.657169104 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.657270908 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.657346010 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.663435936 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.663506031 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.663532019 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.669394016 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.669459105 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.669466972 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.675784111 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.675837994 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.675844908 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.682071924 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.682161093 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.682167053 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.688383102 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.688502073 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.688508034 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.750041008 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.750134945 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.750144958 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.750510931 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.750560999 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.750566959 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.752480030 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.752579927 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.752585888 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.761617899 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.761677027 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.761682987 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.765930891 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.765985966 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.765991926 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.771550894 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.771610975 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.771617889 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.777816057 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.777884007 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.777892113 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.785273075 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.785347939 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.785355091 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.790884018 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.790966034 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.790971994 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.796427011 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.796505928 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.796510935 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.802479029 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.802532911 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.802537918 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.807288885 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.807351112 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.807356119 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.813050032 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.813114882 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.813119888 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.818775892 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.818833113 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.818837881 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.837987900 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.838031054 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.838041067 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.838056087 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.838094950 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.838108063 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.838165045 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.838215113 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.838218927 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.841557980 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.841626883 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.841631889 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.845278978 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.845340967 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.845356941 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.845361948 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.845412970 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.850045919 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.854501009 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.854543924 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.854572058 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.854577065 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.854757071 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.858376980 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.862477064 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.862514019 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.862536907 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.862541914 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.862588882 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.866794109 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.871073008 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.871109962 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.871155024 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.871161938 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.871212959 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.874874115 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.879514933 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.879581928 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.879586935 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.879717112 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.879776001 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.881131887 CEST	49730	443	192.168.2.5	142.250.184.206
Sep 10, 2024 18:10:32.881145954 CEST	443	49730	142.250.184.206	192.168.2.5
Sep 10, 2024 18:10:32.921631098 CEST	80	49731	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:32.921657085 CEST	80	49731	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:32.921673059 CEST	80	49731	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:32.921686888 CEST	80	49731	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:32.921703100 CEST	80	49731	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:32.921793938 CEST	49731	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:32.961463928 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:32.962182999 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:32.972961903 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:32.980359077 CEST	49732	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:32.980376959 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:32.981637001 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:32.981678009 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:32.982039928 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:32.982125998 CEST	49732	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:32.982954025 CEST	49734	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:32.982965946 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:32.983261108 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:32.983328104 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:32.986510992 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:32.986607075 CEST	49734	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.040543079 CEST	49732	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.040761948 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.041080952 CEST	49734	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.041363955 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.041378975 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.041532040 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.042280912 CEST	49732	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.042301893 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.042407990 CEST	49734	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.042475939 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.042512894 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.042532921 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.093535900 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.093535900 CEST	49734	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.093538046 CEST	49732	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.141376019 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.141516924 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.141561985 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.141601086 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.141608953 CEST	49732	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.141627073 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.141661882 CEST	49732	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.141671896 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.141779900 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.141817093 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.141854048 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.141877890 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.141904116 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.141917944 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.141961098 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.141961098 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.141995907 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.142039061 CEST	49732	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.142045975 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.142357111 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.142438889 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.142498970 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.142529964 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.142595053 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.142643929 CEST	49732	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.142648935 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.142690897 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.142730951 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.142745018 CEST	49732	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.142750025 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.142884016 CEST	49732	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.142905951 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.142941952 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.142992973 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.143007994 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.143070936 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.143693924 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.143919945 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.143963099 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.144005060 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.144010067 CEST	49734	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.144028902 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.144058943 CEST	49734	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.144731045 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.144804955 CEST	49734	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.144819021 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.147288084 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.147367954 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.147367954 CEST	49734	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.147437096 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.147578955 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.147643089 CEST	49734	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.147658110 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.147715092 CEST	49734	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.155168056 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.155869961 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.158732891 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.204382896 CEST	49732	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.204411983 CEST	49734	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.232208014 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.232315063 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.232358932 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.232402086 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.232418060 CEST	49732	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.232434034 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.232465982 CEST	49732	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.232481003 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.232522964 CEST	49732	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.232527971 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.232589960 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.232649088 CEST	49732	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.233536959 CEST	49732	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.233556986 CEST	443	49732	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.233582973 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.233648062 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.233670950 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.233709097 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.233728886 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.233736038 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.233758926 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.236103058 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.236124992 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.236175060 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.236188889 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.236193895 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.236222982 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.236228943 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.236253023 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.236552954 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.237235069 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.237310886 CEST	49734	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.237328053 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.237551928 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.237601995 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.237643003 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.237646103 CEST	49734	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.237656116 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.237680912 CEST	49734	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.237726927 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.237766027 CEST	49734	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.237770081 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.237781048 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.237813950 CEST	49734	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.237822056 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.237864017 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.238107920 CEST	49734	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.238262892 CEST	49734	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.238280058 CEST	443	49734	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.269535065 CEST	443	49737	184.28.90.27	192.168.2.5
Sep 10, 2024 18:10:33.269867897 CEST	49737	443	192.168.2.5	184.28.90.27
Sep 10, 2024 18:10:33.285625935 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.286273003 CEST	49737	443	192.168.2.5	184.28.90.27
Sep 10, 2024 18:10:33.286309004 CEST	443	49737	184.28.90.27	192.168.2.5
Sep 10, 2024 18:10:33.287071943 CEST	443	49737	184.28.90.27	192.168.2.5
Sep 10, 2024 18:10:33.288424015 CEST	49737	443	192.168.2.5	184.28.90.27
Sep 10, 2024 18:10:33.323790073 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.323818922 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.323860884 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.323879957 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.323986053 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.324021101 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.324054956 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.324146986 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.325289965 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.325314045 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.325351000 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.325378895 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.325438023 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.325452089 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.325524092 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.326329947 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.326374054 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.326420069 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.326432943 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.326458931 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.326498985 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.327991009 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.328032017 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.328080893 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.328094006 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.328120947 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.328136921 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.335408926 CEST	443	49737	184.28.90.27	192.168.2.5
Sep 10, 2024 18:10:33.360364914 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.360563040 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.360586882 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.360606909 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.360652924 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.360665083 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.360686064 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.360701084 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.360707998 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.360728025 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.360728025 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.360750914 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.360771894 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.360784054 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.360838890 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.366029978 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.366051912 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.366194010 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.414438963 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.414503098 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.414545059 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.414608002 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.414649010 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.414871931 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.415328026 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.415416956 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.415417910 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.415451050 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.415482998 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.415503979 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.416140079 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.416198969 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.416229010 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.416243076 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.416275978 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.416306973 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.416321993 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.416398048 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.416409969 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.416481972 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.416502953 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.416567087 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.416918039 CEST	49733	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:33.416950941 CEST	443	49733	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:33.421583891 CEST	80	49710	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.421654940 CEST	49710	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.538218021 CEST	49710	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.542668104 CEST	443	49737	184.28.90.27	192.168.2.5
Sep 10, 2024 18:10:33.542752981 CEST	443	49737	184.28.90.27	192.168.2.5
Sep 10, 2024 18:10:33.542860985 CEST	49737	443	192.168.2.5	184.28.90.27
Sep 10, 2024 18:10:33.543174028 CEST	80	49710	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.567643881 CEST	49737	443	192.168.2.5	184.28.90.27
Sep 10, 2024 18:10:33.567678928 CEST	443	49737	184.28.90.27	192.168.2.5
Sep 10, 2024 18:10:33.567692041 CEST	49737	443	192.168.2.5	184.28.90.27
Sep 10, 2024 18:10:33.567698002 CEST	443	49737	184.28.90.27	192.168.2.5
Sep 10, 2024 18:10:33.572993994 CEST	80	49713	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.573275089 CEST	49713	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.584645987 CEST	49713	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.589515924 CEST	80	49713	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.594008923 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:33.594042063 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:33.594254017 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:33.594862938 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:33.594876051 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:33.611785889 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.611898899 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.611917019 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.611932993 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.611948967 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.611975908 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.612009048 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.612293959 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.612355947 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.612399101 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.612457037 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.612473011 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.612497091 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.612500906 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.612513065 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.612540960 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.613430023 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.613461018 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.613478899 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.613495111 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.613518953 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.613562107 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.614195108 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.614233971 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.614250898 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.614260912 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.614314079 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.614322901 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.614329100 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.614411116 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.615151882 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.615209103 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.615258932 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.616882086 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.659542084 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.698936939 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.698977947 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.699218988 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.863368034 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.863403082 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.863414049 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.863425016 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.863442898 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.863451004 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.863455057 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.863466978 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.863478899 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.863491058 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.863492012 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.863502026 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.863512993 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.863521099 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.863542080 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.864057064 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.864094973 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.864105940 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.864118099 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.864151955 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.864187956 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.864198923 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.864209890 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.864222050 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.864238024 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.864260912 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.864969969 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.865017891 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.865029097 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.865135908 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.865305901 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.865339994 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.865498066 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.865650892 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.865690947 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.865830898 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.868321896 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.868340969 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.868351936 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.868361950 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.868364096 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.868372917 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.868385077 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.868390083 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.868397951 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.868407965 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.868417978 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.868419886 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.868432045 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.868442059 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.868444920 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.868453026 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.868467093 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.868482113 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.868503094 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.868514061 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.868525028 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.868535995 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.868546009 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.868562937 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.868643045 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.868655920 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.868680000 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.921520948 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.950022936 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.971126080 CEST	80	49709	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:33.971191883 CEST	49709	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:33.999563932 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:34.202951908 CEST	80	49722	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:34.203012943 CEST	49722	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:34.237603903 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.237879038 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.237943888 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.239243031 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.239327908 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.240502119 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.240578890 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.240879059 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.241002083 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.241139889 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.241158962 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.283968925 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.463742018 CEST	49722	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:34.463812113 CEST	49709	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:34.468806982 CEST	80	49722	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:34.468823910 CEST	80	49709	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:34.512635946 CEST	49743	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:10:34.512711048 CEST	443	49743	149.56.240.127	192.168.2.5
Sep 10, 2024 18:10:34.512804031 CEST	49743	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:10:34.513237000 CEST	49743	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:10:34.513269901 CEST	443	49743	149.56.240.127	192.168.2.5
Sep 10, 2024 18:10:34.525691986 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.525763988 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.525808096 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.525824070 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.525846004 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.525896072 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.525933981 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.531773090 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.531855106 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.531903982 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.537898064 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.537961006 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.538013935 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.544117928 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.544178963 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.544204950 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.550565004 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.550621986 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.550651073 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.556976080 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.557029009 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.557055950 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.597656012 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.614201069 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.614373922 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.614449978 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.614445925 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.614515066 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.614569902 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.620681047 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.627089977 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.627146006 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.627156019 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.627183914 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.627227068 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.633250952 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.633542061 CEST	49747	443	192.168.2.5	142.250.181.228
Sep 10, 2024 18:10:34.633589983 CEST	443	49747	142.250.181.228	192.168.2.5
Sep 10, 2024 18:10:34.633675098 CEST	49747	443	192.168.2.5	142.250.181.228
Sep 10, 2024 18:10:34.634145975 CEST	49747	443	192.168.2.5	142.250.181.228
Sep 10, 2024 18:10:34.634170055 CEST	443	49747	142.250.181.228	192.168.2.5
Sep 10, 2024 18:10:34.639372110 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.639427900 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.639458895 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.645574093 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.645689011 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.645697117 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.645728111 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.645776033 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.651897907 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.658957958 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.659006119 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.659018993 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.659060955 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.659105062 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.680578947 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.691699028 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.691781044 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.691816092 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.692166090 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.692220926 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.692231894 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.692318916 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.692365885 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.692373037 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.693630934 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.693676949 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.693687916 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.693855047 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.693907022 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.693914890 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.703027010 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.703098059 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.703107119 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.703135014 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.703253031 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.703272104 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.703346968 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.703419924 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.703428030 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.707093000 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.707243919 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.707252026 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.711260080 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.711327076 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.711342096 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.715187073 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.715306044 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.715320110 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.719377041 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.719474077 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.719491005 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.723294973 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.723366976 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.723423004 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.727422953 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.727495909 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.727547884 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.731467009 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.731651068 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.731674910 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.735485077 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.735552073 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.735578060 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.739500046 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.739577055 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.739599943 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.744865894 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:34.744950056 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.745280981 CEST	49742	443	192.168.2.5	142.250.186.110
Sep 10, 2024 18:10:34.745305061 CEST	443	49742	142.250.186.110	192.168.2.5
Sep 10, 2024 18:10:35.117666960 CEST	443	49743	149.56.240.127	192.168.2.5
Sep 10, 2024 18:10:35.118218899 CEST	49743	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:10:35.118257046 CEST	443	49743	149.56.240.127	192.168.2.5
Sep 10, 2024 18:10:35.119715929 CEST	443	49743	149.56.240.127	192.168.2.5
Sep 10, 2024 18:10:35.119777918 CEST	49743	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:10:35.121025085 CEST	49743	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:10:35.121108055 CEST	443	49743	149.56.240.127	192.168.2.5
Sep 10, 2024 18:10:35.121239901 CEST	49743	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:10:35.121251106 CEST	443	49743	149.56.240.127	192.168.2.5
Sep 10, 2024 18:10:35.161326885 CEST	49743	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:10:35.227071047 CEST	443	49743	149.56.240.127	192.168.2.5
Sep 10, 2024 18:10:35.227298021 CEST	443	49743	149.56.240.127	192.168.2.5
Sep 10, 2024 18:10:35.227411985 CEST	49743	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:10:35.229093075 CEST	49743	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:10:35.229144096 CEST	443	49743	149.56.240.127	192.168.2.5
Sep 10, 2024 18:10:35.262089968 CEST	49752	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:35.262165070 CEST	443	49752	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:35.262269020 CEST	49752	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:35.262525082 CEST	49752	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:35.262547970 CEST	443	49752	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:35.277724028 CEST	49754	443	192.168.2.5	54.39.128.162
Sep 10, 2024 18:10:35.277759075 CEST	443	49754	54.39.128.162	192.168.2.5
Sep 10, 2024 18:10:35.278117895 CEST	49754	443	192.168.2.5	54.39.128.162
Sep 10, 2024 18:10:35.278403044 CEST	49754	443	192.168.2.5	54.39.128.162
Sep 10, 2024 18:10:35.278415918 CEST	443	49754	54.39.128.162	192.168.2.5
Sep 10, 2024 18:10:35.281521082 CEST	443	49747	142.250.181.228	192.168.2.5
Sep 10, 2024 18:10:35.282521009 CEST	49747	443	192.168.2.5	142.250.181.228
Sep 10, 2024 18:10:35.282563925 CEST	443	49747	142.250.181.228	192.168.2.5
Sep 10, 2024 18:10:35.283818960 CEST	443	49747	142.250.181.228	192.168.2.5
Sep 10, 2024 18:10:35.283885002 CEST	49747	443	192.168.2.5	142.250.181.228
Sep 10, 2024 18:10:35.284137964 CEST	49747	443	192.168.2.5	142.250.181.228
Sep 10, 2024 18:10:35.284219027 CEST	443	49747	142.250.181.228	192.168.2.5
Sep 10, 2024 18:10:35.284240007 CEST	49747	443	192.168.2.5	142.250.181.228
Sep 10, 2024 18:10:35.327435970 CEST	443	49747	142.250.181.228	192.168.2.5
Sep 10, 2024 18:10:35.434710979 CEST	49747	443	192.168.2.5	142.250.181.228
Sep 10, 2024 18:10:35.434747934 CEST	443	49747	142.250.181.228	192.168.2.5
Sep 10, 2024 18:10:35.570504904 CEST	443	49747	142.250.181.228	192.168.2.5
Sep 10, 2024 18:10:35.570713997 CEST	49747	443	192.168.2.5	142.250.181.228
Sep 10, 2024 18:10:35.572262049 CEST	49747	443	192.168.2.5	142.250.181.228
Sep 10, 2024 18:10:35.572288990 CEST	443	49747	142.250.181.228	192.168.2.5
Sep 10, 2024 18:10:35.659743071 CEST	49755	443	192.168.2.5	142.250.185.68
Sep 10, 2024 18:10:35.659795046 CEST	443	49755	142.250.185.68	192.168.2.5
Sep 10, 2024 18:10:35.659879923 CEST	49755	443	192.168.2.5	142.250.185.68
Sep 10, 2024 18:10:35.660747051 CEST	49755	443	192.168.2.5	142.250.185.68
Sep 10, 2024 18:10:35.660772085 CEST	443	49755	142.250.185.68	192.168.2.5
Sep 10, 2024 18:10:35.760828018 CEST	443	49752	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:35.843832970 CEST	49752	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:35.843868017 CEST	443	49752	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:35.847450018 CEST	443	49752	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:35.847481012 CEST	443	49752	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:35.847531080 CEST	49752	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:35.859174967 CEST	49752	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:35.859360933 CEST	443	49752	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:35.859996080 CEST	49752	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:35.860016108 CEST	443	49752	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:35.878492117 CEST	443	49754	54.39.128.162	192.168.2.5
Sep 10, 2024 18:10:35.878927946 CEST	49754	443	192.168.2.5	54.39.128.162
Sep 10, 2024 18:10:35.878952026 CEST	443	49754	54.39.128.162	192.168.2.5
Sep 10, 2024 18:10:35.880487919 CEST	443	49754	54.39.128.162	192.168.2.5
Sep 10, 2024 18:10:35.880572081 CEST	49754	443	192.168.2.5	54.39.128.162
Sep 10, 2024 18:10:35.881231070 CEST	49754	443	192.168.2.5	54.39.128.162
Sep 10, 2024 18:10:35.881333113 CEST	443	49754	54.39.128.162	192.168.2.5
Sep 10, 2024 18:10:35.881632090 CEST	49754	443	192.168.2.5	54.39.128.162
Sep 10, 2024 18:10:35.881647110 CEST	443	49754	54.39.128.162	192.168.2.5
Sep 10, 2024 18:10:35.921331882 CEST	49754	443	192.168.2.5	54.39.128.162
Sep 10, 2024 18:10:35.987895966 CEST	443	49754	54.39.128.162	192.168.2.5
Sep 10, 2024 18:10:35.988111973 CEST	443	49754	54.39.128.162	192.168.2.5
Sep 10, 2024 18:10:35.988212109 CEST	49754	443	192.168.2.5	54.39.128.162
Sep 10, 2024 18:10:35.991202116 CEST	49754	443	192.168.2.5	54.39.128.162
Sep 10, 2024 18:10:35.991228104 CEST	443	49754	54.39.128.162	192.168.2.5
Sep 10, 2024 18:10:36.003530979 CEST	443	49752	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.003627062 CEST	49752	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.003664017 CEST	443	49752	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.003803968 CEST	443	49752	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.003880978 CEST	49752	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.003895998 CEST	443	49752	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.004010916 CEST	443	49752	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.004070044 CEST	49752	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.004081964 CEST	443	49752	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.004317999 CEST	443	49752	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.004375935 CEST	49752	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.006597996 CEST	49752	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.006639004 CEST	443	49752	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.097029924 CEST	49761	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.097080946 CEST	443	49761	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.097142935 CEST	49761	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.105369091 CEST	49764	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:10:36.105465889 CEST	443	49764	141.101.120.11	192.168.2.5
Sep 10, 2024 18:10:36.105556011 CEST	49764	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:10:36.106189013 CEST	49761	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.106203079 CEST	443	49761	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.106658936 CEST	49765	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:10:36.106750965 CEST	443	49765	54.93.159.243	192.168.2.5
Sep 10, 2024 18:10:36.106879950 CEST	49765	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:10:36.155823946 CEST	49765	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:10:36.155860901 CEST	443	49765	54.93.159.243	192.168.2.5
Sep 10, 2024 18:10:36.156346083 CEST	49764	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:10:36.156394005 CEST	443	49764	141.101.120.11	192.168.2.5
Sep 10, 2024 18:10:36.239505053 CEST	49767	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.239552021 CEST	443	49767	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.239629984 CEST	49767	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.240060091 CEST	49767	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.240072966 CEST	443	49767	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.313709021 CEST	443	49755	142.250.185.68	192.168.2.5
Sep 10, 2024 18:10:36.314740896 CEST	49755	443	192.168.2.5	142.250.185.68
Sep 10, 2024 18:10:36.314770937 CEST	443	49755	142.250.185.68	192.168.2.5
Sep 10, 2024 18:10:36.318346977 CEST	443	49755	142.250.185.68	192.168.2.5
Sep 10, 2024 18:10:36.318424940 CEST	49755	443	192.168.2.5	142.250.185.68
Sep 10, 2024 18:10:36.318819046 CEST	49755	443	192.168.2.5	142.250.185.68
Sep 10, 2024 18:10:36.318994999 CEST	443	49755	142.250.185.68	192.168.2.5
Sep 10, 2024 18:10:36.319029093 CEST	49755	443	192.168.2.5	142.250.185.68
Sep 10, 2024 18:10:36.363405943 CEST	443	49755	142.250.185.68	192.168.2.5
Sep 10, 2024 18:10:36.388756037 CEST	49755	443	192.168.2.5	142.250.185.68
Sep 10, 2024 18:10:36.388787031 CEST	443	49755	142.250.185.68	192.168.2.5
Sep 10, 2024 18:10:36.580688953 CEST	443	49761	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.580890894 CEST	49761	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.580914974 CEST	443	49761	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.582659960 CEST	443	49761	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.582731009 CEST	49761	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.583689928 CEST	49761	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.583790064 CEST	443	49761	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.583803892 CEST	49761	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.591408968 CEST	49755	443	192.168.2.5	142.250.185.68
Sep 10, 2024 18:10:36.597991943 CEST	443	49755	142.250.185.68	192.168.2.5
Sep 10, 2024 18:10:36.598428011 CEST	443	49755	142.250.185.68	192.168.2.5
Sep 10, 2024 18:10:36.598507881 CEST	49755	443	192.168.2.5	142.250.185.68
Sep 10, 2024 18:10:36.599123955 CEST	49755	443	192.168.2.5	142.250.185.68
Sep 10, 2024 18:10:36.599134922 CEST	443	49755	142.250.185.68	192.168.2.5
Sep 10, 2024 18:10:36.625540972 CEST	49761	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.625554085 CEST	443	49761	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.647005081 CEST	443	49764	141.101.120.11	192.168.2.5
Sep 10, 2024 18:10:36.647391081 CEST	49764	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:10:36.647425890 CEST	443	49764	141.101.120.11	192.168.2.5
Sep 10, 2024 18:10:36.651257038 CEST	443	49764	141.101.120.11	192.168.2.5
Sep 10, 2024 18:10:36.651344061 CEST	49764	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:10:36.651653051 CEST	49764	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:10:36.651846886 CEST	443	49764	141.101.120.11	192.168.2.5
Sep 10, 2024 18:10:36.651911020 CEST	49764	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:10:36.651932001 CEST	443	49764	141.101.120.11	192.168.2.5
Sep 10, 2024 18:10:36.670890093 CEST	49761	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.703439951 CEST	443	49767	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.704421997 CEST	49767	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.704464912 CEST	443	49767	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.705343962 CEST	443	49767	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.705540895 CEST	49767	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.705971956 CEST	49767	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.706044912 CEST	443	49767	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.706167936 CEST	49767	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.706201077 CEST	443	49767	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.752511978 CEST	443	49761	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.752646923 CEST	443	49761	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.752706051 CEST	49761	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.759917974 CEST	49761	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.759944916 CEST	443	49761	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.784812927 CEST	49769	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:10:36.784836054 CEST	443	49769	141.101.120.11	192.168.2.5
Sep 10, 2024 18:10:36.784888983 CEST	49769	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:10:36.785424948 CEST	49769	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:10:36.785443068 CEST	443	49769	141.101.120.11	192.168.2.5
Sep 10, 2024 18:10:36.794586897 CEST	49764	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:10:36.794588089 CEST	49767	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.839586973 CEST	443	49764	141.101.120.11	192.168.2.5
Sep 10, 2024 18:10:36.839905977 CEST	443	49764	141.101.120.11	192.168.2.5
Sep 10, 2024 18:10:36.839987993 CEST	49764	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:10:36.868025064 CEST	443	49767	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.868074894 CEST	443	49767	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.868107080 CEST	443	49767	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.868133068 CEST	443	49767	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.868134022 CEST	49767	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.868180037 CEST	443	49767	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.868216991 CEST	49767	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.868235111 CEST	443	49767	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.868262053 CEST	443	49767	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.868284941 CEST	49767	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.868298054 CEST	443	49767	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.868347883 CEST	49767	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.868350983 CEST	443	49767	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:36.868408918 CEST	49767	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.869291067 CEST	49764	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:10:36.869318008 CEST	443	49764	141.101.120.11	192.168.2.5
Sep 10, 2024 18:10:36.879126072 CEST	80	49731	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:36.879184961 CEST	49731	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:36.879854918 CEST	49770	443	192.168.2.5	67.202.105.31
Sep 10, 2024 18:10:36.879903078 CEST	443	49770	67.202.105.31	192.168.2.5
Sep 10, 2024 18:10:36.880114079 CEST	49770	443	192.168.2.5	67.202.105.31
Sep 10, 2024 18:10:36.880469084 CEST	49770	443	192.168.2.5	67.202.105.31
Sep 10, 2024 18:10:36.880484104 CEST	443	49770	67.202.105.31	192.168.2.5
Sep 10, 2024 18:10:36.881007910 CEST	49767	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:10:36.881022930 CEST	443	49767	141.101.120.10	192.168.2.5
Sep 10, 2024 18:10:37.092252970 CEST	443	49765	54.93.159.243	192.168.2.5
Sep 10, 2024 18:10:37.095360994 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:37.095433950 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:37.098684072 CEST	49765	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:10:37.098723888 CEST	443	49765	54.93.159.243	192.168.2.5
Sep 10, 2024 18:10:37.099658012 CEST	443	49765	54.93.159.243	192.168.2.5
Sep 10, 2024 18:10:37.099730968 CEST	49765	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:10:37.101385117 CEST	49765	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:10:37.101457119 CEST	443	49765	54.93.159.243	192.168.2.5
Sep 10, 2024 18:10:37.101784945 CEST	49765	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:10:37.101807117 CEST	443	49765	54.93.159.243	192.168.2.5
Sep 10, 2024 18:10:37.156265020 CEST	49765	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:10:37.196969032 CEST	49731	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:37.197124958 CEST	49719	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:37.207015991 CEST	80	49731	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:37.207032919 CEST	80	49719	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:37.213413954 CEST	49771	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:10:37.213457108 CEST	443	49771	67.202.105.32	192.168.2.5
Sep 10, 2024 18:10:37.213511944 CEST	49771	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:10:37.213891983 CEST	49771	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:10:37.213902950 CEST	443	49771	67.202.105.32	192.168.2.5
Sep 10, 2024 18:10:37.252134085 CEST	443	49769	141.101.120.11	192.168.2.5
Sep 10, 2024 18:10:37.255649090 CEST	49769	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:10:37.255661011 CEST	443	49769	141.101.120.11	192.168.2.5
Sep 10, 2024 18:10:37.260221958 CEST	443	49769	141.101.120.11	192.168.2.5
Sep 10, 2024 18:10:37.260291100 CEST	49769	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:10:37.260859966 CEST	49769	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:10:37.261172056 CEST	49769	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:10:37.261177063 CEST	443	49769	141.101.120.11	192.168.2.5
Sep 10, 2024 18:10:37.261221886 CEST	443	49769	141.101.120.11	192.168.2.5
Sep 10, 2024 18:10:37.274571896 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:37.274651051 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:37.290122032 CEST	443	49765	54.93.159.243	192.168.2.5
Sep 10, 2024 18:10:37.290139914 CEST	443	49765	54.93.159.243	192.168.2.5
Sep 10, 2024 18:10:37.290205956 CEST	49765	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:10:37.290260077 CEST	443	49765	54.93.159.243	192.168.2.5
Sep 10, 2024 18:10:37.292615891 CEST	49765	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:10:37.292669058 CEST	443	49765	54.93.159.243	192.168.2.5
Sep 10, 2024 18:10:37.292730093 CEST	49765	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:10:37.309145927 CEST	49735	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:10:37.310966015 CEST	49769	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:10:37.310976982 CEST	443	49769	141.101.120.11	192.168.2.5
Sep 10, 2024 18:10:37.313838005 CEST	49772	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:10:37.313878059 CEST	443	49772	54.93.159.243	192.168.2.5
Sep 10, 2024 18:10:37.313968897 CEST	49772	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:10:37.314081907 CEST	80	49735	217.21.73.115	192.168.2.5
Sep 10, 2024 18:10:37.318187952 CEST	49772	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:10:37.318198919 CEST	443	49772	54.93.159.243	192.168.2.5
Sep 10, 2024 18:10:37.362353086 CEST	49769	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:10:37.385056973 CEST	443	49770	67.202.105.31	192.168.2.5
Sep 10, 2024 18:10:37.416789055 CEST	443	49769	141.101.120.11	192.168.2.5
Sep 10, 2024 18:10:37.417053938 CEST	443	49769	141.101.120.11	192.168.2.5
Sep 10, 2024 18:10:37.417112112 CEST	49769	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:10:37.430228949 CEST	49770	443	192.168.2.5	67.202.105.31
Sep 10, 2024 18:10:37.605457067 CEST	49770	443	192.168.2.5	67.202.105.31
Sep 10, 2024 18:10:37.605484009 CEST	443	49770	67.202.105.31	192.168.2.5
Sep 10, 2024 18:10:37.606681108 CEST	443	49770	67.202.105.31	192.168.2.5
Sep 10, 2024 18:10:37.606775999 CEST	49770	443	192.168.2.5	67.202.105.31
Sep 10, 2024 18:10:37.620830059 CEST	49770	443	192.168.2.5	67.202.105.31
Sep 10, 2024 18:10:37.620909929 CEST	443	49770	67.202.105.31	192.168.2.5
Sep 10, 2024 18:10:37.621046066 CEST	49770	443	192.168.2.5	67.202.105.31
Sep 10, 2024 18:10:37.621073961 CEST	443	49770	67.202.105.31	192.168.2.5
Sep 10, 2024 18:10:37.670378923 CEST	49770	443	192.168.2.5	67.202.105.31
Sep 10, 2024 18:10:37.710443974 CEST	443	49771	67.202.105.32	192.168.2.5
Sep 10, 2024 18:10:37.739761114 CEST	443	49770	67.202.105.31	192.168.2.5
Sep 10, 2024 18:10:37.739825964 CEST	443	49770	67.202.105.31	192.168.2.5
Sep 10, 2024 18:10:37.739964008 CEST	49770	443	192.168.2.5	67.202.105.31
Sep 10, 2024 18:10:37.752804041 CEST	49771	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:10:37.809072971 CEST	49771	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:10:37.809086084 CEST	443	49771	67.202.105.32	192.168.2.5
Sep 10, 2024 18:10:37.810178995 CEST	443	49771	67.202.105.32	192.168.2.5
Sep 10, 2024 18:10:37.810250044 CEST	49771	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:10:37.815620899 CEST	49771	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:10:37.815680027 CEST	443	49771	67.202.105.32	192.168.2.5
Sep 10, 2024 18:10:37.816209078 CEST	49771	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:10:37.816216946 CEST	443	49771	67.202.105.32	192.168.2.5
Sep 10, 2024 18:10:37.860582113 CEST	49771	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:10:38.039411068 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.039468050 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.039601088 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.039911032 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.039927959 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.068744898 CEST	49769	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:10:38.068775892 CEST	443	49769	141.101.120.11	192.168.2.5
Sep 10, 2024 18:10:38.070566893 CEST	49770	443	192.168.2.5	67.202.105.31
Sep 10, 2024 18:10:38.070595980 CEST	443	49770	67.202.105.31	192.168.2.5
Sep 10, 2024 18:10:38.127187014 CEST	443	49771	67.202.105.32	192.168.2.5
Sep 10, 2024 18:10:38.127425909 CEST	443	49771	67.202.105.32	192.168.2.5
Sep 10, 2024 18:10:38.127496004 CEST	49771	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:10:38.129137993 CEST	443	49772	54.93.159.243	192.168.2.5
Sep 10, 2024 18:10:38.129283905 CEST	49771	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:10:38.129302979 CEST	443	49771	67.202.105.32	192.168.2.5
Sep 10, 2024 18:10:38.130157948 CEST	49772	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:10:38.130179882 CEST	443	49772	54.93.159.243	192.168.2.5
Sep 10, 2024 18:10:38.133771896 CEST	443	49772	54.93.159.243	192.168.2.5
Sep 10, 2024 18:10:38.133843899 CEST	49772	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:10:38.134833097 CEST	49772	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:10:38.135008097 CEST	443	49772	54.93.159.243	192.168.2.5
Sep 10, 2024 18:10:38.135019064 CEST	49772	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:10:38.175405025 CEST	443	49772	54.93.159.243	192.168.2.5
Sep 10, 2024 18:10:38.239536047 CEST	49777	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:10:38.239584923 CEST	443	49777	35.234.162.151	192.168.2.5
Sep 10, 2024 18:10:38.239641905 CEST	49777	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:10:38.240622997 CEST	49777	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:10:38.240643024 CEST	443	49777	35.234.162.151	192.168.2.5
Sep 10, 2024 18:10:38.248640060 CEST	49772	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:10:38.248656034 CEST	443	49772	54.93.159.243	192.168.2.5
Sep 10, 2024 18:10:38.436094046 CEST	49772	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:10:38.449584007 CEST	443	49772	54.93.159.243	192.168.2.5
Sep 10, 2024 18:10:38.449769974 CEST	443	49772	54.93.159.243	192.168.2.5
Sep 10, 2024 18:10:38.449839115 CEST	49772	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:10:38.551961899 CEST	49772	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:10:38.551995993 CEST	443	49772	54.93.159.243	192.168.2.5
Sep 10, 2024 18:10:38.557935953 CEST	49778	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:10:38.557981014 CEST	443	49778	35.234.162.151	192.168.2.5
Sep 10, 2024 18:10:38.558760881 CEST	49778	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:10:38.559776068 CEST	49778	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:10:38.559792995 CEST	443	49778	35.234.162.151	192.168.2.5
Sep 10, 2024 18:10:38.573591948 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.574974060 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.574989080 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.576126099 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.576630116 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.576750994 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.576798916 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.682657957 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.682734013 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.682749987 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.682843924 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.682910919 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.682918072 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.683027029 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.683115959 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.683175087 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.683182955 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.683259010 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.683264971 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.687530041 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.687621117 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.687628984 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.746553898 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.769083977 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.769257069 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.769310951 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.769321918 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.769404888 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.769459963 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.769467115 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.769555092 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.769610882 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.769617081 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.770191908 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.770246029 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.770252943 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.770571947 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.770627975 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.770634890 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.771065950 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.771116972 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.771123886 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.771219015 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.771274090 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.771281004 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.772357941 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.772411108 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.772418976 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.772511959 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.772563934 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.772572041 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.774044037 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.774102926 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.774110079 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.846904039 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.855909109 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.855995893 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.856035948 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.856044054 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.856069088 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.856103897 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.856143951 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.856179953 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.856185913 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.856185913 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.856198072 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.856482029 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.856491089 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.856550932 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.856590033 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.856626034 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.856632948 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.856643915 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.856687069 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.856719971 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.856738091 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.856738091 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.856748104 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.856796980 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.856802940 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.857732058 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.857759953 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.857772112 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.857800007 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.857816935 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.857884884 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.857884884 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.861165047 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.861185074 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.861306906 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.861306906 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.861316919 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.942984104 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.943054914 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.943063974 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.943094969 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.943229914 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.943514109 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.943535089 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.943578005 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.943609953 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.943667889 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.943681955 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.944000006 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.944048882 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.944094896 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.944102049 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.944236040 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.944420099 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.944472075 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.944530010 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.944546938 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:38.944552898 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.948271036 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:38.948476076 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:39.049881935 CEST	443	49777	35.234.162.151	192.168.2.5
Sep 10, 2024 18:10:39.102752924 CEST	49777	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:10:39.102772951 CEST	443	49777	35.234.162.151	192.168.2.5
Sep 10, 2024 18:10:39.106492043 CEST	443	49777	35.234.162.151	192.168.2.5
Sep 10, 2024 18:10:39.106528997 CEST	443	49777	35.234.162.151	192.168.2.5
Sep 10, 2024 18:10:39.106566906 CEST	49777	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:10:39.133894920 CEST	49777	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:10:39.134259939 CEST	443	49777	35.234.162.151	192.168.2.5
Sep 10, 2024 18:10:39.134299994 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:39.137427092 CEST	49777	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:10:39.137434959 CEST	443	49777	35.234.162.151	192.168.2.5
Sep 10, 2024 18:10:39.142352104 CEST	49774	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:39.142369032 CEST	443	49774	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:39.146552086 CEST	49780	53	192.168.2.5	1.1.1.1
Sep 10, 2024 18:10:39.151420116 CEST	53	49780	1.1.1.1	192.168.2.5
Sep 10, 2024 18:10:39.151484966 CEST	49780	53	192.168.2.5	1.1.1.1
Sep 10, 2024 18:10:39.151551008 CEST	49780	53	192.168.2.5	1.1.1.1
Sep 10, 2024 18:10:39.151551008 CEST	49780	53	192.168.2.5	1.1.1.1
Sep 10, 2024 18:10:39.151592970 CEST	49780	53	192.168.2.5	1.1.1.1
Sep 10, 2024 18:10:39.156367064 CEST	53	49780	1.1.1.1	192.168.2.5
Sep 10, 2024 18:10:39.156472921 CEST	53	49780	1.1.1.1	192.168.2.5
Sep 10, 2024 18:10:39.186975956 CEST	49777	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:10:39.199103117 CEST	53	49780	1.1.1.1	192.168.2.5
Sep 10, 2024 18:10:39.311322927 CEST	443	49777	35.234.162.151	192.168.2.5
Sep 10, 2024 18:10:39.311583996 CEST	443	49777	35.234.162.151	192.168.2.5
Sep 10, 2024 18:10:39.311639071 CEST	49777	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:10:39.315244913 CEST	49777	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:10:39.315263033 CEST	443	49777	35.234.162.151	192.168.2.5
Sep 10, 2024 18:10:39.356551886 CEST	443	49778	35.234.162.151	192.168.2.5
Sep 10, 2024 18:10:39.358388901 CEST	49778	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:10:39.358400106 CEST	443	49778	35.234.162.151	192.168.2.5
Sep 10, 2024 18:10:39.361988068 CEST	443	49778	35.234.162.151	192.168.2.5
Sep 10, 2024 18:10:39.362055063 CEST	49778	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:10:39.362473965 CEST	49778	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:10:39.362596989 CEST	49778	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:10:39.362601995 CEST	443	49778	35.234.162.151	192.168.2.5
Sep 10, 2024 18:10:39.362649918 CEST	443	49778	35.234.162.151	192.168.2.5
Sep 10, 2024 18:10:39.372131109 CEST	49786	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:10:39.372144938 CEST	443	49786	3.73.251.164	192.168.2.5
Sep 10, 2024 18:10:39.372194052 CEST	49786	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:10:39.372345924 CEST	49786	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:10:39.372355938 CEST	443	49786	3.73.251.164	192.168.2.5
Sep 10, 2024 18:10:39.374394894 CEST	49787	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:10:39.374427080 CEST	443	49787	67.202.105.32	192.168.2.5
Sep 10, 2024 18:10:39.374553919 CEST	49787	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:10:39.375555038 CEST	49787	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:10:39.375577927 CEST	443	49787	67.202.105.32	192.168.2.5
Sep 10, 2024 18:10:39.378911018 CEST	49789	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:10:39.378921986 CEST	443	49789	3.73.251.164	192.168.2.5
Sep 10, 2024 18:10:39.378971100 CEST	49789	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:10:39.379234076 CEST	49789	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:10:39.379245996 CEST	443	49789	3.73.251.164	192.168.2.5
Sep 10, 2024 18:10:39.379606962 CEST	49790	443	192.168.2.5	67.202.105.34
Sep 10, 2024 18:10:39.379625082 CEST	443	49790	67.202.105.34	192.168.2.5
Sep 10, 2024 18:10:39.379735947 CEST	49790	443	192.168.2.5	67.202.105.34
Sep 10, 2024 18:10:39.379841089 CEST	49790	443	192.168.2.5	67.202.105.34
Sep 10, 2024 18:10:39.379856110 CEST	443	49790	67.202.105.34	192.168.2.5
Sep 10, 2024 18:10:39.424900055 CEST	49792	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:39.424954891 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:39.425026894 CEST	49792	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:39.425225973 CEST	49792	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:39.425260067 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:39.426510096 CEST	49793	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:10:39.426539898 CEST	443	49793	54.38.113.8	192.168.2.5
Sep 10, 2024 18:10:39.426600933 CEST	49793	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:10:39.426830053 CEST	49793	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:10:39.426843882 CEST	443	49793	54.38.113.8	192.168.2.5
Sep 10, 2024 18:10:39.427362919 CEST	49794	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:10:39.427464008 CEST	443	49794	104.26.12.60	192.168.2.5
Sep 10, 2024 18:10:39.427719116 CEST	49794	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:10:39.427719116 CEST	49794	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:10:39.427763939 CEST	443	49794	104.26.12.60	192.168.2.5
Sep 10, 2024 18:10:39.437666893 CEST	49778	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:10:39.437674999 CEST	443	49778	35.234.162.151	192.168.2.5
Sep 10, 2024 18:10:39.448527098 CEST	49795	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:10:39.448558092 CEST	443	49795	18.239.18.33	192.168.2.5
Sep 10, 2024 18:10:39.448800087 CEST	49795	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:10:39.448801041 CEST	49795	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:10:39.448823929 CEST	443	49795	18.239.18.33	192.168.2.5
Sep 10, 2024 18:10:39.530700922 CEST	53	49780	1.1.1.1	192.168.2.5
Sep 10, 2024 18:10:39.530777931 CEST	49780	53	192.168.2.5	1.1.1.1
Sep 10, 2024 18:10:39.536000013 CEST	443	49778	35.234.162.151	192.168.2.5
Sep 10, 2024 18:10:39.536077023 CEST	49778	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:10:39.550473928 CEST	49778	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:10:39.550508976 CEST	443	49778	35.234.162.151	192.168.2.5
Sep 10, 2024 18:10:39.890695095 CEST	443	49790	67.202.105.34	192.168.2.5
Sep 10, 2024 18:10:39.890988111 CEST	49790	443	192.168.2.5	67.202.105.34
Sep 10, 2024 18:10:39.891007900 CEST	443	49790	67.202.105.34	192.168.2.5
Sep 10, 2024 18:10:39.892357111 CEST	443	49790	67.202.105.34	192.168.2.5
Sep 10, 2024 18:10:39.892550945 CEST	49790	443	192.168.2.5	67.202.105.34
Sep 10, 2024 18:10:39.893201113 CEST	49790	443	192.168.2.5	67.202.105.34
Sep 10, 2024 18:10:39.893201113 CEST	49790	443	192.168.2.5	67.202.105.34
Sep 10, 2024 18:10:39.893219948 CEST	443	49790	67.202.105.34	192.168.2.5
Sep 10, 2024 18:10:39.893287897 CEST	443	49790	67.202.105.34	192.168.2.5
Sep 10, 2024 18:10:39.896159887 CEST	443	49787	67.202.105.32	192.168.2.5
Sep 10, 2024 18:10:39.896595001 CEST	49787	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:10:39.896611929 CEST	443	49787	67.202.105.32	192.168.2.5
Sep 10, 2024 18:10:39.897589922 CEST	443	49787	67.202.105.32	192.168.2.5
Sep 10, 2024 18:10:39.897897959 CEST	49787	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:10:39.897897959 CEST	49787	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:10:39.897954941 CEST	443	49787	67.202.105.32	192.168.2.5
Sep 10, 2024 18:10:39.898343086 CEST	49787	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:10:39.906407118 CEST	443	49794	104.26.12.60	192.168.2.5
Sep 10, 2024 18:10:39.906807899 CEST	49794	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:10:39.906876087 CEST	443	49794	104.26.12.60	192.168.2.5
Sep 10, 2024 18:10:39.908541918 CEST	443	49794	104.26.12.60	192.168.2.5
Sep 10, 2024 18:10:39.908802986 CEST	49794	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:10:39.910613060 CEST	49794	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:10:39.910707951 CEST	443	49794	104.26.12.60	192.168.2.5
Sep 10, 2024 18:10:39.911180019 CEST	49794	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:10:39.933305025 CEST	443	49724	142.250.185.196	192.168.2.5
Sep 10, 2024 18:10:39.933460951 CEST	443	49724	142.250.185.196	192.168.2.5
Sep 10, 2024 18:10:39.933634996 CEST	49724	443	192.168.2.5	142.250.185.196
Sep 10, 2024 18:10:39.939589024 CEST	49790	443	192.168.2.5	67.202.105.34
Sep 10, 2024 18:10:39.939589024 CEST	49787	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:10:39.939609051 CEST	443	49790	67.202.105.34	192.168.2.5
Sep 10, 2024 18:10:39.939619064 CEST	443	49787	67.202.105.32	192.168.2.5
Sep 10, 2024 18:10:39.955398083 CEST	443	49794	104.26.12.60	192.168.2.5
Sep 10, 2024 18:10:40.033868074 CEST	443	49794	104.26.12.60	192.168.2.5
Sep 10, 2024 18:10:40.034029961 CEST	49794	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:10:40.034065962 CEST	443	49790	67.202.105.34	192.168.2.5
Sep 10, 2024 18:10:40.034111977 CEST	443	49790	67.202.105.34	192.168.2.5
Sep 10, 2024 18:10:40.034179926 CEST	443	49790	67.202.105.34	192.168.2.5
Sep 10, 2024 18:10:40.034209967 CEST	49790	443	192.168.2.5	67.202.105.34
Sep 10, 2024 18:10:40.034539938 CEST	49790	443	192.168.2.5	67.202.105.34
Sep 10, 2024 18:10:40.035480976 CEST	49790	443	192.168.2.5	67.202.105.34
Sep 10, 2024 18:10:40.035506964 CEST	443	49790	67.202.105.34	192.168.2.5
Sep 10, 2024 18:10:40.040052891 CEST	443	49787	67.202.105.32	192.168.2.5
Sep 10, 2024 18:10:40.040596008 CEST	49787	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:10:40.043332100 CEST	49787	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:10:40.043342113 CEST	49794	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:10:40.043349028 CEST	443	49787	67.202.105.32	192.168.2.5
Sep 10, 2024 18:10:40.043400049 CEST	443	49794	104.26.12.60	192.168.2.5
Sep 10, 2024 18:10:40.056193113 CEST	443	49793	54.38.113.8	192.168.2.5
Sep 10, 2024 18:10:40.056643963 CEST	49793	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:10:40.056662083 CEST	443	49793	54.38.113.8	192.168.2.5
Sep 10, 2024 18:10:40.057693005 CEST	443	49793	54.38.113.8	192.168.2.5
Sep 10, 2024 18:10:40.057991028 CEST	49793	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:10:40.059143066 CEST	49793	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:10:40.059143066 CEST	49793	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:10:40.059155941 CEST	443	49793	54.38.113.8	192.168.2.5
Sep 10, 2024 18:10:40.059201956 CEST	443	49793	54.38.113.8	192.168.2.5
Sep 10, 2024 18:10:40.094038010 CEST	49724	443	192.168.2.5	142.250.185.196
Sep 10, 2024 18:10:40.094110012 CEST	443	49724	142.250.185.196	192.168.2.5
Sep 10, 2024 18:10:40.104893923 CEST	49797	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:10:40.104917049 CEST	443	49797	104.26.12.60	192.168.2.5
Sep 10, 2024 18:10:40.105026960 CEST	49797	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:10:40.105437994 CEST	49797	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:10:40.105453014 CEST	443	49797	104.26.12.60	192.168.2.5
Sep 10, 2024 18:10:40.122044086 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.122375011 CEST	49792	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:40.122407913 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.123265982 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.123397112 CEST	49792	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:40.125430107 CEST	49792	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:40.125508070 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.125713110 CEST	49792	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:40.125730038 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.158480883 CEST	443	49795	18.239.18.33	192.168.2.5
Sep 10, 2024 18:10:40.188487053 CEST	49795	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:10:40.188505888 CEST	443	49795	18.239.18.33	192.168.2.5
Sep 10, 2024 18:10:40.192270041 CEST	443	49795	18.239.18.33	192.168.2.5
Sep 10, 2024 18:10:40.192372084 CEST	49795	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:10:40.194258928 CEST	49795	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:10:40.194437981 CEST	443	49795	18.239.18.33	192.168.2.5
Sep 10, 2024 18:10:40.194561958 CEST	49795	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:10:40.194571972 CEST	443	49795	18.239.18.33	192.168.2.5
Sep 10, 2024 18:10:40.232111931 CEST	443	49793	54.38.113.8	192.168.2.5
Sep 10, 2024 18:10:40.232223034 CEST	49793	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:10:40.236694098 CEST	49793	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:10:40.236716032 CEST	443	49793	54.38.113.8	192.168.2.5
Sep 10, 2024 18:10:40.236728907 CEST	49798	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:10:40.236826897 CEST	443	49798	54.38.113.8	192.168.2.5
Sep 10, 2024 18:10:40.237015963 CEST	49798	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:10:40.237201929 CEST	49798	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:10:40.237242937 CEST	443	49798	54.38.113.8	192.168.2.5
Sep 10, 2024 18:10:40.277498960 CEST	443	49786	3.73.251.164	192.168.2.5
Sep 10, 2024 18:10:40.282711029 CEST	49795	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:10:40.282716036 CEST	49792	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:40.285880089 CEST	49786	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:10:40.285888910 CEST	443	49786	3.73.251.164	192.168.2.5
Sep 10, 2024 18:10:40.289490938 CEST	443	49786	3.73.251.164	192.168.2.5
Sep 10, 2024 18:10:40.290343046 CEST	49786	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:10:40.290343046 CEST	49786	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:10:40.290343046 CEST	49786	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:10:40.290522099 CEST	443	49786	3.73.251.164	192.168.2.5
Sep 10, 2024 18:10:40.316294909 CEST	443	49789	3.73.251.164	192.168.2.5
Sep 10, 2024 18:10:40.317374945 CEST	49789	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:10:40.317405939 CEST	443	49789	3.73.251.164	192.168.2.5
Sep 10, 2024 18:10:40.318332911 CEST	443	49789	3.73.251.164	192.168.2.5
Sep 10, 2024 18:10:40.318463087 CEST	49789	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:10:40.318835020 CEST	49789	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:10:40.318835020 CEST	49789	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:10:40.318867922 CEST	443	49789	3.73.251.164	192.168.2.5
Sep 10, 2024 18:10:40.318916082 CEST	443	49789	3.73.251.164	192.168.2.5
Sep 10, 2024 18:10:40.374284029 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.382819891 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.382832050 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.382850885 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.382854939 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.382863998 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.382894993 CEST	49792	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:40.382915974 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.382955074 CEST	49792	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:40.382963896 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.382997990 CEST	49792	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:40.390645027 CEST	49786	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:10:40.390659094 CEST	443	49786	3.73.251.164	192.168.2.5
Sep 10, 2024 18:10:40.390657902 CEST	49789	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:10:40.390678883 CEST	443	49789	3.73.251.164	192.168.2.5
Sep 10, 2024 18:10:40.464441061 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.464453936 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.464503050 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.464509010 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.464515924 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.464533091 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.464529991 CEST	49792	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:40.464602947 CEST	49792	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:40.464602947 CEST	49792	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:40.464641094 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.464716911 CEST	49792	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:40.469089985 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.469096899 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.469146967 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.469186068 CEST	49792	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:40.469202995 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.469239950 CEST	49792	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:40.469412088 CEST	49792	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:40.475030899 CEST	443	49786	3.73.251.164	192.168.2.5
Sep 10, 2024 18:10:40.475145102 CEST	49786	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:10:40.475155115 CEST	443	49786	3.73.251.164	192.168.2.5
Sep 10, 2024 18:10:40.475184917 CEST	443	49786	3.73.251.164	192.168.2.5
Sep 10, 2024 18:10:40.475250959 CEST	49786	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:10:40.476670027 CEST	49786	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:10:40.476686954 CEST	443	49786	3.73.251.164	192.168.2.5
Sep 10, 2024 18:10:40.510668993 CEST	443	49789	3.73.251.164	192.168.2.5
Sep 10, 2024 18:10:40.511476994 CEST	49789	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:10:40.511573076 CEST	49789	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:10:40.511599064 CEST	443	49789	3.73.251.164	192.168.2.5
Sep 10, 2024 18:10:40.550256968 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.550275087 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.550308943 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.550383091 CEST	49792	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:40.550450087 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.550488949 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.550508976 CEST	49792	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:40.550841093 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.550909996 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.553524017 CEST	49792	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:40.562480927 CEST	49792	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:40.562517881 CEST	443	49792	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:40.568284988 CEST	443	49797	104.26.12.60	192.168.2.5
Sep 10, 2024 18:10:40.569925070 CEST	49797	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:10:40.569948912 CEST	443	49797	104.26.12.60	192.168.2.5
Sep 10, 2024 18:10:40.573199987 CEST	443	49797	104.26.12.60	192.168.2.5
Sep 10, 2024 18:10:40.573286057 CEST	49797	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:10:40.573864937 CEST	49797	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:10:40.573864937 CEST	49797	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:10:40.573880911 CEST	443	49797	104.26.12.60	192.168.2.5
Sep 10, 2024 18:10:40.573930979 CEST	443	49797	104.26.12.60	192.168.2.5
Sep 10, 2024 18:10:40.617232084 CEST	49802	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:40.617331982 CEST	443	49802	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:40.617947102 CEST	49802	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:40.617947102 CEST	49802	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:40.618038893 CEST	443	49802	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:40.731086016 CEST	443	49797	104.26.12.60	192.168.2.5
Sep 10, 2024 18:10:40.731154919 CEST	49797	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:10:40.733973026 CEST	49797	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:10:40.733995914 CEST	443	49797	104.26.12.60	192.168.2.5
Sep 10, 2024 18:10:40.925622940 CEST	443	49795	18.239.18.33	192.168.2.5
Sep 10, 2024 18:10:40.925664902 CEST	443	49795	18.239.18.33	192.168.2.5
Sep 10, 2024 18:10:40.925672054 CEST	443	49795	18.239.18.33	192.168.2.5
Sep 10, 2024 18:10:40.925689936 CEST	443	49795	18.239.18.33	192.168.2.5
Sep 10, 2024 18:10:40.925698042 CEST	443	49795	18.239.18.33	192.168.2.5
Sep 10, 2024 18:10:40.925700903 CEST	443	49795	18.239.18.33	192.168.2.5
Sep 10, 2024 18:10:40.925744057 CEST	49795	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:10:40.925765038 CEST	443	49795	18.239.18.33	192.168.2.5
Sep 10, 2024 18:10:40.925801039 CEST	49795	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:10:40.925868988 CEST	49795	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:10:40.974551916 CEST	443	49798	54.38.113.8	192.168.2.5
Sep 10, 2024 18:10:40.974905014 CEST	49798	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:10:40.974962950 CEST	443	49798	54.38.113.8	192.168.2.5
Sep 10, 2024 18:10:40.975460052 CEST	443	49798	54.38.113.8	192.168.2.5
Sep 10, 2024 18:10:40.975912094 CEST	49798	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:10:40.975994110 CEST	443	49798	54.38.113.8	192.168.2.5
Sep 10, 2024 18:10:40.976241112 CEST	49798	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:10:41.019409895 CEST	443	49798	54.38.113.8	192.168.2.5
Sep 10, 2024 18:10:41.020654917 CEST	443	49795	18.239.18.33	192.168.2.5
Sep 10, 2024 18:10:41.020740032 CEST	49795	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:10:41.083623886 CEST	443	49795	18.239.18.33	192.168.2.5
Sep 10, 2024 18:10:41.084373951 CEST	443	49795	18.239.18.33	192.168.2.5
Sep 10, 2024 18:10:41.084400892 CEST	443	49795	18.239.18.33	192.168.2.5
Sep 10, 2024 18:10:41.084439993 CEST	49795	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:10:41.084455967 CEST	443	49795	18.239.18.33	192.168.2.5
Sep 10, 2024 18:10:41.084498882 CEST	49795	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:10:41.085865021 CEST	443	49795	18.239.18.33	192.168.2.5
Sep 10, 2024 18:10:41.085901976 CEST	443	49795	18.239.18.33	192.168.2.5
Sep 10, 2024 18:10:41.085972071 CEST	49795	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:10:41.085972071 CEST	49795	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:10:41.085978985 CEST	443	49795	18.239.18.33	192.168.2.5
Sep 10, 2024 18:10:41.085999012 CEST	443	49795	18.239.18.33	192.168.2.5
Sep 10, 2024 18:10:41.086041927 CEST	49795	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:10:41.086041927 CEST	49795	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:10:41.086499929 CEST	49795	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:10:41.086524963 CEST	443	49795	18.239.18.33	192.168.2.5
Sep 10, 2024 18:10:41.112780094 CEST	49804	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:10:41.112828016 CEST	443	49804	18.202.126.138	192.168.2.5
Sep 10, 2024 18:10:41.112891912 CEST	49804	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:10:41.113090992 CEST	49804	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:10:41.113106966 CEST	443	49804	18.202.126.138	192.168.2.5
Sep 10, 2024 18:10:41.118736029 CEST	49805	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:41.118783951 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.118841887 CEST	49805	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:41.119024038 CEST	49805	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:41.119041920 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.263549089 CEST	443	49798	54.38.113.8	192.168.2.5
Sep 10, 2024 18:10:41.263834953 CEST	443	49798	54.38.113.8	192.168.2.5
Sep 10, 2024 18:10:41.263953924 CEST	49798	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:10:41.266141891 CEST	49798	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:10:41.266176939 CEST	443	49798	54.38.113.8	192.168.2.5
Sep 10, 2024 18:10:41.283807993 CEST	49807	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:41.283845901 CEST	443	49807	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:41.284054995 CEST	49807	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:41.285449982 CEST	49807	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:41.285461903 CEST	443	49807	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:41.508543015 CEST	443	49802	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.508874893 CEST	49802	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:41.508904934 CEST	443	49802	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.512464046 CEST	443	49802	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.512518883 CEST	49802	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:41.512861967 CEST	49802	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:41.512912989 CEST	443	49802	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.512995958 CEST	49802	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:41.513005972 CEST	443	49802	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.580348969 CEST	49802	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:41.683969975 CEST	49811	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:10:41.684004068 CEST	443	49811	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:41.684051037 CEST	49811	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:10:41.684240103 CEST	49811	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:10:41.684259892 CEST	443	49811	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:41.686175108 CEST	49812	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:41.686255932 CEST	443	49812	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:41.686319113 CEST	49812	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:41.687220097 CEST	49812	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:41.687258005 CEST	443	49812	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:41.687458992 CEST	49813	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:41.687480927 CEST	443	49813	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:41.687561989 CEST	49813	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:41.687727928 CEST	49813	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:41.687748909 CEST	443	49813	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:41.690866947 CEST	49814	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:41.690885067 CEST	443	49814	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:41.690958023 CEST	49814	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:41.691145897 CEST	49814	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:41.691173077 CEST	443	49814	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:41.707545042 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 10, 2024 18:10:41.707627058 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 10, 2024 18:10:41.708081961 CEST	49815	443	192.168.2.5	23.1.237.91
Sep 10, 2024 18:10:41.708107948 CEST	443	49815	23.1.237.91	192.168.2.5
Sep 10, 2024 18:10:41.708220959 CEST	49815	443	192.168.2.5	23.1.237.91
Sep 10, 2024 18:10:41.708458900 CEST	49815	443	192.168.2.5	23.1.237.91
Sep 10, 2024 18:10:41.708476067 CEST	443	49815	23.1.237.91	192.168.2.5
Sep 10, 2024 18:10:41.712690115 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 10, 2024 18:10:41.712701082 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 10, 2024 18:10:41.757479906 CEST	443	49802	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.765971899 CEST	443	49802	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.765985012 CEST	443	49802	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.766051054 CEST	443	49802	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.766057014 CEST	49802	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:41.766100883 CEST	443	49802	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.766129971 CEST	443	49802	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.766187906 CEST	443	49802	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.766235113 CEST	49802	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:41.766236067 CEST	49802	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:41.766236067 CEST	49802	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:41.819894075 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.820250988 CEST	49805	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:41.820319891 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.823692083 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.823781013 CEST	49805	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:41.824275017 CEST	49805	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:41.824353933 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.824469090 CEST	49805	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:41.824476957 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.850665092 CEST	443	49802	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.850723028 CEST	443	49802	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.850893021 CEST	49802	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:41.850893021 CEST	49802	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:41.850971937 CEST	443	49802	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.857052088 CEST	443	49802	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.857101917 CEST	443	49802	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.857144117 CEST	49802	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:41.857152939 CEST	443	49802	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.857182980 CEST	49802	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:41.948154926 CEST	443	49802	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.948178053 CEST	443	49802	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.948247910 CEST	443	49802	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.948344946 CEST	49802	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:41.948344946 CEST	49802	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:41.954674959 CEST	49802	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:41.954720020 CEST	443	49802	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:41.983494997 CEST	49805	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:42.035725117 CEST	443	49804	18.202.126.138	192.168.2.5
Sep 10, 2024 18:10:42.037460089 CEST	49804	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:10:42.037528038 CEST	443	49804	18.202.126.138	192.168.2.5
Sep 10, 2024 18:10:42.038877964 CEST	443	49804	18.202.126.138	192.168.2.5
Sep 10, 2024 18:10:42.038960934 CEST	49804	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:10:42.040479898 CEST	49804	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:10:42.040563107 CEST	443	49804	18.202.126.138	192.168.2.5
Sep 10, 2024 18:10:42.040870905 CEST	49804	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:10:42.040894985 CEST	443	49804	18.202.126.138	192.168.2.5
Sep 10, 2024 18:10:42.082873106 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:42.091680050 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:42.091703892 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:42.091722012 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:42.091758013 CEST	49805	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:42.091763020 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:42.091782093 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:42.091795921 CEST	49805	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:42.091810942 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:42.091813087 CEST	49805	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:42.091829062 CEST	49805	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:42.091840029 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:42.091855049 CEST	49805	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:42.114911079 CEST	443	49807	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:42.115237951 CEST	49807	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:42.115248919 CEST	443	49807	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:42.116421938 CEST	443	49807	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:42.116537094 CEST	49807	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:42.118707895 CEST	49807	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:42.118782997 CEST	443	49807	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:42.119136095 CEST	49807	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:42.119143009 CEST	443	49807	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:42.171644926 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:42.171658993 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:42.171684980 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:42.171699047 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:42.171726942 CEST	49805	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:42.171756029 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:42.171798944 CEST	49805	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:42.174101114 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:42.174112082 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:42.174141884 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:42.174151897 CEST	49805	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:42.174154997 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:42.174176931 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:42.174192905 CEST	49805	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:42.174223900 CEST	49805	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:42.176630020 CEST	443	49814	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:42.176949978 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:42.177011013 CEST	49805	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:42.177018881 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:42.177035093 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:42.177084923 CEST	49805	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:42.177428007 CEST	443	49812	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:42.179681063 CEST	49814	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:42.179698944 CEST	443	49814	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:42.179941893 CEST	49812	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:42.179948092 CEST	443	49812	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:42.180757046 CEST	443	49814	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:42.180815935 CEST	49814	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:42.181155920 CEST	443	49812	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:42.181221962 CEST	49812	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:42.182634115 CEST	49814	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:42.182707071 CEST	443	49814	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:42.183509111 CEST	49814	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:42.183516026 CEST	443	49814	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:42.184303045 CEST	49812	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:42.184371948 CEST	443	49812	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:42.184736013 CEST	49812	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:42.184741974 CEST	443	49812	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:42.186315060 CEST	49805	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:42.186331034 CEST	443	49805	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:42.247409105 CEST	443	49804	18.202.126.138	192.168.2.5
Sep 10, 2024 18:10:42.247864008 CEST	49804	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:10:42.249326944 CEST	49812	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:42.249326944 CEST	49804	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:10:42.249386072 CEST	49807	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:42.272861004 CEST	443	49811	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:42.296626091 CEST	49814	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:42.300261021 CEST	49811	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:10:42.300277948 CEST	443	49811	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:42.301194906 CEST	443	49811	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:42.301259041 CEST	49811	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:10:42.303334951 CEST	443	49807	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:42.303564072 CEST	443	49807	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:42.303693056 CEST	49807	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:42.306354046 CEST	443	49815	23.1.237.91	192.168.2.5
Sep 10, 2024 18:10:42.306417942 CEST	49815	443	192.168.2.5	23.1.237.91
Sep 10, 2024 18:10:42.308686972 CEST	443	49814	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:42.308964014 CEST	443	49814	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:42.309016943 CEST	49814	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:42.320364952 CEST	49811	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:10:42.320449114 CEST	443	49811	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:42.324275970 CEST	49811	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:10:42.324295998 CEST	443	49811	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:42.333482981 CEST	49807	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:42.333508015 CEST	443	49807	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:42.348148108 CEST	49816	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:42.348196030 CEST	443	49816	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:42.348536015 CEST	49816	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:42.348836899 CEST	49816	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:42.348854065 CEST	443	49816	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:42.356071949 CEST	443	49812	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:42.356663942 CEST	443	49812	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:42.356736898 CEST	49812	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:42.358222008 CEST	49812	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:42.358244896 CEST	443	49812	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:42.358374119 CEST	49812	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:42.358374119 CEST	49812	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:42.359260082 CEST	443	49804	18.202.126.138	192.168.2.5
Sep 10, 2024 18:10:42.359544039 CEST	443	49804	18.202.126.138	192.168.2.5
Sep 10, 2024 18:10:42.359596014 CEST	49804	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:10:42.368030071 CEST	49804	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:10:42.368046045 CEST	443	49804	18.202.126.138	192.168.2.5
Sep 10, 2024 18:10:42.425106049 CEST	443	49811	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:42.425175905 CEST	49811	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:10:42.526328087 CEST	443	49813	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:42.535923004 CEST	49813	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:42.535972118 CEST	443	49813	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:42.537098885 CEST	443	49813	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:42.537166119 CEST	49813	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:42.537808895 CEST	49811	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:10:42.537839890 CEST	443	49811	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:42.538460970 CEST	49813	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:42.538527966 CEST	443	49813	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:42.539202929 CEST	49813	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:42.539212942 CEST	443	49813	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:42.628552914 CEST	49818	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:10:42.628612995 CEST	443	49818	54.77.7.79	192.168.2.5
Sep 10, 2024 18:10:42.628679037 CEST	49818	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:10:42.628948927 CEST	49818	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:10:42.628969908 CEST	443	49818	54.77.7.79	192.168.2.5
Sep 10, 2024 18:10:42.717123985 CEST	49814	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:42.717164993 CEST	443	49814	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:42.721770048 CEST	49819	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:42.721815109 CEST	443	49819	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:42.721900940 CEST	49819	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:42.722266912 CEST	49819	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:42.722280979 CEST	443	49819	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:42.725460052 CEST	49820	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:10:42.725531101 CEST	443	49820	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:42.725593090 CEST	49820	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:10:42.725842953 CEST	49820	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:10:42.725857973 CEST	443	49820	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:42.733750105 CEST	443	49813	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:42.733844042 CEST	49813	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:42.735609055 CEST	49813	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:42.735645056 CEST	443	49813	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:42.737765074 CEST	49821	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:42.737848997 CEST	443	49821	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:42.737935066 CEST	49821	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:42.738260031 CEST	49821	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:42.738296032 CEST	443	49821	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:42.901330948 CEST	49815	443	192.168.2.5	23.1.237.91
Sep 10, 2024 18:10:42.901350021 CEST	443	49815	23.1.237.91	192.168.2.5
Sep 10, 2024 18:10:42.901842117 CEST	443	49815	23.1.237.91	192.168.2.5
Sep 10, 2024 18:10:42.902036905 CEST	49815	443	192.168.2.5	23.1.237.91
Sep 10, 2024 18:10:42.910777092 CEST	49815	443	192.168.2.5	23.1.237.91
Sep 10, 2024 18:10:42.910808086 CEST	443	49815	23.1.237.91	192.168.2.5
Sep 10, 2024 18:10:42.910972118 CEST	49815	443	192.168.2.5	23.1.237.91
Sep 10, 2024 18:10:42.910978079 CEST	443	49815	23.1.237.91	192.168.2.5
Sep 10, 2024 18:10:42.974148989 CEST	49815	443	192.168.2.5	23.1.237.91
Sep 10, 2024 18:10:42.987308979 CEST	443	49816	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:42.987608910 CEST	49816	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:42.987646103 CEST	443	49816	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:42.988770008 CEST	443	49816	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:42.989236116 CEST	49816	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:42.989419937 CEST	443	49816	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:42.989423037 CEST	49816	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:43.031407118 CEST	443	49816	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:43.046827078 CEST	49816	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:43.178055048 CEST	443	49819	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:43.178479910 CEST	49819	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:43.178555012 CEST	443	49819	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:43.178967953 CEST	443	49819	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:43.179402113 CEST	49819	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:43.179480076 CEST	443	49819	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:43.179552078 CEST	49819	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:43.186086893 CEST	443	49820	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:43.186816931 CEST	49820	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:10:43.186863899 CEST	443	49820	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:43.187372923 CEST	443	49820	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:43.187886953 CEST	49820	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:10:43.187974930 CEST	443	49820	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:43.188065052 CEST	49820	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:10:43.223416090 CEST	443	49819	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:43.231410980 CEST	443	49820	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:43.247967958 CEST	49820	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:10:43.304152012 CEST	443	49820	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:43.304316998 CEST	443	49820	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:43.304387093 CEST	49820	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:10:43.304950953 CEST	49820	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:10:43.304972887 CEST	443	49820	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:43.308789968 CEST	443	49816	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:43.308978081 CEST	443	49816	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:43.309109926 CEST	49816	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:43.309387922 CEST	49816	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:43.309402943 CEST	443	49816	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:43.309416056 CEST	49816	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:43.309452057 CEST	49816	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:43.317662001 CEST	49822	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:43.317692041 CEST	443	49822	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:43.317749977 CEST	49822	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:43.317939997 CEST	49822	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:43.317961931 CEST	443	49822	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:43.321192026 CEST	49823	443	192.168.2.5	142.250.186.98
Sep 10, 2024 18:10:43.321252108 CEST	443	49823	142.250.186.98	192.168.2.5
Sep 10, 2024 18:10:43.321371078 CEST	49823	443	192.168.2.5	142.250.186.98
Sep 10, 2024 18:10:43.321552038 CEST	49823	443	192.168.2.5	142.250.186.98
Sep 10, 2024 18:10:43.321583033 CEST	443	49823	142.250.186.98	192.168.2.5
Sep 10, 2024 18:10:43.354762077 CEST	443	49819	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:43.354840040 CEST	443	49819	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:43.354893923 CEST	49819	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:43.355885983 CEST	49819	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:43.355911016 CEST	443	49819	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:43.355942965 CEST	49819	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:43.355967045 CEST	49819	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:43.356852055 CEST	49824	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:43.356895924 CEST	443	49824	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:43.356993914 CEST	49824	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:43.358930111 CEST	49824	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:43.358947992 CEST	443	49824	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:43.377453089 CEST	443	49821	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:43.377727032 CEST	49821	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:43.377737999 CEST	443	49821	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:43.378865957 CEST	443	49821	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:43.379273891 CEST	49821	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:43.379451036 CEST	49821	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:43.379456997 CEST	443	49821	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:43.379472971 CEST	443	49821	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:43.499713898 CEST	443	49818	54.77.7.79	192.168.2.5
Sep 10, 2024 18:10:43.500325918 CEST	49818	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:10:43.500354052 CEST	443	49818	54.77.7.79	192.168.2.5
Sep 10, 2024 18:10:43.501449108 CEST	443	49818	54.77.7.79	192.168.2.5
Sep 10, 2024 18:10:43.501513958 CEST	49818	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:10:43.502127886 CEST	49818	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:10:43.502196074 CEST	443	49818	54.77.7.79	192.168.2.5
Sep 10, 2024 18:10:43.502476931 CEST	49818	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:10:43.502485991 CEST	443	49818	54.77.7.79	192.168.2.5
Sep 10, 2024 18:10:43.536966085 CEST	49821	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:43.546103954 CEST	49818	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:10:43.679778099 CEST	443	49818	54.77.7.79	192.168.2.5
Sep 10, 2024 18:10:43.679858923 CEST	443	49818	54.77.7.79	192.168.2.5
Sep 10, 2024 18:10:43.680155039 CEST	49818	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:10:43.680520058 CEST	49818	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:10:43.680541992 CEST	443	49818	54.77.7.79	192.168.2.5
Sep 10, 2024 18:10:43.697695971 CEST	443	49821	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:43.697786093 CEST	443	49821	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:43.697853088 CEST	49821	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:43.698224068 CEST	49821	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:43.698270082 CEST	443	49821	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:43.698296070 CEST	49821	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:43.698323011 CEST	49821	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:43.700323105 CEST	49825	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:43.700352907 CEST	443	49825	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:43.700445890 CEST	49825	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:43.700916052 CEST	49825	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:43.700931072 CEST	443	49825	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:43.813783884 CEST	443	49824	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:43.814399958 CEST	49824	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:43.814433098 CEST	443	49824	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:43.814837933 CEST	443	49824	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:43.815428019 CEST	49824	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:43.815500975 CEST	443	49824	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:43.815592051 CEST	49824	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:43.863396883 CEST	443	49824	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:43.987871885 CEST	443	49823	142.250.186.98	192.168.2.5
Sep 10, 2024 18:10:43.988166094 CEST	49823	443	192.168.2.5	142.250.186.98
Sep 10, 2024 18:10:43.988230944 CEST	443	49823	142.250.186.98	192.168.2.5
Sep 10, 2024 18:10:43.989927053 CEST	443	49823	142.250.186.98	192.168.2.5
Sep 10, 2024 18:10:43.990012884 CEST	49823	443	192.168.2.5	142.250.186.98
Sep 10, 2024 18:10:43.990612030 CEST	443	49824	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:43.990689993 CEST	443	49824	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:43.990756989 CEST	49824	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:43.991477966 CEST	49823	443	192.168.2.5	142.250.186.98
Sep 10, 2024 18:10:43.991574049 CEST	443	49823	142.250.186.98	192.168.2.5
Sep 10, 2024 18:10:43.991942883 CEST	49823	443	192.168.2.5	142.250.186.98
Sep 10, 2024 18:10:43.991962910 CEST	443	49823	142.250.186.98	192.168.2.5
Sep 10, 2024 18:10:43.992388010 CEST	49824	443	192.168.2.5	35.244.174.68
Sep 10, 2024 18:10:43.992422104 CEST	443	49824	35.244.174.68	192.168.2.5
Sep 10, 2024 18:10:43.993709087 CEST	49826	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:43.993760109 CEST	443	49826	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:43.993838072 CEST	49826	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:43.994111061 CEST	49826	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:43.994142056 CEST	443	49826	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:44.044645071 CEST	49823	443	192.168.2.5	142.250.186.98
Sep 10, 2024 18:10:44.261008024 CEST	443	49822	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:44.261396885 CEST	49822	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:44.261409044 CEST	443	49822	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:44.262296915 CEST	443	49823	142.250.186.98	192.168.2.5
Sep 10, 2024 18:10:44.262635946 CEST	443	49822	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:44.262650967 CEST	443	49823	142.250.186.98	192.168.2.5
Sep 10, 2024 18:10:44.262701035 CEST	49822	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:44.262751102 CEST	49823	443	192.168.2.5	142.250.186.98
Sep 10, 2024 18:10:44.265151024 CEST	49822	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:44.265211105 CEST	443	49822	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:44.265719891 CEST	49822	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:44.265726089 CEST	443	49822	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:44.265885115 CEST	49823	443	192.168.2.5	142.250.186.98
Sep 10, 2024 18:10:44.265899897 CEST	443	49823	142.250.186.98	192.168.2.5
Sep 10, 2024 18:10:44.267678976 CEST	49827	443	192.168.2.5	142.250.186.98
Sep 10, 2024 18:10:44.267702103 CEST	443	49827	142.250.186.98	192.168.2.5
Sep 10, 2024 18:10:44.267765045 CEST	49827	443	192.168.2.5	142.250.186.98
Sep 10, 2024 18:10:44.268044949 CEST	49827	443	192.168.2.5	142.250.186.98
Sep 10, 2024 18:10:44.268057108 CEST	443	49827	142.250.186.98	192.168.2.5
Sep 10, 2024 18:10:44.388262987 CEST	49822	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:44.455804110 CEST	443	49822	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:44.455993891 CEST	443	49822	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:44.456183910 CEST	49822	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:44.457087040 CEST	49822	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:44.457103968 CEST	443	49822	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:44.462536097 CEST	443	49826	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:44.462779045 CEST	49826	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:44.462809086 CEST	443	49826	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:44.463294983 CEST	443	49826	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:44.463762999 CEST	49826	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:44.463846922 CEST	443	49826	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:44.463916063 CEST	49826	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:44.472215891 CEST	49828	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:44.472309113 CEST	443	49828	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:44.472438097 CEST	49828	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:44.472685099 CEST	49828	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:44.472702980 CEST	443	49828	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:44.511414051 CEST	443	49826	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:44.604146957 CEST	443	49826	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:44.604243994 CEST	443	49826	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:44.604317904 CEST	49826	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:44.605408907 CEST	49826	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:44.605451107 CEST	443	49826	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:44.612809896 CEST	443	49825	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:44.646146059 CEST	49825	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:44.646157026 CEST	443	49825	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:44.647244930 CEST	443	49825	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:44.647314072 CEST	49825	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:44.650639057 CEST	49825	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:44.650705099 CEST	443	49825	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:44.650960922 CEST	49825	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:44.650969982 CEST	443	49825	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:44.688389063 CEST	49830	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:44.688493013 CEST	443	49830	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:44.688745022 CEST	49830	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:44.688965082 CEST	49830	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:44.689006090 CEST	443	49830	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:44.794914961 CEST	49825	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:44.838681936 CEST	443	49825	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:44.838783026 CEST	443	49825	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:44.838988066 CEST	49825	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:44.839669943 CEST	49825	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:44.839688063 CEST	443	49825	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:44.845592976 CEST	49832	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:44.845688105 CEST	443	49832	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:44.846067905 CEST	49832	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:44.846349001 CEST	49832	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:44.846376896 CEST	443	49832	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:44.902873039 CEST	443	49827	142.250.186.98	192.168.2.5
Sep 10, 2024 18:10:44.903207064 CEST	49827	443	192.168.2.5	142.250.186.98
Sep 10, 2024 18:10:44.903273106 CEST	443	49827	142.250.186.98	192.168.2.5
Sep 10, 2024 18:10:44.904465914 CEST	443	49827	142.250.186.98	192.168.2.5
Sep 10, 2024 18:10:44.905469894 CEST	49827	443	192.168.2.5	142.250.186.98
Sep 10, 2024 18:10:44.905656099 CEST	443	49827	142.250.186.98	192.168.2.5
Sep 10, 2024 18:10:44.905896902 CEST	49827	443	192.168.2.5	142.250.186.98
Sep 10, 2024 18:10:44.951407909 CEST	443	49827	142.250.186.98	192.168.2.5
Sep 10, 2024 18:10:45.113378048 CEST	443	49828	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:45.113635063 CEST	49828	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:45.113667965 CEST	443	49828	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:45.117238045 CEST	443	49828	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:45.117310047 CEST	49828	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:45.117813110 CEST	49828	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:45.117978096 CEST	49828	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:45.117983103 CEST	443	49828	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:45.159415960 CEST	443	49828	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:45.169425011 CEST	49828	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:45.169439077 CEST	443	49828	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:45.173351049 CEST	443	49830	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:45.173796892 CEST	49830	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:45.173844099 CEST	443	49830	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:45.175303936 CEST	443	49830	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:45.175487995 CEST	49830	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:45.175970078 CEST	49830	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:45.176070929 CEST	443	49830	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:45.176183939 CEST	49830	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:45.176218033 CEST	443	49830	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:45.182940960 CEST	443	49827	142.250.186.98	192.168.2.5
Sep 10, 2024 18:10:45.183270931 CEST	443	49827	142.250.186.98	192.168.2.5
Sep 10, 2024 18:10:45.183341980 CEST	49827	443	192.168.2.5	142.250.186.98
Sep 10, 2024 18:10:45.183895111 CEST	49827	443	192.168.2.5	142.250.186.98
Sep 10, 2024 18:10:45.183928967 CEST	443	49827	142.250.186.98	192.168.2.5
Sep 10, 2024 18:10:45.186156034 CEST	49833	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:45.186206102 CEST	443	49833	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:45.186424971 CEST	49833	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:45.186873913 CEST	49833	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:45.186902046 CEST	443	49833	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:45.216145992 CEST	49828	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:45.247632027 CEST	49830	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:45.319046021 CEST	443	49830	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:45.319329977 CEST	443	49830	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:45.320270061 CEST	49830	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:45.320564032 CEST	49830	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:10:45.320611954 CEST	443	49830	34.117.77.79	192.168.2.5
Sep 10, 2024 18:10:45.429433107 CEST	443	49828	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:45.471739054 CEST	49828	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:45.471767902 CEST	443	49828	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:45.473404884 CEST	49828	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:45.473532915 CEST	443	49828	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:45.473596096 CEST	49828	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:45.491115093 CEST	443	49832	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:45.492182970 CEST	49832	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:45.492250919 CEST	443	49832	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:45.493361950 CEST	443	49832	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:45.493436098 CEST	49832	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:45.493798018 CEST	49832	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:45.493875980 CEST	443	49832	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:45.494205952 CEST	49832	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:45.494225025 CEST	443	49832	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:45.544728994 CEST	49832	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:45.814343929 CEST	443	49832	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:45.815761089 CEST	443	49833	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:45.816114902 CEST	49833	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:45.816138983 CEST	443	49833	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:45.817261934 CEST	443	49833	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:45.817663908 CEST	49833	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:45.817816019 CEST	49833	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:45.817825079 CEST	443	49833	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:45.817842007 CEST	443	49833	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:45.858021021 CEST	49833	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:45.858241081 CEST	49832	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:45.858308077 CEST	443	49832	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:45.861073017 CEST	49832	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:45.861156940 CEST	443	49832	3.71.234.132	192.168.2.5
Sep 10, 2024 18:10:45.861229897 CEST	49832	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:10:45.875807047 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:45.875839949 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:45.875891924 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:45.876138926 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:45.876152039 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.334582090 CEST	443	49833	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:46.334769011 CEST	443	49833	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:46.334845066 CEST	49833	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:46.335194111 CEST	49833	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:46.335213900 CEST	443	49833	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:46.335222960 CEST	49833	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:46.335259914 CEST	49833	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:46.337090015 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.337476969 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.337490082 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.337852001 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.338233948 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.338318110 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.338356018 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.345463991 CEST	49836	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:10:46.345501900 CEST	443	49836	46.228.164.13	192.168.2.5
Sep 10, 2024 18:10:46.345566988 CEST	49836	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:10:46.345917940 CEST	49836	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:10:46.345931053 CEST	443	49836	46.228.164.13	192.168.2.5
Sep 10, 2024 18:10:46.383397102 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.392175913 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.436863899 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.438117027 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.438160896 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.438170910 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.438219070 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.438255072 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.438261986 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.438313007 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.438343048 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.438344002 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.438359976 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.438406944 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.443350077 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.488554001 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.488562107 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.525239944 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.525276899 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.525298119 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.525305986 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.525341988 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.525348902 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.525355101 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.525446892 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.525549889 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.525651932 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.525681019 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.525684118 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.525691986 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.525722980 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.526060104 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.526156902 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.526196957 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.526199102 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.526210070 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.526254892 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.526957989 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.527025938 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.527055979 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.527065039 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.527071953 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.527117968 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.528556108 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.528613091 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.528650045 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.528656960 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.575917959 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.575926065 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.612277985 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.612324953 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.612330914 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.612375021 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.612409115 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.612412930 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.612420082 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.612457037 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.612462044 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.613442898 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.613451004 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.613471031 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.613481045 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.613488913 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.613502026 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.613512039 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.613539934 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.613559008 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.613936901 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.613967896 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.613995075 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.614001036 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.614022017 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.616556883 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.616571903 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.616619110 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.616626024 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.670201063 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.699780941 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.699798107 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.699848890 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.699866056 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.699917078 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.700014114 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.700041056 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.700089931 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.700095892 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.700126886 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.700134993 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.700171947 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.701827049 CEST	49835	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.701838017 CEST	443	49835	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.705588102 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.705621004 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.705682993 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.705852985 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:46.705862999 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:46.981220961 CEST	443	49836	46.228.164.13	192.168.2.5
Sep 10, 2024 18:10:46.986519098 CEST	49836	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:10:46.986588001 CEST	443	49836	46.228.164.13	192.168.2.5
Sep 10, 2024 18:10:46.988044977 CEST	443	49836	46.228.164.13	192.168.2.5
Sep 10, 2024 18:10:46.988594055 CEST	49836	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:10:46.989244938 CEST	49836	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:10:46.989244938 CEST	49836	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:10:46.989279032 CEST	443	49836	46.228.164.13	192.168.2.5
Sep 10, 2024 18:10:46.989504099 CEST	443	49836	46.228.164.13	192.168.2.5
Sep 10, 2024 18:10:47.032129049 CEST	49836	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:10:47.032145023 CEST	443	49836	46.228.164.13	192.168.2.5
Sep 10, 2024 18:10:47.074697971 CEST	49836	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:10:47.174784899 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.175112963 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.175127983 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.175468922 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.179204941 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.179250956 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.179428101 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.223402977 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.248403072 CEST	443	49836	46.228.164.13	192.168.2.5
Sep 10, 2024 18:10:47.248497963 CEST	443	49836	46.228.164.13	192.168.2.5
Sep 10, 2024 18:10:47.248630047 CEST	49836	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:10:47.250941038 CEST	49836	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:10:47.250974894 CEST	443	49836	46.228.164.13	192.168.2.5
Sep 10, 2024 18:10:47.251199007 CEST	49839	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:47.251296043 CEST	443	49839	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:47.251569033 CEST	49839	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:47.251569033 CEST	49839	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:47.251651049 CEST	443	49839	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:47.282218933 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.282273054 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.282416105 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.282449961 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.282458067 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.282546043 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.282608032 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.282625914 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.282651901 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.282655954 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.282685041 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.282929897 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.287516117 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.341110945 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.341116905 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.374849081 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.374872923 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.375286102 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.375292063 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.375380039 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.376702070 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.376708984 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.376737118 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.376749039 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.376765966 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.376775026 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.376780033 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.376794100 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.376830101 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.376830101 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.465838909 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.465857029 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.466257095 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.466262102 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.466448069 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.467370033 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.467391014 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.467489004 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.467489004 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.467494011 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.467782021 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.468595028 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.468607903 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.469274998 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.469278097 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.469547033 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.556482077 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.556499004 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.556633949 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.556641102 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.556968927 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.556991100 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.557002068 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.557008028 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.557034016 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.557230949 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.557270050 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.557353020 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.557404995 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.557997942 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.558002949 CEST	443	49838	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:47.558320999 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.558490992 CEST	49838	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:47.908262014 CEST	443	49839	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:47.908653021 CEST	49839	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:47.908721924 CEST	443	49839	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:47.909874916 CEST	443	49839	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:47.910327911 CEST	49839	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:47.910506010 CEST	49839	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:47.910506964 CEST	443	49839	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:47.951124907 CEST	49839	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:47.951194048 CEST	443	49839	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:48.231028080 CEST	443	49839	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:48.231117010 CEST	443	49839	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:48.231209993 CEST	49839	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:48.231653929 CEST	49839	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:48.231700897 CEST	443	49839	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:49.480978012 CEST	49842	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:49.481025934 CEST	443	49842	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:49.481265068 CEST	49842	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:49.482144117 CEST	49842	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:49.482162952 CEST	443	49842	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:50.224641085 CEST	443	49842	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:50.224992037 CEST	49842	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:50.225014925 CEST	443	49842	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:50.226202965 CEST	443	49842	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:50.226671934 CEST	49842	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:50.226830006 CEST	49842	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:50.226836920 CEST	443	49842	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:50.226849079 CEST	443	49842	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:50.278867960 CEST	49842	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:50.539810896 CEST	443	49842	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:50.539946079 CEST	443	49842	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:50.540040970 CEST	49842	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:50.540371895 CEST	49842	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:50.540371895 CEST	49842	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:50.540395021 CEST	443	49842	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:50.540448904 CEST	49842	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:50.550405025 CEST	49843	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:10:50.550451994 CEST	443	49843	185.89.210.244	192.168.2.5
Sep 10, 2024 18:10:50.550518036 CEST	49843	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:10:50.550690889 CEST	49843	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:10:50.550709963 CEST	443	49843	185.89.210.244	192.168.2.5
Sep 10, 2024 18:10:51.617568016 CEST	443	49843	185.89.210.244	192.168.2.5
Sep 10, 2024 18:10:51.617950916 CEST	49843	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:10:51.617991924 CEST	443	49843	185.89.210.244	192.168.2.5
Sep 10, 2024 18:10:51.619736910 CEST	443	49843	185.89.210.244	192.168.2.5
Sep 10, 2024 18:10:51.619911909 CEST	49843	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:10:51.620981932 CEST	49843	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:10:51.621069908 CEST	443	49843	185.89.210.244	192.168.2.5
Sep 10, 2024 18:10:51.621103048 CEST	49843	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:10:51.663456917 CEST	443	49843	185.89.210.244	192.168.2.5
Sep 10, 2024 18:10:51.673161030 CEST	49843	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:10:51.673186064 CEST	443	49843	185.89.210.244	192.168.2.5
Sep 10, 2024 18:10:51.710947037 CEST	49844	443	192.168.2.5	52.85.49.17
Sep 10, 2024 18:10:51.710977077 CEST	443	49844	52.85.49.17	192.168.2.5
Sep 10, 2024 18:10:51.711237907 CEST	49844	443	192.168.2.5	52.85.49.17
Sep 10, 2024 18:10:51.711237907 CEST	49844	443	192.168.2.5	52.85.49.17
Sep 10, 2024 18:10:51.711268902 CEST	443	49844	52.85.49.17	192.168.2.5
Sep 10, 2024 18:10:51.720971107 CEST	49843	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:10:51.729756117 CEST	49845	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:10:51.729798079 CEST	443	49845	18.202.126.138	192.168.2.5
Sep 10, 2024 18:10:51.731086016 CEST	49845	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:10:51.731353998 CEST	49845	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:10:51.731368065 CEST	443	49845	18.202.126.138	192.168.2.5
Sep 10, 2024 18:10:51.747409105 CEST	49847	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:51.747442961 CEST	443	49847	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:51.747507095 CEST	49847	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:51.750951052 CEST	49847	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:51.750966072 CEST	443	49847	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:51.751259089 CEST	49849	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:51.751358986 CEST	443	49849	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:51.751446962 CEST	49849	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:51.751559973 CEST	49849	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:51.751583099 CEST	443	49849	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:51.755259991 CEST	49850	443	192.168.2.5	3.221.132.94
Sep 10, 2024 18:10:51.755266905 CEST	443	49850	3.221.132.94	192.168.2.5
Sep 10, 2024 18:10:51.755403996 CEST	49850	443	192.168.2.5	3.221.132.94
Sep 10, 2024 18:10:51.756633043 CEST	49850	443	192.168.2.5	3.221.132.94
Sep 10, 2024 18:10:51.756644964 CEST	443	49850	3.221.132.94	192.168.2.5
Sep 10, 2024 18:10:52.139725924 CEST	443	49843	185.89.210.244	192.168.2.5
Sep 10, 2024 18:10:52.139825106 CEST	443	49843	185.89.210.244	192.168.2.5
Sep 10, 2024 18:10:52.139869928 CEST	49843	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:10:52.143616915 CEST	49843	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:10:52.143636942 CEST	443	49843	185.89.210.244	192.168.2.5
Sep 10, 2024 18:10:52.144637108 CEST	49852	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:10:52.144681931 CEST	443	49852	185.89.210.244	192.168.2.5
Sep 10, 2024 18:10:52.144737959 CEST	49852	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:10:52.145040989 CEST	49852	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:10:52.145061016 CEST	443	49852	185.89.210.244	192.168.2.5
Sep 10, 2024 18:10:52.368648052 CEST	443	49845	18.202.126.138	192.168.2.5
Sep 10, 2024 18:10:52.369005919 CEST	49845	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:10:52.369020939 CEST	443	49845	18.202.126.138	192.168.2.5
Sep 10, 2024 18:10:52.370122910 CEST	443	49845	18.202.126.138	192.168.2.5
Sep 10, 2024 18:10:52.370630026 CEST	49845	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:10:52.370742083 CEST	49845	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:10:52.370747089 CEST	443	49845	18.202.126.138	192.168.2.5
Sep 10, 2024 18:10:52.370795965 CEST	443	49845	18.202.126.138	192.168.2.5
Sep 10, 2024 18:10:52.418699980 CEST	49845	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:10:52.456223011 CEST	443	49844	52.85.49.17	192.168.2.5
Sep 10, 2024 18:10:52.456517935 CEST	49844	443	192.168.2.5	52.85.49.17
Sep 10, 2024 18:10:52.456532955 CEST	443	49844	52.85.49.17	192.168.2.5
Sep 10, 2024 18:10:52.458261967 CEST	443	49844	52.85.49.17	192.168.2.5
Sep 10, 2024 18:10:52.458322048 CEST	49844	443	192.168.2.5	52.85.49.17
Sep 10, 2024 18:10:52.459331989 CEST	49844	443	192.168.2.5	52.85.49.17
Sep 10, 2024 18:10:52.459506035 CEST	49844	443	192.168.2.5	52.85.49.17
Sep 10, 2024 18:10:52.459506035 CEST	443	49844	52.85.49.17	192.168.2.5
Sep 10, 2024 18:10:52.507420063 CEST	443	49844	52.85.49.17	192.168.2.5
Sep 10, 2024 18:10:52.513073921 CEST	49844	443	192.168.2.5	52.85.49.17
Sep 10, 2024 18:10:52.513082981 CEST	443	49844	52.85.49.17	192.168.2.5
Sep 10, 2024 18:10:52.517554045 CEST	49853	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:52.517600060 CEST	443	49853	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:52.517668962 CEST	49853	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:52.522427082 CEST	49853	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:52.522445917 CEST	443	49853	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:52.561165094 CEST	49844	443	192.168.2.5	52.85.49.17
Sep 10, 2024 18:10:52.650266886 CEST	443	49845	18.202.126.138	192.168.2.5
Sep 10, 2024 18:10:52.650461912 CEST	443	49845	18.202.126.138	192.168.2.5
Sep 10, 2024 18:10:52.650516033 CEST	49845	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:10:52.650923014 CEST	49845	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:10:52.650942087 CEST	443	49845	18.202.126.138	192.168.2.5
Sep 10, 2024 18:10:52.653040886 CEST	49854	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:52.653064013 CEST	443	49854	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:52.653127909 CEST	49854	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:52.653285980 CEST	49854	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:52.653300047 CEST	443	49854	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:52.695504904 CEST	443	49847	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:52.695729971 CEST	49847	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:52.695749044 CEST	443	49847	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:52.697180986 CEST	443	49847	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:52.697237968 CEST	49847	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:52.698276043 CEST	49847	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:52.698358059 CEST	443	49847	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:52.698410034 CEST	49847	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:52.698416948 CEST	443	49847	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:52.709763050 CEST	443	49850	3.221.132.94	192.168.2.5
Sep 10, 2024 18:10:52.709973097 CEST	49850	443	192.168.2.5	3.221.132.94
Sep 10, 2024 18:10:52.709990978 CEST	443	49850	3.221.132.94	192.168.2.5
Sep 10, 2024 18:10:52.711033106 CEST	443	49850	3.221.132.94	192.168.2.5
Sep 10, 2024 18:10:52.711183071 CEST	49850	443	192.168.2.5	3.221.132.94
Sep 10, 2024 18:10:52.711857080 CEST	49850	443	192.168.2.5	3.221.132.94
Sep 10, 2024 18:10:52.711924076 CEST	443	49850	3.221.132.94	192.168.2.5
Sep 10, 2024 18:10:52.712028980 CEST	49850	443	192.168.2.5	3.221.132.94
Sep 10, 2024 18:10:52.712038040 CEST	443	49850	3.221.132.94	192.168.2.5
Sep 10, 2024 18:10:52.723423958 CEST	443	49849	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:52.723650932 CEST	49849	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:52.723669052 CEST	443	49849	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:52.725289106 CEST	443	49849	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:52.725349903 CEST	49849	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:52.726376057 CEST	49849	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:52.726463079 CEST	443	49849	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:52.726515055 CEST	49849	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:52.726525068 CEST	443	49849	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:52.749174118 CEST	49847	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:52.764200926 CEST	49850	443	192.168.2.5	3.221.132.94
Sep 10, 2024 18:10:52.775832891 CEST	443	49852	185.89.210.244	192.168.2.5
Sep 10, 2024 18:10:52.776067972 CEST	49852	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:10:52.776133060 CEST	443	49852	185.89.210.244	192.168.2.5
Sep 10, 2024 18:10:52.776609898 CEST	443	49852	185.89.210.244	192.168.2.5
Sep 10, 2024 18:10:52.777069092 CEST	49852	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:10:52.777069092 CEST	49852	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:10:52.777113914 CEST	443	49852	185.89.210.244	192.168.2.5
Sep 10, 2024 18:10:52.777245045 CEST	443	49852	185.89.210.244	192.168.2.5
Sep 10, 2024 18:10:52.779918909 CEST	49849	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:52.804642916 CEST	443	49847	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:52.804723978 CEST	443	49847	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:52.805129051 CEST	49847	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:52.805399895 CEST	49847	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:52.805399895 CEST	49847	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:52.805419922 CEST	443	49847	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:52.805546045 CEST	49847	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:52.808209896 CEST	49856	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:52.808232069 CEST	443	49856	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:52.808681965 CEST	49856	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:52.808681965 CEST	49856	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:52.808706999 CEST	443	49856	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:52.825882912 CEST	49852	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:10:52.835926056 CEST	443	49849	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:52.835935116 CEST	443	49850	3.221.132.94	192.168.2.5
Sep 10, 2024 18:10:52.836010933 CEST	443	49849	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:52.836014986 CEST	443	49850	3.221.132.94	192.168.2.5
Sep 10, 2024 18:10:52.836237907 CEST	49850	443	192.168.2.5	3.221.132.94
Sep 10, 2024 18:10:52.836244106 CEST	49849	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:52.836559057 CEST	49849	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:52.836595058 CEST	443	49849	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:52.836632967 CEST	49849	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:52.837198973 CEST	49850	443	192.168.2.5	3.221.132.94
Sep 10, 2024 18:10:52.837207079 CEST	443	49850	3.221.132.94	192.168.2.5
Sep 10, 2024 18:10:52.837255001 CEST	49849	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:52.839895964 CEST	49857	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:52.839940071 CEST	443	49857	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:52.840109110 CEST	49857	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:52.840364933 CEST	49857	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:52.840393066 CEST	443	49857	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:52.848615885 CEST	49858	443	192.168.2.5	34.232.35.140
Sep 10, 2024 18:10:52.848658085 CEST	443	49858	34.232.35.140	192.168.2.5
Sep 10, 2024 18:10:52.848787069 CEST	49858	443	192.168.2.5	34.232.35.140
Sep 10, 2024 18:10:52.848896980 CEST	49858	443	192.168.2.5	34.232.35.140
Sep 10, 2024 18:10:52.848927975 CEST	443	49858	34.232.35.140	192.168.2.5
Sep 10, 2024 18:10:52.862430096 CEST	443	49844	52.85.49.17	192.168.2.5
Sep 10, 2024 18:10:52.862595081 CEST	443	49844	52.85.49.17	192.168.2.5
Sep 10, 2024 18:10:52.863409996 CEST	49844	443	192.168.2.5	52.85.49.17
Sep 10, 2024 18:10:52.863675117 CEST	49844	443	192.168.2.5	52.85.49.17
Sep 10, 2024 18:10:52.863684893 CEST	443	49844	52.85.49.17	192.168.2.5
Sep 10, 2024 18:10:52.931504011 CEST	49859	443	192.168.2.5	18.239.69.119
Sep 10, 2024 18:10:52.931597948 CEST	443	49859	18.239.69.119	192.168.2.5
Sep 10, 2024 18:10:52.931720018 CEST	49859	443	192.168.2.5	18.239.69.119
Sep 10, 2024 18:10:52.931878090 CEST	49859	443	192.168.2.5	18.239.69.119
Sep 10, 2024 18:10:52.931899071 CEST	443	49859	18.239.69.119	192.168.2.5
Sep 10, 2024 18:10:53.055349112 CEST	49860	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:53.055387974 CEST	443	49860	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:53.055593014 CEST	49860	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:53.055691004 CEST	49860	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:53.055705070 CEST	443	49860	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:53.069910049 CEST	443	49852	185.89.210.244	192.168.2.5
Sep 10, 2024 18:10:53.069968939 CEST	443	49852	185.89.210.244	192.168.2.5
Sep 10, 2024 18:10:53.070209026 CEST	49852	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:10:53.070982933 CEST	49852	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:10:53.071027994 CEST	443	49852	185.89.210.244	192.168.2.5
Sep 10, 2024 18:10:53.071943045 CEST	49862	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:53.071995020 CEST	443	49862	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:53.072308064 CEST	49862	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:53.072308064 CEST	49862	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:53.072381020 CEST	443	49862	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:53.227284908 CEST	443	49853	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:53.227936029 CEST	49853	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:53.227952003 CEST	443	49853	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:53.229216099 CEST	443	49853	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:53.229590893 CEST	49853	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:53.230853081 CEST	49853	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:53.230853081 CEST	49853	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:53.230865955 CEST	443	49853	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:53.230952024 CEST	443	49853	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:53.278955936 CEST	49853	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:53.278966904 CEST	443	49853	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:53.288002968 CEST	443	49856	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:53.288492918 CEST	49856	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:53.288503885 CEST	443	49856	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:53.289618969 CEST	443	49856	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:53.290054083 CEST	49856	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:53.290054083 CEST	49856	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:53.290065050 CEST	443	49856	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:53.290215015 CEST	443	49856	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:53.318142891 CEST	443	49857	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:53.318556070 CEST	49857	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:53.318593025 CEST	443	49857	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:53.319749117 CEST	443	49857	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:53.320192099 CEST	49857	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:53.320192099 CEST	49857	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:53.320235968 CEST	443	49857	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:53.320374966 CEST	443	49857	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:53.325632095 CEST	49853	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:53.340946913 CEST	49856	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:53.372724056 CEST	49857	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:53.373536110 CEST	443	49854	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:53.375814915 CEST	49854	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:53.375824928 CEST	443	49854	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:53.379336119 CEST	443	49854	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:53.379430056 CEST	49854	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:53.379756927 CEST	49854	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:53.379924059 CEST	443	49854	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:53.379965067 CEST	49854	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:53.409095049 CEST	443	49856	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:53.409182072 CEST	443	49856	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:53.409655094 CEST	49856	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:53.409655094 CEST	49856	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:53.409655094 CEST	49856	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:53.410978079 CEST	49863	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:10:53.411034107 CEST	443	49863	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:53.411217928 CEST	49863	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:10:53.411335945 CEST	49863	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:10:53.411354065 CEST	443	49863	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:53.420403004 CEST	49854	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:53.420411110 CEST	443	49854	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:53.435900927 CEST	443	49857	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:53.436067104 CEST	443	49857	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:53.437192917 CEST	49857	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:53.438491106 CEST	49857	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:53.438520908 CEST	443	49857	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:53.449793100 CEST	49864	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:53.449836016 CEST	443	49864	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:53.450161934 CEST	49864	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:53.450161934 CEST	49864	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:53.450215101 CEST	443	49864	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:53.469537020 CEST	49854	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:53.475322962 CEST	443	49853	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:53.475400925 CEST	443	49853	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:53.476632118 CEST	49853	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:53.476640940 CEST	49865	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:53.476645947 CEST	443	49853	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:53.476677895 CEST	49853	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:53.476692915 CEST	443	49865	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:53.476728916 CEST	49853	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:53.476878881 CEST	49865	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:53.476948977 CEST	49865	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:53.476963997 CEST	443	49865	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:53.519213915 CEST	443	49858	34.232.35.140	192.168.2.5
Sep 10, 2024 18:10:53.519558907 CEST	49858	443	192.168.2.5	34.232.35.140
Sep 10, 2024 18:10:53.519572973 CEST	443	49858	34.232.35.140	192.168.2.5
Sep 10, 2024 18:10:53.520597935 CEST	443	49858	34.232.35.140	192.168.2.5
Sep 10, 2024 18:10:53.520721912 CEST	49858	443	192.168.2.5	34.232.35.140
Sep 10, 2024 18:10:53.520975113 CEST	49858	443	192.168.2.5	34.232.35.140
Sep 10, 2024 18:10:53.521039009 CEST	443	49858	34.232.35.140	192.168.2.5
Sep 10, 2024 18:10:53.521091938 CEST	49858	443	192.168.2.5	34.232.35.140
Sep 10, 2024 18:10:53.567415953 CEST	443	49858	34.232.35.140	192.168.2.5
Sep 10, 2024 18:10:53.570635080 CEST	49858	443	192.168.2.5	34.232.35.140
Sep 10, 2024 18:10:53.570656061 CEST	443	49858	34.232.35.140	192.168.2.5
Sep 10, 2024 18:10:53.623137951 CEST	49858	443	192.168.2.5	34.232.35.140
Sep 10, 2024 18:10:53.627023935 CEST	443	49854	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:53.627187967 CEST	443	49854	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:53.628654957 CEST	49867	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:53.628658056 CEST	49854	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:53.628685951 CEST	443	49854	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:53.628699064 CEST	443	49867	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:53.628716946 CEST	49854	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:53.628762007 CEST	49854	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:53.628782034 CEST	49867	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:53.629128933 CEST	49867	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:53.629146099 CEST	443	49867	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:53.633249998 CEST	443	49858	34.232.35.140	192.168.2.5
Sep 10, 2024 18:10:53.633339882 CEST	443	49858	34.232.35.140	192.168.2.5
Sep 10, 2024 18:10:53.633802891 CEST	49858	443	192.168.2.5	34.232.35.140
Sep 10, 2024 18:10:53.634483099 CEST	49858	443	192.168.2.5	34.232.35.140
Sep 10, 2024 18:10:53.634527922 CEST	443	49858	34.232.35.140	192.168.2.5
Sep 10, 2024 18:10:53.652826071 CEST	443	49859	18.239.69.119	192.168.2.5
Sep 10, 2024 18:10:53.653055906 CEST	49859	443	192.168.2.5	18.239.69.119
Sep 10, 2024 18:10:53.653120041 CEST	443	49859	18.239.69.119	192.168.2.5
Sep 10, 2024 18:10:53.654829979 CEST	443	49859	18.239.69.119	192.168.2.5
Sep 10, 2024 18:10:53.655133009 CEST	49859	443	192.168.2.5	18.239.69.119
Sep 10, 2024 18:10:53.656410933 CEST	49859	443	192.168.2.5	18.239.69.119
Sep 10, 2024 18:10:53.656554937 CEST	443	49859	18.239.69.119	192.168.2.5
Sep 10, 2024 18:10:53.656598091 CEST	49859	443	192.168.2.5	18.239.69.119
Sep 10, 2024 18:10:53.694122076 CEST	443	49860	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:53.694331884 CEST	49860	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:53.694359064 CEST	443	49860	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:53.695512056 CEST	443	49860	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:53.695944071 CEST	49860	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:53.695944071 CEST	49860	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:53.695960045 CEST	443	49860	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:53.696114063 CEST	443	49860	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:53.701915026 CEST	49859	443	192.168.2.5	18.239.69.119
Sep 10, 2024 18:10:53.701941967 CEST	443	49859	18.239.69.119	192.168.2.5
Sep 10, 2024 18:10:53.706202984 CEST	443	49862	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:53.706419945 CEST	49862	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:53.706445932 CEST	443	49862	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:53.706918001 CEST	443	49862	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:53.707284927 CEST	49862	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:53.707284927 CEST	49862	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:53.707304001 CEST	443	49862	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:53.707365990 CEST	443	49862	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:53.750372887 CEST	49860	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:53.750483036 CEST	49859	443	192.168.2.5	18.239.69.119
Sep 10, 2024 18:10:53.750489950 CEST	49862	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:53.922843933 CEST	443	49859	18.239.69.119	192.168.2.5
Sep 10, 2024 18:10:53.931586027 CEST	443	49859	18.239.69.119	192.168.2.5
Sep 10, 2024 18:10:53.931601048 CEST	443	49859	18.239.69.119	192.168.2.5
Sep 10, 2024 18:10:53.931623936 CEST	443	49859	18.239.69.119	192.168.2.5
Sep 10, 2024 18:10:53.931636095 CEST	443	49859	18.239.69.119	192.168.2.5
Sep 10, 2024 18:10:53.931643963 CEST	443	49859	18.239.69.119	192.168.2.5
Sep 10, 2024 18:10:53.931792021 CEST	49859	443	192.168.2.5	18.239.69.119
Sep 10, 2024 18:10:53.931792021 CEST	49859	443	192.168.2.5	18.239.69.119
Sep 10, 2024 18:10:53.931875944 CEST	443	49859	18.239.69.119	192.168.2.5
Sep 10, 2024 18:10:53.931926012 CEST	443	49859	18.239.69.119	192.168.2.5
Sep 10, 2024 18:10:53.931958914 CEST	49859	443	192.168.2.5	18.239.69.119
Sep 10, 2024 18:10:53.931982994 CEST	49859	443	192.168.2.5	18.239.69.119
Sep 10, 2024 18:10:53.950961113 CEST	49859	443	192.168.2.5	18.239.69.119
Sep 10, 2024 18:10:53.951003075 CEST	443	49859	18.239.69.119	192.168.2.5
Sep 10, 2024 18:10:54.011470079 CEST	443	49863	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:54.012259007 CEST	443	49860	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:54.012356997 CEST	443	49860	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:54.012420893 CEST	49860	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:54.020674944 CEST	443	49862	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:54.020772934 CEST	443	49862	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:54.020833015 CEST	49862	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:54.028004885 CEST	49863	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:10:54.028026104 CEST	443	49863	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:54.028548002 CEST	443	49863	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:54.052083015 CEST	49863	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:10:54.052321911 CEST	443	49863	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:54.052755117 CEST	49863	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:10:54.053225040 CEST	49862	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:54.053276062 CEST	443	49862	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:54.055008888 CEST	49860	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:10:54.055038929 CEST	443	49860	18.184.216.10	192.168.2.5
Sep 10, 2024 18:10:54.068028927 CEST	49868	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:54.068062067 CEST	443	49868	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:54.068118095 CEST	49868	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:54.068278074 CEST	49868	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:54.068295002 CEST	443	49868	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:54.081002951 CEST	49869	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:10:54.081036091 CEST	443	49869	3.124.210.90	192.168.2.5
Sep 10, 2024 18:10:54.081100941 CEST	49869	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:10:54.081569910 CEST	49869	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:10:54.081589937 CEST	443	49869	3.124.210.90	192.168.2.5
Sep 10, 2024 18:10:54.084412098 CEST	49870	443	192.168.2.5	18.165.140.91
Sep 10, 2024 18:10:54.084438086 CEST	443	49870	18.165.140.91	192.168.2.5
Sep 10, 2024 18:10:54.084480047 CEST	49870	443	192.168.2.5	18.165.140.91
Sep 10, 2024 18:10:54.084884882 CEST	49870	443	192.168.2.5	18.165.140.91
Sep 10, 2024 18:10:54.084902048 CEST	443	49870	18.165.140.91	192.168.2.5
Sep 10, 2024 18:10:54.093605995 CEST	49871	443	192.168.2.5	143.204.98.21
Sep 10, 2024 18:10:54.093646049 CEST	443	49871	143.204.98.21	192.168.2.5
Sep 10, 2024 18:10:54.093715906 CEST	49871	443	192.168.2.5	143.204.98.21
Sep 10, 2024 18:10:54.093857050 CEST	49871	443	192.168.2.5	143.204.98.21
Sep 10, 2024 18:10:54.093871117 CEST	443	49871	143.204.98.21	192.168.2.5
Sep 10, 2024 18:10:54.095412016 CEST	443	49863	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:54.098798990 CEST	443	49864	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:54.098989964 CEST	49864	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:54.099009991 CEST	443	49864	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:54.100505114 CEST	443	49864	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:54.100577116 CEST	49864	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:54.100594997 CEST	443	49864	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:54.100646019 CEST	49864	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:54.101425886 CEST	49864	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:54.101509094 CEST	443	49864	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:54.101591110 CEST	49864	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:54.101602077 CEST	443	49864	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:54.153940916 CEST	49864	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:54.168941021 CEST	443	49863	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:54.169038057 CEST	443	49863	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:54.169182062 CEST	49863	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:10:54.172734022 CEST	49863	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:10:54.172759056 CEST	443	49863	52.223.40.198	192.168.2.5
Sep 10, 2024 18:10:54.174921989 CEST	49872	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:54.174958944 CEST	443	49872	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:54.175030947 CEST	49872	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:54.175278902 CEST	49872	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:54.175296068 CEST	443	49872	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:54.180958033 CEST	443	49865	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:54.181149006 CEST	49865	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:54.181162119 CEST	443	49865	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:54.181869984 CEST	443	49865	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:54.182157040 CEST	49865	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:54.182248116 CEST	443	49865	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:54.182251930 CEST	49865	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:54.223439932 CEST	443	49865	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:54.232481003 CEST	49865	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:54.344101906 CEST	443	49867	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:54.344351053 CEST	49867	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:54.344371080 CEST	443	49867	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:54.344671011 CEST	443	49867	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:54.345074892 CEST	49867	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:54.345130920 CEST	443	49867	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:54.345294952 CEST	49867	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:54.375700951 CEST	443	49864	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:54.375931025 CEST	443	49864	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:54.375984907 CEST	49864	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:54.376677036 CEST	49864	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:54.376692057 CEST	443	49864	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:54.376704931 CEST	49864	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:54.376744032 CEST	49864	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:54.386981010 CEST	49873	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:54.387031078 CEST	443	49873	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:54.387104034 CEST	49873	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:54.387285948 CEST	49873	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:54.387316942 CEST	443	49873	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:54.387423038 CEST	443	49867	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:54.443284035 CEST	443	49865	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:54.443378925 CEST	443	49865	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:54.443444014 CEST	49865	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:54.444053888 CEST	49865	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:54.444076061 CEST	443	49865	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:54.454004049 CEST	49874	443	192.168.2.5	63.34.80.245
Sep 10, 2024 18:10:54.454031944 CEST	443	49874	63.34.80.245	192.168.2.5
Sep 10, 2024 18:10:54.454082966 CEST	49874	443	192.168.2.5	63.34.80.245
Sep 10, 2024 18:10:54.454252958 CEST	49874	443	192.168.2.5	63.34.80.245
Sep 10, 2024 18:10:54.454269886 CEST	443	49874	63.34.80.245	192.168.2.5
Sep 10, 2024 18:10:54.602097988 CEST	443	49867	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:54.602279902 CEST	443	49867	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:54.602340937 CEST	49867	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:54.606467009 CEST	49867	443	192.168.2.5	34.243.51.30
Sep 10, 2024 18:10:54.606487036 CEST	443	49867	34.243.51.30	192.168.2.5
Sep 10, 2024 18:10:54.612575054 CEST	49875	443	192.168.2.5	63.34.80.245
Sep 10, 2024 18:10:54.612615108 CEST	443	49875	63.34.80.245	192.168.2.5
Sep 10, 2024 18:10:54.612678051 CEST	49875	443	192.168.2.5	63.34.80.245
Sep 10, 2024 18:10:54.612962008 CEST	49875	443	192.168.2.5	63.34.80.245
Sep 10, 2024 18:10:54.612977982 CEST	443	49875	63.34.80.245	192.168.2.5
Sep 10, 2024 18:10:54.657007933 CEST	443	49872	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:54.657238007 CEST	49872	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:54.657255888 CEST	443	49872	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:54.658358097 CEST	443	49872	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:54.658741951 CEST	49872	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:54.658806086 CEST	49872	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:54.658813000 CEST	443	49872	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:54.658912897 CEST	443	49872	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:54.702749014 CEST	49872	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:54.706367016 CEST	443	49868	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:54.706561089 CEST	49868	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:54.706574917 CEST	443	49868	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:54.707726955 CEST	443	49868	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:54.707789898 CEST	49868	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:54.707799911 CEST	443	49868	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:54.707847118 CEST	49868	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:54.708877087 CEST	49868	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:54.708954096 CEST	443	49868	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:54.709006071 CEST	49868	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:54.709013939 CEST	443	49868	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:54.762834072 CEST	49868	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:54.778327942 CEST	443	49872	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:54.778502941 CEST	443	49872	3.212.66.47	192.168.2.5
Sep 10, 2024 18:10:54.779114962 CEST	49872	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:54.779114962 CEST	49872	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:54.779267073 CEST	49872	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:10:54.815634012 CEST	49877	443	192.168.2.5	3.214.14.27
Sep 10, 2024 18:10:54.815663099 CEST	443	49877	3.214.14.27	192.168.2.5
Sep 10, 2024 18:10:54.815888882 CEST	49877	443	192.168.2.5	3.214.14.27
Sep 10, 2024 18:10:54.815888882 CEST	49877	443	192.168.2.5	3.214.14.27
Sep 10, 2024 18:10:54.815926075 CEST	443	49877	3.214.14.27	192.168.2.5
Sep 10, 2024 18:10:54.823685884 CEST	443	49871	143.204.98.21	192.168.2.5
Sep 10, 2024 18:10:54.823940039 CEST	49871	443	192.168.2.5	143.204.98.21
Sep 10, 2024 18:10:54.823956966 CEST	443	49871	143.204.98.21	192.168.2.5
Sep 10, 2024 18:10:54.827477932 CEST	443	49871	143.204.98.21	192.168.2.5
Sep 10, 2024 18:10:54.827661037 CEST	49871	443	192.168.2.5	143.204.98.21
Sep 10, 2024 18:10:54.828111887 CEST	49871	443	192.168.2.5	143.204.98.21
Sep 10, 2024 18:10:54.828285933 CEST	443	49871	143.204.98.21	192.168.2.5
Sep 10, 2024 18:10:54.828681946 CEST	49871	443	192.168.2.5	143.204.98.21
Sep 10, 2024 18:10:54.828694105 CEST	443	49871	143.204.98.21	192.168.2.5
Sep 10, 2024 18:10:54.849849939 CEST	443	49870	18.165.140.91	192.168.2.5
Sep 10, 2024 18:10:54.850672007 CEST	49870	443	192.168.2.5	18.165.140.91
Sep 10, 2024 18:10:54.850684881 CEST	443	49870	18.165.140.91	192.168.2.5
Sep 10, 2024 18:10:54.852148056 CEST	443	49870	18.165.140.91	192.168.2.5
Sep 10, 2024 18:10:54.853234053 CEST	49870	443	192.168.2.5	18.165.140.91
Sep 10, 2024 18:10:54.853279114 CEST	49870	443	192.168.2.5	18.165.140.91
Sep 10, 2024 18:10:54.853279114 CEST	49870	443	192.168.2.5	18.165.140.91
Sep 10, 2024 18:10:54.853295088 CEST	443	49870	18.165.140.91	192.168.2.5
Sep 10, 2024 18:10:54.853357077 CEST	443	49870	18.165.140.91	192.168.2.5
Sep 10, 2024 18:10:54.872514009 CEST	49871	443	192.168.2.5	143.204.98.21
Sep 10, 2024 18:10:54.897530079 CEST	443	49869	3.124.210.90	192.168.2.5
Sep 10, 2024 18:10:54.897838116 CEST	49869	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:10:54.897852898 CEST	443	49869	3.124.210.90	192.168.2.5
Sep 10, 2024 18:10:54.899286985 CEST	443	49869	3.124.210.90	192.168.2.5
Sep 10, 2024 18:10:54.899641991 CEST	49869	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:10:54.899641991 CEST	49869	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:10:54.899730921 CEST	443	49869	3.124.210.90	192.168.2.5
Sep 10, 2024 18:10:54.899766922 CEST	49869	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:10:54.902955055 CEST	49870	443	192.168.2.5	18.165.140.91
Sep 10, 2024 18:10:54.902968884 CEST	443	49870	18.165.140.91	192.168.2.5
Sep 10, 2024 18:10:54.947412014 CEST	443	49869	3.124.210.90	192.168.2.5
Sep 10, 2024 18:10:54.948918104 CEST	49869	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:10:54.948925018 CEST	443	49869	3.124.210.90	192.168.2.5
Sep 10, 2024 18:10:54.950931072 CEST	49870	443	192.168.2.5	18.165.140.91
Sep 10, 2024 18:10:55.001101971 CEST	49869	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:10:55.018739939 CEST	443	49868	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:55.018802881 CEST	443	49868	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:55.018927097 CEST	49868	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:55.019269943 CEST	49868	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:55.019287109 CEST	443	49868	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:55.021045923 CEST	49878	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:55.021128893 CEST	443	49878	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:55.021351099 CEST	49878	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:55.021481037 CEST	49878	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:55.021516085 CEST	443	49878	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:55.048914909 CEST	443	49873	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:55.049134970 CEST	49873	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:55.049156904 CEST	443	49873	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:55.050601959 CEST	443	49873	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:55.050790071 CEST	49873	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:55.050802946 CEST	443	49873	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:55.050962925 CEST	49873	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:55.051028967 CEST	49873	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:55.051115036 CEST	443	49873	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:55.051142931 CEST	49873	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:55.089981079 CEST	443	49869	3.124.210.90	192.168.2.5
Sep 10, 2024 18:10:55.090080976 CEST	443	49869	3.124.210.90	192.168.2.5
Sep 10, 2024 18:10:55.091027021 CEST	49869	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:10:55.092318058 CEST	49873	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:55.092334986 CEST	443	49873	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:55.094942093 CEST	49869	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:10:55.094963074 CEST	443	49869	3.124.210.90	192.168.2.5
Sep 10, 2024 18:10:55.097152948 CEST	443	49871	143.204.98.21	192.168.2.5
Sep 10, 2024 18:10:55.098356962 CEST	443	49871	143.204.98.21	192.168.2.5
Sep 10, 2024 18:10:55.098370075 CEST	443	49871	143.204.98.21	192.168.2.5
Sep 10, 2024 18:10:55.098393917 CEST	443	49871	143.204.98.21	192.168.2.5
Sep 10, 2024 18:10:55.098426104 CEST	443	49871	143.204.98.21	192.168.2.5
Sep 10, 2024 18:10:55.098462105 CEST	49871	443	192.168.2.5	143.204.98.21
Sep 10, 2024 18:10:55.098496914 CEST	443	49871	143.204.98.21	192.168.2.5
Sep 10, 2024 18:10:55.098534107 CEST	49871	443	192.168.2.5	143.204.98.21
Sep 10, 2024 18:10:55.098561049 CEST	49871	443	192.168.2.5	143.204.98.21
Sep 10, 2024 18:10:55.098956108 CEST	443	49871	143.204.98.21	192.168.2.5
Sep 10, 2024 18:10:55.099049091 CEST	443	49871	143.204.98.21	192.168.2.5
Sep 10, 2024 18:10:55.099296093 CEST	49871	443	192.168.2.5	143.204.98.21
Sep 10, 2024 18:10:55.099349976 CEST	49871	443	192.168.2.5	143.204.98.21
Sep 10, 2024 18:10:55.099370003 CEST	443	49871	143.204.98.21	192.168.2.5
Sep 10, 2024 18:10:55.140991926 CEST	49873	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:55.156301975 CEST	443	49874	63.34.80.245	192.168.2.5
Sep 10, 2024 18:10:55.156702042 CEST	49874	443	192.168.2.5	63.34.80.245
Sep 10, 2024 18:10:55.156716108 CEST	443	49874	63.34.80.245	192.168.2.5
Sep 10, 2024 18:10:55.158216953 CEST	443	49874	63.34.80.245	192.168.2.5
Sep 10, 2024 18:10:55.158616066 CEST	49874	443	192.168.2.5	63.34.80.245
Sep 10, 2024 18:10:55.158616066 CEST	49874	443	192.168.2.5	63.34.80.245
Sep 10, 2024 18:10:55.158710957 CEST	443	49874	63.34.80.245	192.168.2.5
Sep 10, 2024 18:10:55.158797026 CEST	49874	443	192.168.2.5	63.34.80.245
Sep 10, 2024 18:10:55.203408003 CEST	443	49874	63.34.80.245	192.168.2.5
Sep 10, 2024 18:10:55.204621077 CEST	49874	443	192.168.2.5	63.34.80.245
Sep 10, 2024 18:10:55.204632998 CEST	443	49874	63.34.80.245	192.168.2.5
Sep 10, 2024 18:10:55.249118090 CEST	49874	443	192.168.2.5	63.34.80.245
Sep 10, 2024 18:10:55.304085016 CEST	443	49870	18.165.140.91	192.168.2.5
Sep 10, 2024 18:10:55.304179907 CEST	443	49870	18.165.140.91	192.168.2.5
Sep 10, 2024 18:10:55.304336071 CEST	49870	443	192.168.2.5	18.165.140.91
Sep 10, 2024 18:10:55.353718042 CEST	443	49873	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:55.353892088 CEST	443	49873	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:55.354511976 CEST	49873	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:55.354546070 CEST	443	49873	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:55.354578018 CEST	49873	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:55.354819059 CEST	49873	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:55.356839895 CEST	49879	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:55.356882095 CEST	443	49879	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:55.356987000 CEST	49870	443	192.168.2.5	18.165.140.91
Sep 10, 2024 18:10:55.356997013 CEST	443	49870	18.165.140.91	192.168.2.5
Sep 10, 2024 18:10:55.357394934 CEST	49879	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:55.357394934 CEST	49879	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:55.357419968 CEST	443	49879	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:55.360327959 CEST	49880	443	192.168.2.5	18.165.140.91
Sep 10, 2024 18:10:55.360340118 CEST	443	49880	18.165.140.91	192.168.2.5
Sep 10, 2024 18:10:55.363195896 CEST	49880	443	192.168.2.5	18.165.140.91
Sep 10, 2024 18:10:55.363195896 CEST	49880	443	192.168.2.5	18.165.140.91
Sep 10, 2024 18:10:55.363224983 CEST	443	49880	18.165.140.91	192.168.2.5
Sep 10, 2024 18:10:55.426700115 CEST	443	49875	63.34.80.245	192.168.2.5
Sep 10, 2024 18:10:55.430190086 CEST	49875	443	192.168.2.5	63.34.80.245
Sep 10, 2024 18:10:55.430217981 CEST	443	49875	63.34.80.245	192.168.2.5
Sep 10, 2024 18:10:55.431844950 CEST	443	49875	63.34.80.245	192.168.2.5
Sep 10, 2024 18:10:55.432061911 CEST	49875	443	192.168.2.5	63.34.80.245
Sep 10, 2024 18:10:55.432301044 CEST	49875	443	192.168.2.5	63.34.80.245
Sep 10, 2024 18:10:55.432301044 CEST	49875	443	192.168.2.5	63.34.80.245
Sep 10, 2024 18:10:55.432313919 CEST	443	49875	63.34.80.245	192.168.2.5
Sep 10, 2024 18:10:55.432537079 CEST	443	49875	63.34.80.245	192.168.2.5
Sep 10, 2024 18:10:55.485966921 CEST	49875	443	192.168.2.5	63.34.80.245
Sep 10, 2024 18:10:55.485989094 CEST	443	49875	63.34.80.245	192.168.2.5
Sep 10, 2024 18:10:55.533243895 CEST	49875	443	192.168.2.5	63.34.80.245
Sep 10, 2024 18:10:55.639017105 CEST	443	49874	63.34.80.245	192.168.2.5
Sep 10, 2024 18:10:55.639136076 CEST	443	49874	63.34.80.245	192.168.2.5
Sep 10, 2024 18:10:55.639585018 CEST	49874	443	192.168.2.5	63.34.80.245
Sep 10, 2024 18:10:55.641334057 CEST	49874	443	192.168.2.5	63.34.80.245
Sep 10, 2024 18:10:55.641357899 CEST	443	49874	63.34.80.245	192.168.2.5
Sep 10, 2024 18:10:55.698523045 CEST	443	49877	3.214.14.27	192.168.2.5
Sep 10, 2024 18:10:55.698795080 CEST	49877	443	192.168.2.5	3.214.14.27
Sep 10, 2024 18:10:55.698820114 CEST	443	49877	3.214.14.27	192.168.2.5
Sep 10, 2024 18:10:55.701844931 CEST	443	49877	3.214.14.27	192.168.2.5
Sep 10, 2024 18:10:55.702142954 CEST	49877	443	192.168.2.5	3.214.14.27
Sep 10, 2024 18:10:55.704049110 CEST	49877	443	192.168.2.5	3.214.14.27
Sep 10, 2024 18:10:55.704049110 CEST	49877	443	192.168.2.5	3.214.14.27
Sep 10, 2024 18:10:55.704071999 CEST	443	49877	3.214.14.27	192.168.2.5
Sep 10, 2024 18:10:55.704138041 CEST	443	49877	3.214.14.27	192.168.2.5
Sep 10, 2024 18:10:55.750174999 CEST	49877	443	192.168.2.5	3.214.14.27
Sep 10, 2024 18:10:55.750202894 CEST	443	49877	3.214.14.27	192.168.2.5
Sep 10, 2024 18:10:55.796516895 CEST	49877	443	192.168.2.5	3.214.14.27
Sep 10, 2024 18:10:55.812695026 CEST	443	49877	3.214.14.27	192.168.2.5
Sep 10, 2024 18:10:55.812886953 CEST	443	49877	3.214.14.27	192.168.2.5
Sep 10, 2024 18:10:55.812897921 CEST	443	49875	63.34.80.245	192.168.2.5
Sep 10, 2024 18:10:55.812978029 CEST	49877	443	192.168.2.5	3.214.14.27
Sep 10, 2024 18:10:55.813174963 CEST	443	49875	63.34.80.245	192.168.2.5
Sep 10, 2024 18:10:55.813239098 CEST	49875	443	192.168.2.5	63.34.80.245
Sep 10, 2024 18:10:55.814846992 CEST	49877	443	192.168.2.5	3.214.14.27
Sep 10, 2024 18:10:55.814873934 CEST	443	49877	3.214.14.27	192.168.2.5
Sep 10, 2024 18:10:55.815767050 CEST	49875	443	192.168.2.5	63.34.80.245
Sep 10, 2024 18:10:55.815785885 CEST	443	49875	63.34.80.245	192.168.2.5
Sep 10, 2024 18:10:55.832439899 CEST	49881	443	192.168.2.5	52.6.40.178
Sep 10, 2024 18:10:55.832469940 CEST	443	49881	52.6.40.178	192.168.2.5
Sep 10, 2024 18:10:55.832552910 CEST	49881	443	192.168.2.5	52.6.40.178
Sep 10, 2024 18:10:55.832766056 CEST	49881	443	192.168.2.5	52.6.40.178
Sep 10, 2024 18:10:55.832792997 CEST	443	49881	52.6.40.178	192.168.2.5
Sep 10, 2024 18:10:55.891114950 CEST	443	49878	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:55.891350031 CEST	49878	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:55.891377926 CEST	443	49878	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:55.891690969 CEST	443	49878	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:55.892000914 CEST	49878	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:55.892066956 CEST	443	49878	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:55.892204046 CEST	49878	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:55.935420990 CEST	443	49878	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:56.161832094 CEST	443	49879	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:56.162614107 CEST	49879	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:56.162632942 CEST	443	49879	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:56.163175106 CEST	443	49879	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:56.163875103 CEST	49879	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:56.163963079 CEST	443	49879	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:56.164171934 CEST	49879	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:56.211404085 CEST	443	49879	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:56.242027998 CEST	443	49878	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:56.242105007 CEST	443	49878	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:56.242178917 CEST	49878	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:56.275221109 CEST	443	49880	18.165.140.91	192.168.2.5
Sep 10, 2024 18:10:56.305362940 CEST	49880	443	192.168.2.5	18.165.140.91
Sep 10, 2024 18:10:56.305376053 CEST	443	49880	18.165.140.91	192.168.2.5
Sep 10, 2024 18:10:56.306067944 CEST	49878	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:56.306086063 CEST	443	49878	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:56.306561947 CEST	443	49880	18.165.140.91	192.168.2.5
Sep 10, 2024 18:10:56.325284004 CEST	49880	443	192.168.2.5	18.165.140.91
Sep 10, 2024 18:10:56.325484991 CEST	443	49880	18.165.140.91	192.168.2.5
Sep 10, 2024 18:10:56.348881960 CEST	49880	443	192.168.2.5	18.165.140.91
Sep 10, 2024 18:10:56.391446114 CEST	443	49880	18.165.140.91	192.168.2.5
Sep 10, 2024 18:10:56.401705027 CEST	49882	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:56.401770115 CEST	443	49882	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:56.401853085 CEST	49882	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:56.402038097 CEST	49882	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:56.402055025 CEST	443	49882	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:56.461749077 CEST	443	49879	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:56.461834908 CEST	443	49879	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:56.461888075 CEST	49879	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:56.462376118 CEST	49879	443	192.168.2.5	3.75.62.37
Sep 10, 2024 18:10:56.462384939 CEST	443	49879	3.75.62.37	192.168.2.5
Sep 10, 2024 18:10:56.464476109 CEST	49883	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:56.464528084 CEST	443	49883	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:56.464622974 CEST	49883	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:56.465029001 CEST	49883	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:56.465044975 CEST	443	49883	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:56.504535913 CEST	443	49881	52.6.40.178	192.168.2.5
Sep 10, 2024 18:10:56.504754066 CEST	49881	443	192.168.2.5	52.6.40.178
Sep 10, 2024 18:10:56.504770041 CEST	443	49881	52.6.40.178	192.168.2.5
Sep 10, 2024 18:10:56.505790949 CEST	443	49881	52.6.40.178	192.168.2.5
Sep 10, 2024 18:10:56.505887032 CEST	49881	443	192.168.2.5	52.6.40.178
Sep 10, 2024 18:10:56.506361961 CEST	49881	443	192.168.2.5	52.6.40.178
Sep 10, 2024 18:10:56.506414890 CEST	443	49881	52.6.40.178	192.168.2.5
Sep 10, 2024 18:10:56.506696939 CEST	49881	443	192.168.2.5	52.6.40.178
Sep 10, 2024 18:10:56.506701946 CEST	443	49881	52.6.40.178	192.168.2.5
Sep 10, 2024 18:10:56.560745001 CEST	49881	443	192.168.2.5	52.6.40.178
Sep 10, 2024 18:10:56.613310099 CEST	443	49881	52.6.40.178	192.168.2.5
Sep 10, 2024 18:10:56.613410950 CEST	443	49881	52.6.40.178	192.168.2.5
Sep 10, 2024 18:10:56.613470078 CEST	49881	443	192.168.2.5	52.6.40.178
Sep 10, 2024 18:10:56.614387989 CEST	49881	443	192.168.2.5	52.6.40.178
Sep 10, 2024 18:10:56.614408016 CEST	443	49881	52.6.40.178	192.168.2.5
Sep 10, 2024 18:10:56.730865955 CEST	443	49880	18.165.140.91	192.168.2.5
Sep 10, 2024 18:10:56.731067896 CEST	443	49880	18.165.140.91	192.168.2.5
Sep 10, 2024 18:10:56.731134892 CEST	49880	443	192.168.2.5	18.165.140.91
Sep 10, 2024 18:10:56.736994982 CEST	49880	443	192.168.2.5	18.165.140.91
Sep 10, 2024 18:10:56.737015009 CEST	443	49880	18.165.140.91	192.168.2.5
Sep 10, 2024 18:10:56.752564907 CEST	49884	443	192.168.2.5	18.239.69.3
Sep 10, 2024 18:10:56.752616882 CEST	443	49884	18.239.69.3	192.168.2.5
Sep 10, 2024 18:10:56.752691031 CEST	49884	443	192.168.2.5	18.239.69.3
Sep 10, 2024 18:10:56.752976894 CEST	49884	443	192.168.2.5	18.239.69.3
Sep 10, 2024 18:10:56.752991915 CEST	443	49884	18.239.69.3	192.168.2.5
Sep 10, 2024 18:10:56.963028908 CEST	443	49883	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:56.963541031 CEST	49883	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:56.963577032 CEST	443	49883	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:56.964083910 CEST	443	49883	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:56.965691090 CEST	49883	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:56.965784073 CEST	443	49883	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:56.969335079 CEST	49883	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:57.011409044 CEST	443	49883	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:57.046495914 CEST	443	49882	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:57.047224045 CEST	49882	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:57.047256947 CEST	443	49882	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:57.047574997 CEST	443	49882	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:57.048012018 CEST	49882	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:57.048067093 CEST	443	49882	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:57.050967932 CEST	49882	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:57.095406055 CEST	443	49882	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:57.345397949 CEST	443	49883	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:57.345510006 CEST	443	49883	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:57.346133947 CEST	49883	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:57.346945047 CEST	49883	443	192.168.2.5	34.195.102.92
Sep 10, 2024 18:10:57.346967936 CEST	443	49883	34.195.102.92	192.168.2.5
Sep 10, 2024 18:10:57.360740900 CEST	49885	443	192.168.2.5	44.199.36.5
Sep 10, 2024 18:10:57.360778093 CEST	443	49885	44.199.36.5	192.168.2.5
Sep 10, 2024 18:10:57.361499071 CEST	49885	443	192.168.2.5	44.199.36.5
Sep 10, 2024 18:10:57.362582922 CEST	49885	443	192.168.2.5	44.199.36.5
Sep 10, 2024 18:10:57.362601995 CEST	443	49885	44.199.36.5	192.168.2.5
Sep 10, 2024 18:10:57.365211010 CEST	443	49882	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:57.365278959 CEST	443	49882	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:57.366775990 CEST	49882	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:57.366944075 CEST	49882	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:10:57.366961956 CEST	443	49882	3.120.214.218	192.168.2.5
Sep 10, 2024 18:10:57.370939970 CEST	49886	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:10:57.370970011 CEST	443	49886	3.124.210.90	192.168.2.5
Sep 10, 2024 18:10:57.374959946 CEST	49887	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:57.374969959 CEST	443	49887	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:57.375427008 CEST	49886	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:10:57.375427008 CEST	49887	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:57.378931999 CEST	49887	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:57.378951073 CEST	443	49887	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:57.378961086 CEST	49886	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:10:57.378969908 CEST	443	49886	3.124.210.90	192.168.2.5
Sep 10, 2024 18:10:57.379856110 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:57.379885912 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:57.382555008 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:57.382673025 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:57.382684946 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:57.444293022 CEST	443	49884	18.239.69.3	192.168.2.5
Sep 10, 2024 18:10:57.444565058 CEST	49884	443	192.168.2.5	18.239.69.3
Sep 10, 2024 18:10:57.444610119 CEST	443	49884	18.239.69.3	192.168.2.5
Sep 10, 2024 18:10:57.445476055 CEST	443	49884	18.239.69.3	192.168.2.5
Sep 10, 2024 18:10:57.445648909 CEST	49884	443	192.168.2.5	18.239.69.3
Sep 10, 2024 18:10:57.446052074 CEST	49884	443	192.168.2.5	18.239.69.3
Sep 10, 2024 18:10:57.446052074 CEST	49884	443	192.168.2.5	18.239.69.3
Sep 10, 2024 18:10:57.446079016 CEST	443	49884	18.239.69.3	192.168.2.5
Sep 10, 2024 18:10:57.446121931 CEST	443	49884	18.239.69.3	192.168.2.5
Sep 10, 2024 18:10:57.486955881 CEST	49884	443	192.168.2.5	18.239.69.3
Sep 10, 2024 18:10:57.486990929 CEST	443	49884	18.239.69.3	192.168.2.5
Sep 10, 2024 18:10:57.534400940 CEST	49884	443	192.168.2.5	18.239.69.3
Sep 10, 2024 18:10:57.790668011 CEST	443	49884	18.239.69.3	192.168.2.5
Sep 10, 2024 18:10:57.790894032 CEST	443	49884	18.239.69.3	192.168.2.5
Sep 10, 2024 18:10:57.790955067 CEST	49884	443	192.168.2.5	18.239.69.3
Sep 10, 2024 18:10:57.792269945 CEST	49884	443	192.168.2.5	18.239.69.3
Sep 10, 2024 18:10:57.792298079 CEST	443	49884	18.239.69.3	192.168.2.5
Sep 10, 2024 18:10:57.842581034 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:57.843118906 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:57.843138933 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:57.844295025 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:57.844675064 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:57.844748974 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:57.844754934 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:57.844850063 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:57.890467882 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:57.943645954 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:57.943885088 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:57.943931103 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:57.943949938 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:57.944037914 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:57.944086075 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:57.944096088 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:57.944185019 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:57.944230080 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:57.944238901 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:57.948796988 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:57.948848009 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:57.948864937 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:57.999510050 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:57.999531031 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.015564919 CEST	443	49886	3.124.210.90	192.168.2.5
Sep 10, 2024 18:10:58.017293930 CEST	49886	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:10:58.017306089 CEST	443	49886	3.124.210.90	192.168.2.5
Sep 10, 2024 18:10:58.018403053 CEST	443	49886	3.124.210.90	192.168.2.5
Sep 10, 2024 18:10:58.020823956 CEST	49886	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:10:58.021006107 CEST	443	49886	3.124.210.90	192.168.2.5
Sep 10, 2024 18:10:58.021152973 CEST	49886	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:10:58.030953884 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.031014919 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.031035900 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.031107903 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.031155109 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.031162977 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.031480074 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.031523943 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.031533003 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.031667948 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.031723976 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.031730890 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.031920910 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.031970024 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.031977892 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.032088041 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.032139063 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.032145977 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.032830000 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.032880068 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.032887936 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.063405991 CEST	443	49886	3.124.210.90	192.168.2.5
Sep 10, 2024 18:10:58.068223953 CEST	443	49885	44.199.36.5	192.168.2.5
Sep 10, 2024 18:10:58.068486929 CEST	49885	443	192.168.2.5	44.199.36.5
Sep 10, 2024 18:10:58.068519115 CEST	443	49885	44.199.36.5	192.168.2.5
Sep 10, 2024 18:10:58.070075989 CEST	443	49885	44.199.36.5	192.168.2.5
Sep 10, 2024 18:10:58.070149899 CEST	49885	443	192.168.2.5	44.199.36.5
Sep 10, 2024 18:10:58.070493937 CEST	49885	443	192.168.2.5	44.199.36.5
Sep 10, 2024 18:10:58.070584059 CEST	443	49885	44.199.36.5	192.168.2.5
Sep 10, 2024 18:10:58.070683002 CEST	49885	443	192.168.2.5	44.199.36.5
Sep 10, 2024 18:10:58.078064919 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.078088045 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.079471111 CEST	443	49887	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:58.079718113 CEST	49887	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:58.079730034 CEST	443	49887	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:58.081188917 CEST	443	49887	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:58.081245899 CEST	49887	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:58.081598997 CEST	49887	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:58.081680059 CEST	443	49887	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:58.081708908 CEST	49887	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:58.111407995 CEST	443	49885	44.199.36.5	192.168.2.5
Sep 10, 2024 18:10:58.117713928 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.117738008 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.117775917 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.117779970 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.117799997 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.117815018 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.117818117 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.117830038 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.117835999 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.117851019 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.117876053 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.117885113 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.117898941 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.118226051 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.118244886 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.118273973 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.118290901 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.118310928 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.118311882 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.118336916 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.118346930 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.118359089 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.119636059 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.119653940 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.119690895 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.119699955 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.119725943 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.122627020 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.122649908 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.122685909 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.122694969 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.122711897 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.122730017 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.123419046 CEST	443	49887	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:58.124389887 CEST	49885	443	192.168.2.5	44.199.36.5
Sep 10, 2024 18:10:58.124418974 CEST	443	49885	44.199.36.5	192.168.2.5
Sep 10, 2024 18:10:58.124422073 CEST	49887	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:58.124432087 CEST	443	49887	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:58.170582056 CEST	49887	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:58.170706987 CEST	49885	443	192.168.2.5	44.199.36.5
Sep 10, 2024 18:10:58.191124916 CEST	443	49885	44.199.36.5	192.168.2.5
Sep 10, 2024 18:10:58.191216946 CEST	443	49885	44.199.36.5	192.168.2.5
Sep 10, 2024 18:10:58.191339970 CEST	49885	443	192.168.2.5	44.199.36.5
Sep 10, 2024 18:10:58.191740990 CEST	49885	443	192.168.2.5	44.199.36.5
Sep 10, 2024 18:10:58.191767931 CEST	443	49885	44.199.36.5	192.168.2.5
Sep 10, 2024 18:10:58.203078985 CEST	49889	443	192.168.2.5	104.18.37.193
Sep 10, 2024 18:10:58.203169107 CEST	443	49889	104.18.37.193	192.168.2.5
Sep 10, 2024 18:10:58.203241110 CEST	49889	443	192.168.2.5	104.18.37.193
Sep 10, 2024 18:10:58.203438044 CEST	49889	443	192.168.2.5	104.18.37.193
Sep 10, 2024 18:10:58.203476906 CEST	443	49889	104.18.37.193	192.168.2.5
Sep 10, 2024 18:10:58.205495119 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.205564022 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.205566883 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.205598116 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.205611944 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.205621958 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.205650091 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.206048012 CEST	49888	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.206065893 CEST	443	49888	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.212310076 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.212347031 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.212402105 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.212558985 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.212578058 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.343518972 CEST	443	49886	3.124.210.90	192.168.2.5
Sep 10, 2024 18:10:58.343597889 CEST	443	49886	3.124.210.90	192.168.2.5
Sep 10, 2024 18:10:58.343638897 CEST	49886	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:10:58.348248005 CEST	49886	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:10:58.348264933 CEST	443	49886	3.124.210.90	192.168.2.5
Sep 10, 2024 18:10:58.684629917 CEST	443	49889	104.18.37.193	192.168.2.5
Sep 10, 2024 18:10:58.686213017 CEST	49889	443	192.168.2.5	104.18.37.193
Sep 10, 2024 18:10:58.686279058 CEST	443	49889	104.18.37.193	192.168.2.5
Sep 10, 2024 18:10:58.688002110 CEST	443	49889	104.18.37.193	192.168.2.5
Sep 10, 2024 18:10:58.688080072 CEST	49889	443	192.168.2.5	104.18.37.193
Sep 10, 2024 18:10:58.699574947 CEST	49889	443	192.168.2.5	104.18.37.193
Sep 10, 2024 18:10:58.699717999 CEST	443	49889	104.18.37.193	192.168.2.5
Sep 10, 2024 18:10:58.699747086 CEST	49889	443	192.168.2.5	104.18.37.193
Sep 10, 2024 18:10:58.740469933 CEST	443	49887	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:58.740525007 CEST	443	49887	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:58.740572929 CEST	49887	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:58.740586042 CEST	443	49887	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:58.740605116 CEST	443	49887	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:58.740627050 CEST	49887	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:58.740655899 CEST	49887	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:58.743419886 CEST	443	49889	104.18.37.193	192.168.2.5
Sep 10, 2024 18:10:58.743993998 CEST	49889	443	192.168.2.5	104.18.37.193
Sep 10, 2024 18:10:58.744019032 CEST	443	49889	104.18.37.193	192.168.2.5
Sep 10, 2024 18:10:58.753298998 CEST	49887	443	192.168.2.5	18.239.18.12
Sep 10, 2024 18:10:58.753315926 CEST	443	49887	18.239.18.12	192.168.2.5
Sep 10, 2024 18:10:58.762998104 CEST	49891	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:58.763097048 CEST	443	49891	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:58.763237000 CEST	49891	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:58.766968012 CEST	49891	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:58.767009974 CEST	443	49891	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:58.770667076 CEST	49892	443	192.168.2.5	54.76.106.86
Sep 10, 2024 18:10:58.770693064 CEST	443	49892	54.76.106.86	192.168.2.5
Sep 10, 2024 18:10:58.770910025 CEST	49892	443	192.168.2.5	54.76.106.86
Sep 10, 2024 18:10:58.771142960 CEST	49892	443	192.168.2.5	54.76.106.86
Sep 10, 2024 18:10:58.771169901 CEST	443	49892	54.76.106.86	192.168.2.5
Sep 10, 2024 18:10:58.790277004 CEST	49889	443	192.168.2.5	104.18.37.193
Sep 10, 2024 18:10:58.790375948 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.790615082 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.790643930 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.791780949 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.792248011 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.792248011 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.792323112 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.836339951 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.893768072 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.894109011 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.894130945 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.894262075 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.894282103 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.894386053 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.894409895 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.894418001 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.894510984 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.901304960 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.901659966 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.901736975 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.901772022 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.901778936 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.901865959 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.901990891 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.901998997 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.902168989 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.909075022 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.910985947 CEST	443	49889	104.18.37.193	192.168.2.5
Sep 10, 2024 18:10:58.911534071 CEST	443	49889	104.18.37.193	192.168.2.5
Sep 10, 2024 18:10:58.911619902 CEST	49889	443	192.168.2.5	104.18.37.193
Sep 10, 2024 18:10:58.913203001 CEST	49889	443	192.168.2.5	104.18.37.193
Sep 10, 2024 18:10:58.913227081 CEST	443	49889	104.18.37.193	192.168.2.5
Sep 10, 2024 18:10:58.921444893 CEST	49893	443	192.168.2.5	172.64.150.63
Sep 10, 2024 18:10:58.921509027 CEST	443	49893	172.64.150.63	192.168.2.5
Sep 10, 2024 18:10:58.921906948 CEST	49893	443	192.168.2.5	172.64.150.63
Sep 10, 2024 18:10:58.921906948 CEST	49893	443	192.168.2.5	172.64.150.63
Sep 10, 2024 18:10:58.921943903 CEST	443	49893	172.64.150.63	192.168.2.5
Sep 10, 2024 18:10:58.959542990 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.986406088 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.986418962 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.986459017 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.986479044 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.986491919 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.986499071 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.986517906 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.986537933 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.986553907 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.986593962 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.993602037 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.993649960 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.993696928 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.993705988 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:58.993738890 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:58.993801117 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:59.076785088 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:59.076809883 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:59.077085018 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:59.077099085 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:59.077491045 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:59.078330040 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:59.078377962 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:59.078413010 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:59.078419924 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:59.078449965 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:59.078676939 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:59.083688021 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:59.083708048 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:59.083803892 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:59.083811045 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:59.084049940 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:59.084888935 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:59.084940910 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:59.084969997 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:59.084974051 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:59.085000038 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:59.085408926 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:59.085408926 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:59.378088951 CEST	443	49893	172.64.150.63	192.168.2.5
Sep 10, 2024 18:10:59.382685900 CEST	49893	443	192.168.2.5	172.64.150.63
Sep 10, 2024 18:10:59.382709026 CEST	443	49893	172.64.150.63	192.168.2.5
Sep 10, 2024 18:10:59.384164095 CEST	443	49893	172.64.150.63	192.168.2.5
Sep 10, 2024 18:10:59.384502888 CEST	49893	443	192.168.2.5	172.64.150.63
Sep 10, 2024 18:10:59.385277033 CEST	49893	443	192.168.2.5	172.64.150.63
Sep 10, 2024 18:10:59.385277033 CEST	49893	443	192.168.2.5	172.64.150.63
Sep 10, 2024 18:10:59.385289907 CEST	443	49893	172.64.150.63	192.168.2.5
Sep 10, 2024 18:10:59.385354996 CEST	443	49893	172.64.150.63	192.168.2.5
Sep 10, 2024 18:10:59.394195080 CEST	49890	443	192.168.2.5	199.232.192.193
Sep 10, 2024 18:10:59.394223928 CEST	443	49890	199.232.192.193	192.168.2.5
Sep 10, 2024 18:10:59.427694082 CEST	49893	443	192.168.2.5	172.64.150.63
Sep 10, 2024 18:10:59.427706003 CEST	443	49893	172.64.150.63	192.168.2.5
Sep 10, 2024 18:10:59.460999012 CEST	443	49891	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:59.461395979 CEST	49891	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:59.461427927 CEST	443	49891	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:59.462035894 CEST	443	49891	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:59.462308884 CEST	49891	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:59.462413073 CEST	49891	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:59.462419033 CEST	443	49891	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:59.462625980 CEST	443	49891	18.239.18.78	192.168.2.5
Sep 10, 2024 18:10:59.473459959 CEST	49893	443	192.168.2.5	172.64.150.63
Sep 10, 2024 18:10:59.504030943 CEST	49891	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:10:59.583678007 CEST	443	49893	172.64.150.63	192.168.2.5
Sep 10, 2024 18:10:59.583790064 CEST	443	49893	172.64.150.63	192.168.2.5
Sep 10, 2024 18:10:59.583923101 CEST	49893	443	192.168.2.5	172.64.150.63
Sep 10, 2024 18:10:59.585364103 CEST	49893	443	192.168.2.5	172.64.150.63
Sep 10, 2024 18:10:59.585381031 CEST	443	49893	172.64.150.63	192.168.2.5
Sep 10, 2024 18:10:59.586131096 CEST	49894	443	192.168.2.5	44.199.36.5
Sep 10, 2024 18:10:59.586165905 CEST	443	49894	44.199.36.5	192.168.2.5
Sep 10, 2024 18:10:59.586610079 CEST	49894	443	192.168.2.5	44.199.36.5
Sep 10, 2024 18:10:59.586610079 CEST	49894	443	192.168.2.5	44.199.36.5
Sep 10, 2024 18:10:59.586638927 CEST	443	49894	44.199.36.5	192.168.2.5
Sep 10, 2024 18:10:59.719618082 CEST	443	49892	54.76.106.86	192.168.2.5
Sep 10, 2024 18:10:59.728458881 CEST	49892	443	192.168.2.5	54.76.106.86
Sep 10, 2024 18:10:59.728494883 CEST	443	49892	54.76.106.86	192.168.2.5
Sep 10, 2024 18:10:59.729983091 CEST	443	49892	54.76.106.86	192.168.2.5
Sep 10, 2024 18:10:59.730108023 CEST	49892	443	192.168.2.5	54.76.106.86
Sep 10, 2024 18:10:59.730379105 CEST	49892	443	192.168.2.5	54.76.106.86
Sep 10, 2024 18:10:59.730460882 CEST	443	49892	54.76.106.86	192.168.2.5
Sep 10, 2024 18:10:59.730632067 CEST	49892	443	192.168.2.5	54.76.106.86
Sep 10, 2024 18:10:59.730645895 CEST	443	49892	54.76.106.86	192.168.2.5
Sep 10, 2024 18:10:59.780127048 CEST	49892	443	192.168.2.5	54.76.106.86
Sep 10, 2024 18:11:00.069911957 CEST	443	49892	54.76.106.86	192.168.2.5
Sep 10, 2024 18:11:00.070003986 CEST	443	49892	54.76.106.86	192.168.2.5
Sep 10, 2024 18:11:00.070081949 CEST	49892	443	192.168.2.5	54.76.106.86
Sep 10, 2024 18:11:00.074116945 CEST	49892	443	192.168.2.5	54.76.106.86
Sep 10, 2024 18:11:00.074163914 CEST	443	49892	54.76.106.86	192.168.2.5
Sep 10, 2024 18:11:00.093056917 CEST	49895	443	192.168.2.5	104.21.34.180
Sep 10, 2024 18:11:00.093120098 CEST	443	49895	104.21.34.180	192.168.2.5
Sep 10, 2024 18:11:00.093271017 CEST	49895	443	192.168.2.5	104.21.34.180
Sep 10, 2024 18:11:00.093539000 CEST	49895	443	192.168.2.5	104.21.34.180
Sep 10, 2024 18:11:00.093573093 CEST	443	49895	104.21.34.180	192.168.2.5
Sep 10, 2024 18:11:00.095302105 CEST	49896	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:11:00.095323086 CEST	443	49896	18.239.18.33	192.168.2.5
Sep 10, 2024 18:11:00.095433950 CEST	49896	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:11:00.095590115 CEST	49896	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:11:00.095618963 CEST	443	49896	18.239.18.33	192.168.2.5
Sep 10, 2024 18:11:00.098836899 CEST	49897	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:11:00.098932981 CEST	443	49897	54.77.7.79	192.168.2.5
Sep 10, 2024 18:11:00.099054098 CEST	49897	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:11:00.099255085 CEST	49897	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:11:00.099288940 CEST	443	49897	54.77.7.79	192.168.2.5
Sep 10, 2024 18:11:00.114439011 CEST	443	49894	44.199.36.5	192.168.2.5
Sep 10, 2024 18:11:00.114658117 CEST	49894	443	192.168.2.5	44.199.36.5
Sep 10, 2024 18:11:00.114682913 CEST	443	49894	44.199.36.5	192.168.2.5
Sep 10, 2024 18:11:00.115178108 CEST	443	49894	44.199.36.5	192.168.2.5
Sep 10, 2024 18:11:00.115585089 CEST	49894	443	192.168.2.5	44.199.36.5
Sep 10, 2024 18:11:00.115585089 CEST	49894	443	192.168.2.5	44.199.36.5
Sep 10, 2024 18:11:00.115607023 CEST	443	49894	44.199.36.5	192.168.2.5
Sep 10, 2024 18:11:00.115668058 CEST	443	49894	44.199.36.5	192.168.2.5
Sep 10, 2024 18:11:00.125655890 CEST	443	49891	18.239.18.78	192.168.2.5
Sep 10, 2024 18:11:00.126125097 CEST	443	49891	18.239.18.78	192.168.2.5
Sep 10, 2024 18:11:00.126211882 CEST	49891	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:11:00.126277924 CEST	443	49891	18.239.18.78	192.168.2.5
Sep 10, 2024 18:11:00.126316071 CEST	443	49891	18.239.18.78	192.168.2.5
Sep 10, 2024 18:11:00.126374006 CEST	49891	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:11:00.126580000 CEST	49891	443	192.168.2.5	18.239.18.78
Sep 10, 2024 18:11:00.126610041 CEST	443	49891	18.239.18.78	192.168.2.5
Sep 10, 2024 18:11:00.162086010 CEST	49894	443	192.168.2.5	44.199.36.5
Sep 10, 2024 18:11:00.245731115 CEST	443	49894	44.199.36.5	192.168.2.5
Sep 10, 2024 18:11:00.245814085 CEST	443	49894	44.199.36.5	192.168.2.5
Sep 10, 2024 18:11:00.246666908 CEST	49894	443	192.168.2.5	44.199.36.5
Sep 10, 2024 18:11:00.246666908 CEST	49894	443	192.168.2.5	44.199.36.5
Sep 10, 2024 18:11:00.559875965 CEST	49894	443	192.168.2.5	44.199.36.5
Sep 10, 2024 18:11:00.559905052 CEST	443	49894	44.199.36.5	192.168.2.5
Sep 10, 2024 18:11:00.596395969 CEST	443	49895	104.21.34.180	192.168.2.5
Sep 10, 2024 18:11:00.596682072 CEST	49895	443	192.168.2.5	104.21.34.180
Sep 10, 2024 18:11:00.596748114 CEST	443	49895	104.21.34.180	192.168.2.5
Sep 10, 2024 18:11:00.598793030 CEST	443	49895	104.21.34.180	192.168.2.5
Sep 10, 2024 18:11:00.598870993 CEST	49895	443	192.168.2.5	104.21.34.180
Sep 10, 2024 18:11:00.599807978 CEST	49895	443	192.168.2.5	104.21.34.180
Sep 10, 2024 18:11:00.599901915 CEST	443	49895	104.21.34.180	192.168.2.5
Sep 10, 2024 18:11:00.599980116 CEST	49895	443	192.168.2.5	104.21.34.180
Sep 10, 2024 18:11:00.599998951 CEST	443	49895	104.21.34.180	192.168.2.5
Sep 10, 2024 18:11:00.653630018 CEST	49895	443	192.168.2.5	104.21.34.180
Sep 10, 2024 18:11:00.737745047 CEST	443	49895	104.21.34.180	192.168.2.5
Sep 10, 2024 18:11:00.737819910 CEST	443	49895	104.21.34.180	192.168.2.5
Sep 10, 2024 18:11:00.737875938 CEST	49895	443	192.168.2.5	104.21.34.180
Sep 10, 2024 18:11:00.742777109 CEST	49895	443	192.168.2.5	104.21.34.180
Sep 10, 2024 18:11:00.742826939 CEST	443	49895	104.21.34.180	192.168.2.5
Sep 10, 2024 18:11:00.751353979 CEST	443	49897	54.77.7.79	192.168.2.5
Sep 10, 2024 18:11:00.760200024 CEST	49897	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:11:00.760243893 CEST	443	49897	54.77.7.79	192.168.2.5
Sep 10, 2024 18:11:00.760576963 CEST	443	49897	54.77.7.79	192.168.2.5
Sep 10, 2024 18:11:00.761338949 CEST	49897	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:11:00.761414051 CEST	443	49897	54.77.7.79	192.168.2.5
Sep 10, 2024 18:11:00.761921883 CEST	49897	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:11:00.802752018 CEST	443	49896	18.239.18.33	192.168.2.5
Sep 10, 2024 18:11:00.803210020 CEST	49896	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:11:00.803276062 CEST	443	49896	18.239.18.33	192.168.2.5
Sep 10, 2024 18:11:00.804434061 CEST	443	49896	18.239.18.33	192.168.2.5
Sep 10, 2024 18:11:00.804990053 CEST	49896	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:11:00.805120945 CEST	49896	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:11:00.805138111 CEST	443	49896	18.239.18.33	192.168.2.5
Sep 10, 2024 18:11:00.805170059 CEST	443	49896	18.239.18.33	192.168.2.5
Sep 10, 2024 18:11:00.807404041 CEST	443	49897	54.77.7.79	192.168.2.5
Sep 10, 2024 18:11:00.856156111 CEST	49896	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:11:01.011574030 CEST	443	49897	54.77.7.79	192.168.2.5
Sep 10, 2024 18:11:01.011743069 CEST	443	49897	54.77.7.79	192.168.2.5
Sep 10, 2024 18:11:01.011806965 CEST	49897	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:11:01.013376951 CEST	49897	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:11:01.013396978 CEST	443	49897	54.77.7.79	192.168.2.5
Sep 10, 2024 18:11:01.068065882 CEST	443	49896	18.239.18.33	192.168.2.5
Sep 10, 2024 18:11:01.068103075 CEST	443	49896	18.239.18.33	192.168.2.5
Sep 10, 2024 18:11:01.068165064 CEST	49896	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:11:01.068180084 CEST	443	49896	18.239.18.33	192.168.2.5
Sep 10, 2024 18:11:01.068234921 CEST	49896	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:11:01.068691969 CEST	49896	443	192.168.2.5	18.239.18.33
Sep 10, 2024 18:11:01.068732977 CEST	443	49896	18.239.18.33	192.168.2.5
Sep 10, 2024 18:11:01.128146887 CEST	49898	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:01.128252983 CEST	443	49898	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:01.128348112 CEST	49898	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:01.128542900 CEST	49898	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:01.128582001 CEST	443	49898	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:01.754775047 CEST	443	49898	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:01.759341955 CEST	49898	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:01.759428978 CEST	443	49898	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:01.760637045 CEST	443	49898	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:01.761152029 CEST	49898	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:01.761344910 CEST	443	49898	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:01.761421919 CEST	49898	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:01.803411961 CEST	443	49898	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:02.084856987 CEST	443	49898	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:02.084888935 CEST	443	49898	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:02.084973097 CEST	49898	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:02.085021019 CEST	443	49898	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:02.085089922 CEST	49898	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:02.093964100 CEST	443	49898	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:02.094104052 CEST	443	49898	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:02.094286919 CEST	49898	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:02.147865057 CEST	49898	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:02.147906065 CEST	443	49898	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:02.166877031 CEST	49899	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:02.166924953 CEST	443	49899	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:02.167001963 CEST	49899	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:02.170792103 CEST	49899	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:02.170811892 CEST	443	49899	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:02.171080112 CEST	49900	443	192.168.2.5	142.250.185.194
Sep 10, 2024 18:11:02.171111107 CEST	443	49900	142.250.185.194	192.168.2.5
Sep 10, 2024 18:11:02.171165943 CEST	49900	443	192.168.2.5	142.250.185.194
Sep 10, 2024 18:11:02.171849012 CEST	49901	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:02.171855927 CEST	443	49901	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:02.172234058 CEST	49901	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:02.172377110 CEST	49900	443	192.168.2.5	142.250.185.194
Sep 10, 2024 18:11:02.172389030 CEST	443	49900	142.250.185.194	192.168.2.5
Sep 10, 2024 18:11:02.172667027 CEST	49901	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:02.172677994 CEST	443	49901	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:02.176356077 CEST	49903	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:02.176446915 CEST	443	49903	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:02.176563025 CEST	49903	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:02.176578999 CEST	49904	443	192.168.2.5	185.64.190.78
Sep 10, 2024 18:11:02.176629066 CEST	443	49904	185.64.190.78	192.168.2.5
Sep 10, 2024 18:11:02.176687956 CEST	49904	443	192.168.2.5	185.64.190.78
Sep 10, 2024 18:11:02.176795006 CEST	49903	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:02.176831007 CEST	443	49903	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:02.176951885 CEST	49904	443	192.168.2.5	185.64.190.78
Sep 10, 2024 18:11:02.176983118 CEST	443	49904	185.64.190.78	192.168.2.5
Sep 10, 2024 18:11:02.178328037 CEST	49905	443	192.168.2.5	52.46.130.91
Sep 10, 2024 18:11:02.178337097 CEST	443	49905	52.46.130.91	192.168.2.5
Sep 10, 2024 18:11:02.178388119 CEST	49905	443	192.168.2.5	52.46.130.91
Sep 10, 2024 18:11:02.178678036 CEST	49905	443	192.168.2.5	52.46.130.91
Sep 10, 2024 18:11:02.178688049 CEST	443	49905	52.46.130.91	192.168.2.5
Sep 10, 2024 18:11:02.179364920 CEST	49906	443	192.168.2.5	34.36.216.150
Sep 10, 2024 18:11:02.179406881 CEST	443	49906	34.36.216.150	192.168.2.5
Sep 10, 2024 18:11:02.179469109 CEST	49906	443	192.168.2.5	34.36.216.150
Sep 10, 2024 18:11:02.179644108 CEST	49906	443	192.168.2.5	34.36.216.150
Sep 10, 2024 18:11:02.179657936 CEST	443	49906	34.36.216.150	192.168.2.5
Sep 10, 2024 18:11:02.666294098 CEST	443	49905	52.46.130.91	192.168.2.5
Sep 10, 2024 18:11:02.666533947 CEST	49905	443	192.168.2.5	52.46.130.91
Sep 10, 2024 18:11:02.666560888 CEST	443	49905	52.46.130.91	192.168.2.5
Sep 10, 2024 18:11:02.667630911 CEST	443	49905	52.46.130.91	192.168.2.5
Sep 10, 2024 18:11:02.667656898 CEST	443	49906	34.36.216.150	192.168.2.5
Sep 10, 2024 18:11:02.667705059 CEST	49905	443	192.168.2.5	52.46.130.91
Sep 10, 2024 18:11:02.667874098 CEST	49906	443	192.168.2.5	34.36.216.150
Sep 10, 2024 18:11:02.667891979 CEST	443	49906	34.36.216.150	192.168.2.5
Sep 10, 2024 18:11:02.668843985 CEST	49905	443	192.168.2.5	52.46.130.91
Sep 10, 2024 18:11:02.668909073 CEST	443	49905	52.46.130.91	192.168.2.5
Sep 10, 2024 18:11:02.669013023 CEST	49905	443	192.168.2.5	52.46.130.91
Sep 10, 2024 18:11:02.669650078 CEST	443	49906	34.36.216.150	192.168.2.5
Sep 10, 2024 18:11:02.669797897 CEST	49906	443	192.168.2.5	34.36.216.150
Sep 10, 2024 18:11:02.671345949 CEST	49906	443	192.168.2.5	34.36.216.150
Sep 10, 2024 18:11:02.671449900 CEST	443	49906	34.36.216.150	192.168.2.5
Sep 10, 2024 18:11:02.671539068 CEST	49906	443	192.168.2.5	34.36.216.150
Sep 10, 2024 18:11:02.709580898 CEST	49905	443	192.168.2.5	52.46.130.91
Sep 10, 2024 18:11:02.709593058 CEST	443	49905	52.46.130.91	192.168.2.5
Sep 10, 2024 18:11:02.715430975 CEST	443	49906	34.36.216.150	192.168.2.5
Sep 10, 2024 18:11:02.725395918 CEST	49906	443	192.168.2.5	34.36.216.150
Sep 10, 2024 18:11:02.725430965 CEST	443	49906	34.36.216.150	192.168.2.5
Sep 10, 2024 18:11:02.755983114 CEST	49905	443	192.168.2.5	52.46.130.91
Sep 10, 2024 18:11:02.771420956 CEST	49906	443	192.168.2.5	34.36.216.150
Sep 10, 2024 18:11:02.778803110 CEST	443	49906	34.36.216.150	192.168.2.5
Sep 10, 2024 18:11:02.778990984 CEST	443	49906	34.36.216.150	192.168.2.5
Sep 10, 2024 18:11:02.779946089 CEST	443	49904	185.64.190.78	192.168.2.5
Sep 10, 2024 18:11:02.780047894 CEST	49906	443	192.168.2.5	34.36.216.150
Sep 10, 2024 18:11:02.782402992 CEST	443	49905	52.46.130.91	192.168.2.5
Sep 10, 2024 18:11:02.782553911 CEST	443	49905	52.46.130.91	192.168.2.5
Sep 10, 2024 18:11:02.782975912 CEST	49905	443	192.168.2.5	52.46.130.91
Sep 10, 2024 18:11:02.786436081 CEST	49904	443	192.168.2.5	185.64.190.78
Sep 10, 2024 18:11:02.786504030 CEST	443	49904	185.64.190.78	192.168.2.5
Sep 10, 2024 18:11:02.786961079 CEST	49905	443	192.168.2.5	52.46.130.91
Sep 10, 2024 18:11:02.786973953 CEST	443	49905	52.46.130.91	192.168.2.5
Sep 10, 2024 18:11:02.787842035 CEST	49907	443	192.168.2.5	52.46.130.91
Sep 10, 2024 18:11:02.787884951 CEST	443	49907	52.46.130.91	192.168.2.5
Sep 10, 2024 18:11:02.788039923 CEST	49907	443	192.168.2.5	52.46.130.91
Sep 10, 2024 18:11:02.788043976 CEST	49906	443	192.168.2.5	34.36.216.150
Sep 10, 2024 18:11:02.788063049 CEST	443	49906	34.36.216.150	192.168.2.5
Sep 10, 2024 18:11:02.788120985 CEST	443	49904	185.64.190.78	192.168.2.5
Sep 10, 2024 18:11:02.788213968 CEST	49904	443	192.168.2.5	185.64.190.78
Sep 10, 2024 18:11:02.788441896 CEST	49907	443	192.168.2.5	52.46.130.91
Sep 10, 2024 18:11:02.788455963 CEST	443	49907	52.46.130.91	192.168.2.5
Sep 10, 2024 18:11:02.789305925 CEST	49904	443	192.168.2.5	185.64.190.78
Sep 10, 2024 18:11:02.789406061 CEST	443	49904	185.64.190.78	192.168.2.5
Sep 10, 2024 18:11:02.789446115 CEST	49904	443	192.168.2.5	185.64.190.78
Sep 10, 2024 18:11:02.791574955 CEST	49908	443	192.168.2.5	34.36.216.150
Sep 10, 2024 18:11:02.791625977 CEST	443	49908	34.36.216.150	192.168.2.5
Sep 10, 2024 18:11:02.791686058 CEST	49908	443	192.168.2.5	34.36.216.150
Sep 10, 2024 18:11:02.791848898 CEST	49908	443	192.168.2.5	34.36.216.150
Sep 10, 2024 18:11:02.791871071 CEST	443	49908	34.36.216.150	192.168.2.5
Sep 10, 2024 18:11:02.803574085 CEST	443	49899	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:02.803826094 CEST	49899	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:02.803855896 CEST	443	49899	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:02.804977894 CEST	443	49899	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:02.805504084 CEST	49899	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:02.805608988 CEST	49899	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:02.805615902 CEST	443	49899	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:02.805672884 CEST	443	49899	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:02.822186947 CEST	443	49900	142.250.185.194	192.168.2.5
Sep 10, 2024 18:11:02.822362900 CEST	49900	443	192.168.2.5	142.250.185.194
Sep 10, 2024 18:11:02.822374105 CEST	443	49900	142.250.185.194	192.168.2.5
Sep 10, 2024 18:11:02.823852062 CEST	443	49900	142.250.185.194	192.168.2.5
Sep 10, 2024 18:11:02.823918104 CEST	49900	443	192.168.2.5	142.250.185.194
Sep 10, 2024 18:11:02.824273109 CEST	49900	443	192.168.2.5	142.250.185.194
Sep 10, 2024 18:11:02.824271917 CEST	443	49903	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:02.824353933 CEST	443	49900	142.250.185.194	192.168.2.5
Sep 10, 2024 18:11:02.824395895 CEST	49900	443	192.168.2.5	142.250.185.194
Sep 10, 2024 18:11:02.824640989 CEST	49903	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:02.824671984 CEST	443	49903	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:02.825872898 CEST	443	49903	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:02.825937986 CEST	49903	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:02.826867104 CEST	49903	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:02.826931953 CEST	443	49903	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:02.827034950 CEST	49903	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:02.827044010 CEST	443	49903	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:02.829720974 CEST	49904	443	192.168.2.5	185.64.190.78
Sep 10, 2024 18:11:02.829783916 CEST	443	49904	185.64.190.78	192.168.2.5
Sep 10, 2024 18:11:02.845159054 CEST	49899	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:02.867409945 CEST	443	49900	142.250.185.194	192.168.2.5
Sep 10, 2024 18:11:02.876120090 CEST	49900	443	192.168.2.5	142.250.185.194
Sep 10, 2024 18:11:02.876127005 CEST	443	49900	142.250.185.194	192.168.2.5
Sep 10, 2024 18:11:02.876169920 CEST	49904	443	192.168.2.5	185.64.190.78
Sep 10, 2024 18:11:02.876236916 CEST	49903	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:02.922468901 CEST	49900	443	192.168.2.5	142.250.185.194
Sep 10, 2024 18:11:03.007618904 CEST	443	49904	185.64.190.78	192.168.2.5
Sep 10, 2024 18:11:03.008102894 CEST	443	49904	185.64.190.78	192.168.2.5
Sep 10, 2024 18:11:03.008179903 CEST	49904	443	192.168.2.5	185.64.190.78
Sep 10, 2024 18:11:03.008227110 CEST	49904	443	192.168.2.5	185.64.190.78
Sep 10, 2024 18:11:03.008249998 CEST	443	49904	185.64.190.78	192.168.2.5
Sep 10, 2024 18:11:03.008264065 CEST	49904	443	192.168.2.5	185.64.190.78
Sep 10, 2024 18:11:03.008297920 CEST	49904	443	192.168.2.5	185.64.190.78
Sep 10, 2024 18:11:03.010567904 CEST	49909	443	192.168.2.5	185.64.190.78
Sep 10, 2024 18:11:03.010613918 CEST	443	49909	185.64.190.78	192.168.2.5
Sep 10, 2024 18:11:03.010679007 CEST	49909	443	192.168.2.5	185.64.190.78
Sep 10, 2024 18:11:03.011040926 CEST	49909	443	192.168.2.5	185.64.190.78
Sep 10, 2024 18:11:03.011056900 CEST	443	49909	185.64.190.78	192.168.2.5
Sep 10, 2024 18:11:03.089829922 CEST	443	49903	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:03.089940071 CEST	443	49903	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:03.090116978 CEST	49903	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:03.090512991 CEST	49903	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:03.090567112 CEST	443	49903	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:03.090598106 CEST	49903	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:03.090630054 CEST	49903	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:03.096417904 CEST	49910	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:03.096460104 CEST	443	49910	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:03.096570015 CEST	49910	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:03.096827984 CEST	49910	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:03.096841097 CEST	443	49910	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:03.099176884 CEST	443	49901	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:03.099378109 CEST	49901	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:03.099391937 CEST	443	49901	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:03.100835085 CEST	443	49901	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:03.100894928 CEST	49901	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:03.101814985 CEST	49901	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:03.102020025 CEST	49901	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:03.102054119 CEST	443	49901	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:03.108103991 CEST	443	49900	142.250.185.194	192.168.2.5
Sep 10, 2024 18:11:03.108663082 CEST	443	49900	142.250.185.194	192.168.2.5
Sep 10, 2024 18:11:03.108788967 CEST	49900	443	192.168.2.5	142.250.185.194
Sep 10, 2024 18:11:03.110589027 CEST	49900	443	192.168.2.5	142.250.185.194
Sep 10, 2024 18:11:03.110599041 CEST	443	49900	142.250.185.194	192.168.2.5
Sep 10, 2024 18:11:03.133493900 CEST	443	49899	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:03.133663893 CEST	443	49899	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:03.133769989 CEST	49899	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:03.136178970 CEST	49899	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:03.136202097 CEST	443	49899	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:03.136214972 CEST	49899	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:03.136249065 CEST	49899	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:03.154390097 CEST	49901	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:03.154397964 CEST	443	49901	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:03.170049906 CEST	49912	443	192.168.2.5	3.120.50.134
Sep 10, 2024 18:11:03.170156956 CEST	443	49912	3.120.50.134	192.168.2.5
Sep 10, 2024 18:11:03.170232058 CEST	49912	443	192.168.2.5	3.120.50.134
Sep 10, 2024 18:11:03.171263933 CEST	49912	443	192.168.2.5	3.120.50.134
Sep 10, 2024 18:11:03.171304941 CEST	443	49912	3.120.50.134	192.168.2.5
Sep 10, 2024 18:11:03.199934006 CEST	49901	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:03.257872105 CEST	443	49908	34.36.216.150	192.168.2.5
Sep 10, 2024 18:11:03.258104086 CEST	49908	443	192.168.2.5	34.36.216.150
Sep 10, 2024 18:11:03.258141041 CEST	443	49908	34.36.216.150	192.168.2.5
Sep 10, 2024 18:11:03.259341955 CEST	443	49908	34.36.216.150	192.168.2.5
Sep 10, 2024 18:11:03.259700060 CEST	49908	443	192.168.2.5	34.36.216.150
Sep 10, 2024 18:11:03.259823084 CEST	49908	443	192.168.2.5	34.36.216.150
Sep 10, 2024 18:11:03.259833097 CEST	443	49908	34.36.216.150	192.168.2.5
Sep 10, 2024 18:11:03.259880066 CEST	443	49908	34.36.216.150	192.168.2.5
Sep 10, 2024 18:11:03.288285971 CEST	443	49901	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:03.288355112 CEST	443	49901	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:03.288465023 CEST	49901	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:03.288891077 CEST	49901	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:03.288902044 CEST	443	49901	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:03.291106939 CEST	49914	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:11:03.291141033 CEST	443	49914	3.212.66.47	192.168.2.5
Sep 10, 2024 18:11:03.291548967 CEST	49914	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:11:03.291588068 CEST	443	49907	52.46.130.91	192.168.2.5
Sep 10, 2024 18:11:03.292453051 CEST	49914	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:11:03.292469025 CEST	443	49914	3.212.66.47	192.168.2.5
Sep 10, 2024 18:11:03.292802095 CEST	49907	443	192.168.2.5	52.46.130.91
Sep 10, 2024 18:11:03.292821884 CEST	443	49907	52.46.130.91	192.168.2.5
Sep 10, 2024 18:11:03.293313026 CEST	443	49907	52.46.130.91	192.168.2.5
Sep 10, 2024 18:11:03.294083118 CEST	49907	443	192.168.2.5	52.46.130.91
Sep 10, 2024 18:11:03.294162035 CEST	443	49907	52.46.130.91	192.168.2.5
Sep 10, 2024 18:11:03.295061111 CEST	49907	443	192.168.2.5	52.46.130.91
Sep 10, 2024 18:11:03.298258066 CEST	49915	443	192.168.2.5	216.46.185.182
Sep 10, 2024 18:11:03.298291922 CEST	443	49915	216.46.185.182	192.168.2.5
Sep 10, 2024 18:11:03.298358917 CEST	49915	443	192.168.2.5	216.46.185.182
Sep 10, 2024 18:11:03.298723936 CEST	49915	443	192.168.2.5	216.46.185.182
Sep 10, 2024 18:11:03.298743963 CEST	443	49915	216.46.185.182	192.168.2.5
Sep 10, 2024 18:11:03.302911997 CEST	49917	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:03.302922964 CEST	443	49917	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:03.302983999 CEST	49917	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:03.303128004 CEST	49917	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:03.303143978 CEST	443	49917	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:03.310628891 CEST	49908	443	192.168.2.5	34.36.216.150
Sep 10, 2024 18:11:03.335422039 CEST	443	49907	52.46.130.91	192.168.2.5
Sep 10, 2024 18:11:03.369400024 CEST	443	49908	34.36.216.150	192.168.2.5
Sep 10, 2024 18:11:03.369653940 CEST	443	49908	34.36.216.150	192.168.2.5
Sep 10, 2024 18:11:03.369743109 CEST	49908	443	192.168.2.5	34.36.216.150
Sep 10, 2024 18:11:03.370388031 CEST	49908	443	192.168.2.5	34.36.216.150
Sep 10, 2024 18:11:03.370388031 CEST	49908	443	192.168.2.5	34.36.216.150
Sep 10, 2024 18:11:03.370414019 CEST	443	49908	34.36.216.150	192.168.2.5
Sep 10, 2024 18:11:03.370476961 CEST	49908	443	192.168.2.5	34.36.216.150
Sep 10, 2024 18:11:03.379477978 CEST	49918	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:03.379504919 CEST	443	49918	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:03.379566908 CEST	49918	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:03.379756927 CEST	49918	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:03.379770041 CEST	443	49918	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:03.432286024 CEST	443	49907	52.46.130.91	192.168.2.5
Sep 10, 2024 18:11:03.432442904 CEST	443	49907	52.46.130.91	192.168.2.5
Sep 10, 2024 18:11:03.432581902 CEST	49907	443	192.168.2.5	52.46.130.91
Sep 10, 2024 18:11:03.438591957 CEST	49907	443	192.168.2.5	52.46.130.91
Sep 10, 2024 18:11:03.438613892 CEST	443	49907	52.46.130.91	192.168.2.5
Sep 10, 2024 18:11:03.449081898 CEST	49919	443	192.168.2.5	142.250.185.194
Sep 10, 2024 18:11:03.449126005 CEST	443	49919	142.250.185.194	192.168.2.5
Sep 10, 2024 18:11:03.450746059 CEST	49919	443	192.168.2.5	142.250.185.194
Sep 10, 2024 18:11:03.451657057 CEST	49919	443	192.168.2.5	142.250.185.194
Sep 10, 2024 18:11:03.451673985 CEST	443	49919	142.250.185.194	192.168.2.5
Sep 10, 2024 18:11:03.459317923 CEST	49920	443	192.168.2.5	52.46.151.131
Sep 10, 2024 18:11:03.459327936 CEST	443	49920	52.46.151.131	192.168.2.5
Sep 10, 2024 18:11:03.459448099 CEST	49920	443	192.168.2.5	52.46.151.131
Sep 10, 2024 18:11:03.459616899 CEST	49920	443	192.168.2.5	52.46.151.131
Sep 10, 2024 18:11:03.459630966 CEST	443	49920	52.46.151.131	192.168.2.5
Sep 10, 2024 18:11:03.607820034 CEST	443	49909	185.64.190.78	192.168.2.5
Sep 10, 2024 18:11:03.608136892 CEST	49909	443	192.168.2.5	185.64.190.78
Sep 10, 2024 18:11:03.608161926 CEST	443	49909	185.64.190.78	192.168.2.5
Sep 10, 2024 18:11:03.608623028 CEST	443	49909	185.64.190.78	192.168.2.5
Sep 10, 2024 18:11:03.609137058 CEST	49909	443	192.168.2.5	185.64.190.78
Sep 10, 2024 18:11:03.609261036 CEST	49909	443	192.168.2.5	185.64.190.78
Sep 10, 2024 18:11:03.609260082 CEST	443	49909	185.64.190.78	192.168.2.5
Sep 10, 2024 18:11:03.651664972 CEST	49909	443	192.168.2.5	185.64.190.78
Sep 10, 2024 18:11:03.651694059 CEST	443	49909	185.64.190.78	192.168.2.5
Sep 10, 2024 18:11:03.730072975 CEST	443	49910	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:03.730303049 CEST	49910	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:03.730329037 CEST	443	49910	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:03.731550932 CEST	443	49910	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:03.731898069 CEST	49910	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:03.732109070 CEST	443	49910	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:03.732831955 CEST	49910	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:03.765568018 CEST	443	49914	3.212.66.47	192.168.2.5
Sep 10, 2024 18:11:03.765762091 CEST	49914	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:11:03.765790939 CEST	443	49914	3.212.66.47	192.168.2.5
Sep 10, 2024 18:11:03.766112089 CEST	443	49914	3.212.66.47	192.168.2.5
Sep 10, 2024 18:11:03.766381025 CEST	49914	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:11:03.766438961 CEST	443	49914	3.212.66.47	192.168.2.5
Sep 10, 2024 18:11:03.766489029 CEST	49914	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:11:03.775424957 CEST	443	49910	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:03.807425022 CEST	443	49914	3.212.66.47	192.168.2.5
Sep 10, 2024 18:11:03.842488050 CEST	443	49909	185.64.190.78	192.168.2.5
Sep 10, 2024 18:11:03.842621088 CEST	443	49909	185.64.190.78	192.168.2.5
Sep 10, 2024 18:11:03.842721939 CEST	49909	443	192.168.2.5	185.64.190.78
Sep 10, 2024 18:11:03.843085051 CEST	49909	443	192.168.2.5	185.64.190.78
Sep 10, 2024 18:11:03.843106031 CEST	443	49909	185.64.190.78	192.168.2.5
Sep 10, 2024 18:11:03.843137980 CEST	49909	443	192.168.2.5	185.64.190.78
Sep 10, 2024 18:11:03.843157053 CEST	49909	443	192.168.2.5	185.64.190.78
Sep 10, 2024 18:11:03.844563961 CEST	49921	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:03.844661951 CEST	443	49921	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:03.844744921 CEST	49921	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:03.844923019 CEST	49921	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:03.844961882 CEST	443	49921	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:03.884804010 CEST	443	49914	3.212.66.47	192.168.2.5
Sep 10, 2024 18:11:03.884952068 CEST	443	49914	3.212.66.47	192.168.2.5
Sep 10, 2024 18:11:03.885265112 CEST	49914	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:11:03.885610104 CEST	49914	443	192.168.2.5	3.212.66.47
Sep 10, 2024 18:11:03.885621071 CEST	443	49914	3.212.66.47	192.168.2.5
Sep 10, 2024 18:11:03.895029068 CEST	49922	443	192.168.2.5	81.17.55.173
Sep 10, 2024 18:11:03.895050049 CEST	443	49922	81.17.55.173	192.168.2.5
Sep 10, 2024 18:11:03.895153999 CEST	49922	443	192.168.2.5	81.17.55.173
Sep 10, 2024 18:11:03.895308971 CEST	49922	443	192.168.2.5	81.17.55.173
Sep 10, 2024 18:11:03.895318985 CEST	443	49922	81.17.55.173	192.168.2.5
Sep 10, 2024 18:11:03.898622990 CEST	49923	443	192.168.2.5	3.221.1.219
Sep 10, 2024 18:11:03.898677111 CEST	443	49923	3.221.1.219	192.168.2.5
Sep 10, 2024 18:11:03.898747921 CEST	49923	443	192.168.2.5	3.221.1.219
Sep 10, 2024 18:11:03.898926973 CEST	49923	443	192.168.2.5	3.221.1.219
Sep 10, 2024 18:11:03.898947001 CEST	443	49923	3.221.1.219	192.168.2.5
Sep 10, 2024 18:11:03.929645061 CEST	443	49917	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:03.929831982 CEST	49917	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:03.929853916 CEST	443	49917	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:03.931478024 CEST	443	49917	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:03.931545019 CEST	49917	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:03.931787968 CEST	49917	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:03.931869030 CEST	443	49917	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:03.931891918 CEST	49917	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:03.939958096 CEST	443	49920	52.46.151.131	192.168.2.5
Sep 10, 2024 18:11:03.940135002 CEST	49920	443	192.168.2.5	52.46.151.131
Sep 10, 2024 18:11:03.940150023 CEST	443	49920	52.46.151.131	192.168.2.5
Sep 10, 2024 18:11:03.941570997 CEST	443	49920	52.46.151.131	192.168.2.5
Sep 10, 2024 18:11:03.941631079 CEST	49920	443	192.168.2.5	52.46.151.131
Sep 10, 2024 18:11:03.941878080 CEST	49920	443	192.168.2.5	52.46.151.131
Sep 10, 2024 18:11:03.941967010 CEST	443	49920	52.46.151.131	192.168.2.5
Sep 10, 2024 18:11:03.941978931 CEST	49920	443	192.168.2.5	52.46.151.131
Sep 10, 2024 18:11:03.965042114 CEST	49924	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:03.965091944 CEST	443	49924	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:03.965172052 CEST	49924	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:03.965331078 CEST	49924	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:03.965346098 CEST	443	49924	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:03.979403973 CEST	443	49917	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:03.979958057 CEST	49917	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:03.979976892 CEST	443	49917	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:03.980618954 CEST	443	49915	216.46.185.182	192.168.2.5
Sep 10, 2024 18:11:03.980798960 CEST	49915	443	192.168.2.5	216.46.185.182
Sep 10, 2024 18:11:03.980808973 CEST	443	49915	216.46.185.182	192.168.2.5
Sep 10, 2024 18:11:03.982278109 CEST	443	49915	216.46.185.182	192.168.2.5
Sep 10, 2024 18:11:03.982355118 CEST	49915	443	192.168.2.5	216.46.185.182
Sep 10, 2024 18:11:03.983346939 CEST	49915	443	192.168.2.5	216.46.185.182
Sep 10, 2024 18:11:03.983494997 CEST	443	49915	216.46.185.182	192.168.2.5
Sep 10, 2024 18:11:03.983516932 CEST	49915	443	192.168.2.5	216.46.185.182
Sep 10, 2024 18:11:03.987399101 CEST	443	49920	52.46.151.131	192.168.2.5
Sep 10, 2024 18:11:03.995477915 CEST	49920	443	192.168.2.5	52.46.151.131
Sep 10, 2024 18:11:03.995485067 CEST	443	49920	52.46.151.131	192.168.2.5
Sep 10, 2024 18:11:04.000313044 CEST	443	49910	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:04.000387907 CEST	443	49910	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:04.000633001 CEST	49910	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:04.001028061 CEST	49910	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:04.001035929 CEST	443	49910	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:04.002542973 CEST	49925	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:04.002640009 CEST	443	49925	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:04.002729893 CEST	49925	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:04.002907038 CEST	49925	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:04.002945900 CEST	443	49925	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:04.025760889 CEST	49917	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:04.025860071 CEST	49915	443	192.168.2.5	216.46.185.182
Sep 10, 2024 18:11:04.025866985 CEST	443	49915	216.46.185.182	192.168.2.5
Sep 10, 2024 18:11:04.041328907 CEST	49920	443	192.168.2.5	52.46.151.131
Sep 10, 2024 18:11:04.069946051 CEST	443	49920	52.46.151.131	192.168.2.5
Sep 10, 2024 18:11:04.070015907 CEST	443	49920	52.46.151.131	192.168.2.5
Sep 10, 2024 18:11:04.070086956 CEST	49920	443	192.168.2.5	52.46.151.131
Sep 10, 2024 18:11:04.070888042 CEST	49920	443	192.168.2.5	52.46.151.131
Sep 10, 2024 18:11:04.070905924 CEST	443	49920	52.46.151.131	192.168.2.5
Sep 10, 2024 18:11:04.072238922 CEST	49915	443	192.168.2.5	216.46.185.182
Sep 10, 2024 18:11:04.099001884 CEST	443	49919	142.250.185.194	192.168.2.5
Sep 10, 2024 18:11:04.099209070 CEST	49919	443	192.168.2.5	142.250.185.194
Sep 10, 2024 18:11:04.099220037 CEST	443	49919	142.250.185.194	192.168.2.5
Sep 10, 2024 18:11:04.100375891 CEST	443	49919	142.250.185.194	192.168.2.5
Sep 10, 2024 18:11:04.100663900 CEST	49919	443	192.168.2.5	142.250.185.194
Sep 10, 2024 18:11:04.100769997 CEST	49919	443	192.168.2.5	142.250.185.194
Sep 10, 2024 18:11:04.100775957 CEST	443	49919	142.250.185.194	192.168.2.5
Sep 10, 2024 18:11:04.100835085 CEST	443	49919	142.250.185.194	192.168.2.5
Sep 10, 2024 18:11:04.116419077 CEST	443	49912	3.120.50.134	192.168.2.5
Sep 10, 2024 18:11:04.116647959 CEST	49912	443	192.168.2.5	3.120.50.134
Sep 10, 2024 18:11:04.116688013 CEST	443	49912	3.120.50.134	192.168.2.5
Sep 10, 2024 18:11:04.118159056 CEST	443	49912	3.120.50.134	192.168.2.5
Sep 10, 2024 18:11:04.118237019 CEST	49912	443	192.168.2.5	3.120.50.134
Sep 10, 2024 18:11:04.119227886 CEST	49912	443	192.168.2.5	3.120.50.134
Sep 10, 2024 18:11:04.119327068 CEST	443	49912	3.120.50.134	192.168.2.5
Sep 10, 2024 18:11:04.119596004 CEST	49912	443	192.168.2.5	3.120.50.134
Sep 10, 2024 18:11:04.119613886 CEST	443	49912	3.120.50.134	192.168.2.5
Sep 10, 2024 18:11:04.122289896 CEST	443	49915	216.46.185.182	192.168.2.5
Sep 10, 2024 18:11:04.122373104 CEST	443	49915	216.46.185.182	192.168.2.5
Sep 10, 2024 18:11:04.122493029 CEST	49915	443	192.168.2.5	216.46.185.182
Sep 10, 2024 18:11:04.122889996 CEST	49915	443	192.168.2.5	216.46.185.182
Sep 10, 2024 18:11:04.122901917 CEST	443	49915	216.46.185.182	192.168.2.5
Sep 10, 2024 18:11:04.146651983 CEST	49919	443	192.168.2.5	142.250.185.194
Sep 10, 2024 18:11:04.147254944 CEST	49926	443	192.168.2.5	64.58.232.177
Sep 10, 2024 18:11:04.147300005 CEST	443	49926	64.58.232.177	192.168.2.5
Sep 10, 2024 18:11:04.147443056 CEST	49926	443	192.168.2.5	64.58.232.177
Sep 10, 2024 18:11:04.148931980 CEST	49926	443	192.168.2.5	64.58.232.177
Sep 10, 2024 18:11:04.148958921 CEST	443	49926	64.58.232.177	192.168.2.5
Sep 10, 2024 18:11:04.162997007 CEST	49912	443	192.168.2.5	3.120.50.134
Sep 10, 2024 18:11:04.197717905 CEST	443	49917	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:04.197813988 CEST	443	49917	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:04.197884083 CEST	49917	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:04.198362112 CEST	49917	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:04.198373079 CEST	443	49917	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:04.275741100 CEST	443	49918	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:04.276169062 CEST	49918	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:04.276185989 CEST	443	49918	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:04.279759884 CEST	443	49918	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:04.279866934 CEST	49918	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:04.280699015 CEST	49918	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:04.280869961 CEST	49918	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:04.280872107 CEST	443	49918	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:04.306828976 CEST	443	49912	3.120.50.134	192.168.2.5
Sep 10, 2024 18:11:04.307012081 CEST	443	49912	3.120.50.134	192.168.2.5
Sep 10, 2024 18:11:04.307128906 CEST	49912	443	192.168.2.5	3.120.50.134
Sep 10, 2024 18:11:04.307271004 CEST	49912	443	192.168.2.5	3.120.50.134
Sep 10, 2024 18:11:04.307271004 CEST	49912	443	192.168.2.5	3.120.50.134
Sep 10, 2024 18:11:04.307317972 CEST	443	49912	3.120.50.134	192.168.2.5
Sep 10, 2024 18:11:04.307470083 CEST	49912	443	192.168.2.5	3.120.50.134
Sep 10, 2024 18:11:04.316495895 CEST	49927	443	192.168.2.5	3.120.50.134
Sep 10, 2024 18:11:04.316543102 CEST	443	49927	3.120.50.134	192.168.2.5
Sep 10, 2024 18:11:04.316627026 CEST	49927	443	192.168.2.5	3.120.50.134
Sep 10, 2024 18:11:04.316875935 CEST	49927	443	192.168.2.5	3.120.50.134
Sep 10, 2024 18:11:04.316901922 CEST	443	49927	3.120.50.134	192.168.2.5
Sep 10, 2024 18:11:04.327431917 CEST	443	49918	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:04.333106995 CEST	49918	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:04.333127022 CEST	443	49918	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:04.379873037 CEST	49918	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:04.381450891 CEST	443	49919	142.250.185.194	192.168.2.5
Sep 10, 2024 18:11:04.381643057 CEST	443	49919	142.250.185.194	192.168.2.5
Sep 10, 2024 18:11:04.381750107 CEST	49919	443	192.168.2.5	142.250.185.194
Sep 10, 2024 18:11:04.382158995 CEST	49919	443	192.168.2.5	142.250.185.194
Sep 10, 2024 18:11:04.382175922 CEST	443	49919	142.250.185.194	192.168.2.5
Sep 10, 2024 18:11:04.384668112 CEST	49928	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:04.384691954 CEST	443	49928	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:04.384850979 CEST	49928	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:04.385057926 CEST	49928	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:04.385076046 CEST	443	49928	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:04.461206913 CEST	443	49918	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:04.461447001 CEST	443	49918	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:04.461505890 CEST	49918	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:04.462189913 CEST	49918	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:04.462219000 CEST	443	49918	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:04.468060017 CEST	49930	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:04.468159914 CEST	443	49930	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:04.468241930 CEST	49930	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:04.468493938 CEST	49930	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:04.468535900 CEST	443	49930	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:04.490179062 CEST	49931	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:04.490216970 CEST	443	49931	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:04.490315914 CEST	49931	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:04.490799904 CEST	49931	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:04.490817070 CEST	443	49931	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:04.512485027 CEST	443	49922	81.17.55.173	192.168.2.5
Sep 10, 2024 18:11:04.512705088 CEST	49922	443	192.168.2.5	81.17.55.173
Sep 10, 2024 18:11:04.512717962 CEST	443	49922	81.17.55.173	192.168.2.5
Sep 10, 2024 18:11:04.514233112 CEST	443	49922	81.17.55.173	192.168.2.5
Sep 10, 2024 18:11:04.514323950 CEST	49922	443	192.168.2.5	81.17.55.173
Sep 10, 2024 18:11:04.515258074 CEST	49922	443	192.168.2.5	81.17.55.173
Sep 10, 2024 18:11:04.515336990 CEST	443	49922	81.17.55.173	192.168.2.5
Sep 10, 2024 18:11:04.515454054 CEST	49922	443	192.168.2.5	81.17.55.173
Sep 10, 2024 18:11:04.515461922 CEST	443	49922	81.17.55.173	192.168.2.5
Sep 10, 2024 18:11:04.565318108 CEST	49922	443	192.168.2.5	81.17.55.173
Sep 10, 2024 18:11:04.577078104 CEST	443	49925	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:04.577302933 CEST	49925	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:04.577363968 CEST	443	49925	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:04.577760935 CEST	443	49925	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:04.578047037 CEST	49925	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:04.578125000 CEST	443	49925	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:04.578149080 CEST	49925	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:04.594971895 CEST	443	49923	3.221.1.219	192.168.2.5
Sep 10, 2024 18:11:04.595249891 CEST	49923	443	192.168.2.5	3.221.1.219
Sep 10, 2024 18:11:04.595273972 CEST	443	49923	3.221.1.219	192.168.2.5
Sep 10, 2024 18:11:04.598783016 CEST	443	49923	3.221.1.219	192.168.2.5
Sep 10, 2024 18:11:04.598879099 CEST	49923	443	192.168.2.5	3.221.1.219
Sep 10, 2024 18:11:04.599140882 CEST	49923	443	192.168.2.5	3.221.1.219
Sep 10, 2024 18:11:04.599276066 CEST	49923	443	192.168.2.5	3.221.1.219
Sep 10, 2024 18:11:04.599287033 CEST	443	49923	3.221.1.219	192.168.2.5
Sep 10, 2024 18:11:04.599319935 CEST	443	49923	3.221.1.219	192.168.2.5
Sep 10, 2024 18:11:04.619445086 CEST	443	49925	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:04.627434015 CEST	49925	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:04.642874956 CEST	49923	443	192.168.2.5	3.221.1.219
Sep 10, 2024 18:11:04.642889977 CEST	443	49923	3.221.1.219	192.168.2.5
Sep 10, 2024 18:11:04.679528952 CEST	443	49925	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:04.679601908 CEST	443	49925	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:04.679657936 CEST	49925	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:04.680100918 CEST	49925	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:04.680144072 CEST	443	49925	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:04.681848049 CEST	49932	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:04.681885004 CEST	443	49932	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:04.682101965 CEST	49932	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:04.682261944 CEST	49932	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:04.682275057 CEST	443	49932	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:04.689729929 CEST	49923	443	192.168.2.5	3.221.1.219
Sep 10, 2024 18:11:04.711357117 CEST	443	49923	3.221.1.219	192.168.2.5
Sep 10, 2024 18:11:04.711541891 CEST	443	49923	3.221.1.219	192.168.2.5
Sep 10, 2024 18:11:04.711615086 CEST	49923	443	192.168.2.5	3.221.1.219
Sep 10, 2024 18:11:04.712584019 CEST	49923	443	192.168.2.5	3.221.1.219
Sep 10, 2024 18:11:04.712600946 CEST	443	49923	3.221.1.219	192.168.2.5
Sep 10, 2024 18:11:04.742952108 CEST	443	49921	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:04.743180037 CEST	49921	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:04.743242025 CEST	443	49921	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:04.744389057 CEST	443	49921	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:04.744467974 CEST	49921	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:04.744792938 CEST	49921	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:04.744904041 CEST	49921	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:04.744920969 CEST	443	49921	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:04.750715971 CEST	443	49922	81.17.55.173	192.168.2.5
Sep 10, 2024 18:11:04.750785112 CEST	443	49922	81.17.55.173	192.168.2.5
Sep 10, 2024 18:11:04.750978947 CEST	49922	443	192.168.2.5	81.17.55.173
Sep 10, 2024 18:11:04.751938105 CEST	49922	443	192.168.2.5	81.17.55.173
Sep 10, 2024 18:11:04.751961946 CEST	443	49922	81.17.55.173	192.168.2.5
Sep 10, 2024 18:11:04.751966953 CEST	49922	443	192.168.2.5	81.17.55.173
Sep 10, 2024 18:11:04.752062082 CEST	49922	443	192.168.2.5	81.17.55.173
Sep 10, 2024 18:11:04.752737045 CEST	49933	443	192.168.2.5	81.17.55.173
Sep 10, 2024 18:11:04.752788067 CEST	443	49933	81.17.55.173	192.168.2.5
Sep 10, 2024 18:11:04.752847910 CEST	49933	443	192.168.2.5	81.17.55.173
Sep 10, 2024 18:11:04.753032923 CEST	49933	443	192.168.2.5	81.17.55.173
Sep 10, 2024 18:11:04.753053904 CEST	443	49933	81.17.55.173	192.168.2.5
Sep 10, 2024 18:11:04.787403107 CEST	443	49921	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:04.797686100 CEST	49921	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:04.797749996 CEST	443	49921	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:04.844237089 CEST	49921	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:04.879070044 CEST	443	49924	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:04.879328012 CEST	49924	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:04.879345894 CEST	443	49924	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:04.882941008 CEST	443	49924	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:04.883054018 CEST	49924	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:04.883330107 CEST	49924	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:04.883491993 CEST	49924	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:04.883503914 CEST	443	49924	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:04.883558989 CEST	443	49924	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:04.904624939 CEST	443	49926	64.58.232.177	192.168.2.5
Sep 10, 2024 18:11:04.905139923 CEST	49926	443	192.168.2.5	64.58.232.177
Sep 10, 2024 18:11:04.905174017 CEST	443	49926	64.58.232.177	192.168.2.5
Sep 10, 2024 18:11:04.906653881 CEST	443	49926	64.58.232.177	192.168.2.5
Sep 10, 2024 18:11:04.906721115 CEST	49926	443	192.168.2.5	64.58.232.177
Sep 10, 2024 18:11:04.907614946 CEST	49926	443	192.168.2.5	64.58.232.177
Sep 10, 2024 18:11:04.907707930 CEST	443	49926	64.58.232.177	192.168.2.5
Sep 10, 2024 18:11:04.907802105 CEST	49926	443	192.168.2.5	64.58.232.177
Sep 10, 2024 18:11:04.935018063 CEST	443	49921	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:04.935098886 CEST	443	49921	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:04.935415983 CEST	49921	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:04.936943054 CEST	49921	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:04.936989069 CEST	443	49921	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:04.937556028 CEST	49924	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:04.937580109 CEST	443	49924	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:04.938240051 CEST	443	49930	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:04.938858986 CEST	49930	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:04.938920975 CEST	443	49930	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:04.940108061 CEST	443	49930	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:04.940440893 CEST	49930	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:04.940692902 CEST	443	49930	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:04.941334963 CEST	49930	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:04.944010019 CEST	49934	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:04.944056988 CEST	443	49934	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:04.944113016 CEST	49934	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:04.944288969 CEST	49934	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:04.944303036 CEST	443	49934	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:04.949919939 CEST	443	49928	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:04.950109959 CEST	49928	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:04.950141907 CEST	443	49928	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:04.950488091 CEST	443	49928	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:04.951024055 CEST	49928	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:04.951091051 CEST	443	49928	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:04.951129913 CEST	49928	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:04.951838017 CEST	49935	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:04.951869011 CEST	443	49935	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:04.951997042 CEST	49935	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:04.952150106 CEST	49935	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:04.952164888 CEST	443	49935	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:04.953475952 CEST	49926	443	192.168.2.5	64.58.232.177
Sep 10, 2024 18:11:04.953496933 CEST	443	49926	64.58.232.177	192.168.2.5
Sep 10, 2024 18:11:04.983418941 CEST	443	49930	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:04.984222889 CEST	49924	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:04.991483927 CEST	443	49928	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:04.999694109 CEST	49928	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:04.999695063 CEST	49926	443	192.168.2.5	64.58.232.177
Sep 10, 2024 18:11:05.051057100 CEST	443	49928	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:05.051125050 CEST	443	49928	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:05.051196098 CEST	49928	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:05.051456928 CEST	49928	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:05.051471949 CEST	443	49928	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:05.051484108 CEST	49928	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:05.051654100 CEST	49928	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:05.053211927 CEST	49936	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:05.053306103 CEST	443	49936	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:05.053406954 CEST	49936	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:05.053577900 CEST	49936	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:05.053618908 CEST	443	49936	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:05.070888996 CEST	443	49926	64.58.232.177	192.168.2.5
Sep 10, 2024 18:11:05.071605921 CEST	443	49926	64.58.232.177	192.168.2.5
Sep 10, 2024 18:11:05.071666956 CEST	49926	443	192.168.2.5	64.58.232.177
Sep 10, 2024 18:11:05.071839094 CEST	49926	443	192.168.2.5	64.58.232.177
Sep 10, 2024 18:11:05.071861029 CEST	443	49926	64.58.232.177	192.168.2.5
Sep 10, 2024 18:11:05.080003977 CEST	443	49930	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:05.080214977 CEST	443	49930	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:05.080298901 CEST	49930	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:05.081274033 CEST	49930	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:05.081315994 CEST	443	49930	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:05.083904028 CEST	49937	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:05.083925009 CEST	443	49937	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:05.083998919 CEST	49937	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:05.084177017 CEST	49937	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:05.084188938 CEST	443	49937	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:05.085136890 CEST	49938	443	192.168.2.5	104.17.111.254
Sep 10, 2024 18:11:05.085167885 CEST	443	49938	104.17.111.254	192.168.2.5
Sep 10, 2024 18:11:05.085221052 CEST	49938	443	192.168.2.5	104.17.111.254
Sep 10, 2024 18:11:05.085479975 CEST	49938	443	192.168.2.5	104.17.111.254
Sep 10, 2024 18:11:05.085493088 CEST	443	49938	104.17.111.254	192.168.2.5
Sep 10, 2024 18:11:05.086935043 CEST	49939	443	192.168.2.5	69.169.86.39
Sep 10, 2024 18:11:05.086971998 CEST	443	49939	69.169.86.39	192.168.2.5
Sep 10, 2024 18:11:05.087096930 CEST	49939	443	192.168.2.5	69.169.86.39
Sep 10, 2024 18:11:05.087404966 CEST	49939	443	192.168.2.5	69.169.86.39
Sep 10, 2024 18:11:05.087416887 CEST	443	49939	69.169.86.39	192.168.2.5
Sep 10, 2024 18:11:05.090003014 CEST	49940	443	192.168.2.5	52.71.88.198
Sep 10, 2024 18:11:05.090044022 CEST	443	49940	52.71.88.198	192.168.2.5
Sep 10, 2024 18:11:05.090104103 CEST	49940	443	192.168.2.5	52.71.88.198
Sep 10, 2024 18:11:05.090281010 CEST	49940	443	192.168.2.5	52.71.88.198
Sep 10, 2024 18:11:05.090293884 CEST	443	49940	52.71.88.198	192.168.2.5
Sep 10, 2024 18:11:05.135631084 CEST	443	49927	3.120.50.134	192.168.2.5
Sep 10, 2024 18:11:05.147236109 CEST	49927	443	192.168.2.5	3.120.50.134
Sep 10, 2024 18:11:05.147260904 CEST	443	49927	3.120.50.134	192.168.2.5
Sep 10, 2024 18:11:05.150830030 CEST	443	49927	3.120.50.134	192.168.2.5
Sep 10, 2024 18:11:05.150927067 CEST	49927	443	192.168.2.5	3.120.50.134
Sep 10, 2024 18:11:05.151815891 CEST	49927	443	192.168.2.5	3.120.50.134
Sep 10, 2024 18:11:05.151972055 CEST	49927	443	192.168.2.5	3.120.50.134
Sep 10, 2024 18:11:05.151985884 CEST	443	49927	3.120.50.134	192.168.2.5
Sep 10, 2024 18:11:05.152007103 CEST	443	49927	3.120.50.134	192.168.2.5
Sep 10, 2024 18:11:05.199644089 CEST	443	49924	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:05.199733019 CEST	443	49924	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:05.200222015 CEST	49924	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:05.200222015 CEST	49924	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:05.201729059 CEST	49927	443	192.168.2.5	3.120.50.134
Sep 10, 2024 18:11:05.201745987 CEST	443	49927	3.120.50.134	192.168.2.5
Sep 10, 2024 18:11:05.205718040 CEST	49941	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:05.205755949 CEST	443	49941	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:05.205816984 CEST	49941	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:05.206011057 CEST	49941	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:05.206027031 CEST	443	49941	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:05.212331057 CEST	49942	443	192.168.2.5	34.254.143.3
Sep 10, 2024 18:11:05.212362051 CEST	443	49942	34.254.143.3	192.168.2.5
Sep 10, 2024 18:11:05.212426901 CEST	49942	443	192.168.2.5	34.254.143.3
Sep 10, 2024 18:11:05.212575912 CEST	49942	443	192.168.2.5	34.254.143.3
Sep 10, 2024 18:11:05.212587118 CEST	443	49942	34.254.143.3	192.168.2.5
Sep 10, 2024 18:11:05.247730970 CEST	49927	443	192.168.2.5	3.120.50.134
Sep 10, 2024 18:11:05.305663109 CEST	443	49932	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:05.306107044 CEST	49932	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:05.306140900 CEST	443	49932	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:05.306596994 CEST	443	49932	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:05.307063103 CEST	49932	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:05.307152987 CEST	443	49932	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:05.307188988 CEST	49932	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:05.346455097 CEST	443	49927	3.120.50.134	192.168.2.5
Sep 10, 2024 18:11:05.346645117 CEST	443	49927	3.120.50.134	192.168.2.5
Sep 10, 2024 18:11:05.346771955 CEST	49927	443	192.168.2.5	3.120.50.134
Sep 10, 2024 18:11:05.347016096 CEST	49927	443	192.168.2.5	3.120.50.134
Sep 10, 2024 18:11:05.347038984 CEST	443	49927	3.120.50.134	192.168.2.5
Sep 10, 2024 18:11:05.347049952 CEST	49927	443	192.168.2.5	3.120.50.134
Sep 10, 2024 18:11:05.347151041 CEST	49927	443	192.168.2.5	3.120.50.134
Sep 10, 2024 18:11:05.350099087 CEST	49943	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:05.350132942 CEST	443	49943	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:05.350218058 CEST	49943	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:05.350481987 CEST	49943	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:05.350495100 CEST	443	49943	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:05.351402044 CEST	443	49932	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:05.356486082 CEST	49932	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:05.362317085 CEST	443	49933	81.17.55.173	192.168.2.5
Sep 10, 2024 18:11:05.362673044 CEST	49933	443	192.168.2.5	81.17.55.173
Sep 10, 2024 18:11:05.362735987 CEST	443	49933	81.17.55.173	192.168.2.5
Sep 10, 2024 18:11:05.363208055 CEST	443	49933	81.17.55.173	192.168.2.5
Sep 10, 2024 18:11:05.363711119 CEST	49933	443	192.168.2.5	81.17.55.173
Sep 10, 2024 18:11:05.363799095 CEST	443	49933	81.17.55.173	192.168.2.5
Sep 10, 2024 18:11:05.363821030 CEST	49933	443	192.168.2.5	81.17.55.173
Sep 10, 2024 18:11:05.393210888 CEST	443	49931	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:05.393385887 CEST	49931	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:05.393407106 CEST	443	49931	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:05.394351006 CEST	443	49931	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:05.394411087 CEST	49931	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:05.394819975 CEST	49931	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:05.394881010 CEST	443	49931	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:05.394918919 CEST	49931	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:05.407423973 CEST	443	49933	81.17.55.173	192.168.2.5
Sep 10, 2024 18:11:05.407504082 CEST	49933	443	192.168.2.5	81.17.55.173
Sep 10, 2024 18:11:05.423352957 CEST	443	49935	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:05.424043894 CEST	49935	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:05.424053907 CEST	443	49935	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:05.425690889 CEST	443	49935	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:05.425816059 CEST	49935	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:05.427678108 CEST	49935	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:05.427761078 CEST	443	49935	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:05.428370953 CEST	49935	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:05.428379059 CEST	443	49935	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:05.434619904 CEST	49931	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:05.434627056 CEST	443	49931	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:05.477833033 CEST	49931	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:05.477833033 CEST	49935	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:05.514561892 CEST	49924	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:05.514591932 CEST	443	49924	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:05.546747923 CEST	443	49935	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:05.546885014 CEST	443	49935	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:05.546987057 CEST	49935	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:05.552299023 CEST	49935	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:05.552323103 CEST	443	49935	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:05.554651976 CEST	49944	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:05.554689884 CEST	443	49944	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:05.554733038 CEST	443	49937	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:05.554780006 CEST	49944	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:05.554991007 CEST	49937	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:05.555012941 CEST	443	49937	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:05.555416107 CEST	49944	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:05.555425882 CEST	443	49944	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:05.556663036 CEST	443	49937	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:05.557184935 CEST	49937	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:05.557323933 CEST	49937	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:05.557374001 CEST	443	49937	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:05.569572926 CEST	443	49938	104.17.111.254	192.168.2.5
Sep 10, 2024 18:11:05.570302963 CEST	49938	443	192.168.2.5	104.17.111.254
Sep 10, 2024 18:11:05.570357084 CEST	443	49938	104.17.111.254	192.168.2.5
Sep 10, 2024 18:11:05.572093010 CEST	443	49938	104.17.111.254	192.168.2.5
Sep 10, 2024 18:11:05.572155952 CEST	49938	443	192.168.2.5	104.17.111.254
Sep 10, 2024 18:11:05.574534893 CEST	49938	443	192.168.2.5	104.17.111.254
Sep 10, 2024 18:11:05.574621916 CEST	443	49938	104.17.111.254	192.168.2.5
Sep 10, 2024 18:11:05.574728012 CEST	49938	443	192.168.2.5	104.17.111.254
Sep 10, 2024 18:11:05.576905012 CEST	443	49932	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:05.577115059 CEST	443	49932	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:05.577178001 CEST	49932	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:05.579998970 CEST	443	49931	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:05.580085039 CEST	443	49931	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:05.580333948 CEST	49931	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:05.580785990 CEST	49932	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:05.580800056 CEST	443	49932	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:05.584191084 CEST	49931	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:05.584208965 CEST	443	49931	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:05.592855930 CEST	49945	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:11:05.592889071 CEST	443	49945	185.89.210.244	192.168.2.5
Sep 10, 2024 18:11:05.592947006 CEST	49945	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:11:05.593218088 CEST	49945	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:11:05.593238115 CEST	443	49945	185.89.210.244	192.168.2.5
Sep 10, 2024 18:11:05.605138063 CEST	49937	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:05.615427971 CEST	443	49938	104.17.111.254	192.168.2.5
Sep 10, 2024 18:11:05.615809917 CEST	443	49933	81.17.55.173	192.168.2.5
Sep 10, 2024 18:11:05.615869045 CEST	443	49933	81.17.55.173	192.168.2.5
Sep 10, 2024 18:11:05.616120100 CEST	49933	443	192.168.2.5	81.17.55.173
Sep 10, 2024 18:11:05.616683960 CEST	49933	443	192.168.2.5	81.17.55.173
Sep 10, 2024 18:11:05.616725922 CEST	443	49933	81.17.55.173	192.168.2.5
Sep 10, 2024 18:11:05.618741989 CEST	49938	443	192.168.2.5	104.17.111.254
Sep 10, 2024 18:11:05.618761063 CEST	443	49938	104.17.111.254	192.168.2.5
Sep 10, 2024 18:11:05.635895014 CEST	49947	443	192.168.2.5	81.17.55.116
Sep 10, 2024 18:11:05.635927916 CEST	443	49947	81.17.55.116	192.168.2.5
Sep 10, 2024 18:11:05.635991096 CEST	49947	443	192.168.2.5	81.17.55.116
Sep 10, 2024 18:11:05.636152029 CEST	49947	443	192.168.2.5	81.17.55.116
Sep 10, 2024 18:11:05.636163950 CEST	443	49947	81.17.55.116	192.168.2.5
Sep 10, 2024 18:11:05.670037985 CEST	49938	443	192.168.2.5	104.17.111.254
Sep 10, 2024 18:11:05.686817884 CEST	443	49936	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:05.687488079 CEST	49936	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:05.687555075 CEST	443	49936	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:05.687932968 CEST	443	49936	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:05.688291073 CEST	49936	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:05.688369989 CEST	443	49936	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:05.688443899 CEST	49936	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:05.694525003 CEST	443	49937	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:05.694614887 CEST	443	49937	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:05.694856882 CEST	49937	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:05.694870949 CEST	443	49940	52.71.88.198	192.168.2.5
Sep 10, 2024 18:11:05.695312023 CEST	49940	443	192.168.2.5	52.71.88.198
Sep 10, 2024 18:11:05.695336103 CEST	443	49940	52.71.88.198	192.168.2.5
Sep 10, 2024 18:11:05.695440054 CEST	49937	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:05.695455074 CEST	443	49937	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:05.696897984 CEST	443	49940	52.71.88.198	192.168.2.5
Sep 10, 2024 18:11:05.696975946 CEST	49940	443	192.168.2.5	52.71.88.198
Sep 10, 2024 18:11:05.697881937 CEST	49940	443	192.168.2.5	52.71.88.198
Sep 10, 2024 18:11:05.697968960 CEST	443	49940	52.71.88.198	192.168.2.5
Sep 10, 2024 18:11:05.698018074 CEST	49940	443	192.168.2.5	52.71.88.198
Sep 10, 2024 18:11:05.713890076 CEST	443	49938	104.17.111.254	192.168.2.5
Sep 10, 2024 18:11:05.714075089 CEST	443	49938	104.17.111.254	192.168.2.5
Sep 10, 2024 18:11:05.714163065 CEST	49938	443	192.168.2.5	104.17.111.254
Sep 10, 2024 18:11:05.714840889 CEST	49938	443	192.168.2.5	104.17.111.254
Sep 10, 2024 18:11:05.714854002 CEST	443	49938	104.17.111.254	192.168.2.5
Sep 10, 2024 18:11:05.714870930 CEST	49938	443	192.168.2.5	104.17.111.254
Sep 10, 2024 18:11:05.714901924 CEST	49938	443	192.168.2.5	104.17.111.254
Sep 10, 2024 18:11:05.715600967 CEST	49948	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:05.715615988 CEST	443	49948	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:05.715728998 CEST	49948	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:05.715948105 CEST	49948	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:05.715956926 CEST	443	49948	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:05.731426001 CEST	443	49936	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:05.739451885 CEST	443	49940	52.71.88.198	192.168.2.5
Sep 10, 2024 18:11:05.747524023 CEST	49940	443	192.168.2.5	52.71.88.198
Sep 10, 2024 18:11:05.747533083 CEST	443	49940	52.71.88.198	192.168.2.5
Sep 10, 2024 18:11:05.762172937 CEST	443	49939	69.169.86.39	192.168.2.5
Sep 10, 2024 18:11:05.762439013 CEST	49939	443	192.168.2.5	69.169.86.39
Sep 10, 2024 18:11:05.762455940 CEST	443	49939	69.169.86.39	192.168.2.5
Sep 10, 2024 18:11:05.763900995 CEST	443	49939	69.169.86.39	192.168.2.5
Sep 10, 2024 18:11:05.763979912 CEST	49939	443	192.168.2.5	69.169.86.39
Sep 10, 2024 18:11:05.765791893 CEST	49939	443	192.168.2.5	69.169.86.39
Sep 10, 2024 18:11:05.765873909 CEST	443	49939	69.169.86.39	192.168.2.5
Sep 10, 2024 18:11:05.766143084 CEST	49939	443	192.168.2.5	69.169.86.39
Sep 10, 2024 18:11:05.766150951 CEST	443	49939	69.169.86.39	192.168.2.5
Sep 10, 2024 18:11:05.794289112 CEST	49940	443	192.168.2.5	52.71.88.198
Sep 10, 2024 18:11:05.805143118 CEST	443	49940	52.71.88.198	192.168.2.5
Sep 10, 2024 18:11:05.805315971 CEST	443	49940	52.71.88.198	192.168.2.5
Sep 10, 2024 18:11:05.805484056 CEST	49940	443	192.168.2.5	52.71.88.198
Sep 10, 2024 18:11:05.806633949 CEST	49940	443	192.168.2.5	52.71.88.198
Sep 10, 2024 18:11:05.806665897 CEST	443	49940	52.71.88.198	192.168.2.5
Sep 10, 2024 18:11:05.809576035 CEST	49949	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:05.809621096 CEST	443	49949	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:05.809730053 CEST	49949	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:05.809770107 CEST	49939	443	192.168.2.5	69.169.86.39
Sep 10, 2024 18:11:05.810075045 CEST	49949	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:05.810101032 CEST	443	49949	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:05.829227924 CEST	443	49934	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:05.829801083 CEST	49934	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:05.829828024 CEST	443	49934	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:05.833408117 CEST	443	49934	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:05.833513021 CEST	49934	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:05.833837986 CEST	49934	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:05.834007978 CEST	443	49934	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:05.834105015 CEST	49934	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:05.834119081 CEST	443	49934	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:05.870151997 CEST	443	49939	69.169.86.39	192.168.2.5
Sep 10, 2024 18:11:05.870232105 CEST	443	49939	69.169.86.39	192.168.2.5
Sep 10, 2024 18:11:05.870313883 CEST	49939	443	192.168.2.5	69.169.86.39
Sep 10, 2024 18:11:05.871795893 CEST	49939	443	192.168.2.5	69.169.86.39
Sep 10, 2024 18:11:05.871818066 CEST	443	49939	69.169.86.39	192.168.2.5
Sep 10, 2024 18:11:05.875235081 CEST	49934	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:05.954668999 CEST	443	49936	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:05.954776049 CEST	443	49936	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:05.954839945 CEST	49936	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:05.955471992 CEST	49936	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:05.955513000 CEST	443	49936	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:05.959789991 CEST	49950	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:05.959831953 CEST	443	49950	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:05.959940910 CEST	49950	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:05.960144997 CEST	49950	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:05.960155010 CEST	443	49950	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:05.967380047 CEST	49951	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:11:05.967403889 CEST	443	49951	46.228.164.13	192.168.2.5
Sep 10, 2024 18:11:05.967477083 CEST	49951	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:11:05.967778921 CEST	49951	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:11:05.967797041 CEST	443	49951	46.228.164.13	192.168.2.5
Sep 10, 2024 18:11:05.982234955 CEST	443	49943	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:05.982474089 CEST	49943	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:05.982492924 CEST	443	49943	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:05.983620882 CEST	443	49943	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:05.984019995 CEST	49943	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:05.984173059 CEST	49943	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:05.984179020 CEST	443	49943	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:05.984193087 CEST	443	49943	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:06.017379045 CEST	443	49942	34.254.143.3	192.168.2.5
Sep 10, 2024 18:11:06.017613888 CEST	49942	443	192.168.2.5	34.254.143.3
Sep 10, 2024 18:11:06.017627954 CEST	443	49942	34.254.143.3	192.168.2.5
Sep 10, 2024 18:11:06.018486023 CEST	443	49942	34.254.143.3	192.168.2.5
Sep 10, 2024 18:11:06.018640041 CEST	49942	443	192.168.2.5	34.254.143.3
Sep 10, 2024 18:11:06.019706011 CEST	49942	443	192.168.2.5	34.254.143.3
Sep 10, 2024 18:11:06.019764900 CEST	443	49942	34.254.143.3	192.168.2.5
Sep 10, 2024 18:11:06.019876957 CEST	49942	443	192.168.2.5	34.254.143.3
Sep 10, 2024 18:11:06.019886971 CEST	443	49942	34.254.143.3	192.168.2.5
Sep 10, 2024 18:11:06.022545099 CEST	443	49934	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:06.022720098 CEST	443	49934	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:06.022779942 CEST	49934	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:06.023370028 CEST	49934	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:06.023381948 CEST	443	49934	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:06.033595085 CEST	49943	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:06.035176992 CEST	443	49944	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:06.035378933 CEST	49944	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:06.035397053 CEST	443	49944	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:06.036526918 CEST	443	49944	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:06.036843061 CEST	49944	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:06.036948919 CEST	49944	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:06.036953926 CEST	443	49944	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:06.037012100 CEST	443	49944	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:06.064624071 CEST	49942	443	192.168.2.5	34.254.143.3
Sep 10, 2024 18:11:06.076407909 CEST	443	49941	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:06.076765060 CEST	49941	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:06.076776028 CEST	443	49941	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:06.078232050 CEST	443	49941	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:06.078541040 CEST	49941	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:06.078541040 CEST	49941	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:06.078634977 CEST	443	49941	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:06.078684092 CEST	49941	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:06.080194950 CEST	49944	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:06.119422913 CEST	443	49941	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:06.126946926 CEST	49941	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:06.126965046 CEST	443	49941	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:06.160798073 CEST	443	49944	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:06.161009073 CEST	443	49944	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:06.161216974 CEST	49944	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:06.161721945 CEST	49944	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:06.161741972 CEST	443	49944	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:06.163656950 CEST	49952	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:06.163678885 CEST	443	49952	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:06.163791895 CEST	49952	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:06.163997889 CEST	49952	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:06.164004087 CEST	443	49952	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:06.171411037 CEST	49941	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:06.196461916 CEST	443	49945	185.89.210.244	192.168.2.5
Sep 10, 2024 18:11:06.196702003 CEST	49945	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:11:06.196729898 CEST	443	49945	185.89.210.244	192.168.2.5
Sep 10, 2024 18:11:06.200243950 CEST	443	49945	185.89.210.244	192.168.2.5
Sep 10, 2024 18:11:06.200314999 CEST	49945	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:11:06.200642109 CEST	49945	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:11:06.200803041 CEST	443	49945	185.89.210.244	192.168.2.5
Sep 10, 2024 18:11:06.201544046 CEST	49945	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:11:06.201554060 CEST	443	49945	185.89.210.244	192.168.2.5
Sep 10, 2024 18:11:06.202836990 CEST	443	49942	34.254.143.3	192.168.2.5
Sep 10, 2024 18:11:06.202965975 CEST	443	49942	34.254.143.3	192.168.2.5
Sep 10, 2024 18:11:06.203042984 CEST	49942	443	192.168.2.5	34.254.143.3
Sep 10, 2024 18:11:06.203857899 CEST	49942	443	192.168.2.5	34.254.143.3
Sep 10, 2024 18:11:06.203874111 CEST	443	49942	34.254.143.3	192.168.2.5
Sep 10, 2024 18:11:06.214190006 CEST	49953	443	192.168.2.5	185.89.210.180
Sep 10, 2024 18:11:06.214219093 CEST	443	49953	185.89.210.180	192.168.2.5
Sep 10, 2024 18:11:06.214467049 CEST	49953	443	192.168.2.5	185.89.210.180
Sep 10, 2024 18:11:06.214590073 CEST	49953	443	192.168.2.5	185.89.210.180
Sep 10, 2024 18:11:06.214598894 CEST	443	49953	185.89.210.180	192.168.2.5
Sep 10, 2024 18:11:06.238495111 CEST	443	49947	81.17.55.116	192.168.2.5
Sep 10, 2024 18:11:06.238708019 CEST	49947	443	192.168.2.5	81.17.55.116
Sep 10, 2024 18:11:06.238718033 CEST	443	49947	81.17.55.116	192.168.2.5
Sep 10, 2024 18:11:06.239603996 CEST	443	49947	81.17.55.116	192.168.2.5
Sep 10, 2024 18:11:06.239660025 CEST	49947	443	192.168.2.5	81.17.55.116
Sep 10, 2024 18:11:06.239969015 CEST	49947	443	192.168.2.5	81.17.55.116
Sep 10, 2024 18:11:06.240020037 CEST	443	49947	81.17.55.116	192.168.2.5
Sep 10, 2024 18:11:06.240094900 CEST	49947	443	192.168.2.5	81.17.55.116
Sep 10, 2024 18:11:06.240102053 CEST	443	49947	81.17.55.116	192.168.2.5
Sep 10, 2024 18:11:06.249294043 CEST	49945	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:11:06.259882927 CEST	443	49941	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:06.260066986 CEST	443	49941	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:06.260667086 CEST	49941	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:06.260667086 CEST	49941	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:06.280419111 CEST	49947	443	192.168.2.5	81.17.55.116
Sep 10, 2024 18:11:06.300611019 CEST	443	49943	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:06.300777912 CEST	443	49943	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:06.300964117 CEST	49943	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:06.301352024 CEST	49943	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:06.301366091 CEST	443	49943	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:06.301374912 CEST	49943	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:06.301417112 CEST	49943	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:06.303349972 CEST	49954	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:06.303394079 CEST	443	49954	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:06.303466082 CEST	49954	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:06.303745985 CEST	49954	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:06.303760052 CEST	443	49954	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:06.332113981 CEST	443	49948	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:06.332437038 CEST	49948	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:06.332451105 CEST	443	49948	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:06.333568096 CEST	443	49948	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:06.333905935 CEST	49948	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:06.334078074 CEST	443	49948	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:06.334112883 CEST	49948	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:06.375441074 CEST	443	49948	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:06.387650013 CEST	49948	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:06.459142923 CEST	443	49949	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:06.459506035 CEST	49949	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:06.459533930 CEST	443	49949	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:06.460674047 CEST	443	49949	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:06.461133003 CEST	49949	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:06.461308002 CEST	443	49949	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:06.461364031 CEST	49949	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:06.491928101 CEST	443	49945	185.89.210.244	192.168.2.5
Sep 10, 2024 18:11:06.492017984 CEST	49945	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:11:06.492037058 CEST	443	49945	185.89.210.244	192.168.2.5
Sep 10, 2024 18:11:06.492099047 CEST	443	49945	185.89.210.244	192.168.2.5
Sep 10, 2024 18:11:06.492381096 CEST	49945	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:11:06.494376898 CEST	49945	443	192.168.2.5	185.89.210.244
Sep 10, 2024 18:11:06.494391918 CEST	443	49945	185.89.210.244	192.168.2.5
Sep 10, 2024 18:11:06.495593071 CEST	49955	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:06.495615959 CEST	443	49955	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:06.495712996 CEST	49955	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:06.496256113 CEST	49955	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:06.496270895 CEST	443	49955	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:06.507395029 CEST	443	49949	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:06.513878107 CEST	49949	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:06.564587116 CEST	49941	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:06.564615965 CEST	443	49941	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:06.587327003 CEST	443	49950	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:06.588268042 CEST	49950	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:06.588290930 CEST	443	49950	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:06.588624001 CEST	443	49950	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:06.589180946 CEST	49950	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:06.589248896 CEST	443	49950	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:06.589376926 CEST	49950	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:06.594676018 CEST	443	49951	46.228.164.13	192.168.2.5
Sep 10, 2024 18:11:06.594969034 CEST	49951	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:11:06.594983101 CEST	443	49951	46.228.164.13	192.168.2.5
Sep 10, 2024 18:11:06.596398115 CEST	443	49951	46.228.164.13	192.168.2.5
Sep 10, 2024 18:11:06.596523046 CEST	49951	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:11:06.597621918 CEST	49951	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:11:06.597696066 CEST	443	49951	46.228.164.13	192.168.2.5
Sep 10, 2024 18:11:06.598032951 CEST	49951	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:11:06.598041058 CEST	443	49951	46.228.164.13	192.168.2.5
Sep 10, 2024 18:11:06.609744072 CEST	443	49948	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:06.609946966 CEST	443	49948	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:06.610017061 CEST	49948	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:06.610781908 CEST	49948	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:06.610799074 CEST	443	49948	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:06.616530895 CEST	49956	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:06.616579056 CEST	443	49956	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:06.616693974 CEST	49956	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:06.616986990 CEST	49956	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:06.617001057 CEST	443	49956	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:06.623843908 CEST	49957	443	192.168.2.5	54.170.228.31
Sep 10, 2024 18:11:06.623878002 CEST	443	49957	54.170.228.31	192.168.2.5
Sep 10, 2024 18:11:06.624106884 CEST	49957	443	192.168.2.5	54.170.228.31
Sep 10, 2024 18:11:06.624290943 CEST	49957	443	192.168.2.5	54.170.228.31
Sep 10, 2024 18:11:06.624319077 CEST	443	49957	54.170.228.31	192.168.2.5
Sep 10, 2024 18:11:06.635401011 CEST	443	49950	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:06.644205093 CEST	49951	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:11:06.753582954 CEST	443	49947	81.17.55.116	192.168.2.5
Sep 10, 2024 18:11:06.753686905 CEST	443	49947	81.17.55.116	192.168.2.5
Sep 10, 2024 18:11:06.753779888 CEST	443	49949	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:06.753850937 CEST	49947	443	192.168.2.5	81.17.55.116
Sep 10, 2024 18:11:06.753962040 CEST	443	49949	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:06.754019022 CEST	49949	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:06.755109072 CEST	49947	443	192.168.2.5	81.17.55.116
Sep 10, 2024 18:11:06.755125999 CEST	443	49947	81.17.55.116	192.168.2.5
Sep 10, 2024 18:11:06.756025076 CEST	49949	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:06.756046057 CEST	443	49949	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:06.762928963 CEST	49959	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:06.762974977 CEST	443	49959	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:06.763073921 CEST	49959	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:06.765419960 CEST	49959	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:06.765443087 CEST	443	49959	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:06.777461052 CEST	443	49952	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:06.777868986 CEST	49952	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:06.777893066 CEST	443	49952	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:06.778992891 CEST	443	49952	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:06.779570103 CEST	49952	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:06.779762983 CEST	443	49952	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:06.779841900 CEST	49952	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:06.781889915 CEST	443	49954	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:06.782167912 CEST	49954	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:06.782198906 CEST	443	49954	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:06.782886982 CEST	443	49954	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:06.783184052 CEST	49954	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:06.783284903 CEST	443	49954	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:06.783449888 CEST	49954	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:06.823406935 CEST	443	49952	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:06.831407070 CEST	443	49954	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:06.860795975 CEST	443	49950	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:06.860881090 CEST	443	49950	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:06.860943079 CEST	49950	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:06.862571001 CEST	49950	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:06.862596035 CEST	443	49950	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:06.863951921 CEST	443	49951	46.228.164.13	192.168.2.5
Sep 10, 2024 18:11:06.864002943 CEST	443	49951	46.228.164.13	192.168.2.5
Sep 10, 2024 18:11:06.864228010 CEST	49951	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:11:06.864950895 CEST	49951	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:11:06.864969015 CEST	443	49951	46.228.164.13	192.168.2.5
Sep 10, 2024 18:11:06.864996910 CEST	49951	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:11:06.865011930 CEST	49951	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:11:06.866568089 CEST	49960	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:06.866663933 CEST	443	49960	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:06.866770983 CEST	49960	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:06.867067099 CEST	49960	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:06.867105007 CEST	443	49960	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:06.922302961 CEST	443	49954	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:06.922518015 CEST	443	49954	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:06.922590971 CEST	49954	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:06.923839092 CEST	49954	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:06.923877954 CEST	443	49954	34.117.77.79	192.168.2.5
Sep 10, 2024 18:11:06.923891068 CEST	49954	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:06.923943043 CEST	49954	443	192.168.2.5	34.117.77.79
Sep 10, 2024 18:11:06.924848080 CEST	49961	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:06.924870968 CEST	443	49961	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:06.924971104 CEST	49961	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:06.925291061 CEST	49961	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:06.925308943 CEST	443	49961	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:06.929105043 CEST	443	49952	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:06.929176092 CEST	443	49952	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:06.929229975 CEST	49952	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:06.929733038 CEST	49952	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:06.929747105 CEST	443	49952	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:06.931265116 CEST	49962	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:06.931314945 CEST	443	49962	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:06.931376934 CEST	49962	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:06.931634903 CEST	49962	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:06.931653023 CEST	443	49962	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:07.002134085 CEST	443	49953	185.89.210.180	192.168.2.5
Sep 10, 2024 18:11:07.002507925 CEST	49953	443	192.168.2.5	185.89.210.180
Sep 10, 2024 18:11:07.002526999 CEST	443	49953	185.89.210.180	192.168.2.5
Sep 10, 2024 18:11:07.006246090 CEST	443	49953	185.89.210.180	192.168.2.5
Sep 10, 2024 18:11:07.006335974 CEST	49953	443	192.168.2.5	185.89.210.180
Sep 10, 2024 18:11:07.007627964 CEST	49953	443	192.168.2.5	185.89.210.180
Sep 10, 2024 18:11:07.007800102 CEST	443	49953	185.89.210.180	192.168.2.5
Sep 10, 2024 18:11:07.007926941 CEST	49953	443	192.168.2.5	185.89.210.180
Sep 10, 2024 18:11:07.007941008 CEST	443	49953	185.89.210.180	192.168.2.5
Sep 10, 2024 18:11:07.051454067 CEST	49953	443	192.168.2.5	185.89.210.180
Sep 10, 2024 18:11:07.128209114 CEST	443	49955	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:07.128578901 CEST	49955	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:07.128642082 CEST	443	49955	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:07.129760981 CEST	443	49955	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:07.130170107 CEST	49955	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:07.130345106 CEST	49955	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:07.130359888 CEST	443	49955	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:07.130386114 CEST	443	49955	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:07.174653053 CEST	49955	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:07.181694031 CEST	443	49953	185.89.210.180	192.168.2.5
Sep 10, 2024 18:11:07.181771040 CEST	49953	443	192.168.2.5	185.89.210.180
Sep 10, 2024 18:11:07.181790113 CEST	443	49953	185.89.210.180	192.168.2.5
Sep 10, 2024 18:11:07.181845903 CEST	443	49953	185.89.210.180	192.168.2.5
Sep 10, 2024 18:11:07.181901932 CEST	49953	443	192.168.2.5	185.89.210.180
Sep 10, 2024 18:11:07.184135914 CEST	49953	443	192.168.2.5	185.89.210.180
Sep 10, 2024 18:11:07.184159040 CEST	443	49953	185.89.210.180	192.168.2.5
Sep 10, 2024 18:11:07.188689947 CEST	49963	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:07.188785076 CEST	443	49963	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:07.188888073 CEST	49963	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:07.189483881 CEST	49963	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:07.189522982 CEST	443	49963	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:07.249095917 CEST	443	49956	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:07.249612093 CEST	49956	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:07.249650955 CEST	443	49956	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:07.250760078 CEST	443	49956	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:07.251125097 CEST	49956	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:07.251295090 CEST	443	49956	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:07.251327038 CEST	49956	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:07.268527985 CEST	443	49957	54.170.228.31	192.168.2.5
Sep 10, 2024 18:11:07.269156933 CEST	49957	443	192.168.2.5	54.170.228.31
Sep 10, 2024 18:11:07.269179106 CEST	443	49957	54.170.228.31	192.168.2.5
Sep 10, 2024 18:11:07.271218061 CEST	443	49957	54.170.228.31	192.168.2.5
Sep 10, 2024 18:11:07.271287918 CEST	49957	443	192.168.2.5	54.170.228.31
Sep 10, 2024 18:11:07.272715092 CEST	49957	443	192.168.2.5	54.170.228.31
Sep 10, 2024 18:11:07.272808075 CEST	443	49957	54.170.228.31	192.168.2.5
Sep 10, 2024 18:11:07.272994995 CEST	49957	443	192.168.2.5	54.170.228.31
Sep 10, 2024 18:11:07.273011923 CEST	443	49957	54.170.228.31	192.168.2.5
Sep 10, 2024 18:11:07.295407057 CEST	443	49956	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:07.305368900 CEST	49956	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:07.321135044 CEST	49957	443	192.168.2.5	54.170.228.31
Sep 10, 2024 18:11:07.397996902 CEST	443	49959	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:07.398344040 CEST	49959	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:07.398360014 CEST	443	49959	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:07.398871899 CEST	443	49959	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:07.399291039 CEST	49959	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:07.399378061 CEST	443	49959	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:07.399616957 CEST	49959	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:07.400029898 CEST	443	49955	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:07.400226116 CEST	443	49955	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:07.400549889 CEST	49955	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:07.401088953 CEST	49955	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:07.401113987 CEST	443	49955	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:07.402981043 CEST	49964	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:11:07.403018951 CEST	443	49964	46.228.164.13	192.168.2.5
Sep 10, 2024 18:11:07.403080940 CEST	49964	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:11:07.403507948 CEST	49964	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:11:07.403523922 CEST	443	49964	46.228.164.13	192.168.2.5
Sep 10, 2024 18:11:07.403711081 CEST	443	49962	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:07.403918028 CEST	49962	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:07.403939962 CEST	443	49962	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:07.404449940 CEST	443	49962	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:07.407149076 CEST	49962	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:07.407238007 CEST	443	49962	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:07.407752991 CEST	49962	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:07.447402954 CEST	443	49959	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:07.455405951 CEST	443	49962	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:07.480704069 CEST	443	49960	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:07.481151104 CEST	49960	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:07.481208086 CEST	443	49960	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:07.481599092 CEST	443	49960	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:07.482443094 CEST	49960	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:07.482528925 CEST	443	49960	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:07.482738972 CEST	49960	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:07.516058922 CEST	443	49957	54.170.228.31	192.168.2.5
Sep 10, 2024 18:11:07.516146898 CEST	443	49957	54.170.228.31	192.168.2.5
Sep 10, 2024 18:11:07.516236067 CEST	49957	443	192.168.2.5	54.170.228.31
Sep 10, 2024 18:11:07.518183947 CEST	443	49956	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:07.518279076 CEST	443	49956	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:07.518356085 CEST	49956	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:07.527419090 CEST	443	49960	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:07.533123016 CEST	49957	443	192.168.2.5	54.170.228.31
Sep 10, 2024 18:11:07.533164978 CEST	443	49957	54.170.228.31	192.168.2.5
Sep 10, 2024 18:11:07.534288883 CEST	443	49962	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:07.534466028 CEST	443	49962	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:07.534571886 CEST	49962	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:07.549369097 CEST	49965	443	192.168.2.5	54.170.228.31
Sep 10, 2024 18:11:07.549412966 CEST	443	49965	54.170.228.31	192.168.2.5
Sep 10, 2024 18:11:07.549529076 CEST	49965	443	192.168.2.5	54.170.228.31
Sep 10, 2024 18:11:07.551035881 CEST	49965	443	192.168.2.5	54.170.228.31
Sep 10, 2024 18:11:07.551058054 CEST	443	49965	54.170.228.31	192.168.2.5
Sep 10, 2024 18:11:07.557660103 CEST	49962	443	192.168.2.5	34.111.113.62
Sep 10, 2024 18:11:07.557701111 CEST	443	49962	34.111.113.62	192.168.2.5
Sep 10, 2024 18:11:07.561666012 CEST	443	49961	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:07.564229965 CEST	49961	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:07.564245939 CEST	443	49961	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:07.564742088 CEST	443	49961	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:07.566131115 CEST	49961	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:07.566216946 CEST	443	49961	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:07.566378117 CEST	49961	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:07.568177938 CEST	49956	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:07.568205118 CEST	443	49956	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:07.574366093 CEST	49966	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:07.574428082 CEST	443	49966	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:07.574553013 CEST	49966	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:07.575022936 CEST	49966	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:07.575046062 CEST	443	49966	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:07.607414007 CEST	443	49961	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:07.663790941 CEST	443	49959	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:07.663983107 CEST	443	49959	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:07.664572001 CEST	49959	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:07.679327011 CEST	49967	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:07.679394007 CEST	443	49967	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:07.679475069 CEST	49967	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:07.680166960 CEST	49967	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:07.680191994 CEST	443	49967	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:07.681974888 CEST	49959	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:07.681998968 CEST	443	49959	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:07.741591930 CEST	443	49960	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:07.741688013 CEST	443	49960	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:07.741766930 CEST	49960	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:07.811153889 CEST	443	49963	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:07.818905115 CEST	49963	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:07.818969011 CEST	443	49963	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:07.820213079 CEST	49960	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:07.820255995 CEST	443	49960	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:07.820395947 CEST	443	49963	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:07.821888924 CEST	49963	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:07.822089911 CEST	443	49963	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:07.822788954 CEST	49963	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:07.866455078 CEST	49968	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:07.866504908 CEST	443	49968	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:07.866714001 CEST	49968	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:07.866947889 CEST	49968	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:07.866960049 CEST	443	49968	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:07.867408037 CEST	443	49963	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:07.873330116 CEST	49963	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:07.881197929 CEST	443	49961	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:07.881299019 CEST	443	49961	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:07.881556988 CEST	49961	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:07.881794930 CEST	49961	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:07.881794930 CEST	49961	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:07.881805897 CEST	443	49961	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:07.881850958 CEST	49961	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:07.884519100 CEST	49969	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:07.884553909 CEST	443	49969	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:07.884704113 CEST	49969	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:07.885164976 CEST	49969	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:07.885178089 CEST	443	49969	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:08.032092094 CEST	443	49964	46.228.164.13	192.168.2.5
Sep 10, 2024 18:11:08.032757998 CEST	49964	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:11:08.032777071 CEST	443	49964	46.228.164.13	192.168.2.5
Sep 10, 2024 18:11:08.033253908 CEST	443	49964	46.228.164.13	192.168.2.5
Sep 10, 2024 18:11:08.033720970 CEST	49964	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:11:08.033799887 CEST	443	49964	46.228.164.13	192.168.2.5
Sep 10, 2024 18:11:08.034138918 CEST	49964	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:11:08.072185040 CEST	443	49963	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:08.072393894 CEST	443	49963	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:08.072614908 CEST	49963	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:08.073142052 CEST	49963	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:08.073188066 CEST	443	49963	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:08.074243069 CEST	49964	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:11:08.074273109 CEST	443	49964	46.228.164.13	192.168.2.5
Sep 10, 2024 18:11:08.078490973 CEST	49970	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:08.078528881 CEST	443	49970	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:08.078845978 CEST	49970	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:08.079109907 CEST	49970	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:08.079118013 CEST	443	49970	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:08.188052893 CEST	443	49965	54.170.228.31	192.168.2.5
Sep 10, 2024 18:11:08.199448109 CEST	49965	443	192.168.2.5	54.170.228.31
Sep 10, 2024 18:11:08.199480057 CEST	443	49965	54.170.228.31	192.168.2.5
Sep 10, 2024 18:11:08.200196981 CEST	443	49965	54.170.228.31	192.168.2.5
Sep 10, 2024 18:11:08.200577974 CEST	49965	443	192.168.2.5	54.170.228.31
Sep 10, 2024 18:11:08.200757980 CEST	49965	443	192.168.2.5	54.170.228.31
Sep 10, 2024 18:11:08.200773001 CEST	443	49965	54.170.228.31	192.168.2.5
Sep 10, 2024 18:11:08.200835943 CEST	443	49965	54.170.228.31	192.168.2.5
Sep 10, 2024 18:11:08.212178946 CEST	443	49966	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:08.213982105 CEST	49966	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:08.214014053 CEST	443	49966	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:08.215145111 CEST	443	49966	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:08.215712070 CEST	49966	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:08.215712070 CEST	49966	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:08.215730906 CEST	443	49966	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:08.215884924 CEST	443	49966	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:08.243792057 CEST	49965	443	192.168.2.5	54.170.228.31
Sep 10, 2024 18:11:08.259413958 CEST	49966	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:08.300503969 CEST	443	49964	46.228.164.13	192.168.2.5
Sep 10, 2024 18:11:08.300685883 CEST	443	49964	46.228.164.13	192.168.2.5
Sep 10, 2024 18:11:08.300766945 CEST	49964	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:11:08.302103043 CEST	49964	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:11:08.302103043 CEST	49964	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:11:08.302129984 CEST	443	49964	46.228.164.13	192.168.2.5
Sep 10, 2024 18:11:08.302285910 CEST	49964	443	192.168.2.5	46.228.164.13
Sep 10, 2024 18:11:08.302933931 CEST	49971	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:08.302973986 CEST	443	49971	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:08.303066969 CEST	49971	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:08.303313017 CEST	49971	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:08.303328991 CEST	443	49971	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:08.326307058 CEST	443	49967	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:08.326622009 CEST	49967	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:08.326695919 CEST	443	49967	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:08.327581882 CEST	443	49967	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:08.327663898 CEST	49967	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:08.328109980 CEST	49967	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:08.328172922 CEST	443	49967	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:08.328377962 CEST	49967	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:08.328397036 CEST	443	49967	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:08.382914066 CEST	49967	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:08.449673891 CEST	443	49965	54.170.228.31	192.168.2.5
Sep 10, 2024 18:11:08.449865103 CEST	443	49965	54.170.228.31	192.168.2.5
Sep 10, 2024 18:11:08.449991941 CEST	49965	443	192.168.2.5	54.170.228.31
Sep 10, 2024 18:11:08.451376915 CEST	49965	443	192.168.2.5	54.170.228.31
Sep 10, 2024 18:11:08.451404095 CEST	443	49965	54.170.228.31	192.168.2.5
Sep 10, 2024 18:11:08.452394962 CEST	49972	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:08.452419996 CEST	443	49972	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:08.453037024 CEST	49972	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:08.453335047 CEST	49972	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:08.453350067 CEST	443	49972	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:08.479119062 CEST	443	49966	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:08.479346037 CEST	443	49966	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:08.479455948 CEST	49966	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:08.480345011 CEST	49966	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:08.480370998 CEST	443	49966	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:08.486512899 CEST	49973	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:08.486565113 CEST	443	49973	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:08.486748934 CEST	49973	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:08.487020016 CEST	49973	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:08.487034082 CEST	443	49973	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:08.494993925 CEST	443	49968	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:08.495269060 CEST	49968	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:08.495284081 CEST	443	49968	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:08.495626926 CEST	443	49968	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:08.495985031 CEST	49968	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:08.496057034 CEST	443	49968	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:08.496150017 CEST	49968	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:08.525218010 CEST	443	49969	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:08.525645018 CEST	49969	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:08.525681019 CEST	443	49969	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:08.526875019 CEST	443	49969	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:08.527251959 CEST	49969	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:08.527416945 CEST	49969	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:08.527431011 CEST	443	49969	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:08.527494907 CEST	443	49969	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:08.539418936 CEST	443	49968	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:08.544013977 CEST	49968	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:08.576963902 CEST	49969	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:08.592096090 CEST	443	49967	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:08.592170954 CEST	443	49967	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:08.592263937 CEST	49967	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:08.601699114 CEST	49967	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:08.601722956 CEST	443	49967	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:08.606446981 CEST	49974	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:08.606498957 CEST	443	49974	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:08.606755018 CEST	49974	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:08.607119083 CEST	49974	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:08.607134104 CEST	443	49974	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:08.693640947 CEST	443	49970	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:08.694312096 CEST	49970	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:08.694355011 CEST	443	49970	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:08.695528984 CEST	443	49970	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:08.696660042 CEST	49970	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:08.696831942 CEST	443	49970	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:08.697068930 CEST	49970	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:08.739422083 CEST	443	49970	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:08.757029057 CEST	443	49968	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:08.757116079 CEST	443	49968	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:08.757400036 CEST	49968	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:08.768203974 CEST	49968	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:08.768219948 CEST	443	49968	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:08.801460981 CEST	443	49969	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:08.801723003 CEST	443	49969	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:08.801827908 CEST	49969	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:08.802710056 CEST	49969	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:08.802742958 CEST	443	49969	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:08.802768946 CEST	49969	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:08.802813053 CEST	49969	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:08.812335968 CEST	49975	443	192.168.2.5	3.120.46.195
Sep 10, 2024 18:11:08.812385082 CEST	443	49975	3.120.46.195	192.168.2.5
Sep 10, 2024 18:11:08.812551022 CEST	49975	443	192.168.2.5	3.120.46.195
Sep 10, 2024 18:11:08.812810898 CEST	49975	443	192.168.2.5	3.120.46.195
Sep 10, 2024 18:11:08.812824011 CEST	443	49975	3.120.46.195	192.168.2.5
Sep 10, 2024 18:11:08.938343048 CEST	443	49971	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:08.938704014 CEST	49971	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:08.938734055 CEST	443	49971	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:08.939898014 CEST	443	49971	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:08.940403938 CEST	49971	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:08.940577030 CEST	443	49971	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:08.940593004 CEST	49971	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:08.980264902 CEST	443	49970	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:08.980448961 CEST	443	49970	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:08.980525970 CEST	49970	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:08.981370926 CEST	49970	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:08.981389999 CEST	443	49970	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:08.983431101 CEST	443	49971	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:08.984006882 CEST	49971	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:09.069215059 CEST	49976	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:11:09.069396019 CEST	49977	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:11:09.075567961 CEST	80	49976	217.21.73.115	192.168.2.5
Sep 10, 2024 18:11:09.075587034 CEST	80	49977	217.21.73.115	192.168.2.5
Sep 10, 2024 18:11:09.075644016 CEST	49976	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:11:09.075676918 CEST	49977	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:11:09.088350058 CEST	49976	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:11:09.092747927 CEST	443	49972	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:09.093105078 CEST	49972	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:09.093131065 CEST	443	49972	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:09.093230963 CEST	80	49976	217.21.73.115	192.168.2.5
Sep 10, 2024 18:11:09.094233990 CEST	443	49972	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:09.094610929 CEST	49972	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:09.094769955 CEST	49972	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:09.094779015 CEST	443	49972	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:09.119195938 CEST	443	49973	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:09.119507074 CEST	49973	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:09.119529963 CEST	443	49973	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:09.123080015 CEST	443	49973	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:09.123164892 CEST	49973	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:09.123697996 CEST	49973	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:09.123864889 CEST	443	49973	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:09.123915911 CEST	49973	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:09.135401011 CEST	443	49972	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:09.141542912 CEST	49972	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:09.171402931 CEST	443	49973	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:09.172636032 CEST	49973	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:09.172667027 CEST	443	49973	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:09.206554890 CEST	443	49971	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:09.206809044 CEST	443	49971	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:09.206871033 CEST	49971	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:09.207482100 CEST	49971	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:09.207504988 CEST	443	49971	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:09.219121933 CEST	49973	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:09.246316910 CEST	443	49974	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:09.288825035 CEST	49974	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:09.288866043 CEST	443	49974	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:09.289318085 CEST	443	49974	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:09.290766954 CEST	49974	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:09.290863991 CEST	443	49974	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:09.291026115 CEST	49974	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:09.331410885 CEST	443	49974	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:09.356009007 CEST	443	49972	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:09.356107950 CEST	443	49972	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:09.356169939 CEST	49972	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:09.356988907 CEST	49972	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:09.357008934 CEST	443	49972	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:09.362350941 CEST	49979	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:09.362405062 CEST	443	49979	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:09.362504005 CEST	49979	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:09.362802029 CEST	49979	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:09.362817049 CEST	443	49979	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:09.386423111 CEST	443	49973	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:09.386508942 CEST	443	49973	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:09.386615038 CEST	49973	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:09.387409925 CEST	49973	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:09.387434006 CEST	443	49973	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:09.512697935 CEST	443	49974	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:09.512793064 CEST	443	49974	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:09.512892962 CEST	49974	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:09.513724089 CEST	49974	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:09.513748884 CEST	443	49974	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:09.674581051 CEST	443	49975	3.120.46.195	192.168.2.5
Sep 10, 2024 18:11:09.674894094 CEST	49975	443	192.168.2.5	3.120.46.195
Sep 10, 2024 18:11:09.674921989 CEST	443	49975	3.120.46.195	192.168.2.5
Sep 10, 2024 18:11:09.678484917 CEST	443	49975	3.120.46.195	192.168.2.5
Sep 10, 2024 18:11:09.678569078 CEST	49975	443	192.168.2.5	3.120.46.195
Sep 10, 2024 18:11:09.680017948 CEST	49975	443	192.168.2.5	3.120.46.195
Sep 10, 2024 18:11:09.680197954 CEST	443	49975	3.120.46.195	192.168.2.5
Sep 10, 2024 18:11:09.680219889 CEST	49975	443	192.168.2.5	3.120.46.195
Sep 10, 2024 18:11:09.727406979 CEST	443	49975	3.120.46.195	192.168.2.5
Sep 10, 2024 18:11:09.733644009 CEST	49975	443	192.168.2.5	3.120.46.195
Sep 10, 2024 18:11:09.733658075 CEST	443	49975	3.120.46.195	192.168.2.5
Sep 10, 2024 18:11:09.780821085 CEST	49975	443	192.168.2.5	3.120.46.195
Sep 10, 2024 18:11:09.868880033 CEST	443	49975	3.120.46.195	192.168.2.5
Sep 10, 2024 18:11:09.868982077 CEST	443	49975	3.120.46.195	192.168.2.5
Sep 10, 2024 18:11:09.869049072 CEST	49975	443	192.168.2.5	3.120.46.195
Sep 10, 2024 18:11:09.869678020 CEST	49975	443	192.168.2.5	3.120.46.195
Sep 10, 2024 18:11:09.869695902 CEST	443	49975	3.120.46.195	192.168.2.5
Sep 10, 2024 18:11:09.872684956 CEST	49980	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:09.872726917 CEST	443	49980	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:09.872792006 CEST	49980	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:09.873097897 CEST	49980	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:09.873111963 CEST	443	49980	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:10.003117085 CEST	443	49979	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:10.003536940 CEST	49979	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:10.003551960 CEST	443	49979	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:10.005043983 CEST	443	49979	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:10.005810976 CEST	49979	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:10.006226063 CEST	443	49979	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:10.006236076 CEST	49979	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:10.022677898 CEST	49981	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:10.022708893 CEST	443	49981	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:10.022838116 CEST	49981	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:10.023401976 CEST	49981	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:10.023422003 CEST	443	49981	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:10.051393986 CEST	443	49979	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:10.061691999 CEST	49979	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:10.076745987 CEST	80	49976	217.21.73.115	192.168.2.5
Sep 10, 2024 18:11:10.076808929 CEST	80	49976	217.21.73.115	192.168.2.5
Sep 10, 2024 18:11:10.076978922 CEST	49976	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:11:10.238145113 CEST	49976	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:11:10.243592024 CEST	80	49976	217.21.73.115	192.168.2.5
Sep 10, 2024 18:11:10.270792961 CEST	443	49979	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:10.271003008 CEST	443	49979	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:10.271117926 CEST	49979	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:10.299947023 CEST	49979	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:10.299968004 CEST	443	49979	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:10.528670073 CEST	443	49980	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:10.530216932 CEST	49980	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:10.530231953 CEST	443	49980	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:10.530555010 CEST	443	49980	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:10.531063080 CEST	49980	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:10.531116962 CEST	443	49980	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:10.531277895 CEST	49980	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:10.571444988 CEST	443	49980	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:10.577305079 CEST	49980	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:10.585019112 CEST	80	49976	217.21.73.115	192.168.2.5
Sep 10, 2024 18:11:10.585037947 CEST	80	49976	217.21.73.115	192.168.2.5
Sep 10, 2024 18:11:10.585110903 CEST	49976	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:11:10.665369987 CEST	443	49981	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:10.665848017 CEST	49981	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:10.665868998 CEST	443	49981	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:10.666323900 CEST	443	49981	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:10.666815996 CEST	49981	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:10.666912079 CEST	443	49981	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:10.667186022 CEST	49981	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:10.707408905 CEST	443	49981	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:10.858196020 CEST	443	49980	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:10.858386040 CEST	443	49980	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:10.858738899 CEST	49980	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:10.862730980 CEST	49980	443	192.168.2.5	18.184.216.10
Sep 10, 2024 18:11:10.862762928 CEST	443	49980	18.184.216.10	192.168.2.5
Sep 10, 2024 18:11:10.868542910 CEST	49982	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:11:10.868587017 CEST	443	49982	3.124.210.90	192.168.2.5
Sep 10, 2024 18:11:10.868730068 CEST	49982	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:11:10.868932962 CEST	49982	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:11:10.868952036 CEST	443	49982	3.124.210.90	192.168.2.5
Sep 10, 2024 18:11:10.937482119 CEST	443	49981	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:10.937592983 CEST	443	49981	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:10.937824965 CEST	49981	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:10.938633919 CEST	49981	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:10.938647032 CEST	443	49981	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:10.941657066 CEST	49983	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:11:10.941735983 CEST	443	49983	3.71.234.132	192.168.2.5
Sep 10, 2024 18:11:10.941816092 CEST	49983	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:11:10.942209005 CEST	49983	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:11:10.942236900 CEST	443	49983	3.71.234.132	192.168.2.5
Sep 10, 2024 18:11:11.396732092 CEST	49976	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:11:11.401863098 CEST	80	49976	217.21.73.115	192.168.2.5
Sep 10, 2024 18:11:11.515861988 CEST	443	49982	3.124.210.90	192.168.2.5
Sep 10, 2024 18:11:11.517445087 CEST	49982	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:11:11.517466068 CEST	443	49982	3.124.210.90	192.168.2.5
Sep 10, 2024 18:11:11.518585920 CEST	443	49982	3.124.210.90	192.168.2.5
Sep 10, 2024 18:11:11.519661903 CEST	49982	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:11:11.519829988 CEST	443	49982	3.124.210.90	192.168.2.5
Sep 10, 2024 18:11:11.520189047 CEST	49982	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:11:11.567398071 CEST	443	49982	3.124.210.90	192.168.2.5
Sep 10, 2024 18:11:11.600194931 CEST	443	49983	3.71.234.132	192.168.2.5
Sep 10, 2024 18:11:11.647075891 CEST	49983	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:11:11.681015968 CEST	49983	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:11:11.681047916 CEST	443	49983	3.71.234.132	192.168.2.5
Sep 10, 2024 18:11:11.682337999 CEST	443	49983	3.71.234.132	192.168.2.5
Sep 10, 2024 18:11:11.682670116 CEST	49983	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:11:11.682849884 CEST	49983	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:11:11.682862043 CEST	443	49983	3.71.234.132	192.168.2.5
Sep 10, 2024 18:11:11.723421097 CEST	443	49983	3.71.234.132	192.168.2.5
Sep 10, 2024 18:11:11.734308958 CEST	49983	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:11:11.745589972 CEST	80	49976	217.21.73.115	192.168.2.5
Sep 10, 2024 18:11:11.792865992 CEST	49976	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:11:11.880891085 CEST	443	49982	3.124.210.90	192.168.2.5
Sep 10, 2024 18:11:11.881025076 CEST	443	49982	3.124.210.90	192.168.2.5
Sep 10, 2024 18:11:11.881129026 CEST	49982	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:11:11.928771019 CEST	443	49983	3.71.234.132	192.168.2.5
Sep 10, 2024 18:11:11.928972006 CEST	443	49983	3.71.234.132	192.168.2.5
Sep 10, 2024 18:11:11.929037094 CEST	49983	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:11:11.943618059 CEST	49983	443	192.168.2.5	3.71.234.132
Sep 10, 2024 18:11:11.943643093 CEST	443	49983	3.71.234.132	192.168.2.5
Sep 10, 2024 18:11:11.944195032 CEST	49982	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:11:11.944216967 CEST	443	49982	3.124.210.90	192.168.2.5
Sep 10, 2024 18:11:12.043606043 CEST	49985	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:12.043656111 CEST	443	49985	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:12.044260979 CEST	49985	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:12.044260979 CEST	49985	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:12.044296026 CEST	443	49985	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:12.694540977 CEST	443	49985	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:12.694854975 CEST	49985	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:12.694871902 CEST	443	49985	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:12.695317030 CEST	443	49985	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:12.695904970 CEST	49985	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:12.695986032 CEST	443	49985	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:12.696611881 CEST	49985	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:12.743407011 CEST	443	49985	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:12.964725971 CEST	443	49985	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:12.964936018 CEST	443	49985	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:12.964989901 CEST	49985	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:13.005641937 CEST	49985	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:13.005659103 CEST	443	49985	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:13.034593105 CEST	49986	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:13.034691095 CEST	443	49986	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:13.034781933 CEST	49986	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:13.035293102 CEST	49986	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:13.035331964 CEST	443	49986	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:13.649028063 CEST	443	49986	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:13.663237095 CEST	49986	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:13.663305998 CEST	443	49986	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:13.664690971 CEST	443	49986	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:13.665149927 CEST	49986	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:13.665345907 CEST	443	49986	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:13.665637970 CEST	49986	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:13.705790043 CEST	49976	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:11:13.710861921 CEST	80	49976	217.21.73.115	192.168.2.5
Sep 10, 2024 18:11:13.711477041 CEST	443	49986	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:14.104731083 CEST	80	49976	217.21.73.115	192.168.2.5
Sep 10, 2024 18:11:14.104729891 CEST	443	49986	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:14.104909897 CEST	443	49986	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:14.104954004 CEST	80	49976	217.21.73.115	192.168.2.5
Sep 10, 2024 18:11:14.105138063 CEST	49976	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:11:14.105259895 CEST	49986	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:14.105690002 CEST	49986	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:14.105690002 CEST	49986	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:14.105737925 CEST	443	49986	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:14.105875015 CEST	80	49976	217.21.73.115	192.168.2.5
Sep 10, 2024 18:11:14.105942965 CEST	49976	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:11:14.105945110 CEST	49986	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:14.825392962 CEST	49989	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:11:14.825481892 CEST	443	49989	149.56.240.127	192.168.2.5
Sep 10, 2024 18:11:14.825566053 CEST	49989	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:11:14.826064110 CEST	49989	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:11:14.826102018 CEST	443	49989	149.56.240.127	192.168.2.5
Sep 10, 2024 18:11:15.397922993 CEST	443	49989	149.56.240.127	192.168.2.5
Sep 10, 2024 18:11:15.399301052 CEST	49989	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:11:15.399338007 CEST	443	49989	149.56.240.127	192.168.2.5
Sep 10, 2024 18:11:15.399744034 CEST	443	49989	149.56.240.127	192.168.2.5
Sep 10, 2024 18:11:15.417349100 CEST	49989	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:11:15.417448997 CEST	443	49989	149.56.240.127	192.168.2.5
Sep 10, 2024 18:11:15.417788029 CEST	49989	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:11:15.463392019 CEST	443	49989	149.56.240.127	192.168.2.5
Sep 10, 2024 18:11:15.520157099 CEST	443	49989	149.56.240.127	192.168.2.5
Sep 10, 2024 18:11:15.520240068 CEST	443	49989	149.56.240.127	192.168.2.5
Sep 10, 2024 18:11:15.520308018 CEST	49989	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:11:15.537736893 CEST	49989	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:11:15.537767887 CEST	443	49989	149.56.240.127	192.168.2.5
Sep 10, 2024 18:11:15.571326017 CEST	49991	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:15.571363926 CEST	443	49991	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:15.571429014 CEST	49991	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:15.572422028 CEST	49991	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:15.572436094 CEST	443	49991	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:15.815169096 CEST	49992	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:15.815304041 CEST	443	49992	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:15.815709114 CEST	49992	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:15.816245079 CEST	49992	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:15.816283941 CEST	443	49992	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:15.830981016 CEST	49993	443	192.168.2.5	54.39.128.162
Sep 10, 2024 18:11:15.831021070 CEST	443	49993	54.39.128.162	192.168.2.5
Sep 10, 2024 18:11:15.834122896 CEST	49993	443	192.168.2.5	54.39.128.162
Sep 10, 2024 18:11:15.834733009 CEST	49993	443	192.168.2.5	54.39.128.162
Sep 10, 2024 18:11:15.834744930 CEST	443	49993	54.39.128.162	192.168.2.5
Sep 10, 2024 18:11:16.029155970 CEST	443	49991	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:16.034986973 CEST	49991	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:16.035005093 CEST	443	49991	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:16.035337925 CEST	443	49991	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:16.057459116 CEST	49991	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:16.057545900 CEST	443	49991	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:16.058393002 CEST	49991	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:16.099427938 CEST	443	49991	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:16.209321022 CEST	443	49991	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:16.209361076 CEST	443	49991	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:16.209397078 CEST	443	49991	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:16.209436893 CEST	49991	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:16.209465981 CEST	443	49991	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:16.209501028 CEST	49991	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:16.209548950 CEST	49991	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:16.209618092 CEST	443	49991	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:16.209717989 CEST	443	49991	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:16.210104942 CEST	49991	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:16.245775938 CEST	49991	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:16.245794058 CEST	443	49991	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:16.322977066 CEST	49994	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:11:16.323020935 CEST	443	49994	104.26.12.60	192.168.2.5
Sep 10, 2024 18:11:16.323141098 CEST	49994	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:11:16.323260069 CEST	49995	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:16.323328972 CEST	443	49995	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:16.324171066 CEST	49996	443	192.168.2.5	54.76.106.86
Sep 10, 2024 18:11:16.324260950 CEST	443	49996	54.76.106.86	192.168.2.5
Sep 10, 2024 18:11:16.324306965 CEST	49995	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:16.324670076 CEST	49994	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:11:16.324682951 CEST	443	49994	104.26.12.60	192.168.2.5
Sep 10, 2024 18:11:16.324719906 CEST	49996	443	192.168.2.5	54.76.106.86
Sep 10, 2024 18:11:16.325108051 CEST	49995	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:16.325146914 CEST	443	49995	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:16.325380087 CEST	49996	443	192.168.2.5	54.76.106.86
Sep 10, 2024 18:11:16.325418949 CEST	443	49996	54.76.106.86	192.168.2.5
Sep 10, 2024 18:11:16.329714060 CEST	49997	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:11:16.329727888 CEST	443	49997	54.93.159.243	192.168.2.5
Sep 10, 2024 18:11:16.329977036 CEST	49997	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:11:16.329977036 CEST	49997	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:11:16.329999924 CEST	443	49997	54.93.159.243	192.168.2.5
Sep 10, 2024 18:11:16.330806971 CEST	49998	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:16.330813885 CEST	443	49998	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:16.335115910 CEST	49998	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:16.335427046 CEST	49998	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:16.335439920 CEST	443	49998	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:16.409981012 CEST	49999	443	192.168.2.5	67.202.105.31
Sep 10, 2024 18:11:16.410003901 CEST	443	49999	67.202.105.31	192.168.2.5
Sep 10, 2024 18:11:16.410145044 CEST	49999	443	192.168.2.5	67.202.105.31
Sep 10, 2024 18:11:16.410582066 CEST	49999	443	192.168.2.5	67.202.105.31
Sep 10, 2024 18:11:16.410593987 CEST	443	49999	67.202.105.31	192.168.2.5
Sep 10, 2024 18:11:16.441816092 CEST	443	49992	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:16.442234993 CEST	49992	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:16.442296982 CEST	443	49992	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:16.442773104 CEST	443	49992	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:16.442904949 CEST	443	49993	54.39.128.162	192.168.2.5
Sep 10, 2024 18:11:16.443419933 CEST	49993	443	192.168.2.5	54.39.128.162
Sep 10, 2024 18:11:16.443434954 CEST	443	49993	54.39.128.162	192.168.2.5
Sep 10, 2024 18:11:16.443485022 CEST	49992	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:16.443586111 CEST	443	49992	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:16.443928957 CEST	443	49993	54.39.128.162	192.168.2.5
Sep 10, 2024 18:11:16.443973064 CEST	49992	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:16.444420099 CEST	49993	443	192.168.2.5	54.39.128.162
Sep 10, 2024 18:11:16.444499016 CEST	443	49993	54.39.128.162	192.168.2.5
Sep 10, 2024 18:11:16.446141005 CEST	49993	443	192.168.2.5	54.39.128.162
Sep 10, 2024 18:11:16.485012054 CEST	49992	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:16.485045910 CEST	443	49992	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:16.491404057 CEST	443	49993	54.39.128.162	192.168.2.5
Sep 10, 2024 18:11:16.500030041 CEST	49993	443	192.168.2.5	54.39.128.162
Sep 10, 2024 18:11:16.553926945 CEST	443	49993	54.39.128.162	192.168.2.5
Sep 10, 2024 18:11:16.554006100 CEST	443	49993	54.39.128.162	192.168.2.5
Sep 10, 2024 18:11:16.554271936 CEST	49993	443	192.168.2.5	54.39.128.162
Sep 10, 2024 18:11:16.554862022 CEST	49993	443	192.168.2.5	54.39.128.162
Sep 10, 2024 18:11:16.554877996 CEST	443	49993	54.39.128.162	192.168.2.5
Sep 10, 2024 18:11:16.670545101 CEST	49726	80	192.168.2.5	142.250.185.142
Sep 10, 2024 18:11:16.675482988 CEST	80	49726	142.250.185.142	192.168.2.5
Sep 10, 2024 18:11:16.710057020 CEST	443	49992	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:16.710243940 CEST	443	49992	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:16.713012934 CEST	49992	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:16.719063044 CEST	49992	443	192.168.2.5	141.95.98.64
Sep 10, 2024 18:11:16.719105005 CEST	443	49992	141.95.98.64	192.168.2.5
Sep 10, 2024 18:11:16.781717062 CEST	443	49995	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:16.789889097 CEST	49995	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:16.789922953 CEST	443	49995	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:16.790261030 CEST	443	49995	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:16.796128988 CEST	49995	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:16.796200991 CEST	443	49995	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:16.796417952 CEST	49995	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:16.801625013 CEST	443	49994	104.26.12.60	192.168.2.5
Sep 10, 2024 18:11:16.801986933 CEST	49994	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:11:16.802002907 CEST	443	49994	104.26.12.60	192.168.2.5
Sep 10, 2024 18:11:16.802350044 CEST	443	49994	104.26.12.60	192.168.2.5
Sep 10, 2024 18:11:16.802752972 CEST	49994	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:11:16.802814007 CEST	443	49994	104.26.12.60	192.168.2.5
Sep 10, 2024 18:11:16.803008080 CEST	49994	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:11:16.839426994 CEST	443	49995	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:16.847402096 CEST	443	49994	104.26.12.60	192.168.2.5
Sep 10, 2024 18:11:16.914158106 CEST	443	49999	67.202.105.31	192.168.2.5
Sep 10, 2024 18:11:16.914477110 CEST	49999	443	192.168.2.5	67.202.105.31
Sep 10, 2024 18:11:16.914486885 CEST	443	49999	67.202.105.31	192.168.2.5
Sep 10, 2024 18:11:16.914832115 CEST	443	49999	67.202.105.31	192.168.2.5
Sep 10, 2024 18:11:16.915154934 CEST	49999	443	192.168.2.5	67.202.105.31
Sep 10, 2024 18:11:16.915214062 CEST	443	49999	67.202.105.31	192.168.2.5
Sep 10, 2024 18:11:16.915333033 CEST	49999	443	192.168.2.5	67.202.105.31
Sep 10, 2024 18:11:16.915344954 CEST	443	49999	67.202.105.31	192.168.2.5
Sep 10, 2024 18:11:16.932667971 CEST	443	49995	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:16.932744980 CEST	443	49995	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:16.932818890 CEST	49995	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:16.933533907 CEST	49995	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:16.933573961 CEST	443	49995	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:16.941466093 CEST	443	49998	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:16.941714048 CEST	49998	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:16.941724062 CEST	443	49998	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:16.942045927 CEST	443	49998	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:16.942347050 CEST	49998	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:16.942408085 CEST	443	49998	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:16.942543983 CEST	49998	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:16.953991890 CEST	443	49996	54.76.106.86	192.168.2.5
Sep 10, 2024 18:11:16.954498053 CEST	49996	443	192.168.2.5	54.76.106.86
Sep 10, 2024 18:11:16.954547882 CEST	443	49996	54.76.106.86	192.168.2.5
Sep 10, 2024 18:11:16.955003977 CEST	443	49996	54.76.106.86	192.168.2.5
Sep 10, 2024 18:11:16.955924034 CEST	49996	443	192.168.2.5	54.76.106.86
Sep 10, 2024 18:11:16.956022024 CEST	443	49996	54.76.106.86	192.168.2.5
Sep 10, 2024 18:11:16.956037045 CEST	49996	443	192.168.2.5	54.76.106.86
Sep 10, 2024 18:11:16.956083059 CEST	49996	443	192.168.2.5	54.76.106.86
Sep 10, 2024 18:11:16.958621979 CEST	50000	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:16.958684921 CEST	443	50000	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:16.958784103 CEST	50000	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:16.959002972 CEST	50000	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:16.959039927 CEST	443	50000	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:16.966289043 CEST	443	49994	104.26.12.60	192.168.2.5
Sep 10, 2024 18:11:16.966403008 CEST	443	49994	104.26.12.60	192.168.2.5
Sep 10, 2024 18:11:16.966464996 CEST	49994	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:11:16.970750093 CEST	443	49997	54.93.159.243	192.168.2.5
Sep 10, 2024 18:11:16.987404108 CEST	443	49998	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:16.994468927 CEST	49997	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:11:16.994482994 CEST	443	49997	54.93.159.243	192.168.2.5
Sep 10, 2024 18:11:16.995707989 CEST	443	49997	54.93.159.243	192.168.2.5
Sep 10, 2024 18:11:17.000359058 CEST	49997	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:11:17.000585079 CEST	49997	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:11:17.000611067 CEST	443	49997	54.93.159.243	192.168.2.5
Sep 10, 2024 18:11:17.001876116 CEST	50001	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:11:17.001913071 CEST	443	50001	67.202.105.32	192.168.2.5
Sep 10, 2024 18:11:17.001998901 CEST	50001	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:11:17.003233910 CEST	49994	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:11:17.003257036 CEST	443	49994	104.26.12.60	192.168.2.5
Sep 10, 2024 18:11:17.003403902 CEST	443	49996	54.76.106.86	192.168.2.5
Sep 10, 2024 18:11:17.009411097 CEST	50001	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:11:17.009428024 CEST	443	50001	67.202.105.32	192.168.2.5
Sep 10, 2024 18:11:17.046796083 CEST	49997	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:11:17.046811104 CEST	443	49997	54.93.159.243	192.168.2.5
Sep 10, 2024 18:11:17.063550949 CEST	50002	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:17.063584089 CEST	443	50002	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:17.063678980 CEST	50002	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:17.064277887 CEST	50002	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:17.064289093 CEST	443	50002	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:17.069811106 CEST	443	49999	67.202.105.31	192.168.2.5
Sep 10, 2024 18:11:17.069979906 CEST	443	49999	67.202.105.31	192.168.2.5
Sep 10, 2024 18:11:17.070036888 CEST	49999	443	192.168.2.5	67.202.105.31
Sep 10, 2024 18:11:17.071177959 CEST	49999	443	192.168.2.5	67.202.105.31
Sep 10, 2024 18:11:17.071187019 CEST	443	49999	67.202.105.31	192.168.2.5
Sep 10, 2024 18:11:17.144915104 CEST	50003	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:11:17.145004988 CEST	443	50003	141.101.120.11	192.168.2.5
Sep 10, 2024 18:11:17.145107985 CEST	50003	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:11:17.145603895 CEST	50003	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:11:17.145643950 CEST	443	50003	141.101.120.11	192.168.2.5
Sep 10, 2024 18:11:17.169950008 CEST	50004	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:11:17.170037031 CEST	443	50004	104.26.12.60	192.168.2.5
Sep 10, 2024 18:11:17.170121908 CEST	50004	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:11:17.170835972 CEST	50004	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:11:17.170872927 CEST	443	50004	104.26.12.60	192.168.2.5
Sep 10, 2024 18:11:17.185117960 CEST	443	49998	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:17.186110973 CEST	443	49998	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:17.186193943 CEST	49998	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:17.223068953 CEST	443	49996	54.76.106.86	192.168.2.5
Sep 10, 2024 18:11:17.223159075 CEST	443	49996	54.76.106.86	192.168.2.5
Sep 10, 2024 18:11:17.223463058 CEST	49996	443	192.168.2.5	54.76.106.86
Sep 10, 2024 18:11:17.254729986 CEST	49998	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:17.254750013 CEST	443	49998	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:17.255239964 CEST	49996	443	192.168.2.5	54.76.106.86
Sep 10, 2024 18:11:17.255306959 CEST	443	49996	54.76.106.86	192.168.2.5
Sep 10, 2024 18:11:17.268537045 CEST	50005	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:17.268570900 CEST	443	50005	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:17.268649101 CEST	50005	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:17.269105911 CEST	50005	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:17.269119024 CEST	443	50005	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:17.284989119 CEST	443	49997	54.93.159.243	192.168.2.5
Sep 10, 2024 18:11:17.285042048 CEST	443	49997	54.93.159.243	192.168.2.5
Sep 10, 2024 18:11:17.285099983 CEST	49997	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:11:17.285113096 CEST	443	49997	54.93.159.243	192.168.2.5
Sep 10, 2024 18:11:17.285190105 CEST	443	49997	54.93.159.243	192.168.2.5
Sep 10, 2024 18:11:17.285247087 CEST	49997	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:11:17.324188948 CEST	49997	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:11:17.324212074 CEST	443	49997	54.93.159.243	192.168.2.5
Sep 10, 2024 18:11:17.426968098 CEST	443	50000	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:17.475632906 CEST	50000	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:17.512422085 CEST	443	50001	67.202.105.32	192.168.2.5
Sep 10, 2024 18:11:17.546916962 CEST	50000	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:17.546976089 CEST	443	50000	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:17.547020912 CEST	50001	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:11:17.547044039 CEST	443	50001	67.202.105.32	192.168.2.5
Sep 10, 2024 18:11:17.547660112 CEST	443	50001	67.202.105.32	192.168.2.5
Sep 10, 2024 18:11:17.548443079 CEST	443	50000	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:17.548813105 CEST	50001	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:11:17.548932076 CEST	443	50001	67.202.105.32	192.168.2.5
Sep 10, 2024 18:11:17.549618006 CEST	50000	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:17.549833059 CEST	443	50000	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:17.549998045 CEST	50001	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:11:17.550066948 CEST	50000	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:17.551127911 CEST	50007	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:11:17.551137924 CEST	443	50007	54.93.159.243	192.168.2.5
Sep 10, 2024 18:11:17.551196098 CEST	50007	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:11:17.551501036 CEST	50007	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:11:17.551515102 CEST	443	50007	54.93.159.243	192.168.2.5
Sep 10, 2024 18:11:17.595402956 CEST	443	50000	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:17.595410109 CEST	443	50001	67.202.105.32	192.168.2.5
Sep 10, 2024 18:11:17.605643988 CEST	443	50003	141.101.120.11	192.168.2.5
Sep 10, 2024 18:11:17.629767895 CEST	443	50002	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:17.648345947 CEST	443	50004	104.26.12.60	192.168.2.5
Sep 10, 2024 18:11:17.649559975 CEST	50003	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:11:17.649624109 CEST	443	50003	141.101.120.11	192.168.2.5
Sep 10, 2024 18:11:17.649847031 CEST	50002	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:17.649859905 CEST	443	50002	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:17.650012016 CEST	443	50003	141.101.120.11	192.168.2.5
Sep 10, 2024 18:11:17.650393963 CEST	50004	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:11:17.650410891 CEST	443	50002	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:17.650419950 CEST	443	50004	104.26.12.60	192.168.2.5
Sep 10, 2024 18:11:17.650782108 CEST	443	50004	104.26.12.60	192.168.2.5
Sep 10, 2024 18:11:17.651132107 CEST	50003	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:11:17.651213884 CEST	443	50003	141.101.120.11	192.168.2.5
Sep 10, 2024 18:11:17.651809931 CEST	50002	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:17.651901007 CEST	443	50002	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:17.652179956 CEST	50004	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:11:17.652288914 CEST	443	50004	104.26.12.60	192.168.2.5
Sep 10, 2024 18:11:17.652677059 CEST	50003	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:11:17.652729034 CEST	50002	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:17.652801037 CEST	50004	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:11:17.682123899 CEST	443	50000	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:17.682286024 CEST	443	50000	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:17.682353973 CEST	50000	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:17.682379961 CEST	443	50000	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:17.682503939 CEST	443	50000	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:17.682564974 CEST	50000	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:17.682578087 CEST	443	50000	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:17.682698965 CEST	443	50000	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:17.682755947 CEST	50000	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:17.682769060 CEST	443	50000	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:17.683018923 CEST	443	50000	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:17.683079958 CEST	50000	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:17.695400953 CEST	443	50004	104.26.12.60	192.168.2.5
Sep 10, 2024 18:11:17.696274996 CEST	50000	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:17.696306944 CEST	443	50000	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:17.699394941 CEST	443	50003	141.101.120.11	192.168.2.5
Sep 10, 2024 18:11:17.699405909 CEST	443	50002	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:17.734232903 CEST	443	50001	67.202.105.32	192.168.2.5
Sep 10, 2024 18:11:17.734340906 CEST	443	50001	67.202.105.32	192.168.2.5
Sep 10, 2024 18:11:17.734448910 CEST	50001	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:11:17.752696037 CEST	443	50002	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:17.752787113 CEST	443	50002	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:17.752844095 CEST	50002	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:17.801598072 CEST	443	50003	141.101.120.11	192.168.2.5
Sep 10, 2024 18:11:17.801652908 CEST	443	50003	141.101.120.11	192.168.2.5
Sep 10, 2024 18:11:17.801836014 CEST	50003	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:11:17.808032990 CEST	443	50004	104.26.12.60	192.168.2.5
Sep 10, 2024 18:11:17.808084011 CEST	443	50004	104.26.12.60	192.168.2.5
Sep 10, 2024 18:11:17.808134079 CEST	50004	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:11:17.849499941 CEST	50001	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:11:17.849523067 CEST	443	50001	67.202.105.32	192.168.2.5
Sep 10, 2024 18:11:17.863626957 CEST	443	50005	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:17.864125967 CEST	50005	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:17.864145041 CEST	443	50005	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:17.867706060 CEST	443	50005	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:17.867774963 CEST	50005	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:17.899005890 CEST	50005	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:17.899189949 CEST	443	50005	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:17.900552988 CEST	50005	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:17.900567055 CEST	443	50005	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:17.941154003 CEST	50005	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:17.957415104 CEST	50008	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:11:17.957457066 CEST	443	50008	3.120.214.218	192.168.2.5
Sep 10, 2024 18:11:17.957520008 CEST	50008	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:11:17.959110022 CEST	50004	443	192.168.2.5	104.26.12.60
Sep 10, 2024 18:11:17.959125996 CEST	443	50004	104.26.12.60	192.168.2.5
Sep 10, 2024 18:11:17.959733009 CEST	50003	443	192.168.2.5	141.101.120.11
Sep 10, 2024 18:11:17.959778070 CEST	443	50003	141.101.120.11	192.168.2.5
Sep 10, 2024 18:11:17.960114956 CEST	50002	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:17.960144043 CEST	443	50002	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:17.961833954 CEST	50008	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:11:17.961863041 CEST	443	50008	3.120.214.218	192.168.2.5
Sep 10, 2024 18:11:17.966655016 CEST	50009	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:17.966684103 CEST	443	50009	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:17.966751099 CEST	50009	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:17.967480898 CEST	50009	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:17.967504025 CEST	443	50009	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:17.968189955 CEST	50011	443	192.168.2.5	13.32.27.83
Sep 10, 2024 18:11:17.968230009 CEST	443	50011	13.32.27.83	192.168.2.5
Sep 10, 2024 18:11:17.968291044 CEST	50011	443	192.168.2.5	13.32.27.83
Sep 10, 2024 18:11:17.968667030 CEST	50012	443	192.168.2.5	67.202.105.22
Sep 10, 2024 18:11:17.968677044 CEST	443	50012	67.202.105.22	192.168.2.5
Sep 10, 2024 18:11:17.968729973 CEST	50012	443	192.168.2.5	67.202.105.22
Sep 10, 2024 18:11:17.968830109 CEST	50011	443	192.168.2.5	13.32.27.83
Sep 10, 2024 18:11:17.968842983 CEST	443	50011	13.32.27.83	192.168.2.5
Sep 10, 2024 18:11:17.969119072 CEST	50012	443	192.168.2.5	67.202.105.22
Sep 10, 2024 18:11:17.969130039 CEST	443	50012	67.202.105.22	192.168.2.5
Sep 10, 2024 18:11:17.974225998 CEST	80	49976	217.21.73.115	192.168.2.5
Sep 10, 2024 18:11:17.974282026 CEST	49976	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:11:18.005636930 CEST	443	50005	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:18.006215096 CEST	443	50005	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:18.006290913 CEST	50005	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:18.006413937 CEST	50005	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:18.006413937 CEST	50005	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:18.006428957 CEST	443	50005	52.223.40.198	192.168.2.5
Sep 10, 2024 18:11:18.006531954 CEST	50005	443	192.168.2.5	52.223.40.198
Sep 10, 2024 18:11:18.113090992 CEST	49976	80	192.168.2.5	217.21.73.115
Sep 10, 2024 18:11:18.113598108 CEST	50013	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:18.113656998 CEST	443	50013	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:18.113735914 CEST	50013	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:18.114209890 CEST	50013	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:18.114226103 CEST	443	50013	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:18.182851076 CEST	50014	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:11:18.182899952 CEST	443	50014	67.202.105.32	192.168.2.5
Sep 10, 2024 18:11:18.182972908 CEST	50014	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:11:18.183276892 CEST	50014	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:11:18.183291912 CEST	443	50014	67.202.105.32	192.168.2.5
Sep 10, 2024 18:11:18.194590092 CEST	50015	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:11:18.194612026 CEST	443	50015	54.77.7.79	192.168.2.5
Sep 10, 2024 18:11:18.194700956 CEST	50015	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:11:18.195353031 CEST	50015	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:11:18.195374966 CEST	443	50015	54.77.7.79	192.168.2.5
Sep 10, 2024 18:11:18.196546078 CEST	50016	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:11:18.196594000 CEST	443	50016	3.73.251.164	192.168.2.5
Sep 10, 2024 18:11:18.196638107 CEST	50016	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:11:18.197546005 CEST	50016	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:11:18.197561979 CEST	443	50016	3.73.251.164	192.168.2.5
Sep 10, 2024 18:11:18.198175907 CEST	50017	443	192.168.2.5	67.202.105.34
Sep 10, 2024 18:11:18.198225975 CEST	443	50017	67.202.105.34	192.168.2.5
Sep 10, 2024 18:11:18.198295116 CEST	50017	443	192.168.2.5	67.202.105.34
Sep 10, 2024 18:11:18.198719025 CEST	50017	443	192.168.2.5	67.202.105.34
Sep 10, 2024 18:11:18.198748112 CEST	443	50017	67.202.105.34	192.168.2.5
Sep 10, 2024 18:11:18.344430923 CEST	80	49976	217.21.73.115	192.168.2.5
Sep 10, 2024 18:11:18.344697952 CEST	443	50007	54.93.159.243	192.168.2.5
Sep 10, 2024 18:11:18.345065117 CEST	50007	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:11:18.345084906 CEST	443	50007	54.93.159.243	192.168.2.5
Sep 10, 2024 18:11:18.346219063 CEST	443	50007	54.93.159.243	192.168.2.5
Sep 10, 2024 18:11:18.346498966 CEST	50007	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:11:18.346666098 CEST	443	50007	54.93.159.243	192.168.2.5
Sep 10, 2024 18:11:18.346679926 CEST	50007	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:11:18.387428999 CEST	443	50007	54.93.159.243	192.168.2.5
Sep 10, 2024 18:11:18.388809919 CEST	50007	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:11:18.492971897 CEST	443	50012	67.202.105.22	192.168.2.5
Sep 10, 2024 18:11:18.493221998 CEST	50012	443	192.168.2.5	67.202.105.22
Sep 10, 2024 18:11:18.493273973 CEST	443	50012	67.202.105.22	192.168.2.5
Sep 10, 2024 18:11:18.494314909 CEST	443	50012	67.202.105.22	192.168.2.5
Sep 10, 2024 18:11:18.494396925 CEST	50012	443	192.168.2.5	67.202.105.22
Sep 10, 2024 18:11:18.495369911 CEST	50012	443	192.168.2.5	67.202.105.22
Sep 10, 2024 18:11:18.495445967 CEST	443	50012	67.202.105.22	192.168.2.5
Sep 10, 2024 18:11:18.495553970 CEST	50012	443	192.168.2.5	67.202.105.22
Sep 10, 2024 18:11:18.495573997 CEST	443	50012	67.202.105.22	192.168.2.5
Sep 10, 2024 18:11:18.544936895 CEST	50012	443	192.168.2.5	67.202.105.22
Sep 10, 2024 18:11:18.593327999 CEST	443	50009	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:18.593527079 CEST	50009	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:18.593559027 CEST	443	50009	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:18.594718933 CEST	443	50009	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:18.595109940 CEST	50009	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:18.595237017 CEST	50009	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:18.595242977 CEST	443	50009	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:18.595279932 CEST	443	50009	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:18.597810030 CEST	443	50008	3.120.214.218	192.168.2.5
Sep 10, 2024 18:11:18.597979069 CEST	50008	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:11:18.597987890 CEST	443	50008	3.120.214.218	192.168.2.5
Sep 10, 2024 18:11:18.598541021 CEST	443	50008	3.120.214.218	192.168.2.5
Sep 10, 2024 18:11:18.598856926 CEST	50008	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:11:18.598962069 CEST	443	50008	3.120.214.218	192.168.2.5
Sep 10, 2024 18:11:18.598999977 CEST	50008	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:11:18.639434099 CEST	443	50008	3.120.214.218	192.168.2.5
Sep 10, 2024 18:11:18.640261889 CEST	443	50012	67.202.105.22	192.168.2.5
Sep 10, 2024 18:11:18.640379906 CEST	443	50012	67.202.105.22	192.168.2.5
Sep 10, 2024 18:11:18.640451908 CEST	50012	443	192.168.2.5	67.202.105.22
Sep 10, 2024 18:11:18.647661924 CEST	50018	443	192.168.2.5	54.72.64.168
Sep 10, 2024 18:11:18.647732973 CEST	443	50018	54.72.64.168	192.168.2.5
Sep 10, 2024 18:11:18.647802114 CEST	50018	443	192.168.2.5	54.72.64.168
Sep 10, 2024 18:11:18.648139000 CEST	50018	443	192.168.2.5	54.72.64.168
Sep 10, 2024 18:11:18.648175001 CEST	443	50018	54.72.64.168	192.168.2.5
Sep 10, 2024 18:11:18.650366068 CEST	50008	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:11:18.650366068 CEST	50009	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:18.651366949 CEST	50012	443	192.168.2.5	67.202.105.22
Sep 10, 2024 18:11:18.651422024 CEST	443	50012	67.202.105.22	192.168.2.5
Sep 10, 2024 18:11:18.667206049 CEST	443	50007	54.93.159.243	192.168.2.5
Sep 10, 2024 18:11:18.667409897 CEST	443	50007	54.93.159.243	192.168.2.5
Sep 10, 2024 18:11:18.667459965 CEST	50007	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:11:18.670587063 CEST	50007	443	192.168.2.5	54.93.159.243
Sep 10, 2024 18:11:18.670598030 CEST	443	50007	54.93.159.243	192.168.2.5
Sep 10, 2024 18:11:18.673031092 CEST	50020	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:11:18.673068047 CEST	443	50020	35.234.162.151	192.168.2.5
Sep 10, 2024 18:11:18.673141003 CEST	50020	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:11:18.673310041 CEST	50020	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:11:18.673337936 CEST	443	50020	35.234.162.151	192.168.2.5
Sep 10, 2024 18:11:18.676529884 CEST	50022	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:11:18.676552057 CEST	443	50022	3.73.251.164	192.168.2.5
Sep 10, 2024 18:11:18.676606894 CEST	50022	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:11:18.676779032 CEST	50022	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:11:18.676793098 CEST	443	50022	3.73.251.164	192.168.2.5
Sep 10, 2024 18:11:18.715595007 CEST	443	50011	13.32.27.83	192.168.2.5
Sep 10, 2024 18:11:18.715786934 CEST	50011	443	192.168.2.5	13.32.27.83
Sep 10, 2024 18:11:18.715816975 CEST	443	50011	13.32.27.83	192.168.2.5
Sep 10, 2024 18:11:18.716861010 CEST	443	50011	13.32.27.83	192.168.2.5
Sep 10, 2024 18:11:18.716928959 CEST	50011	443	192.168.2.5	13.32.27.83
Sep 10, 2024 18:11:18.720865965 CEST	50011	443	192.168.2.5	13.32.27.83
Sep 10, 2024 18:11:18.720937967 CEST	443	50011	13.32.27.83	192.168.2.5
Sep 10, 2024 18:11:18.721425056 CEST	50011	443	192.168.2.5	13.32.27.83
Sep 10, 2024 18:11:18.721443892 CEST	443	50011	13.32.27.83	192.168.2.5
Sep 10, 2024 18:11:18.765150070 CEST	50011	443	192.168.2.5	13.32.27.83
Sep 10, 2024 18:11:18.841928959 CEST	443	50017	67.202.105.34	192.168.2.5
Sep 10, 2024 18:11:18.842948914 CEST	50017	443	192.168.2.5	67.202.105.34
Sep 10, 2024 18:11:18.842972994 CEST	443	50017	67.202.105.34	192.168.2.5
Sep 10, 2024 18:11:18.843286037 CEST	443	50017	67.202.105.34	192.168.2.5
Sep 10, 2024 18:11:18.843803883 CEST	50017	443	192.168.2.5	67.202.105.34
Sep 10, 2024 18:11:18.843803883 CEST	50017	443	192.168.2.5	67.202.105.34
Sep 10, 2024 18:11:18.843822956 CEST	443	50017	67.202.105.34	192.168.2.5
Sep 10, 2024 18:11:18.843866110 CEST	443	50017	67.202.105.34	192.168.2.5
Sep 10, 2024 18:11:18.861195087 CEST	443	50009	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:18.861381054 CEST	443	50009	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:18.861515999 CEST	50009	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:18.867000103 CEST	50009	443	192.168.2.5	34.247.104.223
Sep 10, 2024 18:11:18.867043018 CEST	443	50009	34.247.104.223	192.168.2.5
Sep 10, 2024 18:11:18.867362976 CEST	50025	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:18.867409945 CEST	443	50025	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:18.867652893 CEST	50025	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:18.867652893 CEST	50025	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:18.867681980 CEST	443	50025	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:18.868130922 CEST	443	50014	67.202.105.32	192.168.2.5
Sep 10, 2024 18:11:18.868366957 CEST	50014	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:11:18.868380070 CEST	443	50014	67.202.105.32	192.168.2.5
Sep 10, 2024 18:11:18.868745089 CEST	443	50014	67.202.105.32	192.168.2.5
Sep 10, 2024 18:11:18.869108915 CEST	50014	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:11:18.869108915 CEST	50014	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:11:18.869124889 CEST	443	50014	67.202.105.32	192.168.2.5
Sep 10, 2024 18:11:18.869170904 CEST	443	50014	67.202.105.32	192.168.2.5
Sep 10, 2024 18:11:18.888015985 CEST	50017	443	192.168.2.5	67.202.105.34
Sep 10, 2024 18:11:18.911624908 CEST	443	50008	3.120.214.218	192.168.2.5
Sep 10, 2024 18:11:18.911731005 CEST	443	50008	3.120.214.218	192.168.2.5
Sep 10, 2024 18:11:18.911854982 CEST	50008	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:11:18.912117004 CEST	50008	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:11:18.912149906 CEST	443	50008	3.120.214.218	192.168.2.5
Sep 10, 2024 18:11:18.921622992 CEST	50014	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:11:18.968333960 CEST	443	50016	3.73.251.164	192.168.2.5
Sep 10, 2024 18:11:18.969188929 CEST	443	50013	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:18.969404936 CEST	50016	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:11:18.969417095 CEST	50013	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:18.969425917 CEST	443	50016	3.73.251.164	192.168.2.5
Sep 10, 2024 18:11:18.969433069 CEST	443	50013	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:18.969922066 CEST	443	50016	3.73.251.164	192.168.2.5
Sep 10, 2024 18:11:18.969996929 CEST	443	50013	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:18.970330000 CEST	50013	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:18.970405102 CEST	443	50013	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:18.970640898 CEST	443	50015	54.77.7.79	192.168.2.5
Sep 10, 2024 18:11:18.970681906 CEST	50016	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:11:18.970750093 CEST	443	50016	3.73.251.164	192.168.2.5
Sep 10, 2024 18:11:18.970782995 CEST	50013	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:18.970974922 CEST	50015	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:11:18.970983982 CEST	50016	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:11:18.970985889 CEST	443	50015	54.77.7.79	192.168.2.5
Sep 10, 2024 18:11:18.971503973 CEST	443	50015	54.77.7.79	192.168.2.5
Sep 10, 2024 18:11:18.971856117 CEST	50015	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:11:18.971940994 CEST	443	50015	54.77.7.79	192.168.2.5
Sep 10, 2024 18:11:18.971967936 CEST	50015	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:11:18.983727932 CEST	443	50017	67.202.105.34	192.168.2.5
Sep 10, 2024 18:11:18.983791113 CEST	443	50017	67.202.105.34	192.168.2.5
Sep 10, 2024 18:11:18.983999014 CEST	50017	443	192.168.2.5	67.202.105.34
Sep 10, 2024 18:11:18.986977100 CEST	50017	443	192.168.2.5	67.202.105.34
Sep 10, 2024 18:11:18.986993074 CEST	443	50017	67.202.105.34	192.168.2.5
Sep 10, 2024 18:11:19.011403084 CEST	443	50016	3.73.251.164	192.168.2.5
Sep 10, 2024 18:11:19.011424065 CEST	443	50013	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:19.012249947 CEST	443	50014	67.202.105.32	192.168.2.5
Sep 10, 2024 18:11:19.012345076 CEST	443	50014	67.202.105.32	192.168.2.5
Sep 10, 2024 18:11:19.012589931 CEST	50014	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:11:19.013830900 CEST	50014	443	192.168.2.5	67.202.105.32
Sep 10, 2024 18:11:19.013847113 CEST	443	50014	67.202.105.32	192.168.2.5
Sep 10, 2024 18:11:19.015398979 CEST	443	50015	54.77.7.79	192.168.2.5
Sep 10, 2024 18:11:19.015985966 CEST	50015	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:11:19.130620956 CEST	443	50011	13.32.27.83	192.168.2.5
Sep 10, 2024 18:11:19.130764961 CEST	443	50011	13.32.27.83	192.168.2.5
Sep 10, 2024 18:11:19.130845070 CEST	50011	443	192.168.2.5	13.32.27.83
Sep 10, 2024 18:11:19.131588936 CEST	50011	443	192.168.2.5	13.32.27.83
Sep 10, 2024 18:11:19.131611109 CEST	443	50011	13.32.27.83	192.168.2.5
Sep 10, 2024 18:11:19.224562883 CEST	443	50013	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:19.224705935 CEST	443	50013	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:19.225117922 CEST	50013	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:19.225117922 CEST	50013	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:19.225140095 CEST	443	50013	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:19.225790977 CEST	50013	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:19.226386070 CEST	50029	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:19.226430893 CEST	443	50029	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:19.226710081 CEST	50029	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:19.226710081 CEST	50029	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:19.226752043 CEST	443	50029	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:19.241199017 CEST	443	50015	54.77.7.79	192.168.2.5
Sep 10, 2024 18:11:19.241359949 CEST	443	50015	54.77.7.79	192.168.2.5
Sep 10, 2024 18:11:19.241527081 CEST	50015	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:11:19.242978096 CEST	50015	443	192.168.2.5	54.77.7.79
Sep 10, 2024 18:11:19.242994070 CEST	443	50015	54.77.7.79	192.168.2.5
Sep 10, 2024 18:11:19.278842926 CEST	443	50016	3.73.251.164	192.168.2.5
Sep 10, 2024 18:11:19.278867960 CEST	443	50016	3.73.251.164	192.168.2.5
Sep 10, 2024 18:11:19.278947115 CEST	443	50016	3.73.251.164	192.168.2.5
Sep 10, 2024 18:11:19.279057026 CEST	50016	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:11:19.280965090 CEST	50016	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:11:19.280994892 CEST	443	50016	3.73.251.164	192.168.2.5
Sep 10, 2024 18:11:19.292598009 CEST	443	50020	35.234.162.151	192.168.2.5
Sep 10, 2024 18:11:19.293965101 CEST	50020	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:11:19.294032097 CEST	443	50020	35.234.162.151	192.168.2.5
Sep 10, 2024 18:11:19.295192003 CEST	443	50020	35.234.162.151	192.168.2.5
Sep 10, 2024 18:11:19.295511007 CEST	50020	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:11:19.295691967 CEST	443	50020	35.234.162.151	192.168.2.5
Sep 10, 2024 18:11:19.295737982 CEST	50020	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:11:19.311419964 CEST	443	50022	3.73.251.164	192.168.2.5
Sep 10, 2024 18:11:19.311846018 CEST	50022	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:11:19.311858892 CEST	443	50022	3.73.251.164	192.168.2.5
Sep 10, 2024 18:11:19.312969923 CEST	443	50022	3.73.251.164	192.168.2.5
Sep 10, 2024 18:11:19.313391924 CEST	50022	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:11:19.313391924 CEST	50022	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:11:19.313415051 CEST	443	50022	3.73.251.164	192.168.2.5
Sep 10, 2024 18:11:19.313566923 CEST	443	50022	3.73.251.164	192.168.2.5
Sep 10, 2024 18:11:19.339426041 CEST	443	50020	35.234.162.151	192.168.2.5
Sep 10, 2024 18:11:19.341608047 CEST	50020	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:11:19.365654945 CEST	50022	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:11:19.486017942 CEST	443	50025	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:19.486258030 CEST	50025	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:19.486272097 CEST	443	50025	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:19.487370014 CEST	443	50025	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:19.487756968 CEST	50025	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:19.487833023 CEST	50025	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:19.487843990 CEST	443	50025	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:19.487924099 CEST	443	50025	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:19.525989056 CEST	443	50018	54.72.64.168	192.168.2.5
Sep 10, 2024 18:11:19.526537895 CEST	50018	443	192.168.2.5	54.72.64.168
Sep 10, 2024 18:11:19.526604891 CEST	443	50018	54.72.64.168	192.168.2.5
Sep 10, 2024 18:11:19.528083086 CEST	443	50018	54.72.64.168	192.168.2.5
Sep 10, 2024 18:11:19.528373003 CEST	50018	443	192.168.2.5	54.72.64.168
Sep 10, 2024 18:11:19.529318094 CEST	50018	443	192.168.2.5	54.72.64.168
Sep 10, 2024 18:11:19.529318094 CEST	50018	443	192.168.2.5	54.72.64.168
Sep 10, 2024 18:11:19.529354095 CEST	443	50018	54.72.64.168	192.168.2.5
Sep 10, 2024 18:11:19.529422998 CEST	443	50018	54.72.64.168	192.168.2.5
Sep 10, 2024 18:11:19.531003952 CEST	50025	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:19.578294992 CEST	50018	443	192.168.2.5	54.72.64.168
Sep 10, 2024 18:11:19.578361034 CEST	443	50018	54.72.64.168	192.168.2.5
Sep 10, 2024 18:11:19.582757950 CEST	443	50020	35.234.162.151	192.168.2.5
Sep 10, 2024 18:11:19.582860947 CEST	443	50020	35.234.162.151	192.168.2.5
Sep 10, 2024 18:11:19.583523989 CEST	50020	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:11:19.583523989 CEST	50020	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:11:19.624620914 CEST	50018	443	192.168.2.5	54.72.64.168
Sep 10, 2024 18:11:19.636977911 CEST	443	50022	3.73.251.164	192.168.2.5
Sep 10, 2024 18:11:19.637146950 CEST	443	50022	3.73.251.164	192.168.2.5
Sep 10, 2024 18:11:19.637346029 CEST	50022	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:11:19.637742043 CEST	50022	443	192.168.2.5	3.73.251.164
Sep 10, 2024 18:11:19.637762070 CEST	443	50022	3.73.251.164	192.168.2.5
Sep 10, 2024 18:11:19.718117952 CEST	443	50018	54.72.64.168	192.168.2.5
Sep 10, 2024 18:11:19.718238115 CEST	443	50018	54.72.64.168	192.168.2.5
Sep 10, 2024 18:11:19.718336105 CEST	50018	443	192.168.2.5	54.72.64.168
Sep 10, 2024 18:11:19.720956087 CEST	50018	443	192.168.2.5	54.72.64.168
Sep 10, 2024 18:11:19.720983982 CEST	50030	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:19.721008062 CEST	443	50018	54.72.64.168	192.168.2.5
Sep 10, 2024 18:11:19.721013069 CEST	443	50030	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:19.721293926 CEST	50030	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:19.721293926 CEST	50030	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:19.721333981 CEST	443	50030	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:19.753989935 CEST	443	50025	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:19.754164934 CEST	443	50025	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:19.755140066 CEST	50025	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:19.755140066 CEST	50025	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:19.847800970 CEST	443	50029	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:19.848112106 CEST	50029	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:19.848125935 CEST	443	50029	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:19.848474026 CEST	443	50029	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:19.848772049 CEST	50029	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:19.848829985 CEST	443	50029	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:19.848921061 CEST	50029	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:19.889148951 CEST	50020	443	192.168.2.5	35.234.162.151
Sep 10, 2024 18:11:19.889204025 CEST	443	50020	35.234.162.151	192.168.2.5
Sep 10, 2024 18:11:19.891495943 CEST	443	50029	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:19.906466961 CEST	50031	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:11:19.906507015 CEST	443	50031	3.120.214.218	192.168.2.5
Sep 10, 2024 18:11:19.906568050 CEST	50031	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:11:19.906738043 CEST	50031	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:11:19.906750917 CEST	443	50031	3.120.214.218	192.168.2.5
Sep 10, 2024 18:11:20.061965942 CEST	50025	443	192.168.2.5	18.202.126.138
Sep 10, 2024 18:11:20.061990023 CEST	443	50025	18.202.126.138	192.168.2.5
Sep 10, 2024 18:11:20.103801966 CEST	443	50029	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:20.104041100 CEST	443	50029	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:20.104093075 CEST	50029	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:20.104554892 CEST	50029	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:20.104562998 CEST	443	50029	54.38.113.8	192.168.2.5
Sep 10, 2024 18:11:20.104571104 CEST	50029	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:20.104624987 CEST	50029	443	192.168.2.5	54.38.113.8
Sep 10, 2024 18:11:20.236346006 CEST	50033	443	192.168.2.5	13.32.27.83
Sep 10, 2024 18:11:20.236391068 CEST	443	50033	13.32.27.83	192.168.2.5
Sep 10, 2024 18:11:20.236444950 CEST	50033	443	192.168.2.5	13.32.27.83
Sep 10, 2024 18:11:20.236635923 CEST	50033	443	192.168.2.5	13.32.27.83
Sep 10, 2024 18:11:20.236650944 CEST	443	50033	13.32.27.83	192.168.2.5
Sep 10, 2024 18:11:20.329838991 CEST	50034	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:11:20.329874039 CEST	443	50034	149.56.240.127	192.168.2.5
Sep 10, 2024 18:11:20.329929113 CEST	50034	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:11:20.330102921 CEST	50034	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:11:20.330110073 CEST	443	50034	149.56.240.127	192.168.2.5
Sep 10, 2024 18:11:20.352706909 CEST	443	50030	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:20.352968931 CEST	50030	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:20.352977037 CEST	443	50030	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:20.353373051 CEST	443	50030	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:20.353692055 CEST	50030	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:20.353738070 CEST	443	50030	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:20.353832006 CEST	50030	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:20.399401903 CEST	443	50030	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:20.537440062 CEST	443	50031	3.120.214.218	192.168.2.5
Sep 10, 2024 18:11:20.537790060 CEST	50031	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:11:20.537802935 CEST	443	50031	3.120.214.218	192.168.2.5
Sep 10, 2024 18:11:20.538414001 CEST	443	50031	3.120.214.218	192.168.2.5
Sep 10, 2024 18:11:20.538937092 CEST	50031	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:11:20.539031982 CEST	443	50031	3.120.214.218	192.168.2.5
Sep 10, 2024 18:11:20.539061069 CEST	50031	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:11:20.579421043 CEST	443	50031	3.120.214.218	192.168.2.5
Sep 10, 2024 18:11:20.591378927 CEST	50031	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:11:20.627880096 CEST	443	50030	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:20.627990961 CEST	443	50030	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:20.628037930 CEST	50030	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:20.628715992 CEST	50030	443	192.168.2.5	18.195.6.136
Sep 10, 2024 18:11:20.628731012 CEST	443	50030	18.195.6.136	192.168.2.5
Sep 10, 2024 18:11:20.851488113 CEST	443	50031	3.120.214.218	192.168.2.5
Sep 10, 2024 18:11:20.851598978 CEST	443	50031	3.120.214.218	192.168.2.5
Sep 10, 2024 18:11:20.852816105 CEST	50031	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:11:20.852816105 CEST	50031	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:11:20.855313063 CEST	50035	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:11:20.855350018 CEST	443	50035	3.124.210.90	192.168.2.5
Sep 10, 2024 18:11:20.855515957 CEST	50035	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:11:20.855662107 CEST	50035	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:11:20.855674028 CEST	443	50035	3.124.210.90	192.168.2.5
Sep 10, 2024 18:11:20.906785965 CEST	443	50034	149.56.240.127	192.168.2.5
Sep 10, 2024 18:11:20.907242060 CEST	50034	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:11:20.907252073 CEST	443	50034	149.56.240.127	192.168.2.5
Sep 10, 2024 18:11:20.908423901 CEST	443	50034	149.56.240.127	192.168.2.5
Sep 10, 2024 18:11:20.908750057 CEST	50034	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:11:20.908938885 CEST	443	50034	149.56.240.127	192.168.2.5
Sep 10, 2024 18:11:20.909002066 CEST	50034	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:11:20.951428890 CEST	443	50034	149.56.240.127	192.168.2.5
Sep 10, 2024 18:11:20.951613903 CEST	50034	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:11:20.961211920 CEST	443	50033	13.32.27.83	192.168.2.5
Sep 10, 2024 18:11:20.961426020 CEST	50033	443	192.168.2.5	13.32.27.83
Sep 10, 2024 18:11:20.961443901 CEST	443	50033	13.32.27.83	192.168.2.5
Sep 10, 2024 18:11:20.961812973 CEST	443	50033	13.32.27.83	192.168.2.5
Sep 10, 2024 18:11:20.962110996 CEST	50033	443	192.168.2.5	13.32.27.83
Sep 10, 2024 18:11:20.962172031 CEST	443	50033	13.32.27.83	192.168.2.5
Sep 10, 2024 18:11:20.962265015 CEST	50033	443	192.168.2.5	13.32.27.83
Sep 10, 2024 18:11:21.003436089 CEST	443	50033	13.32.27.83	192.168.2.5
Sep 10, 2024 18:11:21.011085987 CEST	443	50034	149.56.240.127	192.168.2.5
Sep 10, 2024 18:11:21.011245012 CEST	443	50034	149.56.240.127	192.168.2.5
Sep 10, 2024 18:11:21.011723042 CEST	50034	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:11:21.011928082 CEST	50034	443	192.168.2.5	149.56.240.127
Sep 10, 2024 18:11:21.011945963 CEST	443	50034	149.56.240.127	192.168.2.5
Sep 10, 2024 18:11:21.017477036 CEST	50037	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:21.017478943 CEST	50036	443	192.168.2.5	54.39.128.162
Sep 10, 2024 18:11:21.017503023 CEST	443	50037	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:21.017503977 CEST	443	50036	54.39.128.162	192.168.2.5
Sep 10, 2024 18:11:21.017590046 CEST	50037	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:21.017591953 CEST	50036	443	192.168.2.5	54.39.128.162
Sep 10, 2024 18:11:21.017760992 CEST	50037	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:21.017774105 CEST	443	50037	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:21.017903090 CEST	50036	443	192.168.2.5	54.39.128.162
Sep 10, 2024 18:11:21.017916918 CEST	443	50036	54.39.128.162	192.168.2.5
Sep 10, 2024 18:11:21.166981936 CEST	50031	443	192.168.2.5	3.120.214.218
Sep 10, 2024 18:11:21.167001963 CEST	443	50031	3.120.214.218	192.168.2.5
Sep 10, 2024 18:11:21.221231937 CEST	50038	443	192.168.2.5	142.250.186.98
Sep 10, 2024 18:11:21.221251011 CEST	443	50038	142.250.186.98	192.168.2.5
Sep 10, 2024 18:11:21.221612930 CEST	50038	443	192.168.2.5	142.250.186.98
Sep 10, 2024 18:11:21.221807003 CEST	50038	443	192.168.2.5	142.250.186.98
Sep 10, 2024 18:11:21.221817970 CEST	443	50038	142.250.186.98	192.168.2.5
Sep 10, 2024 18:11:21.379893064 CEST	443	50033	13.32.27.83	192.168.2.5
Sep 10, 2024 18:11:21.380347967 CEST	443	50033	13.32.27.83	192.168.2.5
Sep 10, 2024 18:11:21.380501986 CEST	50033	443	192.168.2.5	13.32.27.83
Sep 10, 2024 18:11:21.380846977 CEST	50033	443	192.168.2.5	13.32.27.83
Sep 10, 2024 18:11:21.380858898 CEST	443	50033	13.32.27.83	192.168.2.5
Sep 10, 2024 18:11:21.392271996 CEST	50039	443	192.168.2.5	52.3.139.193
Sep 10, 2024 18:11:21.392302036 CEST	443	50039	52.3.139.193	192.168.2.5
Sep 10, 2024 18:11:21.392559052 CEST	50039	443	192.168.2.5	52.3.139.193
Sep 10, 2024 18:11:21.392725945 CEST	50039	443	192.168.2.5	52.3.139.193
Sep 10, 2024 18:11:21.392736912 CEST	443	50039	52.3.139.193	192.168.2.5
Sep 10, 2024 18:11:21.472920895 CEST	443	50037	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:21.473531961 CEST	50037	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:21.473557949 CEST	443	50037	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:21.473854065 CEST	443	50037	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:21.475524902 CEST	50037	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:21.475585938 CEST	443	50037	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:21.475835085 CEST	50037	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:21.498008013 CEST	443	50035	3.124.210.90	192.168.2.5
Sep 10, 2024 18:11:21.515978098 CEST	50035	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:11:21.515995979 CEST	443	50035	3.124.210.90	192.168.2.5
Sep 10, 2024 18:11:21.516705036 CEST	443	50035	3.124.210.90	192.168.2.5
Sep 10, 2024 18:11:21.518934011 CEST	50035	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:11:21.519062042 CEST	443	50035	3.124.210.90	192.168.2.5
Sep 10, 2024 18:11:21.519438982 CEST	443	50037	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:21.519486904 CEST	50035	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:11:21.560441017 CEST	50035	443	192.168.2.5	3.124.210.90
Sep 10, 2024 18:11:21.560451984 CEST	443	50035	3.124.210.90	192.168.2.5
Sep 10, 2024 18:11:21.594862938 CEST	443	50036	54.39.128.162	192.168.2.5
Sep 10, 2024 18:11:21.595659971 CEST	50036	443	192.168.2.5	54.39.128.162
Sep 10, 2024 18:11:21.595693111 CEST	443	50036	54.39.128.162	192.168.2.5
Sep 10, 2024 18:11:21.596858978 CEST	443	50036	54.39.128.162	192.168.2.5
Sep 10, 2024 18:11:21.598335028 CEST	50036	443	192.168.2.5	54.39.128.162
Sep 10, 2024 18:11:21.598521948 CEST	443	50036	54.39.128.162	192.168.2.5
Sep 10, 2024 18:11:21.598850012 CEST	50036	443	192.168.2.5	54.39.128.162
Sep 10, 2024 18:11:21.639405966 CEST	443	50036	54.39.128.162	192.168.2.5
Sep 10, 2024 18:11:21.655699968 CEST	443	50037	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:21.655744076 CEST	443	50037	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:21.655772924 CEST	443	50037	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:21.655795097 CEST	443	50037	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:21.655853033 CEST	443	50037	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:21.655881882 CEST	443	50037	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:21.655991077 CEST	50037	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:21.655991077 CEST	50037	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:21.655991077 CEST	50037	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:21.656012058 CEST	443	50037	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:21.656445026 CEST	443	50037	141.101.120.10	192.168.2.5
Sep 10, 2024 18:11:21.656574965 CEST	50037	443	192.168.2.5	141.101.120.10
Sep 10, 2024 18:11:21.660089016 CEST	50037	443	192.168.2.5	141.101.120.10

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 10, 2024 18:10:26.695067883 CEST	192.168.2.5	1.1.1.1	0x6278	Standard query (0)	football-booster.freevisit1.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:26.695425034 CEST	192.168.2.5	1.1.1.1	0x6fc6	Standard query (0)	football-booster.freevisit1.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:28.071450949 CEST	192.168.2.5	1.1.1.1	0x7795	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:28.071739912 CEST	192.168.2.5	1.1.1.1	0xdcb7	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:28.089456081 CEST	192.168.2.5	1.1.1.1	0xdb50	Standard query (0)	maxcdn.bootstrapcdn.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:28.089863062 CEST	192.168.2.5	1.1.1.1	0xe003	Standard query (0)	maxcdn.bootstrapcdn.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:28.809345007 CEST	192.168.2.5	1.1.1.1	0x528b	Standard query (0)	i.imgur.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:28.809511900 CEST	192.168.2.5	1.1.1.1	0xcdb1	Standard query (0)	i.imgur.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:29.254141092 CEST	192.168.2.5	1.1.1.1	0x8261	Standard query (0)	s7.addthis.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:29.254527092 CEST	192.168.2.5	1.1.1.1	0xa79	Standard query (0)	s7.addthis.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:29.361294031 CEST	192.168.2.5	1.1.1.1	0xbc46	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:29.361882925 CEST	192.168.2.5	1.1.1.1	0x7264	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:30.063826084 CEST	192.168.2.5	1.1.1.1	0xf102	Standard query (0)	s7.addthis.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:30.064091921 CEST	192.168.2.5	1.1.1.1	0x2fe8	Standard query (0)	s7.addthis.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:31.026808977 CEST	192.168.2.5	1.1.1.1	0x3763	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:31.027116060 CEST	192.168.2.5	1.1.1.1	0x4733	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:31.597568989 CEST	192.168.2.5	1.1.1.1	0x2959	Standard query (0)	football-booster.freevisit1.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:31.598316908 CEST	192.168.2.5	1.1.1.1	0x66d6	Standard query (0)	football-booster.freevisit1.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:31.699294090 CEST	192.168.2.5	1.1.1.1	0x428e	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:31.699522972 CEST	192.168.2.5	1.1.1.1	0x7fe6	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:32.326509953 CEST	192.168.2.5	1.1.1.1	0x93ce	Standard query (0)	i.imgur.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:32.327014923 CEST	192.168.2.5	1.1.1.1	0x1f3	Standard query (0)	i.imgur.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:32.411703110 CEST	192.168.2.5	1.1.1.1	0x95eb	Standard query (0)	s7.addthis.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:32.412444115 CEST	192.168.2.5	1.1.1.1	0xa5d4	Standard query (0)	s7.addthis.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:33.039030075 CEST	192.168.2.5	1.1.1.1	0x6cc7	Standard query (0)	s10.histats.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:33.039469957 CEST	192.168.2.5	1.1.1.1	0x4a2f	Standard query (0)	s10.histats.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:33.559861898 CEST	192.168.2.5	1.1.1.1	0xf9b7	Standard query (0)	s10.histats.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:33.560691118 CEST	192.168.2.5	1.1.1.1	0x4346	Standard query (0)	s10.histats.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:33.585381985 CEST	192.168.2.5	1.1.1.1	0xe0c2	Standard query (0)	translate.google.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:33.585692883 CEST	192.168.2.5	1.1.1.1	0x301b	Standard query (0)	translate.google.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:34.482872009 CEST	192.168.2.5	1.1.1.1	0x4fc8	Standard query (0)	s4.histats.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:34.483238935 CEST	192.168.2.5	1.1.1.1	0x599c	Standard query (0)	s4.histats.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:34.593302011 CEST	192.168.2.5	1.1.1.1	0x8caa	Standard query (0)	s10.histats.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:34.593691111 CEST	192.168.2.5	1.1.1.1	0xfe43	Standard query (0)	s10.histats.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:34.625422955 CEST	192.168.2.5	1.1.1.1	0x2e1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:34.625571012 CEST	192.168.2.5	1.1.1.1	0xd1f4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:35.238759995 CEST	192.168.2.5	1.1.1.1	0x4ae6	Standard query (0)	e.dtscout.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:35.238965988 CEST	192.168.2.5	1.1.1.1	0xdaad	Standard query (0)	e.dtscout.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:35.253238916 CEST	192.168.2.5	1.1.1.1	0xbfea	Standard query (0)	e.dtscout.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:35.253426075 CEST	192.168.2.5	1.1.1.1	0x2cad	Standard query (0)	e.dtscout.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:35.269027948 CEST	192.168.2.5	1.1.1.1	0x8462	Standard query (0)	s4.histats.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:35.269120932 CEST	192.168.2.5	1.1.1.1	0x60ab	Standard query (0)	s4.histats.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:35.651196957 CEST	192.168.2.5	1.1.1.1	0x55f3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:35.651427031 CEST	192.168.2.5	1.1.1.1	0x2ceb	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:36.070363998 CEST	192.168.2.5	1.1.1.1	0xed69	Standard query (0)	t.dtscout.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:36.070557117 CEST	192.168.2.5	1.1.1.1	0x85c2	Standard query (0)	t.dtscout.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:36.074739933 CEST	192.168.2.5	1.1.1.1	0xf21c	Standard query (0)	pxdrop.lijit.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:36.074918032 CEST	192.168.2.5	1.1.1.1	0x70fe	Standard query (0)	pxdrop.lijit.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:36.075654030 CEST	192.168.2.5	1.1.1.1	0xe26	Standard query (0)	pd.sharethis.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:36.075993061 CEST	192.168.2.5	1.1.1.1	0x5199	Standard query (0)	pd.sharethis.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:36.077718973 CEST	192.168.2.5	1.1.1.1	0xf273	Standard query (0)	cdn.tynt.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:36.077851057 CEST	192.168.2.5	1.1.1.1	0x4f91	Standard query (0)	cdn.tynt.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:36.078342915 CEST	192.168.2.5	1.1.1.1	0xdf7d	Standard query (0)	t.dtscout.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:36.078555107 CEST	192.168.2.5	1.1.1.1	0xc2	Standard query (0)	t.dtscout.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:36.228275061 CEST	192.168.2.5	1.1.1.1	0xb387	Standard query (0)	e.dtscout.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:36.228615999 CEST	192.168.2.5	1.1.1.1	0xaa5c	Standard query (0)	e.dtscout.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:36.743813992 CEST	192.168.2.5	1.1.1.1	0x339e	Standard query (0)	pxdrop.lijit.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:36.744184971 CEST	192.168.2.5	1.1.1.1	0x9867	Standard query (0)	pxdrop.lijit.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:36.773991108 CEST	192.168.2.5	1.1.1.1	0xa13f	Standard query (0)	t.dtscout.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:36.774375916 CEST	192.168.2.5	1.1.1.1	0xaafe	Standard query (0)	t.dtscout.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:36.871015072 CEST	192.168.2.5	1.1.1.1	0xc212	Standard query (0)	ic.tynt.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:36.871176004 CEST	192.168.2.5	1.1.1.1	0x622e	Standard query (0)	ic.tynt.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:37.197624922 CEST	192.168.2.5	1.1.1.1	0xeef0	Standard query (0)	de.tynt.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:37.197971106 CEST	192.168.2.5	1.1.1.1	0xba8a	Standard query (0)	de.tynt.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:37.309875011 CEST	192.168.2.5	1.1.1.1	0x17c1	Standard query (0)	t.sharethis.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:37.310233116 CEST	192.168.2.5	1.1.1.1	0x5b15	Standard query (0)	t.sharethis.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:38.120408058 CEST	192.168.2.5	1.1.1.1	0xa957	Standard query (0)	pxdrop.lijit.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:38.120408058 CEST	192.168.2.5	1.1.1.1	0x376d	Standard query (0)	pxdrop.lijit.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:38.226516962 CEST	192.168.2.5	1.1.1.1	0xbd79	Standard query (0)	cdn-tc.33across.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:38.226905107 CEST	192.168.2.5	1.1.1.1	0xd042	Standard query (0)	cdn-tc.33across.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:38.227766991 CEST	192.168.2.5	1.1.1.1	0xe17a	Standard query (0)	i.simpli.fi	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:38.227766991 CEST	192.168.2.5	1.1.1.1	0x1c38	Standard query (0)	i.simpli.fi	65	IN (0x0001)	false
Sep 10, 2024 18:10:38.558707952 CEST	192.168.2.5	1.1.1.1	0xb956	Standard query (0)	t.sharethis.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:38.558967113 CEST	192.168.2.5	1.1.1.1	0xb24c	Standard query (0)	t.sharethis.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:39.135416031 CEST	192.168.2.5	1.1.1.1	0xe8b1	Standard query (0)	pxdrop.lijit.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.135816097 CEST	192.168.2.5	1.1.1.1	0x8cb3	Standard query (0)	pxdrop.lijit.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:39.253130913 CEST	192.168.2.5	1.1.1.1	0x49f5	Standard query (0)	t.sharethis.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.253380060 CEST	192.168.2.5	1.1.1.1	0x36aa	Standard query (0)	t.sharethis.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:39.353066921 CEST	192.168.2.5	1.1.1.1	0xf0d4	Standard query (0)	cdn.tynt.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.353216887 CEST	192.168.2.5	1.1.1.1	0x1060	Standard query (0)	cdn.tynt.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:39.361704111 CEST	192.168.2.5	1.1.1.1	0x107	Standard query (0)	pd.sharethis.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.361898899 CEST	192.168.2.5	1.1.1.1	0xeacc	Standard query (0)	pd.sharethis.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:39.365658998 CEST	192.168.2.5	1.1.1.1	0x2fa3	Standard query (0)	ic.tynt.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.365797043 CEST	192.168.2.5	1.1.1.1	0x7f67	Standard query (0)	ic.tynt.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:39.367430925 CEST	192.168.2.5	1.1.1.1	0x251f	Standard query (0)	pxdrop.lijit.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.367564917 CEST	192.168.2.5	1.1.1.1	0xfc84	Standard query (0)	pxdrop.lijit.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:39.369204998 CEST	192.168.2.5	1.1.1.1	0x6c7	Standard query (0)	de.tynt.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.369338989 CEST	192.168.2.5	1.1.1.1	0x92cc	Standard query (0)	de.tynt.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:39.371607065 CEST	192.168.2.5	1.1.1.1	0x56a2	Standard query (0)	t.sharethis.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.371793032 CEST	192.168.2.5	1.1.1.1	0xab9b	Standard query (0)	t.sharethis.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:39.416156054 CEST	192.168.2.5	1.1.1.1	0x242d	Standard query (0)	tags.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.416316032 CEST	192.168.2.5	1.1.1.1	0x5147	Standard query (0)	tags.crwdcntrl.net	65	IN (0x0001)	false
Sep 10, 2024 18:10:39.416846991 CEST	192.168.2.5	1.1.1.1	0x150d	Standard query (0)	t.dtscdn.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.416986942 CEST	192.168.2.5	1.1.1.1	0x2923	Standard query (0)	t.dtscdn.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:39.417357922 CEST	192.168.2.5	1.1.1.1	0x5bfa	Standard query (0)	pixel.onaudience.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.417481899 CEST	192.168.2.5	1.1.1.1	0x10ae	Standard query (0)	pixel.onaudience.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:39.440850019 CEST	192.168.2.5	1.1.1.1	0xba14	Standard query (0)	tags.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.441018105 CEST	192.168.2.5	1.1.1.1	0x43c7	Standard query (0)	tags.crwdcntrl.net	65	IN (0x0001)	false
Sep 10, 2024 18:10:40.094625950 CEST	192.168.2.5	1.1.1.1	0x4486	Standard query (0)	t.dtscdn.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:40.095143080 CEST	192.168.2.5	1.1.1.1	0xeba6	Standard query (0)	t.dtscdn.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:40.604140997 CEST	192.168.2.5	1.1.1.1	0x9354	Standard query (0)	tags.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:40.604140997 CEST	192.168.2.5	1.1.1.1	0x1cf0	Standard query (0)	tags.crwdcntrl.net	65	IN (0x0001)	false
Sep 10, 2024 18:10:41.104243040 CEST	192.168.2.5	1.1.1.1	0xaafc	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:41.104243040 CEST	192.168.2.5	1.1.1.1	0x961d	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Sep 10, 2024 18:10:41.268604994 CEST	192.168.2.5	1.1.1.1	0x859f	Standard query (0)	ps.eyeota.net	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:41.268744946 CEST	192.168.2.5	1.1.1.1	0x290a	Standard query (0)	ps.eyeota.net	65	IN (0x0001)	false
Sep 10, 2024 18:10:41.676500082 CEST	192.168.2.5	1.1.1.1	0x38d9	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:41.676593065 CEST	192.168.2.5	1.1.1.1	0x2c87	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Sep 10, 2024 18:10:41.677675009 CEST	192.168.2.5	1.1.1.1	0xa823	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:41.677853107 CEST	192.168.2.5	1.1.1.1	0x4ca0	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:41.679050922 CEST	192.168.2.5	1.1.1.1	0x4053	Standard query (0)	ps.eyeota.net	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:41.679316044 CEST	192.168.2.5	1.1.1.1	0xbbd7	Standard query (0)	ps.eyeota.net	65	IN (0x0001)	false
Sep 10, 2024 18:10:41.680098057 CEST	192.168.2.5	1.1.1.1	0x2046	Standard query (0)	ml314.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:41.680294037 CEST	192.168.2.5	1.1.1.1	0xd285	Standard query (0)	ml314.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:42.620088100 CEST	192.168.2.5	1.1.1.1	0x7f8d	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:42.620320082 CEST	192.168.2.5	1.1.1.1	0x5e28	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Sep 10, 2024 18:10:43.307491064 CEST	192.168.2.5	1.1.1.1	0xbaff	Standard query (0)	sync.sharethis.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:43.307811975 CEST	192.168.2.5	1.1.1.1	0x3d2f	Standard query (0)	sync.sharethis.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:43.313189030 CEST	192.168.2.5	1.1.1.1	0x2208	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:43.313288927 CEST	192.168.2.5	1.1.1.1	0x380f	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Sep 10, 2024 18:10:44.460676908 CEST	192.168.2.5	1.1.1.1	0x63c9	Standard query (0)	sync.sharethis.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:44.460939884 CEST	192.168.2.5	1.1.1.1	0x87c4	Standard query (0)	sync.sharethis.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:44.679163933 CEST	192.168.2.5	1.1.1.1	0x4f6e	Standard query (0)	ml314.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:44.679382086 CEST	192.168.2.5	1.1.1.1	0x6dc0	Standard query (0)	ml314.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:46.337110996 CEST	192.168.2.5	1.1.1.1	0x52ec	Standard query (0)	d.turn.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:46.337304115 CEST	192.168.2.5	1.1.1.1	0xd3b3	Standard query (0)	d.turn.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:48.235536098 CEST	192.168.2.5	1.1.1.1	0xa05d	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:48.235713959 CEST	192.168.2.5	1.1.1.1	0xb1dd	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Sep 10, 2024 18:10:50.541940928 CEST	192.168.2.5	1.1.1.1	0x89bd	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:50.542051077 CEST	192.168.2.5	1.1.1.1	0xe492	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:51.692617893 CEST	192.168.2.5	1.1.1.1	0xd098	Standard query (0)	api.intentiq.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:51.692922115 CEST	192.168.2.5	1.1.1.1	0x76f8	Standard query (0)	api.intentiq.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:51.730948925 CEST	192.168.2.5	1.1.1.1	0x39ab	Standard query (0)	idpix.media6degrees.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:51.731095076 CEST	192.168.2.5	1.1.1.1	0x8f85	Standard query (0)	idpix.media6degrees.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:51.736357927 CEST	192.168.2.5	1.1.1.1	0x11d4	Standard query (0)	track2.securedvisit.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:51.737139940 CEST	192.168.2.5	1.1.1.1	0xca0a	Standard query (0)	track2.securedvisit.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:51.737139940 CEST	192.168.2.5	1.1.1.1	0xbf78	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:51.737530947 CEST	192.168.2.5	1.1.1.1	0x63a9	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:51.739304066 CEST	192.168.2.5	1.1.1.1	0xcbcd	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:51.739458084 CEST	192.168.2.5	1.1.1.1	0x813d	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:51.741445065 CEST	192.168.2.5	1.1.1.1	0x9bc3	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:51.741769075 CEST	192.168.2.5	1.1.1.1	0xe30c	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:51.756031990 CEST	192.168.2.5	1.1.1.1	0x9523	Standard query (0)	aqfer.lijit.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:51.756195068 CEST	192.168.2.5	1.1.1.1	0xf47d	Standard query (0)	aqfer.lijit.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:52.508260965 CEST	192.168.2.5	1.1.1.1	0x569b	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:52.508388042 CEST	192.168.2.5	1.1.1.1	0xd25c	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:52.839890957 CEST	192.168.2.5	1.1.1.1	0x145d	Standard query (0)	track2.securedvisit.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:52.840358973 CEST	192.168.2.5	1.1.1.1	0x23c3	Standard query (0)	track2.securedvisit.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:52.918320894 CEST	192.168.2.5	1.1.1.1	0x2c4d	Standard query (0)	agent.intentiq.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:52.918457985 CEST	192.168.2.5	1.1.1.1	0xcb0b	Standard query (0)	agent.intentiq.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:53.054492950 CEST	192.168.2.5	1.1.1.1	0xeb88	Standard query (0)	aqfer.lijit.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:53.054492950 CEST	192.168.2.5	1.1.1.1	0x6d60	Standard query (0)	aqfer.lijit.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:53.440954924 CEST	192.168.2.5	1.1.1.1	0x3ea3	Standard query (0)	cms.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:53.441133976 CEST	192.168.2.5	1.1.1.1	0x4aa5	Standard query (0)	cms.analytics.yahoo.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:53.582870960 CEST	192.168.2.5	1.1.1.1	0x1c1	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:53.582870960 CEST	192.168.2.5	1.1.1.1	0xa1f6	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:54.056586027 CEST	192.168.2.5	1.1.1.1	0xe643	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.056927919 CEST	192.168.2.5	1.1.1.1	0x3a4f	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:54.067569017 CEST	192.168.2.5	1.1.1.1	0x7982	Standard query (0)	agent.intentiq.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.067714930 CEST	192.168.2.5	1.1.1.1	0xd9c7	Standard query (0)	agent.intentiq.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:54.070056915 CEST	192.168.2.5	1.1.1.1	0x92df	Standard query (0)	ps.eyeota.net	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.070239067 CEST	192.168.2.5	1.1.1.1	0xe862	Standard query (0)	ps.eyeota.net	65	IN (0x0001)	false
Sep 10, 2024 18:10:54.074691057 CEST	192.168.2.5	1.1.1.1	0x34ea	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.074907064 CEST	192.168.2.5	1.1.1.1	0x9204	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:54.377780914 CEST	192.168.2.5	1.1.1.1	0xbfc7	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.378057003 CEST	192.168.2.5	1.1.1.1	0x9765	Standard query (0)	ups.analytics.yahoo.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:54.446805954 CEST	192.168.2.5	1.1.1.1	0x65d9	Standard query (0)	ce.lijit.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.447031975 CEST	192.168.2.5	1.1.1.1	0x3b79	Standard query (0)	ce.lijit.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:54.781871080 CEST	192.168.2.5	1.1.1.1	0xd668	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:54.781871080 CEST	192.168.2.5	1.1.1.1	0xabe0	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:55.820350885 CEST	192.168.2.5	1.1.1.1	0xbc32	Standard query (0)	i6.liadm.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:55.820453882 CEST	192.168.2.5	1.1.1.1	0x796	Standard query (0)	i6.liadm.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:56.744215012 CEST	192.168.2.5	1.1.1.1	0x40bb	Standard query (0)	sync.intentiq.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:56.744479895 CEST	192.168.2.5	1.1.1.1	0xfeac	Standard query (0)	sync.intentiq.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:57.350908995 CEST	192.168.2.5	1.1.1.1	0x3f5c	Standard query (0)	thrtle.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:57.350908995 CEST	192.168.2.5	1.1.1.1	0x3480	Standard query (0)	thrtle.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:58.194253922 CEST	192.168.2.5	1.1.1.1	0x8761	Standard query (0)	a.tribalfusion.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:58.194386959 CEST	192.168.2.5	1.1.1.1	0x668a	Standard query (0)	a.tribalfusion.com	65	IN (0x0001)	false
Sep 10, 2024 18:10:58.759509087 CEST	192.168.2.5	1.1.1.1	0x28d2	Standard query (0)	bcp.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:58.762866020 CEST	192.168.2.5	1.1.1.1	0x4e9b	Standard query (0)	bcp.crwdcntrl.net	65	IN (0x0001)	false
Sep 10, 2024 18:10:58.913342953 CEST	192.168.2.5	1.1.1.1	0x5756	Standard query (0)	s.tribalfusion.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:58.913342953 CEST	192.168.2.5	1.1.1.1	0x937a	Standard query (0)	s.tribalfusion.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:00.078391075 CEST	192.168.2.5	1.1.1.1	0xbefd	Standard query (0)	a.dtssrv.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:00.078716993 CEST	192.168.2.5	1.1.1.1	0xab27	Standard query (0)	a.dtssrv.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:02.159142971 CEST	192.168.2.5	1.1.1.1	0xb6ef	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:02.159286976 CEST	192.168.2.5	1.1.1.1	0x72ff	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Sep 10, 2024 18:11:02.159806967 CEST	192.168.2.5	1.1.1.1	0x73d	Standard query (0)	c.cintnetworks.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:02.159806967 CEST	192.168.2.5	1.1.1.1	0xeca0	Standard query (0)	c.cintnetworks.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:02.160281897 CEST	192.168.2.5	1.1.1.1	0x659c	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:02.160423040 CEST	192.168.2.5	1.1.1.1	0x282b	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:02.167804956 CEST	192.168.2.5	1.1.1.1	0xa2fc	Standard query (0)	image6.pubmatic.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:02.167968988 CEST	192.168.2.5	1.1.1.1	0x612a	Standard query (0)	image6.pubmatic.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:02.168287039 CEST	192.168.2.5	1.1.1.1	0x5c88	Standard query (0)	id5-sync.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:02.168535948 CEST	192.168.2.5	1.1.1.1	0xd6ef	Standard query (0)	id5-sync.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:02.168929100 CEST	192.168.2.5	1.1.1.1	0xbbb9	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:02.169020891 CEST	192.168.2.5	1.1.1.1	0x8ef8	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:02.169923067 CEST	192.168.2.5	1.1.1.1	0xeb8e	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:02.170295954 CEST	192.168.2.5	1.1.1.1	0x6efa	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:03.128078938 CEST	192.168.2.5	1.1.1.1	0xe148	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.128263950 CEST	192.168.2.5	1.1.1.1	0x6875	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Sep 10, 2024 18:11:03.140966892 CEST	192.168.2.5	1.1.1.1	0xd74c	Standard query (0)	i.w55c.net	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.141153097 CEST	192.168.2.5	1.1.1.1	0xa7f1	Standard query (0)	i.w55c.net	65	IN (0x0001)	false
Sep 10, 2024 18:11:03.207916021 CEST	192.168.2.5	1.1.1.1	0x250	Standard query (0)	c.cintnetworks.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.208106041 CEST	192.168.2.5	1.1.1.1	0x9cbc	Standard query (0)	c.cintnetworks.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:03.290379047 CEST	192.168.2.5	1.1.1.1	0x1b7c	Standard query (0)	global.ib-ibi.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.290852070 CEST	192.168.2.5	1.1.1.1	0x626d	Standard query (0)	global.ib-ibi.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:03.291536093 CEST	192.168.2.5	1.1.1.1	0x54bb	Standard query (0)	sync-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.291686058 CEST	192.168.2.5	1.1.1.1	0x55d6	Standard query (0)	sync-tm.everesttech.net	65	IN (0x0001)	false
Sep 10, 2024 18:11:03.294549942 CEST	192.168.2.5	1.1.1.1	0x2211	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.294869900 CEST	192.168.2.5	1.1.1.1	0x492	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:03.370970964 CEST	192.168.2.5	1.1.1.1	0xbe11	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.371120930 CEST	192.168.2.5	1.1.1.1	0x14b8	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Sep 10, 2024 18:11:03.450706959 CEST	192.168.2.5	1.1.1.1	0x41ef	Standard query (0)	s.amazon-adsystem.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.451401949 CEST	192.168.2.5	1.1.1.1	0xd17e	Standard query (0)	s.amazon-adsystem.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:03.887279034 CEST	192.168.2.5	1.1.1.1	0x5d4	Standard query (0)	sync.smartadserver.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.887578964 CEST	192.168.2.5	1.1.1.1	0xf016	Standard query (0)	sync.smartadserver.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:03.889966011 CEST	192.168.2.5	1.1.1.1	0xa03b	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.890094995 CEST	192.168.2.5	1.1.1.1	0xebf4	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:04.126146078 CEST	192.168.2.5	1.1.1.1	0xb8a1	Standard query (0)	ib.mookie1.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:04.126597881 CEST	192.168.2.5	1.1.1.1	0xfbf6	Standard query (0)	ib.mookie1.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:04.309097052 CEST	192.168.2.5	1.1.1.1	0x1bbb	Standard query (0)	pm.w55c.net	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:04.309293032 CEST	192.168.2.5	1.1.1.1	0x854d	Standard query (0)	pm.w55c.net	65	IN (0x0001)	false
Sep 10, 2024 18:11:04.472043037 CEST	192.168.2.5	1.1.1.1	0x8e17	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:04.472261906 CEST	192.168.2.5	1.1.1.1	0x3987	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Sep 10, 2024 18:11:04.941113949 CEST	192.168.2.5	1.1.1.1	0x1aa	Standard query (0)	pixel.tapad.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:04.941199064 CEST	192.168.2.5	1.1.1.1	0xc645	Standard query (0)	pixel.tapad.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:05.075169086 CEST	192.168.2.5	1.1.1.1	0x8374	Standard query (0)	dmp.truoptik.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.075627089 CEST	192.168.2.5	1.1.1.1	0x221e	Standard query (0)	dmp.truoptik.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:05.076900005 CEST	192.168.2.5	1.1.1.1	0x61a9	Standard query (0)	ib.mookie1.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.077142954 CEST	192.168.2.5	1.1.1.1	0xb2b0	Standard query (0)	ib.mookie1.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:05.082416058 CEST	192.168.2.5	1.1.1.1	0xd1a3	Standard query (0)	sync.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.082679033 CEST	192.168.2.5	1.1.1.1	0x6f2c	Standard query (0)	sync.srv.stackadapt.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:05.204112053 CEST	192.168.2.5	1.1.1.1	0xcb09	Standard query (0)	loadus.exelator.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.204232931 CEST	192.168.2.5	1.1.1.1	0xf82c	Standard query (0)	loadus.exelator.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:05.583734035 CEST	192.168.2.5	1.1.1.1	0x6be	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.583914995 CEST	192.168.2.5	1.1.1.1	0xcbc	Standard query (0)	ib.adnxs.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:05.620554924 CEST	192.168.2.5	1.1.1.1	0x7b17	Standard query (0)	c1.adform.net	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.620798111 CEST	192.168.2.5	1.1.1.1	0xbcd4	Standard query (0)	c1.adform.net	65	IN (0x0001)	false
Sep 10, 2024 18:11:05.627784014 CEST	192.168.2.5	1.1.1.1	0xf685	Standard query (0)	sync.smartadserver.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.627933979 CEST	192.168.2.5	1.1.1.1	0x15a0	Standard query (0)	sync.smartadserver.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:05.958740950 CEST	192.168.2.5	1.1.1.1	0x5f4a	Standard query (0)	d.turn.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.959080935 CEST	192.168.2.5	1.1.1.1	0x735f	Standard query (0)	d.turn.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:06.205949068 CEST	192.168.2.5	1.1.1.1	0x52e3	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:06.206274033 CEST	192.168.2.5	1.1.1.1	0x61e5	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:06.615171909 CEST	192.168.2.5	1.1.1.1	0x3050	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:06.615550041 CEST	192.168.2.5	1.1.1.1	0x61d0	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Sep 10, 2024 18:11:08.803612947 CEST	192.168.2.5	1.1.1.1	0xea9	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:08.803719997 CEST	192.168.2.5	1.1.1.1	0xd747	Standard query (0)	d.agkn.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:09.292412996 CEST	192.168.2.5	1.1.1.1	0x274f	Standard query (0)	rtd-tm.everesttech.net	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:09.292567968 CEST	192.168.2.5	1.1.1.1	0x2db4	Standard query (0)	rtd-tm.everesttech.net	65	IN (0x0001)	false
Sep 10, 2024 18:11:14.158565998 CEST	192.168.2.5	1.1.1.1	0x837d	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:14.161020041 CEST	192.168.2.5	1.1.1.1	0x161b	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:15.557055950 CEST	192.168.2.5	1.1.1.1	0x1806	Standard query (0)	e.dtscout.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:15.557593107 CEST	192.168.2.5	1.1.1.1	0xf93	Standard query (0)	e.dtscout.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:17.258873940 CEST	192.168.2.5	1.1.1.1	0x97ae	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:17.259412050 CEST	192.168.2.5	1.1.1.1	0xcf60	Standard query (0)	match.adsrvr.org	65	IN (0x0001)	false
Sep 10, 2024 18:11:17.956382036 CEST	192.168.2.5	1.1.1.1	0xa88c	Standard query (0)	dp2.33across.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:17.956795931 CEST	192.168.2.5	1.1.1.1	0xb784	Standard query (0)	dp2.33across.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:17.957926035 CEST	192.168.2.5	1.1.1.1	0xaceb	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:17.958049059 CEST	192.168.2.5	1.1.1.1	0xe860	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:17.958514929 CEST	192.168.2.5	1.1.1.1	0xf74d	Standard query (0)	live.rezync.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:17.958745956 CEST	192.168.2.5	1.1.1.1	0x562d	Standard query (0)	live.rezync.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:18.629590988 CEST	192.168.2.5	1.1.1.1	0x4cfb	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:18.631475925 CEST	192.168.2.5	1.1.1.1	0x1161	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:18.914473057 CEST	192.168.2.5	1.1.1.1	0x7475	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:18.914661884 CEST	192.168.2.5	1.1.1.1	0x4fd3	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:20.107922077 CEST	192.168.2.5	1.1.1.1	0x7cbf	Standard query (0)	stags.bluekai.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:20.108134031 CEST	192.168.2.5	1.1.1.1	0xdaa4	Standard query (0)	stags.bluekai.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:21.382688046 CEST	192.168.2.5	1.1.1.1	0xcbc0	Standard query (0)	i.liadm.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:21.382688046 CEST	192.168.2.5	1.1.1.1	0x4a07	Standard query (0)	i.liadm.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:22.369815111 CEST	192.168.2.5	1.1.1.1	0x4dd9	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:22.370765924 CEST	192.168.2.5	1.1.1.1	0x3502	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:22.445108891 CEST	192.168.2.5	1.1.1.1	0x4dc6	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:22.445580959 CEST	192.168.2.5	1.1.1.1	0x2241	Standard query (0)	pippio.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:23.616509914 CEST	192.168.2.5	1.1.1.1	0xcf77	Standard query (0)	api.powerafftrky.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:23.617213011 CEST	192.168.2.5	1.1.1.1	0x1c3c	Standard query (0)	api.powerafftrky.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:24.384393930 CEST	192.168.2.5	1.1.1.1	0xd83f	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:24.384788990 CEST	192.168.2.5	1.1.1.1	0x2d1d	Standard query (0)	pippio.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:24.387042046 CEST	192.168.2.5	1.1.1.1	0xbf73	Standard query (0)	tags.bluekai.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:24.387181044 CEST	192.168.2.5	1.1.1.1	0x759e	Standard query (0)	tags.bluekai.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:25.727900982 CEST	192.168.2.5	1.1.1.1	0x161a	Standard query (0)	go.greenlinknow.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:25.728173018 CEST	192.168.2.5	1.1.1.1	0x852a	Standard query (0)	go.greenlinknow.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:26.901963949 CEST	192.168.2.5	1.1.1.1	0xddbb	Standard query (0)	um.simpli.fi	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:26.902471066 CEST	192.168.2.5	1.1.1.1	0x912c	Standard query (0)	um.simpli.fi	65	IN (0x0001)	false
Sep 10, 2024 18:11:27.161367893 CEST	192.168.2.5	1.1.1.1	0xe6e	Standard query (0)	gametimepulse.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:27.161561012 CEST	192.168.2.5	1.1.1.1	0xc69a	Standard query (0)	gametimepulse.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:28.004643917 CEST	192.168.2.5	1.1.1.1	0xe86b	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:28.004779100 CEST	192.168.2.5	1.1.1.1	0x20bc	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:28.180495024 CEST	192.168.2.5	1.1.1.1	0xe484	Standard query (0)	token.rubiconproject.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:28.180680037 CEST	192.168.2.5	1.1.1.1	0xfdb7	Standard query (0)	token.rubiconproject.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:28.589612961 CEST	192.168.2.5	1.1.1.1	0xf19e	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:28.590061903 CEST	192.168.2.5	1.1.1.1	0x85c0	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:29.351995945 CEST	192.168.2.5	1.1.1.1	0x1579	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:29.352626085 CEST	192.168.2.5	1.1.1.1	0x58d7	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:30.180707932 CEST	192.168.2.5	1.1.1.1	0x8a78	Standard query (0)	gametimepulse.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:30.180845976 CEST	192.168.2.5	1.1.1.1	0x3824	Standard query (0)	gametimepulse.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:32.613082886 CEST	192.168.2.5	1.1.1.1	0x42eb	Standard query (0)	secureanalytic.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:32.613223076 CEST	192.168.2.5	1.1.1.1	0xc747	Standard query (0)	secureanalytic.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:33.071815014 CEST	192.168.2.5	1.1.1.1	0xb913	Standard query (0)	www.watchdogsecurity.online	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:33.071815014 CEST	192.168.2.5	1.1.1.1	0xa12	Standard query (0)	www.watchdogsecurity.online	65	IN (0x0001)	false
Sep 10, 2024 18:11:34.251925945 CEST	192.168.2.5	1.1.1.1	0xcc6	Standard query (0)	live.rezync.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:34.252392054 CEST	192.168.2.5	1.1.1.1	0xf220	Standard query (0)	live.rezync.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:34.690479040 CEST	192.168.2.5	1.1.1.1	0x321b	Standard query (0)	ww38.watchdogsecurity.online	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:34.691113949 CEST	192.168.2.5	1.1.1.1	0x64f	Standard query (0)	ww38.watchdogsecurity.online	65	IN (0x0001)	false
Sep 10, 2024 18:11:34.965749979 CEST	192.168.2.5	1.1.1.1	0xf834	Standard query (0)	secureanalytic.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:34.966428995 CEST	192.168.2.5	1.1.1.1	0xac43	Standard query (0)	secureanalytic.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:35.032618046 CEST	192.168.2.5	1.1.1.1	0x99b3	Standard query (0)	ww38.watchdogsecurity.online	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:35.032867908 CEST	192.168.2.5	1.1.1.1	0xc5fb	Standard query (0)	ww38.watchdogsecurity.online	65	IN (0x0001)	false
Sep 10, 2024 18:11:35.930993080 CEST	192.168.2.5	1.1.1.1	0x41b4	Standard query (0)	p.rfihub.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:35.931328058 CEST	192.168.2.5	1.1.1.1	0x45bc	Standard query (0)	p.rfihub.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:36.125919104 CEST	192.168.2.5	1.1.1.1	0x1fd9	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:36.126030922 CEST	192.168.2.5	1.1.1.1	0x4245	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
Sep 10, 2024 18:11:36.222409010 CEST	192.168.2.5	1.1.1.1	0xd81	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:36.222614050 CEST	192.168.2.5	1.1.1.1	0xacb3	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:37.365880966 CEST	192.168.2.5	1.1.1.1	0x834a	Standard query (0)	ww38.watchdogsecurity.online	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:37.366051912 CEST	192.168.2.5	1.1.1.1	0x9cf6	Standard query (0)	ww38.watchdogsecurity.online	65	IN (0x0001)	false
Sep 10, 2024 18:11:37.369437933 CEST	192.168.2.5	1.1.1.1	0x9601	Standard query (0)	d38psrni17bvxu.cloudfront.net	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:37.369704962 CEST	192.168.2.5	1.1.1.1	0x91ff	Standard query (0)	d38psrni17bvxu.cloudfront.net	65	IN (0x0001)	false
Sep 10, 2024 18:11:37.378506899 CEST	192.168.2.5	1.1.1.1	0x47dc	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:37.378626108 CEST	192.168.2.5	1.1.1.1	0x9dc	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Sep 10, 2024 18:11:37.820938110 CEST	192.168.2.5	1.1.1.1	0x1df9	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:37.821584940 CEST	192.168.2.5	1.1.1.1	0x1c46	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Sep 10, 2024 18:11:39.158951044 CEST	192.168.2.5	1.1.1.1	0x88ae	Standard query (0)	pippio.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:39.159125090 CEST	192.168.2.5	1.1.1.1	0xe7b7	Standard query (0)	pippio.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:40.206404924 CEST	192.168.2.5	1.1.1.1	0x6697	Standard query (0)	syndicatedsearch.goog	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:40.206468105 CEST	192.168.2.5	1.1.1.1	0x9b35	Standard query (0)	syndicatedsearch.goog	65	IN (0x0001)	false
Sep 10, 2024 18:11:40.496380091 CEST	192.168.2.5	1.1.1.1	0xde37	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:40.496965885 CEST	192.168.2.5	1.1.1.1	0xd769	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false
Sep 10, 2024 18:11:42.038789988 CEST	192.168.2.5	1.1.1.1	0xeef2	Standard query (0)	afs.googleusercontent.com	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:42.038975954 CEST	192.168.2.5	1.1.1.1	0x9107	Standard query (0)	afs.googleusercontent.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 10, 2024 18:10:27.014868021 CEST	1.1.1.1	192.168.2.5	0x6278	No error (0)	football-booster.freevisit1.com		217.21.73.115	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:28.081968069 CEST	1.1.1.1	192.168.2.5	0x7795	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:28.081968069 CEST	1.1.1.1	192.168.2.5	0x7795	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:28.082932949 CEST	1.1.1.1	192.168.2.5	0xdcb7	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Sep 10, 2024 18:10:28.098556042 CEST	1.1.1.1	192.168.2.5	0xdb50	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:28.098556042 CEST	1.1.1.1	192.168.2.5	0xdb50	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:28.100405931 CEST	1.1.1.1	192.168.2.5	0xe003	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Sep 10, 2024 18:10:28.816651106 CEST	1.1.1.1	192.168.2.5	0x528b	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:28.816651106 CEST	1.1.1.1	192.168.2.5	0x528b	No error (0)	ipv4.imgur.map.fastly.net		199.232.192.193	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:28.816651106 CEST	1.1.1.1	192.168.2.5	0x528b	No error (0)	ipv4.imgur.map.fastly.net		199.232.196.193	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:28.820024967 CEST	1.1.1.1	192.168.2.5	0xcdb1	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:29.261941910 CEST	1.1.1.1	192.168.2.5	0xa79	No error (0)	s7.addthis.com	s8.addthis.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:29.261941910 CEST	1.1.1.1	192.168.2.5	0xa79	No error (0)	s8.addthis.com	ds-s7.addthis.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:29.262698889 CEST	1.1.1.1	192.168.2.5	0x8261	No error (0)	s7.addthis.com	s8.addthis.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:29.262698889 CEST	1.1.1.1	192.168.2.5	0x8261	No error (0)	s8.addthis.com	ds-s7.addthis.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:29.368302107 CEST	1.1.1.1	192.168.2.5	0xbc46	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:29.368916035 CEST	1.1.1.1	192.168.2.5	0x7264	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 10, 2024 18:10:30.072091103 CEST	1.1.1.1	192.168.2.5	0xf102	No error (0)	s7.addthis.com	s8.addthis.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:30.072091103 CEST	1.1.1.1	192.168.2.5	0xf102	No error (0)	s8.addthis.com	ds-s7.addthis.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:30.489978075 CEST	1.1.1.1	192.168.2.5	0x2fe8	No error (0)	s7.addthis.com	s8.addthis.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:30.489978075 CEST	1.1.1.1	192.168.2.5	0x2fe8	No error (0)	s8.addthis.com	ds-s7.addthis.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:31.034339905 CEST	1.1.1.1	192.168.2.5	0x3763	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:31.034339905 CEST	1.1.1.1	192.168.2.5	0x3763	No error (0)	www3.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:31.035068035 CEST	1.1.1.1	192.168.2.5	0x4733	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:31.707283974 CEST	1.1.1.1	192.168.2.5	0x428e	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:31.707283974 CEST	1.1.1.1	192.168.2.5	0x428e	No error (0)	www3.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:31.707348108 CEST	1.1.1.1	192.168.2.5	0x7fe6	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:31.941418886 CEST	1.1.1.1	192.168.2.5	0x2959	No error (0)	football-booster.freevisit1.com		217.21.73.115	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:32.334948063 CEST	1.1.1.1	192.168.2.5	0x93ce	No error (0)	i.imgur.com	ipv4.imgur.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:32.334948063 CEST	1.1.1.1	192.168.2.5	0x93ce	No error (0)	ipv4.imgur.map.fastly.net		199.232.192.193	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:32.334948063 CEST	1.1.1.1	192.168.2.5	0x93ce	No error (0)	ipv4.imgur.map.fastly.net		199.232.196.193	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:32.420839071 CEST	1.1.1.1	192.168.2.5	0xa5d4	No error (0)	s7.addthis.com	s8.addthis.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:32.420839071 CEST	1.1.1.1	192.168.2.5	0xa5d4	No error (0)	s8.addthis.com	ds-s7.addthis.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:32.422049999 CEST	1.1.1.1	192.168.2.5	0x95eb	No error (0)	s7.addthis.com	s8.addthis.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:32.422049999 CEST	1.1.1.1	192.168.2.5	0x95eb	No error (0)	s8.addthis.com	ds-s7.addthis.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:33.046062946 CEST	1.1.1.1	192.168.2.5	0x6cc7	No error (0)	s10.histats.com	s10.histats.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:33.047707081 CEST	1.1.1.1	192.168.2.5	0x4a2f	No error (0)	s10.histats.com	s10.histats.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:33.567929029 CEST	1.1.1.1	192.168.2.5	0xf9b7	No error (0)	s10.histats.com	s10.histats.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:33.569911003 CEST	1.1.1.1	192.168.2.5	0x4346	No error (0)	s10.histats.com	s10.histats.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:33.592047930 CEST	1.1.1.1	192.168.2.5	0xe0c2	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:33.592047930 CEST	1.1.1.1	192.168.2.5	0xe0c2	No error (0)	www3.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:33.592782974 CEST	1.1.1.1	192.168.2.5	0x301b	No error (0)	translate.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:34.489670038 CEST	1.1.1.1	192.168.2.5	0x4fc8	No error (0)	s4.histats.com		149.56.240.127	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:34.489670038 CEST	1.1.1.1	192.168.2.5	0x4fc8	No error (0)	s4.histats.com		149.56.240.129	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:34.489670038 CEST	1.1.1.1	192.168.2.5	0x4fc8	No error (0)	s4.histats.com		149.56.240.31	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:34.489670038 CEST	1.1.1.1	192.168.2.5	0x4fc8	No error (0)	s4.histats.com		158.69.254.144	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:34.489670038 CEST	1.1.1.1	192.168.2.5	0x4fc8	No error (0)	s4.histats.com		149.56.240.131	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:34.489670038 CEST	1.1.1.1	192.168.2.5	0x4fc8	No error (0)	s4.histats.com		149.56.240.130	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:34.489670038 CEST	1.1.1.1	192.168.2.5	0x4fc8	No error (0)	s4.histats.com		149.56.240.128	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:34.489670038 CEST	1.1.1.1	192.168.2.5	0x4fc8	No error (0)	s4.histats.com		142.4.219.198	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:34.489670038 CEST	1.1.1.1	192.168.2.5	0x4fc8	No error (0)	s4.histats.com		54.39.128.117	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:34.489670038 CEST	1.1.1.1	192.168.2.5	0x4fc8	No error (0)	s4.histats.com		54.39.128.162	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:34.489670038 CEST	1.1.1.1	192.168.2.5	0x4fc8	No error (0)	s4.histats.com		54.39.156.32	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:34.489670038 CEST	1.1.1.1	192.168.2.5	0x4fc8	No error (0)	s4.histats.com		149.56.240.27	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:34.489670038 CEST	1.1.1.1	192.168.2.5	0x4fc8	No error (0)	s4.histats.com		149.56.240.132	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:34.602022886 CEST	1.1.1.1	192.168.2.5	0x8caa	No error (0)	s10.histats.com	s10.histats.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:34.602042913 CEST	1.1.1.1	192.168.2.5	0xfe43	No error (0)	s10.histats.com	s10.histats.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:34.632061958 CEST	1.1.1.1	192.168.2.5	0x2e1	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:34.632944107 CEST	1.1.1.1	192.168.2.5	0xd1f4	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 10, 2024 18:10:35.246077061 CEST	1.1.1.1	192.168.2.5	0xdaad	No error (0)	e.dtscout.com			65	IN (0x0001)	false
Sep 10, 2024 18:10:35.246093035 CEST	1.1.1.1	192.168.2.5	0x4ae6	No error (0)	e.dtscout.com		141.101.120.10	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:35.246093035 CEST	1.1.1.1	192.168.2.5	0x4ae6	No error (0)	e.dtscout.com		141.101.120.11	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:35.260494947 CEST	1.1.1.1	192.168.2.5	0xbfea	No error (0)	e.dtscout.com		141.101.120.10	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:35.260494947 CEST	1.1.1.1	192.168.2.5	0xbfea	No error (0)	e.dtscout.com		141.101.120.11	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:35.261646032 CEST	1.1.1.1	192.168.2.5	0x2cad	No error (0)	e.dtscout.com			65	IN (0x0001)	false
Sep 10, 2024 18:10:35.276495934 CEST	1.1.1.1	192.168.2.5	0x8462	No error (0)	s4.histats.com		54.39.128.162	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:35.276495934 CEST	1.1.1.1	192.168.2.5	0x8462	No error (0)	s4.histats.com		54.39.128.117	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:35.276495934 CEST	1.1.1.1	192.168.2.5	0x8462	No error (0)	s4.histats.com		149.56.240.27	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:35.276495934 CEST	1.1.1.1	192.168.2.5	0x8462	No error (0)	s4.histats.com		142.4.219.198	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:35.276495934 CEST	1.1.1.1	192.168.2.5	0x8462	No error (0)	s4.histats.com		149.56.240.131	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:35.276495934 CEST	1.1.1.1	192.168.2.5	0x8462	No error (0)	s4.histats.com		158.69.254.144	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:35.276495934 CEST	1.1.1.1	192.168.2.5	0x8462	No error (0)	s4.histats.com		54.39.156.32	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:35.276495934 CEST	1.1.1.1	192.168.2.5	0x8462	No error (0)	s4.histats.com		149.56.240.130	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:35.276495934 CEST	1.1.1.1	192.168.2.5	0x8462	No error (0)	s4.histats.com		149.56.240.31	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:35.276495934 CEST	1.1.1.1	192.168.2.5	0x8462	No error (0)	s4.histats.com		149.56.240.128	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:35.276495934 CEST	1.1.1.1	192.168.2.5	0x8462	No error (0)	s4.histats.com		149.56.240.127	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:35.276495934 CEST	1.1.1.1	192.168.2.5	0x8462	No error (0)	s4.histats.com		149.56.240.132	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:35.276495934 CEST	1.1.1.1	192.168.2.5	0x8462	No error (0)	s4.histats.com		149.56.240.129	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:35.658168077 CEST	1.1.1.1	192.168.2.5	0x55f3	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:35.659125090 CEST	1.1.1.1	192.168.2.5	0x2ceb	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 10, 2024 18:10:36.078948021 CEST	1.1.1.1	192.168.2.5	0xed69	No error (0)	t.dtscout.com		141.101.120.11	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:36.078948021 CEST	1.1.1.1	192.168.2.5	0xed69	No error (0)	t.dtscout.com		141.101.120.10	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:36.079766035 CEST	1.1.1.1	192.168.2.5	0x85c2	No error (0)	t.dtscout.com			65	IN (0x0001)	false
Sep 10, 2024 18:10:36.082297087 CEST	1.1.1.1	192.168.2.5	0xf21c	No error (0)	pxdrop.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:36.082887888 CEST	1.1.1.1	192.168.2.5	0x70fe	No error (0)	pxdrop.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:36.084748983 CEST	1.1.1.1	192.168.2.5	0x5199	No error (0)	pd.sharethis.com	thirdparty-logserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:36.085633039 CEST	1.1.1.1	192.168.2.5	0xf273	No error (0)	cdn.tynt.com	cdn.tynt.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:36.086218119 CEST	1.1.1.1	192.168.2.5	0xdf7d	No error (0)	t.dtscout.com		141.101.120.10	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:36.086218119 CEST	1.1.1.1	192.168.2.5	0xdf7d	No error (0)	t.dtscout.com		141.101.120.11	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:36.086229086 CEST	1.1.1.1	192.168.2.5	0x4f91	No error (0)	cdn.tynt.com	cdn.tynt.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:36.086950064 CEST	1.1.1.1	192.168.2.5	0xc2	No error (0)	t.dtscout.com			65	IN (0x0001)	false
Sep 10, 2024 18:10:36.087927103 CEST	1.1.1.1	192.168.2.5	0xe26	No error (0)	pd.sharethis.com	thirdparty-logserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:36.087927103 CEST	1.1.1.1	192.168.2.5	0xe26	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		54.93.159.243	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:36.087927103 CEST	1.1.1.1	192.168.2.5	0xe26	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		35.157.135.167	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:36.087927103 CEST	1.1.1.1	192.168.2.5	0xe26	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		3.73.251.164	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:36.236586094 CEST	1.1.1.1	192.168.2.5	0xaa5c	No error (0)	e.dtscout.com			65	IN (0x0001)	false
Sep 10, 2024 18:10:36.236862898 CEST	1.1.1.1	192.168.2.5	0xb387	No error (0)	e.dtscout.com		141.101.120.10	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:36.236862898 CEST	1.1.1.1	192.168.2.5	0xb387	No error (0)	e.dtscout.com		141.101.120.11	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:36.751389027 CEST	1.1.1.1	192.168.2.5	0x9867	No error (0)	pxdrop.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:36.752087116 CEST	1.1.1.1	192.168.2.5	0x339e	No error (0)	pxdrop.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:36.781836033 CEST	1.1.1.1	192.168.2.5	0xa13f	No error (0)	t.dtscout.com		141.101.120.11	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:36.781836033 CEST	1.1.1.1	192.168.2.5	0xa13f	No error (0)	t.dtscout.com		141.101.120.10	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:36.784315109 CEST	1.1.1.1	192.168.2.5	0xaafe	No error (0)	t.dtscout.com			65	IN (0x0001)	false
Sep 10, 2024 18:10:36.878710032 CEST	1.1.1.1	192.168.2.5	0xc212	No error (0)	ic.tynt.com		67.202.105.31	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:36.878710032 CEST	1.1.1.1	192.168.2.5	0xc212	No error (0)	ic.tynt.com		67.202.105.34	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:37.211585045 CEST	1.1.1.1	192.168.2.5	0xeef0	No error (0)	de.tynt.com		67.202.105.32	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:37.211585045 CEST	1.1.1.1	192.168.2.5	0xeef0	No error (0)	de.tynt.com		67.202.105.31	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:37.317614079 CEST	1.1.1.1	192.168.2.5	0x17c1	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:37.326472998 CEST	1.1.1.1	192.168.2.5	0x5b15	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:38.130769968 CEST	1.1.1.1	192.168.2.5	0x376d	No error (0)	pxdrop.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:38.134140968 CEST	1.1.1.1	192.168.2.5	0xa957	No error (0)	pxdrop.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:38.233988047 CEST	1.1.1.1	192.168.2.5	0xbd79	No error (0)	cdn-tc.33across.com	cdn-tc.33across.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:38.234677076 CEST	1.1.1.1	192.168.2.5	0xd042	No error (0)	cdn-tc.33across.com	cdn-tc.33across.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:38.235825062 CEST	1.1.1.1	192.168.2.5	0xe17a	No error (0)	i.simpli.fi		35.234.162.151	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:38.235825062 CEST	1.1.1.1	192.168.2.5	0xe17a	No error (0)	i.simpli.fi		35.204.89.238	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:38.566127062 CEST	1.1.1.1	192.168.2.5	0xb956	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:38.569350958 CEST	1.1.1.1	192.168.2.5	0xb24c	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:39.142550945 CEST	1.1.1.1	192.168.2.5	0xe8b1	No error (0)	pxdrop.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:39.263694048 CEST	1.1.1.1	192.168.2.5	0x36aa	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:39.270886898 CEST	1.1.1.1	192.168.2.5	0x49f5	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:39.360546112 CEST	1.1.1.1	192.168.2.5	0x1060	No error (0)	cdn.tynt.com	cdn.tynt.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:39.360937119 CEST	1.1.1.1	192.168.2.5	0xf0d4	No error (0)	cdn.tynt.com	cdn.tynt.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:39.369707108 CEST	1.1.1.1	192.168.2.5	0xeacc	No error (0)	pd.sharethis.com	thirdparty-logserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:39.371609926 CEST	1.1.1.1	192.168.2.5	0x107	No error (0)	pd.sharethis.com	thirdparty-logserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:39.371609926 CEST	1.1.1.1	192.168.2.5	0x107	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		3.73.251.164	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.371609926 CEST	1.1.1.1	192.168.2.5	0x107	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		54.93.159.243	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.371609926 CEST	1.1.1.1	192.168.2.5	0x107	No error (0)	thirdparty-logserver-lb.global.unified-prod.sharethis.net		35.157.135.167	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.372596025 CEST	1.1.1.1	192.168.2.5	0x2fa3	No error (0)	ic.tynt.com		67.202.105.32	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.372596025 CEST	1.1.1.1	192.168.2.5	0x2fa3	No error (0)	ic.tynt.com		67.202.105.34	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.374397039 CEST	1.1.1.1	192.168.2.5	0xfc84	No error (0)	pxdrop.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:39.375268936 CEST	1.1.1.1	192.168.2.5	0x251f	No error (0)	pxdrop.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:39.378990889 CEST	1.1.1.1	192.168.2.5	0x6c7	No error (0)	de.tynt.com		67.202.105.34	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.378990889 CEST	1.1.1.1	192.168.2.5	0x6c7	No error (0)	de.tynt.com		67.202.105.33	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.379004955 CEST	1.1.1.1	192.168.2.5	0x56a2	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:39.394886017 CEST	1.1.1.1	192.168.2.5	0xab9b	No error (0)	t.sharethis.com	cert1.a1.atm.aqfer.net.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:39.423571110 CEST	1.1.1.1	192.168.2.5	0x242d	No error (0)	tags.crwdcntrl.net		18.239.18.12	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.423571110 CEST	1.1.1.1	192.168.2.5	0x242d	No error (0)	tags.crwdcntrl.net		18.239.18.118	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.423571110 CEST	1.1.1.1	192.168.2.5	0x242d	No error (0)	tags.crwdcntrl.net		18.239.18.78	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.423571110 CEST	1.1.1.1	192.168.2.5	0x242d	No error (0)	tags.crwdcntrl.net		18.239.18.33	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.424648046 CEST	1.1.1.1	192.168.2.5	0x5bfa	No error (0)	pixel.onaudience.com		54.38.113.8	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.424648046 CEST	1.1.1.1	192.168.2.5	0x5bfa	No error (0)	pixel.onaudience.com		54.38.113.2	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.424648046 CEST	1.1.1.1	192.168.2.5	0x5bfa	No error (0)	pixel.onaudience.com		54.38.113.7	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.424648046 CEST	1.1.1.1	192.168.2.5	0x5bfa	No error (0)	pixel.onaudience.com		54.38.113.3	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.424648046 CEST	1.1.1.1	192.168.2.5	0x5bfa	No error (0)	pixel.onaudience.com		148.113.153.94	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.424648046 CEST	1.1.1.1	192.168.2.5	0x5bfa	No error (0)	pixel.onaudience.com		54.38.113.6	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.424648046 CEST	1.1.1.1	192.168.2.5	0x5bfa	No error (0)	pixel.onaudience.com		54.38.113.4	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.424648046 CEST	1.1.1.1	192.168.2.5	0x5bfa	No error (0)	pixel.onaudience.com		148.113.153.93	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.424648046 CEST	1.1.1.1	192.168.2.5	0x5bfa	No error (0)	pixel.onaudience.com		54.38.113.5	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.426166058 CEST	1.1.1.1	192.168.2.5	0x150d	No error (0)	t.dtscdn.com		104.26.12.60	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.426166058 CEST	1.1.1.1	192.168.2.5	0x150d	No error (0)	t.dtscdn.com		104.26.13.60	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.426166058 CEST	1.1.1.1	192.168.2.5	0x150d	No error (0)	t.dtscdn.com		172.67.74.186	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.426856995 CEST	1.1.1.1	192.168.2.5	0x2923	No error (0)	t.dtscdn.com			65	IN (0x0001)	false
Sep 10, 2024 18:10:39.447772980 CEST	1.1.1.1	192.168.2.5	0xba14	No error (0)	tags.crwdcntrl.net		18.239.18.33	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.447772980 CEST	1.1.1.1	192.168.2.5	0xba14	No error (0)	tags.crwdcntrl.net		18.239.18.78	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.447772980 CEST	1.1.1.1	192.168.2.5	0xba14	No error (0)	tags.crwdcntrl.net		18.239.18.118	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:39.447772980 CEST	1.1.1.1	192.168.2.5	0xba14	No error (0)	tags.crwdcntrl.net		18.239.18.12	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:40.101831913 CEST	1.1.1.1	192.168.2.5	0x4486	No error (0)	t.dtscdn.com		104.26.12.60	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:40.101831913 CEST	1.1.1.1	192.168.2.5	0x4486	No error (0)	t.dtscdn.com		172.67.74.186	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:40.101831913 CEST	1.1.1.1	192.168.2.5	0x4486	No error (0)	t.dtscdn.com		104.26.13.60	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:40.102572918 CEST	1.1.1.1	192.168.2.5	0xeba6	No error (0)	t.dtscdn.com			65	IN (0x0001)	false
Sep 10, 2024 18:10:40.615045071 CEST	1.1.1.1	192.168.2.5	0x9354	No error (0)	tags.crwdcntrl.net		18.239.18.78	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:40.615045071 CEST	1.1.1.1	192.168.2.5	0x9354	No error (0)	tags.crwdcntrl.net		18.239.18.118	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:40.615045071 CEST	1.1.1.1	192.168.2.5	0x9354	No error (0)	tags.crwdcntrl.net		18.239.18.12	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:40.615045071 CEST	1.1.1.1	192.168.2.5	0x9354	No error (0)	tags.crwdcntrl.net		18.239.18.33	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:40.779305935 CEST	1.1.1.1	192.168.2.5	0xa680	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:40.779305935 CEST	1.1.1.1	192.168.2.5	0xa680	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:41.112209082 CEST	1.1.1.1	192.168.2.5	0xaafc	No error (0)	bcp.crwdcntrl.net		18.202.126.138	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:41.112209082 CEST	1.1.1.1	192.168.2.5	0xaafc	No error (0)	bcp.crwdcntrl.net		54.228.75.221	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:41.112209082 CEST	1.1.1.1	192.168.2.5	0xaafc	No error (0)	bcp.crwdcntrl.net		54.76.106.86	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:41.112209082 CEST	1.1.1.1	192.168.2.5	0xaafc	No error (0)	bcp.crwdcntrl.net		52.51.155.209	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:41.112209082 CEST	1.1.1.1	192.168.2.5	0xaafc	No error (0)	bcp.crwdcntrl.net		52.30.93.119	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:41.112209082 CEST	1.1.1.1	192.168.2.5	0xaafc	No error (0)	bcp.crwdcntrl.net		54.77.7.79	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:41.112209082 CEST	1.1.1.1	192.168.2.5	0xaafc	No error (0)	bcp.crwdcntrl.net		34.255.251.67	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:41.112209082 CEST	1.1.1.1	192.168.2.5	0xaafc	No error (0)	bcp.crwdcntrl.net		34.247.104.223	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:41.275516033 CEST	1.1.1.1	192.168.2.5	0x859f	No error (0)	ps.eyeota.net		3.120.214.218	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:41.683257103 CEST	1.1.1.1	192.168.2.5	0x38d9	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:41.683257103 CEST	1.1.1.1	192.168.2.5	0x38d9	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:41.683257103 CEST	1.1.1.1	192.168.2.5	0x38d9	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:41.683257103 CEST	1.1.1.1	192.168.2.5	0x38d9	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:41.684760094 CEST	1.1.1.1	192.168.2.5	0xa823	No error (0)	idsync.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:41.686285973 CEST	1.1.1.1	192.168.2.5	0x4053	No error (0)	ps.eyeota.net		18.184.216.10	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:41.687081099 CEST	1.1.1.1	192.168.2.5	0x2046	No error (0)	ml314.com		34.117.77.79	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:42.627924919 CEST	1.1.1.1	192.168.2.5	0x7f8d	No error (0)	bcp.crwdcntrl.net		54.77.7.79	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:42.627924919 CEST	1.1.1.1	192.168.2.5	0x7f8d	No error (0)	bcp.crwdcntrl.net		52.30.93.119	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:42.627924919 CEST	1.1.1.1	192.168.2.5	0x7f8d	No error (0)	bcp.crwdcntrl.net		52.51.155.209	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:42.627924919 CEST	1.1.1.1	192.168.2.5	0x7f8d	No error (0)	bcp.crwdcntrl.net		34.255.251.67	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:42.627924919 CEST	1.1.1.1	192.168.2.5	0x7f8d	No error (0)	bcp.crwdcntrl.net		34.247.104.223	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:42.627924919 CEST	1.1.1.1	192.168.2.5	0x7f8d	No error (0)	bcp.crwdcntrl.net		54.76.106.86	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:42.627924919 CEST	1.1.1.1	192.168.2.5	0x7f8d	No error (0)	bcp.crwdcntrl.net		18.202.126.138	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:42.627924919 CEST	1.1.1.1	192.168.2.5	0x7f8d	No error (0)	bcp.crwdcntrl.net		54.228.75.221	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:43.315161943 CEST	1.1.1.1	192.168.2.5	0xbaff	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:43.315161943 CEST	1.1.1.1	192.168.2.5	0xbaff	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.71.234.132	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:43.315161943 CEST	1.1.1.1	192.168.2.5	0xbaff	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		35.156.118.53	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:43.315161943 CEST	1.1.1.1	192.168.2.5	0xbaff	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		18.193.35.89	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:43.317008972 CEST	1.1.1.1	192.168.2.5	0x3d2f	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:43.320759058 CEST	1.1.1.1	192.168.2.5	0x2208	No error (0)	cm.g.doubleclick.net		142.250.186.98	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:44.471601963 CEST	1.1.1.1	192.168.2.5	0x63c9	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:44.471601963 CEST	1.1.1.1	192.168.2.5	0x63c9	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		3.71.234.132	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:44.471601963 CEST	1.1.1.1	192.168.2.5	0x63c9	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		35.156.118.53	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:44.471601963 CEST	1.1.1.1	192.168.2.5	0x63c9	No error (0)	httplogserver-lb.global.unified-prod.sharethis.net		18.193.35.89	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:44.471618891 CEST	1.1.1.1	192.168.2.5	0x87c4	No error (0)	sync.sharethis.com	httplogserver-lb.global.unified-prod.sharethis.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:44.686829090 CEST	1.1.1.1	192.168.2.5	0x4f6e	No error (0)	ml314.com		34.117.77.79	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:46.344243050 CEST	1.1.1.1	192.168.2.5	0x52ec	No error (0)	d.turn.com	d-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:46.344243050 CEST	1.1.1.1	192.168.2.5	0x52ec	No error (0)	d-ams1.turn.com		46.228.164.13	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:46.344882011 CEST	1.1.1.1	192.168.2.5	0xd3b3	No error (0)	d.turn.com	d-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:48.242752075 CEST	1.1.1.1	192.168.2.5	0xa05d	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:48.242752075 CEST	1.1.1.1	192.168.2.5	0xa05d	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:48.242752075 CEST	1.1.1.1	192.168.2.5	0xa05d	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:48.243063927 CEST	1.1.1.1	192.168.2.5	0xb1dd	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:48.243063927 CEST	1.1.1.1	192.168.2.5	0xb1dd	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:48.243063927 CEST	1.1.1.1	192.168.2.5	0xb1dd	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:50.549937963 CEST	1.1.1.1	192.168.2.5	0x89bd	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:50.549937963 CEST	1.1.1.1	192.168.2.5	0x89bd	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:50.549937963 CEST	1.1.1.1	192.168.2.5	0x89bd	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:50.549937963 CEST	1.1.1.1	192.168.2.5	0x89bd	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:50.549937963 CEST	1.1.1.1	192.168.2.5	0x89bd	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:50.549937963 CEST	1.1.1.1	192.168.2.5	0x89bd	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:50.549937963 CEST	1.1.1.1	192.168.2.5	0x89bd	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:50.549937963 CEST	1.1.1.1	192.168.2.5	0x89bd	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:50.549937963 CEST	1.1.1.1	192.168.2.5	0x89bd	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:50.549937963 CEST	1.1.1.1	192.168.2.5	0x89bd	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:50.549937963 CEST	1.1.1.1	192.168.2.5	0x89bd	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:50.549937963 CEST	1.1.1.1	192.168.2.5	0x89bd	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:50.549937963 CEST	1.1.1.1	192.168.2.5	0x89bd	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:51.699744940 CEST	1.1.1.1	192.168.2.5	0xd098	No error (0)	api.intentiq.com		52.85.49.17	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:51.699744940 CEST	1.1.1.1	192.168.2.5	0xd098	No error (0)	api.intentiq.com		52.85.49.126	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:51.699744940 CEST	1.1.1.1	192.168.2.5	0xd098	No error (0)	api.intentiq.com		52.85.49.115	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:51.699744940 CEST	1.1.1.1	192.168.2.5	0xd098	No error (0)	api.intentiq.com		52.85.49.127	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:51.738532066 CEST	1.1.1.1	192.168.2.5	0x39ab	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:51.738532066 CEST	1.1.1.1	192.168.2.5	0x39ab	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:51.739526987 CEST	1.1.1.1	192.168.2.5	0x8f85	No error (0)	idpix.media6degrees.com	idpix.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:51.739526987 CEST	1.1.1.1	192.168.2.5	0x8f85	No error (0)	map.media6degrees.com	map.media6degrees.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:51.745851994 CEST	1.1.1.1	192.168.2.5	0xbf78	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:51.745851994 CEST	1.1.1.1	192.168.2.5	0xbf78	No error (0)	idaas-ext.cph.liveintent.com		3.212.66.47	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:51.745851994 CEST	1.1.1.1	192.168.2.5	0xbf78	No error (0)	idaas-ext.cph.liveintent.com		3.86.132.78	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:51.745851994 CEST	1.1.1.1	192.168.2.5	0xbf78	No error (0)	idaas-ext.cph.liveintent.com		44.198.119.221	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:51.745851994 CEST	1.1.1.1	192.168.2.5	0xbf78	No error (0)	idaas-ext.cph.liveintent.com		34.234.8.231	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:51.745851994 CEST	1.1.1.1	192.168.2.5	0xbf78	No error (0)	idaas-ext.cph.liveintent.com		52.20.196.167	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:51.745851994 CEST	1.1.1.1	192.168.2.5	0xbf78	No error (0)	idaas-ext.cph.liveintent.com		34.226.61.186	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:51.745851994 CEST	1.1.1.1	192.168.2.5	0xbf78	No error (0)	idaas-ext.cph.liveintent.com		54.144.175.64	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:51.745851994 CEST	1.1.1.1	192.168.2.5	0xbf78	No error (0)	idaas-ext.cph.liveintent.com		18.211.221.153	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:51.746660948 CEST	1.1.1.1	192.168.2.5	0x63a9	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:51.747688055 CEST	1.1.1.1	192.168.2.5	0xcbcd	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:51.747688055 CEST	1.1.1.1	192.168.2.5	0xcbcd	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:51.747716904 CEST	1.1.1.1	192.168.2.5	0x813d	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:51.747716904 CEST	1.1.1.1	192.168.2.5	0x813d	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:51.749906063 CEST	1.1.1.1	192.168.2.5	0x9bc3	No error (0)	thrtle.com		34.195.102.92	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:51.749906063 CEST	1.1.1.1	192.168.2.5	0x9bc3	No error (0)	thrtle.com		44.199.36.5	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:51.749906063 CEST	1.1.1.1	192.168.2.5	0x9bc3	No error (0)	thrtle.com		44.204.32.216	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:51.749906063 CEST	1.1.1.1	192.168.2.5	0x9bc3	No error (0)	thrtle.com		3.223.63.87	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:51.749906063 CEST	1.1.1.1	192.168.2.5	0x9bc3	No error (0)	thrtle.com		44.215.240.153	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:51.754774094 CEST	1.1.1.1	192.168.2.5	0x11d4	No error (0)	track2.securedvisit.com		3.221.132.94	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:51.754774094 CEST	1.1.1.1	192.168.2.5	0x11d4	No error (0)	track2.securedvisit.com		34.232.35.140	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:52.036596060 CEST	1.1.1.1	192.168.2.5	0x9523	No error (0)	aqfer.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:52.036628008 CEST	1.1.1.1	192.168.2.5	0xf47d	No error (0)	aqfer.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:52.515577078 CEST	1.1.1.1	192.168.2.5	0x569b	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:52.515577078 CEST	1.1.1.1	192.168.2.5	0x569b	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:52.515577078 CEST	1.1.1.1	192.168.2.5	0x569b	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		34.243.51.30	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:52.515577078 CEST	1.1.1.1	192.168.2.5	0x569b	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		63.33.250.40	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:52.515577078 CEST	1.1.1.1	192.168.2.5	0x569b	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		63.34.80.245	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:52.515577078 CEST	1.1.1.1	192.168.2.5	0x569b	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		34.252.209.204	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:52.515577078 CEST	1.1.1.1	192.168.2.5	0x569b	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		34.250.215.216	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:52.515577078 CEST	1.1.1.1	192.168.2.5	0x569b	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		3.248.82.136	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:52.515577078 CEST	1.1.1.1	192.168.2.5	0x569b	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.154.116.242	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:52.515577078 CEST	1.1.1.1	192.168.2.5	0x569b	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		99.80.199.252	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:52.517009974 CEST	1.1.1.1	192.168.2.5	0xd25c	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:52.517009974 CEST	1.1.1.1	192.168.2.5	0xd25c	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:52.848128080 CEST	1.1.1.1	192.168.2.5	0x145d	No error (0)	track2.securedvisit.com		34.232.35.140	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:52.848128080 CEST	1.1.1.1	192.168.2.5	0x145d	No error (0)	track2.securedvisit.com		3.221.132.94	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:52.929470062 CEST	1.1.1.1	192.168.2.5	0x2c4d	No error (0)	agent.intentiq.com	d1hmmdgobu85y9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:52.929470062 CEST	1.1.1.1	192.168.2.5	0x2c4d	No error (0)	d1hmmdgobu85y9.cloudfront.net		18.239.69.119	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:52.929470062 CEST	1.1.1.1	192.168.2.5	0x2c4d	No error (0)	d1hmmdgobu85y9.cloudfront.net		18.239.69.115	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:52.929470062 CEST	1.1.1.1	192.168.2.5	0x2c4d	No error (0)	d1hmmdgobu85y9.cloudfront.net		18.239.69.61	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:52.929470062 CEST	1.1.1.1	192.168.2.5	0x2c4d	No error (0)	d1hmmdgobu85y9.cloudfront.net		18.239.69.104	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:52.931057930 CEST	1.1.1.1	192.168.2.5	0xcb0b	No error (0)	agent.intentiq.com	d1hmmdgobu85y9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:53.064800978 CEST	1.1.1.1	192.168.2.5	0xeb88	No error (0)	aqfer.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:53.067362070 CEST	1.1.1.1	192.168.2.5	0x6d60	No error (0)	aqfer.lijit.com	a24365-c026.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:53.448489904 CEST	1.1.1.1	192.168.2.5	0x3ea3	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:53.448489904 CEST	1.1.1.1	192.168.2.5	0x3ea3	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:53.448489904 CEST	1.1.1.1	192.168.2.5	0x3ea3	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:53.448489904 CEST	1.1.1.1	192.168.2.5	0x3ea3	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:53.448489904 CEST	1.1.1.1	192.168.2.5	0x3ea3	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:53.449394941 CEST	1.1.1.1	192.168.2.5	0x4aa5	No error (0)	cms.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:53.449394941 CEST	1.1.1.1	192.168.2.5	0x4aa5	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:53.449394941 CEST	1.1.1.1	192.168.2.5	0x4aa5	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:53.589884043 CEST	1.1.1.1	192.168.2.5	0x1c1	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:53.589884043 CEST	1.1.1.1	192.168.2.5	0x1c1	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:53.590125084 CEST	1.1.1.1	192.168.2.5	0xa1f6	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:53.590125084 CEST	1.1.1.1	192.168.2.5	0xa1f6	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:54.065823078 CEST	1.1.1.1	192.168.2.5	0xe643	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:54.065823078 CEST	1.1.1.1	192.168.2.5	0xe643	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:54.065823078 CEST	1.1.1.1	192.168.2.5	0xe643	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:54.065823078 CEST	1.1.1.1	192.168.2.5	0xe643	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.065823078 CEST	1.1.1.1	192.168.2.5	0xe643	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.067081928 CEST	1.1.1.1	192.168.2.5	0x3a4f	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:54.067081928 CEST	1.1.1.1	192.168.2.5	0x3a4f	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:54.067081928 CEST	1.1.1.1	192.168.2.5	0x3a4f	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:54.077702999 CEST	1.1.1.1	192.168.2.5	0x92df	No error (0)	ps.eyeota.net		3.124.210.90	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.082570076 CEST	1.1.1.1	192.168.2.5	0x34ea	No error (0)	sync.intentiq.com		18.165.140.91	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.082570076 CEST	1.1.1.1	192.168.2.5	0x34ea	No error (0)	sync.intentiq.com		18.165.140.47	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.082570076 CEST	1.1.1.1	192.168.2.5	0x34ea	No error (0)	sync.intentiq.com		18.165.140.38	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.082570076 CEST	1.1.1.1	192.168.2.5	0x34ea	No error (0)	sync.intentiq.com		18.165.140.23	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.086366892 CEST	1.1.1.1	192.168.2.5	0xd9c7	No error (0)	agent.intentiq.com	d1hmmdgobu85y9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:54.093015909 CEST	1.1.1.1	192.168.2.5	0x7982	No error (0)	agent.intentiq.com	d1hmmdgobu85y9.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:54.093015909 CEST	1.1.1.1	192.168.2.5	0x7982	No error (0)	d1hmmdgobu85y9.cloudfront.net		143.204.98.21	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.093015909 CEST	1.1.1.1	192.168.2.5	0x7982	No error (0)	d1hmmdgobu85y9.cloudfront.net		143.204.98.65	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.093015909 CEST	1.1.1.1	192.168.2.5	0x7982	No error (0)	d1hmmdgobu85y9.cloudfront.net		143.204.98.22	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.093015909 CEST	1.1.1.1	192.168.2.5	0x7982	No error (0)	d1hmmdgobu85y9.cloudfront.net		143.204.98.42	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.385902882 CEST	1.1.1.1	192.168.2.5	0xbfc7	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:54.385902882 CEST	1.1.1.1	192.168.2.5	0xbfc7	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:54.385902882 CEST	1.1.1.1	192.168.2.5	0xbfc7	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:54.385902882 CEST	1.1.1.1	192.168.2.5	0xbfc7	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.75.62.37	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.385902882 CEST	1.1.1.1	192.168.2.5	0xbfc7	No error (0)	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		3.71.149.231	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.386540890 CEST	1.1.1.1	192.168.2.5	0x9765	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:54.386540890 CEST	1.1.1.1	192.168.2.5	0x9765	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:54.386540890 CEST	1.1.1.1	192.168.2.5	0x9765	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	ats-eks.eu-central-1.dcs-online-targeting-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:54.453516960 CEST	1.1.1.1	192.168.2.5	0x65d9	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:54.453516960 CEST	1.1.1.1	192.168.2.5	0x65d9	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:54.453516960 CEST	1.1.1.1	192.168.2.5	0x65d9	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		63.34.80.245	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.453516960 CEST	1.1.1.1	192.168.2.5	0x65d9	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		34.252.209.204	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.453516960 CEST	1.1.1.1	192.168.2.5	0x65d9	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		99.80.199.252	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.453516960 CEST	1.1.1.1	192.168.2.5	0x65d9	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.154.116.242	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.453516960 CEST	1.1.1.1	192.168.2.5	0x65d9	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		54.220.96.7	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.453516960 CEST	1.1.1.1	192.168.2.5	0x65d9	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		52.49.18.48	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.453516960 CEST	1.1.1.1	192.168.2.5	0x65d9	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		63.33.250.40	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.453516960 CEST	1.1.1.1	192.168.2.5	0x65d9	No error (0)	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		34.250.215.216	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.453651905 CEST	1.1.1.1	192.168.2.5	0x3b79	No error (0)	ce.lijit.com	ce-ew1.lijit.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:54.453651905 CEST	1.1.1.1	192.168.2.5	0x3b79	No error (0)	ce-ew1.lijit.com	raptor-prd-ew1-alb-2127381300.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:54.800205946 CEST	1.1.1.1	192.168.2.5	0xd668	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:54.815257072 CEST	1.1.1.1	192.168.2.5	0xabe0	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:54.815257072 CEST	1.1.1.1	192.168.2.5	0xabe0	No error (0)	idaas6.cph.liveintent.com		3.214.14.27	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.815257072 CEST	1.1.1.1	192.168.2.5	0xabe0	No error (0)	idaas6.cph.liveintent.com		52.6.40.178	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.815257072 CEST	1.1.1.1	192.168.2.5	0xabe0	No error (0)	idaas6.cph.liveintent.com		34.225.130.155	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:54.850554943 CEST	1.1.1.1	192.168.2.5	0xa4d8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:54.850554943 CEST	1.1.1.1	192.168.2.5	0xa4d8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:55.829534054 CEST	1.1.1.1	192.168.2.5	0xbc32	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:55.829534054 CEST	1.1.1.1	192.168.2.5	0xbc32	No error (0)	idaas6.cph.liveintent.com		52.6.40.178	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:55.829534054 CEST	1.1.1.1	192.168.2.5	0xbc32	No error (0)	idaas6.cph.liveintent.com		34.225.130.155	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:55.829534054 CEST	1.1.1.1	192.168.2.5	0xbc32	No error (0)	idaas6.cph.liveintent.com		3.214.14.27	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:55.831969023 CEST	1.1.1.1	192.168.2.5	0x796	No error (0)	i6.liadm.com	idaas6.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:10:56.752197027 CEST	1.1.1.1	192.168.2.5	0x40bb	No error (0)	sync.intentiq.com		18.239.69.3	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:56.752197027 CEST	1.1.1.1	192.168.2.5	0x40bb	No error (0)	sync.intentiq.com		18.239.69.109	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:56.752197027 CEST	1.1.1.1	192.168.2.5	0x40bb	No error (0)	sync.intentiq.com		18.239.69.49	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:56.752197027 CEST	1.1.1.1	192.168.2.5	0x40bb	No error (0)	sync.intentiq.com		18.239.69.99	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:57.359261990 CEST	1.1.1.1	192.168.2.5	0x3f5c	No error (0)	thrtle.com		44.199.36.5	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:57.359261990 CEST	1.1.1.1	192.168.2.5	0x3f5c	No error (0)	thrtle.com		44.215.240.153	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:57.359261990 CEST	1.1.1.1	192.168.2.5	0x3f5c	No error (0)	thrtle.com		44.204.32.216	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:57.359261990 CEST	1.1.1.1	192.168.2.5	0x3f5c	No error (0)	thrtle.com		3.223.63.87	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:57.359261990 CEST	1.1.1.1	192.168.2.5	0x3f5c	No error (0)	thrtle.com		34.195.102.92	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:58.202594042 CEST	1.1.1.1	192.168.2.5	0x8761	No error (0)	a.tribalfusion.com		104.18.37.193	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:58.202594042 CEST	1.1.1.1	192.168.2.5	0x8761	No error (0)	a.tribalfusion.com		172.64.150.63	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:58.202656984 CEST	1.1.1.1	192.168.2.5	0x668a	No error (0)	a.tribalfusion.com			65	IN (0x0001)	false
Sep 10, 2024 18:10:58.766895056 CEST	1.1.1.1	192.168.2.5	0x28d2	No error (0)	bcp.crwdcntrl.net		54.76.106.86	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:58.766895056 CEST	1.1.1.1	192.168.2.5	0x28d2	No error (0)	bcp.crwdcntrl.net		52.51.155.209	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:58.766895056 CEST	1.1.1.1	192.168.2.5	0x28d2	No error (0)	bcp.crwdcntrl.net		54.77.7.79	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:58.766895056 CEST	1.1.1.1	192.168.2.5	0x28d2	No error (0)	bcp.crwdcntrl.net		18.202.126.138	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:58.766895056 CEST	1.1.1.1	192.168.2.5	0x28d2	No error (0)	bcp.crwdcntrl.net		34.247.104.223	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:58.766895056 CEST	1.1.1.1	192.168.2.5	0x28d2	No error (0)	bcp.crwdcntrl.net		52.30.93.119	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:58.766895056 CEST	1.1.1.1	192.168.2.5	0x28d2	No error (0)	bcp.crwdcntrl.net		34.255.251.67	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:58.766895056 CEST	1.1.1.1	192.168.2.5	0x28d2	No error (0)	bcp.crwdcntrl.net		54.228.75.221	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:58.920327902 CEST	1.1.1.1	192.168.2.5	0x937a	No error (0)	s.tribalfusion.com			65	IN (0x0001)	false
Sep 10, 2024 18:10:58.920909882 CEST	1.1.1.1	192.168.2.5	0x5756	No error (0)	s.tribalfusion.com		172.64.150.63	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:10:58.920909882 CEST	1.1.1.1	192.168.2.5	0x5756	No error (0)	s.tribalfusion.com		104.18.37.193	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:00.086318970 CEST	1.1.1.1	192.168.2.5	0xbefd	No error (0)	a.dtssrv.com		104.21.34.180	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:00.086318970 CEST	1.1.1.1	192.168.2.5	0xbefd	No error (0)	a.dtssrv.com		172.67.163.146	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:00.092698097 CEST	1.1.1.1	192.168.2.5	0xab27	No error (0)	a.dtssrv.com			65	IN (0x0001)	false
Sep 10, 2024 18:11:02.166977882 CEST	1.1.1.1	192.168.2.5	0xb6ef	No error (0)	cm.g.doubleclick.net		142.250.185.194	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:02.168312073 CEST	1.1.1.1	192.168.2.5	0x73d	No error (0)	c.cintnetworks.com	collector-main.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:02.168312073 CEST	1.1.1.1	192.168.2.5	0x73d	No error (0)	cint-collector-euw.azurewebsites.net	waws-prod-am2-241.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:02.168312073 CEST	1.1.1.1	192.168.2.5	0x73d	No error (0)	waws-prod-am2-241.sip.azurewebsites.windows.net	waws-prod-am2-241.westeurope.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:02.168387890 CEST	1.1.1.1	192.168.2.5	0x659c	No error (0)	aa.agkn.com	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:02.168387890 CEST	1.1.1.1	192.168.2.5	0x659c	No error (0)	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		18.195.6.136	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:02.168387890 CEST	1.1.1.1	192.168.2.5	0x659c	No error (0)	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		18.158.7.165	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:02.168397903 CEST	1.1.1.1	192.168.2.5	0x282b	No error (0)	aa.agkn.com	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:02.169902086 CEST	1.1.1.1	192.168.2.5	0xeca0	No error (0)	c.cintnetworks.com	collector-main.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:02.169902086 CEST	1.1.1.1	192.168.2.5	0xeca0	No error (0)	cint-collector-euw.azurewebsites.net	waws-prod-am2-241.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:02.169902086 CEST	1.1.1.1	192.168.2.5	0xeca0	No error (0)	waws-prod-am2-241.sip.azurewebsites.windows.net	waws-prod-am2-241.westeurope.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:02.175620079 CEST	1.1.1.1	192.168.2.5	0xa2fc	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:02.175620079 CEST	1.1.1.1	192.168.2.5	0xa2fc	No error (0)	image6v2.pubmnet.com	pugm-lhrc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:02.175620079 CEST	1.1.1.1	192.168.2.5	0xa2fc	No error (0)	pugm-lhrc.pubmnet.com		185.64.190.78	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:02.175632000 CEST	1.1.1.1	192.168.2.5	0x612a	No error (0)	image6.pubmatic.com	image6v2.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:02.175632000 CEST	1.1.1.1	192.168.2.5	0x612a	No error (0)	image6v2.pubmnet.com	pugm-amsfpairbc.pubmnet.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:02.175642014 CEST	1.1.1.1	192.168.2.5	0x5c88	No error (0)	id5-sync.com		141.95.98.64	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:02.175642014 CEST	1.1.1.1	192.168.2.5	0x5c88	No error (0)	id5-sync.com		141.95.33.120	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:02.175642014 CEST	1.1.1.1	192.168.2.5	0x5c88	No error (0)	id5-sync.com		162.19.138.83	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:02.175642014 CEST	1.1.1.1	192.168.2.5	0x5c88	No error (0)	id5-sync.com		162.19.138.120	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:02.175642014 CEST	1.1.1.1	192.168.2.5	0x5c88	No error (0)	id5-sync.com		141.95.98.65	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:02.175642014 CEST	1.1.1.1	192.168.2.5	0x5c88	No error (0)	id5-sync.com		162.19.138.119	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:02.175642014 CEST	1.1.1.1	192.168.2.5	0x5c88	No error (0)	id5-sync.com		162.19.138.118	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:02.175642014 CEST	1.1.1.1	192.168.2.5	0x5c88	No error (0)	id5-sync.com		162.19.138.116	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:02.175642014 CEST	1.1.1.1	192.168.2.5	0x5c88	No error (0)	id5-sync.com		162.19.138.117	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:02.175642014 CEST	1.1.1.1	192.168.2.5	0x5c88	No error (0)	id5-sync.com		162.19.138.82	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:02.177453041 CEST	1.1.1.1	192.168.2.5	0xbbb9	No error (0)	s.amazon-adsystem.com		52.46.130.91	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:02.178468943 CEST	1.1.1.1	192.168.2.5	0xeb8e	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.134967089 CEST	1.1.1.1	192.168.2.5	0xe148	No error (0)	cm.g.doubleclick.net		142.250.184.226	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.148351908 CEST	1.1.1.1	192.168.2.5	0xd74c	No error (0)	i.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:03.148351908 CEST	1.1.1.1	192.168.2.5	0xd74c	No error (0)	cdn.w55c.net		3.120.50.134	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.148351908 CEST	1.1.1.1	192.168.2.5	0xd74c	No error (0)	cdn.w55c.net		52.28.235.6	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.148351908 CEST	1.1.1.1	192.168.2.5	0xd74c	No error (0)	cdn.w55c.net		3.121.121.163	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.148351908 CEST	1.1.1.1	192.168.2.5	0xd74c	No error (0)	cdn.w55c.net		3.69.191.108	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.148509979 CEST	1.1.1.1	192.168.2.5	0xa7f1	No error (0)	i.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:03.215337992 CEST	1.1.1.1	192.168.2.5	0x250	No error (0)	c.cintnetworks.com	collector-main.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:03.215337992 CEST	1.1.1.1	192.168.2.5	0x250	No error (0)	cint-collector-euw.azurewebsites.net	waws-prod-am2-241.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:03.215337992 CEST	1.1.1.1	192.168.2.5	0x250	No error (0)	waws-prod-am2-241.sip.azurewebsites.windows.net	waws-prod-am2-241.westeurope.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:03.240417004 CEST	1.1.1.1	192.168.2.5	0x9cbc	No error (0)	c.cintnetworks.com	collector-main.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:03.240417004 CEST	1.1.1.1	192.168.2.5	0x9cbc	No error (0)	cint-collector-euw.azurewebsites.net	waws-prod-am2-241.sip.azurewebsites.windows.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:03.240417004 CEST	1.1.1.1	192.168.2.5	0x9cbc	No error (0)	waws-prod-am2-241.sip.azurewebsites.windows.net	waws-prod-am2-241.westeurope.cloudapp.azure.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:03.297179937 CEST	1.1.1.1	192.168.2.5	0x1b7c	No error (0)	global.ib-ibi.com		216.46.185.182	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.297179937 CEST	1.1.1.1	192.168.2.5	0x1b7c	No error (0)	global.ib-ibi.com		69.169.86.38	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.297179937 CEST	1.1.1.1	192.168.2.5	0x1b7c	No error (0)	global.ib-ibi.com		64.58.232.179	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.297179937 CEST	1.1.1.1	192.168.2.5	0x1b7c	No error (0)	global.ib-ibi.com		69.169.85.6	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.297179937 CEST	1.1.1.1	192.168.2.5	0x1b7c	No error (0)	global.ib-ibi.com		216.46.185.183	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.297179937 CEST	1.1.1.1	192.168.2.5	0x1b7c	No error (0)	global.ib-ibi.com		64.58.232.176	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.297179937 CEST	1.1.1.1	192.168.2.5	0x1b7c	No error (0)	global.ib-ibi.com		54.94.182.41	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.298499107 CEST	1.1.1.1	192.168.2.5	0x54bb	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:03.298499107 CEST	1.1.1.1	192.168.2.5	0x54bb	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:03.298499107 CEST	1.1.1.1	192.168.2.5	0x54bb	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:03.299681902 CEST	1.1.1.1	192.168.2.5	0x55d6	No error (0)	sync-tm.everesttech.net	sync.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:03.299681902 CEST	1.1.1.1	192.168.2.5	0x55d6	No error (0)	sync.tubemogul.com	syncf.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:03.299681902 CEST	1.1.1.1	192.168.2.5	0x55d6	No error (0)	syncf.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:03.301482916 CEST	1.1.1.1	192.168.2.5	0x2211	No error (0)	aa.agkn.com	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:03.301482916 CEST	1.1.1.1	192.168.2.5	0x2211	No error (0)	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		18.195.6.136	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.301482916 CEST	1.1.1.1	192.168.2.5	0x2211	No error (0)	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		18.158.7.165	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.302561998 CEST	1.1.1.1	192.168.2.5	0x492	No error (0)	aa.agkn.com	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:03.378428936 CEST	1.1.1.1	192.168.2.5	0xbe11	No error (0)	sync.crwdcntrl.net		34.247.104.223	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.378428936 CEST	1.1.1.1	192.168.2.5	0xbe11	No error (0)	sync.crwdcntrl.net		52.51.155.209	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.378428936 CEST	1.1.1.1	192.168.2.5	0xbe11	No error (0)	sync.crwdcntrl.net		52.30.93.119	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.378428936 CEST	1.1.1.1	192.168.2.5	0xbe11	No error (0)	sync.crwdcntrl.net		54.76.106.86	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.378428936 CEST	1.1.1.1	192.168.2.5	0xbe11	No error (0)	sync.crwdcntrl.net		54.228.75.221	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.378428936 CEST	1.1.1.1	192.168.2.5	0xbe11	No error (0)	sync.crwdcntrl.net		34.255.251.67	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.378428936 CEST	1.1.1.1	192.168.2.5	0xbe11	No error (0)	sync.crwdcntrl.net		54.77.7.79	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.378428936 CEST	1.1.1.1	192.168.2.5	0xbe11	No error (0)	sync.crwdcntrl.net		18.202.126.138	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.458209991 CEST	1.1.1.1	192.168.2.5	0x41ef	No error (0)	s.amazon-adsystem.com		52.46.151.131	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.894541979 CEST	1.1.1.1	192.168.2.5	0x5d4	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:03.894541979 CEST	1.1.1.1	192.168.2.5	0x5d4	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:03.894541979 CEST	1.1.1.1	192.168.2.5	0x5d4	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.173	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.894541979 CEST	1.1.1.1	192.168.2.5	0x5d4	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.120	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.894541979 CEST	1.1.1.1	192.168.2.5	0x5d4	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.117	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.894541979 CEST	1.1.1.1	192.168.2.5	0x5d4	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.89	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.894541979 CEST	1.1.1.1	192.168.2.5	0x5d4	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.201	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.894541979 CEST	1.1.1.1	192.168.2.5	0x5d4	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.73	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.894541979 CEST	1.1.1.1	192.168.2.5	0x5d4	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.200	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.894541979 CEST	1.1.1.1	192.168.2.5	0x5d4	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.106	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.894541979 CEST	1.1.1.1	192.168.2.5	0x5d4	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.74	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.894541979 CEST	1.1.1.1	192.168.2.5	0x5d4	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.105	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.894541979 CEST	1.1.1.1	192.168.2.5	0x5d4	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.172	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.894541979 CEST	1.1.1.1	192.168.2.5	0x5d4	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.97	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.894541979 CEST	1.1.1.1	192.168.2.5	0x5d4	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.104	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.894541979 CEST	1.1.1.1	192.168.2.5	0x5d4	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.88	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.894541979 CEST	1.1.1.1	192.168.2.5	0x5d4	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.116	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.894541979 CEST	1.1.1.1	192.168.2.5	0x5d4	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.121	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.894718885 CEST	1.1.1.1	192.168.2.5	0xf016	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:03.894718885 CEST	1.1.1.1	192.168.2.5	0xf016	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:03.897346973 CEST	1.1.1.1	192.168.2.5	0xa03b	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:03.897346973 CEST	1.1.1.1	192.168.2.5	0xa03b	No error (0)	idaas-ext.cph.liveintent.com		3.221.1.219	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.897346973 CEST	1.1.1.1	192.168.2.5	0xa03b	No error (0)	idaas-ext.cph.liveintent.com		107.23.71.172	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.897346973 CEST	1.1.1.1	192.168.2.5	0xa03b	No error (0)	idaas-ext.cph.liveintent.com		34.234.8.231	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.897346973 CEST	1.1.1.1	192.168.2.5	0xa03b	No error (0)	idaas-ext.cph.liveintent.com		34.226.189.253	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.897346973 CEST	1.1.1.1	192.168.2.5	0xa03b	No error (0)	idaas-ext.cph.liveintent.com		44.198.119.221	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.897346973 CEST	1.1.1.1	192.168.2.5	0xa03b	No error (0)	idaas-ext.cph.liveintent.com		52.201.14.138	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.897346973 CEST	1.1.1.1	192.168.2.5	0xa03b	No error (0)	idaas-ext.cph.liveintent.com		3.219.98.129	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.897346973 CEST	1.1.1.1	192.168.2.5	0xa03b	No error (0)	idaas-ext.cph.liveintent.com		18.211.221.153	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:03.897850990 CEST	1.1.1.1	192.168.2.5	0xebf4	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:04.135216951 CEST	1.1.1.1	192.168.2.5	0xb8a1	No error (0)	ib.mookie1.com	m.ib-ibi.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:04.135216951 CEST	1.1.1.1	192.168.2.5	0xb8a1	No error (0)	m.ib-ibi.com		64.58.232.177	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:04.135216951 CEST	1.1.1.1	192.168.2.5	0xb8a1	No error (0)	m.ib-ibi.com		69.169.86.39	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:04.135216951 CEST	1.1.1.1	192.168.2.5	0xb8a1	No error (0)	m.ib-ibi.com		216.46.185.185	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:04.135216951 CEST	1.1.1.1	192.168.2.5	0xb8a1	No error (0)	m.ib-ibi.com		69.169.85.7	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:04.135216951 CEST	1.1.1.1	192.168.2.5	0xb8a1	No error (0)	m.ib-ibi.com		64.58.232.180	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:04.135216951 CEST	1.1.1.1	192.168.2.5	0xb8a1	No error (0)	m.ib-ibi.com		216.46.185.184	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:04.156836987 CEST	1.1.1.1	192.168.2.5	0xfbf6	No error (0)	ib.mookie1.com	m.ib-ibi.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:04.315995932 CEST	1.1.1.1	192.168.2.5	0x854d	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:04.316020966 CEST	1.1.1.1	192.168.2.5	0x1bbb	No error (0)	pm.w55c.net	cdn.w55c.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:04.316020966 CEST	1.1.1.1	192.168.2.5	0x1bbb	No error (0)	cdn.w55c.net		3.120.50.134	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:04.316020966 CEST	1.1.1.1	192.168.2.5	0x1bbb	No error (0)	cdn.w55c.net		3.69.191.108	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:04.316020966 CEST	1.1.1.1	192.168.2.5	0x1bbb	No error (0)	cdn.w55c.net		52.28.235.6	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:04.316020966 CEST	1.1.1.1	192.168.2.5	0x1bbb	No error (0)	cdn.w55c.net		3.121.121.163	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:04.481131077 CEST	1.1.1.1	192.168.2.5	0x8e17	No error (0)	sync.crwdcntrl.net		18.202.126.138	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:04.481131077 CEST	1.1.1.1	192.168.2.5	0x8e17	No error (0)	sync.crwdcntrl.net		52.30.93.119	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:04.481131077 CEST	1.1.1.1	192.168.2.5	0x8e17	No error (0)	sync.crwdcntrl.net		54.228.75.221	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:04.481131077 CEST	1.1.1.1	192.168.2.5	0x8e17	No error (0)	sync.crwdcntrl.net		52.51.155.209	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:04.481131077 CEST	1.1.1.1	192.168.2.5	0x8e17	No error (0)	sync.crwdcntrl.net		34.247.104.223	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:04.481131077 CEST	1.1.1.1	192.168.2.5	0x8e17	No error (0)	sync.crwdcntrl.net		54.76.106.86	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:04.481131077 CEST	1.1.1.1	192.168.2.5	0x8e17	No error (0)	sync.crwdcntrl.net		54.77.7.79	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:04.481131077 CEST	1.1.1.1	192.168.2.5	0x8e17	No error (0)	sync.crwdcntrl.net		34.255.251.67	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:04.950741053 CEST	1.1.1.1	192.168.2.5	0x1aa	No error (0)	pixel.tapad.com		34.111.113.62	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.081747055 CEST	1.1.1.1	192.168.2.5	0x8374	No error (0)	dmp.truoptik.com		104.17.111.254	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.081747055 CEST	1.1.1.1	192.168.2.5	0x8374	No error (0)	dmp.truoptik.com		104.17.208.58	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.081747055 CEST	1.1.1.1	192.168.2.5	0x8374	No error (0)	dmp.truoptik.com		104.16.192.58	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.081747055 CEST	1.1.1.1	192.168.2.5	0x8374	No error (0)	dmp.truoptik.com		104.18.80.52	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.081747055 CEST	1.1.1.1	192.168.2.5	0x8374	No error (0)	dmp.truoptik.com		104.17.127.254	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.084753990 CEST	1.1.1.1	192.168.2.5	0x221e	No error (0)	dmp.truoptik.com			65	IN (0x0001)	false
Sep 10, 2024 18:11:05.084765911 CEST	1.1.1.1	192.168.2.5	0x61a9	No error (0)	ib.mookie1.com	m.ib-ibi.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:05.084765911 CEST	1.1.1.1	192.168.2.5	0x61a9	No error (0)	m.ib-ibi.com		69.169.86.39	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.084765911 CEST	1.1.1.1	192.168.2.5	0x61a9	No error (0)	m.ib-ibi.com		64.58.232.177	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.084765911 CEST	1.1.1.1	192.168.2.5	0x61a9	No error (0)	m.ib-ibi.com		69.169.85.7	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.084765911 CEST	1.1.1.1	192.168.2.5	0x61a9	No error (0)	m.ib-ibi.com		216.46.185.184	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.084765911 CEST	1.1.1.1	192.168.2.5	0x61a9	No error (0)	m.ib-ibi.com		64.58.232.180	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.084765911 CEST	1.1.1.1	192.168.2.5	0x61a9	No error (0)	m.ib-ibi.com		216.46.185.185	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.086548090 CEST	1.1.1.1	192.168.2.5	0xb2b0	No error (0)	ib.mookie1.com	m.ib-ibi.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:05.089463949 CEST	1.1.1.1	192.168.2.5	0xd1a3	No error (0)	sync.srv.stackadapt.com		52.71.88.198	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.089463949 CEST	1.1.1.1	192.168.2.5	0xd1a3	No error (0)	sync.srv.stackadapt.com		54.211.170.55	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.089463949 CEST	1.1.1.1	192.168.2.5	0xd1a3	No error (0)	sync.srv.stackadapt.com		52.5.178.194	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.089463949 CEST	1.1.1.1	192.168.2.5	0xd1a3	No error (0)	sync.srv.stackadapt.com		54.146.100.139	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.089463949 CEST	1.1.1.1	192.168.2.5	0xd1a3	No error (0)	sync.srv.stackadapt.com		54.156.180.246	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.089463949 CEST	1.1.1.1	192.168.2.5	0xd1a3	No error (0)	sync.srv.stackadapt.com		54.221.222.74	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.089463949 CEST	1.1.1.1	192.168.2.5	0xd1a3	No error (0)	sync.srv.stackadapt.com		54.145.135.33	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.089463949 CEST	1.1.1.1	192.168.2.5	0xd1a3	No error (0)	sync.srv.stackadapt.com		52.73.60.141	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.211122990 CEST	1.1.1.1	192.168.2.5	0xcb09	No error (0)	loadus.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:05.211122990 CEST	1.1.1.1	192.168.2.5	0xcb09	No error (0)	loadus.tm.ssl.exelator.com	eu-west.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:05.211122990 CEST	1.1.1.1	192.168.2.5	0xcb09	No error (0)	eu-west.load.exelator.com	load-euw1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:05.211122990 CEST	1.1.1.1	192.168.2.5	0xcb09	No error (0)	load-euw1.exelator.com		34.254.143.3	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.211878061 CEST	1.1.1.1	192.168.2.5	0xf82c	No error (0)	loadus.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:05.211878061 CEST	1.1.1.1	192.168.2.5	0xf82c	No error (0)	loadus.tm.ssl.exelator.com	eu-west.load.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:05.211878061 CEST	1.1.1.1	192.168.2.5	0xf82c	No error (0)	eu-west.load.exelator.com	load-euw1.exelator.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:05.591141939 CEST	1.1.1.1	192.168.2.5	0x6be	No error (0)	ib.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:05.591141939 CEST	1.1.1.1	192.168.2.5	0x6be	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.591141939 CEST	1.1.1.1	192.168.2.5	0x6be	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.591141939 CEST	1.1.1.1	192.168.2.5	0x6be	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.591141939 CEST	1.1.1.1	192.168.2.5	0x6be	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.591141939 CEST	1.1.1.1	192.168.2.5	0x6be	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.591141939 CEST	1.1.1.1	192.168.2.5	0x6be	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.591141939 CEST	1.1.1.1	192.168.2.5	0x6be	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.591141939 CEST	1.1.1.1	192.168.2.5	0x6be	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.591141939 CEST	1.1.1.1	192.168.2.5	0x6be	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.591141939 CEST	1.1.1.1	192.168.2.5	0x6be	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.591141939 CEST	1.1.1.1	192.168.2.5	0x6be	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.591141939 CEST	1.1.1.1	192.168.2.5	0x6be	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.628268003 CEST	1.1.1.1	192.168.2.5	0x7b17	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:05.628485918 CEST	1.1.1.1	192.168.2.5	0xbcd4	No error (0)	c1.adform.net	track.adformnet.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:05.634908915 CEST	1.1.1.1	192.168.2.5	0x15a0	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:05.634908915 CEST	1.1.1.1	192.168.2.5	0x15a0	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:05.635463953 CEST	1.1.1.1	192.168.2.5	0xf685	No error (0)	sync.smartadserver.com	rtb-csync.smartadserver.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:05.635463953 CEST	1.1.1.1	192.168.2.5	0xf685	No error (0)	rtb-csync.smartadserver.com	rtb-csync-geo.usersync-prod-sas.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:05.635463953 CEST	1.1.1.1	192.168.2.5	0xf685	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.116	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.635463953 CEST	1.1.1.1	192.168.2.5	0xf685	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.201	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.635463953 CEST	1.1.1.1	192.168.2.5	0xf685	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.74	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.635463953 CEST	1.1.1.1	192.168.2.5	0xf685	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.88	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.635463953 CEST	1.1.1.1	192.168.2.5	0xf685	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.104	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.635463953 CEST	1.1.1.1	192.168.2.5	0xf685	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.200	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.635463953 CEST	1.1.1.1	192.168.2.5	0xf685	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.172	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.635463953 CEST	1.1.1.1	192.168.2.5	0xf685	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.121	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.635463953 CEST	1.1.1.1	192.168.2.5	0xf685	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.89	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.635463953 CEST	1.1.1.1	192.168.2.5	0xf685	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.173	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.635463953 CEST	1.1.1.1	192.168.2.5	0xf685	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.192.73	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.635463953 CEST	1.1.1.1	192.168.2.5	0xf685	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.120	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.635463953 CEST	1.1.1.1	192.168.2.5	0xf685	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.117	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.635463953 CEST	1.1.1.1	192.168.2.5	0xf685	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.106	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.635463953 CEST	1.1.1.1	192.168.2.5	0xf685	No error (0)	rtb-csync-euw1.smartadserver.com		89.149.193.105	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.635463953 CEST	1.1.1.1	192.168.2.5	0xf685	No error (0)	rtb-csync-euw1.smartadserver.com		81.17.55.97	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:05.966814995 CEST	1.1.1.1	192.168.2.5	0x735f	No error (0)	d.turn.com	d-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:05.967067003 CEST	1.1.1.1	192.168.2.5	0x5f4a	No error (0)	d.turn.com	d-ams1.turn.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:05.967067003 CEST	1.1.1.1	192.168.2.5	0x5f4a	No error (0)	d-ams1.turn.com		46.228.164.13	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:06.213536978 CEST	1.1.1.1	192.168.2.5	0x52e3	No error (0)	secure.adnxs.com	xandr-g-geo.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:06.213536978 CEST	1.1.1.1	192.168.2.5	0x52e3	No error (0)	ib.anycast.adnxs.com		185.89.210.180	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:06.213536978 CEST	1.1.1.1	192.168.2.5	0x52e3	No error (0)	ib.anycast.adnxs.com		185.89.211.84	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:06.213536978 CEST	1.1.1.1	192.168.2.5	0x52e3	No error (0)	ib.anycast.adnxs.com		185.89.210.212	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:06.213536978 CEST	1.1.1.1	192.168.2.5	0x52e3	No error (0)	ib.anycast.adnxs.com		185.89.211.116	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:06.213536978 CEST	1.1.1.1	192.168.2.5	0x52e3	No error (0)	ib.anycast.adnxs.com		185.89.210.153	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:06.213536978 CEST	1.1.1.1	192.168.2.5	0x52e3	No error (0)	ib.anycast.adnxs.com		185.89.210.244	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:06.213536978 CEST	1.1.1.1	192.168.2.5	0x52e3	No error (0)	ib.anycast.adnxs.com		185.89.210.90	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:06.213536978 CEST	1.1.1.1	192.168.2.5	0x52e3	No error (0)	ib.anycast.adnxs.com		185.89.210.82	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:06.213536978 CEST	1.1.1.1	192.168.2.5	0x52e3	No error (0)	ib.anycast.adnxs.com		185.89.210.46	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:06.213536978 CEST	1.1.1.1	192.168.2.5	0x52e3	No error (0)	ib.anycast.adnxs.com		185.89.210.122	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:06.213536978 CEST	1.1.1.1	192.168.2.5	0x52e3	No error (0)	ib.anycast.adnxs.com		185.89.210.141	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:06.213536978 CEST	1.1.1.1	192.168.2.5	0x52e3	No error (0)	ib.anycast.adnxs.com		185.89.210.20	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:06.622051954 CEST	1.1.1.1	192.168.2.5	0x3050	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:06.622051954 CEST	1.1.1.1	192.168.2.5	0x3050	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:06.622051954 CEST	1.1.1.1	192.168.2.5	0x3050	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:06.622051954 CEST	1.1.1.1	192.168.2.5	0x3050	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.170.228.31	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:06.622051954 CEST	1.1.1.1	192.168.2.5	0x3050	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.75.32.208	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:06.622051954 CEST	1.1.1.1	192.168.2.5	0x3050	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.210.151.69	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:06.622051954 CEST	1.1.1.1	192.168.2.5	0x3050	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.17.26.217	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:06.622051954 CEST	1.1.1.1	192.168.2.5	0x3050	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		63.34.203.206	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:06.622051954 CEST	1.1.1.1	192.168.2.5	0x3050	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		34.250.242.119	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:06.622051954 CEST	1.1.1.1	192.168.2.5	0x3050	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		52.18.50.154	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:06.622051954 CEST	1.1.1.1	192.168.2.5	0x3050	No error (0)	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		54.194.97.100	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:06.623270035 CEST	1.1.1.1	192.168.2.5	0x61d0	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:06.623270035 CEST	1.1.1.1	192.168.2.5	0x61d0	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:06.623270035 CEST	1.1.1.1	192.168.2.5	0x61d0	No error (0)	edge-irl1.demdex.net	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:08.810902119 CEST	1.1.1.1	192.168.2.5	0xea9	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:08.810902119 CEST	1.1.1.1	192.168.2.5	0xea9	No error (0)	data.agkn.com	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:08.810902119 CEST	1.1.1.1	192.168.2.5	0xea9	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		3.120.46.195	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:08.810902119 CEST	1.1.1.1	192.168.2.5	0xea9	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		3.75.45.156	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:08.811774969 CEST	1.1.1.1	192.168.2.5	0xd747	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:08.811774969 CEST	1.1.1.1	192.168.2.5	0xd747	No error (0)	data.agkn.com	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:09.301291943 CEST	1.1.1.1	192.168.2.5	0x274f	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:09.301291943 CEST	1.1.1.1	192.168.2.5	0x274f	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:09.302464008 CEST	1.1.1.1	192.168.2.5	0x2db4	No error (0)	rtd-tm.everesttech.net	rtd.tubemogul.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:09.302464008 CEST	1.1.1.1	192.168.2.5	0x2db4	No error (0)	rtd.tubemogul.com	h2.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:13.207926035 CEST	1.1.1.1	192.168.2.5	0x5341	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:13.207926035 CEST	1.1.1.1	192.168.2.5	0x5341	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:14.166013002 CEST	1.1.1.1	192.168.2.5	0x837d	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:14.169015884 CEST	1.1.1.1	192.168.2.5	0x161b	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:15.565202951 CEST	1.1.1.1	192.168.2.5	0x1806	No error (0)	e.dtscout.com		141.101.120.11	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:15.565202951 CEST	1.1.1.1	192.168.2.5	0x1806	No error (0)	e.dtscout.com		141.101.120.10	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:15.565221071 CEST	1.1.1.1	192.168.2.5	0xf93	No error (0)	e.dtscout.com			65	IN (0x0001)	false
Sep 10, 2024 18:11:17.267860889 CEST	1.1.1.1	192.168.2.5	0x97ae	No error (0)	match.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:17.267860889 CEST	1.1.1.1	192.168.2.5	0x97ae	No error (0)	match.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:17.267860889 CEST	1.1.1.1	192.168.2.5	0x97ae	No error (0)	match.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:17.267860889 CEST	1.1.1.1	192.168.2.5	0x97ae	No error (0)	match.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:17.965320110 CEST	1.1.1.1	192.168.2.5	0xf74d	No error (0)	live.rezync.com		13.32.27.83	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:17.965320110 CEST	1.1.1.1	192.168.2.5	0xf74d	No error (0)	live.rezync.com		13.32.27.99	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:17.965320110 CEST	1.1.1.1	192.168.2.5	0xf74d	No error (0)	live.rezync.com		13.32.27.28	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:17.965320110 CEST	1.1.1.1	192.168.2.5	0xf74d	No error (0)	live.rezync.com		13.32.27.113	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:17.965333939 CEST	1.1.1.1	192.168.2.5	0xaceb	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:17.965333939 CEST	1.1.1.1	192.168.2.5	0xaceb	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:17.967436075 CEST	1.1.1.1	192.168.2.5	0xe860	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:17.967436075 CEST	1.1.1.1	192.168.2.5	0xe860	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:17.967809916 CEST	1.1.1.1	192.168.2.5	0xa88c	No error (0)	dp2.33across.com		67.202.105.22	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:17.967809916 CEST	1.1.1.1	192.168.2.5	0xa88c	No error (0)	dp2.33across.com		67.202.105.24	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:18.640130997 CEST	1.1.1.1	192.168.2.5	0x4cfb	No error (0)	aa.agkn.com	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:18.640130997 CEST	1.1.1.1	192.168.2.5	0x4cfb	No error (0)	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		54.72.64.168	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:18.640130997 CEST	1.1.1.1	192.168.2.5	0x4cfb	No error (0)	ActivationEdge-activation-212358690.eu-west-1.elb.amazonaws.com		52.212.149.68	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:18.643132925 CEST	1.1.1.1	192.168.2.5	0x1161	No error (0)	aa.agkn.com	ActivationEdge-activation-1631408035.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:18.921577930 CEST	1.1.1.1	192.168.2.5	0x7475	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:18.921577930 CEST	1.1.1.1	192.168.2.5	0x7475	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:18.922060966 CEST	1.1.1.1	192.168.2.5	0x4fd3	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:18.922060966 CEST	1.1.1.1	192.168.2.5	0x4fd3	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:20.115457058 CEST	1.1.1.1	192.168.2.5	0x7cbf	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:20.115813017 CEST	1.1.1.1	192.168.2.5	0xdaa4	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:21.390120029 CEST	1.1.1.1	192.168.2.5	0xcbc0	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:21.390120029 CEST	1.1.1.1	192.168.2.5	0xcbc0	No error (0)	idaas-ext.cph.liveintent.com		52.3.139.193	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:21.390120029 CEST	1.1.1.1	192.168.2.5	0xcbc0	No error (0)	idaas-ext.cph.liveintent.com		34.234.8.231	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:21.390120029 CEST	1.1.1.1	192.168.2.5	0xcbc0	No error (0)	idaas-ext.cph.liveintent.com		52.201.14.138	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:21.390120029 CEST	1.1.1.1	192.168.2.5	0xcbc0	No error (0)	idaas-ext.cph.liveintent.com		18.211.221.153	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:21.390120029 CEST	1.1.1.1	192.168.2.5	0xcbc0	No error (0)	idaas-ext.cph.liveintent.com		52.201.92.115	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:21.390120029 CEST	1.1.1.1	192.168.2.5	0xcbc0	No error (0)	idaas-ext.cph.liveintent.com		44.198.119.221	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:21.390120029 CEST	1.1.1.1	192.168.2.5	0xcbc0	No error (0)	idaas-ext.cph.liveintent.com		3.212.66.47	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:21.390120029 CEST	1.1.1.1	192.168.2.5	0xcbc0	No error (0)	idaas-ext.cph.liveintent.com		184.73.251.106	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:21.391889095 CEST	1.1.1.1	192.168.2.5	0x4a07	No error (0)	i.liadm.com	idaas-ext.cph.liveintent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:22.378715992 CEST	1.1.1.1	192.168.2.5	0x4dd9	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:22.379228115 CEST	1.1.1.1	192.168.2.5	0x3502	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:22.452698946 CEST	1.1.1.1	192.168.2.5	0x4dc6	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:23.629415035 CEST	1.1.1.1	192.168.2.5	0xcf77	No error (0)	api.powerafftrky.com		172.67.210.92	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:23.629415035 CEST	1.1.1.1	192.168.2.5	0xcf77	No error (0)	api.powerafftrky.com		104.21.69.163	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:23.670514107 CEST	1.1.1.1	192.168.2.5	0x1c3c	No error (0)	api.powerafftrky.com			65	IN (0x0001)	false
Sep 10, 2024 18:11:24.391794920 CEST	1.1.1.1	192.168.2.5	0xd83f	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:24.396075010 CEST	1.1.1.1	192.168.2.5	0xbf73	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:24.396085978 CEST	1.1.1.1	192.168.2.5	0x759e	No error (0)	tags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:25.756880045 CEST	1.1.1.1	192.168.2.5	0x161a	No error (0)	go.greenlinknow.com	mo-prod-700625618.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:25.756880045 CEST	1.1.1.1	192.168.2.5	0x161a	No error (0)	mo-prod-700625618.us-east-1.elb.amazonaws.com		44.214.62.67	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:25.756880045 CEST	1.1.1.1	192.168.2.5	0x161a	No error (0)	mo-prod-700625618.us-east-1.elb.amazonaws.com		52.200.236.64	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:25.764132977 CEST	1.1.1.1	192.168.2.5	0x852a	No error (0)	go.greenlinknow.com	mo-prod-700625618.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:26.909205914 CEST	1.1.1.1	192.168.2.5	0xddbb	No error (0)	um.simpli.fi		35.204.74.118	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:26.909205914 CEST	1.1.1.1	192.168.2.5	0xddbb	No error (0)	um.simpli.fi		34.91.62.186	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:26.909205914 CEST	1.1.1.1	192.168.2.5	0xddbb	No error (0)	um.simpli.fi		35.204.158.49	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:27.175333023 CEST	1.1.1.1	192.168.2.5	0xc69a	No error (0)	gametimepulse.com			65	IN (0x0001)	false
Sep 10, 2024 18:11:27.197506905 CEST	1.1.1.1	192.168.2.5	0xe6e	No error (0)	gametimepulse.com		172.67.221.214	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:27.197506905 CEST	1.1.1.1	192.168.2.5	0xe6e	No error (0)	gametimepulse.com		104.21.67.116	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:28.011878967 CEST	1.1.1.1	192.168.2.5	0xe86b	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:28.187589884 CEST	1.1.1.1	192.168.2.5	0xe484	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:28.187604904 CEST	1.1.1.1	192.168.2.5	0xfdb7	No error (0)	token.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:28.596746922 CEST	1.1.1.1	192.168.2.5	0xf19e	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:28.596746922 CEST	1.1.1.1	192.168.2.5	0xf19e	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:28.596885920 CEST	1.1.1.1	192.168.2.5	0x85c0	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Sep 10, 2024 18:11:29.358855963 CEST	1.1.1.1	192.168.2.5	0x1579	No error (0)	static.cloudflareinsights.com		104.16.80.73	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:29.358855963 CEST	1.1.1.1	192.168.2.5	0x1579	No error (0)	static.cloudflareinsights.com		104.16.79.73	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:29.359520912 CEST	1.1.1.1	192.168.2.5	0x58d7	No error (0)	static.cloudflareinsights.com			65	IN (0x0001)	false
Sep 10, 2024 18:11:30.196727991 CEST	1.1.1.1	192.168.2.5	0x3824	No error (0)	gametimepulse.com			65	IN (0x0001)	false
Sep 10, 2024 18:11:30.197246075 CEST	1.1.1.1	192.168.2.5	0x8a78	No error (0)	gametimepulse.com		104.21.67.116	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:30.197246075 CEST	1.1.1.1	192.168.2.5	0x8a78	No error (0)	gametimepulse.com		172.67.221.214	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:32.622710943 CEST	1.1.1.1	192.168.2.5	0xc747	No error (0)	secureanalytic.com			65	IN (0x0001)	false
Sep 10, 2024 18:11:32.623172045 CEST	1.1.1.1	192.168.2.5	0x42eb	No error (0)	secureanalytic.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:32.623172045 CEST	1.1.1.1	192.168.2.5	0x42eb	No error (0)	secureanalytic.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:33.380774021 CEST	1.1.1.1	192.168.2.5	0xb913	No error (0)	www.watchdogsecurity.online		103.224.182.253	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:33.775316954 CEST	1.1.1.1	192.168.2.5	0xdfd2	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:33.775316954 CEST	1.1.1.1	192.168.2.5	0xdfd2	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:34.259016991 CEST	1.1.1.1	192.168.2.5	0xcc6	No error (0)	live.rezync.com		13.32.27.83	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:34.259016991 CEST	1.1.1.1	192.168.2.5	0xcc6	No error (0)	live.rezync.com		13.32.27.113	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:34.259016991 CEST	1.1.1.1	192.168.2.5	0xcc6	No error (0)	live.rezync.com		13.32.27.28	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:34.259016991 CEST	1.1.1.1	192.168.2.5	0xcc6	No error (0)	live.rezync.com		13.32.27.99	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:35.105505943 CEST	1.1.1.1	192.168.2.5	0x321b	No error (0)	ww38.watchdogsecurity.online	212218.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:35.105505943 CEST	1.1.1.1	192.168.2.5	0x321b	No error (0)	212218.parkingcrew.net		13.248.148.254	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:35.105505943 CEST	1.1.1.1	192.168.2.5	0x321b	No error (0)	212218.parkingcrew.net		76.223.26.96	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:35.105541945 CEST	1.1.1.1	192.168.2.5	0x64f	No error (0)	ww38.watchdogsecurity.online	212218.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:35.110615015 CEST	1.1.1.1	192.168.2.5	0xac43	No error (0)	secureanalytic.com			65	IN (0x0001)	false
Sep 10, 2024 18:11:35.111727953 CEST	1.1.1.1	192.168.2.5	0xf834	No error (0)	secureanalytic.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:35.111727953 CEST	1.1.1.1	192.168.2.5	0xf834	No error (0)	secureanalytic.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:35.416991949 CEST	1.1.1.1	192.168.2.5	0x99b3	No error (0)	ww38.watchdogsecurity.online	212218.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:35.416991949 CEST	1.1.1.1	192.168.2.5	0x99b3	No error (0)	212218.parkingcrew.net		13.248.148.254	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:35.416991949 CEST	1.1.1.1	192.168.2.5	0x99b3	No error (0)	212218.parkingcrew.net		76.223.26.96	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:35.571644068 CEST	1.1.1.1	192.168.2.5	0xc5fb	No error (0)	ww38.watchdogsecurity.online	212218.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:35.938069105 CEST	1.1.1.1	192.168.2.5	0x41b4	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:35.938069105 CEST	1.1.1.1	192.168.2.5	0x41b4	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:35.938944101 CEST	1.1.1.1	192.168.2.5	0x45bc	No error (0)	p.rfihub.com	a.rfihub.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:35.938944101 CEST	1.1.1.1	192.168.2.5	0x45bc	No error (0)	a.rfihub.com	a.rfihub.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:36.137181997 CEST	1.1.1.1	192.168.2.5	0x1fd9	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.135	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:36.137181997 CEST	1.1.1.1	192.168.2.5	0x1fd9	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.190	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:36.137181997 CEST	1.1.1.1	192.168.2.5	0x1fd9	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.138	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:36.137181997 CEST	1.1.1.1	192.168.2.5	0x1fd9	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.69	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:36.230017900 CEST	1.1.1.1	192.168.2.5	0xd81	No error (0)	www.google.com		172.217.16.132	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:36.233270884 CEST	1.1.1.1	192.168.2.5	0xacb3	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 10, 2024 18:11:37.375085115 CEST	1.1.1.1	192.168.2.5	0x834a	No error (0)	ww38.watchdogsecurity.online	212218.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:37.375085115 CEST	1.1.1.1	192.168.2.5	0x834a	No error (0)	212218.parkingcrew.net		13.248.148.254	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:37.375085115 CEST	1.1.1.1	192.168.2.5	0x834a	No error (0)	212218.parkingcrew.net		76.223.26.96	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:37.378216982 CEST	1.1.1.1	192.168.2.5	0x9601	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.135	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:37.378216982 CEST	1.1.1.1	192.168.2.5	0x9601	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.69	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:37.378216982 CEST	1.1.1.1	192.168.2.5	0x9601	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.138	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:37.378216982 CEST	1.1.1.1	192.168.2.5	0x9601	No error (0)	d38psrni17bvxu.cloudfront.net		18.66.121.190	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:37.388643026 CEST	1.1.1.1	192.168.2.5	0x47dc	No error (0)	syndicatedsearch.goog		142.250.185.206	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:37.675420046 CEST	1.1.1.1	192.168.2.5	0x9cf6	No error (0)	ww38.watchdogsecurity.online	212218.parkingcrew.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:37.828558922 CEST	1.1.1.1	192.168.2.5	0x1df9	No error (0)	syndicatedsearch.goog		142.250.185.142	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:39.166105986 CEST	1.1.1.1	192.168.2.5	0x88ae	No error (0)	pippio.com		107.178.254.65	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:40.214795113 CEST	1.1.1.1	192.168.2.5	0x6697	No error (0)	syndicatedsearch.goog		142.250.186.142	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:40.505407095 CEST	1.1.1.1	192.168.2.5	0xde37	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:40.505407095 CEST	1.1.1.1	192.168.2.5	0xde37	No error (0)	googlehosted.l.googleusercontent.com		142.250.185.193	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:40.507179976 CEST	1.1.1.1	192.168.2.5	0xd769	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:42.144543886 CEST	1.1.1.1	192.168.2.5	0xeef2	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 10, 2024 18:11:42.144543886 CEST	1.1.1.1	192.168.2.5	0xeef2	No error (0)	googlehosted.l.googleusercontent.com		142.250.181.225	A (IP address)	IN (0x0001)	false
Sep 10, 2024 18:11:42.144575119 CEST	1.1.1.1	192.168.2.5	0x9107	No error (0)	afs.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	217.21.73.115	80	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 10, 2024 18:10:27.030462980 CEST	504	OUT	GET /hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran HTTP/1.1 Host: football-booster.freevisit1.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 10, 2024 18:10:27.983243942 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 x-powered-by: PHP/8.0.30 content-type: text/html; charset=UTF-8 content-length: 2907 content-encoding: gzip vary: Accept-Encoding,User-Agent date: Tue, 10 Sep 2024 16:10:27 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 1a 6b 6f db 38 f2 73 0d f4 3f cc a9 c0 d9 de 5a af 36 af da 96 8b 24 4d 9b dc a5 49 b7 49 77 f7 6e b1 08 68 89 96 98 50 a4 40 52 76 bc 69 7f d0 fd 8d fb 65 07 8a 92 5f f5 ab 69 17 e7 b4 89 28 0e 39 c3 79 73 c6 b5 6e a2 52 0a 14 b1 38 b0 30 b3 3f 5d 59 90 09 3c 20 f7 81 c5 e3 36 24 4a 65 6d d7 e5 71 e6 a4 d8 65 f2 99 d5 ab 75 13 8c a2 5e 0d ca 4f 37 c5 0a 41 98 20 21 b1 0a ac 5c 0d ec 03 6b 71 9a a1 14 07 d6 90 e0 51 c6 85 b2 20 e4 4c 61 a6 c1 25 16 b6 0c 11 45 7d 8a 03 c6 5b 30 22 91 4a 82 08 0f 49 88 ed 62 d0 02 c2 88 22 88 16 80 38 f0 5b f3 ab fc 15 e8 04 ef 73 25 67 90 5d 5c 9e 5d bc 39 f9 ad 05 17 97 6f 2f cf cf 2f 7f d5 4f 87 1f 8f 4f cf 7e 39 d1 8f 97 6f 3e e8 3f 67 ef 0f df 9d 4c 20 af 2e ce 3e 7c 38 b9 9e c5 a1 88 a2 b8 77 4a e2 04 ae c2 84 73 0a 6f 39 57 7d 44 29 9c 93 21 06 1b de 09 8c 59 84 28 86 a1 84 f7 84 8e 50 7e 87 31 9c e7 2a c1 02 31 e8 ba 66 8f e9 9e 94 b0 3b 10 98 06 96 54 63 8a 65 82 b1 b2 20 11 78 10 58 2e 92 12 2b e9 86 52 ba c5 ac 13 4a 39 4b [TRUNCATED] Data Ascii: ko8s?Z6$MIIwnhP@Rvie_i(9ysnR80?]Y< 6$Jemqeu^O7A !\kqQ La%E}[0"JIb"8[s%g]\]9o//OO~9o>?gL .>\|8wJso9W}D)!Y(P~11f;Tce xX.+RJ9KHNoFz]-"58JI8S9)FNSW<yW7hd)P]`'.T+ !g!i'u;-pJys+@Oi<xf_;)a(;OGcx{UF],x6P0v,PD0SQko61GsM`8HA3 8O27G[EH]xg")~$_{k#QR"l#c\|o^{d~q=/=^;(]37cg&"2")K/#2[<ZS.l!fqkGK (1rLXKe+A)$6
Sep 10, 2024 18:10:27.983299971 CEST	224	IN	Data Raw: d2 f1 6b 9b 7d b3 5e 57 b3 6f 96 38 5b bb 2f ab 77 7a 05 6f 2f 2f af 8f 0e cf cf e1 fc ec 97 93 ae ab 01 7b 5d 37 db 70 56 37 22 c3 0d 20 a8 0a 88 02 c7 44 2a 2c ec 44 0e ca d0 eb 64 49 36 11 b0 20 71 a2 a0 62 94 5d 0c ad 5e 97 54 f3 03 04 03 64 Data Ascii: k}^Wo8[/wzo//{]7pV7" D,DdI6 qb]^Td4BE;1a]jVLz=##2Xv+5[Gq~kcX,cG6XD4Nj07*viU+.pl"f+}/\|V9IQD&3),t68+kpg6<
Sep 10, 2024 18:10:27.983330965 CEST	1236	IN	Data Raw: 81 d7 c9 50 14 11 16 b7 a1 3c d3 86 3c b7 eb 26 fe 16 e4 ba db d0 bb 8d 7f 48 fc 4a 2a da 17 d9 65 c8 4a 71 44 90 ad e5 44 34 17 97 1c 56 3b 81 75 94 ae f7 0c 8b 9a 69 cb 50 b3 65 93 0e 7d a7 0e 2e a2 d6 e1 96 a2 b1 5d 90 60 ad b3 db 55 3b 64 58 Data Ascii: P<<&HJ*eJqDD4V;uiPe}.]`U;dXhpYPI,0v&D~'&VoSto1J!$&B#9S1ym`%ksE?BSSa23pHq\'tX`0 xPX+=RNTTn
Sep 10, 2024 18:10:27.983365059 CEST	224	IN	Data Raw: 39 31 b5 27 0b bb 40 f6 60 b4 a6 ed 75 be d4 26 ed 9f da 5c 05 ab 00 b7 7a 5f bf ab 32 f3 42 74 4b a6 4d 1d 61 d2 94 d0 51 bb da 6c 7f c7 f7 4b cd 32 65 02 5d 4a 20 0c c3 05 1f 15 f5 97 0d 2e b8 26 b1 3a d3 a6 3c 44 b4 31 c8 59 a8 c5 df 68 3e d4 Data Ascii: 91'@`u&\z_2BtKMaQlK2e]J .&:<D1Yh>bO!{g@9ls#AR', tsv5>L7/~]ZX":'qbNLzr4>uzSmqcX^?2}3s Mx^5;/
Sep 10, 2024 18:10:28.071873903 CEST	424	IN	Data Raw: 16 57 7c 71 e1 56 ae fa c6 c2 06 61 cd ba 81 4a 58 60 f2 81 eb 2a 7f 2b cf 7e c6 88 6a 34 17 7a aa 0c 8f 4a 70 67 92 ef 39 8b 2b 1b 0f 19 8a f1 39 62 71 8e 62 dc 86 3a 66 f5 16 98 34 a8 bd 79 b9 73 56 f0 fb bc 80 77 ae ce de 7f 38 3f f9 d2 82 fa Data Ascii: W\|qVaJX`+~j4zJpg9+9bqb:f4ysVw8?<=7D)]%:Oq"a?XEt]-u]^DD5@YM61gZ9t\&"+ekUbGsX`QR'OOE
Sep 10, 2024 18:10:28.073179007 CEST	414	OUT	GET /assets/js/modernizr.js HTTP/1.1 Host: football-booster.freevisit1.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 10, 2024 18:10:28.421462059 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 content-type: text/javascript last-modified: Fri, 30 Aug 2024 10:56:23 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding,User-Agent content-length: 4631 date: Tue, 10 Sep 2024 16:10:28 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 3a 6b 77 db b6 92 df fb 2b 28 24 57 06 22 98 92 f3 b8 dd 52 41 74 13 27 69 d2 26 b7 39 75 da 7e 50 9c 7b 40 12 7c d8 24 41 03 a0 64 c7 d4 fe f6 3d 03 3e 44 c9 72 37 7b ce 7e 91 08 cc 60 06 18 cc 0b 03 4c 1f 8d 7e 70 1e 39 1f 65 28 54 91 7e 53 ce ea b1 fb a3 7b 02 7d eb f5 da cd bb 7e 37 90 f9 0f ce 23 e8 3f 95 e5 8d 4a e3 c4 38 38 20 ce 5b ae aa 4b e7 a5 11 9a 3a 9f 78 95 39 ef 55 aa 13 ea bc cc c4 b5 73 26 ae 8d 2c 60 d0 cb 15 4f 33 ee 67 c2 a9 8a 50 28 c7 24 c2 79 75 f6 da e1 45 e8 7c 7c ff d9 c9 d2 40 14 5a 68 ef 2e db 69 0b 9b fe e0 3c 9a fe b0 4e 8b 50 ae dd 7e c2 2c aa 8a c0 a4 b2 c0 9c fa 34 20 b7 5d db 09 31 27 b7 c6 0d b4 fe 2c ae 0d e3 9b 1e 22 00 97 dc 2a 61 2a 05 78 d7 ee 85 4c 0b cc 27 68 8e c8 04 fb 75 8d 10 21 5b fc 68 07 df dc 94 42 46 0e 67 8c f9 5b 9c 78 88 33 1a fd 37 46 68 c2 89 9b 16 a1 b8 fe 2d c2 fe 80 5c d2 a0 46 52 e1 15 57 4e e8 a4 85 c3 c9 2d 7c 0b c6 97 e1 f9 3c 8d f0 28 c6 82 a2 63 44 c6 63 b3 14 e7 23 c6 02 d2 10 47 65 74 8d 18 f3 17 c2 [TRUNCATED] Data Ascii: :kw+($W"RAt'i&9u~P{@\|$Ad=>Dr7{~`L~p9e(T~S{}~7#?J88 [K:x9Us&,`O3gP($yuE\|\|@Zh.i<NP~,4 ]1',"axL'hu![hBFg[x37Fh-\FRWN-\|<(cDc#Get6--J"21\|)-x@cuY!'^\|E'} 3GYud]O$F!4$$.`hEH1"umHQZE{/IS@p/1nZ*T0#6n&$s"y90\|SS~f61n>\|7P&(F!7w}57CMC}WF2/3aHv`Sf<r~iUf2NpR%BGQ4mj4X<41NxO&r0/Q_A8>'4dkFU.h8]lE+WLFJSq_2bJuYjn$CQ~Uk6X/S,W
Sep 10, 2024 18:10:28.421480894 CEST	1236	IN	Data Raw: f8 02 5f b9 bc 2c 45 11 9e 26 69 16 e2 8a d0 88 f9 6e 28 22 5e 65 e6 cf 54 ac 69 c8 22 37 16 e6 54 e6 65 65 44 78 06 b4 c6 63 3b f9 28 15 59 08 2b b8 8b 81 2b 5a 54 59 46 ee 70 1d 8f 67 76 c9 32 8a b4 30 ef 04 b8 4b 7a e5 2a 91 cb 95 e8 26 41 bc Data Ascii: _,E&in("^eTi"7TeeDxc;(Y++ZTYFpgv20Kz&AWWARrlWE!lQA"?yt`b-k<b+B%lhj)FwTX^N0i.$ZKL<s*r~8(PFsZ0d#nhF3z w?"0l6
Sep 10, 2024 18:10:28.421494007 CEST	1236	IN	Data Raw: c8 37 9b 61 b0 1e 9a 57 c0 7e 62 8c f1 36 e9 fd 2c cb 0d a1 01 ac 34 16 12 92 45 c0 bb 2b 23 34 80 c2 42 0b be 4a 63 6e a4 82 91 a5 d4 26 17 5a f3 58 1c 96 2e 20 7c 6c 10 da 7d d0 57 19 1c ab 7c ae ef 19 22 4b 51 bc 6e 31 60 8c 3d a2 8b f0 f5 ab Data Ascii: 7aW~b6,4E+#4BJcn&ZX. \|l}W\|"KQn1`=CQpDqp1meXamrT*~QN7yJaZ6uCcPV,k}mu0%3}v}~@!FT)<@'fggB/6P)
Sep 10, 2024 18:10:28.421504021 CEST	1236	IN	Data Raw: a9 d2 c6 d6 61 c7 e3 61 cb 2d 78 2e 74 c9 03 f1 c7 ef ef 09 63 76 5a 76 75 79 7a f0 64 7f 60 79 d3 b3 3f 7f 7e 69 93 3d d1 e6 8a eb a6 d4 72 ef aa 9b d4 50 20 d2 94 11 f4 2a 0e b2 b4 2c b9 49 0e ee d7 3d 3c 4f b3 b4 fc c4 4d f2 9d 4c 83 16 dd 72 Data Ascii: aa-x.tcvZvuyzd`y?~i=rP ,I=<OMLrw\|^wJr\|J?k9;]~8gOo1LmEVK0, -]!81!{"8pMN"hp9h>&er_,r<Wnq!w0Z`amj
Sep 10, 2024 18:10:28.421515942 CEST	157	IN	Data Raw: d3 4e 9e 15 d0 28 95 88 d2 6b a1 d9 35 b4 42 99 7f ea 3a 5e 42 47 a0 f5 a0 eb 1b 95 6e 7e c5 de 53 09 ee ea cd 0a dc fa 2f b4 89 f0 9f 76 6e 4e b6 be 36 c1 4b 7e 4e 36 2d d6 cb 2c 03 44 cd 2e da 0e fb b0 41 b3 77 54 ba ed 54 c2 9d 34 97 6e 23 90 Data Ascii: N(k5B:^BGn~S/vnN6K~N6-,D.AwTT4n#^JzarlkEB_hE'srdY"Ul+
Sep 10, 2024 18:10:29.253034115 CEST	485	OUT	GET /assets/images/video-throbber.gif HTTP/1.1 Host: football-booster.freevisit1.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 10, 2024 18:10:29.596568108 CEST	1236	IN	HTTP/1.1 403 Forbidden Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1242 date: Tue, 10 Sep 2024 16:10:29 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 [TRUNCATED] Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 403 Forbidden</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</style></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">403</h1><h2 style="margin-top:20px;font-size: 30px;">Forbidden</h2><p>Access to this resource on the server is denied!</p></div></div><div style=
Sep 10, 2024 18:10:29.596601963 CEST	459	IN	Data Raw: 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 Data Ascii: "color:#f0f0f0; font-size:12px;margin:auto;padding:0px 30px 0px 30px;position:relative;clear:both;height:100px;margin-top:-101px;background-color:#474747;border-top: 1px solid rgba(0,0,0,0.15);box-shadow: 0 1px 0 rgba(255, 255, 255, 0.3) inset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49710	217.21.73.115	80	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 10, 2024 18:10:28.070328951 CEST	427	OUT	GET /assets/css/style.css HTTP/1.1 Host: football-booster.freevisit1.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 10, 2024 18:10:28.428636074 CEST	543	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: public, max-age=604800 expires: Tue, 17 Sep 2024 16:10:28 GMT content-type: text/css last-modified: Fri, 30 Aug 2024 10:56:23 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding,User-Agent content-length: 15639 date: Tue, 10 Sep 2024 16:10:28 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff
Sep 10, 2024 18:10:28.428919077 CEST	1236	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 7d fb 73 ea 38 d2 e8 ef 53 35 ff 03 f7 ec dd da 39 9b 40 cc 1b 32 35 53 2b f3 4e 20 09 49 48 42 e6 ce bd 65 6c 63 1c 0c e6 d8 e6 95 af be ff fd 96 fc d4 d3 d8 c0 d9 dd 6f 67 92 9d cd b1 1e dd ad 56 ab d5 2d b5 24 Data Ascii: }s8S59@25S+N IHBelcogV-$rtP/AuUTG&K+G7StTfx,sKisUb!YC&(2ufb~AZ+yHFWT/}fK7\:i.6Sum\g
Sep 10, 2024 18:10:28.428935051 CEST	1236	IN	Data Raw: 0a 85 37 73 a7 ae 55 2c e5 cb 65 26 fc f7 65 06 58 ba 64 5c d2 b6 35 66 02 7a d3 05 36 09 79 96 1f 96 81 cd 30 f9 43 b6 06 5b 0d 13 46 31 5b e1 eb 0b ed f2 c7 1f cc c9 87 37 81 aa 8b 89 aa 44 f6 c0 2e 18 15 c8 14 19 50 05 07 b7 0f 84 5d 3d 24 3f Data Ascii: 7sU,e&eXd\5fz6y0C[F1[7D.P]=$?;nK4\|68IzZYH9eT4EG9FUzs3iXzjsqQKY7T*^ED2IY$>I8a.xUi2p`}Vu[FVbD9zU{V 9
Sep 10, 2024 18:10:28.428946972 CEST	1236	IN	Data Raw: 9d 7a cf 39 f5 b6 72 9a 9d e3 f4 9b c3 e9 f7 7f 8f d8 e2 3d 72 17 f7 a4 8d da d3 f6 62 8f dd 6e 3d 6d 47 f5 b4 4d d3 63 f7 45 4f db fa 3c 6d 77 f3 e8 0d cc 3f fc 1e e5 bf dd 36 a4 17 bf 9c 62 da f0 2b a4 98 37 fc 1a 89 26 0e bf 6c 8a 99 c3 af 91 Data Ascii: z9r=rbn=mGMcEO<mw?6b+7&lbk$;)&Fh+TI1U ~S^/N=S"x^=<WO1S$xS^=\BH@AVzMU4[*(]E'(EEEIPZJ4-6DPJl}ti
Sep 10, 2024 18:10:28.429050922 CEST	1236	IN	Data Raw: 4c af 8a b1 c1 e1 e3 2d 1e 5c a2 e5 27 36 1a 7c 1c 1d 40 13 bf ce c3 46 60 a5 81 ce 5c 62 61 c3 65 30 87 5a 55 40 d9 99 98 8c 74 0b 0b a6 a5 ab 4b 47 f2 8e e1 85 18 99 ae 41 44 0d 3e 11 90 f4 1c 37 9d 50 f0 b9 ed 3d 76 aa 21 31 10 83 21 16 4d 02 Data Ascii: L-\'6\|@F`\bae0ZU@tKGAD>7P=v!1!Mcy@I4JJfXldd"(<!ficO3C237v^e*;$RsCcM7g!=R&r<K7"];!zpa
Sep 10, 2024 18:10:28.429066896 CEST	896	IN	Data Raw: 78 4d 84 dc 60 4a c3 09 76 f4 25 aa 98 e1 27 87 dc 52 ec 63 3c 35 46 66 44 2e 8f 58 bc 1e 46 6c c5 cd c1 89 55 77 2b 69 a9 20 e4 7a 09 24 c1 c4 bd 41 ec e7 ab b0 4b 29 31 29 53 a7 be d1 81 8a 5a 98 18 20 43 6d 13 24 68 c9 4d d6 97 8a 1b 92 e5 59 Data Ascii: xM`Jv%'Rc<5FfD.XFlUw+i z$AK)1)SZ Cm$hMY8x8>BfXOPtF})-H#,U6+I~RvN=sd2ZD6dBAe5H#LrUFXd&!3ifMfvK7fOtblZb
Sep 10, 2024 18:10:28.429081917 CEST	1236	IN	Data Raw: c0 2e 69 22 2e 70 b9 4b 50 89 13 e9 76 f5 ff 20 1a 89 d9 9b 33 93 12 92 41 29 3e 9e c6 f5 1f 18 0b e5 84 ad 72 a9 52 4c 9d eb 6e 4f d3 a6 04 43 e9 72 4a 26 02 17 03 86 2d 88 df 8b 81 d1 54 14 cb 3e 6c 66 8b e5 0a 3e 15 1d e2 36 af 74 02 80 07 00 Data Ascii: .i".pKPv 3A)>rRLnOCrJ&-T>lf>6tqb` b\yJIwh$I!Rb*${W{%-)+Oz$/goKv"O-V{,FLL<K,/?dNZN-]_OuvL7hCe2
Sep 10, 2024 18:10:28.429099083 CEST	1116	IN	Data Raw: c2 7f 14 e1 af 0b f8 2b 0b 84 2f 61 e9 a1 1c 3a 7f 85 20 a1 81 67 3c 4e 1d 22 94 0d 9a bb 66 4c aa 54 c7 5c 25 91 8a 75 18 d2 19 04 2f 66 f7 d8 83 4d 0b 69 17 45 d0 21 bb 28 b1 50 73 f2 da b2 d4 65 38 49 b3 0f b6 6d 67 ba a3 66 ed 95 e4 6d 25 6c Data Ascii: +/a: g<N"fLT\%u/fMiE!(Pse8Imgfm%l-i<n@W.g26v?Y\,`,{{/3[DDXzc2aU}5l P$yk+?EF/'\vw6~"QH/k<qZBt'`4kZ>
Sep 10, 2024 18:10:28.429438114 CEST	1236	IN	Data Raw: f5 6f 73 ca c2 45 24 3a 02 1d aa c5 f0 81 1b be 92 c4 87 16 be a5 cd 5d 36 24 97 ad fc 64 72 57 9d 41 27 f2 80 1f 07 88 7f a5 15 f2 bc 0a 46 30 4e 2f 73 19 87 c0 f7 6b 78 e8 95 5d 7a 26 d9 59 47 5f 11 a6 61 a0 b6 14 d3 81 ab 6c c4 1a 68 a0 03 66 Data Ascii: osE$:]6$drWA'F0N/skx]z&YG_alhf:.UAv'$_UD2K"wesL@jGFau)^ZLEQ^Hg\|5\Ob\|rv&Ln=f~.w+o$Jcf]!Rt
Sep 10, 2024 18:10:28.429455042 CEST	1236	IN	Data Raw: de 4b 1b 94 1a 62 ad 75 db 7a 94 ef 9a 8f f2 63 43 af 3d 76 75 ed ad bd d7 d4 d6 53 7d 0e 46 93 8b b5 35 d4 45 6d de 15 81 3c 68 6e e7 37 cd ed b6 03 b6 f2 8d a8 b5 6f 9b e2 78 d8 18 ce 87 6d 6d bb e9 ef 46 8b ae 08 86 dd c6 f8 a5 bf af 55 bb 42 Data Ascii: KbuzcC=vuS}F5Em<hn7oxmmFUB[>-vKoZ:KV4:%nB)56wCp/5{={U9xs=g5w5Ak7,q0<;`kn7-P
Sep 10, 2024 18:10:28.434053898 CEST	1236	IN	Data Raw: 9f e7 6f 5d ad 35 12 21 3f f7 83 66 4f 73 d3 83 79 3a 7f d7 28 35 7a db ce 08 6c 47 6d 71 78 d3 6c 3c 8e 5e db da 76 7a b7 9f 8f 3b 8d 79 b1 bb 07 c5 db 47 ad 25 6e e7 dd 47 af d1 0d 71 38 6a 83 8a f0 dc db cd 1f 9a bb f9 47 6b 37 d4 3b 5a ed a1 Data Ascii: o]5!?fOsy:(5zlGmqxl<^vz;yG%nGq8jGk7;ZFj[^Dlx;nrZ0Z{3NEVA?>/u2g!<#OC,8GEOL[@T3oa7\1?UhAC8:<l<h7
Sep 10, 2024 18:10:28.809720039 CEST	473	OUT	GET /assets/images/hd.png HTTP/1.1 Host: football-booster.freevisit1.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 10, 2024 18:10:29.166678905 CEST	1236	IN	HTTP/1.1 403 Forbidden Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1242 date: Tue, 10 Sep 2024 16:10:28 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 [TRUNCATED] Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 403 Forbidden</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</style></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">403</h1><h2 style="margin-top:20px;font-size: 30px;">Forbidden</h2><p>Access to this resource on the server is denied!</p></div></div><div style=
Sep 10, 2024 18:10:29.222598076 CEST	435	OUT	GET /assets/images/bg.jpg HTTP/1.1 Host: football-booster.freevisit1.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://football-booster.freevisit1.com/assets/css/style.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 10, 2024 18:10:29.576589108 CEST	1236	IN	HTTP/1.1 403 Forbidden Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1242 date: Tue, 10 Sep 2024 16:10:29 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 [TRUNCATED] Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 403 Forbidden</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</style></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">403</h1><h2 style="margin-top:20px;font-size: 30px;">Forbidden</h2><p>Access to this resource on the server is denied!</p></div></div><div style=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49713	217.21.73.115	80	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 10, 2024 18:10:29.253304958 CEST	478	OUT	GET /assets/images/red-dot.png HTTP/1.1 Host: football-booster.freevisit1.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 10, 2024 18:10:29.597919941 CEST	1236	IN	HTTP/1.1 403 Forbidden Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1242 date: Tue, 10 Sep 2024 16:10:29 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 [TRUNCATED] Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 403 Forbidden</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</style></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">403</h1><h2 style="margin-top:20px;font-size: 30px;">Forbidden</h2><p>Access to this resource on the server is denied!</p></div></div><div style=
Sep 10, 2024 18:10:29.597995996 CEST	459	IN	Data Raw: 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 Data Ascii: "color:#f0f0f0; font-size:12px;margin:auto;padding:0px 30px 0px 30px;position:relative;clear:both;height:100px;margin-top:-101px;background-color:#474747;border-top: 1px solid rgba(0,0,0,0.15);box-shadow: 0 1px 0 rgba(255, 255, 255, 0.3) inset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49719	217.21.73.115	80	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 10, 2024 18:10:29.310775995 CEST	407	OUT	GET /assets/js/js.js HTTP/1.1 Host: football-booster.freevisit1.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 10, 2024 18:10:30.245260954 CEST	471	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 content-type: text/javascript last-modified: Fri, 30 Aug 2024 10:56:23 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding,User-Agent content-length: 95054 date: Tue, 10 Sep 2024 16:10:30 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff
Sep 10, 2024 18:10:30.245342016 CEST	1236	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 69 93 db 46 96 36 fa 7d 22 e6 3f 90 68 35 8c 14 93 2c 52 b2 fb 1d 83 ca e2 b5 25 2f f2 22 a9 2d b9 bd a0 60 47 02 48 80 20 41 80 45 b2 54 25 15 d8 bf fd c6 39 b9 20 01 82 92 67 ee 7b 23 e6 83 54 20 90 fb 7a 96 Data Ascii: iF6}"?h5,R%/"-`GH AET%9 g{#T zq>`0x8<y#v5G;{7xh2<Da_\!$6PCD1Y{\|<vy<MnMC^xRqUvytsvD!^$
Sep 10, 2024 18:10:30.245413065 CEST	1236	IN	Data Raw: cd 59 a4 d1 64 23 76 99 f0 02 1e 52 3c 6b 4d 83 77 d6 14 b2 26 5f fb 76 98 3b 79 b9 bd 39 e0 85 ec ba df ab c3 42 2d d3 45 34 89 97 22 5e 0b e8 b0 7a f2 3d 2b 47 5d 3b 07 71 77 e0 3b c1 f1 37 8c 6f 04 37 26 bf 29 0e ff e2 c5 8d 60 bc f5 d3 5a 61 Data Ascii: Yd#vR<kMw&_v;y9B-E4"^z=+G];qw;7o7&)`Za{<8YP?}qpfo[D3KBs##gpnu\qmN*KI:ICzor=fMxV@VA$E+!.//y6 i2C
Sep 10, 2024 18:10:30.245424986 CEST	1236	IN	Data Raw: 71 0e c3 29 85 15 6e 33 6a 5f 6b 69 8e be aa 0d 0f 05 c4 b4 3c 38 f6 74 05 04 b2 ee db dc 79 08 2b 62 15 4c c3 39 59 4d e4 30 c1 79 2c 1b 05 a7 fd 26 df 20 cf 55 d7 31 90 77 3f 89 fd b6 2a f7 e2 5b c1 13 b1 f3 9c a7 b2 dc f1 1b c9 98 c2 2a 14 b8 Data Ascii: q)n3j_ki<8ty+bL9YM0y,& U1w?[Rbdq_II<>AB2$gJ1qUt\|}RU%K1cY]/-l(;MC2B jpvxf!D^VY?Y$ek=%9`"
Sep 10, 2024 18:10:30.245436907 CEST	1236	IN	Data Raw: 9c 14 a9 20 b1 ed ba 5e 32 a9 de 8a 5d 5a 54 b7 2c d8 98 67 da 3c fe 6a 3d ff 16 52 27 2f 8b fc ac 44 56 8b f6 5a 5f 53 90 61 c0 37 6f d3 48 32 65 31 63 14 05 38 20 dd 32 95 60 3a d3 28 67 99 27 89 28 9d de 81 b3 d2 35 f9 81 e4 b1 9a 6f 7f 99 d9 Data Ascii: ^2]ZT,g<j=R'/DVZ_Sa7oH2e1c8 2`:(g'(5o_~<Jv)$#m}KaJU?!,+dir3u=Px6$/ox+ uYwIq ZaA^\|CV-AaIhH#$g53i$
Sep 10, 2024 18:10:30.245516062 CEST	1236	IN	Data Raw: 8c 17 38 8f 41 1c 86 7e 10 92 23 dd f0 6d df 00 75 b2 2b 2e 58 1e 25 2d f1 83 d9 3e 0a 10 16 c3 c0 43 ff 45 99 9c 1d 3f 33 db 75 7d b2 30 24 20 02 57 95 ff 27 dd 57 bb 83 1f 84 13 f8 4b 41 4e 19 0b fc 89 4f 47 da dc b4 d6 0d 81 2f a9 61 b5 e5 6f Data Ascii: 8A~#mu+.X%->CE?3u}0$ W'WKANOG/aoM2rj!@kif 9QUt]ofGhHm[Cb<\|us)4@0P_O8_!Y18/+b}CAef[_H`8*cM3P
Sep 10, 2024 18:10:30.245527029 CEST	1236	IN	Data Raw: d6 83 d5 43 f3 07 69 14 78 18 8d 68 0a 40 65 2a 05 fd 1d f9 9b 66 ac 14 f2 0c 95 59 bc 61 a2 e4 82 c7 7b ae a1 be 0c 55 94 10 50 f5 0d a5 30 3b 97 a8 a3 d4 d2 28 c4 34 a7 49 90 23 26 18 ea 30 87 8f 66 2c 52 85 6e b3 46 4a 48 de 6a 38 25 74 0d ac Data Ascii: Cixh@e*fYa{UP0;(4I#&0f,RnFJHj8%tVO[Z@lN%y.CS"!_- M:2An}0xv7A[ifR444#pX4APJ5[Hi0Z^9NTe.
Sep 10, 2024 18:10:30.245536089 CEST	1236	IN	Data Raw: 8d 8a 16 f5 99 0b 5b f9 47 53 e5 43 23 42 00 28 9e 00 ed 53 a6 ae 9b fb 5c e5 38 b6 e0 cb 34 93 2d d1 8b f2 95 34 59 80 31 cb 4e 0b ef 29 dd 75 b9 2a 47 4b a1 a7 c7 46 96 f1 c1 86 81 91 0b 8b 82 17 60 89 0c 7f 50 e3 06 96 4b 60 e8 03 46 32 53 c0 Data Ascii: [GSC#B(S\84-4Y1N)u*GKF`PK`F2S,4ud=[KCX)da}uN@EWY{$BT}fwDr9_F<IJ!$Wx+e W+1L<HM#UsM
Sep 10, 2024 18:10:30.245546103 CEST	1236	IN	Data Raw: 1b 01 ff 8a 4d e9 3f d9 94 fe c4 40 8c fe 1a ff 7f 83 ff ff 0c 2c d4 bf fa f1 db 78 bf 2d bc 9f 41 0e 32 25 fe f4 48 7f 69 e0 f6 bf b2 d9 93 27 8f 67 f4 37 76 7f ec 22 dd 7f 87 33 ef 01 fb 7d b2 ad b6 f4 4f f8 ab 90 f3 ea 29 82 27 89 a1 8f e1 51 Data Ascii: M?@,x-A2%Hi'g7v"3}O)'Q)@Z4JJpt&l9T-q"]PU\|'t$&um]T\|[uCUwPW\mA "WWwWWUyu@_]]Mut:
Sep 10, 2024 18:10:30.245557070 CEST	1236	IN	Data Raw: d9 65 8d 73 68 55 0e 3d 94 43 73 fa 5e 36 ac 35 2c c8 df a9 a6 d2 46 bc c1 fa b7 ca a2 97 0f e9 99 a0 26 0b b4 65 71 16 54 a0 9d 40 f5 60 35 c1 f2 39 08 8d 4b b6 33 05 cc 8d db 24 c5 92 cc 63 e3 86 0d f8 f1 d8 3a cf 12 2d 52 6a 58 7c 3d b6 47 dd Data Ascii: eshU=Cs^65,F&eqT@`59K3$c:-RjX\|=Gw$0JBqC$>}zHJIW`O//\Tp~ @g-qYVx)W^OY'yW\2;8MY'VL*'M]W5
Sep 10, 2024 18:10:30.250284910 CEST	1236	IN	Data Raw: 96 53 4a 0f 5d f8 49 97 f4 98 2c b0 2a b0 81 55 88 3c 74 56 08 6d 65 23 6c f2 02 5a 0c 8f ff 08 eb 7a 46 fc 47 0f 3d 07 c4 ca b2 ac c7 68 0d 9e 24 fa 17 81 bc 9f c9 bc ff 27 1c f1 e0 bf 4e 12 f8 f0 07 08 92 56 85 47 2d b0 ef 31 0a 66 43 28 13 bc Data Ascii: SJ]I,*U<tVme#lZzFG=h$'NVG-1fC(>2]4!PjG(Dd!2x\|nM.x:IclK'Xkpu${Zjr~@J_t2IfDp-G{#GAOXZrz)X?W'Q
Sep 10, 2024 18:10:31.955523968 CEST	469	OUT	GET /circle_green.png HTTP/1.1 Host: football-booster.freevisit1.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 10, 2024 18:10:32.306981087 CEST	1236	IN	HTTP/1.1 403 Forbidden Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1242 date: Tue, 10 Sep 2024 16:10:32 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 [TRUNCATED] Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 403 Forbidden</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</style></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">403</h1><h2 style="margin-top:20px;font-size: 30px;">Forbidden</h2><p>Access to this resource on the server is denied!</p></div></div><div style=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49722	217.21.73.115	80	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 10, 2024 18:10:29.310785055 CEST	439	OUT	GET /assets/images/header.jpg HTTP/1.1 Host: football-booster.freevisit1.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://football-booster.freevisit1.com/assets/css/style.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 10, 2024 18:10:30.215095997 CEST	1236	IN	HTTP/1.1 403 Forbidden Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1242 date: Tue, 10 Sep 2024 16:10:30 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 [TRUNCATED] Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 403 Forbidden</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</style></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">403</h1><h2 style="margin-top:20px;font-size: 30px;">Forbidden</h2><p>Access to this resource on the server is denied!</p></div></div><div style=
Sep 10, 2024 18:10:30.215110064 CEST	459	IN	Data Raw: 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 Data Ascii: "color:#f0f0f0; font-size:12px;margin:auto;padding:0px 30px 0px 30px;position:relative;clear:both;height:100px;margin-top:-101px;background-color:#474747;border-top: 1px solid rgba(0,0,0,0.15);box-shadow: 0 1px 0 rgba(255, 255, 255, 0.3) inset

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49726	142.250.185.142	80	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 10, 2024 18:10:31.041079998 CEST	375	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 Host: translate.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 10, 2024 18:10:31.668049097 CEST	488	IN	HTTP/1.1 301 Moved Permanently Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 10 Sep 2024 16:10:31 GMT Location: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff
Sep 10, 2024 18:11:16.670545101 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49731	217.21.73.115	80	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 10, 2024 18:10:31.958472967 CEST	306	OUT	GET /assets/js/modernizr.js HTTP/1.1 Host: football-booster.freevisit1.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 10, 2024 18:10:32.921631098 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 content-type: text/javascript last-modified: Fri, 30 Aug 2024 10:56:23 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding,User-Agent content-length: 4631 date: Tue, 10 Sep 2024 16:10:32 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ad 3a 6b 77 db b6 92 df fb 2b 28 24 57 06 22 98 92 f3 b8 dd 52 41 74 13 27 69 d2 26 b7 39 75 da 7e 50 9c 7b 40 12 7c d8 24 41 03 a0 64 c7 d4 fe f6 3d 03 3e 44 c9 72 37 7b ce 7e 91 08 cc 60 06 18 cc 0b 03 4c 1f 8d 7e 70 1e 39 1f 65 28 54 91 7e 53 ce ea b1 fb a3 7b 02 7d eb f5 da cd bb 7e 37 90 f9 0f ce 23 e8 3f 95 e5 8d 4a e3 c4 38 38 20 ce 5b ae aa 4b e7 a5 11 9a 3a 9f 78 95 39 ef 55 aa 13 ea bc cc c4 b5 73 26 ae 8d 2c 60 d0 cb 15 4f 33 ee 67 c2 a9 8a 50 28 c7 24 c2 79 75 f6 da e1 45 e8 7c 7c ff d9 c9 d2 40 14 5a 68 ef 2e db 69 0b 9b fe e0 3c 9a fe b0 4e 8b 50 ae dd 7e c2 2c aa 8a c0 a4 b2 c0 9c fa 34 20 b7 5d db 09 31 27 b7 c6 0d b4 fe 2c ae 0d e3 9b 1e 22 00 97 dc 2a 61 2a 05 78 d7 ee 85 4c 0b cc 27 68 8e c8 04 fb 75 8d 10 21 5b fc 68 07 df dc 94 42 46 0e 67 8c f9 5b 9c 78 88 33 1a fd 37 46 68 c2 89 9b 16 a1 b8 fe 2d c2 fe 80 5c d2 a0 46 52 e1 15 57 4e e8 a4 85 c3 c9 2d 7c 0b c6 97 e1 f9 3c 8d f0 28 c6 82 a2 63 44 c6 63 b3 14 e7 23 c6 02 d2 10 47 65 74 8d 18 f3 17 c2 [TRUNCATED] Data Ascii: :kw+($W"RAt'i&9u~P{@\|$Ad=>Dr7{~`L~p9e(T~S{}~7#?J88 [K:x9Us&,`O3gP($yuE\|\|@Zh.i<NP~,4 ]1',"axL'hu![hBFg[x37Fh-\FRWN-\|<(cDc#Get6--J"21\|)-x@cuY!'^\|E'} 3GYud]O$F!4$$.`hEH1"umHQZE{/IS@p/1nZ*T0#6n&$s"y90\|SS~f61n>\|7P&(F!7w}57CMC}WF2/3aHv`Sf<r~iUf2NpR%BGQ4mj4X<41NxO&r0/Q_A8>'4dkFU.h8]lE+WLFJSq_2bJuYjn$CQ~Uk6X/S,W
Sep 10, 2024 18:10:32.921657085 CEST	1236	IN	Data Raw: f8 02 5f b9 bc 2c 45 11 9e 26 69 16 e2 8a d0 88 f9 6e 28 22 5e 65 e6 cf 54 ac 69 c8 22 37 16 e6 54 e6 65 65 44 78 06 b4 c6 63 3b f9 28 15 59 08 2b b8 8b 81 2b 5a 54 59 46 ee 70 1d 8f 67 76 c9 32 8a b4 30 ef 04 b8 4b 7a e5 2a 91 cb 95 e8 26 41 bc Data Ascii: _,E&in("^eTi"7TeeDxc;(Y++ZTYFpgv20Kz&AWWARrlWE!lQA"?yt`b-k<b+B%lhj)FwTX^N0i.$ZKL<s*r~8(PFsZ0d#nhF3z w?"0l6
Sep 10, 2024 18:10:32.921673059 CEST	1236	IN	Data Raw: c8 37 9b 61 b0 1e 9a 57 c0 7e 62 8c f1 36 e9 fd 2c cb 0d a1 01 ac 34 16 12 92 45 c0 bb 2b 23 34 80 c2 42 0b be 4a 63 6e a4 82 91 a5 d4 26 17 5a f3 58 1c 96 2e 20 7c 6c 10 da 7d d0 57 19 1c ab 7c ae ef 19 22 4b 51 bc 6e 31 60 8c 3d a2 8b f0 f5 ab Data Ascii: 7aW~b6,4E+#4BJcn&ZX. \|l}W\|"KQn1`=CQpDqp1meXamrT*~QN7yJaZ6uCcPV,k}mu0%3}v}~@!FT)<@'fggB/6P)
Sep 10, 2024 18:10:32.921686888 CEST	1236	IN	Data Raw: a9 d2 c6 d6 61 c7 e3 61 cb 2d 78 2e 74 c9 03 f1 c7 ef ef 09 63 76 5a 76 75 79 7a f0 64 7f 60 79 d3 b3 3f 7f 7e 69 93 3d d1 e6 8a eb a6 d4 72 ef aa 9b d4 50 20 d2 94 11 f4 2a 0e b2 b4 2c b9 49 0e ee d7 3d 3c 4f b3 b4 fc c4 4d f2 9d 4c 83 16 dd 72 Data Ascii: aa-x.tcvZvuyzd`y?~i=rP ,I=<OMLrw\|^wJr\|J?k9;]~8gOo1LmEVK0, -]!81!{"8pMN"hp9h>&er_,r<Wnq!w0Z`amj
Sep 10, 2024 18:10:32.921703100 CEST	157	IN	Data Raw: d3 4e 9e 15 d0 28 95 88 d2 6b a1 d9 35 b4 42 99 7f ea 3a 5e 42 47 a0 f5 a0 eb 1b 95 6e 7e c5 de 53 09 ee ea cd 0a dc fa 2f b4 89 f0 9f 76 6e 4e b6 be 36 c1 4b 7e 4e 36 2d d6 cb 2c 03 44 cd 2e da 0e fb b0 41 b3 77 54 ba ed 54 c2 9d 34 97 6e 23 90 Data Ascii: N(k5B:^BGn~S/vnN6K~N6-,D.AwTT4n#^JzarlkEB_hE'srdY"Ul+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49735	217.21.73.115	80	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 10, 2024 18:10:32.415057898 CEST	299	OUT	GET /assets/js/js.js HTTP/1.1 Host: football-booster.freevisit1.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 10, 2024 18:10:33.360364914 CEST	471	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 content-type: text/javascript last-modified: Fri, 30 Aug 2024 10:56:23 GMT accept-ranges: bytes content-encoding: gzip vary: Accept-Encoding,User-Agent content-length: 95054 date: Tue, 10 Sep 2024 16:10:33 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff
Sep 10, 2024 18:10:33.360563040 CEST	1236	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 cc bd 69 93 db 46 96 36 fa 7d 22 e6 3f 90 68 35 8c 14 93 2c 52 b2 fb 1d 83 ca e2 b5 25 2f f2 22 a9 2d b9 bd a0 60 47 02 48 80 20 41 80 45 b2 54 25 15 d8 bf fd c6 39 b9 20 01 82 92 67 ee 7b 23 e6 83 54 20 90 fb 7a 96 Data Ascii: iF6}"?h5,R%/"-`GH AET%9 g{#T zq>`0x8<y#v5G;{7xh2<Da_\!$6PCD1Y{\|<vy<MnMC^xRqUvytsvD!^$
Sep 10, 2024 18:10:33.360586882 CEST	1236	IN	Data Raw: cd 59 a4 d1 64 23 76 99 f0 02 1e 52 3c 6b 4d 83 77 d6 14 b2 26 5f fb 76 98 3b 79 b9 bd 39 e0 85 ec ba df ab c3 42 2d d3 45 34 89 97 22 5e 0b e8 b0 7a f2 3d 2b 47 5d 3b 07 71 77 e0 3b c1 f1 37 8c 6f 04 37 26 bf 29 0e ff e2 c5 8d 60 bc f5 d3 5a 61 Data Ascii: Yd#vR<kMw&_v;y9B-E4"^z=+G];qw;7o7&)`Za{<8YP?}qpfo[D3KBs##gpnu\qmN*KI:ICzor=fMxV@VA$E+!.//y6 i2C
Sep 10, 2024 18:10:33.360606909 CEST	1236	IN	Data Raw: 71 0e c3 29 85 15 6e 33 6a 5f 6b 69 8e be aa 0d 0f 05 c4 b4 3c 38 f6 74 05 04 b2 ee db dc 79 08 2b 62 15 4c c3 39 59 4d e4 30 c1 79 2c 1b 05 a7 fd 26 df 20 cf 55 d7 31 90 77 3f 89 fd b6 2a f7 e2 5b c1 13 b1 f3 9c a7 b2 dc f1 1b c9 98 c2 2a 14 b8 Data Ascii: q)n3j_ki<8ty+bL9YM0y,& U1w?[Rbdq_II<>AB2$gJ1qUt\|}RU%K1cY]/-l(;MC2B jpvxf!D^VY?Y$ek=%9`"
Sep 10, 2024 18:10:33.360665083 CEST	1236	IN	Data Raw: 9c 14 a9 20 b1 ed ba 5e 32 a9 de 8a 5d 5a 54 b7 2c d8 98 67 da 3c fe 6a 3d ff 16 52 27 2f 8b fc ac 44 56 8b f6 5a 5f 53 90 61 c0 37 6f d3 48 32 65 31 63 14 05 38 20 dd 32 95 60 3a d3 28 67 99 27 89 28 9d de 81 b3 d2 35 f9 81 e4 b1 9a 6f 7f 99 d9 Data Ascii: ^2]ZT,g<j=R'/DVZ_Sa7oH2e1c8 2`:(g'(5o_~<Jv)$#m}KaJU?!,+dir3u=Px6$/ox+ uYwIq ZaA^\|CV-AaIhH#$g53i$
Sep 10, 2024 18:10:33.360686064 CEST	896	IN	Data Raw: 8c 17 38 8f 41 1c 86 7e 10 92 23 dd f0 6d df 00 75 b2 2b 2e 58 1e 25 2d f1 83 d9 3e 0a 10 16 c3 c0 43 ff 45 99 9c 1d 3f 33 db 75 7d b2 30 24 20 02 57 95 ff 27 dd 57 bb 83 1f 84 13 f8 4b 41 4e 19 0b fc 89 4f 47 da dc b4 d6 0d 81 2f a9 61 b5 e5 6f Data Ascii: 8A~#mu+.X%->CE?3u}0$ W'WKANOG/aoM2rj!@kif 9QUt]ofGhHm[Cb<\|us)4@0P_O8_!Y18/+b}CAef[_H`8*cM3P
Sep 10, 2024 18:10:33.360707998 CEST	1236	IN	Data Raw: 43 05 5b bc 2e 2a fd 78 a3 f3 8b 15 cb 28 75 f6 4b 09 44 c9 40 39 e6 09 a6 e9 57 0e e0 ba 84 50 b8 94 87 33 82 8a 92 06 5b 93 1a e9 7f 4f 0e 86 39 a4 6e 57 6b a4 4f 6a 91 07 14 64 49 29 fc f9 6b 35 f5 e4 b2 6a 6b 90 97 14 16 cb 87 8e 79 c7 f1 85 Data Ascii: C[.*x(uKD@9WP3[O9nWkOjdI)k5jky9U<UgVA!{/yN,urjN}N?e`<ecx[4C]-nQfSKD"#&9ln}Yk&"'n06bR3n7]VkLB
Sep 10, 2024 18:10:33.360728025 CEST	1236	IN	Data Raw: bc cc 10 13 8d b6 aa 2a f1 78 66 a6 67 31 f3 c7 2d 8b fd 3e 0b 8c 8f 1a ab 2a f2 d8 36 59 95 94 22 74 b4 6d dd ff 3f 2f be 63 e0 1a dd 1c 0e 52 ba 19 93 33 d5 ad ad ea 2c 44 8a a5 42 67 a3 88 5a 5f ba 76 01 8c 03 97 60 f8 b8 08 21 70 06 03 0c f3 Data Ascii: xfg1->6Y"tm?/cR3,DBgZ_v`!pB0!zA)l{9ki:+mmcSSI.GN{H\|9'0ABKB*F`iaAl1(<6McoOHKTSmT@WlX
Sep 10, 2024 18:10:33.360750914 CEST	1236	IN	Data Raw: 10 30 e8 f0 bf 07 7f d8 03 65 85 43 80 cd bd f6 2a 72 34 c7 c2 8a 56 84 1e 5c 17 4e e3 ca 4c 97 eb 6e 47 66 26 67 80 62 bc 29 f3 eb 1b f1 ba da 81 5d b1 5e 0b ba 7f cf d8 0d a1 fb c6 2f dc 02 2c a1 fd a5 ed a2 45 e9 12 9a 9b d5 5e 2c f3 14 f1 d3 Data Ascii: 0eC*r4V\NLnGf&gb)]^/,E^,(!L(0\x_?CQM_>r]3I^&mgp/)u\c`\|t<@?2},]DUF8T}:J]4)HO%r8Eicj@KK/gHXkQI
Sep 10, 2024 18:10:33.360771894 CEST	1236	IN	Data Raw: 6e 40 32 f1 78 76 3c 1e bf 64 f1 24 df ff fa e3 0f cc be 1c 95 5f 65 c4 1a 77 34 99 9c 74 8d dd 1a 1b 79 07 f0 92 6d 8d 95 3f 9c 1d e9 1d 8b b5 9f 2f 30 83 fb 1a 7e 0a e3 9d aa af e6 c5 69 bd fe 4b 0a 22 72 cb 4c cf 54 2c 19 91 2e b1 79 e2 35 6b Data Ascii: n@2xv<d$_ew4tym?/0~iK"rLT,.y5k}"-;@A#~/Ww]`vxNUF"vj\|5jP5=K{9I:q5Y`n\-<R(=6Rs^kiFy,s$v}?\|ro/[/~Pn#MM+s
Sep 10, 2024 18:10:33.366029978 CEST	1236	IN	Data Raw: 3b 11 57 59 99 bf 17 c9 40 dc 6d c1 c1 1b 98 dc a2 21 1d 94 d8 a8 b8 4e d9 01 1a 03 2d 08 2a 4e 21 0d 7f 7e 66 c3 3b f0 23 2d e2 c3 b3 1b d0 70 f0 83 d8 d3 af 98 3a 08 5f 63 08 16 38 42 8d c2 89 e3 07 ef 5f 84 fe 6c 60 37 5c 91 c8 78 fe 07 42 e2 Data Ascii: ;WY@m!N-N!~f;#-p:_c8B_l`7\xB1JX(X'rGl"?/#;jygV]+SF_bsA{0s,HxnLI?[6{5Bt2B,>([8Wj/nP",kj5\:}\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49976	217.21.73.115	80	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 10, 2024 18:11:09.088350058 CEST	832	OUT	GET /dmca.php HTTP/1.1 Host: football-booster.freevisit1.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: HstCfa4891773=1725984633543; HstCla4891773=1725984633543; HstCmu4891773=1725984633543; HstPn4891773=1; HstPt4891773=1; HstCnv4891773=1; HstCns4891773=1; __dtsu=10401725984635D685D944936F64E5C9; _cc_id=3bdb359c63037044d87658cfcb77131; panoramaId_expiry=1726589459946; panoramaId=315f174c42660a13ed5d4e932d8916d53938705fe5cdfc20b678eec38452d311; panoramaIdType=panoIndiv
Sep 10, 2024 18:11:10.076745987 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 x-powered-by: PHP/8.0.30 content-type: text/html; charset=UTF-8 content-length: 1115 content-encoding: gzip vary: Accept-Encoding,User-Agent date: Tue, 10 Sep 2024 16:11:09 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 1f 8b 08 00 00 00 00 00 00 03 c5 56 6d 6b 1c 47 0c fe dc fc 0a d5 14 9c 80 59 93 42 29 84 eb 81 39 9b f4 20 7e a1 71 08 f9 a8 9b d5 ee 2a 9e 9d d9 8e b4 b7 d9 fe fa a2 d9 bd 17 87 38 24 2d a5 fe 70 e0 9b 39 cd a3 47 8f 1e 69 f1 e3 e5 ed ea fe c3 dd 15 34 da fa e5 b3 45 b7 5c 88 a6 18 ea e5 e5 fa f5 fa fe e2 0d 5c af df bc b9 ba b9 59 bf bb 86 d5 ed dd 87 3f d6 af 7f bf 87 8b d5 3d 3c bf bc 5e 5d bc 80 9b db fb f5 ea 6a 71 3e ff 6c 71 8e cb b3 67 8b f3 6e f9 0c 3e fb fb 61 d1 2d df 13 60 22 e0 00 2e b6 9d 67 0c 8e 60 60 6d e0 e5 af f0 ae 78 5b ac 0a f8 09 7e 79 f9 33 60 28 41 1b 82 4b ae 59 d1 c3 35 7b 4f 21 70 df c2 2a 76 63 e2 ba 51 b8 70 3a e3 28 60 ad c0 02 b1 4f d0 45 cf 6e 04 8d 90 48 ba 68 81 22 60 18 81 43 95 38 d4 d4 52 50 08 51 d9 91 4c 0f e1 03 01 76 5d 8a 5d 62 54 02 74 ca 31 08 f4 a1 a4 f4 6d 38 56 a7 13 21 16 2f 6a 43 c9 02 7a 76 b8 f1 96 b0 92 f7 e4 b4 47 0f f6 0c 25 1d c1 e3 20 c5 93 5c ad 2b 18 2d 1d b7 7b 86 4a 68 51 29 31 7a 68 50 60 43 14 a0 8b 62 07 31 e4 d4 07 da 08 2b 41 4c c0 [TRUNCATED] Data Ascii: VmkGYB)9 ~q8$-p9Gi4E\\Y?=<^]jq>lqgn>a-`".g``mx[~y3`(AKY5{O!pvcQp:(`OEnHh"`C8RPQLv]]bTt1m8V!/jCzvG% \+-{JhQ)1zhP`Cb1+AL4cGsxc`VD@Fz}pB\j3cmXqKY>o{QKr%Xr>CAK&CS;zIq'U>ju)Cel}9^%XsqQt<hSs`I%\|g,;y1\|F@&(=Sma)wtF>+^lj#b"1-<rWvVq73r&&J(Yf%'{-h.zO5eqd;Qb9JZWa'mw=@-,D"lS,cSd{wae{kpK!>hi}5Rjg/:#Lc3H$IDQ'Ievd#YBcHg
Sep 10, 2024 18:11:10.076808929 CEST	316	IN	Data Raw: 6c 0f 2d 06 53 cf 2e a0 35 67 65 82 09 51 8f 25 b8 19 1f 93 38 89 ee 0c d8 9c a0 a6 a0 67 e6 9a 76 c5 e3 f0 6f b3 3b d6 d4 0c d3 e6 4d b5 73 3f d3 b3 73 7d 42 a5 b3 5c a7 a9 08 1d 05 f4 3a 5a 02 1d a5 8f 7d 1a cf be c6 98 45 39 24 f8 ff 35 d7 f5 Data Ascii: l-S.5geQ%8gvo;Ms?s}B\:Z}E9$5+u80_-K2ITvv\|b@uMk!'sWm[`5Ner\7)i]X\|g4FDvN=G:O=OIA}!O#;%pw,_rcd5][
Sep 10, 2024 18:11:10.238145113 CEST	792	OUT	GET /favicon.ico HTTP/1.1 Host: football-booster.freevisit1.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://football-booster.freevisit1.com/dmca.php Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: HstCfa4891773=1725984633543; HstCla4891773=1725984633543; HstCmu4891773=1725984633543; HstPn4891773=1; HstPt4891773=1; HstCnv4891773=1; HstCns4891773=1; __dtsu=10401725984635D685D944936F64E5C9; _cc_id=3bdb359c63037044d87658cfcb77131; panoramaId_expiry=1726589459946; panoramaId=315f174c42660a13ed5d4e932d8916d53938705fe5cdfc20b678eec38452d311; panoramaIdType=panoIndiv
Sep 10, 2024 18:11:10.585019112 CEST	1236	IN	HTTP/1.1 404 Not Found Connection: Keep-Alive Keep-Alive: timeout=5, max=100 cache-control: private, no-cache, no-store, must-revalidate, max-age=0 pragma: no-cache content-type: text/html content-length: 1251 date: Tue, 10 Sep 2024 16:11:10 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 [TRUNCATED] Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</style></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">404</h1><h2 style="margin-top:20px;font-size: 30px;">Not Found</h2><p>The resource requested could not be found on this server!</p></div></div><d
Sep 10, 2024 18:11:10.585037947 CEST	468	IN	Data Raw: 69 76 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 23 66 30 66 30 66 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 70 78 20 33 30 70 78 20 30 70 78 20 33 30 70 78 3b 70 6f 73 69 Data Ascii: iv style="color:#f0f0f0; font-size:12px;margin:auto;padding:0px 30px 0px 30px;position:relative;clear:both;height:100px;margin-top:-101px;background-color:#474747;border-top: 1px solid rgba(0,0,0,0.15);box-shadow: 0 1px 0 rgba(255, 255, 255, 0
Sep 10, 2024 18:11:11.396732092 CEST	835	OUT	GET /contact.php HTTP/1.1 Host: football-booster.freevisit1.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: HstCfa4891773=1725984633543; HstCla4891773=1725984633543; HstCmu4891773=1725984633543; HstPn4891773=1; HstPt4891773=1; HstCnv4891773=1; HstCns4891773=1; __dtsu=10401725984635D685D944936F64E5C9; _cc_id=3bdb359c63037044d87658cfcb77131; panoramaId_expiry=1726589459946; panoramaId=315f174c42660a13ed5d4e932d8916d53938705fe5cdfc20b678eec38452d311; panoramaIdType=panoIndiv
Sep 10, 2024 18:11:11.745589972 CEST	748	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 x-powered-by: PHP/8.0.30 content-type: text/html; charset=UTF-8 content-length: 312 content-encoding: gzip vary: Accept-Encoding,User-Agent date: Tue, 10 Sep 2024 16:11:11 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 1f 8b 08 00 00 00 00 00 00 03 95 91 3f 4f 03 31 0c c5 f7 fb 14 c6 13 0c c7 81 18 90 d0 25 03 05 31 b6 52 bb 74 cc 25 29 8d 9a 3f 55 e2 00 e5 d3 a3 dc e5 40 15 62 60 89 e4 f8 bd 9f 9f ec fe e2 69 b9 d8 6c 57 cf b0 27 67 79 d3 40 03 00 d0 ef 42 74 00 42 92 09 9e 21 82 d3 b4 0f 8a e1 6a b9 de 20 68 2f e9 74 d4 0c 5d b6 64 8e 22 52 57 0c ad 12 24 90 57 84 f1 c7 4c 30 e9 f6 46 29 ed 11 bc 70 9a e1 84 45 78 13 36 6b 86 29 0f ce d0 ec db 86 1c 47 dd 43 3f c4 73 d6 e4 2e 2f 56 2e e9 0f fa e6 20 24 f3 a9 19 de dd 60 c7 7f cc 23 50 3b 61 ec 5f c4 b1 f9 6f a4 d3 29 89 d7 b3 98 c5 2b a2 16 95 5b 15 08 31 bc 27 86 f7 08 32 d8 34 d2 78 df cd 62 fe 2b d5 14 a4 ae 65 8e b2 d6 5e 61 37 0b c7 7d d7 a2 be e5 7b c8 44 c1 57 c0 54 20 48 2b 52 62 38 90 87 81 7c ab f4 4e 64 4b 08 e5 5a ad 32 c9 99 d2 3e 9b 3d 5b eb ec 97 00 8f 42 1e 10 82 97 d6 c8 43 39 68 a2 10 4f d7 83 90 87 cb f6 f6 0a a1 e3 0b 1b 92 ee bb c9 cb 9b 2f 17 16 fb 1a 5b 02 00 00 Data Ascii: ?O1%1Rt%)?U@b`ilW'gy@BtB!j h/t]d"RW$WL0F)pEx6k)GC?s./V. $`#P;a_o)+[1'24xb+e^a7}{DWT H+Rb8\|NdKZ2>=[BC9hO/[
Sep 10, 2024 18:11:13.705790043 CEST	847	OUT	GET /register-hsfootball.php HTTP/1.1 Host: football-booster.freevisit1.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: HstCfa4891773=1725984633543; HstCla4891773=1725984633543; HstCmu4891773=1725984633543; HstPn4891773=1; HstPt4891773=1; HstCnv4891773=1; HstCns4891773=1; __dtsu=10401725984635D685D944936F64E5C9; _cc_id=3bdb359c63037044d87658cfcb77131; panoramaId_expiry=1726589459946; panoramaId=315f174c42660a13ed5d4e932d8916d53938705fe5cdfc20b678eec38452d311; panoramaIdType=panoIndiv
Sep 10, 2024 18:11:14.104731083 CEST	1236	IN	HTTP/1.1 200 OK Connection: Keep-Alive Keep-Alive: timeout=5, max=100 x-powered-by: PHP/8.0.30 content-type: text/html; charset=UTF-8 content-length: 1057 content-encoding: gzip vary: Accept-Encoding,User-Agent date: Tue, 10 Sep 2024 16:11:13 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff Data Raw: 1f 8b 08 00 00 00 00 00 00 03 8d 56 5d 6f db 36 14 7d 37 90 ff 70 a3 a2 b1 0d 84 fa 48 93 b4 93 25 b7 5d 9a a2 7b 58 37 b4 49 b0 21 08 02 9a ba 92 18 53 a4 46 d2 76 bc 26 ff 7d a0 64 a7 b6 13 27 93 1f 2c f2 1c 9d 7b c8 7b 79 a5 64 f7 d3 1f 27 67 7f ff 79 0a a5 ad c4 b0 93 b8 3f 10 54 16 a9 87 92 9c 7f f7 a0 d6 98 f3 db d4 53 45 0c a5 b5 75 1c 04 aa a8 fd 0a 03 69 5e 79 ee 11 a4 d9 b0 03 00 90 54 68 29 b0 92 6a 83 36 f5 ce cf 3e 93 77 de 2a 24 69 85 a9 37 e5 38 ab 95 b6 1e 30 25 2d 4a 9b 7a 33 9e d9 32 cd 70 ca 19 92 66 b0 0f 5c 72 cb a9 20 86 51 81 69 e4 87 6b 52 ce 0a c1 7f 26 7c 9a 7a 7f 91 f3 8f e4 44 55 35 b5 7c 24 70 45 97 63 8a 59 81 4f 98 d0 6a a4 ac 59 a1 4a c5 65 86 b7 4b aa e5 56 e0 f0 1b 16 dc 58 d4 49 d0 8e b7 18 d0 98 6b 34 e5 8a 5a 38 98 68 91 3a 8e 89 83 80 d6 dc af d5 0c 35 cd 73 ab c7 73 9f a9 2a b0 01 13 e3 f7 3c 4b 47 85 fd bd fa ed 42 5e b0 e3 7f eb c3 cf 17 7b 26 4a 6b 64 5c 5a 0a a6 54 82 ce a8 dd 33 07 8f e6 96 56 8d 9d 2f ad b9 cb 17 8a 66 5c 16 44 63 c6 35 32 0b 3f 1e 30 77 [TRUNCATED] Data Ascii: V]o6}7pH%]{X7I!SFv&}d',{{yd'gy?TSEui^yTh)j6>w$i780%-Jz32pf\r QikR&\|zDU5\|$pEcYOjYJeKVXIk4Z8h:5ss<KGB^{&Jkd\ZT3V/f\Dc52?0wA7GcnHncTo3x!c`(-B9Nn2[DVb_r31sHorFvfdRuinTrgiX]FU4RR"3$PA4Cp)D2M7<zHlZR8;:<1RQ]pCPM3>11c8o(3xuppSBjMM5Jhb\|H^\R.sdm0yitzc]\,3,FQ??%'&AvJF*[=rS3>] S$Ed}_}vsw:aNpCS5s\^v:_OL.KC7?\|Ka
Sep 10, 2024 18:11:14.104954004 CEST	258	IN	Data Raw: 14 86 61 d8 bd ea 6f 7f 3e a7 86 37 8f 3f cb b2 9a b2 f1 75 c9 ad 71 dc 96 da cb 27 b2 e9 3b bd 3e fc d8 e9 38 ef a5 81 14 32 c5 26 15 4a eb 33 8d d4 e2 a9 40 37 ea 75 db 45 76 fb 03 28 8d ef 36 00 52 e8 6e 6c 41 b7 01 1b 0b 90 82 d5 13 1c ec 74 Data Ascii: ao>7?uq';>82&J3@7uEv(6RnlAtJn(tS-{]Wexww}Z(W2+>PjS/R]r^FVY/x~(<^a#`j[t]ea<8yO
Sep 10, 2024 18:11:14.105875015 CEST	258	IN	Data Raw: 14 86 61 d8 bd ea 6f 7f 3e a7 86 37 8f 3f cb b2 9a b2 f1 75 c9 ad 71 dc 96 da cb 27 b2 e9 3b bd 3e fc d8 e9 38 ef a5 81 14 32 c5 26 15 4a eb 33 8d d4 e2 a9 40 37 ea 75 db 45 76 fb 03 28 8d ef 36 00 52 e8 6e 6c 41 b7 01 1b 0b 90 82 d5 13 1c ec 74 Data Ascii: ao>7?uq';>82&J3@7uEv(6RnlAtJn(tS-{]Wexww}Z(W2+>PjS/R]r^FVY/x~(<^a#`j[t]ea<8yO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	50176	13.248.148.254	80	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 10, 2024 18:11:35.118973017 CEST	443	OUT	GET / HTTP/1.1 Host: ww38.watchdogsecurity.online Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 10, 2024 18:11:35.709997892 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:11:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Server: nginx Vary: Accept-Encoding X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_VCRqh19HyxefQAVgpStFXvH947t4tZK3t0jrl4/gnBN4bB3gGTsqW+0PFDODmH9peJ3Qqsy0k830trN6MOkccw== Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 X-Domain: watchdogsecurity.online X-Subdomain: ww38 Content-Encoding: gzip Data Raw: 31 37 36 61 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 5b eb 5b da ca d6 ff ac 7f 45 4a 9f 23 f8 96 4b b8 29 82 69 0f 8a 17 dc 05 b5 d2 aa f4 e9 db 27 24 03 04 42 c2 4e 82 80 fb f8 bf bf bf 35 33 09 41 71 ef f6 3c bb e7 fd 72 6c c5 64 2e 6b ad 59 b3 ee 33 1c be 69 5c 1e 77 ee af 4e 94 61 30 b1 df 6f 1f d2 1f c5 d4 03 3d a3 9b 3d db 35 c6 63 b6 d4 12 ad d3 f9 bc 71 7d 7f f1 9b db 6d 0e 1f 8c 76 fd fa e4 e8 e8 ba de b8 99 d7 e7 37 f5 8b a3 fa c7 df 67 8d d3 93 ce dd 27 47 3d f7 d4 72 ff f3 d5 fe c9 45 67 7f 7f 71 ef 5c 4d 3e f5 a6 ad 65 e9 61 5c f9 ed de 3a 77 c6 ed 29 33 9d d1 65 bd 7d 61 e8 77 8d 3b e3 b7 eb 8b b6 ea dc fd d6 bd f8 b8 df 31 ac 8b 46 a5 ee 9e df fd 96 2f 57 8e eb f3 93 7a fd 5a d3 be 7f 39 fe f4 fb 30 7f 70 be 5c b0 fe 75 fd cb 60 7a 13 9c de 3d 9c 1f 94 f6 83 52 d0 fd ad 18 a8 23 cf 2e e5 06 ce 51 bb d4 3b 2a 0e ce 3a fe ef b7 ef d4 ab d3 c6 65 63 72 7e 30 65 17 c5 eb df fd a5 3a ae 14 d5 c0 6b ef b5 2e c7 86 31 d7 b4 84 b2 98 d8 8e af 25 86 41 30 ad e6 72 f3 f9 3c 3b 2f 66 5d 6f 90 cb [TRUNCATED] Data Ascii: 176a[[EJ#K)i'$BN53Aq<rld.kY3i\wNa0o==5cq}mv7g'G=rEgq\M>ea\:w)3e}aw;1F/WzZ90p\u`z=R#.Q;*:ecr~0e:k.1%A0r<;/f]ob@K0'Ab~[:L3%]'`N,,MKlRM1@L%rO]/M[f0
Sep 10, 2024 18:11:35.710196972 CEST	1236	IN	Data Raw: 4c f6 60 19 2c c3 5f d2 8a e5 58 81 a5 db 19 df d0 6d a6 e5 d3 8a 3f f4 2c 67 9c 09 dc 4c df 0a 34 c7 8d 60 07 56 60 b3 f7 73 3d 30 86 a6 3b f0 99 31 f3 ac 60 99 75 1d db 72 d8 61 4e 74 8b f5 f8 c1 d2 66 ca 84 99 96 ae 25 7c c3 63 7c c5 59 dd 07 Data Ascii: L`,_Xm?,gL4`V`s=0;1`uraNtf%\|c\|Y@Tn;s2T239V~e}:,C6a~sNv`f<6ez`j[\|}U%_.6d`_M.$o"'n3xrh>m}
Sep 10, 2024 18:11:35.710207939 CEST	448	IN	Data Raw: 59 db 1f 11 ff 11 de f5 88 90 5a 56 42 95 b1 26 fa 00 a4 73 1d a2 bc bb ca 1b 72 fe c3 e0 1d 52 d3 5a 4f f7 d9 5e 29 7d 75 de 2e 74 97 47 13 fd 76 e1 5f dd 18 a3 4f 0d f3 a4 ad 5e 17 2f 96 47 8f e6 b9 ed 77 3b aa d5 9d 2c 1e ee ef ae f7 9a e7 17 Data Ascii: YZVB&srRZO^)}u.tGv_O^/Gw;,na6Rv13UK?c,r,?5[gC[5]Z<Nwq88hq}Y7T1NUh\|ush&nG{C}1v:?b\ec0h\|ZAm<
Sep 10, 2024 18:11:35.710239887 CEST	1236	IN	Data Raw: cb 86 ed ab 2a 53 cf 1d 58 66 b5 71 d7 24 79 ef 80 03 3e 98 3c c9 b6 2c c3 73 7d b7 1f 64 a3 c5 29 54 21 08 8e 49 fb fd c0 d3 92 72 9d c9 b4 c2 1c 33 de cc 97 9c 4c 9f 49 ae 50 d1 45 53 15 b1 7c 61 93 b8 45 a4 88 40 9a 1f c6 28 81 dc 92 16 2b b4 Data Ascii: *SXfq$y><,s}d)T!Ir3LIPES\|aE@(+>/6?aEf> #5lE @VrKP"WS7O\"y&wy\ gnmm("6YsSrcEv:~}RfJ(^=l+notTr
Sep 10, 2024 18:11:35.710251093 CEST	1236	IN	Data Raw: 4d ee 17 dd c6 17 bb 7b db cc df 3f 0e ca ad c2 29 da 5a 85 fb ce 70 d8 2a 74 87 f7 a3 23 50 31 28 b6 1e eb 8f dd ce 91 75 d9 68 13 9e b1 71 9c 57 c1 a3 40 bf 2d ab dd bb 8b 19 f1 e1 f2 4b e5 d1 38 1b 0a da 1a 06 36 bc fe 78 d9 b9 c7 86 99 95 7e Data Ascii: M{?)Zpt#P1(uhqW@-K86x~FpEK_=!W:NonY}$0'm),,:)%'~R>IPB?xZknOc~'Bbry@6:[[[ZqC;
Sep 10, 2024 18:11:35.710259914 CEST	1236	IN	Data Raw: 1b e1 66 2f 3e 0b 52 55 a4 9b a5 76 f2 da 09 3c 00 5b 62 97 37 20 f5 78 aa d1 c9 65 8a b2 11 dc db a6 90 9e 4f a6 ee af 68 f8 06 e8 d4 c0 9f 6b 1e 0b 66 1e 1f 91 af 61 a2 cc 85 14 1c d3 dc b5 3e d2 ad e6 14 b0 12 28 9c 43 9f e3 15 93 9d 99 6d d7 Data Ascii: f/>RUv<[b7 xeOhkfa>(Cmcmp&@#:E21TR06L[wT^!K`:D\|>]1F<==KkOWKfId*JE]ENZ~]<z#8S?-Mg'D.E"/k$AiYE
Sep 10, 2024 18:11:35.710268974 CEST	185	IN	Data Raw: a2 03 f5 d3 ec a9 eb e3 18 c5 66 11 7c 82 82 23 49 7e 68 40 f7 c5 e4 23 4e 47 a3 e7 02 3d cb eb 55 f4 28 0e 8e c3 5b 31 d4 e2 05 d1 7c cf 8f 1e e5 38 14 a0 c7 49 d0 41 24 d0 4f 94 2f 5b c0 ad d6 14 4b 39 7c 49 96 b4 92 e8 7d f7 2e ce 01 02 40 1a Data Ascii: f\|#I~h@#NG=U([1\|8IA$O/[K9\|I}.@rZ!Y@sED^'-KX0&m!*oD9jH1qW%]Z14S>0
Sep 10, 2024 18:11:35.928363085 CEST	522	OUT	GET /track.php?domain=watchdogsecurity.online&toggle=browserjs&uid=MTcyNTk4NDY5NS42MTQzOjA2Y2FlNmM1NTY4MzUwZmYyZjAzNjY1NTNiMGI5MjA1ZTA2MjNkYmIwY2QwMzc1MTA0NjNiMTdkNjA5NzIzNDE6NjZlMDZmYjc5NWY3OQ%3D%3D HTTP/1.1 Host: ww38.watchdogsecurity.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww38.watchdogsecurity.online/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 10, 2024 18:11:36.111795902 CEST	608	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:11:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 10, 2024 18:11:36.204490900 CEST	392	OUT	GET /ls.php?t=66e06fb7&token=7b2f1d5eeb5c893ab2c6a8a3fab0c687303e0b83 HTTP/1.1 Host: ww38.watchdogsecurity.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww38.watchdogsecurity.online/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 10, 2024 18:11:36.396656990 CEST	865	IN	HTTP/1.1 201 Created Date: Tue, 10 Sep 2024 16:11:36 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Server: nginx Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Charset: utf-8 Access-Control-Allow-Origin: Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Max-Age: 86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_TL/crECM4bDTg7cJ7YBRxI+GbpadKMrlQCg11ELy8lc2W8o0NHb2FsnUbNZlJl1P0qmceSr9zmAiFiz0UK4n6Q== Data Raw: 31 30 0d 0a 7b 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"success":true}0
Sep 10, 2024 18:11:40.218322039 CEST	641	OUT	GET /track.php?domain=watchdogsecurity.online&caf=1&toggle=answercheck&answer=yes&uid=MTcyNTk4NDY5NS42MTQzOjA2Y2FlNmM1NTY4MzUwZmYyZjAzNjY1NTNiMGI5MjA1ZTA2MjNkYmIwY2QwMzc1MTA0NjNiMTdkNjA5NzIzNDE6NjZlMDZmYjc5NWY3OQ%3D%3D HTTP/1.1 Host: ww38.watchdogsecurity.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://ww38.watchdogsecurity.online/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=d82d484fdf919dea:T=1725984698:RT=1725984698:S=ALNI_MZG0j4eLkBIBLaXlE2oaKhPnP0tAQ
Sep 10, 2024 18:11:40.416414022 CEST	610	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:11:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140
Sep 10, 2024 18:11:40.494991064 CEST	500	OUT	GET /favicon.ico HTTP/1.1 Host: ww38.watchdogsecurity.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww38.watchdogsecurity.online/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=d82d484fdf919dea:T=1725984698:RT=1725984698:S=ALNI_MZG0j4eLkBIBLaXlE2oaKhPnP0tAQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	50189	18.66.121.135	80	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 10, 2024 18:11:36.200908899 CEST	441	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://ww38.watchdogsecurity.online/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 10, 2024 18:11:36.990345955 CEST	1236	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: keep-alive Server: nginx Date: Mon, 09 Sep 2024 17:27:27 GMT Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT Accept-Ranges: bytes ETag: "65fc1e7b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 d13436be9e793d00b0273db3f7904816.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: dP7y4Eh_gqFpBto97t7v6dJ1tEjKDu_R3n-Wp9YYmq8VNqMhicb4uQ== Age: 81849 Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff ff ff 63 64 74 49 4b 5e 49 4b 5d 49 4b 5c 30 33 49 48 4b 5f 61 63 73 63 65 75 62 64 74 63 65 74 15 19 30 3d 40 53 48 4b 5d 49 4c 5d 48 4b 5c 4d 50 62 4e 51 62 4f 52 63 12 17 2e 14 19 30 22 26 3b 28 2c 40 2b 2f 42 30 34 49 2e 32 46 2f 33 47 2d 31 44 30 34 48 2e 32 45 30 34 47 31 35 48 32 36 49 35 39 4c 38 3c 50 36 3a 4d 39 3d 51 37 3b 4e 3a 3e 52 3a 3e 51 3b 3f 52 3c 40 53 49 4c 5c 62 65 75 61 64 74 62 65 74 63 66 74 62 65 73 13 18 2d 15 1a 30 1b 20 35 1c 21 36 1d 22 37 1e 23 38 1d 22 36 1f 24 39 20 25 3a 21 26 3b 22 27 3c 22 27 3b 24 29 3e 23 28 3c 25 2a 3f 24 29 3d 26 2b 40 25 2a 3e 27 2c 41 26 2b 3f 28 2d 42 29 2e 43 28 2d 41 29 2e 42 2a 2f 43 2b 30 44 2c 31 45 30 35 49 31 35 47 3c 40 52 3d 41 53 49 4d 5f 48 4c 5d 4b 4f 60 48 4c 5c 4d 51 62 61 65 75 11 17 [TRUNCATED] Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8"6$9 %:!&;"'<"';$)>#(<%?$)=&+@%>',A&+?(-B).C(-A).B/C+0D,1E05I15G<@R=ASIM_HL]KO`HL\MQbaeu.-/.0/.0/11234 5!6#8$9%: &;"':$)<&+>',?(-@).A/B+0C,1D/A-2E.3F/4G05H16I/4F05G38K6;N49K;@S;@R<ASGL^bfuaetbft.0!5"6#7$8%9 &:!';"(<!':#)=#)<$=&,@&,?+1E)/B06IGL]GL\HM]bfs-.01 4!5"6#7$8 '< ';*0B.4F06H06G-0!5 (< (;
Sep 10, 2024 18:11:36.990478039 CEST	666	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 15 de 74 00 00 00 b1 74 52 4e 53 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: ttRNS
Sep 10, 2024 18:11:36.990488052 CEST	1236	IN	Data Raw: 7e b2 47 16 ee f0 4e 44 24 86 f6 90 b8 c3 3b 11 91 10 da c3 e2 0e ef 44 44 22 68 0f 8d 3b bc 13 11 09 a0 3d 3c ee f0 4e 44 94 9d f6 18 b8 c3 3b 11 51 a3 22 38 1c 05 77 78 27 22 ca 4a 7b 2c dc e1 9d 88 28 23 ed f1 70 87 77 22 a2 6c b4 c7 c4 1d de Data Ascii: ~GND$;DD"h;=<ND;Q"8wx'"J{,(#pw"l2wx'"B{l(qw"wx'"JJ{*(!pw"d NDnwx'"h7;MD&qw"2+;MD&qw"v;A
Sep 10, 2024 18:11:36.990498066 CEST	1236	IN	Data Raw: d9 70 8f c4 3b b8 57 c4 db 7b c4 31 99 7c b8 e7 a2 3d 23 ee 51 78 07 f7 aa b8 ac 4a 7d 71 2d 35 09 ee bb bf b8 2d 9f b0 19 71 8f c0 3b b8 57 c6 81 77 e2 bb 3d 03 ee bb 77 9e c8 e9 6b 56 dc 83 f3 0e ee 95 bd 0b 66 b4 be 77 59 15 d1 71 cf 4c 7b 76 Data Ascii: p;W{1\|=#QxJ}q-5-q;Ww=wkVfwYqL{vU)~{v}7Gw=-h{{1F,E.`{_s1W&Bh{ s.vA=hn5wQS;}mwbNI(.v;S
Sep 10, 2024 18:11:36.990506887 CEST	1236	IN	Data Raw: ab d7 99 71 8f c0 7b 2d da cd e2 ce fb 1d 24 ab 4f 4f 16 8b 7b 97 f7 4b 1a 68 8f 85 7b 60 de 6b d2 6e 17 77 0e bc 93 a4 6e 9f 2c 19 f7 d0 bc 47 a2 3d 1e ee 1d de 7f 95 9a 76 c3 b8 73 24 92 e4 f4 ce 64 e1 b8 ef 08 f8 1a 5f 34 da 63 e2 7e f0 e0 37 Data Ascii: q{-$OO{Kh{`knwn,G=vs$d_4c~7v;aCH{\v;$=*qoGLpo{d#?+l19G=oipq=ipv~;$!;wP>?xApo7
Sep 10, 2024 18:11:36.990516901 CEST	1236	IN	Data Raw: 20 53 1f f7 0e ef df 7f 4b 26 ed 3d de ff c4 32 ee 5c 4b 25 15 5d b0 8c 7b 26 da 6b bd c6 37 82 f6 91 b8 8f 3c f8 9e 8f f6 aa 91 91 13 d8 4e 84 ee 81 70 cf 48 fb c8 cd f7 91 b4 d7 c0 7d d8 c9 c8 c3 79 69 ef e7 dd 0e ee 5c 4b 25 35 5d 67 13 f7 dc Data Ascii: SK&=2\K%]{&k7<NpH}yi\K%5]gF]>&O`;2\|;l'BK: W-q:X{k5'#7aikg#6pg)v}dZcR;
Sep 10, 2024 18:11:36.990528107 CEST	1236	IN	Data Raw: 05 f7 35 7d 84 11 a4 b3 6d e0 be ae 7f fd c6 d7 f2 ea 9a 15 f7 f1 b3 fb f7 7f ed fe 87 c0 9d 0f 77 e2 d3 dd 16 ee cf df 3f be 7f ff d9 f1 42 71 ef d2 de 2d 20 ef da 71 7f 11 1f 48 73 2f 82 fb 1a da 7b 8d 17 88 fb 15 da 7b dd fb 10 b8 63 3b a1 bb Data Ascii: 5}mw?Bq- qHs/{{c;Wi@{8uv;#p_O{F=sNq=Naxv"t{5xwbhb}w=q?DxW;&n,aGw^b"}4ywhoVo'Sm+z'sNq
Sep 10, 2024 18:11:36.990967035 CEST	552	IN	Data Raw: de 6b d2 de e9 a9 16 b8 2f 35 69 ec ee dc b4 67 c5 9d 8d 77 a2 10 bd b9 28 0a f7 d4 bc d7 a7 7d 24 ef ae ce 75 54 79 bc 57 d2 9e 19 77 74 27 52 6d 7b 35 ee 29 79 6f 46 fb 08 de 5d 30 da 13 f2 3e 80 f6 dc b8 a3 3b 91 66 db 07 e1 9e 8a f7 e6 b4 0f Data Ascii: k/5igw(}$uTyWwt'Rm{5)yoF]0>;f{FD2.!'}qGw"=6=2Ci;}81yoG]p#>v;VGW">(R!=5h;w>RA=0h
Sep 10, 2024 18:11:36.990978003 CEST	1236	IN	Data Raw: b3 e0 3e 98 f7 96 b4 cb c4 1d dd 89 2a 7a 73 d1 1c ee 03 79 cf 41 7b 26 dc ab 79 6f 4d bb 50 dc d1 9d 48 85 ed ed 71 af e4 3d 0f ed d9 70 ef e7 3d 00 ed 52 71 47 77 a2 0d c9 5c a9 0b 21 14 1a 8f f1 cc 92 2a dc d7 f3 1e 84 76 b1 b8 a3 3b 91 02 db Data Ascii: >zsyA{&yoMPHq=p=RqGw\!v;\|g}@=3KKcw]0N$pxK{v:w?aE-I?tn[G;2D\|=zGDwB{fw'`sHGV/1w
Sep 10, 2024 18:11:36.990987062 CEST	652	IN	Data Raw: 15 ef ce 10 ed 31 71 47 77 22 19 fd e7 74 4e dc 15 f1 ee 0c d1 1e 15 77 0e cd 10 49 e8 ab d3 99 71 ef f0 2e f7 35 be 27 ab 70 37 40 7b 5c dc f9 78 27 32 bc 25 d3 00 77 25 bc 3b 43 b4 c7 c6 9d 6f 77 22 cb b6 d7 c7 7d 4a f2 63 ab 4f ae c5 dd 08 ed Data Ascii: 1qGw"tNwIq.5'p7@{\x'2%w%;Cow"}JcOqGw&wxw3Gw;?1Np3D{K](3>'`qbG"qD6mG&pGw"O#wgTQ:-w59C'R\|
Sep 10, 2024 18:11:37.081136942 CEST	1236	IN	Data Raw: ee ef a5 a7 3d 32 ee d8 4e 64 5b f7 23 e9 cd 8a c8 7b 24 dc e3 0d 7e cc 86 3b b6 13 19 d7 fd 48 0e b5 a2 f1 ee 0c d1 1e 17 77 56 15 91 71 dd 8f e4 71 2b 12 ef ce 10 ed 51 71 67 4d 11 c9 c8 1c ee 91 9e 6b 72 86 68 8f 88 3b 23 07 88 c4 74 ad 39 dc Data Ascii: =2Nd[#{$~;HwVqq+QqgMkrh;#t9wl'e{G=&vf+HghJ=7ay{Q3J"*B}JBG5 c8"]6{(>#;BwF1=8NT8{b&#h;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	50200	13.248.148.254	80	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 10, 2024 18:11:37.385816097 CEST	475	OUT	GET /track.php?domain=watchdogsecurity.online&toggle=browserjs&uid=MTcyNTk4NDY5NS42MTQzOjA2Y2FlNmM1NTY4MzUwZmYyZjAzNjY1NTNiMGI5MjA1ZTA2MjNkYmIwY2QwMzc1MTA0NjNiMTdkNjA5NzIzNDE6NjZlMDZmYjc5NWY3OQ%3D%3D HTTP/1.1 Host: ww38.watchdogsecurity.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 10, 2024 18:11:37.927175045 CEST	603	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:11:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a Data Ascii: 14
Sep 10, 2024 18:11:38.053813934 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Sep 10, 2024 18:11:40.524564981 CEST	594	OUT	GET /track.php?domain=watchdogsecurity.online&caf=1&toggle=answercheck&answer=yes&uid=MTcyNTk4NDY5NS42MTQzOjA2Y2FlNmM1NTY4MzUwZmYyZjAzNjY1NTNiMGI5MjA1ZTA2MjNkYmIwY2QwMzc1MTA0NjNiMTdkNjA5NzIzNDE6NjZlMDZmYjc5NWY3OQ%3D%3D HTTP/1.1 Host: ww38.watchdogsecurity.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: __gsas=ID=d82d484fdf919dea:T=1725984698:RT=1725984698:S=ALNI_MZG0j4eLkBIBLaXlE2oaKhPnP0tAQ
Sep 10, 2024 18:11:40.825131893 CEST	610	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:11:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width Accept-CH: dpr Accept-CH: device-memory Accept-CH: rtt Accept-CH: downlink Accept-CH: ect Accept-CH: ua Accept-CH: ua-full-version Accept-CH: ua-platform Accept-CH: ua-platform-version Accept-CH: ua-arch Accept-CH: ua-model Accept-CH: ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 03 00 00 00 00 00 00 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 140

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	50201	18.66.121.135	80	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 10, 2024 18:11:37.388799906 CEST	333	OUT	GET /themes/cleanPeppermintBlack_657d9013/img/arrows.png HTTP/1.1 Host: d38psrni17bvxu.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 10, 2024 18:11:38.008091927 CEST	442	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: keep-alive Server: nginx Date: Mon, 09 Sep 2024 17:27:27 GMT Last-Modified: Thu, 21 Mar 2024 11:48:11 GMT Accept-Ranges: bytes ETag: "65fc1e7b-2c6f" X-Cache: Hit from cloudfront Via: 1.1 2f72de1f504b6784c7adb04e7fe314f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA60-P2 X-Amz-Cf-Id: rYBXXYgn67GSLM32unJFPW_xT-PGbwtfvdXMIshrnHXaFHYMbubC1A== Age: 81850
Sep 10, 2024 18:11:38.008249998 CEST	1236	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 dc 00 00 02 58 08 03 00 00 00 4f 6d d4 16 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 00 50 4c 54 45 00 00 00 ff Data Ascii: PNGIHDRXOmtEXtSoftwareAdobe ImageReadyqe<PLTEcdtIK^IK]IK\03IHK_acsceubdtcet0=@SHK]IL]HK\MPbNQbORc.0"&;(,@+/B04I.2F/3G-1D04H.2E04G15H26I59L8<P6:M9=Q7;N:>R:>Q;?R<@SIL\beuadtbetcftbes-0 5!6"7#8
Sep 10, 2024 18:11:38.008258104 CEST	1236	IN	Data Raw: a4 aa 57 2a 20 af c2 1d de 89 88 54 d3 3e 08 77 78 27 22 52 4c fb 60 dc e1 9d 88 48 2d ed c3 70 87 77 22 22 a5 b4 0f c7 1d de 89 88 54 d2 3e 0a 77 78 27 22 12 d9 08 bb 47 e2 0e ef 44 44 ea 68 af 83 3b bc 13 11 29 a3 bd 1e ee f0 4e 44 a4 8a f6 ba Data Ascii: W* T>wx'"RL`H-pw""T>wx'"GDDh;)ND;"DDjho{'~X""74wx'"OND$v/H6;dqw""}+DD2io;ND$;@DDh;=ND$P;Q~GND$;
Sep 10, 2024 18:11:38.008268118 CEST	1236	IN	Data Raw: 3d 32 ee c9 79 07 77 74 27 af 58 35 e9 71 8f 4b 7b 74 dc 3b bc 7f 09 dc d1 9d b0 1d dc d3 d2 9e 00 f7 f9 f9 53 bb c0 1d dd 49 70 3f 67 c5 a4 c6 3d 3e ed 49 70 4f c8 3b b8 5f e9 4e c4 22 8e c9 48 c5 3d 05 ed 89 70 4f c6 3b b8 5f 8d eb 4c 54 b3 cf Data Ascii: =2ywt'X5qK{t;SIp?g=>IpO;_N"H=pO;_LTZd'W;.T'}~K=IqO;;aXS;fI\]J{ZwpGwj+$i{Tf="py[gwp2=p;W{1\|=#
Sep 10, 2024 18:11:38.008275032 CEST	1236	IN	Data Raw: 7b 5e dc 77 ec b8 e5 05 b5 b4 07 c0 3d db 5b da fd b4 1b c3 7d f2 f7 80 83 a4 f7 9d 49 d3 b8 e7 e2 3d 00 ed 61 70 cf c1 7b 15 ed d6 70 9f bc 80 1d 24 bb cf 4f 5a c7 3d 07 ef 41 68 0f 85 7b 6a de ab 69 37 87 3b d7 99 48 76 b7 4f 16 80 fb 8e 1d a7 Data Ascii: {^w=[}I=ap{p$OZ=Ah{ji7;HvO+=)yD=9I{gS}@pOA{W;Ij&K=Ai{d/$$Y\k}{`Eo?GVqGwvq{-$OO
Sep 10, 2024 18:11:38.008377075 CEST	1236	IN	Data Raw: cc 5b 42 69 af c7 fb 04 b6 13 a1 7b 34 dc 23 d1 1e 86 f7 f5 b4 6f c4 bd c3 7b cb a3 33 f1 68 af c3 bb 45 dc 19 39 40 e8 2e 03 f7 be f7 f3 24 f1 be 91 f6 7e dc db 9d 8c 8c 4b fb 68 de 27 b0 9d 28 51 af 16 86 fb 2d b3 d1 79 f3 e7 fd be ef 2d f5 49 Data Ascii: [Bi{4#o{3hE9@.$~Kh'(Q-y-I^7<a}6MIx;h/^\| ^~^M@\|OG0Te}NF}sMNAqOL{yCp{znw Y=y? SK&=2\K
Sep 10, 2024 18:11:38.008384943 CEST	1020	IN	Data Raw: 5f da f5 e2 8e ee 84 ed 7a 71 6f c0 7b 3a da 93 e2 5e 93 77 7f da 15 e3 8e ee 64 a7 87 4f 16 87 7b 4d de 53 d2 9e 18 f7 1a bc b7 a1 5d 33 ee f0 4e 7c b6 6b c6 bd 06 ef 69 69 4f 8e fb 70 de b7 3e d7 8a 76 dd b8 73 68 86 f8 6e d7 8c fb 70 de 9f 7d Data Ascii: _zqo{:^wdO{MS]3N\|kiiOp>vshnp}\|jk>ow]7y@{y@v]7g=]=N~3]?Fo<vN\|[i2i;}g75}m
Sep 10, 2024 18:11:38.008399963 CEST	1236	IN	Data Raw: f6 db a9 e8 b6 29 c2 fd f9 fb f3 f3 36 de 82 f6 fa b8 57 f1 7e 76 bf 84 d6 f2 3e 87 ed 44 e8 de 1e 77 09 b4 57 f2 7e 76 ac 36 d9 f5 71 df c8 bb 0c da d7 f3 3e 87 ed 44 e8 de 16 77 29 b4 f7 f1 de 80 f6 66 b8 af e5 5d 0e ed 6b 79 17 8d 3b 0b 9b 48 Data Ascii: )6W~v>DwW~v6q>Dw)f]ky;H8_]?$wFzQ6h:S!q.?$wdVH0ivZ:3_(DSqjEcya\*LPO;Y}qq7Kk{
Sep 10, 2024 18:11:38.008408070 CEST	1236	IN	Data Raw: 2e 0a f7 3e da 03 f1 ce f8 01 22 74 cf 88 7b 1f ed 19 79 77 52 68 0f c2 3b 83 c3 88 d0 3d 1b ee 95 b4 67 e3 dd c9 a1 3d 00 ef 8c fc 25 42 f7 4c b8 0f a4 3d 13 ef 4e 12 ed ad 79 5f c0 76 22 35 1d b0 84 fb 50 da b3 f0 ee 64 d1 de 92 77 69 b8 ff 96 Data Ascii: .>"t{ywRh;=g=%BL=Ny_v"5PdwiK4}$xwho)76pE{r<[.wF=1N"/`;IyO}y_v"tO{c YDxwri}='I1N)poE{lD{SiO
Sep 10, 2024 18:11:38.008414984 CEST	408	IN	Data Raw: 77 b6 66 88 8c 6d c9 b4 c7 5d 1a ef ce 10 ed 29 71 e7 3a 13 91 b1 ef f6 f6 b8 cb 1a 19 e9 0c d1 9e 12 77 74 27 b2 66 fb 74 08 84 e4 f0 ee 0c d1 9e 14 77 74 27 32 66 fb 74 18 86 a4 f0 2e 02 f7 99 c7 a7 a6 d4 e1 ce be 3b 51 fc 2e 4f ab c3 5d 0a ef Data Ascii: wfm])q:wt'ftwt'2ft.;Q.O]q/qGw]GQ$7(wt'2d{@%wt'c{PD.9CNp3D{b9Iq3D;]FF:C'1VQS{&hO;=Yxwil'Bwg=-
Sep 10, 2024 18:11:38.094985962 CEST	1236	IN	Data Raw: ee ef a5 a7 3d 32 ee d8 4e 64 5b f7 23 e9 cd 8a c8 7b 24 dc e3 0d 7e cc 86 3b b6 13 19 d7 fd 48 0e b5 a2 f1 ee 0c d1 1e 17 77 56 15 91 71 dd 8f e4 71 2b 12 ef ce 10 ed 51 71 67 4d 11 c9 c8 1c ee 91 9e 6b 72 86 68 8f 88 3b 23 07 88 c4 74 ad 39 dc Data Ascii: =2Nd[#{$~;HwVqq+QqgMkrh;#t9wl'e{G=&vf+HghJ=7ay{Q3J"*B}JBG5 c8"]6{(>#;BwF1=8NT8{b&#h;

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49716	104.18.10.207	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:28 UTC	464	OUT	GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:28 UTC	933	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:10:28 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"269550530cc127b6aa5a35925a7de6ce" Last-Modified: Mon, 25 Jan 2021 22:04:55 GMT CDN-CachedAt: 11/30/2023 17:43:30 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 755 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: ab8626e4b724b111058794b60ba8757c CDN-Cache: HIT CF-Cache-Status: HIT Age: 15626966 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8c10b0397c734361-EWR alt-svc: h3=":443"; ma=86400
2024-09-10 16:10:28 UTC	436	IN	Data Raw: 37 39 31 38 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 Data Ascii: 7918/! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7
2024-09-10 16:10:28 UTC	1369	IN	Data Raw: 6d 65 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 74 74 66 3f 76 3d 34 2e 37 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 3f 76 3d 34 2e 37 2e 30 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 66 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 Data Ascii: me-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font
2024-09-10 16:10:28 UTC	1369	IN	Data Raw: 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 39 30 7b Data Ascii: :rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}.fa-rotate-90{
2024-09-10 16:10:28 UTC	1369	IN	Data Raw: 78 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 73 74 61 63 6b 2d 31 78 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 69 6e 76 65 72 73 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 31 22 7d 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 32 22 7d 2e 66 61 2d 65 6e 76 65 6c 6f 70 65 2d 6f 3a 62 Data Ascii: x{position:absolute;left:0;width:100%;text-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-glass:before{content:"\f000"}.fa-music:before{content:"\f001"}.fa-search:before{content:"\f002"}.fa-envelope-o:b
2024-09-10 16:10:28 UTC	1369	IN	Data Raw: 7d 2e 66 61 2d 66 6c 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 34 22 7d 2e 66 61 2d 68 65 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 35 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 36 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 37 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 38 22 7d 2e 66 61 2d 71 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 39 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 61 22 7d 2e Data Ascii: }.fa-flag:before{content:"\f024"}.fa-headphones:before{content:"\f025"}.fa-volume-off:before{content:"\f026"}.fa-volume-down:before{content:"\f027"}.fa-volume-up:before{content:"\f028"}.fa-qrcode:before{content:"\f029"}.fa-barcode:before{content:"\f02a"}.
2024-09-10 16:10:28 UTC	1369	IN	Data Raw: 22 7d 2e 66 61 2d 66 61 73 74 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 39 22 7d 2e 66 61 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 61 22 7d 2e 66 61 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 62 22 7d 2e 66 61 2d 70 61 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 63 22 7d 2e 66 61 2d 73 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 64 22 7d 2e 66 61 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 65 22 7d 2e 66 61 2d 66 61 73 74 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 30 22 7d 2e 66 61 2d Data Ascii: "}.fa-fast-backward:before{content:"\f049"}.fa-backward:before{content:"\f04a"}.fa-play:before{content:"\f04b"}.fa-pause:before{content:"\f04c"}.fa-stop:before{content:"\f04d"}.fa-forward:before{content:"\f04e"}.fa-fast-forward:before{content:"\f050"}.fa-
2024-09-10 16:10:28 UTC	1369	IN	Data Raw: 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 30 22 7d 2e 66 61 2d 77 61 72 6e 69 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 31 22 7d 2e 66 61 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 32 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 34 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 35 22 7d 2e 66 61 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 Data Ascii: re{content:"\f070"}.fa-warning:before,.fa-exclamation-triangle:before{content:"\f071"}.fa-plane:before{content:"\f072"}.fa-calendar:before{content:"\f073"}.fa-random:before{content:"\f074"}.fa-comment:before{content:"\f075"}.fa-magnet:before{content:"\f07
2024-09-10 16:10:28 UTC	1369	IN	Data Raw: 6e 74 3a 22 5c 66 30 39 35 22 7d 2e 66 61 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 36 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 37 22 7d 2e 66 61 2d 70 68 6f 6e 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 38 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 39 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 61 22 7d 2e 66 61 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 62 22 7d 2e 66 61 Data Ascii: nt:"\f095"}.fa-square-o:before{content:"\f096"}.fa-bookmark-o:before{content:"\f097"}.fa-phone-square:before{content:"\f098"}.fa-twitter:before{content:"\f099"}.fa-facebook-f:before,.fa-facebook:before{content:"\f09a"}.fa-github:before{content:"\f09b"}.fa
2024-09-10 16:10:28 UTC	1369	IN	Data Raw: 65 66 6f 72 65 2c 2e 66 61 2d 66 6c 6f 70 70 79 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 37 22 7d 2e 66 61 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 38 22 7d 2e 66 61 2d 6e 61 76 69 63 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 6f 72 64 65 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 39 22 7d 2e 66 61 2d 6c 69 73 74 2d 75 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 61 22 7d 2e 66 61 2d 6c 69 73 74 2d 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 62 22 7d 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 63 Data Ascii: efore,.fa-floppy-o:before{content:"\f0c7"}.fa-square:before{content:"\f0c8"}.fa-navicon:before,.fa-reorder:before,.fa-bars:before{content:"\f0c9"}.fa-list-ul:before{content:"\f0ca"}.fa-list-ol:before{content:"\f0cb"}.fa-strikethrough:before{content:"\f0cc
2024-09-10 16:10:28 UTC	1369	IN	Data Raw: 30 65 39 22 7d 2e 66 61 2d 70 61 73 74 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6c 69 70 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 61 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 7d 2e 66 61 2d 65 78 63 68 61 6e 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 63 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 64 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 65 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 30 22 7d 2e 66 61 2d Data Ascii: 0e9"}.fa-paste:before,.fa-clipboard:before{content:"\f0ea"}.fa-lightbulb-o:before{content:"\f0eb"}.fa-exchange:before{content:"\f0ec"}.fa-cloud-download:before{content:"\f0ed"}.fa-cloud-upload:before{content:"\f0ee"}.fa-user-md:before{content:"\f0f0"}.fa-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49717	199.232.192.193	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:29 UTC	596	OUT	GET /NUcJYKt.jpg HTTP/1.1 Host: i.imgur.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:29 UTC	762	IN	HTTP/1.1 200 OK Connection: close Content-Length: 25333 Content-Type: image/jpeg Last-Modified: Sat, 15 Jul 2023 17:06:38 GMT ETag: "4717ccb2d20f3b63d6b9206bd27c2bcf" x-amz-server-side-encryption: AES256 X-Amz-Cf-Pop: IAD89-P1 X-Amz-Cf-Id: lQCxrJj6JKACb9KUqFKpjxS4CVkmhfIAFoT8LSrkmbaT1YKpcd1yig== cache-control: public, max-age=31536000 Accept-Ranges: bytes Age: 3031111 Date: Tue, 10 Sep 2024 16:10:29 GMT X-Served-By: cache-iad-kjyo7100118-IAD, cache-nyc-kteb1890028-NYC X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 15, 0 X-Timer: S1725984629.461139,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-09-10 16:10:29 UTC	1371	IN	Data Raw: ff d8 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 00 96 02 58 03 01 22 00 02 11 01 03 11 01 ff c4 00 36 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 05 06 07 08 02 01 09 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 00 01 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 bb 78 35 6f a7 f2 88 78 7a 54 a6 b0 29 75 38 18 dc a1 dd b9 2e ed 4b 4f 37 4f a1 a9 62 9c Data Ascii: ) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}X"6x5oxzT)u8.KO7Ob
2024-09-10 16:10:29 UTC	1371	IN	Data Raw: d5 5f bc 75 da d8 5b 0c 9e 38 06 c7 23 6a 7f 5b a1 34 b6 81 c3 79 75 58 72 18 d9 8a 7a ea 96 e8 a1 92 ed 27 a4 4b 1d 9e 19 89 4f e1 a9 86 32 3f 47 72 eb 95 25 15 6d 5f af 90 dd 32 0d 82 44 65 59 f2 a5 e9 44 58 14 16 7d 3a fa cc 67 78 e9 72 80 e4 30 3a 1c fb 20 00 54 06 16 24 50 ad b7 d1 37 60 d6 01 8b 7d 4b e2 09 cb 1a 6b 98 b7 33 ab 55 dd 78 bb 45 f9 fe ed 33 00 b9 68 32 d2 bf 94 21 f1 57 04 7b 75 d8 e0 5c 3b d6 07 42 52 ce b9 29 6d 53 da 3e a1 2e e9 bc 55 e9 bb 62 97 d1 5a f8 88 9c 7a 4f e9 7c e1 9c 95 d9 81 89 96 15 2d a7 95 5d bf 32 43 94 01 22 0e 52 60 31 ac 97 14 8c 5a 88 84 c3 d5 32 1d e3 8e 35 cd ae ec ab a0 97 36 5d 79 eb 65 d5 4a a4 89 bd be f0 37 7f ca 33 05 ff 00 b3 13 c2 27 86 fd 78 e0 eb 21 f5 a6 7d 57 30 8c 52 eb 64 9a 79 d9 40 69 dd e2 24 Data Ascii: _u[8#j[4yuXrz'KO2?Gr%m_2DeYDX}:gxr0: T$P7`}Kk3UxE3h2!W{u\;BR)mS>.UbZzO\|-]2C"R`1Z256]yeJ73'x!}W0Rdy@i$
2024-09-10 16:10:29 UTC	1371	IN	Data Raw: ba 4b 55 8f 2f 14 fc d1 5e 17 ff 00 dc 8f ca f1 2f d3 54 51 c5 2c c7 58 b8 18 25 8e bd 91 2f 41 74 70 ba 68 42 50 8b 0b 9e b1 3d 28 6b 3a 0f 0f de b7 72 cc ed 9f 9c fb ad c5 c2 0c f1 35 56 b8 43 c9 bf 2a d7 d4 d9 5c e7 d9 f8 95 e1 6f ad 9d 14 3c f2 b3 e4 56 56 0b 90 60 f2 f8 19 3d 46 e7 b1 73 96 d2 27 3e 54 7a a5 0a f3 38 07 23 1b 42 35 e7 6b 1a f1 5e 7d 1e 1c 3b 10 a6 ac 30 5c cd 9a b7 08 b8 22 ef f5 c8 7d b2 da af 31 ad 3c 53 36 fd e7 f2 13 f5 9f e1 ef a0 b8 9b c8 5e c8 0b 9b b4 ea 51 b1 91 41 c9 5b 80 4a 15 1b b7 1f 76 a3 5d e2 3f b8 a8 b9 39 ab 51 15 e0 e1 f9 09 ec 4c 6b ce 59 dd 72 71 19 38 cb 01 b5 2c be a5 88 a7 65 59 ea f2 7a 59 8f 97 e5 dd 56 43 5a b7 0b 6a cd 98 f9 3e b4 44 36 48 c9 b3 ce df 9a 77 48 ca 17 9b 67 8f 6d a9 6e 73 f7 67 90 f4 6a 73 Data Ascii: KU/^/TQ,X%/AtphBP=(k:r5VC*\o<VV`=Fs'>Tz8#B5k^};0\"}1<S6^QA[Jv]?9QLkYrq8,eYzYVCZj>D6HwHgmnsgjs
2024-09-10 16:10:29 UTC	1371	IN	Data Raw: 8e 36 18 61 82 ac 7d 38 2c d4 ab 73 5e bb b8 da 0e 81 b0 2a b4 69 d2 79 7c 0e e1 f8 c7 b9 ce 74 f5 2a 59 86 28 65 ad 42 9d 27 b9 f0 65 6e ba 8b 70 9f d3 2d 2e 55 47 e5 ec b9 29 7a 55 f2 b8 a9 cc a6 67 1b 7c ad 7a 78 06 a7 28 eb 7d 5d ac cd 72 79 a7 63 a7 b4 c9 69 f4 5e 00 66 35 95 f2 4e dd 5e e7 27 06 ff 00 25 e3 ba c3 ca 3d 44 7a 8b 12 2c 7c 65 8e d4 b4 a0 ec 80 7c ac 37 5b 13 04 c5 45 9f 91 95 aa d5 76 5d 96 42 e4 e8 c7 c9 42 1a 8f 01 c9 03 85 c6 71 5e 81 dd 79 5c f7 15 b1 5b ad d6 cb ab 33 f7 73 3d 40 e8 b6 44 1f 2c 65 9d 57 3d ef 79 64 50 bf a8 1d 9f 2c fe 1c 8f 2c ac ae cb b2 ca ca ca cf 9e 7f 4f 08 b0 2e 99 57 66 e9 fb 15 77 f5 61 88 b2 fb ba 30 82 3d 5c 8c 78 22 e5 b8 a5 0c 51 c8 f0 e2 5a 5d 8d 9c fe ab f5 f6 fb ca f7 76 5e fc 77 c3 7d cb 7c 7c 6c Data Ascii: 6a}8,s^iy\|tY(eB'enp-.UG)zUg\|zx(}]ryci^f5N^'%=Dz,\|e\|7[Ev]BBq^y\[3s=@D,eW=ydP,,O.Wfwa0=\x"QZ]v^w}\|\|l
2024-09-10 16:10:29 UTC	1371	IN	Data Raw: 93 e5 95 94 f6 86 ea a0 6c 6f 76 13 ab b4 49 d3 1e 9d ed 69 7b 9d 86 c6 d6 2c a1 92 98 e1 09 4c b9 1b 59 92 2f c2 4e 51 b9 d1 22 40 ce 41 a3 67 27 d9 70 01 d3 09 1d 1e b2 be 29 ba 8c d5 6f dd b9 61 c7 63 dd 6e 5c dc 0d b2 53 5d ed 2b bf 75 b0 ee 86 71 85 be 84 14 e7 7c ac e4 0c 73 14 e7 b1 d3 96 3a b5 24 b5 30 8c 32 36 c3 1b 58 c6 bf f7 34 e4 ff 00 21 c3 28 67 b2 db 52 b6 c8 ca 24 8c a3 26 70 e0 1d fe b7 cb 75 1b 64 a1 f0 86 50 39 0b f8 41 da e3 2e 3d d5 8e 3e a4 ee dd f0 51 ad 50 66 3d b2 01 5d d3 5e 3b 83 fc 2c ac a2 4e ce 08 3d 77 44 fc 10 57 ff 00 ca 04 83 dd 8c c7 65 d9 a5 1c 80 17 b8 1c 11 ee 6e 88 7e e0 17 4c 3b ba 34 a0 d5 c5 33 8e 6e 5e 03 e9 03 1b 1a a5 a3 23 1e a2 a8 e6 c8 d0 9f 5f 32 10 c6 45 fb 73 d0 8f a8 d2 ac 57 26 48 a4 6c a1 f2 bf 26 4a Data Ascii: lovIi{,LY/NQ"@Ag'p)oacn\S]+uq\|s:$026X4!(gR$&pudP9A.=>QPf=]^;,N=wDWen~L;43n^#_2EsW&Hl&J
2024-09-10 16:10:29 UTC	1371	IN	Data Raw: 6a d2 ce 71 1c 96 f0 f9 07 68 9c 17 49 73 3c 19 70 4f b6 d7 98 0f cc 15 50 d8 6d 9b 2d c8 5c aa 39 96 9c d0 63 31 2b b4 3d 15 43 4d ac 99 8c 49 26 53 ad 3c 0b 4c 72 a8 58 da 77 38 8c 49 55 dd 6d ae e3 06 09 1a 15 d2 1e f0 29 cc 13 e2 bb c7 7a ad 1b fa 57 73 f7 f8 45 1b 5c af 4d 0d e7 8a de 3e 28 89 89 b9 4c 42 69 84 04 10 9f 03 44 e2 47 8a a3 29 b0 10 b9 fb c1 1e 13 1b 30 75 e8 ab 82 6a d0 7a a7 45 b7 86 cf 35 52 de e0 74 c4 62 bb 47 f4 ad 56 54 5a 9a 2d 46 3f ca 25 77 cc f5 5d d3 50 f7 ad ac 00 3e 0b f1 7a 6c 20 02 43 6f f1 5f ba 26 f6 f6 67 ec b0 a9 2d 3e ab 12 f7 12 b8 ea f4 69 7b b5 ba 56 64 04 21 96 1a 56 75 e3 d1 09 16 a7 e8 25 0b ad 4f d4 4a c3 da bf f2 4d 98 a4 56 0d 7b 80 fa ac 4d 0f ec b4 67 df 67 6d de 8a a8 64 32 d4 91 2a ad bb 7d 20 1b ae ff Data Ascii: jqhIs<pOPm-\9c1+=CMI&S<LrXw8IUm)zWsE\M>(LBiDG)0ujzE5RtbGVTZ-F?%w]P>zl Co_&g->i{Vd!Vu%OJMV{Mggmd2*}
2024-09-10 16:10:29 UTC	1371	IN	Data Raw: ee cb ff 00 c4 7d bd 56 12 e6 7f 62 84 3e cb 68 7d 38 97 16 e8 f2 42 5a 71 0a 5a 19 c0 71 84 5c 5b f8 2f fc 95 36 8a ae b8 54 03 1f 02 84 0f 68 50 bb d9 b7 d3 e2 84 10 5c 38 b0 f8 2f e6 1b 30 76 f7 f0 1d bd 83 13 24 ea 7a 8d 4d eb 04 36 d2 f6 91 83 83 a2 79 ca 70 b6 eb dc 72 27 fb 2a 2e 69 3c 67 2b 39 de ae 35 3f 48 4c 91 45 a6 c8 f1 52 ea 8f 39 78 ab eb 3b 13 a7 80 5f bb b5 fe d6 aa 73 ed 85 d1 a8 4f b6 e6 8c 76 0d 9f fc 9e 09 fe 53 71 5c 76 6c b7 9b ae 5c 35 28 81 fe aa 7f f0 86 e3 ad 54 a9 1a 0f f9 51 55 be a3 c4 2e 84 da 47 b6 ec 95 67 3e b7 05 52 73 f1 5f b3 9a f3 ab 5c ac 32 1f 6c b0 1b e7 92 ed 95 d8 6f a7 c6 28 a3 7f ca ed 0a 17 b7 f3 0b 02 b1 67 a7 c2 cb ad db 5f 5f e0 7e 56 dd cf 25 54 88 df 7b a7 20 b8 70 6f 20 ba 4b 69 b1 e2 7f 73 31 3a 94 28 Data Ascii: }Vb>h}8BZqZq\[/6ThP\8/0v$zM6ypr'*.i<g+95?HLER9x;_sOvSq\vl\5(TQU.Gg>Rs_\2lo(g__~V%T{ po Kis1:(
2024-09-10 16:10:29 UTC	1371	IN	Data Raw: 23 7e 93 ca 54 80 7a 0d 67 62 8b c4 07 5c 12 da bc 4c 79 d6 55 d3 2c 44 bc 2a 17 98 5d 81 4e 6f 2c 31 de b1 07 2c 2e 02 00 ca ec ab 9f 72 0f bb 46 e1 80 7b c6 d6 04 4f 04 ad 0a 59 95 f1 1e 8f 6f 35 4e 82 1a f2 c7 be cb 8b da c7 c8 f7 84 c7 78 48 67 62 76 e1 10 62 02 ae a9 5e 1d 12 2b 85 d5 29 cb aa c1 94 c9 b4 b9 d4 7f fa 11 5a fd 2e 2c ef cb f9 96 73 29 0b 96 10 4e 25 25 90 29 80 1b 99 2f ac cd c6 66 b9 09 7d 11 90 95 c0 88 30 1e f9 95 d6 08 7a ac a8 5e ac c7 5f f0 a0 dd 87 2b 1e 8e 0b ff 00 06 d0 85 c6 1e f9 e5 06 d5 cb 39 8a f5 63 16 0f 53 5b e4 9e 64 42 0e d2 f8 9b bb f4 98 fa d6 eb 08 7d 07 ac fa ae b3 ef ba b0 5e d9 1e c4 65 2d b2 e1 d6 e6 fa 42 1e ca 8f 76 18 5b 86 86 35 8f dc 45 de 1c 28 eb 0b 8e f2 f0 7e 62 07 e6 21 86 23 d8 6a f8 62 96 88 aa 4f Data Ascii: #~Tzgb\LyU,D*]No,1,.rF{OYo5NxHgbvb^+)Z.,s)N%%)/f}0z^_+9cS[dB}^e-Bv[5E(~b!#jbO
2024-09-10 16:10:29 UTC	1371	IN	Data Raw: ea c3 5c bb 25 4d d4 5a b4 69 04 0c df f0 dc 63 45 2c 2c 0f 13 62 12 6b a7 7f 69 67 6e b2 db 2b 98 db 99 a1 4e 3b 19 cb be 1f ee 62 eb d0 e8 27 20 f2 b8 3d 9e 20 49 77 36 fd d2 fc b2 ce d4 41 45 2c 2c 0f 11 d3 9d d5 59 3e 67 70 f2 2d e5 da 77 0b 62 5e 1d 25 cb 5c 62 31 65 25 bc d4 44 7f 70 bc ae 63 af 39 c5 f7 35 38 fe 33 7d 8d c2 d1 7b aa d5 64 f8 8c 69 2d 56 0e 79 99 22 55 1e dd 6f 9a dc 75 4d 2a d7 f2 b1 79 8f 44 bb b0 be c4 00 53 b1 9f 22 e6 3c 24 69 79 3e 25 c4 8f 2f 0d f3 1f 24 db 03 b7 11 d7 e3 3d 05 74 bc cc c0 1b 43 6b d5 5d c3 c1 ad 55 0e d6 71 1b 58 08 51 69 56 bc cb 9f 8e af 0b be 62 84 bb a9 32 91 a7 53 2a 8a d9 2c 0c ba bc 37 cc 6d 11 29 d6 59 cc b9 b1 ad 66 0b 32 fe 1c 41 c1 52 b7 5d 20 75 44 e8 cb 91 99 dd 00 0e 4e ec 13 7c 29 77 63 0a 5d Data Ascii: \%MZicE,,bkign+N;b' = Iw6AE,,Y>gp-wb^%\b1e%Dpc9583}{di-Vy"UouMyDS"<$iy>%/$=tCk]UqXQiVb2S,7m)Yf2AR] uDN\|)wc]
2024-09-10 16:10:29 UTC	1371	IN	Data Raw: cc 7e 50 8e e4 f2 db 2f cc 50 dd bf 5d 00 1a 7e a8 df f9 a3 ce 31 ed ab d8 9c 4a 1f 60 a7 6b cc 71 07 d0 16 c6 0d f6 8e c6 04 bf 7e f5 5e 65 f2 ad a5 a6 8b 55 6a 16 b4 ce 8d ba 3c 47 c1 2c ee 6f 67 d8 28 36 4d 9d 66 00 cb 13 f3 b6 87 98 48 cb 9e b2 60 05 ae 44 0c 8a d7 8e 35 79 e6 08 48 e3 b6 6c d6 17 65 66 eb 66 ee 5f 8e 33 f8 7b 67 52 84 7d 31 cf 31 79 48 bb 93 b7 b7 a3 03 ea 4a 95 2a 51 de 3e 25 5f a8 63 89 72 d9 ee 97 15 35 6d d4 69 cf bc 6a 72 5b ef b4 20 50 6f 63 6d c6 23 7e cf d6 5a 99 0a 7c 33 84 07 2e a4 05 2c f4 c7 1e b7 0c 38 d2 fd da 97 89 87 bb 3d f2 97 73 29 37 4c 1f f0 2e f2 9a fa aa 0d fd 01 2e d7 34 7c cc 7e a8 f8 94 95 83 2b 38 e8 c7 e6 61 59 49 21 6e 66 f7 5b 82 b0 bd cd 7d f1 06 af 32 9e e6 fe 89 b3 d0 0d 0e 55 29 bb d2 5d 50 1e 61 f0 Data Ascii: ~P/P]~1J`kq~^eUj<G,og(6MfH`D5yHleff_3{gR}11yHJ*Q>%_cr5mijr[ Pocm#~Z\|3.,8=s)7L..4\|~+8aYI!nf[}2U)]Pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49721	199.232.192.193	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:29 UTC	596	OUT	GET /igBpB3f.jpg HTTP/1.1 Host: i.imgur.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:29 UTC	759	IN	HTTP/1.1 200 OK Connection: close Content-Length: 169779 Content-Type: image/jpeg Last-Modified: Mon, 11 Oct 2021 13:24:26 GMT ETag: "bf3983e44c982a8bfce433c2575f3122" x-amz-storage-class: STANDARD_IA X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: OvrqRRpnJnN5TWEOSLtJ5oZfUZyMdw8xg2ibYBZsPzO_i42wNE_8yw== cache-control: public, max-age=31536000 Accept-Ranges: bytes Age: 2430477 Date: Tue, 10 Sep 2024 16:10:29 GMT X-Served-By: cache-iad-kjyo7100135-IAD, cache-ewr-kewr1740072-EWR X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 92, 0 X-Timer: S1725984630.922672,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-09-10 16:10:29 UTC	1371	IN	Data Raw: ff d8 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 cf 00 06 00 03 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 58 59 5a 00 00 01 f4 00 00 00 14 67 58 59 5a 00 00 02 Data Ascii: @ICC_PROFILE0ADBEmntrRGB XYZ acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCrXYZgXYZ
2024-09-10 16:10:29 UTC	1371	IN	Data Raw: c7 76 ea e9 49 b6 2a eb 69 62 de e8 5a 2b 16 be 36 6c 51 9c 36 b9 11 58 b2 02 74 49 63 99 0e 1d 75 8d 7d c8 1a e6 dc b5 1d c0 d5 55 04 e5 e0 45 e4 62 f2 70 3d ec 7c 57 35 ed 8a 1a 3f b5 86 aa f3 46 99 12 66 75 d1 e4 c6 1c 64 72 5c 77 2a b1 39 54 1b ce e0 4e 55 06 f3 b8 18 8f 6a 13 b9 41 3b b8 13 b9 01 53 b9 89 cb c1 c8 aa 0d e5 e0 e4 77 21 0c 3d 2a 7a 24 96 ce 7d a9 48 f2 da c9 5a bc 13 de 01 5f 54 6d e6 a4 86 94 99 b8 7f 43 c6 cb ac 45 4d 65 f2 a1 2c bb 94 ab 7e 3b 16 27 01 c9 11 ae d7 3e 54 73 52 2c 6a 66 c5 4b 1b 2c a2 a7 d4 cd a0 de 63 ce a5 bf de 7d 17 c6 7d 93 c5 71 a5 9d 54 7e 88 da e7 ac 75 3c b7 85 b0 ac 54 af 56 95 e8 b6 5a 86 8e e0 75 0a 95 8a cb b3 55 0c 35 73 67 aa fa 05 34 5b e4 bb 86 59 e9 d7 3a a1 8d 5c b2 a7 80 b2 ab 2f 99 af 9f 16 4e 5a Data Ascii: vIibZ+6lQ6XtIcu}UEbp=\|W5?Ffudr\w9TNUjA;Sw!=*z$}HZ_TmCEMe,~;'>TsR,jfK,c}}qT~u<TVZuU5sg4[Y:\/NZ
2024-09-10 16:10:29 UTC	1371	IN	Data Raw: b4 56 a0 c8 91 70 2d 43 ec e2 e9 84 4a cb 58 5a 66 12 39 44 ca b9 85 8b c7 03 55 33 3d 30 91 f7 51 27 5a 1a dd 85 73 33 a4 d0 35 ce 73 46 97 15 9d 4c b0 52 5e 76 70 2d f3 f9 ef 69 6f 8b d0 5e 57 ac ab 51 21 eb 09 53 b3 e8 3d 8b 9a d8 68 89 9d 12 da 88 92 2c 2b 74 25 4a cd 44 b9 dd 13 00 f0 bb a1 b3 b5 9d 33 b0 fd 0a 1e 5a f9 d2 7a 60 1c e5 f6 91 4e e4 10 5d 05 c3 32 3a a8 f0 b2 bb 2a e5 d0 bb 4e 64 9c d4 62 44 e0 72 0f c0 e4 1f 81 c1 23 81 cd 1f 80 a3 3f 05 01 c1 50 ba 31 62 94 25 ac 75 26 42 c7 e1 49 50 b8 a2 31 ac 68 cb 1d 42 47 03 80 fc 05 03 70 54 0b c2 e6 15 43 c0 75 0a 8c c8 37 08 84 8f 28 07 a4 ae 92 ea 15 18 89 d3 35 4c b7 ac d2 6b bd 77 cb bd 26 1e 63 19 bd c4 da 0c f8 76 f5 36 7a 2c fd d7 2e 98 ad 16 7b 3f cb d1 a1 ea ec d3 5a 78 d4 6d bc f4 4e Data Ascii: Vp-CJXZf9DU3=0Q'Zs35sFLR^vp-io^WQ!S=h,+t%JD3Zz`N]2:*NdbDr#?P1b%u&BIP1hBGpTCu7(5Lkw&cv6z,.{?ZxmN
2024-09-10 16:10:29 UTC	1371	IN	Data Raw: b9 93 2a a2 a3 60 2c eb 83 6d 8d b0 b7 d1 79 c4 5d 2e 7b bb 28 de 8f e7 bb 6c 2f 7e c8 b1 b8 f4 c2 ba d6 2f a5 81 54 0d f2 36 94 b1 4b 21 da a8 f6 63 14 74 8a e0 74 67 23 a3 ac a3 ac 75 09 0b 1b 82 4a 01 02 4f 47 e0 91 d1 d4 0e b1 f8 24 f4 65 41 d0 3c 07 e0 70 1f 81 c3 3f 03 84 6e 0a 01 b8 3c 06 e7 c8 eb 81 a3 63 7a b8 14 4c 8d b2 8d a5 c4 fa 1f 1e ee 8b 7d 59 e6 f4 65 9e de c7 b0 13 a0 de 13 5f 02 d3 3a d5 95 85 3e 8e a1 d6 56 71 36 c3 cf 8b 06 4f b5 c5 2d f1 0b 4a c6 d7 3c 68 35 36 d9 2d 0f 9b d9 36 40 7b 20 ad 8f 18 64 a9 00 4d 25 53 8c 3a f2 bf a1 2b 25 ce 86 56 a7 d0 48 b2 4f 32 eb 18 7d b9 82 3c 80 d2 41 3c 6c e4 47 4b 07 15 a9 c9 1d d4 40 92 3d 94 ee 4d 3c b8 b6 35 1d 2a 36 97 39 a7 f2 3d 4f 43 2b 49 a7 12 89 c2 69 44 e6 0a b3 23 be 64 de 1f 4b 60 Data Ascii: `,my].{(l/~/T6K!cttg#uJOG$eA<p?n<czL}Ye_:>Vq6O-J<h56-6@{ dM%S:+%VHO2}<A<lGK@=M<569=OC+IiD#dK`
2024-09-10 16:10:29 UTC	1371	IN	Data Raw: a2 a1 51 6e 3a d5 55 2c a1 fa b8 57 b9 af 4c 4e 44 90 29 22 3a 67 70 de c0 84 ef 87 08 32 dd 0e 31 ce 3a 4c 4b 38 ac 8e fb ca a6 86 ae 65 0e e6 28 a4 2b 06 32 5a cc 93 e7 76 5e 64 f5 55 19 31 d8 d4 49 a8 cd 5a c7 8b 59 68 e1 67 a5 4b b1 4c 7e 8c 24 9c 33 82 b6 4c 0a 1a 35 33 68 2c 69 69 a5 42 be 6f 37 55 e9 6f a9 a6 a4 d6 62 a5 ce b5 a1 b9 0f 3a d8 e2 f5 1a ad 16 4b 4f 80 c6 ac 74 38 db 2c 9e e3 c5 f5 78 30 b2 f6 6f 03 f6 91 e7 b8 35 39 7a 7e 8d e7 16 94 ae 7d 1b 03 ba 8d 59 51 37 5b 42 56 43 57 96 f4 49 db 49 47 75 97 d7 cc 87 0c 15 d2 18 75 f0 23 b7 5b bb f2 1f 53 ac ae 09 08 fa 72 99 1d cc c5 d7 0e d7 1f 4a be e0 75 7a 70 da 52 0a 6c 76 6b b4 38 1d 9d f2 c8 8c e7 5e 1e 39 9d db 79 e6 3a da 7a 77 95 7b 75 3a 8a bd fe 35 4c 29 95 d6 2d 54 63 75 d9 6e ac Data Ascii: Qn:U,WLND)":gp21:LK8e(+2Zv^dU1IZYhgKL~$3L53h,iiBo7Uob:KOt8,x0o59z~}YQ7[BVCWIIGuu#[SrJuzpRlvk8^9y:zw{u:5L)-Tcun
2024-09-10 16:10:29 UTC	1371	IN	Data Raw: 2f 2d a7 f4 7c 67 56 75 92 0a 5d b3 91 75 95 bd ce aa e1 a4 8b 55 ac 49 3c 1b 03 d0 b2 1a 25 56 b1 a2 21 54 22 b7 06 1e 8c 41 d8 2a 8a 48 7a 88 a6 99 b4 b4 9c 75 dd 5b f9 8f b5 74 79 3e 0e cd 9e 43 ab 84 41 20 79 ed ad e4 83 95 2c 68 de 7a 6f 9e fa 0b 62 04 80 a7 c3 e6 84 0c e6 b6 4a 1b 91 bc cc 73 f4 43 ad 97 06 74 86 8f 35 42 db d7 95 3d b4 59 c7 db 03 48 13 ae 38 25 e6 84 99 1a 59 bd 0f 23 b9 fa 9d 8e d8 53 5e 11 af 01 69 be 0d 24 82 82 52 d6 5d 4e c1 81 1a d1 3b 2c be 8b 17 ae 47 9d 99 bd c7 69 cf 8f 2f 97 a0 23 91 1e 91 a9 2c a8 35 c1 2c 41 03 6e 7d 3e 57 77 49 2e a7 5b e7 ef a5 e8 8e cb 5f e7 a1 80 36 c9 ce 63 c2 61 c0 49 d4 70 cf 09 e6 e4 1f 10 f7 05 40 bd 2e ca 8a 17 5f 31 dd 2a de 18 59 c4 b1 ae 52 8a ae 04 e7 35 35 51 f2 08 8c 40 77 22 8b a4 02 Data Ascii: /-\|gVu]uUI<%V!T"AHzu[ty>CA y,hzobJsCt5B=YH8%Y#S^i$R]N;,Gi/#,5,An}>WwI.[_6caIp@._1YR55Q@w"
2024-09-10 16:10:29 UTC	1371	IN	Data Raw: 8a a9 22 1e 3b 90 0c cc 08 ba 6c f7 aa e7 a6 3e bb d2 6a b1 e8 f3 fa eb ac fe 99 01 a7 7e 98 8c ed d3 07 a7 b2 44 75 51 09 15 d4 8d c3 50 33 a2 f3 45 6b 63 a0 31 81 27 9b a2 38 a5 82 2e 95 f6 30 ba 32 cb c2 b3 87 eb f0 46 42 b0 2c 2a 26 0b ce e9 09 46 fc 34 51 c8 b2 d2 61 4b b1 8d d1 9d fc b4 4e 7a 6b 95 cc 62 9b 9a 17 23 1a 90 f8 ef 4c ab 0f a4 9b d0 f8 26 74 3e 09 ab 0b 40 98 b4 32 2b 99 98 c9 eb b3 2d 8a 45 33 dc 5d 4b ce bc 35 43 ce 91 3b 71 47 28 ab e2 4c 3d 04 9f 5c c0 b1 9a 0d 2e 7b 44 85 3a 11 9a 28 54 45 51 28 11 ad 60 06 b2 4d 12 1c ec f2 07 a2 d8 e7 ae bb 22 9b 5d 07 b2 b0 db 57 82 49 2a 03 c9 0c 32 63 84 62 9f 80 34 ba 0f 3a a5 48 8e ed a5 1e 8a c3 48 8d 2a 90 b9 ac f3 fa 9e 2e 68 72 ba c9 cd 75 9d 87 54 0d ee 5a 1d 6f 51 6c 8b 58 f2 a3 41 00 Data Ascii: ";l>j~DuQP3Ekc1'8.02FB,&F4QaKNzkb#L&t>@2+-E3]K5C;qG(L=\.{D:(TEQ(`M"]WI2cb4:HH*.hruTZoQlXA
2024-09-10 16:10:29 UTC	1371	IN	Data Raw: da e5 69 8b a2 f4 6a f1 78 85 8a b2 5e 9e 1c 88 6b 37 8a 8e c8 2f ac ab 77 b4 a9 aa 6c 29 a6 ed 2a cd 20 88 1d 61 d5 10 3a 7f 04 16 58 22 2a 22 68 38 33 17 52 64 74 c4 68 66 8d e8 e2 20 94 63 9d 6d 99 6e 57 79 33 26 cc aa aa 26 c7 25 95 31 c1 70 49 24 72 e9 32 09 1d fa 29 0a 22 54 9d 47 65 95 67 0d 63 5f c1 b5 8c 80 15 85 50 28 15 06 80 72 45 30 25 66 87 92 cf 26 85 11 9e 4d 02 0e 81 34 2d 0a 8d 34 09 61 0e b9 22 2d b7 34 b9 a9 75 95 fc ea c9 74 ad 65 d0 ca 4e c8 62 3b 14 e3 79 32 4c 0c 9b 6d c7 06 44 92 a6 42 90 d5 84 ba c9 83 38 cc 04 03 39 73 0a 40 86 60 f2 f4 97 65 8b b4 ac 60 c9 86 03 50 98 65 d3 ce 9b 79 43 a0 1c 70 ca 18 e2 8e 40 dc 85 8e 40 6a bd e0 3e 3b 43 52 a6 91 d3 84 2e 9e 8c 87 20 c7 97 18 56 b9 4c ef 05 0c 1d 8d c9 48 e4 64 af 41 c4 6f 9b Data Ascii: ijx^k7/wl)* a:X"*"h83Rdthf cmnWy3&&%1pI$r2)"TGegc_P(rE0%f&M4-4a"-4uteNb;y2LmDB89s@`e`PeyCp@@j>;CR. VLHdAo
2024-09-10 16:10:29 UTC	1371	IN	Data Raw: 73 44 d1 11 a0 21 1c 68 8b 1e 6c 74 de 76 11 87 90 29 29 91 58 a1 cb ce a4 f3 80 e2 3c 98 a6 09 bc 8e c4 72 38 61 cc 50 b2 ae ba 5c 5d 34 8c 23 06 76 1f 22 0b 5f 2a 8e ed e3 5e 33 0a a5 bd dc 1c d5 68 06 0c d8 42 b4 54 74 e8 d7 39 27 a4 e4 0b ef 90 bc 16 35 24 b1 4a 13 98 23 b2 a0 17 f4 88 8a 12 46 4d a0 78 d2 eb 8a db 26 f4 33 32 37 8a ad 13 93 18 72 8d 42 3c 5b 15 6e 3f 49 e0 ac 05 ca 35 50 eb 77 85 6b ac 11 3c ed 76 c9 0b c1 07 d1 a3 3a f3 e4 b9 ac 56 dd 23 b7 cd 61 9f a5 ce 46 b2 27 d3 c8 4a cd c2 75 73 3b 98 a4 bb 9b c8 7f 31 a3 9d 5e 7c e6 ca ca 5e 5f 47 45 15 16 92 0e 93 17 d1 bc a3 7b 9e 96 74 f6 d1 b9 fa 20 c4 d6 27 46 38 56 6d aa f6 8a 24 b7 85 d1 94 3b 6a ab d5 33 f1 5b 4c 87 16 b4 6a e4 ef c9 39 ca c6 b9 ef 68 0e 35 8a 34 83 9b 5f e5 74 50 c0 Data Ascii: sD!hltv))X<r8aP\]4#v"_*^3hBTt9'5$J#FMx&327rB<[n?I5Pwk<v:V#aF'Jus;1^\|^_GE{t 'F8Vm$;j3[Lj9h54_tP
2024-09-10 16:10:29 UTC	1371	IN	Data Raw: 5b b8 51 a0 24 04 45 5a 3a a0 e9 ef 6d 6a 4d bf 33 a9 e1 db 52 89 16 45 3a 7a 98 99 5f 41 93 23 6c 48 92 35 ae 48 3a e2 a6 ea 9d 2d 3d e0 f5 32 60 d6 ca b9 c9 d3 fa 3f 96 80 37 75 9a 8e 7b ea db 3a 68 29 95 8f cf a4 6d 46 51 3a d2 96 f5 cd aa 72 3e 65 56 2b 1e d4 44 97 91 ed dd 52 5b 64 35 e8 56 c7 57 81 06 bc 03 19 46 25 11 02 ce 10 8a 9d 18 b5 b0 62 e8 ed a1 6c 65 4c 33 15 66 a9 c3 1e 72 05 cc 2b d6 1b a4 25 40 1e 57 34 f9 d0 25 b5 6a 46 3f 21 1c d5 92 3e 2f 57 5f 3b e5 12 48 77 c5 0c 92 85 75 a2 11 b2 4d 6f 28 1e b1 6a f4 a9 71 80 b4 91 8f 10 73 10 4c f4 51 0d 38 7b 9e 83 8c 0f 8c 30 b4 40 47 83 70 70 ad cd e5 12 d1 79 e4 8e 57 09 11 c4 a5 9c aa db d0 7a d8 52 58 96 7c b8 ae 7b 2a 2c 65 54 d8 f1 ea 44 7a 71 6a 88 f7 03 50 a8 c1 21 78 18 66 39 1c d7 30 Data Ascii: [Q$EZ:mjM3RE:z_A#lH5H:-=2`?7u{:h)mFQ:r>eV+DR[d5VWF%bleL3fr+%@W4%jF?!>/W_;HwuMo(jqsLQ8{0@GppyWzRX\|{*,eTDzqjP!xf90

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49720	199.232.192.193	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:29 UTC	597	OUT	GET /eGsgDjP.jpeg HTTP/1.1 Host: i.imgur.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:30 UTC	761	IN	HTTP/1.1 200 OK Connection: close Content-Length: 29351 Content-Type: image/jpeg Last-Modified: Fri, 06 Sep 2024 15:03:13 GMT ETag: "629e995e18415bef426c612d6262ee74" x-amz-server-side-encryption: AES256 X-Amz-Cf-Pop: IAD89-P1 X-Amz-Cf-Id: w_NRBo54xPngCl9PlH04tgkPl9-6X5aqHbjdimqxVsTkjk9Va29Qtg== cache-control: public, max-age=31536000 Accept-Ranges: bytes Age: 349637 Date: Tue, 10 Sep 2024 16:10:30 GMT X-Served-By: cache-iad-kjyo7100066-IAD, cache-nyc-kteb1890055-NYC X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 31, 0 X-Timer: S1725984630.050707,VS0,VE9 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-09-10 16:10:30 UTC	1371	IN	Data Raw: ff d8 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 01 85 01 b6 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 08 09 07 0a 04 05 06 02 03 01 ff c4 00 74 10 00 00 04 04 03 01 06 0a 11 0c 0e 06 08 03 09 00 00 03 04 05 01 06 07 08 02 09 13 11 0a 12 14 15 21 23 16 19 31 33 41 51 53 57 94 d1 1a 24 34 43 55 56 58 61 63 71 73 81 91 93 96 Data Ascii: CC"t!#13AQSW$4CUVXacqs
2024-09-10 16:10:30 UTC	1371	IN	Data Raw: 44 c7 37 1b c1 ce 4d dd 30 18 af a8 21 d6 d4 f4 2f 4d b5 2e 2a 5d af b2 4c b3 a6 2f d4 e0 dd e0 ca 45 df fb 54 bb c9 73 35 da b5 71 f5 28 cb 65 b9 77 bc 0f 0b ce 42 61 ac 2f ca 30 e9 9e e1 a5 1e 5e 48 08 07 59 af aa f3 18 ea fc dc ce cf 76 15 05 22 54 93 42 f2 89 24 89 b5 4e 99 45 f0 93 87 23 2c 7a 7d 56 9a 73 01 a5 0f 2a 66 39 0f 48 99 a0 bd 6e 01 3a 16 61 a6 97 a4 77 5b 2c 62 3a f2 71 c4 57 29 d3 fa 5a e7 fd e4 e1 e3 09 8a d3 de f9 2d 72 f0 f4 b6 e3 f2 bf ce f1 9b bf 9b f7 bd 57 98 9b ab b9 2f 9b fe 47 af e9 80 de ff 00 ab 12 a3 fc ac 52 3e fe bf db d8 f5 65 54 6f 95 aa 47 aa b5 76 0c 9d 0f a6 5c 22 f7 e9 d5 40 71 9d 8e 5c 66 b9 d2 e2 e3 0b 4f c1 fe 37 00 c9 3d 0e 6e 6e 7b cc 56 4f c6 ca 7e 94 33 59 b9 c1 05 99 22 8b 09 bb f7 2f 15 b1 b3 71 c3 1f 1f b6 Data Ascii: D7M0!/M.]L/ETs5q(ewBa/0^HYv"TB$NE#,z}Vsf9Hn:aw[,b:qW)Z-rW/GR>eToGv\"@q\fO7=nn{VO~3Y"/q
2024-09-10 16:10:30 UTC	1371	IN	Data Raw: d2 36 d4 33 32 92 cb 2b dc cb d5 1f 42 6b 0d 2b c7 ad 21 86 5a 93 7b 9d 27 01 d2 5a 9f de 74 d2 70 58 87 c5 66 6b d2 cb e3 30 23 ee d2 a1 38 49 f6 4d 3e 4c 2d 6a e6 85 6a 5b 5f 9a 88 2c c4 ca cb 34 dd fe a6 01 81 ea 15 bd dc b5 08 d0 51 70 f6 d9 31 c9 05 2b fd ad 3a 63 d3 2f 57 dc c7 a7 fa fb ef 5f d5 51 3e 7c ad 52 3c 64 f9 56 aa 45 54 78 e8 a2 ac 4f 0f 33 0a a2 4a d2 25 63 e3 b1 8a 0c 28 bf c2 0b 2c 3d 0d 4f 52 68 f9 bb 11 6d 7d 92 ab 25 7f 4d db 86 4e 5e ac 9b bf 68 f6 d6 1d ff 00 5d ea 3f ff 00 ee 13 67 f6 83 c9 57 df fa 79 9d 7f a5 ae 7f de 4e 19 2b 2a b9 16 64 ac f9 83 d3 26 09 21 0f 18 71 23 f1 6e ef c7 79 db 7a 74 ff 00 67 a9 8c 63 5a fb ff 00 4f 33 af f4 b5 cf fb c9 c2 4d 6b 30 cf a9 24 da f4 a2 fe 76 1b 35 a6 8f 4c 55 ef fa 92 7f 23 25 5b b6 57 Data Ascii: 632+Bk+!Z{'ZtpXfk0#8IM>L-jj[_,4Qp1+:c/W_Q>\|R<dVETxO3J%c(,=ORhm}%MN^h]?gWyN+*d&!q#nyztgcZO3Mk0$v5LU#%[W
2024-09-10 16:10:30 UTC	1371	IN	Data Raw: 8f b5 47 17 f4 8f 0f 88 04 dc e8 d8 ed ee fa 32 6b d6 de d7 03 87 eb 07 46 c7 6f 77 d1 93 5e b6 f6 b8 1c 3f 58 42 2c 79 da 12 54 37 aa 69 2b 4e 18 ff 00 49 b0 7e a8 f9 e9 dc 13 de a1 a3 e5 36 1f d5 01 20 ae 46 d3 2d 46 ef 52 16 96 e2 2d 49 be 6b 38 a2 b4 d1 b8 ba b0 95 c2 12 fb 9a 8e ba 50 8f 6a 32 0e ca 94 e3 f1 a8 85 a7 cc fe b9 24 bf ad fa 48 f8 e9 da a1 ef 5a d7 f2 ae 1e 21 fb 19 9d a1 58 30 e1 c0 75 22 6a 84 71 75 76 4d 78 3f 54 66 86 e5 c8 3c 29 11 a6 a7 4e 7f 16 37 1f a4 15 95 6f a9 2e 6c f9 4a bf e9 83 90 cd 90 d6 54 ad 4a 38 42 8b 41 7d 57 0e e4 b9 dd 69 85 ff 00 79 1f 9f 4e e5 0f 7a a6 df 94 b0 f1 0f e7 4e f9 bf bd 0b 67 ca cc 1f aa 33 7b 5b 25 ea b0 fb 2b 1b e9 a4 b5 bc 5b 9d b6 da 8c bc 6c af 6e d6 c6 92 51 44 74 3c b9 89 91 9c b2 cc 55 f7 e6 Data Ascii: G2kFow^?XB,yT7i+NI~6 F-FR-Ik8Pj2$HZ!X0u"jquvMx?Tf<)N7o.lJTJ8BA}WiyNzNg3{[%+[lnQDt<U
2024-09-10 16:10:30 UTC	1371	IN	Data Raw: 37 8d 8e 55 3e aa a7 0e 2b 52 5e a5 17 95 2c bf a8 ed ba 2b 9a bd 35 af f0 f3 03 a2 b9 ab d3 5a ff 00 0f 30 75 3a c5 7d d0 4f c0 1a c5 7d d0 4f c0 26 35 e7 61 d1 4c d5 e9 a5 7f 87 98 38 c7 4d 53 81 1f fc 62 e9 e1 e6 0f c3 58 af ba 09 f8 07 f4 f3 89 3c 9d 9a e5 00 fd ba 37 9c 7d 35 3a f8 79 81 d1 bc e3 e9 a9 d7 c3 cc 1c 0d 0f 5c 7e 60 3b 3e 8d e7 1f 4d 4e be 1e 60 74 6f 38 fa 6a 75 f0 f3 07 00 94 67 1f e6 72 0d 3b dc 13 8f be 2d 72 fb 89 5f 83 83 27 71 cc e8 de 71 f4 d4 eb e1 e6 0f 8e 8d 67 1f 4e 4e 9e 1e 60 e3 71 6b 97 dc 4a fc 1c 7c 1c 89 61 1e 68 20 d2 bd dd 38 1d c9 9c ce 8d 67 1f 4e 4e 9e 1e 60 74 6b 38 fa 72 74 f0 f3 07 00 94 67 1f c8 9c 93 4d f7 01 f7 c5 6e 5e 85 2a 06 3e e3 99 d1 ac e3 e9 c9 d3 c3 cc 0e 8d 67 1f 4e 4e 9e 1e 60 e1 71 6b 97 dc 4a fc Data Ascii: 7U>+R^,+5Z0u:}O}O&5aL8MSbX<7}5:y\~`;>MN`to8jugr;-r_'qqgNN`qkJ\|ah 8gNN`tk8rtgMn^*>gNN`qkJ
2024-09-10 16:10:30 UTC	1371	IN	Data Raw: af f6 1c 3b d2 a5 74 ae 63 a8 54 ca 70 66 21 98 a7 43 a7 c4 89 9c 8e 43 a7 ce a6 d4 d4 e7 04 90 e3 c9 3b d1 c6 bf 08 28 43 39 f2 c5 a8 72 1b 8a 90 e8 b4 bf 35 4c 66 f1 b1 4b d7 3f 6b bb 73 89 13 14 5f 37 bc e6 b9 a1 eb 6a 16 5b f4 0a 4e 90 df e6 84 f3 54 da 71 ad 2c c7 a9 27 ed b7 f0 0b 17 76 61 a1 3d 6a 91 4b 6a 5f c2 68 b8 4b 9a b7 1b 98 cb 64 eb e2 62 f1 7a bf 29 f4 a3 ff 00 27 d7 25 0f 44 12 4f a3 6c be 10 58 e2 3c 2c 90 dd 5b 4c 66 70 75 66 38 a5 65 69 1c 49 e7 96 61 66 8a 70 a7 a4 bc 4e 33 b3 54 ad c7 8a b4 9c 57 a7 4d e6 83 3f 76 60 b1 7e 95 ad 00 f4 c3 37 7e 3e 1e f2 ba 6e 9e 0f 6f 98 b5 f9 4f 1a 33 b5 4d 49 da 14 33 71 e3 30 f1 74 bd 49 bf f8 41 5b c7 93 e4 f9 1e e4 26 79 5a 46 81 5c 57 c3 fc a6 49 1d 6c a1 8a 87 b1 ae ed 0c f2 dd 5b 98 e5 69 5e Data Ascii: ;tcTpf!CC;(C9r5LfK?ks_7j[NTq,'va=jKj_hKdbz)'%DOlX<,[Lfpuf8eiIafpN3TWM?v`~7~>noO3MI3q0tIA[&yZF\WIl[i^
2024-09-10 16:10:30 UTC	1371	IN	Data Raw: 1e 85 e9 13 f8 51 5e f6 67 78 08 ed 41 e1 f1 e1 44 8f c6 c6 bb 20 2d 37 9a 34 f4 b7 83 df dd 16 64 c7 5c 2d 25 5d 4b d3 d3 93 5b b8 59 a9 cd d6 e1 ff 00 c0 1a c6 57 03 92 b7 a9 23 b1 c1 1f 4b a4 ec 7a 33 b4 8d 2b a7 fb 28 b5 8f b1 6b e5 b2 ee fa 9f 3e 56 1c b3 36 13 9f 2e 8a 4a 6e d0 d6 fb 7c 59 bf f0 7d 98 b7 a7 83 89 e2 d3 dd d4 43 ad 14 61 a2 9d ad a6 b3 7d 42 2a d3 75 50 52 c7 c6 1c 5f a9 cc eb e9 89 3f 37 e6 e7 17 d9 55 7b 3b 75 2a e0 9c 60 94 c4 c5 1d c3 c7 8d 5b 87 c9 65 72 50 f2 f1 fc 47 8e c4 35 fe 92 d1 7a 62 d4 59 0b 1b 56 25 97 f6 d0 c6 7c 7d 8c c7 3b 3c 4c 1b 3f 6c 57 a8 53 f1 a6 0e 9c 00 74 27 cb bc 7c 7b 93 77 d6 e1 97 64 b7 19 76 cf e4 b2 14 c7 9d 38 a5 6b be 35 49 d8 c6 6c 87 ee 04 09 a6 39 aa c9 34 ca 98 b0 53 ff 00 a9 22 f3 b8 a5 ac 84 Data Ascii: Q^gxAD -74d\-%]K[YW#Kz3+(k>V6.Jn\|Y}Ca}BuPR_?7U{;u`[erPG5zbYV%\|};<L?lWSt'\|{wdv8k5Il94S"
2024-09-10 16:10:30 UTC	1371	IN	Data Raw: dd 53 35 b3 d0 95 8f 2f 6a 9c 1a d2 19 08 ba 9c 5e a7 09 34 c3 7b 99 7d 6f c6 25 35 39 c8 86 96 15 2e 13 1a b5 5a a6 33 9d 62 5e d3 ca 97 48 2c 84 e5 7c 61 58 c0 56 28 0b 57 e9 10 5a ef 7c ea 83 f1 e9 be 8a 3c 0d c8 64 7d 2d c9 d4 dd da 78 a0 f5 31 f9 c1 7b 52 53 14 9c cf 31 90 59 9c 28 b2 bb 99 85 95 80 05 73 09 b3 2d dd 45 0e 95 32 f1 3e 8b a7 98 cd 3a 63 56 cc 61 5a 24 27 33 ae 1a 60 89 14 f6 9b cd 75 52 a1 35 53 69 3d ab 85 ba 38 aa e0 c8 c9 16 41 4f b2 1a a5 84 cb 84 46 a8 d6 a9 8c e7 5e cf 12 10 5a 74 e5 7c 61 58 c4 0b f4 21 c8 ed f7 fc a6 cf a6 f5 56 4b 48 f3 5c 75 3f ee 62 d9 fc 57 a2 cb 7b 36 ca 05 64 d4 c6 47 50 cd 3f 16 54 c6 c8 c3 c0 56 12 7b 41 a6 16 51 86 89 81 e4 a9 db 38 bb 87 7d 58 a5 9d bd ae 87 b1 78 c4 3c e9 12 5a ff 00 7d a9 ff 00 e3 Data Ascii: S5/j^4{}o%59.Z3b^H,\|aXV(WZ\|<d}-x1{RS1Y(s-E2>:cVaZ$'3`uR5Si=8AOF^Zt\|aX!VKH\u?bW{6dGP?TV{AQ8}Xx<Z}
2024-09-10 16:10:30 UTC	1371	IN	Data Raw: c1 05 15 33 a1 e3 4c 8f 2a 47 b2 0c 2e 00 2b 05 9e f9 2e e1 a6 62 4a a1 c2 bb cc 65 16 91 51 66 9c 49 ca 3d 90 4f ca cd 9b 65 9a ce 74 62 67 94 19 a6 97 a5 6e 8e b2 e2 b4 29 09 3d 80 c2 ca 34 c3 4b d3 12 0c e9 3e d1 6e 4d 11 9f 68 e4 39 b0 a3 8a e7 8e 20 84 c6 19 fd 5f 38 21 2e 67 b9 70 52 1a 3d 49 b1 d7 fa 1e d6 6b 49 4d ea cb 29 e1 a2 2a 35 0b 34 b3 7c f3 00 c6 33 8e 4c 34 f4 99 36 cf c8 9a 38 0e 91 b3 0b ca b5 27 1d dd 8b 2b 9b 2c 46 dc d0 af 5e bf 48 f7 66 ed 4e 29 85 53 74 64 6b 62 48 91 36 8a 18 f9 e6 9e fc c1 3b ec 5a 5b 26 4f b3 9a 64 d1 12 34 8d e8 35 22 a3 89 f6 43 79 c1 4f b7 b9 33 c6 73 bb 6a 85 33 c0 fd 5d 69 91 5c 36 fb 97 36 32 09 21 96 45 ec 55 e9 92 e6 4b 68 ae f7 0c 6f 43 bc 44 b0 c3 ba 23 77 2c b4 fa 9e e9 8c 65 0c e6 2b 35 1f 9f ed d9 Data Ascii: 3LG.+.bJeQfI=Oetbgn)=4K>nMh9 _8!.gpR=IkIM)54\|3L468'+,F^HfN)StdkbH6;Z[&Od45"CyO3sj3]i\662!EUKhoCD#w,e+5
2024-09-10 16:10:30 UTC	1371	IN	Data Raw: d8 d5 38 ba 38 b0 98 99 1a 32 3a e1 da bc d8 80 76 4f 9a b5 1f b5 0a 0e 45 27 78 a4 93 43 b2 fe 1e ad 72 c7 24 3c 1b 4c dd 53 35 3f 76 68 cb bd 3e da 0d de 22 77 f0 84 43 23 1a be be b3 fb a8 75 99 1d 64 f6 fa 1e fc 6b cb 79 5a 8b 11 a7 4f ce 15 ab d6 f7 e2 ed a8 fc ab f5 39 a2 92 c4 8e 9d 0e 89 ac 72 ba 44 3a 3e c8 52 61 02 69 be 70 d4 7e 47 ab 53 c5 51 78 a4 93 69 c6 cd 8a 92 70 32 48 50 9b 51 22 62 8b d3 d3 30 7b 8e 9e fd 01 ef 11 3e fc 7a 20 11 6d 9e 98 d5 9a 73 7e d2 95 40 ac 14 e5 d1 8d 03 e5 46 d5 46 b1 72 7e bb ce 0b 4d ba e9 56 6a 9e 2d d6 78 93 e4 74 3a cf 2e cc 26 26 46 8f ba 98 2a ef 30 ec c2 25 bb bd 72 93 9c 29 bc aa f3 2f 74 30 69 86 fd b5 3c bd 4d 4f c1 9a 33 25 2c cf 7e 0d 32 a2 46 8a c1 40 d7 b8 ba 25 2b 48 e7 26 37 62 cb 2d 57 b2 69 98 Data Ascii: 882:vOE'xCr$<LS5?vh>"wC#udkyZO9rD:>Raip~GSQxip2HPQ"b0{>z ms~@FFr~MVj-xt:.&&F*0%r)/t0i<MO3%,~2F@%+H&7b-Wi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49728	104.18.10.207	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:32 UTC	674	OUT	GET /font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://football-booster.freevisit1.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:32 UTC	898	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:10:32 GMT Content-Type: font/woff2 Content-Length: 77160 Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: "af7ae505a9eed503f8b8e6982036873e" Last-Modified: Mon, 25 Jan 2021 22:04:55 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/31/2023 19:21:45 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: c5325e14e52a04e8ce97404ed7e8d615 CDN-Cache: HIT CF-Cache-Status: HIT Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8c10b04f49ae7c78-EWR alt-svc: h3=":443"; ma=86400
2024-09-10 16:10:32 UTC	471	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 2d 68 00 0d 00 00 00 02 86 98 00 01 2d 0e 00 04 01 cb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 20 06 60 00 85 72 11 08 0a 89 99 28 87 b6 58 01 36 02 24 03 95 70 0b 96 10 00 04 20 05 89 06 07 b4 75 5b 52 09 72 47 61 f7 91 84 2a ba 0d 81 27 ed 3d eb 3a b5 1a 26 d3 cd 3d 72 b7 2a 0a 02 19 e5 1a f1 f6 5d 04 74 07 dc 45 aa 6e a3 b2 ff ff ff ff e4 a4 31 46 db 0e dc 40 e0 d5 f4 fb 7c ad 8a 14 08 66 93 6d 92 60 9b 24 d8 91 a1 40 64 5b 42 51 11 24 28 5b 55 3c 2b 28 ad b8 40 50 d0 35 1e e4 60 81 b0 0e da 3e f6 50 10 1a 3b e1 28 91 d1 31 b3 fd 6c db fe 68 d4 a8 a2 c2 29 9f dc 59 79 94 f2 4a 69 e9 eb 17 ad 85 ce 7c 25 db 81 b7 5e ac 14 47 82 a2 33 b8 12 6e 9e 95 e8 ba da 95 dc 0a c4 cd 90 44 8a 9e Data Ascii: wOF2-h-?FFTM `r(X6$p u[RrGa'=:&=r]tEn1F@\|fm`$@d[BQ$([U<+(@P5`>P;(1lh)YyJi\|%^G3nD
2024-09-10 16:10:32 UTC	1369	IN	Data Raw: 44 9f a8 fc a9 10 49 11 a4 24 8c 04 54 14 8b 5b 81 82 62 34 8a 11 cd fc 7f ea ec ef 2c af ce bc d7 ef bd a3 62 6c 36 91 ba 0b 49 4c e9 69 7d db 8c 26 e0 34 e3 94 6d 2c 27 cb 16 cb f3 23 bd d7 a5 b3 7f 52 77 01 a2 62 75 c0 b6 2c 4b 96 0b c6 06 9b e2 76 8b 03 db 08 6d 5f 2d c0 c0 e6 5c 48 8b 9d fb 8e 48 48 fe aa f3 93 ea 07 c6 c2 3f 98 96 d3 6d f3 0b 39 50 88 ad d8 29 39 e7 4a a8 86 24 c6 bd 88 9c e7 b1 f4 38 f8 e8 c7 da ce ce 7e b9 3b c4 72 15 8d 6e bf 3d 24 11 1a b5 1f 94 4e 64 64 6e 1b 21 27 ae a6 f0 e3 3b b3 f4 ac 38 99 bc 27 d9 4e a6 ed 1e 21 7f 2d 18 06 4a 19 ca b6 d3 2e e0 d8 fa 91 ee 58 af 3d 0c 2c 12 04 0e 90 9b 1e 22 60 3a 18 a2 ff 1b 0f 09 09 20 7b 8d ef 9e dc e0 bc 12 cb 4b 21 27 9f 00 a1 2d 46 48 94 9c 09 89 23 24 7e 9b 5a 5f 84 b9 9d 10 12 b5 Data Ascii: DI$T[b4,bl6ILi}&4m,'#Rwbu,Kvm_-\HHH?m9P)9J$8~;rn=$Nddn!';8'N!-J.X=,"`: {K!'-FH#$~Z_
2024-09-10 16:10:32 UTC	1369	IN	Data Raw: 21 42 53 12 43 aa 67 1e c4 9d 89 63 e3 0e b9 e4 73 2a d5 a7 73 89 28 35 6d 94 3d 71 c6 ca 8a 65 a2 fb f1 59 91 0b 24 eb 5c 3e 10 66 4e 38 80 71 97 8c 78 ea 23 76 0a a5 36 75 6d ef 09 e0 19 9d b0 60 db 4e 4d 2d 4a 00 5c f4 10 46 b7 c7 72 e9 44 02 80 1e b5 5a d3 30 93 07 23 27 ea a5 88 6e ec 11 d2 47 6a 4c 82 da 86 58 14 1b ca 8c a2 41 aa 9d f1 67 59 73 99 2a b2 59 ca dc 07 c7 5e d9 b5 98 3b 22 d8 1d 24 68 62 7f 3d b9 16 19 cf 9b 13 98 30 de 76 48 3c 97 56 76 7f 81 63 9b 5f 00 5c 59 8a 03 ec a3 e8 77 3b 64 42 16 02 83 8b 03 4e 83 84 33 1b 21 24 ce e7 e7 b4 e7 e2 de 49 7c 50 98 20 7e 13 26 13 e4 03 64 c5 2e c8 03 1b d4 b0 e9 02 2d 61 07 f3 fa 61 19 09 2b 2b c2 13 92 39 ba 2e 6d 52 f8 e9 34 e3 63 79 af 9e b9 23 8b 55 d5 c2 46 57 ee 08 75 bd 0d dc 09 17 69 2f Data Ascii: !BSCgcss(5m=qeY$\>fN8qx#v6um`NM-J\FrDZ0#'nGjLXAgYsY^;"$hb=0vH<Vvc_\Yw;dBN3!$I\|P ~&d.-aa++9.mR4cy#UFWui/
2024-09-10 16:10:32 UTC	1369	IN	Data Raw: 0d 2c 7d 94 d1 13 60 60 36 fa c7 ed 18 90 6a 69 a2 e9 d8 69 6d 3c 55 75 6a 59 a9 5a fa 6a 0e 42 5c 40 8c 67 cb 33 45 6a 66 70 96 f8 98 9f 3a ba da ed ea 10 57 db c7 ae 9f ba d9 df b3 8e 9c 94 ce 70 a5 c4 b3 33 61 6f af fb 11 81 31 88 64 61 8b f8 20 9c 03 b7 dd ab a5 fd 88 99 4a 82 d7 b2 3f 20 6a ce 71 37 ae be 4d c3 e6 ce 66 66 99 59 b5 66 cb 1c d4 73 02 1e b0 1b 24 9b 9c 09 84 95 48 fd 91 14 e6 ac 6c a5 96 f5 b9 bf c0 88 97 28 25 2e 9b 72 06 e3 d2 77 3f 03 f2 be 6d 3d 7e 0b 82 79 b2 63 59 91 62 67 29 3c cb 57 84 20 2f 56 78 16 da 6b a9 b4 92 24 e7 f3 8f 0c 42 f0 72 7e f1 86 01 a7 d3 f0 39 13 de 36 8d 30 d1 26 fe 99 5f 76 4d 00 59 c2 25 84 93 d2 9d 7b e6 45 7f 89 36 3c c3 e9 95 c7 c2 ed db 25 8b 25 ab 34 ad 8b 8e df a0 4f de 40 ef f3 4e e1 f9 08 a1 82 aa Data Ascii: ,}``6jiim<UujYZjB\@g3Ejfp:Wp3ao1da J? jq7MffYfs$Hl(%.rw?m=~ycYbg)<W /Vxk$Br~960&_vMY%{E6<%%4O@N
2024-09-10 16:10:32 UTC	1369	IN	Data Raw: 56 86 bb 99 0a 25 22 08 15 5e d0 60 97 4e 33 4f f2 8c a2 0f fa 86 83 ac 5b f1 1d 76 3a e0 ca 84 3a d9 e8 5e da 9c 72 d7 bf e7 11 40 ea d2 ec 0a 8d 46 c5 5f ae d7 11 e5 01 08 4e 63 cc 42 d2 17 f1 fd c3 38 70 a3 5c 69 af a2 b5 d7 37 cf ee 8b 67 e5 ad 03 2a ee 8f d1 cd fd 2c 83 43 ab 9d 1a c2 0e e1 5b 87 36 b4 54 92 3f ba ba b5 16 85 25 f2 7a fb c5 40 01 06 18 6a 41 70 42 4e 35 f0 9e 22 34 54 9e a5 e0 f4 22 96 7d 30 75 4a f4 87 8f 9e 96 c8 9c 7e 33 f6 1e d9 0e d1 7b 7d 02 75 57 f6 8c e0 ee 4d 93 1e 6a fa 39 c8 2d 82 5d 13 f5 ab 9d 11 99 27 6c 53 b2 20 2f f0 52 3e 3c a5 2b e7 4f 9f 95 db d8 1f 65 42 23 95 42 63 d2 1a d9 c0 02 e8 6a 4c 5c 11 12 a3 c4 2d be 5a 68 95 5b d7 fa 49 3c 8d aa fc 0f f1 84 18 71 a8 76 de 7e 96 6b 5d 9b 47 c3 ce d5 54 44 bf 3f 53 a9 cb Data Ascii: V%"^`N3O[v::^r@F_NcB8p\i7g*,C[6T?%z@jApBN5"4T"}0uJ~3{}uWMj9-]'lS /R><+OeB#BcjL\-Zh[I<qv~k]GTD?S
2024-09-10 16:10:32 UTC	1369	IN	Data Raw: e9 c4 ea ed be 83 00 a7 8e 09 ee c8 18 f8 89 1f a7 8f 29 2d 09 be 06 3a 4d 24 cb 79 63 a0 ae 45 c0 25 41 69 95 92 05 32 5d 96 98 08 cc 6c e5 b6 a8 90 89 1c 9a 19 cd 38 86 49 1a bc 79 b2 d2 05 5a 17 47 4a b3 83 1a a2 06 ae 5c d5 1e 32 1a d6 99 58 62 18 bf 4c be f6 f0 9f 49 c2 41 2d fd 47 72 52 00 21 cd 30 a0 13 a0 db 4c 2b c0 51 68 aa 53 f3 59 d4 d2 13 d7 f2 53 bf 35 fd 5f 1e d8 28 a5 06 0e 70 6f 46 9a a7 54 89 87 11 af 23 6b 1c 4e db be ea 6c 7c 72 87 6e 06 b3 64 d7 48 a0 07 1e 96 dc 79 13 db 8a e6 f9 ee e4 c8 26 db 86 17 78 e3 70 b0 c1 f7 e1 e5 5b e9 16 38 47 1a 86 fe d9 64 74 ac a2 ac a3 b1 7a ec b0 83 d9 a6 06 09 38 b4 b4 42 bd ae 4b 50 22 40 32 65 8c 65 03 e6 94 0b ac 79 e6 1e 78 e7 a7 1e da 6a bd b8 9c 06 95 4a 4b c2 88 68 c1 58 c5 ac 42 ec 7d ea 11 Data Ascii: )-:M$ycE%Ai2]l8IyZGJ\2XbLIA-GrR!0L+QhSYS5_(poFT#kNl\|rndHy&xp[8Gdtz8BKP"@2eeyxjJKhXB}
2024-09-10 16:10:32 UTC	1369	IN	Data Raw: 97 54 71 92 05 3d a2 fa b1 94 48 26 a3 6f 8f 1b a1 1b 6b c4 89 4c 44 de 57 a1 4f fb 86 c2 f9 94 eb ca 2a 4a 33 73 5b 19 ce 36 9d 6a 31 f0 40 d9 d8 6e 72 3c ae ce be db 87 86 23 89 cd d2 40 09 88 30 bf 9b 63 06 09 a2 9d 1f 05 99 3f ef b5 9d 3c 32 8a 44 d5 d3 a6 09 bf e8 7d af b0 54 73 cd d9 53 ce fd d0 22 e2 0b 52 cd 0a ae 95 a4 2e 7d df 6f 5a de cd 18 e3 87 f9 46 6f 2a 98 95 a7 dd 97 87 b6 ff b7 96 b5 3a dd f4 d6 1b c1 93 bc c1 37 c9 ed f7 48 c2 f2 e4 8d 9a 0e a5 78 a1 b4 5d c5 db c7 61 19 36 1e 76 35 ed 12 52 fd a0 cc be 65 31 87 ed 24 58 4c 85 9b ba c3 0a 4a 89 61 61 9a 11 13 dd 86 2c c6 f3 ec 84 90 cc 1a 22 33 2d cf 47 e4 21 1c cb a5 38 b3 b7 f2 38 0a 7c e0 54 3a 53 de 50 93 8c 02 1f b8 b6 f5 f1 70 1c 4d 52 ae 59 de 62 f4 e6 a5 7b ef 2b bb 4f fd 65 db Data Ascii: Tq=H&okLDWOJ3s[6j1@nr<#@0c?<2D}TsS"R.}oZFo:7Hx]a6v5Re1$XLJaa,"3-G!88\|T:SPpMRYb{+Oe
2024-09-10 16:10:32 UTC	1369	IN	Data Raw: 3f d4 b0 07 1c a1 49 12 18 9a b2 72 1b bb 72 21 d2 4b 86 39 d1 8f 38 70 d9 7d 51 bf ec bd 8d 8b e7 67 fb 2d 84 2a 0f 73 6d b5 7e c5 58 06 d7 50 1a 30 64 f8 4d 5e 08 b5 f0 3f 44 c5 18 64 49 82 6d 3c 86 a8 70 3b a1 7f 06 79 8e 06 2c 22 db a6 a6 36 ad e4 76 ca 70 07 54 5c 5e ca 6e f4 db f7 be 7f 05 33 6d a4 3e 38 a4 65 43 ae f1 dc 4e 7d 10 ad cd ea ed 63 c3 a0 e6 d9 ad 24 73 37 db bc 13 fa 9c 23 d5 b5 3c 53 46 2d 41 ba a7 a0 14 e4 86 f9 7a ac d2 e2 89 b1 13 cf 0a 80 42 81 09 2a 7b b8 06 36 63 67 1d 89 87 b1 54 7a ad 47 07 58 1f 32 2b 93 82 cd f6 d9 19 ff 61 07 b6 9c 30 9b 01 1b 86 a4 ff 07 3b e6 1c 20 9d 45 45 61 47 98 64 f1 ce 98 00 06 d7 bf c0 5b ef aa 4d 00 bc ab 06 e1 0a ae 69 f0 1b 9e d3 0f 67 f4 d2 3a 42 88 5b c4 09 55 fa b9 ad 12 33 bd 19 4a 39 dd 0d Data Ascii: ?Irr!K98p}Qg-sm~XP0dM^?DdIm<p;y,"6vpT\^n3m>8eCN}c$s7#<SF-AzB{6cgTzGX2+a0; EEaGd[Mig:B[U3J9
2024-09-10 16:10:32 UTC	1369	IN	Data Raw: db 61 09 c2 6c 02 f2 3e 1b de 68 00 c7 e1 79 a2 7f 80 14 61 d1 ce 7b 9e 32 3e af fe 43 50 ae 89 90 b0 4c c5 0f 10 20 9a 6a 3f d1 6e 08 74 67 e5 9e d8 d3 5d 03 a6 16 e1 53 88 b8 f8 f8 7b e1 b5 55 d3 87 05 91 28 27 b3 b5 62 e7 a3 27 66 8f e6 67 30 d3 83 dd ea 18 95 c4 4c 50 41 a5 4d 74 64 15 07 cc 29 e3 b3 32 c3 ba e3 59 21 d6 76 00 8e 26 60 6f 85 af fe 32 12 50 5b 0b 1b 9d 61 de 94 84 bb 35 fb c0 0c 53 87 7c 23 2b 80 b2 01 37 4a 05 a4 8a 0a 23 1b c8 b8 cc 5f ab d5 64 55 a9 a4 36 23 56 19 44 ae 86 c0 9b 42 22 4b 83 f7 d6 7c a2 1a b8 c0 c1 19 16 80 29 02 6f 90 d0 10 aa 74 6b fd 6c 03 9a e6 c8 2c ae 14 fb 6c 11 e8 a1 eb 0f f3 55 1f ec 29 dd b9 65 98 35 81 3c 41 ba 08 b0 1e 5c 30 9c eb 9e 5f ec 37 d8 d9 f6 ed 5e 7e 7b d8 24 0d 71 52 82 ce b0 66 93 13 01 fb eb Data Ascii: al>hya{2>CPL j?ntg]S{U('b'fg0LPAMtd)2Y!v&`o2P[a5S\|#+7J#_dU6#VDB"K\|)otkl,lU)e5<A\0_7^~{$qRf
2024-09-10 16:10:32 UTC	1369	IN	Data Raw: 1c f9 9e 19 d9 58 6f c3 49 12 c4 97 cb 9c dd 58 a8 81 a2 0e 5f 27 01 c4 12 f2 c3 35 f5 c7 15 5d 1a 4a 84 b8 fc 32 50 d2 08 39 32 b0 a8 43 cd 89 fa d4 ff 0c fd 40 f1 99 a6 43 a5 a0 86 f9 9b 18 36 14 45 9f 65 d1 00 42 40 8b 0b 06 e8 ac df 41 91 39 94 df 87 c3 02 e7 e6 c7 b4 e8 79 06 5d 00 f5 05 48 f1 09 07 89 03 2d 1c e0 20 db 62 b6 a8 39 0d d1 f0 4f 1e f5 19 30 0c 75 77 a7 ac 49 e2 c8 f1 a6 02 37 4a a6 78 95 c5 ab 32 af f3 5c ca 19 56 66 3d 6e 56 91 56 80 ab a4 d0 22 23 39 93 ac d6 76 38 78 0a fb b6 6d 15 0f 14 70 41 68 f6 d3 13 e8 79 e2 91 33 82 bb 70 51 09 0e 25 e4 d0 74 5e af 91 d8 20 7c 83 c2 82 5d 9d 59 42 38 6a 43 d7 ac 6e c4 23 07 26 cb c9 87 0b ee fc bd f0 ca b4 76 ac cb 92 50 a1 3e 15 96 4f 03 7f a1 a9 a7 04 93 93 af 03 89 79 b5 55 41 74 32 d0 5f Data Ascii: XoIX_'5]J2P92C@C6EeB@A9y]H- b9O0uwI7Jx2\Vf=nVV"#9v8xmpAhy3pQ%t^ \|]YB8jCn#&vP>OyUAt2_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49727	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:32 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-10 16:10:32 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=174893 Date: Tue, 10 Sep 2024 16:10:32 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49730	142.250.184.206	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:32 UTC	456	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 Host: translate.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:32 UTC	565	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 10 Sep 2024 16:10:32 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-10 16:10:32 UTC	825	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2024-09-10 16:10:32 UTC	1390	IN	Data Raw: 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 62 21 3d 3d 76 6f 69 64 20 30 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 25 73 22 29 3b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 61 2e 6c 65 6e 67 74 68 2d 31 2c 65 3d 30 3b 65 3c 64 3b 65 2b 2b 29 63 2b 3d 61 5b 65 5d 2b 28 65 3c 62 2e 6c 65 6e 67 74 68 3f 62 5b 65 5d 3a 22 25 73 22 29 3b 5f 2e 61 61 2e 63 61 6c 6c 28 74 68 69 73 2c 63 2b 61 5b 64 5d 29 7d 3b 5f 2e 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 75 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 Data Ascii: {var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));b!==void 0&&(this.cause=b)};ba=function(a,b){a=a.split("%s");for(var c="",d=a.length-1,e=0;e<d;e++)c+=a[e]+(e<b.length?b[e]:"%s");_.aa.call(this,c+a[d])};_.ca=function(a){_.u.setTimeout(fu
2024-09-10 16:10:32 UTC	1390	IN	Data Raw: 29 7d 3b 5f 2e 49 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 28 30 2c 5f 2e 46 61 29 28 61 2c 62 29 3b 76 61 72 20 63 3b 28 63 3d 62 3e 3d 30 29 26 26 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 70 6c 69 63 65 2e 63 61 6c 6c 28 61 2c 62 2c 31 29 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 4a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 6c 65 6e 67 74 68 3b 69 66 28 62 3e 30 29 7b 66 6f 72 28 76 61 72 20 63 3d 41 72 72 61 79 28 62 29 2c 64 3d 30 3b 64 3c 62 3b 64 2b 2b 29 63 5b 64 5d 3d 61 5b 64 5d 3b 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 5b 5d 7d 3b 0a 4b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 31 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 Data Ascii: )};_.Ia=function(a,b){b=(0,_.Fa)(a,b);var c;(c=b>=0)&&Array.prototype.splice.call(a,b,1);return c};_.Ja=function(a){var b=a.length;if(b>0){for(var c=Array(b),d=0;d<b;d++)c[d]=a[d];return c}return[]};Ka=function(a,b){for(var c=1;c<arguments.length;c++){va
2024-09-10 16:10:32 UTC	1390	IN	Data Raw: 22 6e 6f 6e 63 65 22 2c 62 29 7d 3b 5f 2e 57 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5f 2e 75 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 3f 61 3a 22 22 7d 3b 5f 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 57 61 28 29 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 3b 5f 2e 5a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 58 61 3f 21 21 5f 2e 59 61 26 26 5f 2e 59 61 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 3b 5f 2e 24 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 5a 61 28 29 3f 21 31 3a 5f 2e 76 28 22 4f 70 65 72 61 22 29 7d 3b 0a 61 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e Data Ascii: "nonce",b)};_.Wa=function(){var a=_.u.navigator;return a&&(a=a.userAgent)?a:""};_.v=function(a){return _.Wa().indexOf(a)!=-1};_.Za=function(){return _.Xa?!!_.Ya&&_.Ya.brands.length>0:!1};_.$a=function(){return _.Za()?!1:_.v("Opera")};ab=function(){return
2024-09-10 16:10:32 UTC	1390	IN	Data Raw: 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 67 7d 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 7d 3b 76 61 72 20 63 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 64 3d 30 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 62 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 63 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 64 2b 2b 2c 66 29 7d 3b 72 65 74 75 72 6e 20 65 Data Ascii: cription",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.g};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e)throw new TypeError("b");return new b(c+(f\|\|"")+"_"+d++,f)};return e
2024-09-10 16:10:32 UTC	1390	IN	Data Raw: 3b 77 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 70 62 7d 29 3b 71 62 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 3b 0a 5f 2e 72 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 6e 65 77 20 63 3b 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 63 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 20 Data Ascii: ;w("Object.assign",function(a){return a\|\|pb});qb=typeof Object.create=="function"?Object.create:function(a){var b=function(){};b.prototype=a;return new b};_.rb=function(){function a(){function c(){}new c;Reflect.construct(c,[],function(){});return new c
2024-09-10 16:10:32 UTC	1390	IN	Data Raw: 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 29 3b 0a 77 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 63 28 67 29 7b 72 65 74 75 72 6e 20 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 3f 67 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 28 67 29 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 74 68 69 73 2e 67 3d 3d 6e 75 6c 6c 29 7b 74 68 69 73 2e 67 3d 5b 5d 3b 76 61 72 20 68 3d 74 68 69 73 3b 74 68 69 73 2e 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 2e 6f 28 29 7d 29 7d 74 68 69 73 2e 67 2e 70 75 73 68 28 67 29 7d 3b 76 61 Data Ascii: ){return!1}}:null});w("Promise",function(a){function b(){this.g=null}function c(g){return g instanceof e?g:new e(function(h){h(g)})}if(a)return a;b.prototype.h=function(g){if(this.g==null){this.g=[];var h=this;this.j(function(){h.o()})}this.g.push(g)};va
2024-09-10 16:10:32 UTC	1390	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 67 2e 44 28 29 29 7b 76 61 72 20 68 3d 5f 2e 6a 62 2e 63 6f 6e 73 6f 6c 65 3b 74 79 70 65 6f 66 20 68 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 68 2e 65 72 72 6f 72 28 67 2e 6a 29 7d 7d 2c 31 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 41 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 67 3d 5f 2e 6a 62 2e 43 75 73 74 6f 6d 45 76 65 6e 74 2c 0a 68 3d 5f 2e 6a 62 2e 45 76 65 6e 74 2c 6c 3d 5f 2e 6a 62 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 3b 69 66 28 74 79 70 65 6f 66 20 6c 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 21 30 3b 74 79 70 65 6f 66 20 67 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 67 3d 6e 65 77 20 67 28 22 75 6e 68 Data Ascii: (function(){if(g.D()){var h=_.jb.console;typeof h!=="undefined"&&h.error(g.j)}},1)};e.prototype.D=function(){if(this.A)return!1;var g=_.jb.CustomEvent,h=_.jb.Event,l=_.jb.dispatchEvent;if(typeof l==="undefined")return!0;typeof g==="function"?g=new g("unh
2024-09-10 16:10:32 UTC	1390	IN	Data Raw: 7d 3b 65 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 5f 2e 78 28 67 29 2c 6c 3d 68 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6c 2e 64 6f 6e 65 3f 63 28 5b 5d 29 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6d 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 70 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 42 29 7b 72 5b 74 5d 3d 42 3b 71 2d 2d 3b 71 3d 3d 30 26 26 6d 28 72 29 7d 7d 76 61 72 20 72 3d 5b 5d 2c 71 3d 30 3b 64 6f 20 72 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 71 2b 2b 2c 63 28 6c 2e 76 61 6c 75 65 29 2e 4c 64 28 70 28 72 2e 6c 65 6e 67 74 68 2d 31 29 2c 6e 29 2c 6c 3d 68 2e 6e 65 78 74 28 29 3b 77 68 69 6c 65 28 21 6c 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 0a 76 61 72 20 78 62 3d 66 Data Ascii: };e.all=function(g){var h=_.x(g),l=h.next();return l.done?c([]):new e(function(m,n){function p(t){return function(B){r[t]=B;q--;q==0&&m(r)}}var r=[],q=0;do r.push(void 0),q++,c(l.value).Ld(p(r.length-1),n),l=h.next();while(!l.done)})};return e});var xb=f
2024-09-10 16:10:32 UTC	1390	IN	Data Raw: 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 20 61 28 5b 5b 6c 2c 32 5d 2c 5b 6d 2c 33 5d 5d 29 3b 69 66 28 6e 2e 67 65 74 28 6c 29 21 3d 32 7c 7c 6e 2e 67 65 74 28 6d 29 21 3d 33 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 28 6d 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6c 29 26 26 6e 2e 67 65 74 28 6d 29 3d 3d 34 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 66 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 65 28 22 66 72 65 65 7a 65 22 29 3b 65 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 65 28 22 73 65 61 6c 22 29 Data Ascii: t.seal({}),m=Object.seal({}),n=new a([[l,2],[m,3]]);if(n.get(l)!=2\|\|n.get(m)!=3)return!1;n.delete(l);n.set(m,4);return!n.has(l)&&n.get(m)==4}catch(p){return!1}}())return a;var f="$jscomp_hidden_"+Math.random();e("freeze");e("preventExtensions");e("seal")

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49732	199.232.192.193	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:33 UTC	346	OUT	GET /NUcJYKt.jpg HTTP/1.1 Host: i.imgur.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:33 UTC	763	IN	HTTP/1.1 200 OK Connection: close Content-Length: 25333 Content-Type: image/jpeg Last-Modified: Sat, 15 Jul 2023 17:06:38 GMT ETag: "4717ccb2d20f3b63d6b9206bd27c2bcf" x-amz-server-side-encryption: AES256 X-Amz-Cf-Pop: IAD89-P1 X-Amz-Cf-Id: lQCxrJj6JKACb9KUqFKpjxS4CVkmhfIAFoT8LSrkmbaT1YKpcd1yig== cache-control: public, max-age=31536000 Accept-Ranges: bytes Age: 3031115 Date: Tue, 10 Sep 2024 16:10:33 GMT X-Served-By: cache-iad-kjyo7100118-IAD, cache-ewr-kewr1740053-EWR X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 220, 0 X-Timer: S1725984633.092875,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: ff d8 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 00 96 02 58 03 01 22 00 02 11 01 03 11 01 ff c4 00 36 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 05 06 07 08 02 01 09 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 00 01 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 bb 78 35 6f a7 f2 88 78 7a 54 a6 b0 29 75 38 18 dc a1 dd b9 2e ed 4b 4f 37 4f a1 a9 62 9c Data Ascii: ) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}X"6x5oxzT)u8.KO7Ob
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: d5 5f bc 75 da d8 5b 0c 9e 38 06 c7 23 6a 7f 5b a1 34 b6 81 c3 79 75 58 72 18 d9 8a 7a ea 96 e8 a1 92 ed 27 a4 4b 1d 9e 19 89 4f e1 a9 86 32 3f 47 72 eb 95 25 15 6d 5f af 90 dd 32 0d 82 44 65 59 f2 a5 e9 44 58 14 16 7d 3a fa cc 67 78 e9 72 80 e4 30 3a 1c fb 20 00 54 06 16 24 50 ad b7 d1 37 60 d6 01 8b 7d 4b e2 09 cb 1a 6b 98 b7 33 ab 55 dd 78 bb 45 f9 fe ed 33 00 b9 68 32 d2 bf 94 21 f1 57 04 7b 75 d8 e0 5c 3b d6 07 42 52 ce b9 29 6d 53 da 3e a1 2e e9 bc 55 e9 bb 62 97 d1 5a f8 88 9c 7a 4f e9 7c e1 9c 95 d9 81 89 96 15 2d a7 95 5d bf 32 43 94 01 22 0e 52 60 31 ac 97 14 8c 5a 88 84 c3 d5 32 1d e3 8e 35 cd ae ec ab a0 97 36 5d 79 eb 65 d5 4a a4 89 bd be f0 37 7f ca 33 05 ff 00 b3 13 c2 27 86 fd 78 e0 eb 21 f5 a6 7d 57 30 8c 52 eb 64 9a 79 d9 40 69 dd e2 24 Data Ascii: _u[8#j[4yuXrz'KO2?Gr%m_2DeYDX}:gxr0: T$P7`}Kk3UxE3h2!W{u\;BR)mS>.UbZzO\|-]2C"R`1Z256]yeJ73'x!}W0Rdy@i$
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: ba 4b 55 8f 2f 14 fc d1 5e 17 ff 00 dc 8f ca f1 2f d3 54 51 c5 2c c7 58 b8 18 25 8e bd 91 2f 41 74 70 ba 68 42 50 8b 0b 9e b1 3d 28 6b 3a 0f 0f de b7 72 cc ed 9f 9c fb ad c5 c2 0c f1 35 56 b8 43 c9 bf 2a d7 d4 d9 5c e7 d9 f8 95 e1 6f ad 9d 14 3c f2 b3 e4 56 56 0b 90 60 f2 f8 19 3d 46 e7 b1 73 96 d2 27 3e 54 7a a5 0a f3 38 07 23 1b 42 35 e7 6b 1a f1 5e 7d 1e 1c 3b 10 a6 ac 30 5c cd 9a b7 08 b8 22 ef f5 c8 7d b2 da af 31 ad 3c 53 36 fd e7 f2 13 f5 9f e1 ef a0 b8 9b c8 5e c8 0b 9b b4 ea 51 b1 91 41 c9 5b 80 4a 15 1b b7 1f 76 a3 5d e2 3f b8 a8 b9 39 ab 51 15 e0 e1 f9 09 ec 4c 6b ce 59 dd 72 71 19 38 cb 01 b5 2c be a5 88 a7 65 59 ea f2 7a 59 8f 97 e5 dd 56 43 5a b7 0b 6a cd 98 f9 3e b4 44 36 48 c9 b3 ce df 9a 77 48 ca 17 9b 67 8f 6d a9 6e 73 f7 67 90 f4 6a 73 Data Ascii: KU/^/TQ,X%/AtphBP=(k:r5VC*\o<VV`=Fs'>Tz8#B5k^};0\"}1<S6^QA[Jv]?9QLkYrq8,eYzYVCZj>D6HwHgmnsgjs
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: 8e 36 18 61 82 ac 7d 38 2c d4 ab 73 5e bb b8 da 0e 81 b0 2a b4 69 d2 79 7c 0e e1 f8 c7 b9 ce 74 f5 2a 59 86 28 65 ad 42 9d 27 b9 f0 65 6e ba 8b 70 9f d3 2d 2e 55 47 e5 ec b9 29 7a 55 f2 b8 a9 cc a6 67 1b 7c ad 7a 78 06 a7 28 eb 7d 5d ac cd 72 79 a7 63 a7 b4 c9 69 f4 5e 00 66 35 95 f2 4e dd 5e e7 27 06 ff 00 25 e3 ba c3 ca 3d 44 7a 8b 12 2c 7c 65 8e d4 b4 a0 ec 80 7c ac 37 5b 13 04 c5 45 9f 91 95 aa d5 76 5d 96 42 e4 e8 c7 c9 42 1a 8f 01 c9 03 85 c6 71 5e 81 dd 79 5c f7 15 b1 5b ad d6 cb ab 33 f7 73 3d 40 e8 b6 44 1f 2c 65 9d 57 3d ef 79 64 50 bf a8 1d 9f 2c fe 1c 8f 2c ac ae cb b2 ca ca ca cf 9e 7f 4f 08 b0 2e 99 57 66 e9 fb 15 77 f5 61 88 b2 fb ba 30 82 3d 5c 8c 78 22 e5 b8 a5 0c 51 c8 f0 e2 5a 5d 8d 9c fe ab f5 f6 fb ca f7 76 5e fc 77 c3 7d cb 7c 7c 6c Data Ascii: 6a}8,s^iy\|tY(eB'enp-.UG)zUg\|zx(}]ryci^f5N^'%=Dz,\|e\|7[Ev]BBq^y\[3s=@D,eW=ydP,,O.Wfwa0=\x"QZ]v^w}\|\|l
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: 93 e5 95 94 f6 86 ea a0 6c 6f 76 13 ab b4 49 d3 1e 9d ed 69 7b 9d 86 c6 d6 2c a1 92 98 e1 09 4c b9 1b 59 92 2f c2 4e 51 b9 d1 22 40 ce 41 a3 67 27 d9 70 01 d3 09 1d 1e b2 be 29 ba 8c d5 6f dd b9 61 c7 63 dd 6e 5c dc 0d b2 53 5d ed 2b bf 75 b0 ee 86 71 85 be 84 14 e7 7c ac e4 0c 73 14 e7 b1 d3 96 3a b5 24 b5 30 8c 32 36 c3 1b 58 c6 bf f7 34 e4 ff 00 21 c3 28 67 b2 db 52 b6 c8 ca 24 8c a3 26 70 e0 1d fe b7 cb 75 1b 64 a1 f0 86 50 39 0b f8 41 da e3 2e 3d d5 8e 3e a4 ee dd f0 51 ad 50 66 3d b2 01 5d d3 5e 3b 83 fc 2c ac a2 4e ce 08 3d 77 44 fc 10 57 ff 00 ca 04 83 dd 8c c7 65 d9 a5 1c 80 17 b8 1c 11 ee 6e 88 7e e0 17 4c 3b ba 34 a0 d5 c5 33 8e 6e 5e 03 e9 03 1b 1a a5 a3 23 1e a2 a8 e6 c8 d0 9f 5f 32 10 c6 45 fb 73 d0 8f a8 d2 ac 57 26 48 a4 6c a1 f2 bf 26 4a Data Ascii: lovIi{,LY/NQ"@Ag'p)oacn\S]+uq\|s:$026X4!(gR$&pudP9A.=>QPf=]^;,N=wDWen~L;43n^#_2EsW&Hl&J
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: 6a d2 ce 71 1c 96 f0 f9 07 68 9c 17 49 73 3c 19 70 4f b6 d7 98 0f cc 15 50 d8 6d 9b 2d c8 5c aa 39 96 9c d0 63 31 2b b4 3d 15 43 4d ac 99 8c 49 26 53 ad 3c 0b 4c 72 a8 58 da 77 38 8c 49 55 dd 6d ae e3 06 09 1a 15 d2 1e f0 29 cc 13 e2 bb c7 7a ad 1b fa 57 73 f7 f8 45 1b 5c af 4d 0d e7 8a de 3e 28 89 89 b9 4c 42 69 84 04 10 9f 03 44 e2 47 8a a3 29 b0 10 b9 fb c1 1e 13 1b 30 75 e8 ab 82 6a d0 7a a7 45 b7 86 cf 35 52 de e0 74 c4 62 bb 47 f4 ad 56 54 5a 9a 2d 46 3f ca 25 77 cc f5 5d d3 50 f7 ad ac 00 3e 0b f1 7a 6c 20 02 43 6f f1 5f ba 26 f6 f6 67 ec b0 a9 2d 3e ab 12 f7 12 b8 ea f4 69 7b b5 ba 56 64 04 21 96 1a 56 75 e3 d1 09 16 a7 e8 25 0b ad 4f d4 4a c3 da bf f2 4d 98 a4 56 0d 7b 80 fa ac 4d 0f ec b4 67 df 67 6d de 8a a8 64 32 d4 91 2a ad bb 7d 20 1b ae ff Data Ascii: jqhIs<pOPm-\9c1+=CMI&S<LrXw8IUm)zWsE\M>(LBiDG)0ujzE5RtbGVTZ-F?%w]P>zl Co_&g->i{Vd!Vu%OJMV{Mggmd2*}
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: ee cb ff 00 c4 7d bd 56 12 e6 7f 62 84 3e cb 68 7d 38 97 16 e8 f2 42 5a 71 0a 5a 19 c0 71 84 5c 5b f8 2f fc 95 36 8a ae b8 54 03 1f 02 84 0f 68 50 bb d9 b7 d3 e2 84 10 5c 38 b0 f8 2f e6 1b 30 76 f7 f0 1d bd 83 13 24 ea 7a 8d 4d eb 04 36 d2 f6 91 83 83 a2 79 ca 70 b6 eb dc 72 27 fb 2a 2e 69 3c 67 2b 39 de ae 35 3f 48 4c 91 45 a6 c8 f1 52 ea 8f 39 78 ab eb 3b 13 a7 80 5f bb b5 fe d6 aa 73 ed 85 d1 a8 4f b6 e6 8c 76 0d 9f fc 9e 09 fe 53 71 5c 76 6c b7 9b ae 5c 35 28 81 fe aa 7f f0 86 e3 ad 54 a9 1a 0f f9 51 55 be a3 c4 2e 84 da 47 b6 ec 95 67 3e b7 05 52 73 f1 5f b3 9a f3 ab 5c ac 32 1f 6c b0 1b e7 92 ed 95 d8 6f a7 c6 28 a3 7f ca ed 0a 17 b7 f3 0b 02 b1 67 a7 c2 cb ad db 5f 5f e0 7e 56 dd cf 25 54 88 df 7b a7 20 b8 70 6f 20 ba 4b 69 b1 e2 7f 73 31 3a 94 28 Data Ascii: }Vb>h}8BZqZq\[/6ThP\8/0v$zM6ypr'*.i<g+95?HLER9x;_sOvSq\vl\5(TQU.Gg>Rs_\2lo(g__~V%T{ po Kis1:(
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: 23 7e 93 ca 54 80 7a 0d 67 62 8b c4 07 5c 12 da bc 4c 79 d6 55 d3 2c 44 bc 2a 17 98 5d 81 4e 6f 2c 31 de b1 07 2c 2e 02 00 ca ec ab 9f 72 0f bb 46 e1 80 7b c6 d6 04 4f 04 ad 0a 59 95 f1 1e 8f 6f 35 4e 82 1a f2 c7 be cb 8b da c7 c8 f7 84 c7 78 48 67 62 76 e1 10 62 02 ae a9 5e 1d 12 2b 85 d5 29 cb aa c1 94 c9 b4 b9 d4 7f fa 11 5a fd 2e 2c ef cb f9 96 73 29 0b 96 10 4e 25 25 90 29 80 1b 99 2f ac cd c6 66 b9 09 7d 11 90 95 c0 88 30 1e f9 95 d6 08 7a ac a8 5e ac c7 5f f0 a0 dd 87 2b 1e 8e 0b ff 00 06 d0 85 c6 1e f9 e5 06 d5 cb 39 8a f5 63 16 0f 53 5b e4 9e 64 42 0e d2 f8 9b bb f4 98 fa d6 eb 08 7d 07 ac fa ae b3 ef ba b0 5e d9 1e c4 65 2d b2 e1 d6 e6 fa 42 1e ca 8f 76 18 5b 86 86 35 8f dc 45 de 1c 28 eb 0b 8e f2 f0 7e 62 07 e6 21 86 23 d8 6a f8 62 96 88 aa 4f Data Ascii: #~Tzgb\LyU,D*]No,1,.rF{OYo5NxHgbvb^+)Z.,s)N%%)/f}0z^_+9cS[dB}^e-Bv[5E(~b!#jbO
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: ea c3 5c bb 25 4d d4 5a b4 69 04 0c df f0 dc 63 45 2c 2c 0f 13 62 12 6b a7 7f 69 67 6e b2 db 2b 98 db 99 a1 4e 3b 19 cb be 1f ee 62 eb d0 e8 27 20 f2 b8 3d 9e 20 49 77 36 fd d2 fc b2 ce d4 41 45 2c 2c 0f 11 d3 9d d5 59 3e 67 70 f2 2d e5 da 77 0b 62 5e 1d 25 cb 5c 62 31 65 25 bc d4 44 7f 70 bc ae 63 af 39 c5 f7 35 38 fe 33 7d 8d c2 d1 7b aa d5 64 f8 8c 69 2d 56 0e 79 99 22 55 1e dd 6f 9a dc 75 4d 2a d7 f2 b1 79 8f 44 bb b0 be c4 00 53 b1 9f 22 e6 3c 24 69 79 3e 25 c4 8f 2f 0d f3 1f 24 db 03 b7 11 d7 e3 3d 05 74 bc cc c0 1b 43 6b d5 5d c3 c1 ad 55 0e d6 71 1b 58 08 51 69 56 bc cb 9f 8e af 0b be 62 84 bb a9 32 91 a7 53 2a 8a d9 2c 0c ba bc 37 cc 6d 11 29 d6 59 cc b9 b1 ad 66 0b 32 fe 1c 41 c1 52 b7 5d 20 75 44 e8 cb 91 99 dd 00 0e 4e ec 13 7c 29 77 63 0a 5d Data Ascii: \%MZicE,,bkign+N;b' = Iw6AE,,Y>gp-wb^%\b1e%Dpc9583}{di-Vy"UouMyDS"<$iy>%/$=tCk]UqXQiVb2S,7m)Yf2AR] uDN\|)wc]
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: cc 7e 50 8e e4 f2 db 2f cc 50 dd bf 5d 00 1a 7e a8 df f9 a3 ce 31 ed ab d8 9c 4a 1f 60 a7 6b cc 71 07 d0 16 c6 0d f6 8e c6 04 bf 7e f5 5e 65 f2 ad a5 a6 8b 55 6a 16 b4 ce 8d ba 3c 47 c1 2c ee 6f 67 d8 28 36 4d 9d 66 00 cb 13 f3 b6 87 98 48 cb 9e b2 60 05 ae 44 0c 8a d7 8e 35 79 e6 08 48 e3 b6 6c d6 17 65 66 eb 66 ee 5f 8e 33 f8 7b 67 52 84 7d 31 cf 31 79 48 bb 93 b7 b7 a3 03 ea 4a 95 2a 51 de 3e 25 5f a8 63 89 72 d9 ee 97 15 35 6d d4 69 cf bc 6a 72 5b ef b4 20 50 6f 63 6d c6 23 7e cf d6 5a 99 0a 7c 33 84 07 2e a4 05 2c f4 c7 1e b7 0c 38 d2 fd da 97 89 87 bb 3d f2 97 73 29 37 4c 1f f0 2e f2 9a fa aa 0d fd 01 2e d7 34 7c cc 7e a8 f8 94 95 83 2b 38 e8 c7 e6 61 59 49 21 6e 66 f7 5b 82 b0 bd cd 7d f1 06 af 32 9e e6 fe 89 b3 d0 0d 0e 55 29 bb d2 5d 50 1e 61 f0 Data Ascii: ~P/P]~1J`kq~^eUj<G,og(6MfH`D5yHleff_3{gR}11yHJ*Q>%_cr5mijr[ Pocm#~Z\|3.,8=s)7L..4\|~+8aYI!nf[}2U)]Pa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49734	199.232.192.193	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:33 UTC	347	OUT	GET /eGsgDjP.jpeg HTTP/1.1 Host: i.imgur.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:33 UTC	761	IN	HTTP/1.1 200 OK Connection: close Content-Length: 29351 Content-Type: image/jpeg Last-Modified: Fri, 06 Sep 2024 15:03:13 GMT ETag: "629e995e18415bef426c612d6262ee74" x-amz-server-side-encryption: AES256 X-Amz-Cf-Pop: IAD89-P1 X-Amz-Cf-Id: w_NRBo54xPngCl9PlH04tgkPl9-6X5aqHbjdimqxVsTkjk9Va29Qtg== cache-control: public, max-age=31536000 Accept-Ranges: bytes Age: 349640 Date: Tue, 10 Sep 2024 16:10:33 GMT X-Served-By: cache-iad-kjyo7100066-IAD, cache-ewr-kewr1740041-EWR X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 80, 0 X-Timer: S1725984633.093045,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: ff d8 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 01 85 01 b6 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 08 09 07 0a 04 05 06 02 03 01 ff c4 00 74 10 00 00 04 04 03 01 06 0a 11 0c 0e 06 08 03 09 00 00 03 04 05 01 06 07 08 02 09 13 11 0a 12 14 15 21 23 16 19 31 33 41 51 53 57 94 d1 1a 24 34 43 55 56 58 61 63 71 73 81 91 93 96 Data Ascii: CC"t!#13AQSW$4CUVXacqs
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: 44 c7 37 1b c1 ce 4d dd 30 18 af a8 21 d6 d4 f4 2f 4d b5 2e 2a 5d af b2 4c b3 a6 2f d4 e0 dd e0 ca 45 df fb 54 bb c9 73 35 da b5 71 f5 28 cb 65 b9 77 bc 0f 0b ce 42 61 ac 2f ca 30 e9 9e e1 a5 1e 5e 48 08 07 59 af aa f3 18 ea fc dc ce cf 76 15 05 22 54 93 42 f2 89 24 89 b5 4e 99 45 f0 93 87 23 2c 7a 7d 56 9a 73 01 a5 0f 2a 66 39 0f 48 99 a0 bd 6e 01 3a 16 61 a6 97 a4 77 5b 2c 62 3a f2 71 c4 57 29 d3 fa 5a e7 fd e4 e1 e3 09 8a d3 de f9 2d 72 f0 f4 b6 e3 f2 bf ce f1 9b bf 9b f7 bd 57 98 9b ab b9 2f 9b fe 47 af e9 80 de ff 00 ab 12 a3 fc ac 52 3e fe bf db d8 f5 65 54 6f 95 aa 47 aa b5 76 0c 9d 0f a6 5c 22 f7 e9 d5 40 71 9d 8e 5c 66 b9 d2 e2 e3 0b 4f c1 fe 37 00 c9 3d 0e 6e 6e 7b cc 56 4f c6 ca 7e 94 33 59 b9 c1 05 99 22 8b 09 bb f7 2f 15 b1 b3 71 c3 1f 1f b6 Data Ascii: D7M0!/M.]L/ETs5q(ewBa/0^HYv"TB$NE#,z}Vsf9Hn:aw[,b:qW)Z-rW/GR>eToGv\"@q\fO7=nn{VO~3Y"/q
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: d2 36 d4 33 32 92 cb 2b dc cb d5 1f 42 6b 0d 2b c7 ad 21 86 5a 93 7b 9d 27 01 d2 5a 9f de 74 d2 70 58 87 c5 66 6b d2 cb e3 30 23 ee d2 a1 38 49 f6 4d 3e 4c 2d 6a e6 85 6a 5b 5f 9a 88 2c c4 ca cb 34 dd fe a6 01 81 ea 15 bd dc b5 08 d0 51 70 f6 d9 31 c9 05 2b fd ad 3a 63 d3 2f 57 dc c7 a7 fa fb ef 5f d5 51 3e 7c ad 52 3c 64 f9 56 aa 45 54 78 e8 a2 ac 4f 0f 33 0a a2 4a d2 25 63 e3 b1 8a 0c 28 bf c2 0b 2c 3d 0d 4f 52 68 f9 bb 11 6d 7d 92 ab 25 7f 4d db 86 4e 5e ac 9b bf 68 f6 d6 1d ff 00 5d ea 3f ff 00 ee 13 67 f6 83 c9 57 df fa 79 9d 7f a5 ae 7f de 4e 19 2b 2a b9 16 64 ac f9 83 d3 26 09 21 0f 18 71 23 f1 6e ef c7 79 db 7a 74 ff 00 67 a9 8c 63 5a fb ff 00 4f 33 af f4 b5 cf fb c9 c2 4d 6b 30 cf a9 24 da f4 a2 fe 76 1b 35 a6 8f 4c 55 ef fa 92 7f 23 25 5b b6 57 Data Ascii: 632+Bk+!Z{'ZtpXfk0#8IM>L-jj[_,4Qp1+:c/W_Q>\|R<dVETxO3J%c(,=ORhm}%MN^h]?gWyN+*d&!q#nyztgcZO3Mk0$v5LU#%[W
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: 8f b5 47 17 f4 8f 0f 88 04 dc e8 d8 ed ee fa 32 6b d6 de d7 03 87 eb 07 46 c7 6f 77 d1 93 5e b6 f6 b8 1c 3f 58 42 2c 79 da 12 54 37 aa 69 2b 4e 18 ff 00 49 b0 7e a8 f9 e9 dc 13 de a1 a3 e5 36 1f d5 01 20 ae 46 d3 2d 46 ef 52 16 96 e2 2d 49 be 6b 38 a2 b4 d1 b8 ba b0 95 c2 12 fb 9a 8e ba 50 8f 6a 32 0e ca 94 e3 f1 a8 85 a7 cc fe b9 24 bf ad fa 48 f8 e9 da a1 ef 5a d7 f2 ae 1e 21 fb 19 9d a1 58 30 e1 c0 75 22 6a 84 71 75 76 4d 78 3f 54 66 86 e5 c8 3c 29 11 a6 a7 4e 7f 16 37 1f a4 15 95 6f a9 2e 6c f9 4a bf e9 83 90 cd 90 d6 54 ad 4a 38 42 8b 41 7d 57 0e e4 b9 dd 69 85 ff 00 79 1f 9f 4e e5 0f 7a a6 df 94 b0 f1 0f e7 4e f9 bf bd 0b 67 ca cc 1f aa 33 7b 5b 25 ea b0 fb 2b 1b e9 a4 b5 bc 5b 9d b6 da 8c bc 6c af 6e d6 c6 92 51 44 74 3c b9 89 91 9c b2 cc 55 f7 e6 Data Ascii: G2kFow^?XB,yT7i+NI~6 F-FR-Ik8Pj2$HZ!X0u"jquvMx?Tf<)N7o.lJTJ8BA}WiyNzNg3{[%+[lnQDt<U
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: 37 8d 8e 55 3e aa a7 0e 2b 52 5e a5 17 95 2c bf a8 ed ba 2b 9a bd 35 af f0 f3 03 a2 b9 ab d3 5a ff 00 0f 30 75 3a c5 7d d0 4f c0 1a c5 7d d0 4f c0 26 35 e7 61 d1 4c d5 e9 a5 7f 87 98 38 c7 4d 53 81 1f fc 62 e9 e1 e6 0f c3 58 af ba 09 f8 07 f4 f3 89 3c 9d 9a e5 00 fd ba 37 9c 7d 35 3a f8 79 81 d1 bc e3 e9 a9 d7 c3 cc 1c 0d 0f 5c 7e 60 3b 3e 8d e7 1f 4d 4e be 1e 60 74 6f 38 fa 6a 75 f0 f3 07 00 94 67 1f e6 72 0d 3b dc 13 8f be 2d 72 fb 89 5f 83 83 27 71 cc e8 de 71 f4 d4 eb e1 e6 0f 8e 8d 67 1f 4e 4e 9e 1e 60 e3 71 6b 97 dc 4a fc 1c 7c 1c 89 61 1e 68 20 d2 bd dd 38 1d c9 9c ce 8d 67 1f 4e 4e 9e 1e 60 74 6b 38 fa 72 74 f0 f3 07 00 94 67 1f c8 9c 93 4d f7 01 f7 c5 6e 5e 85 2a 06 3e e3 99 d1 ac e3 e9 c9 d3 c3 cc 0e 8d 67 1f 4e 4e 9e 1e 60 e1 71 6b 97 dc 4a fc Data Ascii: 7U>+R^,+5Z0u:}O}O&5aL8MSbX<7}5:y\~`;>MN`to8jugr;-r_'qqgNN`qkJ\|ah 8gNN`tk8rtgMn^*>gNN`qkJ
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: af f6 1c 3b d2 a5 74 ae 63 a8 54 ca 70 66 21 98 a7 43 a7 c4 89 9c 8e 43 a7 ce a6 d4 d4 e7 04 90 e3 c9 3b d1 c6 bf 08 28 43 39 f2 c5 a8 72 1b 8a 90 e8 b4 bf 35 4c 66 f1 b1 4b d7 3f 6b bb 73 89 13 14 5f 37 bc e6 b9 a1 eb 6a 16 5b f4 0a 4e 90 df e6 84 f3 54 da 71 ad 2c c7 a9 27 ed b7 f0 0b 17 76 61 a1 3d 6a 91 4b 6a 5f c2 68 b8 4b 9a b7 1b 98 cb 64 eb e2 62 f1 7a bf 29 f4 a3 ff 00 27 d7 25 0f 44 12 4f a3 6c be 10 58 e2 3c 2c 90 dd 5b 4c 66 70 75 66 38 a5 65 69 1c 49 e7 96 61 66 8a 70 a7 a4 bc 4e 33 b3 54 ad c7 8a b4 9c 57 a7 4d e6 83 3f 76 60 b1 7e 95 ad 00 f4 c3 37 7e 3e 1e f2 ba 6e 9e 0f 6f 98 b5 f9 4f 1a 33 b5 4d 49 da 14 33 71 e3 30 f1 74 bd 49 bf f8 41 5b c7 93 e4 f9 1e e4 26 79 5a 46 81 5c 57 c3 fc a6 49 1d 6c a1 8a 87 b1 ae ed 0c f2 dd 5b 98 e5 69 5e Data Ascii: ;tcTpf!CC;(C9r5LfK?ks_7j[NTq,'va=jKj_hKdbz)'%DOlX<,[Lfpuf8eiIafpN3TWM?v`~7~>noO3MI3q0tIA[&yZF\WIl[i^
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: 1e 85 e9 13 f8 51 5e f6 67 78 08 ed 41 e1 f1 e1 44 8f c6 c6 bb 20 2d 37 9a 34 f4 b7 83 df dd 16 64 c7 5c 2d 25 5d 4b d3 d3 93 5b b8 59 a9 cd d6 e1 ff 00 c0 1a c6 57 03 92 b7 a9 23 b1 c1 1f 4b a4 ec 7a 33 b4 8d 2b a7 fb 28 b5 8f b1 6b e5 b2 ee fa 9f 3e 56 1c b3 36 13 9f 2e 8a 4a 6e d0 d6 fb 7c 59 bf f0 7d 98 b7 a7 83 89 e2 d3 dd d4 43 ad 14 61 a2 9d ad a6 b3 7d 42 2a d3 75 50 52 c7 c6 1c 5f a9 cc eb e9 89 3f 37 e6 e7 17 d9 55 7b 3b 75 2a e0 9c 60 94 c4 c5 1d c3 c7 8d 5b 87 c9 65 72 50 f2 f1 fc 47 8e c4 35 fe 92 d1 7a 62 d4 59 0b 1b 56 25 97 f6 d0 c6 7c 7d 8c c7 3b 3c 4c 1b 3f 6c 57 a8 53 f1 a6 0e 9c 00 74 27 cb bc 7c 7b 93 77 d6 e1 97 64 b7 19 76 cf e4 b2 14 c7 9d 38 a5 6b be 35 49 d8 c6 6c 87 ee 04 09 a6 39 aa c9 34 ca 98 b0 53 ff 00 a9 22 f3 b8 a5 ac 84 Data Ascii: Q^gxAD -74d\-%]K[YW#Kz3+(k>V6.Jn\|Y}Ca}BuPR_?7U{;u`[erPG5zbYV%\|};<L?lWSt'\|{wdv8k5Il94S"
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: dd 53 35 b3 d0 95 8f 2f 6a 9c 1a d2 19 08 ba 9c 5e a7 09 34 c3 7b 99 7d 6f c6 25 35 39 c8 86 96 15 2e 13 1a b5 5a a6 33 9d 62 5e d3 ca 97 48 2c 84 e5 7c 61 58 c0 56 28 0b 57 e9 10 5a ef 7c ea 83 f1 e9 be 8a 3c 0d c8 64 7d 2d c9 d4 dd da 78 a0 f5 31 f9 c1 7b 52 53 14 9c cf 31 90 59 9c 28 b2 bb 99 85 95 80 05 73 09 b3 2d dd 45 0e 95 32 f1 3e 8b a7 98 cd 3a 63 56 cc 61 5a 24 27 33 ae 1a 60 89 14 f6 9b cd 75 52 a1 35 53 69 3d ab 85 ba 38 aa e0 c8 c9 16 41 4f b2 1a a5 84 cb 84 46 a8 d6 a9 8c e7 5e cf 12 10 5a 74 e5 7c 61 58 c4 0b f4 21 c8 ed f7 fc a6 cf a6 f5 56 4b 48 f3 5c 75 3f ee 62 d9 fc 57 a2 cb 7b 36 ca 05 64 d4 c6 47 50 cd 3f 16 54 c6 c8 c3 c0 56 12 7b 41 a6 16 51 86 89 81 e4 a9 db 38 bb 87 7d 58 a5 9d bd ae 87 b1 78 c4 3c e9 12 5a ff 00 7d a9 ff 00 e3 Data Ascii: S5/j^4{}o%59.Z3b^H,\|aXV(WZ\|<d}-x1{RS1Y(s-E2>:cVaZ$'3`uR5Si=8AOF^Zt\|aX!VKH\u?bW{6dGP?TV{AQ8}Xx<Z}
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: c1 05 15 33 a1 e3 4c 8f 2a 47 b2 0c 2e 00 2b 05 9e f9 2e e1 a6 62 4a a1 c2 bb cc 65 16 91 51 66 9c 49 ca 3d 90 4f ca cd 9b 65 9a ce 74 62 67 94 19 a6 97 a5 6e 8e b2 e2 b4 29 09 3d 80 c2 ca 34 c3 4b d3 12 0c e9 3e d1 6e 4d 11 9f 68 e4 39 b0 a3 8a e7 8e 20 84 c6 19 fd 5f 38 21 2e 67 b9 70 52 1a 3d 49 b1 d7 fa 1e d6 6b 49 4d ea cb 29 e1 a2 2a 35 0b 34 b3 7c f3 00 c6 33 8e 4c 34 f4 99 36 cf c8 9a 38 0e 91 b3 0b ca b5 27 1d dd 8b 2b 9b 2c 46 dc d0 af 5e bf 48 f7 66 ed 4e 29 85 53 74 64 6b 62 48 91 36 8a 18 f9 e6 9e fc c1 3b ec 5a 5b 26 4f b3 9a 64 d1 12 34 8d e8 35 22 a3 89 f6 43 79 c1 4f b7 b9 33 c6 73 bb 6a 85 33 c0 fd 5d 69 91 5c 36 fb 97 36 32 09 21 96 45 ec 55 e9 92 e6 4b 68 ae f7 0c 6f 43 bc 44 b0 c3 ba 23 77 2c b4 fa 9e e9 8c 65 0c e6 2b 35 1f 9f ed d9 Data Ascii: 3LG.+.bJeQfI=Oetbgn)=4K>nMh9 _8!.gpR=IkIM)54\|3L468'+,F^HfN)StdkbH6;Z[&Od45"CyO3sj3]i\662!EUKhoCD#w,e+5
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: d8 d5 38 ba 38 b0 98 99 1a 32 3a e1 da bc d8 80 76 4f 9a b5 1f b5 0a 0e 45 27 78 a4 93 43 b2 fe 1e ad 72 c7 24 3c 1b 4c dd 53 35 3f 76 68 cb bd 3e da 0d de 22 77 f0 84 43 23 1a be be b3 fb a8 75 99 1d 64 f6 fa 1e fc 6b cb 79 5a 8b 11 a7 4f ce 15 ab d6 f7 e2 ed a8 fc ab f5 39 a2 92 c4 8e 9d 0e 89 ac 72 ba 44 3a 3e c8 52 61 02 69 be 70 d4 7e 47 ab 53 c5 51 78 a4 93 69 c6 cd 8a 92 70 32 48 50 9b 51 22 62 8b d3 d3 30 7b 8e 9e fd 01 ef 11 3e fc 7a 20 11 6d 9e 98 d5 9a 73 7e d2 95 40 ac 14 e5 d1 8d 03 e5 46 d5 46 b1 72 7e bb ce 0b 4d ba e9 56 6a 9e 2d d6 78 93 e4 74 3a cf 2e cc 26 26 46 8f ba 98 2a ef 30 ec c2 25 bb bd 72 93 9c 29 bc aa f3 2f 74 30 69 86 fd b5 3c bd 4d 4f c1 9a 33 25 2c cf 7e 0d 32 a2 46 8a c1 40 d7 b8 ba 25 2b 48 e7 26 37 62 cb 2d 57 b2 69 98 Data Ascii: 882:vOE'xCr$<LS5?vh>"wC#udkyZO9rD:>Raip~GSQxip2HPQ"b0{>z ms~@FFr~MVj-xt:.&&F*0%r)/t0i<MO3%,~2F@%+H&7b-Wi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49733	199.232.192.193	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:33 UTC	346	OUT	GET /igBpB3f.jpg HTTP/1.1 Host: i.imgur.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:33 UTC	759	IN	HTTP/1.1 200 OK Connection: close Content-Length: 169779 Content-Type: image/jpeg Last-Modified: Mon, 11 Oct 2021 13:24:26 GMT ETag: "bf3983e44c982a8bfce433c2575f3122" x-amz-storage-class: STANDARD_IA X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: OvrqRRpnJnN5TWEOSLtJ5oZfUZyMdw8xg2ibYBZsPzO_i42wNE_8yw== cache-control: public, max-age=31536000 Accept-Ranges: bytes Date: Tue, 10 Sep 2024 16:10:33 GMT Age: 2430481 X-Served-By: cache-iad-kjyo7100135-IAD, cache-ewr-kewr1740041-EWR X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 92, 1 X-Timer: S1725984633.093083,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: ff d8 ff e2 02 40 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 30 41 44 42 45 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 cf 00 06 00 03 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 6e 6f 6e 65 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 41 44 42 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 63 70 72 74 00 00 00 fc 00 00 00 32 64 65 73 63 00 00 01 30 00 00 00 6b 77 74 70 74 00 00 01 9c 00 00 00 14 62 6b 70 74 00 00 01 b0 00 00 00 14 72 54 52 43 00 00 01 c4 00 00 00 0e 67 54 52 43 00 00 01 d4 00 00 00 0e 62 54 52 43 00 00 01 e4 00 00 00 0e 72 58 59 5a 00 00 01 f4 00 00 00 14 67 58 59 5a 00 00 02 Data Ascii: @ICC_PROFILE0ADBEmntrRGB XYZ acspAPPLnone-ADBEcprt2desc0kwtptbkptrTRCgTRCbTRCrXYZgXYZ
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: c7 76 ea e9 49 b6 2a eb 69 62 de e8 5a 2b 16 be 36 6c 51 9c 36 b9 11 58 b2 02 74 49 63 99 0e 1d 75 8d 7d c8 1a e6 dc b5 1d c0 d5 55 04 e5 e0 45 e4 62 f2 70 3d ec 7c 57 35 ed 8a 1a 3f b5 86 aa f3 46 99 12 66 75 d1 e4 c6 1c 64 72 5c 77 2a b1 39 54 1b ce e0 4e 55 06 f3 b8 18 8f 6a 13 b9 41 3b b8 13 b9 01 53 b9 89 cb c1 c8 aa 0d e5 e0 e4 77 21 0c 3d 2a 7a 24 96 ce 7d a9 48 f2 da c9 5a bc 13 de 01 5f 54 6d e6 a4 86 94 99 b8 7f 43 c6 cb ac 45 4d 65 f2 a1 2c bb 94 ab 7e 3b 16 27 01 c9 11 ae d7 3e 54 73 52 2c 6a 66 c5 4b 1b 2c a2 a7 d4 cd a0 de 63 ce a5 bf de 7d 17 c6 7d 93 c5 71 a5 9d 54 7e 88 da e7 ac 75 3c b7 85 b0 ac 54 af 56 95 e8 b6 5a 86 8e e0 75 0a 95 8a cb b3 55 0c 35 73 67 aa fa 05 34 5b e4 bb 86 59 e9 d7 3a a1 8d 5c b2 a7 80 b2 ab 2f 99 af 9f 16 4e 5a Data Ascii: vIibZ+6lQ6XtIcu}UEbp=\|W5?Ffudr\w9TNUjA;Sw!=*z$}HZ_TmCEMe,~;'>TsR,jfK,c}}qT~u<TVZuU5sg4[Y:\/NZ
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: b4 56 a0 c8 91 70 2d 43 ec e2 e9 84 4a cb 58 5a 66 12 39 44 ca b9 85 8b c7 03 55 33 3d 30 91 f7 51 27 5a 1a dd 85 73 33 a4 d0 35 ce 73 46 97 15 9d 4c b0 52 5e 76 70 2d f3 f9 ef 69 6f 8b d0 5e 57 ac ab 51 21 eb 09 53 b3 e8 3d 8b 9a d8 68 89 9d 12 da 88 92 2c 2b 74 25 4a cd 44 b9 dd 13 00 f0 bb a1 b3 b5 9d 33 b0 fd 0a 1e 5a f9 d2 7a 60 1c e5 f6 91 4e e4 10 5d 05 c3 32 3a a8 f0 b2 bb 2a e5 d0 bb 4e 64 9c d4 62 44 e0 72 0f c0 e4 1f 81 c1 23 81 cd 1f 80 a3 3f 05 01 c1 50 ba 31 62 94 25 ac 75 26 42 c7 e1 49 50 b8 a2 31 ac 68 cb 1d 42 47 03 80 fc 05 03 70 54 0b c2 e6 15 43 c0 75 0a 8c c8 37 08 84 8f 28 07 a4 ae 92 ea 15 18 89 d3 35 4c b7 ac d2 6b bd 77 cb bd 26 1e 63 19 bd c4 da 0c f8 76 f5 36 7a 2c fd d7 2e 98 ad 16 7b 3f cb d1 a1 ea ec d3 5a 78 d4 6d bc f4 4e Data Ascii: Vp-CJXZf9DU3=0Q'Zs35sFLR^vp-io^WQ!S=h,+t%JD3Zz`N]2:*NdbDr#?P1b%u&BIP1hBGpTCu7(5Lkw&cv6z,.{?ZxmN
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: b9 93 2a a2 a3 60 2c eb 83 6d 8d b0 b7 d1 79 c4 5d 2e 7b bb 28 de 8f e7 bb 6c 2f 7e c8 b1 b8 f4 c2 ba d6 2f a5 81 54 0d f2 36 94 b1 4b 21 da a8 f6 63 14 74 8a e0 74 67 23 a3 ac a3 ac 75 09 0b 1b 82 4a 01 02 4f 47 e0 91 d1 d4 0e b1 f8 24 f4 65 41 d0 3c 07 e0 70 1f 81 c3 3f 03 84 6e 0a 01 b8 3c 06 e7 c8 eb 81 a3 63 7a b8 14 4c 8d b2 8d a5 c4 fa 1f 1e ee 8b 7d 59 e6 f4 65 9e de c7 b0 13 a0 de 13 5f 02 d3 3a d5 95 85 3e 8e a1 d6 56 71 36 c3 cf 8b 06 4f b5 c5 2d f1 0b 4a c6 d7 3c 68 35 36 d9 2d 0f 9b d9 36 40 7b 20 ad 8f 18 64 a9 00 4d 25 53 8c 3a f2 bf a1 2b 25 ce 86 56 a7 d0 48 b2 4f 32 eb 18 7d b9 82 3c 80 d2 41 3c 6c e4 47 4b 07 15 a9 c9 1d d4 40 92 3d 94 ee 4d 3c b8 b6 35 1d 2a 36 97 39 a7 f2 3d 4f 43 2b 49 a7 12 89 c2 69 44 e6 0a b3 23 be 64 de 1f 4b 60 Data Ascii: `,my].{(l/~/T6K!cttg#uJOG$eA<p?n<czL}Ye_:>Vq6O-J<h56-6@{ dM%S:+%VHO2}<A<lGK@=M<569=OC+IiD#dK`
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: a2 a1 51 6e 3a d5 55 2c a1 fa b8 57 b9 af 4c 4e 44 90 29 22 3a 67 70 de c0 84 ef 87 08 32 dd 0e 31 ce 3a 4c 4b 38 ac 8e fb ca a6 86 ae 65 0e e6 28 a4 2b 06 32 5a cc 93 e7 76 5e 64 f5 55 19 31 d8 d4 49 a8 cd 5a c7 8b 59 68 e1 67 a5 4b b1 4c 7e 8c 24 9c 33 82 b6 4c 0a 1a 35 33 68 2c 69 69 a5 42 be 6f 37 55 e9 6f a9 a6 a4 d6 62 a5 ce b5 a1 b9 0f 3a d8 e2 f5 1a ad 16 4b 4f 80 c6 ac 74 38 db 2c 9e e3 c5 f5 78 30 b2 f6 6f 03 f6 91 e7 b8 35 39 7a 7e 8d e7 16 94 ae 7d 1b 03 ba 8d 59 51 37 5b 42 56 43 57 96 f4 49 db 49 47 75 97 d7 cc 87 0c 15 d2 18 75 f0 23 b7 5b bb f2 1f 53 ac ae 09 08 fa 72 99 1d cc c5 d7 0e d7 1f 4a be e0 75 7a 70 da 52 0a 6c 76 6b b4 38 1d 9d f2 c8 8c e7 5e 1e 39 9d db 79 e6 3a da 7a 77 95 7b 75 3a 8a bd fe 35 4c 29 95 d6 2d 54 63 75 d9 6e ac Data Ascii: Qn:U,WLND)":gp21:LK8e(+2Zv^dU1IZYhgKL~$3L53h,iiBo7Uob:KOt8,x0o59z~}YQ7[BVCWIIGuu#[SrJuzpRlvk8^9y:zw{u:5L)-Tcun
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: 2f 2d a7 f4 7c 67 56 75 92 0a 5d b3 91 75 95 bd ce aa e1 a4 8b 55 ac 49 3c 1b 03 d0 b2 1a 25 56 b1 a2 21 54 22 b7 06 1e 8c 41 d8 2a 8a 48 7a 88 a6 99 b4 b4 9c 75 dd 5b f9 8f b5 74 79 3e 0e cd 9e 43 ab 84 41 20 79 ed ad e4 83 95 2c 68 de 7a 6f 9e fa 0b 62 04 80 a7 c3 e6 84 0c e6 b6 4a 1b 91 bc cc 73 f4 43 ad 97 06 74 86 8f 35 42 db d7 95 3d b4 59 c7 db 03 48 13 ae 38 25 e6 84 99 1a 59 bd 0f 23 b9 fa 9d 8e d8 53 5e 11 af 01 69 be 0d 24 82 82 52 d6 5d 4e c1 81 1a d1 3b 2c be 8b 17 ae 47 9d 99 bd c7 69 cf 8f 2f 97 a0 23 91 1e 91 a9 2c a8 35 c1 2c 41 03 6e 7d 3e 57 77 49 2e a7 5b e7 ef a5 e8 8e cb 5f e7 a1 80 36 c9 ce 63 c2 61 c0 49 d4 70 cf 09 e6 e4 1f 10 f7 05 40 bd 2e ca 8a 17 5f 31 dd 2a de 18 59 c4 b1 ae 52 8a ae 04 e7 35 35 51 f2 08 8c 40 77 22 8b a4 02 Data Ascii: /-\|gVu]uUI<%V!T"AHzu[ty>CA y,hzobJsCt5B=YH8%Y#S^i$R]N;,Gi/#,5,An}>WwI.[_6caIp@._1YR55Q@w"
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: 8a a9 22 1e 3b 90 0c cc 08 ba 6c f7 aa e7 a6 3e bb d2 6a b1 e8 f3 fa eb ac fe 99 01 a7 7e 98 8c ed d3 07 a7 b2 44 75 51 09 15 d4 8d c3 50 33 a2 f3 45 6b 63 a0 31 81 27 9b a2 38 a5 82 2e 95 f6 30 ba 32 cb c2 b3 87 eb f0 46 42 b0 2c 2a 26 0b ce e9 09 46 fc 34 51 c8 b2 d2 61 4b b1 8d d1 9d fc b4 4e 7a 6b 95 cc 62 9b 9a 17 23 1a 90 f8 ef 4c ab 0f a4 9b d0 f8 26 74 3e 09 ab 0b 40 98 b4 32 2b 99 98 c9 eb b3 2d 8a 45 33 dc 5d 4b ce bc 35 43 ce 91 3b 71 47 28 ab e2 4c 3d 04 9f 5c c0 b1 9a 0d 2e 7b 44 85 3a 11 9a 28 54 45 51 28 11 ad 60 06 b2 4d 12 1c ec f2 07 a2 d8 e7 ae bb 22 9b 5d 07 b2 b0 db 57 82 49 2a 03 c9 0c 32 63 84 62 9f 80 34 ba 0f 3a a5 48 8e ed a5 1e 8a c3 48 8d 2a 90 b9 ac f3 fa 9e 2e 68 72 ba c9 cd 75 9d 87 54 0d ee 5a 1d 6f 51 6c 8b 58 f2 a3 41 00 Data Ascii: ";l>j~DuQP3Ekc1'8.02FB,&F4QaKNzkb#L&t>@2+-E3]K5C;qG(L=\.{D:(TEQ(`M"]WI2cb4:HH*.hruTZoQlXA
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: da e5 69 8b a2 f4 6a f1 78 85 8a b2 5e 9e 1c 88 6b 37 8a 8e c8 2f ac ab 77 b4 a9 aa 6c 29 a6 ed 2a cd 20 88 1d 61 d5 10 3a 7f 04 16 58 22 2a 22 68 38 33 17 52 64 74 c4 68 66 8d e8 e2 20 94 63 9d 6d 99 6e 57 79 33 26 cc aa aa 26 c7 25 95 31 c1 70 49 24 72 e9 32 09 1d fa 29 0a 22 54 9d 47 65 95 67 0d 63 5f c1 b5 8c 80 15 85 50 28 15 06 80 72 45 30 25 66 87 92 cf 26 85 11 9e 4d 02 0e 81 34 2d 0a 8d 34 09 61 0e b9 22 2d b7 34 b9 a9 75 95 fc ea c9 74 ad 65 d0 ca 4e c8 62 3b 14 e3 79 32 4c 0c 9b 6d c7 06 44 92 a6 42 90 d5 84 ba c9 83 38 cc 04 03 39 73 0a 40 86 60 f2 f4 97 65 8b b4 ac 60 c9 86 03 50 98 65 d3 ce 9b 79 43 a0 1c 70 ca 18 e2 8e 40 dc 85 8e 40 6a bd e0 3e 3b 43 52 a6 91 d3 84 2e 9e 8c 87 20 c7 97 18 56 b9 4c ef 05 0c 1d 8d c9 48 e4 64 af 41 c4 6f 9b Data Ascii: ijx^k7/wl)* a:X"*"h83Rdthf cmnWy3&&%1pI$r2)"TGegc_P(rE0%f&M4-4a"-4uteNb;y2LmDB89s@`e`PeyCp@@j>;CR. VLHdAo
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: 73 44 d1 11 a0 21 1c 68 8b 1e 6c 74 de 76 11 87 90 29 29 91 58 a1 cb ce a4 f3 80 e2 3c 98 a6 09 bc 8e c4 72 38 61 cc 50 b2 ae ba 5c 5d 34 8c 23 06 76 1f 22 0b 5f 2a 8e ed e3 5e 33 0a a5 bd dc 1c d5 68 06 0c d8 42 b4 54 74 e8 d7 39 27 a4 e4 0b ef 90 bc 16 35 24 b1 4a 13 98 23 b2 a0 17 f4 88 8a 12 46 4d a0 78 d2 eb 8a db 26 f4 33 32 37 8a ad 13 93 18 72 8d 42 3c 5b 15 6e 3f 49 e0 ac 05 ca 35 50 eb 77 85 6b ac 11 3c ed 76 c9 0b c1 07 d1 a3 3a f3 e4 b9 ac 56 dd 23 b7 cd 61 9f a5 ce 46 b2 27 d3 c8 4a cd c2 75 73 3b 98 a4 bb 9b c8 7f 31 a3 9d 5e 7c e6 ca ca 5e 5f 47 45 15 16 92 0e 93 17 d1 bc a3 7b 9e 96 74 f6 d1 b9 fa 20 c4 d6 27 46 38 56 6d aa f6 8a 24 b7 85 d1 94 3b 6a ab d5 33 f1 5b 4c 87 16 b4 6a e4 ef c9 39 ca c6 b9 ef 68 0e 35 8a 34 83 9b 5f e5 74 50 c0 Data Ascii: sD!hltv))X<r8aP\]4#v"_*^3hBTt9'5$J#FMx&327rB<[n?I5Pwk<v:V#aF'Jus;1^\|^_GE{t 'F8Vm$;j3[Lj9h54_tP
2024-09-10 16:10:33 UTC	1371	IN	Data Raw: 5b b8 51 a0 24 04 45 5a 3a a0 e9 ef 6d 6a 4d bf 33 a9 e1 db 52 89 16 45 3a 7a 98 99 5f 41 93 23 6c 48 92 35 ae 48 3a e2 a6 ea 9d 2d 3d e0 f5 32 60 d6 ca b9 c9 d3 fa 3f 96 80 37 75 9a 8e 7b ea db 3a 68 29 95 8f cf a4 6d 46 51 3a d2 96 f5 cd aa 72 3e 65 56 2b 1e d4 44 97 91 ed dd 52 5b 64 35 e8 56 c7 57 81 06 bc 03 19 46 25 11 02 ce 10 8a 9d 18 b5 b0 62 e8 ed a1 6c 65 4c 33 15 66 a9 c3 1e 72 05 cc 2b d6 1b a4 25 40 1e 57 34 f9 d0 25 b5 6a 46 3f 21 1c d5 92 3e 2f 57 5f 3b e5 12 48 77 c5 0c 92 85 75 a2 11 b2 4d 6f 28 1e b1 6a f4 a9 71 80 b4 91 8f 10 73 10 4c f4 51 0d 38 7b 9e 83 8c 0f 8c 30 b4 40 47 83 70 70 ad cd e5 12 d1 79 e4 8e 57 09 11 c4 a5 9c aa db d0 7a d8 52 58 96 7c b8 ae 7b 2a 2c 65 54 d8 f1 ea 44 7a 71 6a 88 f7 03 50 a8 c1 21 78 18 66 39 1c d7 30 Data Ascii: [Q$EZ:mjM3RE:z_A#lH5H:-=2`?7u{:h)mFQ:r>eV+DR[d5VWF%bleL3fr+%@W4%jF?!>/W_;HwuMo(jqsLQ8{0@GppyWzRX\|{*,eTDzqjP!xf90

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49737	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:33 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-10 16:10:33 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=174863 Date: Tue, 10 Sep 2024 16:10:33 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-10 16:10:33 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49742	142.250.186.110	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:34 UTC	493	OUT	GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 Host: translate.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:34 UTC	565	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 10 Sep 2024 16:10:34 GMT Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-10 16:10:34 UTC	825	IN	Data Raw: 38 30 30 30 0d 0a 0a 20 20 20 20 2f 2f 20 67 6f 2f 6d 73 73 2d 73 65 74 75 70 23 37 2d 6c 6f 61 64 2d 74 68 65 2d 6a 73 2d 6f 72 2d 63 73 73 2d 66 72 6f 6d 2d 79 6f 75 72 2d 69 6e 69 74 69 61 6c 2d 70 61 67 65 0a 20 20 20 20 69 66 28 21 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 29 20 7b 0a 20 20 20 20 20 20 63 6f 6e 73 74 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 20 3d 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 7c 7c 20 66 75 6e 63 74 69 6f 6e 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 65 3b 0a 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 27 5d 20 3d 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 3b 0a 20 20 Data Ascii: 8000 // go/mss-setup#7-load-the-js-or-css-from-your-initial-page if(!window['_DumpException']) { const _DumpException = window['_DumpException'] \|\| function(e) { throw e; }; window['_DumpException'] = _DumpException;
2024-09-10 16:10:34 UTC	1390	IN	Data Raw: 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 62 21 3d 3d 76 6f 69 64 20 30 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 25 73 22 29 3b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 61 2e 6c 65 6e 67 74 68 2d 31 2c 65 3d 30 3b 65 3c 64 3b 65 2b 2b 29 63 2b 3d 61 5b 65 5d 2b 28 65 3c 62 2e 6c 65 6e 67 74 68 3f 62 5b 65 5d 3a 22 25 73 22 29 3b 5f 2e 61 61 2e 63 61 6c 6c 28 74 68 69 73 2c 63 2b 61 5b 64 5d 29 7d 3b 5f 2e 63 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 5f 2e 75 2e 73 65 74 54 69 6d 65 6f 75 74 28 66 75 Data Ascii: {var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));b!==void 0&&(this.cause=b)};ba=function(a,b){a=a.split("%s");for(var c="",d=a.length-1,e=0;e<d;e++)c+=a[e]+(e<b.length?b[e]:"%s");_.aa.call(this,c+a[d])};_.ca=function(a){_.u.setTimeout(fu
2024-09-10 16:10:34 UTC	1390	IN	Data Raw: 29 7d 3b 5f 2e 49 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 28 30 2c 5f 2e 46 61 29 28 61 2c 62 29 3b 76 61 72 20 63 3b 28 63 3d 62 3e 3d 30 29 26 26 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 70 6c 69 63 65 2e 63 61 6c 6c 28 61 2c 62 2c 31 29 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 4a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 6c 65 6e 67 74 68 3b 69 66 28 62 3e 30 29 7b 66 6f 72 28 76 61 72 20 63 3d 41 72 72 61 79 28 62 29 2c 64 3d 30 3b 64 3c 62 3b 64 2b 2b 29 63 5b 64 5d 3d 61 5b 64 5d 3b 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 5b 5d 7d 3b 0a 4b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 31 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 Data Ascii: )};_.Ia=function(a,b){b=(0,_.Fa)(a,b);var c;(c=b>=0)&&Array.prototype.splice.call(a,b,1);return c};_.Ja=function(a){var b=a.length;if(b>0){for(var c=Array(b),d=0;d<b;d++)c[d]=a[d];return c}return[]};Ka=function(a,b){for(var c=1;c<arguments.length;c++){va
2024-09-10 16:10:34 UTC	1390	IN	Data Raw: 22 6e 6f 6e 63 65 22 2c 62 29 7d 3b 5f 2e 57 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 5f 2e 75 2e 6e 61 76 69 67 61 74 6f 72 3b 72 65 74 75 72 6e 20 61 26 26 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 3f 61 3a 22 22 7d 3b 5f 2e 76 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 57 61 28 29 2e 69 6e 64 65 78 4f 66 28 61 29 21 3d 2d 31 7d 3b 5f 2e 5a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 58 61 3f 21 21 5f 2e 59 61 26 26 5f 2e 59 61 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 3b 5f 2e 24 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 5a 61 28 29 3f 21 31 3a 5f 2e 76 28 22 4f 70 65 72 61 22 29 7d 3b 0a 61 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e Data Ascii: "nonce",b)};_.Wa=function(){var a=_.u.navigator;return a&&(a=a.userAgent)?a:""};_.v=function(a){return _.Wa().indexOf(a)!=-1};_.Za=function(){return _.Xa?!!_.Ya&&_.Ya.brands.length>0:!1};_.$a=function(){return _.Za()?!1:_.v("Opera")};ab=function(){return
2024-09-10 16:10:34 UTC	1390	IN	Data Raw: 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 67 7d 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 7d 3b 76 61 72 20 63 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 64 3d 30 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 62 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 63 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 64 2b 2b 2c 66 29 7d 3b 72 65 74 75 72 6e 20 65 Data Ascii: cription",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.g};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e)throw new TypeError("b");return new b(c+(f\|\|"")+"_"+d++,f)};return e
2024-09-10 16:10:34 UTC	1390	IN	Data Raw: 3b 77 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 70 62 7d 29 3b 71 62 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 3b 0a 5f 2e 72 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 6e 65 77 20 63 3b 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 63 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 20 Data Ascii: ;w("Object.assign",function(a){return a\|\|pb});qb=typeof Object.create=="function"?Object.create:function(a){var b=function(){};b.prototype=a;return new b};_.rb=function(){function a(){function c(){}new c;Reflect.construct(c,[],function(){});return new c
2024-09-10 16:10:34 UTC	1390	IN	Data Raw: 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 29 3b 0a 77 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 63 28 67 29 7b 72 65 74 75 72 6e 20 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 3f 67 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 28 67 29 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 74 68 69 73 2e 67 3d 3d 6e 75 6c 6c 29 7b 74 68 69 73 2e 67 3d 5b 5d 3b 76 61 72 20 68 3d 74 68 69 73 3b 74 68 69 73 2e 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 2e 6f 28 29 7d 29 7d 74 68 69 73 2e 67 2e 70 75 73 68 28 67 29 7d 3b 76 61 Data Ascii: ){return!1}}:null});w("Promise",function(a){function b(){this.g=null}function c(g){return g instanceof e?g:new e(function(h){h(g)})}if(a)return a;b.prototype.h=function(g){if(this.g==null){this.g=[];var h=this;this.j(function(){h.o()})}this.g.push(g)};va
2024-09-10 16:10:34 UTC	1390	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 67 2e 44 28 29 29 7b 76 61 72 20 68 3d 5f 2e 6a 62 2e 63 6f 6e 73 6f 6c 65 3b 74 79 70 65 6f 66 20 68 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 68 2e 65 72 72 6f 72 28 67 2e 6a 29 7d 7d 2c 31 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 41 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 67 3d 5f 2e 6a 62 2e 43 75 73 74 6f 6d 45 76 65 6e 74 2c 0a 68 3d 5f 2e 6a 62 2e 45 76 65 6e 74 2c 6c 3d 5f 2e 6a 62 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 3b 69 66 28 74 79 70 65 6f 66 20 6c 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 21 30 3b 74 79 70 65 6f 66 20 67 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 67 3d 6e 65 77 20 67 28 22 75 6e 68 Data Ascii: (function(){if(g.D()){var h=_.jb.console;typeof h!=="undefined"&&h.error(g.j)}},1)};e.prototype.D=function(){if(this.A)return!1;var g=_.jb.CustomEvent,h=_.jb.Event,l=_.jb.dispatchEvent;if(typeof l==="undefined")return!0;typeof g==="function"?g=new g("unh
2024-09-10 16:10:34 UTC	1390	IN	Data Raw: 7d 3b 65 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 5f 2e 78 28 67 29 2c 6c 3d 68 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6c 2e 64 6f 6e 65 3f 63 28 5b 5d 29 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6d 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 70 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 42 29 7b 72 5b 74 5d 3d 42 3b 71 2d 2d 3b 71 3d 3d 30 26 26 6d 28 72 29 7d 7d 76 61 72 20 72 3d 5b 5d 2c 71 3d 30 3b 64 6f 20 72 2e 70 75 73 68 28 76 6f 69 64 20 30 29 2c 71 2b 2b 2c 63 28 6c 2e 76 61 6c 75 65 29 2e 4c 64 28 70 28 72 2e 6c 65 6e 67 74 68 2d 31 29 2c 6e 29 2c 6c 3d 68 2e 6e 65 78 74 28 29 3b 77 68 69 6c 65 28 21 6c 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 0a 76 61 72 20 78 62 3d 66 Data Ascii: };e.all=function(g){var h=_.x(g),l=h.next();return l.done?c([]):new e(function(m,n){function p(t){return function(B){r[t]=B;q--;q==0&&m(r)}}var r=[],q=0;do r.push(void 0),q++,c(l.value).Ld(p(r.length-1),n),l=h.next();while(!l.done)})};return e});var xb=f
2024-09-10 16:10:34 UTC	1390	IN	Data Raw: 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 20 61 28 5b 5b 6c 2c 32 5d 2c 5b 6d 2c 33 5d 5d 29 3b 69 66 28 6e 2e 67 65 74 28 6c 29 21 3d 32 7c 7c 6e 2e 67 65 74 28 6d 29 21 3d 33 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 28 6d 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6c 29 26 26 6e 2e 67 65 74 28 6d 29 3d 3d 34 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 66 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 65 28 22 66 72 65 65 7a 65 22 29 3b 65 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 65 28 22 73 65 61 6c 22 29 Data Ascii: t.seal({}),m=Object.seal({}),n=new a([[l,2],[m,3]]);if(n.get(l)!=2\|\|n.get(m)!=3)return!1;n.delete(l);n.set(m,4);return!n.has(l)&&n.get(m)==4}catch(p){return!1}}())return a;var f="$jscomp_hidden_"+Math.random();e("freeze");e("preventExtensions");e("seal")

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49743	149.56.240.127	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:35 UTC	882	OUT	GET /stats/0.php?4891773&@f16&@g1&@h1&@i1&@j1725984633543&@k0&@l1&@mHigh%20School%20Football%20Live%20-%20Greendale%20vs%20Milwaukee%20Lutheran&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-16114489&@b3:1725984634&@b4:js15_as.js&@b5:-240&@a-_0.2.1&@vhttp%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%20vs%20Milwaukee%20Lutheran&@w HTTP/1.1 Host: s4.histats.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:35 UTC	135	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:10:35 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 377 Connection: close
2024-09-10 16:10:35 UTC	377	IN	Data Raw: 5f 48 53 54 5f 63 6e 74 76 61 6c 3d 22 23 33 56 69 73 2e 20 74 6f 64 61 79 3d 38 22 3b 63 68 66 68 32 28 5f 48 53 54 5f 63 6e 74 76 61 6c 29 3b 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 62 2e 73 72 63 3d 22 2f 2f 65 2e 64 74 73 63 6f 75 74 2e 63 6f 6d 2f 65 2f 3f 76 3d 31 61 26 70 69 64 3d 35 32 30 30 26 73 69 74 65 3d 31 26 6c 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2b 22 26 6a 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 3b 0a 62 2e 61 73 79 6e 63 3d 22 61 73 79 6e 63 Data Ascii: _HST_cntval="#3Vis. today=8";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);b.async="async

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49747	142.250.181.228	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:35 UTC	704	OUT	GET /images/cleardot.gif HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:35 UTC	697	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/gif Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 43 Date: Tue, 10 Sep 2024 16:10:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-10 16:10:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49752	141.101.120.10	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:35 UTC	541	OUT	GET /e/?v=1a&pid=5200&site=1&l=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&j= HTTP/1.1 Host: e.dtscout.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:35 UTC	1162	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:10:35 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close X-S: mtl2 Set-Cookie: m=1; Domain=dtscout.com; Expires=Tue, 10-Sep-2024 17:33:55 GMT; Max-Age=5000; Path=/; SameSite=None; Secure Set-Cookie: st=1; Domain=dtscout.com; Expires=Tue, 10-Sep-2024 17:10:35 GMT; Max-Age=3600; Path=/; SameSite=None; Secure Set-Cookie: df=1725984635; Domain=dtscout.com; Expires=Thu, 19-Dec-2024 16:10:35 GMT; Max-Age=8640000; Path=/; SameSite=None; Secure Set-Cookie: l=10401725984635D685D944936F64E5C9; Domain=dtscout.com; Expires=Sun, 08-Dec-2024 16:10:35 GMT; Max-Age=7689600; Path=/; SameSite=None; Secure X-T: 0.281 Expires: Tue, 10 Sep 2024 16:10:34 GMT Cache-Control: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7uxkAtkSccVED1QbdLC5%2BFPjsezAEqEpD9U8TBmZvtILAsgBEM5%2BbUhO85ZncKFWuwRoJQGshAcpZ4mU4CYxt%2BFEprWjzJVphNAiHpSn6M1PFBK%2B%2Ft8SXNOgfbOzjgY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c10b06678c441cd-EWR
2024-09-10 16:10:35 UTC	207	IN	Data Raw: 31 66 63 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 76 61 72 20 64 63 20 3d 20 7b 7d 3b 0a 20 20 20 20 76 61 72 20 67 75 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 76 61 72 20 73 75 20 3d 20 22 31 30 34 30 31 37 32 35 39 38 34 36 33 35 44 36 38 35 44 39 34 34 39 33 36 46 36 34 45 35 43 39 22 3b 0a 20 20 20 20 76 61 72 20 67 6d 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 76 61 72 20 63 6e 20 3d 20 22 5f 5f 64 74 73 75 22 3b 0a 20 20 20 20 76 61 72 20 6c 67 20 3d 20 7b 63 76 3a 22 55 53 22 2c 63 73 3a 22 43 22 2c 72 76 3a 22 4e 59 22 2c 72 73 3a 22 43 22 7d 3b 0a 0a 20 20 20 20 53 74 72 69 6e 67 2e Data Ascii: 1fc8(function() { var dc = {}; var gu = false; var su = "10401725984635D685D944936F64E5C9"; var gm = false; var cn = "__dtsu"; var lg = {cv:"US",cs:"C",rv:"NY",rs:"C"}; String.
2024-09-10 16:10:36 UTC	1369	IN	Data Raw: 70 72 6f 74 6f 74 79 70 65 2e 64 74 73 5f 68 61 73 68 5f 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 61 73 68 3d 30 3b 69 66 28 74 68 69 73 2e 6c 65 6e 67 74 68 3d 3d 30 29 72 65 74 75 72 6e 20 68 61 73 68 3b 66 6f 72 28 69 3d 30 3b 69 3c 74 68 69 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 63 68 61 72 3d 74 68 69 73 2e 63 68 61 72 43 6f 64 65 41 74 28 69 29 3b 68 61 73 68 3d 28 28 68 61 73 68 3c 3c 35 29 2d 68 61 73 68 29 2b 63 68 61 72 3b 68 61 73 68 3d 68 61 73 68 26 68 61 73 68 7d 20 72 65 74 75 72 6e 20 68 61 73 68 3b 7d 3b 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 5f 64 74 73 69 28 29 20 7b 0a 20 20 20 20 20 20 20 20 61 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 2c 20 61 2e 68 72 65 Data Ascii: prototype.dts_hash_code=function(){var hash=0;if(this.length==0)return hash;for(i=0;i<this.length;i++){char=this.charCodeAt(i);hash=((hash<<5)-hash)+char;hash=hash&hash} return hash;}; function _dtsi() { a = document.createElement("a"), a.hre
2024-09-10 16:10:36 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 0a 20 20 20 20 20 20 20 20 74 72 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 69 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 66 72 61 6d 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 74 2e 64 74 73 63 6f 75 74 2e 63 6f 6d 2f 69 64 67 2f 3f 73 75 3d 22 2b 73 75 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 2e 77 69 64 74 68 20 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 2e 68 65 69 67 68 74 20 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 6e 6f 6e 65 27 3b 0a 20 20 20 Data Ascii: } } }); try { var i = document.createElement('iframe'); i.src = "https://t.dtscout.com/idg/?su="+su; i.width = 0; i.height = 0; i.style.display = 'none';
2024-09-10 16:10:36 UTC	1369	IN	Data Raw: 65 2e 74 61 72 67 65 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 2e 74 61 72 67 65 74 29 3b 7d 63 61 74 63 68 28 65 29 7b 7d 7d 7d 7d 29 28 29 3b 76 61 72 20 64 74 73 5f 70 69 5f 73 74 72 3d 22 22 3b 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6e 61 76 69 67 61 74 6f 72 2e 70 6c 75 67 69 6e 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 64 74 73 5f 70 69 5f 73 74 72 2b 3d 6e 61 76 69 67 61 74 6f 72 2e 70 6c 75 67 69 6e 73 5b 69 5d 2e 64 65 73 63 72 69 70 74 69 6f 6e 7d 64 74 73 5f 70 69 5f 73 74 72 3d 64 74 73 5f 70 69 5f 73 74 72 2e 64 74 73 5f 68 61 73 68 5f 63 6f 64 65 28 29 3b 76 61 72 20 64 74 73 5f 64 3d 6e 65 77 20 44 61 74 65 28 29 3b 76 61 72 20 64 74 73 5f 74 7a 5f 6f 66 66 73 65 74 3d 64 74 73 5f 64 2e 67 65 74 54 69 Data Ascii: e.target.parentNode.removeChild(e.target);}catch(e){}}}})();var dts_pi_str="";for(var i=0;i<navigator.plugins.length;i++){dts_pi_str+=navigator.plugins[i].description}dts_pi_str=dts_pi_str.dts_hash_code();var dts_d=new Date();var dts_tz_offset=dts_d.getTi
2024-09-10 16:10:36 UTC	1369	IN	Data Raw: 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 27 2e 27 29 3b 0a 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 73 70 6c 69 74 48 6f 73 74 6e 61 6d 65 2e 6c 65 6e 67 74 68 20 2d 20 32 3b 20 69 20 3e 3d 20 30 3b 20 69 2d 2d 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 68 20 3d 20 73 70 6c 69 74 48 6f 73 74 6e 61 6d 65 2e 73 6c 69 63 65 28 69 29 2e 6a 6f 69 6e 28 27 2e 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 5f 5f 73 63 69 28 6e 2c 76 2c 64 2c 63 68 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 69 6e 64 65 78 4f 66 28 6e 2b 27 3d 27 2b 76 29 20 21 3d 3d 20 2d 31 29 20 62 72 65 61 6b 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 Data Ascii: .hostname.split('.'); for (var i = splitHostname.length - 2; i >= 0; i--) { var ch = splitHostname.slice(i).join('.'); __sci(n,v,d,ch); if (document.cookie.indexOf(n+'='+v) !== -1) break; } } fu
2024-09-10 16:10:36 UTC	1369	IN	Data Raw: 22 29 3b 73 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 70 64 2e 73 68 61 72 65 74 68 69 73 2e 63 6f 6d 2f 70 64 2f 64 74 73 63 6f 75 74 22 3b 73 2e 69 64 3d 22 73 74 70 64 2d 64 74 73 63 6f 75 74 22 3b 73 2e 61 73 79 6e 63 3d 74 72 75 65 3b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 73 29 3b 7d 63 61 74 63 68 28 65 29 7b 7d 7d 29 28 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 73 2c 77 3d 77 69 6e 64 6f 77 2e 74 6f 70 3b 77 2e 54 79 6e 74 3d 77 2e 54 79 6e 74 7c 7c 5b 5d 3b 77 2e 54 79 6e 74 2e 70 75 73 68 28 22 77 75 21 22 29 3b 73 3d 77 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 Data Ascii: ");s.src="https://pd.sharethis.com/pd/dtscout";s.id="stpd-dtscout";s.async=true;document.getElementsByTagName("body")[0].appendChild(s);}catch(e){}})();(function(){try{var s,w=window.top;w.Tynt=w.Tynt\|\|[];w.Tynt.push("wu!");s=w.document.createElement("scr
2024-09-10 16:10:36 UTC	1092	IN	Data Raw: 3d 21 30 2c 6e 2e 73 72 63 3d 69 2b 22 3f 22 2b 65 2c 6e 2e 69 64 3d 22 64 74 73 70 76 5f 22 2b 74 2e 63 62 69 64 2c 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 28 75 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 62 65 66 6f 72 65 75 6e 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 5f 64 74 73 70 76 2e 75 28 29 7d 29 2c 74 2e 63 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 68 28 74 29 2c 21 31 21 3d 3d 65 29 74 72 79 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 64 74 73 70 76 5f 22 2b 65 29 3b 6e 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6e 29 7d 63 61 74 63 68 28 74 Data Ascii: =!0,n.src=i+"?"+e,n.id="dtspv_"+t.cbid,o.appendChild(n)}catch(t){}}(u),window.addEventListener("beforeunload",function(){window._dtspv.u()}),t.c=function(t,e){if(h(t),!1!==e)try{var n=document.getElementById("dtspv_"+e);n.parentNode.removeChild(n)}catch(t
2024-09-10 16:10:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49754	54.39.128.162	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:35 UTC	692	OUT	GET /stats/0.php?4891773&@f16&@g1&@h1&@i1&@j1725984633543&@k0&@l1&@mHigh%20School%20Football%20Live%20-%20Greendale%20vs%20Milwaukee%20Lutheran&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-16114489&@b3:1725984634&@b4:js15_as.js&@b5:-240&@a-_0.2.1&@vhttp%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%20vs%20Milwaukee%20Lutheran&@w HTTP/1.1 Host: s4.histats.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:35 UTC	135	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:10:17 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 377 Connection: close
2024-09-10 16:10:35 UTC	377	IN	Data Raw: 5f 48 53 54 5f 63 6e 74 76 61 6c 3d 22 23 33 56 69 73 2e 20 74 6f 64 61 79 3d 38 22 3b 63 68 66 68 32 28 5f 48 53 54 5f 63 6e 74 76 61 6c 29 3b 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 62 2e 73 72 63 3d 22 2f 2f 65 2e 64 74 73 63 6f 75 74 2e 63 6f 6d 2f 65 2f 3f 76 3d 31 61 26 70 69 64 3d 35 32 30 30 26 73 69 74 65 3d 31 26 6c 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2b 22 26 6a 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 3b 0a 62 2e 61 73 79 6e 63 3d 22 61 73 79 6e 63 Data Ascii: _HST_cntval="#3Vis. today=8";chfh2(_HST_cntval);;!function(){try{var b=document.createElement("script");b.src="//e.dtscout.com/e/?v=1a&pid=5200&site=1&l="+encodeURIComponent(window.location.href)+"&j="+encodeURIComponent(document.referrer);b.async="async

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49755	142.250.185.68	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:36 UTC	454	OUT	GET /images/cleardot.gif HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:36 UTC	697	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/gif Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 43 Date: Tue, 10 Sep 2024 16:10:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-10 16:10:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49761	141.101.120.10	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:36 UTC	716	OUT	GET /pv/?_a=v&_h=football-booster.freevisit1.com&_ss=1mx4vkpben&_pv=1&_ls=0&_u1=1&_u3=1&_cc=us&_pl=d&_cbid=6g49&_cb=_dtspv.c HTTP/1.1 Host: t.dtscout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: m=1; st=1; df=1725984635; l=10401725984635D685D944936F64E5C9
2024-09-10 16:10:36 UTC	623	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:10:36 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close X-T: 0.143 X-C: 0 Expires: Tue, 10 Sep 2024 16:10:35 GMT Cache-Control: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4Q0tPWixPDR6Fsa2WaW8b8Ggb6O3Vyo3fDc6TeMVNnmEhUxcItvO6LPxG8RWDCjClHi9ujUHl%2BxJDrsIcJG0%2FWBqcao0DiVtBgI5uMDfHO%2BNFo5CulMBGyG6Wrc8XGI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c10b06b2aec18f2-EWR
2024-09-10 16:10:36 UTC	57	IN	Data Raw: 33 33 0d 0a 74 72 79 7b 5f 64 74 73 70 76 2e 63 28 7b 22 62 22 3a 22 63 68 72 6f 6d 65 40 31 31 37 22 7d 2c 27 36 67 34 39 27 29 3b 7d 63 61 74 63 68 28 65 29 7b 7d 0d 0a Data Ascii: 33try{_dtspv.c({"b":"chrome@117"},'6g49');}catch(e){}
2024-09-10 16:10:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49764	141.101.120.11	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:36 UTC	800	OUT	GET /idg/?su=10401725984635D685D944936F64E5C9 HTTP/1.1 Host: t.dtscout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: m=1; st=1; df=1725984635; l=10401725984635D685D944936F64E5C9
2024-09-10 16:10:36 UTC	605	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:10:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Expires: Tue, 10 Sep 2024 16:10:35 GMT Cache-Control: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MiP%2BAuFHGsPuvpnrhYy3aksHKVCXrprxqMuBtKmnyinYjuJUK4HWvtWstvifuIMh15kcE0iHd0uEzAHI%2B2P7bMfkl6XYoH2IN3lelang09zd%2B2Ht6SE7mFTEeL7DKJI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c10b06b891a4344-EWR
2024-09-10 16:10:36 UTC	764	IN	Data Raw: 35 34 36 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 0a 77 69 6e 64 6f 77 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 76 61 72 20 75 69 64 5f 67 20 20 3d 20 27 31 30 34 30 31 37 32 35 39 38 34 36 33 35 44 36 38 35 44 39 34 34 39 33 36 46 36 34 45 35 43 39 27 3b 20 0a 20 20 20 20 76 61 72 20 75 69 64 5f 73 20 20 3d 20 27 31 30 34 30 31 37 32 35 39 38 34 36 33 36 38 42 39 31 33 34 41 37 32 37 30 43 42 35 35 46 41 35 27 3b 20 0a 20 20 20 20 76 61 72 20 75 69 64 5f 73 75 20 3d 20 27 31 30 34 30 31 37 32 35 39 38 34 36 33 35 44 36 38 35 44 39 34 34 39 33 36 46 36 34 45 35 43 39 27 3b 0a 0a 20 20 20 20 76 61 72 20 64 65 62 75 67 20 3d 20 7b 7d 3b 0a 20 20 20 20 76 Data Ascii: 546<html><head></head><body><script>window.onload = function() { var uid_g = '10401725984635D685D944936F64E5C9'; var uid_s = '104017259846368B9134A7270CB55FA5'; var uid_su = '10401725984635D685D944936F64E5C9'; var debug = {}; v
2024-09-10 16:10:36 UTC	593	IN	Data Raw: 72 20 75 69 64 20 3d 20 66 61 6c 73 65 0a 20 20 20 20 20 20 20 20 69 66 28 6d 65 74 68 6f 64 20 3d 3d 20 27 67 6f 74 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 69 64 20 3d 20 70 61 73 73 5f 75 69 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 62 75 67 2e 75 69 64 5f 73 72 63 20 3d 20 27 67 6f 74 27 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 69 66 28 6c 73 5f 75 69 64 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 69 64 20 3d 20 6c 73 5f 75 69 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 62 75 67 2e 75 69 64 5f 73 72 63 20 3d 20 27 6c 73 27 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 69 64 20 3d 20 70 61 73 73 5f 75 69 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 65 62 Data Ascii: r uid = false if(method == 'got') { uid = pass_uid; debug.uid_src = 'got'; } else if(ls_uid) { uid = ls_uid; debug.uid_src = 'ls'; } else { uid = pass_uid; deb
2024-09-10 16:10:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49767	141.101.120.10	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:36 UTC	551	OUT	GET /e/?v=1a&pid=5200&site=1&l=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&j= HTTP/1.1 Host: e.dtscout.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: m=1; st=1; df=1725984635; l=10401725984635D685D944936F64E5C9
2024-09-10 16:10:36 UTC	1022	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:10:36 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close X-S: mtl2 Set-Cookie: m=2; Domain=dtscout.com; Expires=Tue, 10-Sep-2024 17:33:56 GMT; Max-Age=5000; Path=/; SameSite=None; Secure Set-Cookie: st=2; Domain=dtscout.com; Expires=Tue, 10-Sep-2024 17:10:36 GMT; Max-Age=3600; Path=/; SameSite=None; Secure Set-Cookie: l=10401725984635D685D944936F64E5C9; Domain=dtscout.com; Expires=Sat, 07-Dec-2024 16:10:36 GMT; Max-Age=7603200; Path=/; SameSite=None; Secure X-T: 0.282 Expires: Tue, 10 Sep 2024 16:10:35 GMT Cache-Control: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S6zlzKN9Br5VtxHnBsiG8BzUup434UV%2BmZr9mBnlaHwrlWWlYzieuYsQ8TdrwDpNYDfMWJQtCJtnp7mPFR%2FAByWP3J2F73egZdmniWKfHvwMjARmUwO2ZYIjM9NdXj4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c10b06bee13430d-EWR
2024-09-10 16:10:36 UTC	347	IN	Data Raw: 31 65 63 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 76 61 72 20 64 63 20 3d 20 7b 7d 3b 0a 20 20 20 20 76 61 72 20 67 75 20 3d 20 22 31 30 34 30 31 37 32 35 39 38 34 36 33 35 44 36 38 35 44 39 34 34 39 33 36 46 36 34 45 35 43 39 22 3b 0a 20 20 20 20 76 61 72 20 73 75 20 3d 20 22 31 30 34 30 31 37 32 35 39 38 34 36 33 36 35 45 33 43 44 43 33 35 36 31 43 41 36 37 33 34 44 34 22 3b 0a 20 20 20 20 76 61 72 20 67 6d 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 76 61 72 20 63 6e 20 3d 20 22 5f 5f 64 74 73 75 22 3b 0a 20 20 20 20 76 61 72 20 6c 67 20 3d 20 7b 63 76 3a 22 55 53 22 2c 63 73 3a 22 43 22 2c 72 76 3a 22 4e 59 22 2c 72 73 3a 22 43 22 7d 3b 0a 0a 20 20 20 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 64 74 73 5f 68 61 73 68 5f Data Ascii: 1ec8(function() { var dc = {}; var gu = "10401725984635D685D944936F64E5C9"; var su = "104017259846365E3CDC3561CA6734D4"; var gm = false; var cn = "__dtsu"; var lg = {cv:"US",cs:"C",rv:"NY",rs:"C"}; String.prototype.dts_hash_
2024-09-10 16:10:36 UTC	1369	IN	Data Raw: 73 2e 63 68 61 72 43 6f 64 65 41 74 28 69 29 3b 68 61 73 68 3d 28 28 68 61 73 68 3c 3c 35 29 2d 68 61 73 68 29 2b 63 68 61 72 3b 68 61 73 68 3d 68 61 73 68 26 68 61 73 68 7d 20 72 65 74 75 72 6e 20 68 61 73 68 3b 7d 3b 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 5f 64 74 73 69 28 29 20 7b 0a 20 20 20 20 20 20 20 20 61 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 2c 20 61 2e 68 72 65 66 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 20 5f 64 74 73 2e 68 6f 73 74 20 3d 20 61 2e 68 6f 73 74 6e 61 6d 65 2c 20 22 75 6e 64 65 66 69 6e 65 64 22 20 21 3d 20 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 20 26 26 20 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 2e Data Ascii: s.charCodeAt(i);hash=((hash<<5)-hash)+char;hash=hash&hash} return hash;}; function _dtsi() { a = document.createElement("a"), a.href = window.location.href, _dts.host = a.hostname, "undefined" != typeof document.referrer && document.referrer.
2024-09-10 16:10:36 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 69 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 2f 2f 74 2e 64 74 73 63 6f 75 74 2e 63 6f 6d 2f 69 64 67 2f 3f 73 75 3d 22 2b 73 75 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 2e 77 69 64 74 68 20 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 2e 68 65 69 67 68 74 20 3d 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 6e 6f 6e 65 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 29 3b 0a 20 20 20 20 20 20 20 20 7d 20 63 61 74 63 68 28 65 29 20 7b 20 7d 0a 0a 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 21 Data Ascii: i.src = "https://t.dtscout.com/idg/?su="+su; i.width = 0; i.height = 0; i.style.display = 'none'; document.body.appendChild(i); } catch(e) { } setTimeout(function() { if(!
2024-09-10 16:10:36 UTC	1369	IN	Data Raw: 74 73 5f 73 2e 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 74 2e 64 74 73 63 64 6e 2e 63 6f 6d 2f 77 69 64 67 65 74 2f 3f 64 3d 22 2b 75 69 64 2b 22 26 6e 69 64 3d 33 30 30 26 70 3d 22 2b 64 74 73 5f 70 69 5f 73 74 72 2b 22 26 74 3d 22 2b 64 74 73 5f 74 7a 5f 6f 66 66 73 65 74 2b 22 26 73 3d 22 2b 64 74 73 5f 72 65 73 2b 22 26 75 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 2b 22 26 72 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 3b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 74 73 5f 73 29 3b 20 20 20 20 7d Data Ascii: ts_s.src="https://t.dtscdn.com/widget/?d="+uid+"&nid=300&p="+dts_pi_str+"&t="+dts_tz_offset+"&s="+dts_res+"&u="+encodeURIComponent(location.href)+"&r="+encodeURIComponent(document.referrer);document.getElementsByTagName("body")[0].appendChild(dts_s); }
2024-09-10 16:10:36 UTC	1369	IN	Data Raw: 22 2b 76 2b 22 3b 20 65 78 70 69 72 65 73 3d 22 2b 64 61 74 65 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 2b 22 3b 20 70 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 22 2b 63 68 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6c 69 6a 69 74 44 61 74 61 20 3d 20 7b 20 63 64 6d 6e 3a 22 70 78 64 72 6f 70 2e 6c 69 6a 69 74 2e 63 6f 6d 22 2c 6c 6d 3a 22 64 22 2c 74 74 3a 22 74 2e 64 68 6a 22 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 61 29 20 7b 61 2e 63 6c 73 20 3d 20 22 73 79 6e 63 22 3b 61 2e 64 6d 6e 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 3b 61 2e 47 44 50 52 5f 76 32 20 3d 20 22 22 3b 61 2e 75 73 5f 70 72 69 76 61 63 79 20 3d 20 22 22 3b 61 2e 70 75 62 69 64 20 3d 20 22 64 74 5f 73 63 Data Ascii: "+v+"; expires="+date.toUTCString()+"; path=/; domain="+ch; } (function(){var lijitData = { cdmn:"pxdrop.lijit.com",lm:"d",tt:"t.dhj"};!function(a) {a.cls = "sync";a.dmn = window.location.hostname;a.GDPR_v2 = "";a.us_privacy = "";a.pubid = "dt_sc
2024-09-10 16:10:36 UTC	1369	IN	Data Raw: 21 74 2e 65 78 65 63 29 7b 74 2e 65 78 65 63 3d 21 30 3b 76 61 72 20 72 3d 21 21 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 2c 63 3d 6c 28 29 2c 61 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 72 65 70 6c 61 63 65 28 22 77 77 77 2e 22 2c 22 22 29 2c 65 3d 22 5f 64 74 73 70 76 22 2c 69 3d 22 68 74 74 70 73 3a 2f 2f 74 2e 64 74 73 63 6f 75 74 2e 63 6f 6d 2f 70 76 2f 22 2c 6f 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6f 7c 7c 76 6f 69 64 20 30 21 3d 3d 28 6f 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 29 29 7b 76 Data Ascii: !t.exec){t.exec=!0;var r=!!navigator.sendBeacon,c=l(),a=window.location.hostname.replace("www.",""),e="_dtspv",i="https://t.dtscout.com/pv/",o=document.getElementsByTagName("head")[0];if(void 0!==o\|\|void 0!==(o=document.getElementsByTagName("body")[0])){v
2024-09-10 16:10:36 UTC	696	IN	Data Raw: 72 79 7b 69 66 28 72 29 7b 65 2e 73 72 63 3d 22 62 22 3b 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 69 2c 67 28 65 2c 22 66 6f 72 6d 64 61 74 61 22 29 29 7d 65 6c 73 65 7b 65 2e 73 72 63 3d 22 69 22 2c 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6d 67 22 29 2e 73 72 63 3d 69 2b 22 3f 22 2b 67 28 65 2c 22 73 74 72 69 6e 67 22 29 7d 7d 63 61 74 63 68 28 74 29 7b 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 29 7b 72 65 74 75 72 6e 28 31 65 33 32 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2e 73 75 62 73 74 72 28 30 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2f 31 65 33 7d 66 75 6e Data Ascii: ry{if(r){e.src="b";navigator.sendBeacon(i,g(e,"formdata"))}else{e.src="i",document.createElement("img").src=i+"?"+g(e,"string")}}catch(t){}}}}function p(t){return(1e32*Math.random()).toString(36).substr(0,t)}function l(){return(new Date).getTime()/1e3}fun
2024-09-10 16:10:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49765	54.93.159.243	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:37 UTC	540	OUT	GET /pd/dtscout HTTP/1.1 Host: pd.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:37 UTC	485	IN	HTTP/1.1 200 OK Content-Type: application/javascript Date: Tue, 10 Sep 2024 16:10:37 GMT Set-Cookie: __stid=ZHkABGbgb30AAAAIC72MAw==; Path=/; Domain=sharethis.com; Expires=Wed, 10 Sep 2025 16:10:37 GMT; Secure; SameSite=None Set-Cookie: __stidv=2; Path=/; Domain=sharethis.com; Expires=Wed, 10 Sep 2025 16:10:37 GMT; Secure; SameSite=None Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 2444 Connection: Close
2024-09-10 16:10:37 UTC	2444	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 74 72 79 20 7b 0a 0a 20 20 20 20 2f 2f 20 73 65 74 20 75 70 20 6f 75 72 20 70 69 78 65 6c 0a 20 20 20 20 76 61 72 20 66 63 6d 70 20 3d 20 74 79 70 65 6f 66 20 5f 5f 63 6d 70 20 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 3b 0a 20 20 20 20 76 61 72 20 66 63 6d 70 76 32 20 3d 20 74 79 70 65 6f 66 20 5f 5f 74 63 66 61 70 69 20 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 3b 0a 20 20 20 20 76 61 72 20 72 6e 64 20 3d 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 0a 20 20 20 20 76 61 72 20 69 6d 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 0a 20 20 20 20 76 61 72 20 65 78 70 74 69 64 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 27 5a 48 6b 41 42 Data Ascii: (function () { try { // set up our pixel var fcmp = typeof __cmp == 'function'; var fcmpv2 = typeof __tcfapi == 'function'; var rnd = Math.random(); var img = document.createElement('img'); var exptid = encodeURIComponent('ZHkAB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49769	141.101.120.11	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:37 UTC	526	OUT	GET /pv/?_a=v&_h=football-booster.freevisit1.com&_ss=1mx4vkpben&_pv=1&_ls=0&_u1=1&_u3=1&_cc=us&_pl=d&_cbid=6g49&_cb=_dtspv.c HTTP/1.1 Host: t.dtscout.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: m=1; st=1; df=1725984635; l=10401725984635D685D944936F64E5C9
2024-09-10 16:10:37 UTC	623	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:10:37 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close X-T: 0.158 X-C: 0 Expires: Tue, 10 Sep 2024 16:10:36 GMT Cache-Control: no-cache CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=v3bvYRGxYYhaJSEvoCd7papqpHEel%2FWu32q5j4uiI2L63qjWi3kxHydRGRF8CGPCqwr2YDfFmiD%2FrByrWFB0Ob3KWRedYgP1U1MoAkWap0oop5enl1PFyeOMPx%2Bgr4o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c10b06f5c348c39-EWR
2024-09-10 16:10:37 UTC	57	IN	Data Raw: 33 33 0d 0a 74 72 79 7b 5f 64 74 73 70 76 2e 63 28 7b 22 62 22 3a 22 63 68 72 6f 6d 65 40 31 31 37 22 7d 2c 27 36 67 34 39 27 29 3b 7d 63 61 74 63 68 28 65 29 7b 7d 0d 0a Data Ascii: 33try{_dtspv.c({"b":"chrome@117"},'6g49');}catch(e){}
2024-09-10 16:10:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49770	67.202.105.31	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:37 UTC	886	OUT	GET /b/p?id=wu!&lm=0&ts=1725984636046&dn=AFWU&iso=0&pu=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&t=High%20School%20Football%20Live%20-%20Greendale%20vs%20Milwaukee%20Lutheran HTTP/1.1 Host: ic.tynt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:37 UTC	750	IN	HTTP/1.1 200 OK server: nginx/1.16.1 date: Tue, 10 Sep 2024 16:10:37 GMT content-type: image/gif content-length: 35 last-modified: Fri, 16 Apr 2010 15:38:20 GMT etag: "4bc8846c-23" cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false" accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile expires: "Sat, 26 Jul 1997 05:00:00 GMT" set-cookie: uid=CoIKSmbgb300kL/GBA4rAg==; expires=Wed, 10-Sep-25 16:10:37 GMT; domain=tynt.com; path=/; Secure; SameSite=None p3p: policyref="/w3c/p3p.xml", CP="CUR ADM OUR NOR STA NID" accept-ranges: bytes p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close
2024-09-10 16:10:37 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49771	67.202.105.32	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:37 UTC	731	OUT	GET /deb/v2?id=wu!&dn=AFWU&cc=1&r=&pu=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran HTTP/1.1 Host: de.tynt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:38 UTC	834	IN	HTTP/1.1 200 cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile set-cookie: uid=NEZ+Lmbgb333KZLeVeB0Lg==;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=31536000;Secure set-cookie: pids=%5B%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1725984637878%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A2%2C%22ts%22%3A1725984637878%7D%5D;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=7776000;Secure content-type: application/javascript content-length: 705 date: Tue, 10 Sep 2024 16:10:37 GMT p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close
2024-09-10 16:10:38 UTC	705	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 64 3d 64 6f 63 75 6d 65 6e 74 2c 70 3d 22 75 6e 73 61 66 65 2d 75 72 6c 22 2c 65 2c 73 2c 74 2c 75 3d 5b 22 68 74 74 70 73 3a 2f 2f 69 2e 73 69 6d 70 6c 69 2e 66 69 2f 64 70 78 3f 63 69 64 3d 31 31 34 31 31 26 75 73 5f 70 72 69 76 61 63 79 3d 26 33 33 72 61 6e 64 6f 6d 3d 31 37 32 35 39 38 34 36 33 37 38 37 38 2e 31 26 72 65 66 3d 22 2c 22 31 68 74 74 70 73 3a 2f 2f 63 64 6e 2d 74 63 2e 33 33 61 63 72 6f 73 73 2e 63 6f 6d 2f 6c 6f 74 61 6d 65 2d 73 79 6e 63 2e 68 74 6d 6c 22 2c 22 68 74 74 70 73 3a 2f 2f 69 2e 73 69 6d 70 6c 69 2e 66 69 2f 64 70 78 3f 63 69 64 3d 31 31 34 31 31 26 75 73 5f 70 72 69 76 61 63 79 3d 26 33 33 72 61 6e 64 6f 6d 3d 31 37 32 35 39 38 34 36 33 37 38 37 38 2e 33 26 72 65 66 3d Data Ascii: (function(){var i,d=document,p="unsafe-url",e,s,t,u=["https://i.simpli.fi/dpx?cid=11411&us_privacy=&33random=1725984637878.1&ref=","1https://cdn-tc.33across.com/lotame-sync.html","https://i.simpli.fi/dpx?cid=11411&us_privacy=&33random=1725984637878.3&ref=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49772	54.93.159.243	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:38 UTC	871	OUT	GET /pd/dtscout?_t_=px&url=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&event_source=dtscout&rnd=0.26782430717848005&exptid=ZHkABGbgb30AAAAIC72MAw%3D%3D&fcmp=false HTTP/1.1 Host: pd.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZHkABGbgb30AAAAIC72MAw==; __stidv=2
2024-09-10 16:10:38 UTC	218	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 10 Sep 2024 16:10:38 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-09-10 16:10:38 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49774	199.232.192.193	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:38 UTC	596	OUT	GET /jWsQC86.jpg HTTP/1.1 Host: i.imgur.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:38 UTC	760	IN	HTTP/1.1 200 OK Connection: close Content-Length: 190251 Content-Type: image/jpeg Last-Modified: Fri, 05 Aug 2022 08:04:28 GMT ETag: "0367bae9f7a15fa8fa2ba3c4a7787ad4" x-amz-storage-class: STANDARD_IA X-Amz-Cf-Pop: IAD89-P1 X-Amz-Cf-Id: vORoQodiEOAhNPUd1WCy-HvfTcTxiYOIXSw1fZi-oMJnle9uguzAkA== cache-control: public, max-age=31536000 Accept-Ranges: bytes Age: 409616 Date: Tue, 10 Sep 2024 16:10:38 GMT X-Served-By: cache-iad-kjyo7100160-IAD, cache-ewr-kewr1740034-EWR X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 174, 0 X-Timer: S1725984639.627315,VS0,VE11 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-09-10 16:10:38 UTC	1371	IN	Data Raw: ff d8 ff ee 00 0e 41 64 6f 62 65 00 64 00 00 00 00 01 ff db 00 43 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff db 00 43 01 07 07 07 0d 0c 0d 18 10 10 18 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 02 d0 05 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 00 08 09 ff c4 00 6a 10 00 01 03 03 02 03 04 05 05 06 0e 0a 0f 07 02 07 01 00 02 03 04 05 11 06 21 07 12 31 13 22 41 51 08 14 32 61 71 23 42 52 81 91 15 62 Data Ascii: AdobedCCj!1"AQ2aq#BRb
2024-09-10 16:10:38 UTC	1371	IN	Data Raw: d2 9c 8e 98 d1 ee 98 d7 b6 fa fa 88 a8 db 30 ed 79 c3 4b 73 e4 56 95 ab 9e 6f b9 5c 38 8f 2b 59 a6 2a bb dd 58 40 fb 11 92 66 21 bf 12 9d 56 87 90 ea 5a e8 a6 7b f9 b2 39 89 fc 2b 96 93 b9 7d 66 5c 35 a6 3d a3 2b ae af 2d 2c 63 b7 2b d2 c7 57 c7 72 f2 ee c6 54 ef 70 77 31 5a 44 38 a4 fd b5 47 03 7c 2d 08 ea 9e b8 b0 75 40 29 35 fe 58 fd 97 6c 8d 91 28 2f 33 4e fe f3 bc 7a ee 8d 84 bc 35 8d 68 05 ce 05 50 28 db bc 6d 94 34 1e be 4b bb 89 9e 6b 67 3e 6c 7b 84 b4 33 36 48 c3 86 fe 6b e9 a9 3b 8d bc ab 46 87 ce df 1e 8b 44 8a 76 46 80 09 c8 f7 26 62 a4 05 28 00 f0 41 ed c5 21 b0 7d 68 27 65 38 00 49 40 ca 03 83 9c 0e 56 59 7c 1c 49 fc 55 0d 31 75 5e 17 2b 1f 76 f5 93 8a 09 c1 db 3b 2f 0b 35 7b bb a9 09 56 53 32 52 0f 9a c7 4e 9a a4 21 b7 b4 30 77 76 53 35 6d Data Ascii: 0yKsVo\8+Y*X@f!VZ{9+}f\5=+-,c+WrTpw1ZD8G\|-u@)5Xl(/3Nz5hP(m4Kkg>l{36Hk;FDvF&b(A!}h'e8I@VY\|IU1u^+v;/5{VS2RN!0wvS5m
2024-09-10 16:10:38 UTC	1371	IN	Data Raw: de 62 1b 46 a9 b8 54 d7 d9 0d 0d b9 86 49 5e de 50 19 ef 55 0e 4b d3 48 4e 13 70 3e f3 43 7d 6d f2 ed 33 98 dc f3 36 0c ed bf 9a da ac 63 6b 5f 1e 75 04 36 bd 31 24 62 40 24 93 ba d1 9d d4 de bb ec ea e3 e7 f6 ed 12 f2 84 d7 a7 ce d2 09 c0 29 63 c3 10 f5 39 3e a9 39 2b a3 03 27 33 d7 54 43 c3 b4 ee 4a 35 fe 09 a0 7e db 1e 29 ec 0a 6a 1d e0 51 b0 5e 86 8a b2 e1 30 86 9d 85 ef 77 40 13 29 6a 5a 4b 82 37 7a e8 7b 5a a0 e8 c1 1b 00 96 c8 c7 59 f0 bb 50 58 9a 65 8c 19 29 c7 5f 30 88 93 51 61 12 09 7b f9 0e 07 c5 5d 67 be c2 db 6c a8 f9 36 b4 95 ef f0 79 7d b5 2f 3f 91 8b ee 93 1b 8d 97 af 12 e1 90 60 f5 55 b0 29 4e 0c 52 98 06 02 44 04 00 20 f4 02 12 0e c7 54 13 b0 9e 8f 60 c2 5a 31 5c 06 14 da 36 70 49 d2 96 02 32 bc de 4e 2d cb 4a c9 5a 3a ac 3b de bc 2e 4e Data Ascii: bFTI^PUKHNp>C}m36ck_u61$b@$)c9>9+'3TCJ5~)jQ^0w@)jZK7z{ZYPXe)_0Qa{]gl6y}/?`U)NRD T`Z1\6pI2N-JZ:;.N
2024-09-10 16:10:38 UTC	1371	IN	Data Raw: 0f aa 2c 74 f5 16 f2 f9 58 1c f6 64 82 7c 97 1c cb a7 1c ea 62 61 86 6a 4b 15 03 e6 73 a0 18 3f 39 a1 79 fc 98 88 97 e8 3e 87 79 b4 6a 4c 74 4d b5 d4 da b2 9d d1 83 8c e1 65 82 7e 67 47 ad e1 88 c4 d7 75 26 8f ab bc 5b e3 64 30 73 9c 8e f1 0b d0 98 89 7c 2d 72 da be 24 96 9e e0 9b d8 f6 cd 54 fe cf cd 8d 4a 61 33 96 3c fd d7 ea 2b 2d 82 c1 0f 3c bc 8d 6b 06 ef 79 03 f1 a7 11 10 c3 2d a2 7b a8 5a fb d2 0f 4d 58 a2 7d 3d bd cd a9 a9 6e 47 73 a6 70 ab bb 99 e5 dd 79 c4 8b e6 af af 74 b5 72 1e c4 1f 93 8c 1d 80 55 10 aa d5 5a 85 a7 c5 69 54 d8 e1 81 52 46 ca 64 02 7c 3c 50 13 5a 63 4b dc af b5 ac 86 9a 32 58 4e 1c fc 74 08 27 a8 f8 6b c1 2a 2a 18 21 a8 a8 8c 03 b1 2e 70 dc a0 69 b1 c7 6f a2 a3 84 45 03 1a 03 7a 23 66 af ea 3b 44 57 1a 39 19 2d 3e 79 b3 e1 b2 Data Ascii: ,tXd\|bajKs?9y>yjLtMe~gGu&[d0s\|-r$TJa3<+-<ky-{ZMX}=nGspytrUZiTRFd\|<PZcK2XNt'k**!.pioEz#f;DW9->y
2024-09-10 16:10:38 UTC	1371	IN	Data Raw: aa 70 22 10 37 1b 0f 30 3b 65 54 14 a2 a1 b4 cd 04 db 6c d5 7b 4e 97 1b 24 4f e5 0b 3b 4a a3 6b 6d 10 7b 5a dc e5 65 2b 89 93 d9 62 32 30 e4 23 c0 f2 aa df 28 46 49 c2 eb c3 76 59 6b b5 22 e3 4e 03 ba 2f 5b 8f 95 c5 92 a8 87 65 8e 5e c5 2d 12 e4 98 2e c7 64 2b 40 c4 ff 00 fc 50 09 bd d8 08 10 8c ab ac 0d e6 19 59 da da 69 10 88 7d d7 96 60 1a ec 1c ec 57 3d f2 f6 6b 5a bd 0d c3 0d 54 d9 6d 10 c1 58 e1 ce d1 dd 2e f1 5f 39 cb ac 75 4e 9e be 0c 7f 2b 48 32 da 2e 34 dd 93 de d2 31 87 6f d5 79 96 a3 58 9f b3 25 d5 da 5a cf 45 58 e9 63 78 6c 65 d9 20 9f 35 e7 e7 a7 77 db 7a 2f 2e 62 9a 84 86 9a a7 d2 b4 ad 6d 50 ec 84 8c ef 73 92 3f d2 af 15 2b 10 e2 f5 5e 4d ed 33 13 32 b0 d7 71 63 45 db 60 2c 9a b2 26 72 8c 90 1c 0e e3 dc 16 fd 50 f0 7a 27 ec a2 de 3d 28 34 Data Ascii: p"70;eTl{N$O;Jkm{Ze+b20#(FIvYk"N/[e^-.d+@PYi}`W=kZTmX._9uN+H2.41oyX%ZEXcxle 5wz/.bmPs?+^M32qcE`,&rPz'=(4
2024-09-10 16:10:38 UTC	1371	IN	Data Raw: e3 2d 39 3b 2c af 78 87 ab c7 c3 b5 12 f3 3c 59 23 65 11 96 1b 5f 87 bf b1 85 ad b1 3a 7f 04 4e 58 3a 70 d7 6b 7c d0 c7 10 03 08 8b ec ef c7 d7 d9 2d 4f 59 18 c0 e6 5a 45 dc d7 c5 27 4f ab 61 6f 55 51 66 51 8a 51 55 d3 46 e8 ce eb 6c 76 97 4d 71 cc c2 83 a9 b9 5f cc 06 f9 5f 41 c1 be 9e 2f a8 63 98 da bb 41 6c cb b9 b9 7c 57 af 6c f3 10 f9 3b d3 e6 5b 2d 76 62 e2 3b ab cd cd c8 38 a2 d9 43 67 68 68 cb 57 9d 93 33 a6 94 2b 57 49 1b 19 8c 2e 2b da 5d 15 85 2f 50 f6 41 af 03 6e ab 09 74 55 8e ea c2 3b 57 10 a5 a4 a9 15 35 24 12 ad cf 26 0e 9d e5 db 26 93 aa 73 21 c1 29 04 b5 09 91 8e 04 2a a8 98 5b 2d 57 49 62 03 2e db c9 6d 54 27 99 aa 1f 13 71 cd 85 b5 61 36 93 3a dd 5c e9 01 6f 3a d3 a5 13 24 6d d7 67 4b 36 7c ca 24 97 3a 1a bf 93 07 cd 44 9e 8e cd 4e 5b Data Ascii: -9;,x<Y#e_:NX:pk\|-OYZE'OaoUQfQQUFlvMq__A/cAl\|Wl;[-vb;8CghhW3+WI.+]/PAntU;W5$&&s!)*[-WIb.mT'qa6:\o:$mgK6\|$:DN[
2024-09-10 16:10:38 UTC	1371	IN	Data Raw: a8 78 03 a8 b4 f6 9f a6 b8 df 25 a6 a1 f5 92 19 4b 4b 82 fa a9 24 70 c8 67 2b 41 ef 24 67 96 4f 45 5e 24 dc ac c2 e4 f3 05 0b dc 73 1d 35 4b 8b 24 31 f5 e7 3f 43 f8 48 2e ea 87 10 f4 0c 5a 52 56 d3 53 de e1 bb 10 00 9e 5a 77 87 44 24 c0 2f 6b 48 eb ca 76 4c 29 f4 17 5a da 19 9b 24 12 b9 98 ea 01 d9 6b 8b 35 a9 3b ac 8b 56 27 cb 46 b0 eb 7b 6b ab 69 a9 ae 33 8e ce 40 d2 6a 83 70 1a e3 d5 ae 0b da e3 fa c7 da fe 5c 39 78 5f 7a bd 2f a4 f4 95 2c f4 11 54 d3 b9 b3 45 23 43 99 23 0f 30 20 f4 e8 a3 91 ca df 8f 05 8b 14 c7 98 5a e3 d3 42 36 8e ee ff 00 05 e3 e7 be de 8e 24 1e a4 b1 0f 57 20 0c 15 e4 e6 a3 d2 c3 66 79 71 b7 3e 3e 61 85 c4 ee f2 a7 de 68 9e 41 18 5a d1 9d e1 47 b9 58 e6 9d fc ad 6e 49 5d d8 de 76 6a 97 b2 f0 a6 b6 e1 33 39 9a 43 49 5d 1b 71 4b d0 Data Ascii: x%KK$pg+A$gOE^$s5K$1?CH.ZRVSZwD$/kHvL)Z$k5;V'F{ki3@jp\9x_z/,TE#C#0 ZB6$W fyq>>ahAZGXnI]vj39CI]qK
2024-09-10 16:10:38 UTC	1371	IN	Data Raw: 53 b4 86 00 bd 98 97 cd d8 9d 73 b1 13 cf b9 63 9f c2 f0 c7 75 16 be a5 c2 a1 df 15 f3 f9 27 bb e9 30 e3 f9 48 7a d1 23 04 a5 1a 69 ed a1 2f 41 ae 6b 97 67 1e fa 73 72 31 ed 96 6a 88 5a 5c e5 f4 5c 4c 8f 8f f5 2c 4a 44 bb 3c 85 ec 56 5f 39 31 dc 4c aa 4b 86 3a a0 3b c5 30 ee 64 f6 03 94 6c 9d 90 9e c6 97 20 57 de e9 e4 8d 9c 7b d3 03 20 86 6b f0 52 05 e3 93 70 99 4c 1e 46 fc 84 d1 30 72 c7 6d 84 16 86 07 cb a2 71 00 39 18 46 88 21 1a 05 1a e4 81 78 dc 5a 12 d1 17 8d c7 aa 89 80 70 d7 64 24 45 1a 91 15 00 e7 65 20 23 23 aa 34 6e ce c8 01 1b ec 8d 10 39 3a ec 8d 01 0b 76 4c 08 e6 e3 af 44 f6 66 97 3a a8 e8 2d d2 d7 cc 08 a7 8b 62 ff 00 9a 5c 7a 37 3e 6b 0c fc 9a 62 89 99 69 87 14 e4 9d 43 21 d4 1a ae b2 e9 50 5c e7 16 d3 b4 fc 9c 43 a6 17 ca 72 f9 b6 cb 3f Data Ascii: Sscu'0Hz#i/Akgsr1jZ\\L,JD<V_91LK:;0dl W{ kRpLF0rmq9F!xZpd$Ee ##4n9:vLDf:-b\z7>kbiC!P\Cr?
2024-09-10 16:10:38 UTC	1371	IN	Data Raw: a6 12 9c 13 85 6c 92 4e b4 06 33 9b 3d 50 11 35 6c 2c 79 19 4c 88 02 50 07 6a 40 62 ec 04 e2 41 ed aa ff 00 73 b5 ce 26 a3 9d d1 11 e0 09 c1 48 69 7c b6 71 c2 ff 00 04 0d 8e ab e5 0b 3d 87 78 fd 69 ec bb 86 e9 c6 cb b5 6c 2e 64 6d 31 48 47 b4 14 cc a9 5b 8e eb 75 bc cd cb 5b 31 90 13 d0 a8 b5 95 5a ad 54 1a 5a 90 c2 d7 10 3e 0b 2e a6 dd 06 37 ed 3b 1c 11 19 21 19 1e 61 4d bb ba 38 f7 9a ca 8f 21 2d 94 83 b6 0a e8 c5 e1 87 2a 77 2b 3e 9b b9 f2 b8 46 e2 bd ff 00 4e e4 f7 d4 bc 8e 4e 3f ba dc d7 87 34 10 7a af a1 89 79 b3 01 ce 02 a8 90 23 9e 98 77 32 40 6e 6d f0 a4 06 22 0b c2 9c 93 d9 ae 28 dc ad 36 42 d0 07 e0 5f 21 ea 39 3b be bf d3 b1 f6 85 aa 9e 50 00 df 60 be 43 99 99 f5 dc 5c 3d 83 2d 40 c1 dd 78 97 be de 8d 68 8a ab 9d e3 25 aa 29 3d dd 5d 3f 29 83 Data Ascii: lN3=P5l,yLPj@bAs&Hi\|q=xil.dm1HG[u[1ZTZ>.7;!aM8!-*w+>FNN?4zy#w2@nm"(6B_!9;P`C\=-@xh%)=]?)
2024-09-10 16:10:38 UTC	1371	IN	Data Raw: 2b 5c 50 25 1f 51 83 d5 54 14 22 ea 63 03 76 ec 7a ab 8b 09 0d 15 d2 78 24 1c c7 65 50 95 d6 c7 a8 73 8c bf ea 44 c0 da f5 6a ba 97 63 7c 85 9c c2 d6 7a 4a 96 48 d0 09 dd 23 3b 74 21 fd 12 d8 d1 27 43 ca 7c 91 b1 a2 64 91 b9 48 41 b4 d5 5c 83 ae 10 a4 65 4d d4 02 7b c8 2d 99 ba f2 df a4 80 4a 4b 90 7b 77 77 5f 04 cb 68 2b 84 91 bb 3f 81 6f 8a da 67 78 55 ee 31 b0 e5 7a fc 7b b8 ef 0a fc ed 2d 27 0b d8 c5 67 25 a1 1b 5c d0 e6 93 e2 b4 bc 76 10 a9 5d e9 49 07 6c af 1f 97 8d d5 8a 55 3a ba 57 07 9d 97 81 96 93 12 f4 29 3b 3c a7 a4 64 6c 69 23 bc 47 55 e5 de f3 b7 55 6b d9 23 4f 50 f6 c6 61 71 cb 7c 52 ad e6 04 d3 68 9a fa 1a 80 f2 4b 49 69 dc 1f 72 ed a5 f7 0c a6 ba 16 cf d8 b6 a8 09 86 07 bd 54 44 0a da 61 2b 79 a7 a3 7c 1c cc e5 e6 f7 29 bc 44 3a eb 3d 4a Data Ascii: +\P%QT"cvzx$ePsDjc\|zJH#;t!'C\|dHA\eM{-JK{ww_h+?ogxU1z{-'g%\v]IlU:W);<dli#GUUk#OPaq\|RhKIirTDa+y\|)D:=J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49777	35.234.162.151	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:39 UTC	698	OUT	GET /dpx?cid=11411&us_privacy=&33random=1725984637878.1&ref= HTTP/1.1 Host: i.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:39 UTC	157	IN	HTTP/1.1 410 Gone Server: openresty Date: Tue, 10 Sep 2024 16:10:39 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 542 Connection: close
2024-09-10 16:10:39 UTC	542	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 31 30 20 47 6f 6e 65 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 31 30 20 47 6f 6e 65 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 Data Ascii: <html><head><title>410 Gone</title></head><body><center><h1>410 Gone</h1></center><hr><center>openresty</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friend

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49778	35.234.162.151	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:39 UTC	698	OUT	GET /dpx?cid=11411&us_privacy=&33random=1725984637878.3&ref= HTTP/1.1 Host: i.simpli.fi Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:39 UTC	157	IN	HTTP/1.1 410 Gone Server: openresty Date: Tue, 10 Sep 2024 16:10:39 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 542 Connection: close
2024-09-10 16:10:39 UTC	542	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 31 30 20 47 6f 6e 65 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 31 30 20 47 6f 6e 65 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 Data Ascii: <html><head><title>410 Gone</title></head><body><center><h1>410 Gone</h1></center><hr><center>openresty</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrome friend

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49790	67.202.105.34	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:39 UTC	683	OUT	GET /deb/v2?id=wu!&dn=AFWU&cc=1&r=&pu=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran HTTP/1.1 Host: de.tynt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=NEZ+Lmbgb333KZLeVeB0Lg==; pids=%5B%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1725984637878%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A2%2C%22ts%22%3A1725984637878%7D%5D
2024-09-10 16:10:40 UTC	1245	IN	HTTP/1.1 200 cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false expires: Sat, 26 Jul 1997 05:00:00 GMT accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile set-cookie: pids=%5B%7B%22p%22%3A%22fcb82aaae3%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22607295b4a4%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1725984637878%7D%2C%7B%22p%22%3A%22b32ef6f991%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22002f98d420%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22d9fe068602%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22179d15a463%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22e32a9fc66e%22%2C%22f%22%3A1%2C%22ts%22%3A1725984639975%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A2%2C%22ts%22%3A1725984637878%7D%5D;Version=1;Comment=;SameSite=None;Domain=tynt.com;Path=/;Max-Age=7776000;Secure content-type: application/javascript content-length: 1677 date: Tue, 10 Sep 2024 16:10:39 GMT p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close
2024-09-10 16:10:40 UTC	270	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 69 2c 64 3d 64 6f 63 75 6d 65 6e 74 2c 70 3d 22 75 6e 73 61 66 65 2d 75 72 6c 22 2c 65 2c 73 2c 74 2c 75 3d 5b 22 68 74 74 70 73 3a 2f 2f 70 73 2e 65 79 65 6f 74 61 2e 6e 65 74 2f 70 69 78 65 6c 3f 70 69 64 3d 67 64 6f 6d 67 35 31 26 74 3d 67 69 66 26 63 61 74 3d 26 75 73 5f 70 72 69 76 61 63 79 3d 26 72 61 6e 64 6f 6d 3d 31 37 32 35 39 38 34 36 33 39 39 37 35 2e 31 22 2c 22 68 74 74 70 73 3a 2f 2f 70 78 2e 61 64 73 2e 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6d 2f 64 62 5f 73 79 6e 63 3f 70 69 64 3d 31 35 39 32 37 26 70 75 75 69 64 3d 4e 45 5a 25 32 42 4c 6d 62 67 62 33 33 33 4b 5a 4c 65 56 65 42 30 4c 67 25 33 44 25 33 44 26 75 73 5f 70 72 69 76 61 63 79 3d 26 5f 72 61 6e 64 3d 31 37 32 35 39 38 34 36 33 39 39 37 Data Ascii: (function(){var i,d=document,p="unsafe-url",e,s,t,u=["https://ps.eyeota.net/pixel?pid=gdomg51&t=gif&cat=&us_privacy=&random=1725984639975.1","https://px.ads.linkedin.com/db_sync?pid=15927&puuid=NEZ%2BLmbgb333KZLeVeB0Lg%3D%3D&us_privacy=&_rand=172598463997
2024-09-10 16:10:40 UTC	1407	IN	Data Raw: 61 70 2e 67 6f 2e 61 66 66 65 63 2e 74 76 2f 6d 61 70 2f 33 61 2f 3f 70 69 64 3d 4e 45 5a 25 32 42 4c 6d 62 67 62 33 33 33 4b 5a 4c 65 56 65 42 30 4c 67 25 33 44 25 33 44 26 75 73 5f 70 72 69 76 61 63 79 3d 26 74 73 3d 31 37 32 35 39 38 34 36 33 39 39 37 35 2e 33 22 2c 22 68 74 74 70 73 3a 2f 2f 6c 69 76 65 2e 72 65 7a 79 6e 63 2e 63 6f 6d 2f 73 79 6e 63 2f 3f 63 3d 34 36 35 36 63 32 30 65 65 33 35 32 31 35 66 37 38 65 39 32 37 33 37 39 36 36 32 35 64 39 30 62 26 70 3d 63 61 62 35 61 34 37 32 32 65 36 34 66 61 36 35 61 62 61 38 65 36 30 62 36 64 61 35 64 35 35 36 26 70 69 64 3d 4e 45 5a 25 32 42 4c 6d 62 67 62 33 33 33 4b 5a 4c 65 56 65 42 30 4c 67 25 33 44 25 33 44 26 70 63 61 74 3d 26 70 64 65 76 3d 26 70 63 74 72 79 3d 55 53 26 72 65 66 65 72 72 65 72 Data Ascii: ap.go.affec.tv/map/3a/?pid=NEZ%2BLmbgb333KZLeVeB0Lg%3D%3D&us_privacy=&ts=1725984639975.3","https://live.rezync.com/sync/?c=4656c20ee35215f78e9273796625d90b&p=cab5a4722e64fa65aba8e60b6da5d556&pid=NEZ%2BLmbgb333KZLeVeB0Lg%3D%3D&pcat=&pdev=&pctry=US&referrer

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49787	67.202.105.32	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:39 UTC	778	OUT	GET /b/p?id=wu!&lm=0&ts=1725984636046&dn=AFWU&iso=0&pu=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&t=High%20School%20Football%20Live%20-%20Greendale%20vs%20Milwaukee%20Lutheran HTTP/1.1 Host: ic.tynt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=NEZ+Lmbgb333KZLeVeB0Lg==; pids=%5B%7B%22p%22%3A%224bbb341d17%22%2C%22f%22%3A1%2C%22ts%22%3A1725984637878%7D%2C%7B%22p%22%3A%22e9b03986ff%22%2C%22f%22%3A2%2C%22ts%22%3A1725984637878%7D%5D
2024-09-10 16:10:40 UTC	562	IN	HTTP/1.1 200 OK server: nginx/1.16.1 date: Tue, 10 Sep 2024 16:10:39 GMT content-type: image/gif content-length: 35 last-modified: Fri, 16 Apr 2010 15:38:20 GMT etag: "4bc8846c-23" cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false" accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Model, Sec-CH-UA-Full-Version-List, Sec-CH-UA, Sec-CH-UA-Mobile expires: "Sat, 26 Jul 1997 05:00:00 GMT" accept-ranges: bytes p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA" connection: close
2024-09-10 16:10:40 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49794	104.26.12.60	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:39 UTC	731	OUT	GET /widget/?d=10401725984635D685D944936F64E5C9&nid=300&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&r= HTTP/1.1 Host: t.dtscdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:40 UTC	817	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:10:39 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: uid=10401725984635D685D944936F64E5C9; Domain=dtscdn.com; Expires=Sat, 08-Mar-2025 15:11:48 GMT; Max-Age=15465600; Path=/; SameSite=None; Secure X-T: 1 Expires: Tue, 10 Sep 2024 15:11:47 GMT Cache-Control: no-cache x-server: web12.ny1.dtscdn.com CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T11fXNacyr7EIS7hzS0CPs24X0oYfXt2W7ZqB5%2BEb8Z45IFBpzIZw3DB2imoqrPvUff%2BDqT0Ics0b5I0XnHUd8T5lFBbo17rWa5GC0qUo2svvU0cJT45XP7gR%2FCH6g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c10b07fd95d19df-EWR
2024-09-10 16:10:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49793	54.38.113.8	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:40 UTC	652	OUT	GET /?partner=137085098&mapped=10401725984635D685D944936F64E5C9 HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:40 UTC	500	IN	HTTP/1.1 302 Found set-cookie: cookie=8cc220a753f96617; Max-Age=31536000; Expires=Wed, 10 Sep 2025 16:10:40 GMT; Path=/; Domain=.onaudience.com; Secure set-cookie: done_redirects236=1; Max-Age=86400; Expires=Wed, 11 Sep 2024 16:10:40 GMT; Path=/; Domain=.onaudience.com; Secure location: https://pixel.onaudience.com/?partner=236&icm&cver&gdpr=0&smartmap=1&redirect=ps.eyeota.net%2Fpixel%3Fgdpr%3D0%26gdpr_consent%3D%26pid%3D3b2cb90%26t%3Dgif%26uid%3D%25m content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49792	18.239.18.12	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:40 UTC	551	OUT	GET /lt/c/3825/lt.min.js HTTP/1.1 Host: tags.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:40 UTC	564	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 63965 Connection: close Date: Mon, 09 Sep 2024 18:27:31 GMT Last-Modified: Tue, 20 Aug 2024 17:49:20 GMT ETag: "2afd7a7856345176e1c9c378191ae043" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 32301bfd0e3b06c528ccd8abdb13411e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P6 X-Amz-Cf-Id: tsonabLNeSGTn-Abpu2ihny5ie31vBKA6Wp1UY2O5wYbmclxMoUeKg== Age: 78190
2024-09-10 16:10:40 UTC	16384	IN	Data Raw: 76 61 72 20 6c 6f 74 61 6d 65 49 73 43 6f 6d 70 61 74 69 62 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 28 20 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 28 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 20 21 3d 3d 20 27 Data Ascii: var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== '
2024-09-10 16:10:40 UTC	16384	IN	Data Raw: 6c 74 33 38 32 35 5f 70 3d 5b 22 45 4d 41 49 4c 22 2c 22 45 45 22 2c 22 45 4d 41 49 4c 5f 53 48 41 32 35 36 22 5d 3b 20 66 75 6e 63 74 69 6f 6e 20 6c 74 33 38 32 35 5f 71 28 61 29 7b 61 3d 76 6f 69 64 20 30 3d 3d 3d 61 3f 7b 7d 3a 61 3b 74 68 69 73 2e 49 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 73 61 3d 21 31 3b 69 66 28 61 26 26 6c 74 33 38 32 35 5f 72 28 61 29 29 7b 76 61 72 20 62 3d 21 31 3b 61 26 26 6c 74 33 38 32 35 5f 72 28 61 29 3f 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 69 64 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 74 79 70 65 3f 6c 74 33 38 32 35 5f 2e 65 72 72 6f 72 28 22 69 64 20 6f 62 6a 65 63 74 20 6d 75 73 74 20 63 6f 6e 74 61 69 6e 20 62 6f 74 68 20 27 69 64 27 20 61 6e 64 20 27 74 Data Ascii: lt3825_p=["EMAIL","EE","EMAIL_SHA256"]; function lt3825_q(a){a=void 0===a?{}:a;this.Ia=null;this.sa=!1;if(a&&lt3825_r(a)){var b=!1;a&&lt3825_r(a)?"undefined"===typeof a.id\|\|"undefined"===typeof a.type?lt3825_.error("id object must contain both 'id' and 't
2024-09-10 16:10:40 UTC	12288	IN	Data Raw: 7b 76 61 72 20 62 3d 6e 65 77 20 6c 74 33 38 32 35 5f 57 61 3b 22 62 6f 6f 6c 65 61 6e 22 21 3d 3d 74 79 70 65 6f 66 20 61 3f 6c 74 33 38 32 35 5f 2e 65 72 72 6f 72 28 22 73 68 6f 75 6c 64 50 65 72 66 6f 72 6d 41 75 64 69 65 6e 63 65 45 78 74 72 61 63 74 69 6f 6e 20 28 22 2b 61 2b 22 29 20 73 68 6f 75 6c 64 20 62 65 20 61 20 62 6f 6f 6c 65 61 6e 22 29 3a 62 2e 6b 62 3d 61 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6c 74 33 38 32 35 5f 59 61 28 61 29 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 63 3d 62 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 3b 2d 31 21 3d 3d 63 26 26 28 62 3d 62 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 63 29 29 3b 61 2e 6a 62 3d 62 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: {var b=new lt3825_Wa;"boolean"!==typeof a?lt3825_.error("shouldPerformAudienceExtraction ("+a+") should be a boolean"):b.kb=a;return b}function lt3825_Ya(a){var b=window.location.href,c=b.indexOf("?");-1!==c&&(b=b.substring(0,c));a.jb=b;return a}function
2024-09-10 16:10:40 UTC	16384	IN	Data Raw: 5f 74 62 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 62 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 63 5b 74 68 69 73 2e 50 61 5b 64 5d 5d 3d 62 5b 64 5d 3f 31 3a 30 7d 2c 61 29 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 6c 74 33 38 32 35 5f 73 62 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 21 63 7c 7c 62 2e 59 21 3d 3d 63 7c 7c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 64 29 2e 6c 65 6e 67 74 68 21 3d 3d 6c 74 33 38 32 35 5f 4a 61 28 62 2c 65 29 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 68 3d 21 30 3b 6c 74 33 38 32 35 5f 4a 61 28 62 2c 65 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 64 5b 67 2e 6e 61 6d 65 5d 21 3d 3d 67 2e 63 6f 6e 73 65 6e 74 Data Ascii: _tb(a,b){var c={};Object.keys(b).forEach(function(d){c[this.Pa[d]]=b[d]?1:0},a);return c}function lt3825_sb(a,b,c,d,e){if(!c\|\|b.Y!==c\|\|Object.keys(d).length!==lt3825_Ja(b,e).length)return!1;var h=!0;lt3825_Ja(b,e).forEach(function(g){d[g.name]!==g.consent
2024-09-10 16:10:40 UTC	2525	IN	Data Raw: 6a 73 20 6f 72 20 75 73 65 20 74 68 65 20 63 6f 6c 6c 65 63 74 28 29 20 6d 65 74 68 6f 64 22 29 7d 3b 62 2e 67 65 74 43 6f 6e 73 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 72 65 74 75 72 6e 20 6c 74 33 38 32 35 5f 6d 62 28 61 2e 74 62 2c 63 2c 64 29 7d 3b 62 2e 73 65 74 43 6f 6e 73 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 65 29 7b 72 65 74 75 72 6e 20 6c 74 33 38 32 35 5f 71 62 28 61 2e 74 62 2c 63 2c 64 2c 65 29 7d 3b 62 2e 67 65 74 49 6e 74 65 72 6e 61 6c 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 73 74 61 74 65 2e 75 28 29 7d 3b 62 2e 67 65 74 49 6e 74 65 72 6e 61 6c 43 6f 6e 66 69 67 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 66 2e 75 28 29 7d 3b 62 2e 67 65 74 50 61 6e 6f Data Ascii: js or use the collect() method")};b.getConsent=function(c,d){return lt3825_mb(a.tb,c,d)};b.setConsent=function(c,d,e){return lt3825_qb(a.tb,c,d,e)};b.getInternalState=function(){return a.state.u()};b.getInternalConfigs=function(){return a.f.u()};b.getPano

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49795	18.239.18.33	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:40 UTC	543	OUT	GET /lt/c/16311/sync.min.js HTTP/1.1 Host: tags.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cdn-tc.33across.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:40 UTC	553	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 43601 Connection: close Date: Tue, 10 Sep 2024 16:10:41 GMT Last-Modified: Tue, 20 Aug 2024 18:43:24 GMT ETag: "9b991fc4e41448221be02744748ec589" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 435254ceec69c136096ca9b455fd3534.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P6 X-Amz-Cf-Id: lQ8XWZNzBLifvb3hu4B2AzEIyIUNz0de0SAgKX7W6HC6JAQMJmWFPA==
2024-09-10 16:10:40 UTC	15831	IN	Data Raw: 76 61 72 20 6c 6f 74 61 6d 65 49 73 43 6f 6d 70 61 74 69 62 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 28 20 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 28 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 20 21 3d 3d 20 27 Data Ascii: var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== '
2024-09-10 16:10:40 UTC	159	IN	Data Raw: 61 32 35 36 20 68 61 73 68 2c 20 77 61 73 20 27 22 2b 20 61 2e 69 64 2b 22 27 22 29 3a 73 79 6e 63 31 36 33 31 31 5f 2e 65 72 72 6f 72 28 22 73 75 70 70 6c 69 65 64 20 69 64 20 6d 75 73 74 20 62 65 20 76 61 6c 69 64 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 2c 20 77 61 73 20 27 22 2b 61 2e 69 64 2b 22 27 22 29 3a 73 79 6e 63 31 36 33 31 31 5f 2e 65 72 72 6f 72 28 22 69 64 20 6f 62 6a 65 63 74 20 74 79 70 65 20 6d 75 73 74 20 6f 6e 65 20 6f 66 20 22 2b 73 79 6e 63 31 36 33 Data Ascii: a256 hash, was '"+ a.id+"'"):sync16311_.error("supplied id must be valid email address, was '"+a.id+"'"):sync16311_.error("id object type must one of "+sync163
2024-09-10 16:10:41 UTC	1899	IN	Data Raw: 31 31 5f 73 2e 6a 6f 69 6e 28 29 2b 22 2c 20 66 6f 75 6e 64 20 27 22 2b 61 2e 74 79 70 65 2b 22 27 22 29 3a 73 79 6e 63 31 36 33 31 31 5f 2e 65 72 72 6f 72 28 22 69 64 20 73 68 6f 75 6c 64 20 62 65 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 62 26 26 28 74 68 69 73 2e 69 61 3d 61 2c 74 68 69 73 2e 5a 3d 21 30 29 7d 65 6c 73 65 20 73 79 6e 63 31 36 33 31 31 5f 2e 65 72 72 6f 72 28 22 69 64 49 6e 70 75 74 20 73 68 6f 75 6c 64 20 62 65 20 61 6e 20 6f 62 6a 65 63 74 22 29 7d 73 79 6e 63 31 36 33 31 31 5f 74 2e 70 72 6f 74 6f 74 79 70 65 2e 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 28 74 68 69 73 2e 5a 26 26 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 69 61 29 7d 3b 73 79 6e 63 31 36 33 31 31 5f 74 2e 70 72 6f 74 6f 74 79 Data Ascii: 11_s.join()+", found '"+a.type+"'"):sync16311_.error("id should be an object");b&&(this.ia=a,this.Z=!0)}else sync16311_.error("idInput should be an object")}sync16311_t.prototype.C=function(){return!(this.Z&&"string"===typeof this.ia)};sync16311_t.prototy
2024-09-10 16:10:41 UTC	1024	IN	Data Raw: 5f 73 2e 69 6e 63 6c 75 64 65 73 28 61 2e 74 79 70 65 29 3f 22 45 4d 41 49 4c 22 21 3d 61 2e 74 79 70 65 7c 7c 73 79 6e 63 31 36 33 31 31 5f 69 61 2e 74 65 73 74 28 61 2e 69 64 29 3f 22 45 4d 41 49 4c 5f 53 48 41 32 35 36 22 21 3d 61 2e 74 79 70 65 7c 7c 73 79 6e 63 31 36 33 31 31 5f 6a 61 2e 74 65 73 74 28 61 2e 69 64 29 3f 62 3d 21 30 3a 73 79 6e 63 31 36 33 31 31 5f 2e 65 72 72 6f 72 28 22 49 6e 20 64 65 63 6c 61 72 65 64 20 49 44 2c 20 73 75 70 70 6c 69 65 64 20 69 64 20 6d 75 73 74 20 62 65 20 76 61 6c 69 64 20 73 68 61 32 35 36 20 68 61 73 68 2c 20 77 61 73 20 27 22 2b 61 2e 69 64 2b 22 27 22 29 3a 73 79 6e 63 31 36 33 31 31 5f 2e 65 72 72 6f 72 28 22 49 6e 20 64 65 63 6c 61 72 65 64 20 49 44 2c 20 73 75 70 70 6c 69 65 64 20 69 64 20 6d 75 73 74 20 Data Ascii: _s.includes(a.type)?"EMAIL"!=a.type\|\|sync16311_ia.test(a.id)?"EMAIL_SHA256"!=a.type\|\|sync16311_ja.test(a.id)?b=!0:sync16311_.error("In declared ID, supplied id must be valid sha256 hash, was '"+a.id+"'"):sync16311_.error("In declared ID, supplied id must
2024-09-10 16:10:41 UTC	8949	IN	Data Raw: 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 62 65 68 61 76 69 6f 72 73 2e 22 2b 66 2b 22 20 73 68 6f 75 6c 64 20 62 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 73 74 72 69 6e 67 73 22 29 3b 63 3d 21 31 3b 62 72 65 61 6b 7d 7d 63 26 26 28 61 2e 50 3d 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 31 36 33 31 31 5f 79 28 61 29 7b 72 65 74 75 72 6e 21 21 28 61 2e 50 26 26 30 3c 4f 62 6a 65 63 74 2e 6b 65 79 73 28 61 2e 50 29 2e 6c 65 6e 67 74 68 29 7d 20 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 31 36 33 31 31 5f 6d 61 28 61 2c 62 29 7b 69 66 28 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 21 30 2c 64 3d 73 79 6e 63 31 36 33 31 31 5f 62 28 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 62 29 29 2c 66 3d 64 2e 6e 65 78 74 28 29 3b 21 66 2e 64 6f 6e 65 3b Data Ascii: ror("tagInput.data.behaviors."+f+" should be an array of strings");c=!1;break}}c&&(a.P=b)}}function sync16311_y(a){return!!(a.P&&0<Object.keys(a.P).length)} function sync16311_ma(a,b){if(b){for(var c=!0,d=sync16311_b(Object.entries(b)),f=d.next();!f.done;
2024-09-10 16:10:41 UTC	15739	IN	Data Raw: 30 2c 62 29 3a 63 7d 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 31 36 33 31 31 5f 53 28 61 29 7b 72 65 74 75 72 6e 28 61 2e 59 7c 7c 5b 5d 29 2e 66 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 63 6f 72 65 22 3d 3d 62 2e 63 7d 29 7d 73 79 6e 63 31 36 33 31 31 5f 52 2e 70 72 6f 74 6f 74 79 70 65 2e 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 73 79 6e 63 31 36 33 31 31 5f 53 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 61 3f 61 2e 69 3a 6e 75 6c 6c 7d 3b 20 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 31 36 33 31 31 5f 42 61 28 61 29 7b 76 61 72 20 62 3d 73 79 6e 63 31 36 33 31 31 5f 53 28 61 29 3b 61 3d 62 3f 62 2e 69 3a 6e 75 6c 6c 3b 62 3f 28 62 3d 62 2e 74 2c 62 3d 6e 75 6c 6c 3d 3d 62 3f 6e 75 6c 6c 3a 28 62 3d 73 79 6e 63 31 36 Data Ascii: 0,b):c}function sync16311_S(a){return(a.Y\|\|[]).find(function(b){return"core"==b.c})}sync16311_R.prototype.A=function(){var a=sync16311_S(this);return a?a.i:null}; function sync16311_Ba(a){var b=sync16311_S(a);a=b?b.i:null;b?(b=b.t,b=null==b?null:(b=sync16

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49786	3.73.251.164	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:40 UTC	402	OUT	GET /pd/dtscout HTTP/1.1 Host: pd.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZHkABGbgb30AAAAIC72MAw==; __stidv=2
2024-09-10 16:10:40 UTC	233	IN	HTTP/1.1 200 OK Content-Type: application/javascript Date: Tue, 10 Sep 2024 16:10:40 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 2444 Connection: Close
2024-09-10 16:10:40 UTC	2444	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 74 72 79 20 7b 0a 0a 20 20 20 20 2f 2f 20 73 65 74 20 75 70 20 6f 75 72 20 70 69 78 65 6c 0a 20 20 20 20 76 61 72 20 66 63 6d 70 20 3d 20 74 79 70 65 6f 66 20 5f 5f 63 6d 70 20 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 3b 0a 20 20 20 20 76 61 72 20 66 63 6d 70 76 32 20 3d 20 74 79 70 65 6f 66 20 5f 5f 74 63 66 61 70 69 20 3d 3d 20 27 66 75 6e 63 74 69 6f 6e 27 3b 0a 20 20 20 20 76 61 72 20 72 6e 64 20 3d 20 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 0a 20 20 20 20 76 61 72 20 69 6d 67 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 0a 20 20 20 20 76 61 72 20 65 78 70 74 69 64 20 3d 20 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 27 5a 48 6b 41 42 Data Ascii: (function () { try { // set up our pixel var fcmp = typeof __cmp == 'function'; var fcmpv2 = typeof __tcfapi == 'function'; var rnd = Math.random(); var img = document.createElement('img'); var exptid = encodeURIComponent('ZHkAB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49789	3.73.251.164	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:40 UTC	621	OUT	GET /pd/dtscout?_t_=px&url=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&event_source=dtscout&rnd=0.26782430717848005&exptid=ZHkABGbgb30AAAAIC72MAw%3D%3D&fcmp=false HTTP/1.1 Host: pd.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZHkABGbgb30AAAAIC72MAw==; __stidv=2
2024-09-10 16:10:40 UTC	218	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 10 Sep 2024 16:10:40 GMT Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-09-10 16:10:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49797	104.26.12.60	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:40 UTC	587	OUT	GET /widget/?d=10401725984635D685D944936F64E5C9&nid=300&p=2114454483&t=240&s=1280x1024x24&u=http%3A%2F%2Ffootball-booster.freevisit1.com%2Fhs-football.php%3Flive%3DGreendale%2520vs%2520Milwaukee%2520Lutheran&r= HTTP/1.1 Host: t.dtscdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid=10401725984635D685D944936F64E5C9
2024-09-10 16:10:40 UTC	827	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:10:40 GMT Content-Type: application/javascript; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: uid=10401725984635D685D944936F64E5C9; Domain=dtscdn.com; Expires=Sat, 08-Mar-2025 13:31:11 GMT; Max-Age=15465600; Path=/; SameSite=None; Secure X-T: 19.26 Expires: Tue, 10 Sep 2024 13:31:10 GMT Cache-Control: no-cache x-server: web14.ny1.dtscdn.com CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qoJuq4RrhI8ltTzeCGjfIxweL6H63XMUCgZ0VOWpc5cI%2BvEdXwfmYzItJiYHRM53CNpw2thlfJXLDD%2BAA4USTDireKzOa0%2F%2Bh2I4W%2FTckTRCBYlAr1ZGOU3%2Bhi39qQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c10b0840e4e32c7-EWR
2024-09-10 16:10:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49798	54.38.113.8	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:40 UTC	732	OUT	GET /?partner=236&icm&cver&gdpr=0&smartmap=1&redirect=ps.eyeota.net%2Fpixel%3Fgdpr%3D0%26gdpr_consent%3D%26pid%3D3b2cb90%26t%3Dgif%26uid%3D%25m HTTP/1.1 Host: pixel.onaudience.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:41 UTC	293	IN	HTTP/1.1 302 Found set-cookie: cookie=201fb0688113c92b; Max-Age=31536000; Expires=Wed, 10 Sep 2025 16:10:41 GMT; Path=/; Domain=.onaudience.com; Secure location: https://ps.eyeota.net/pixel?gdpr=0&gdpr_consent=&pid=3b2cb90&t=gif&uid=1b06b4f8f0e4d452 content-length: 0 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49802	18.239.18.78	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:41 UTC	361	OUT	GET /lt/c/3825/lt.min.js HTTP/1.1 Host: tags.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:41 UTC	564	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 63965 Connection: close Date: Mon, 09 Sep 2024 18:27:31 GMT Last-Modified: Tue, 20 Aug 2024 17:49:20 GMT ETag: "2afd7a7856345176e1c9c378191ae043" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 916d412afdd39cf0d9689036f0f43bb4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P6 X-Amz-Cf-Id: 2uS3neMPpwtfkATeiGz_8Isn7XJyQhTBLfgao9wmFkYW_Pn5o8A5nA== Age: 78191
2024-09-10 16:10:41 UTC	16384	IN	Data Raw: 76 61 72 20 6c 6f 74 61 6d 65 49 73 43 6f 6d 70 61 74 69 62 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 28 20 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 28 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 20 21 3d 3d 20 27 Data Ascii: var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== '
2024-09-10 16:10:41 UTC	16384	IN	Data Raw: 6c 74 33 38 32 35 5f 70 3d 5b 22 45 4d 41 49 4c 22 2c 22 45 45 22 2c 22 45 4d 41 49 4c 5f 53 48 41 32 35 36 22 5d 3b 20 66 75 6e 63 74 69 6f 6e 20 6c 74 33 38 32 35 5f 71 28 61 29 7b 61 3d 76 6f 69 64 20 30 3d 3d 3d 61 3f 7b 7d 3a 61 3b 74 68 69 73 2e 49 61 3d 6e 75 6c 6c 3b 74 68 69 73 2e 73 61 3d 21 31 3b 69 66 28 61 26 26 6c 74 33 38 32 35 5f 72 28 61 29 29 7b 76 61 72 20 62 3d 21 31 3b 61 26 26 6c 74 33 38 32 35 5f 72 28 61 29 3f 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 69 64 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 74 79 70 65 3f 6c 74 33 38 32 35 5f 2e 65 72 72 6f 72 28 22 69 64 20 6f 62 6a 65 63 74 20 6d 75 73 74 20 63 6f 6e 74 61 69 6e 20 62 6f 74 68 20 27 69 64 27 20 61 6e 64 20 27 74 Data Ascii: lt3825_p=["EMAIL","EE","EMAIL_SHA256"]; function lt3825_q(a){a=void 0===a?{}:a;this.Ia=null;this.sa=!1;if(a&&lt3825_r(a)){var b=!1;a&&lt3825_r(a)?"undefined"===typeof a.id\|\|"undefined"===typeof a.type?lt3825_.error("id object must contain both 'id' and 't
2024-09-10 16:10:41 UTC	16384	IN	Data Raw: 7b 76 61 72 20 62 3d 6e 65 77 20 6c 74 33 38 32 35 5f 57 61 3b 22 62 6f 6f 6c 65 61 6e 22 21 3d 3d 74 79 70 65 6f 66 20 61 3f 6c 74 33 38 32 35 5f 2e 65 72 72 6f 72 28 22 73 68 6f 75 6c 64 50 65 72 66 6f 72 6d 41 75 64 69 65 6e 63 65 45 78 74 72 61 63 74 69 6f 6e 20 28 22 2b 61 2b 22 29 20 73 68 6f 75 6c 64 20 62 65 20 61 20 62 6f 6f 6c 65 61 6e 22 29 3a 62 2e 6b 62 3d 61 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 6c 74 33 38 32 35 5f 59 61 28 61 29 7b 76 61 72 20 62 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 63 3d 62 2e 69 6e 64 65 78 4f 66 28 22 3f 22 29 3b 2d 31 21 3d 3d 63 26 26 28 62 3d 62 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 63 29 29 3b 61 2e 6a 62 3d 62 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: {var b=new lt3825_Wa;"boolean"!==typeof a?lt3825_.error("shouldPerformAudienceExtraction ("+a+") should be a boolean"):b.kb=a;return b}function lt3825_Ya(a){var b=window.location.href,c=b.indexOf("?");-1!==c&&(b=b.substring(0,c));a.jb=b;return a}function
2024-09-10 16:10:41 UTC	14813	IN	Data Raw: 61 3d 61 2e 72 65 70 6c 61 63 65 28 2f 3c 5c 2f 3f 5b 5e 3e 5d 2b 5c 2f 3f 3e 2f 67 69 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 6e 7c 5c 74 7c 5c 72 2f 67 69 2c 22 20 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 73 7b 32 2c 7d 2f 67 2c 22 20 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 5b 71 75 6f 74 65 5c 5d 5b 5c 73 5c 53 5d 2a 5c 5b 5c 2f 71 75 6f 74 65 5c 5d 2f 67 69 2c 22 22 29 3b 74 72 79 7b 61 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 7d 63 61 74 63 68 28 62 29 7b 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 6c 74 33 38 32 35 5f 49 62 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 2e 4b 62 3f 6c 74 33 38 32 35 5f 4d 62 28 61 2c 62 29 3a 6c 74 33 38 32 35 5f 4e 62 28 61 2c 62 29 7d 20 66 75 6e 63 74 69 6f 6e 20 6c 74 33 38 32 Data Ascii: a=a.replace(/<\/?[^>]+\/?>/gi,"").replace(/\n\|\t\|\r/gi," ").replace(/\s{2,}/g," ").replace(/\[quote\][\s\S]*\[\/quote\]/gi,"");try{a=decodeURIComponent(a)}catch(b){}return a}function lt3825_Ib(a,b){return b.Kb?lt3825_Mb(a,b):lt3825_Nb(a,b)} function lt382

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49805	18.239.18.78	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:41 UTC	364	OUT	GET /lt/c/16311/sync.min.js HTTP/1.1 Host: tags.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:42 UTC	560	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 43601 Connection: close Date: Tue, 10 Sep 2024 16:10:41 GMT Last-Modified: Tue, 20 Aug 2024 18:43:24 GMT ETag: "9b991fc4e41448221be02744748ec589" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 7f0813b44b225b7cfed233d5c2caab52.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P6 X-Amz-Cf-Id: ScTXBk-Vg1bFcjqUPtHBnq2tvPGkDhBhBdBUkI2s-mJxgrrCBq8X4g== Age: 1
2024-09-10 16:10:42 UTC	16384	IN	Data Raw: 76 61 72 20 6c 6f 74 61 6d 65 49 73 43 6f 6d 70 61 74 69 62 6c 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 28 20 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 6b 65 79 73 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 65 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 28 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 2e 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 29 20 21 3d 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 20 21 3d 3d 20 27 Data Ascii: var lotameIsCompatible = function() { return ( typeof Object.keys !== 'undefined' && typeof window.postMessage !== 'undefined' && typeof XMLHttpRequest !== 'undefined' && typeof(new XMLHttpRequest().withCredentials) !== 'undefined' && typeof console !== '
2024-09-10 16:10:42 UTC	16384	IN	Data Raw: 28 62 3d 21 31 2c 73 79 6e 63 31 36 33 31 31 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 20 73 68 6f 75 6c 64 20 62 65 20 61 6e 20 6f 62 6a 65 63 74 22 29 29 3b 61 2e 6e 61 6d 65 73 70 61 63 65 7c 7c 28 62 3d 21 31 2c 73 79 6e 63 31 36 33 31 31 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 2e 6e 61 6d 65 73 70 61 63 65 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 29 3b 61 2e 76 61 6c 75 65 7c 7c 28 62 3d 21 31 2c 73 79 6e 63 31 36 33 31 31 5f 2e 65 72 72 6f 72 28 22 74 61 67 49 6e 70 75 74 2e 64 61 74 61 2e 74 68 69 72 64 50 61 72 74 79 2e 76 61 6c 75 65 20 69 73 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 29 3b 61 2e 6e 61 6d 65 73 70 61 63 65 Data Ascii: (b=!1,sync16311_.error("tagInput.data.thirdParty should be an object"));a.namespace\|\|(b=!1,sync16311_.error("tagInput.data.thirdParty.namespace is not defined"));a.value\|\|(b=!1,sync16311_.error("tagInput.data.thirdParty.value is not defined"));a.namespace
2024-09-10 16:10:42 UTC	8949	IN	Data Raw: 2b 63 29 7d 72 65 74 75 72 6e 21 31 7d 20 66 75 6e 63 74 69 6f 6e 20 73 79 6e 63 31 36 33 31 31 5f 4d 61 28 61 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 2e 5f 5f 6c 6f 74 61 6d 65 49 66 72 61 6d 65 54 63 66 41 70 69 26 26 28 73 79 6e 63 31 36 33 31 31 5f 2e 64 65 62 75 67 28 22 49 6e 69 74 69 61 6c 69 7a 69 6e 67 20 54 43 46 20 73 75 70 70 6f 72 74 20 69 6e 20 61 6e 20 69 66 72 61 6d 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 6c 6f 74 61 6d 65 49 66 72 61 6d 65 54 63 66 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 2c 66 29 7b 76 61 72 20 68 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 22 22 3b 62 3d 7b 5f 5f 74 63 66 61 70 69 43 61 6c 6c 3a 7b 63 6f 6d 6d 61 6e 64 3a 62 2c 70 61 72 61 6d 65 74 65 72 3a 66 Data Ascii: +c)}return!1} function sync16311_Ma(a){"undefined"===typeof window.__lotameIframeTcfApi&&(sync16311_.debug("Initializing TCF support in an iframe"),window.__lotameIframeTcfApi=function(b,c,d,f){var h=Math.random()+"";b={__tcfapiCall:{command:b,parameter:f
2024-09-10 16:10:42 UTC	1884	IN	Data Raw: 63 29 7b 72 65 74 75 72 6e 20 73 79 6e 63 31 36 33 31 31 5f 24 28 61 2e 73 2c 22 73 65 74 49 64 65 6e 74 69 74 79 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 73 79 6e 63 31 36 33 31 31 5f 34 61 28 61 2c 63 29 7d 29 7d 3b 62 2e 67 65 74 49 6e 74 65 72 6e 61 6c 53 74 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 73 74 61 74 65 2e 49 28 29 7d 3b 62 2e 67 65 74 49 6e 74 65 72 6e 61 6c 43 6f 6e 66 69 67 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 66 2e 49 28 29 7d 3b 62 2e 67 65 74 50 61 6e 6f 72 61 6d 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6e 65 77 20 73 79 6e 63 31 36 33 31 31 5f 51 28 61 2e 73 74 6f 72 61 67 65 2e 41 28 29 2c 73 79 6e 63 31 36 33 31 31 5f 73 61 28 61 2e 73 74 6f 72 61 67 65 29 Data Ascii: c){return sync16311_$(a.s,"setIdentity",function(){sync16311_4a(a,c)})};b.getInternalState=function(){return a.state.I()};b.getInternalConfigs=function(){return a.f.I()};b.getPanorama=function(){return(new sync16311_Q(a.storage.A(),sync16311_sa(a.storage)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49804	18.202.126.138	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:42 UTC	619	OUT	POST /6/map HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive Content-Length: 65 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://cdn-tc.33across.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://cdn-tc.33across.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:42 UTC	65	OUT	Data Raw: 7b 22 72 22 3a 7b 22 72 69 64 22 3a 74 72 75 65 7d 2c 22 6d 22 3a 7b 22 64 63 63 22 3a 31 36 33 31 31 2c 22 73 72 63 22 3a 22 53 59 4e 43 4a 53 22 7d 2c 22 64 22 3a 7b 7d 2c 22 63 22 3a 5b 5d 7d Data Ascii: {"r":{"rid":true},"m":{"dcc":16311,"src":"SYNCJS"},"d":{},"c":[]}
2024-09-10 16:10:42 UTC	649	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:10:42 GMT Content-Type: application/json;charset=utf-8 Content-Length: 154 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.2.24 Set-Cookie: _cc_dc=1;Path=/;Domain=crwdcntrl.net;Expires=Sat, 07-Jun-2025 16:06:00 GMT;SameSite=None;Secure Set-Cookie: _cc_id=3bdb359c63037044d87658cfcb77131;Path=/;Domain=crwdcntrl.net;Expires=Sat, 07-Jun-2025 16:06:00 GMT;SameSite=None;Secure Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://cdn-tc.33across.com Server: Jetty(9.4.38.v20210224)
2024-09-10 16:10:42 UTC	154	IN	Data Raw: 7b 22 70 69 64 22 3a 22 33 62 64 62 33 35 39 63 36 33 30 33 37 30 34 34 64 38 37 36 35 38 63 66 63 62 37 37 31 33 31 22 2c 22 63 22 3a 5b 7b 22 6b 22 3a 22 5f 63 63 5f 69 64 22 2c 22 76 22 3a 22 33 62 64 62 33 35 39 63 36 33 30 33 37 30 34 34 64 38 37 36 35 38 63 66 63 62 37 37 31 33 31 22 2c 22 65 22 3a 32 33 33 32 38 30 30 30 7d 5d 2c 22 69 64 73 22 3a 5b 7b 22 63 22 3a 22 63 6f 72 65 22 2c 22 65 22 3a 22 31 37 32 36 30 37 31 30 34 32 32 36 32 22 7d 5d 7d Data Ascii: {"pid":"3bdb359c63037044d87658cfcb77131","c":[{"k":"_cc_id","v":"3bdb359c63037044d87658cfcb77131","e":23328000}],"ids":[{"c":"core","e":"1726071042262"}]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49807	3.120.214.218	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:42 UTC	652	OUT	GET /pixel?gdpr=0&gdpr_consent=&pid=3b2cb90&t=gif&uid=1b06b4f8f0e4d452 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:42 UTC	741	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: mako_uid=191dcb394a5-46de0000010f4e56; Domain=eyeota.net; Path=/; Expires=Wed, 10 Sep 2025 16:10:42 GMT; Secure; SameSite=None; Set-Cookie: SERVERID=20054~DM; Domain=eyeota.net; Path=/; Expires=Tue, 10 Sep 2024 16:20:42 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: /pixel/bounce/?gdpr=0&gdpr_consent=&pid=3b2cb90&t=gif&uid=1b06b4f8f0e4d452 Content-Length: 0 Date: Tue, 10 Sep 2024 16:10:42 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49814	34.117.77.79	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:42 UTC	737	OUT	GET /utsync.ashx?eid=50131&et=13&cid=lr&fp=ZHkABGbgb30AAAAIC72MAw%3D%3D&gdpr=0&gdpr_consent=&return=https%3A%2F%2Fidsync.rlcdn.com%2F395886.gif%3Fpartner_uid%3D%5BPersonID%5D HTTP/1.1 Host: ml314.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:42 UTC	666	IN	HTTP/1.1 302 Found content-type: image/gif cache-control: no-cache, no-store, must-revalidate expires: 0,Wed, 11 Sep 2024 16:10:42 GMT location: https://idsync.rlcdn.com/395886.gif?partner_uid=3646915315069091854 pragma: no-cache set-cookie: pi=3646915315069091854; expires=Wed, 10 Sep 2025 16:10:42 GMT; domain=ml314.com; path=/; secure; samesite=none; httponly p3p: CP="NON DSP COR ADMo PSAo DEVo BUS COM UNI NAV DEM STA" x-cloud-trace-context: 85ad821f3ce4f59fdab4482b36405da1 date: Tue, 10 Sep 2024 16:10:42 GMT server: Google Frontend Content-Length: 43 via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-10 16:10:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49812	35.244.174.68	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:42 UTC	647	OUT	GET /386076.gif?partner_uid=ZHkABGbgb30AAAAIC72MAw%3D%3D&gdpr=0&gdpr_consent= HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:42 UTC	252	IN	HTTP/1.1 400 Bad Request Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Tue, 10 Sep 2024 16:10:42 GMT Content-Length: 21 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-10 16:10:42 UTC	21	IN	Data Raw: 69 6e 76 61 6c 69 64 20 63 6f 6e 73 65 6e 74 20 74 79 70 65 0a Data Ascii: invalid consent type

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49811	52.223.40.198	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:42 UTC	639	OUT	GET /track/cmf/generic?ttd_pid=1h1y1a7&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:42 UTC	500	IN	HTTP/1.1 302 Found Date: Tue, 10 Sep 2024 16:10:42 GMT Content-Length: 209 Connection: close server: Kestrel location: https://match.adsrvr.org/track/cmb/generic?ttd_pid=1h1y1a7&ttd_tpi=1&gdpr=0&gdpr_consent= set-cookie: TDID=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d; expires=Wed, 10 Sep 2025 16:10:42 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSgCMgsIlvG_nLvvqD0QBTgB; expires=Wed, 10 Sep 2025 16:10:42 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-09-10 16:10:42 UTC	209	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 31 68 31 79 31 61 37 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 63 6d 62 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 31 68 31 79 31 61 37 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://match.adsrvr.org/track/cmb/generic?ttd_pid=1h1y1a7&ttd_tpi=1&gdpr=0&gdpr_consent=">https://match.adsrvr.org/track/cmb/generic?ttd_pid=1h1y1a7&ttd_tpi=1&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49813	18.184.216.10	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:42 UTC	616	OUT	GET /pixel?pid=1mpb5m0&t=gif&gdpr=0&gdpr_consent= HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:42 UTC	720	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: mako_uid=191dcb39652-58e00000010f4c67; Domain=eyeota.net; Path=/; Expires=Wed, 10 Sep 2025 16:10:42 GMT; Secure; SameSite=None; Set-Cookie: SERVERID=19559~DM; Domain=eyeota.net; Path=/; Expires=Tue, 10 Sep 2024 16:20:42 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: /pixel/bounce/?pid=1mpb5m0&t=gif&gdpr=0&gdpr_consent= Content-Length: 0 Date: Tue, 10 Sep 2024 16:10:42 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.5	49815	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:42 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1725984606895&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-09-10 16:10:42 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-09-10 16:10:42 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49816	3.120.214.218	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:42 UTC	726	OUT	GET /pixel/bounce/?gdpr=0&gdpr_consent=&pid=3b2cb90&t=gif&uid=1b06b4f8f0e4d452 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=191dcb394a5-46de0000010f4e56; SERVERID=20054~DM
2024-09-10 16:10:43 UTC	620	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=20054~DM; Domain=eyeota.net; Path=/; Expires=Tue, 10 Sep 2024 16:20:43 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://cm.g.doubleclick.net/pixel?google_nid=eye&google_cm&google_sc&google_hm=MlJSR0VDcmVKNWE0ZTNlTHRoeUVZaTdqYXVaOFFQMmg4VVlubjJhNmhLdFU&gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&dc_rc=1&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 Content-Length: 0 Date: Tue, 10 Sep 2024 16:10:43 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49819	35.244.174.68	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:43 UTC	617	OUT	GET /395886.gif?partner_uid=3646915315069091854 HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:43 UTC	711	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://idsync.rlcdn.com/1000.gif?memo=CO6UGBIeChoIARCuXxoTMzY0NjkxNTMxNTA2OTA5MTg1NBAAGg0Ig9-BtwYSBQjoBxAAQgBKAA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=eoJsdBdMNcmD9f6en3GPUemBOgLNz1qh6LEZENe/0jM=; Path=/; Domain=rlcdn.com; Expires=Wed, 10 Sep 2025 16:10:43 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Sat, 09 Nov 2024 16:10:43 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Tue, 10 Sep 2024 16:10:43 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49820	52.223.40.198	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:43 UTC	726	OUT	GET /track/cmb/generic?ttd_pid=1h1y1a7&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d; TDCPM=CAEYBSgCMgsIlvG_nLvvqD0QBTgB
2024-09-10 16:10:43 UTC	507	IN	HTTP/1.1 302 Found Date: Tue, 10 Sep 2024 16:10:43 GMT Content-Length: 215 Connection: close server: Kestrel location: https://sync.sharethis.com/ttd?uid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d&gdpr=0&gdpr_consent= set-cookie: TDID=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d; expires=Wed, 10 Sep 2025 16:10:43 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAEYBSABKAIyCwiW8b-cu--oPRAFOAE.; expires=Wed, 10 Sep 2025 16:10:43 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-09-10 16:10:43 UTC	215	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 73 68 61 72 65 74 68 69 73 2e 63 6f 6d 2f 74 74 64 3f 75 69 64 3d 66 30 61 31 65 64 65 38 2d 37 64 36 64 2d 34 31 30 65 2d 61 31 61 62 2d 61 65 34 35 31 35 36 38 30 61 34 64 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 73 68 61 72 65 74 68 69 73 2e 63 6f 6d 2f 74 74 64 3f 75 69 64 3d 66 30 61 31 65 64 65 38 2d 37 64 36 64 2d 34 31 30 65 2d 61 31 61 62 2d 61 65 34 35 31 35 36 38 30 61 34 64 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://sync.sharethis.com/ttd?uid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d&gdpr=0&gdpr_consent=">https://sync.sharethis.com/ttd?uid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d&gdpr=0&gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49821	18.184.216.10	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:43 UTC	690	OUT	GET /pixel/bounce/?pid=1mpb5m0&t=gif&gdpr=0&gdpr_consent= HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
2024-09-10 16:10:43 UTC	481	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=19559~DM; Domain=eyeota.net; Path=/; Expires=Tue, 10 Sep 2024 16:20:43 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://sync.sharethis.com/eyeota?uid=2zNGfM6M0n4nvawNYmpiYRMKrP1tNziyTM96hsIIdUZE&gdpr=0&gdpr_consent= Content-Length: 0 Date: Tue, 10 Sep 2024 16:10:43 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49818	54.77.7.79	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:43 UTC	404	OUT	GET /6/map HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131
2024-09-10 16:10:43 UTC	239	IN	HTTP/1.1 405 Method Not Allowed Date: Tue, 10 Sep 2024 16:10:43 GMT Content-Type: text/html;charset=iso-8859-1 Content-Length: 484 Connection: close Cache-Control: must-revalidate,no-cache,no-store Server: Jetty(9.4.38.v20210224)
2024-09-10 16:10:43 UTC	484	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 36 2f 6d 61 70 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 3e 53 54 41 54 55 53 3a 3c 2f 74 68 3e 3c 74 64 3e 34 30 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/6/map</td></tr><tr><th>STATUS:</th><td>40

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49824	35.244.174.68	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:43 UTC	734	OUT	GET /1000.gif?memo=CO6UGBIeChoIARCuXxoTMzY0NjkxNTMxNTA2OTA5MTg1NBAAGg0Ig9-BtwYSBQjoBxAAQgBKAA HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=eoJsdBdMNcmD9f6en3GPUemBOgLNz1qh6LEZENe/0jM=; pxrc=CAA=
2024-09-10 16:10:43 UTC	774	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://ml314.com/csync.ashx?fp=9ab07dfad034f7723914d4ce2ab29b55dbc36667c21b22244884257e4ed5b600f4cb09cee1a4f8eb&person_id=3646915315069091854&eid=50082 P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=eoJsdBdMNcmD9f6en3GPUemBOgLNz1qh6LEZENe/0jM=; Path=/; Domain=rlcdn.com; Expires=Wed, 10 Sep 2025 16:10:43 GMT; Secure; SameSite=None Set-Cookie: pxrc=CIPfgbcGEgUI6AcQABIFCNtOEAA=; Path=/; Domain=rlcdn.com; Expires=Sat, 09 Nov 2024 16:10:43 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Tue, 10 Sep 2024 16:10:43 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49823	142.250.186.98	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:43 UTC	807	OUT	GET /pixel?google_nid=eye&google_cm&google_sc&google_hm=MlJSR0VDcmVKNWE0ZTNlTHRoeUVZaTdqYXVaOFFQMmg4VVlubjJhNmhLdFU&gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&dc_rc=1&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:44 UTC	973	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://cm.g.doubleclick.net/pixel?google_nid=eye&google_cm=&google_sc=&google_hm=MlJSR0VDcmVKNWE0ZTNlTHRoeUVZaTdqYXVaOFFQMmg4VVlubjJhNmhLdFU&gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&dc_rc=1&dc_mr=5&dc_orig=3b2cb90&referrer_pid=3b2cb90&google_tc= Date: Tue, 10 Sep 2024 16:10:44 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 503 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 10-Sep-2024 16:25:44 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-10 16:10:44 UTC	417	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 65 79 65 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 6d 3d 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 73 63 3d 26 61 6d 70 3b 67 6f 6f Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://cm.g.doubleclick.net/pixel?google_nid=eye&google_cm=&google_sc=&goo
2024-09-10 16:10:44 UTC	86	IN	Data Raw: 70 3b 64 63 5f 6f 72 69 67 3d 33 62 32 63 62 39 30 26 61 6d 70 3b 72 65 66 65 72 72 65 72 5f 70 69 64 3d 33 62 32 63 62 39 30 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 74 63 3d 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: p;dc_orig=3b2cb90&referrer_pid=3b2cb90&google_tc=">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49822	3.71.234.132	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:44 UTC	694	OUT	GET /ttd?uid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZHkABGbgb30AAAAIC72MAw==; __stidv=2
2024-09-10 16:10:44 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 10 Sep 2024 16:10:44 GMT Stid: ZHkABGbgb30AAAAIC72MAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-09-10 16:10:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49826	34.117.77.79	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:44 UTC	734	OUT	GET /csync.ashx?fp=9ab07dfad034f7723914d4ce2ab29b55dbc36667c21b22244884257e4ed5b600f4cb09cee1a4f8eb&person_id=3646915315069091854&eid=50082 HTTP/1.1 Host: ml314.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pi=3646915315069091854
2024-09-10 16:10:44 UTC	267	IN	HTTP/1.1 200 OK content-type: image/gif expires: Wed, 11 Sep 2024 16:10:44 GMT date: Tue, 10 Sep 2024 16:10:44 GMT server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-09-10 16:10:44 UTC	54	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2bGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49825	3.71.234.132	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:44 UTC	705	OUT	GET /eyeota?uid=2zNGfM6M0n4nvawNYmpiYRMKrP1tNziyTM96hsIIdUZE&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://t.sharethis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZHkABGbgb30AAAAIC72MAw==; __stidv=2
2024-09-10 16:10:44 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 10 Sep 2024 16:10:44 GMT Stid: ZHkABGbgb30AAAAIC72MAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-09-10 16:10:44 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49827	142.250.186.98	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:44 UTC	859	OUT	GET /pixel?google_nid=eye&google_cm=&google_sc=&google_hm=MlJSR0VDcmVKNWE0ZTNlTHRoeUVZaTdqYXVaOFFQMmg4VVlubjJhNmhLdFU&gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&dc_rc=1&dc_mr=5&dc_orig=3b2cb90&referrer_pid=3b2cb90&google_tc= HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-09-10 16:10:45 UTC	1073	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://ps.eyeota.net/match?gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&dc_rc=1&dc_mr=5&dc_orig=3b2cb90&referrer_pid=3b2cb90&google_gid=CAESEApLpYBv_zenZq4oueaADl8&google_cver=1 Date: Tue, 10 Sep 2024 16:10:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 419 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUk-Gebn0Hd5mLGjhQdfrUeXXyHSeZ6OCbnE3ZI6fFtZ_Zt63_b5z9KX7UCjPZo; expires=Thu, 10-Sep-2026 16:10:45 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-10 16:10:45 UTC	317	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 70 73 2e 65 79 65 6f 74 61 2e 6e 65 74 2f 6d 61 74 63 68 3f 67 64 70 72 3d 30 26 61 6d 70 3b 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 26 61 6d 70 3b 75 69 64 3d 31 26 61 6d 70 3b 62 69 64 3d 67 64 6f 39 6f 35 31 26 61 6d 70 3b 6e 65 77 75 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://ps.eyeota.net/match?gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newu
2024-09-10 16:10:45 UTC	102	IN	Data Raw: 5f 70 69 64 3d 33 62 32 63 62 39 30 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 67 69 64 3d 43 41 45 53 45 41 70 4c 70 59 42 76 5f 7a 65 6e 5a 71 34 6f 75 65 61 41 44 6c 38 26 61 6d 70 3b 67 6f 6f 67 6c 65 5f 63 76 65 72 3d 31 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: _pid=3b2cb90&google_gid=CAESEApLpYBv_zenZq4oueaADl8&google_cver=1">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49828	3.71.234.132	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:45 UTC	459	OUT	GET /ttd?uid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZHkABGbgb30AAAAIC72MAw==; __stidv=2
2024-09-10 16:10:45 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 10 Sep 2024 16:10:45 GMT Stid: ZHkABGbgb30AAAAIC72MAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-09-10 16:10:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49830	34.117.77.79	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:45 UTC	499	OUT	GET /csync.ashx?fp=9ab07dfad034f7723914d4ce2ab29b55dbc36667c21b22244884257e4ed5b600f4cb09cee1a4f8eb&person_id=3646915315069091854&eid=50082 HTTP/1.1 Host: ml314.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pi=3646915315069091854
2024-09-10 16:10:45 UTC	267	IN	HTTP/1.1 200 OK content-type: image/gif expires: Wed, 11 Sep 2024 16:10:45 GMT date: Tue, 10 Sep 2024 16:10:45 GMT server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-09-10 16:10:45 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-09-10 16:10:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49832	3.71.234.132	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:45 UTC	470	OUT	GET /eyeota?uid=2zNGfM6M0n4nvawNYmpiYRMKrP1tNziyTM96hsIIdUZE&gdpr=0&gdpr_consent= HTTP/1.1 Host: sync.sharethis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __stid=ZHkABGbgb30AAAAIC72MAw==; __stidv=2
2024-09-10 16:10:45 UTC	250	IN	HTTP/1.1 200 OK Content-Type: image/gif Date: Tue, 10 Sep 2024 16:10:45 GMT Stid: ZHkABGbgb30AAAAIC72MAw== Strict-Transport-Security: max-age=63072000; includeSubDomains; X-Robots-Tag: noindex, nofollow Content-Length: 42 Connection: Close
2024-09-10 16:10:45 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49833	3.120.214.218	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:45 UTC	813	OUT	GET /match?gdpr=0&gdpr_consent=&uid=1&bid=gdo9o51&newuser=1&dc_rc=1&dc_mr=5&dc_orig=3b2cb90&referrer_pid=3b2cb90&google_gid=CAESEApLpYBv_zenZq4oueaADl8&google_cver=1 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
2024-09-10 16:10:46 UTC	567	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=19559~DM; Domain=eyeota.net; Path=/; Expires=Tue, 10 Sep 2024 16:20:46 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://d.turn.com/r/dd/id/L2NzaWQvMS9jaWQvMjg0NTA1NDYvdC8w/url/https://ps.eyeota.net/match?bid=1mpjpn0&turn_id=$!{TURN_UUID}&newuser=1&dc_rc=2&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 Content-Length: 0 Date: Tue, 10 Sep 2024 16:10:46 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49835	199.232.192.193	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:46 UTC	596	OUT	GET /NIXl8QH.jpg HTTP/1.1 Host: i.imgur.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:46 UTC	726	IN	HTTP/1.1 200 OK Connection: close Content-Length: 121151 Content-Type: image/jpeg Last-Modified: Fri, 05 Aug 2022 08:11:46 GMT ETag: "dc530487a5baa6ffefecfd4883f67576" X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: YyHUzCmARgHhuMhncnYQl9eTPxvOcA7Cupte0_MKBES4KUgnsqSg3A== cache-control: public, max-age=31536000 Accept-Ranges: bytes Age: 381174 Date: Tue, 10 Sep 2024 16:10:46 GMT X-Served-By: cache-iad-kiad7000020-IAD, cache-ewr-kewr1740026-EWR X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 1153, 0 X-Timer: S1725984646.392027,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-09-10 16:10:46 UTC	1371	IN	Data Raw: ff d8 ff ee 00 0e 41 64 6f 62 65 00 64 00 00 00 00 01 ff db 00 43 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff db 00 43 01 07 07 07 0d 0c 0d 18 10 10 18 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 02 d0 05 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 ff c4 00 56 10 00 01 03 03 02 04 02 05 07 06 0c 04 05 02 04 07 01 00 02 03 04 05 11 06 21 07 12 31 41 13 51 08 22 32 61 71 14 17 55 81 91 93 d1 15 Data Ascii: AdobedCCV!1AQ"2aqU
2024-09-10 16:10:46 UTC	1371	IN	Data Raw: 97 17 0d b9 5d a4 ac 73 b6 e5 64 8e 32 39 bf da 2a ab 1e 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 82 2d 38 70 24 64 03 9c 20 de 75 1d 35 b5 f6 9a 1b 9d b4 11 4a 62 6c 75 03 ca 6e e1 79 f2 c3 cb b7 1e 6d 36 4f 68 ae 98 b7 92 4e cb 4c 29 95 5c aa 0a a3 7e e0 ab 8b 75 ac 18 19 25 8e 18 fa 95 8c e4 f5 f5 8e 9f e4 94 5e 2b 9b eb bc 6c 8e 5b 69 bc 75 ba fe 47 e1 cc b3 07 62 a2 aa 63 16 3b e0 b5 24 6b 0a f1 b1 24 92 4f 53 b9 51 d5 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 15 60 19 76 7c 95 4a 8c d2 12 79 50 91 4b 3b 61 45 41 01 01 01 01 04 41 c2 06 4a 1a 4c d7 10 51 2c 57 6b 44 83 1e 7d 15 65 6e e6 96 b8 b4 f5 0a 36 95 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 04 4a d8 61 40 0a 88 a0 Data Ascii: ]sd29*-8p$d u5Jblunym6OhNL)\~u%^+l[iuGbc;$k$OSQ`v\|JyPK;aEAAJLQ,WkD}en6Ja@
2024-09-10 16:10:46 UTC	1371	IN	Data Raw: de 80 1c fd 4a c7 29 1e 45 f4 85 bc 8b 8e be a8 63 1d 96 53 0f 0f eb 1b 25 ae b8 47 30 51 b1 01 01 01 01 01 01 01 01 01 01 01 01 01 01 04 47 54 15 5f b3 47 bd 11 45 14 40 40 40 40 40 40 40 40 41 73 4a a3 35 71 20 e7 8d cd 56 23 1e 46 0e 11 b4 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 4c ba 20 a2 8a 82 82 55 04 50 10 41 01 40 54 14 04 04 04 04 04 04 04 04 05 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 06 d7 c3 78 1c fd 43 1c dc b9 6c 40 92 7b 23 39 57 51 b8 06 c9 4c 5f e7 95 96 6b 0b 6e 9a 8e 8f c5 ad aa 68 73 61 e8 d3 dd 79 7a ac ae b5 1f 73 f0 bc 58 65 9f 76 5e a3 71 d3 ba 92 df 79 b1 d6 38 81 1b 23 69 1c bd 17 c8 e4 c6 cb e5 fb fe 9b 93 1c f1 97 1f 4e 5d 56 d8 64 aa 94 c6 7d 5e 63 8c fc 57 Data Ascii: J)EcS%G0QGT_GE@@@@@@@@AsJ5q V#FL UPA@TxCl@{#9WQL_knhsayzsXev^qy8#iN]Vd}^cW
2024-09-10 16:10:46 UTC	1371	IN	Data Raw: cc 00 30 94 65 49 1a 41 01 01 01 01 01 01 01 01 04 cd ea 11 17 22 41 d0 22 2a 31 c4 15 65 44 95 de b7 2b bc b6 45 91 66 a3 42 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 09 97 54 14 05 41 4d 02 28 82 0a 08 a0 82 82 08 08 08 08 22 82 08 09 a0 40 50 14 05 41 01 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 41 bb 70 fa a9 d4 4d a8 9e a1 a4 51 9e af f7 e1 70 e6 e5 93 c7 db df d2 7e 3f 2e 5f 37 fc 59 4b 8e b0 ac ad 6f c9 28 58 5b 10 27 1e f5 e4 ce db e6 bf 41 d3 70 e3 87 8c 27 75 61 9d 45 52 fe 67 4b 07 ae 7b ae 7d f2 7a af 67 f1 f2 be f1 52 36 87 3f af aa af cf a6 2f e3 fb bf d2 66 58 c7 30 cb b2 3b a5 ea 1a c7 f1 71 5e a6 c3 0b e3 06 1f d1 bc 2c 61 d4 dd f9 75 e6 fc 56 16 7f 5f eb 56 2c b7 54 c6 fe 47 fa ed f2 Data Ascii: 0eIA"A"*1eD+EfBTAM("@PA@@@@@@@@@@@@@@@@@@@@@@ApMQp~?._7YKo(X['Ap'uaERgK{}zgR6?/fX0;q^,auV_V,TG
2024-09-10 16:10:46 UTC	1371	IN	Data Raw: a0 2a 0a 69 44 82 09 a4 45 14 50 10 10 10 41 40 c2 a0 7a 20 61 41 04 d0 20 20 20 28 08 08 08 08 0a 02 a0 a0 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 da 34 46 92 aa bc 57 b2 67 b0 b6 86 13 cd 2c a7 a6 dd 97 9b a9 e7 98 4f f6 fb 5f 88 fc 66 7d 46 72 eb fa 47 4b bd d7 d1 31 a2 96 90 35 ac 60 e5 18 f7 0c 2f 89 e6 dd d7 f4 6b d9 86 33 1c 5a ac f5 31 47 93 23 c0 fa d7 5c 71 b5 e0 cf 9b 1c 7d d5 93 af 14 20 e0 ca 17 49 c1 97 e9 e4 cb f2 3c 53 ed 4d f7 9a 32 31 1c 99 2b 5f 06 4c 5f c9 71 5f 55 6b 51 a8 a1 84 61 be b3 97 4c 3a 5b 5e 4e 7f cc e1 c7 eb cd 61 ea 6f f5 b5 0f e5 61 e5 07 b0 5e bc 3a 6c 71 f6 f8 5c ff 00 99 e5 e4 ba c7 c2 a3 29 2a 64 60 73 a4 dc ac dc f1 8e 98 71 72 67 37 6b 77 e1 af 08 b5 56 b3 b9 b2 3a 4c b2 85 8e 1e 3d 41 f6 43 7b ac 65 c9 8e 99 Data Ascii: iDEPA@z aA ( 4FWg,O_f}FrGK15`/k3Z1G#\q} I<SM21+_L_q_UkQaL:[^Naoa^:lq\)d`sqrg7kwV:L=AC{e
2024-09-10 16:10:46 UTC	1371	IN	Data Raw: 54 04 10 40 40 40 40 50 10 10 10 10 10 14 04 04 04 04 04 04 04 04 04 04 04 04 04 15 62 81 ce 1c ee 04 46 3a b9 4b 5d 30 e3 b7 cf d2 79 aa 9c e6 88 98 4b 62 1d 1a 3b fc 54 98 fd d6 f3 e6 ba ed 9f e2 b7 5a 70 45 04 10 45 04 10 47 19 38 08 36 2b 64 46 3a 66 82 37 3d 57 87 9b 2d d7 e9 3a 0e 3e dc 1d 27 82 76 aa 7b 86 bd a2 86 76 87 31 ae 0e c1 f3 07 2b cd 9d f0 f5 f3 5d 63 7f fc 7a a3 59 dd bc 0a a1 10 76 03 1a 00 6a f2 e5 96 eb f2 be eb 9a ea 2b eb 1f 1b f9 dd 81 8c 0f 8a 93 17 58 e5 77 8b d5 40 95 cc 2e 2e 00 ec bd 18 63 1b 92 b5 6b 9d ce 60 49 e6 dc ae d3 16 a4 6b f5 15 b3 4b 90 e7 1c 2e 93 15 5b b3 27 ba db 51 55 b9 69 05 bd 41 ca ca b7 5d 35 78 e7 8c 53 ca 73 8e 99 5c b2 c4 d3 63 60 7c 32 07 34 e1 a5 73 62 b2 f4 85 b5 38 89 bf c6 f5 39 f2 59 ac f6 a8 5c Data Ascii: T@@@@PbF:K]0yKb;TZpEEG86+dF:f7=W-:>'v{v1+]czYvj+Xw@..ck`IkK.['QUiA]5xSs\c`\|24sb89Y\
2024-09-10 16:10:46 UTC	1371	IN	Data Raw: 05 a6 11 ff 00 c4 7e 0b 9f c1 8b d3 fc fe 45 48 38 65 a2 60 99 93 45 6c 89 92 30 87 35 c1 a3 39 1f 52 7c 18 a5 eb b9 2c d3 39 53 68 b6 d5 01 e3 d3 b2 4e 51 80 48 ec ad e0 c7 f4 f2 f7 d6 2a af 40 e9 4a b3 99 a8 23 77 d4 3f 05 3e 0c 56 72 58 b3 3c 29 d0 64 e4 da a2 27 fb a3 f0 57 e1 c5 af 96 a1 f3 4f a0 7e 89 87 f6 47 e0 9f 0e 27 cb 92 23 85 3a 08 7f e9 30 fe c8 fc 13 e2 87 cd 91 f3 53 a0 be 89 87 f6 47 e0 9f 14 5f 9f 24 5b c2 bd 08 de 96 a8 7f 64 7e 09 f0 e2 9f 36 48 fc d6 e8 4e f6 98 4f ff 00 11 f8 27 c3 8a fc f9 2a c5 c3 6d 15 13 71 1d aa 16 8f 73 42 7c 38 a7 cd 92 f6 9b 47 e9 ba 68 8c 51 50 c4 18 7b 72 84 f8 71 67 e4 ab 96 e9 fb 2b 63 f0 c5 1c 7c 9e 5c a1 4f 83 14 ef a9 0e 99 b0 9e b4 31 7e c8 57 e1 c4 ef ab 5b 96 89 d3 97 08 44 15 14 8c f0 47 58 c0 00 Data Ascii: ~EH8e`El059R\|,9ShNQH@J#w?>VrX<)d'WO~G'#:0SG_$[d~6HNO'mqsB\|8GhQP{rqg+c\|\O1~W[DGX
2024-09-10 16:10:46 UTC	1371	IN	Data Raw: 55 d2 55 50 f7 05 74 26 12 bf cd 34 0e 71 7b 70 ee 89 da 8a 2e 84 76 53 b5 ad a4 2c 03 cd 3b 4d 9c a1 3b 43 94 27 68 72 b5 3b 61 b4 39 42 76 9b 47 94 27 69 b0 b4 27 6c 36 87 28 4e d3 68 f2 b5 3b 4d a1 80 9d a6 d1 e5 6a 76 c3 67 2b 53 b6 1b 39 5a 9d b0 da 1c ad 4e d8 6c e5 09 da 6d 1e 50 9d a6 ce 50 9d b0 d9 ca d4 ed 81 ca d4 ed 86 ce 50 9d a1 ca d4 ed 81 ca df 34 ed 0e 56 fb d3 b6 07 2b 7d e9 db 03 95 a9 da 1c ad 4e d0 e5 6a 76 c3 67 2b 53 b6 1b 39 5a 9d a6 d5 17 44 0a 01 44 41 15 14 05 04 3a a0 20 20 20 20 20 20 82 08 a0 20 20 81 40 08 08 05 03 ba 02 01 41 04 04 11 40 41 04 04 04 11 41 04 04 17 36 fb 8d 5d ba ad 95 94 72 3a 2a 88 ce 59 23 76 20 a0 da 7e 77 f8 86 00 02 f5 53 b7 f6 ca 6c 3e 77 f8 89 f4 dd 4f ed 94 d8 7c ef f1 13 e9 ba 9f db 28 69 33 38 c1 Data Ascii: UUPt&4q{p.vS,;M;C'hr;a9BvG'i'l6(Nh;Mjvg+S9ZNlmPPP4V+}Njvg+S9ZDDA: @A@AA6]r:*Y#v ~wSl>wO\|(i38
2024-09-10 16:10:46 UTC	1371	IN	Data Raw: 40 41 33 7a 14 ab 08 ff 00 8c 0a 42 ab 4b bc df b9 54 4b 2b fd 5c 7d a8 aa 40 65 00 ec 81 d5 10 c2 2a a4 6d d9 66 b5 8c 4e a3 68 3b a2 25 51 2b 4e 60 c8 39 08 2e 1b 2f 33 40 77 55 1b 91 11 82 80 71 e6 88 88 03 cd 34 6d 50 4b 1b 5b b9 ca 69 36 a4 ea c6 fe a8 44 53 7d 5c ae 18 ce 02 0a 5c ce 3d 4a 35 b4 dd 46 7b a2 99 c8 f7 a8 aa 8c dc 25 6a 26 03 19 f2 51 a5 29 15 8c 64 a6 b6 e2 20 22 88 82 02 28 80 88 22 88 08 82 02 02 02 28 80 88 22 88 08 08 82 02 28 80 88 20 20 20 20 20 20 20 8a 80 3a a2 b3 94 6c e5 a7 00 fc 56 99 55 71 ce c8 2c 2e 87 d4 01 2a b1 8a 02 28 82 28 88 20 28 a2 02 02 20 8a 2a 08 0a 20 80 aa a2 4e 14 12 92 80 80 a0 20 20 2a 08 26 54 02 22 39 41 36 50 45 01 00 14 11 44 42 46 fa b9 45 52 45 10 11 0c 20 22 a0 a0 22 22 aa 9d d1 0c 22 88 1d 94 10 Data Ascii: @A3zBKTK+\}@emfNh;%Q+N`9./3@wUq4mPK[i6DS}\\=J5F{%j&Q)d "("("( :lVUq,.(( ( * N *&T"9A6PEDBFERE """"
2024-09-10 16:10:46 UTC	1371	IN	Data Raw: 17 c1 51 24 12 7f 19 13 8b 1f f1 69 c1 5a 44 88 2a 53 d3 d4 54 ca 22 a7 89 d3 48 e3 80 d6 02 4f fa 22 ba 8e 95 f4 69 e2 76 a2 a5 65 5c 34 8d a6 a6 7e e1 f5 0e f0 c9 f8 02 a6 c6 e7 17 a1 b6 b2 31 13 25 5c 02 4e c0 3c 61 37 0d 30 57 bf 44 be 27 5b e2 7c f4 f1 c3 57 1b 01 25 b1 bc 17 60 7b 93 70 d3 91 dd ec 37 7b 3d 53 e9 ae 34 b2 53 c8 c3 83 ce d2 df de a8 b0 50 15 04 44 d1 c7 24 8f 0c 89 85 ef 3d 1a d1 92 8a e8 da 37 d1 fb 89 1a ae 9d b5 54 34 3e 0d 31 ff 00 cd a8 3e 18 ff 00 f8 b0 a0 df a9 7d 0d b5 ab a3 cd 45 55 3b 1f e4 1e 0a 6e 0c 6d db d1 0b 89 54 b1 ba 4a 33 4f 52 1a 33 c8 d9 07 31 f8 04 b6 0e 47 a8 b4 86 a2 d3 b5 6f a5 ba d1 4b 04 8c 24 17 39 a4 37 23 de 83 0e 0a a0 83 a2 68 2e 03 eb cd 73 68 75 da c7 1c 2e a3 6b cc 65 d2 c8 18 79 87 5e aa 51 b1 cb Data Ascii: Q$iZD*ST"HO"ive\4~1%\N<a70WD'[\|W%`{p7{=S4SPD$=7T4>1>}EU;nmTJ3OR31GoK$97#h.shu.key^Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49836	46.228.164.13	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:46 UTC	754	OUT	GET /r/dd/id/L2NzaWQvMS9jaWQvMjg0NTA1NDYvdC8w/url/https://ps.eyeota.net/match?bid=1mpjpn0&turn_id=$!{TURN_UUID}&newuser=1&dc_rc=2&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 HTTP/1.1 Host: d.turn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:47 UTC	554	IN	HTTP/1.1 302 p3p: policyref="/w3c/p3p.xml", CP="NOI CURa DEVa TAIa PSAa PSDa IVAa IVDa OUR IND UNI NAV" cache-control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 pragma: no-cache set-cookie: uid=9140754838064038298; Domain=.turn.com; Expires=Sun, 09-Mar-2025 16:10:47 GMT; Path=/; Secure; SameSite=None location: https://ps.eyeota.net/match?bid=1mpjpn0&turn_id=9140754838064038298&newuser=1&dc_rc=2&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 content-length: 0 date: Tue, 10 Sep 2024 16:10:46 GMT connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49838	199.232.192.193	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:47 UTC	346	OUT	GET /NIXl8QH.jpg HTTP/1.1 Host: i.imgur.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:47 UTC	726	IN	HTTP/1.1 200 OK Connection: close Content-Length: 121151 Content-Type: image/jpeg Last-Modified: Fri, 05 Aug 2022 08:11:46 GMT ETag: "dc530487a5baa6ffefecfd4883f67576" X-Amz-Cf-Pop: IAD12-P4 X-Amz-Cf-Id: YyHUzCmARgHhuMhncnYQl9eTPxvOcA7Cupte0_MKBES4KUgnsqSg3A== cache-control: public, max-age=31536000 Accept-Ranges: bytes Date: Tue, 10 Sep 2024 16:10:47 GMT Age: 381174 X-Served-By: cache-iad-kiad7000020-IAD, cache-ewr-kewr1740032-EWR X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 1153, 1 X-Timer: S1725984647.229679,VS0,VE3 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-09-10 16:10:47 UTC	1371	IN	Data Raw: ff d8 ff ee 00 0e 41 64 6f 62 65 00 64 00 00 00 00 01 ff db 00 43 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff db 00 43 01 07 07 07 0d 0c 0d 18 10 10 18 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 02 d0 05 00 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 00 07 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 ff c4 00 56 10 00 01 03 03 02 04 02 05 07 06 0c 04 05 02 04 07 01 00 02 03 04 05 11 06 21 07 12 31 41 13 51 08 22 32 61 71 14 17 55 81 91 93 d1 15 Data Ascii: AdobedCCV!1AQ"2aqU
2024-09-10 16:10:47 UTC	1371	IN	Data Raw: 97 17 0d b9 5d a4 ac 73 b6 e5 64 8e 32 39 bf da 2a ab 1e 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 82 2d 38 70 24 64 03 9c 20 de 75 1d 35 b5 f6 9a 1b 9d b4 11 4a 62 6c 75 03 ca 6e e1 79 f2 c3 cb b7 1e 6d 36 4f 68 ae 98 b7 92 4e cb 4c 29 95 5c aa 0a a3 7e e0 ab 8b 75 ac 18 19 25 8e 18 fa 95 8c e4 f5 f5 8e 9f e4 94 5e 2b 9b eb bc 6c 8e 5b 69 bc 75 ba fe 47 e1 cc b3 07 62 a2 aa 63 16 3b e0 b5 24 6b 0a f1 b1 24 92 4f 53 b9 51 d5 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 04 15 60 19 76 7c 95 4a 8c d2 12 79 50 91 4b 3b 61 45 41 01 01 01 01 04 41 c2 06 4a 1a 4c d7 10 51 2c 57 6b 44 83 1e 7d 15 65 6e e6 96 b8 b4 f5 0a 36 95 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 04 4a d8 61 40 0a 88 a0 Data Ascii: ]sd29*-8p$d u5Jblunym6OhNL)\~u%^+l[iuGbc;$k$OSQ`v\|JyPK;aEAAJLQ,WkD}en6Ja@
2024-09-10 16:10:47 UTC	1371	IN	Data Raw: de 80 1c fd 4a c7 29 1e 45 f4 85 bc 8b 8e be a8 63 1d 96 53 0f 0f eb 1b 25 ae b8 47 30 51 b1 01 01 01 01 01 01 01 01 01 01 01 01 01 01 04 47 54 15 5f b3 47 bd 11 45 14 40 40 40 40 40 40 40 40 41 73 4a a3 35 71 20 e7 8d cd 56 23 1e 46 0e 11 b4 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 10 4c ba 20 a2 8a 82 82 55 04 50 10 41 01 40 54 14 04 04 04 04 04 04 04 04 05 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 06 d7 c3 78 1c fd 43 1c dc b9 6c 40 92 7b 23 39 57 51 b8 06 c9 4c 5f e7 95 96 6b 0b 6e 9a 8e 8f c5 ad aa 68 73 61 e8 d3 dd 79 7a ac ae b5 1f 73 f0 bc 58 65 9f 76 5e a3 71 d3 ba 92 df 79 b1 d6 38 81 1b 23 69 1c bd 17 c8 e4 c6 cb e5 fb fe 9b 93 1c f1 97 1f 4e 5d 56 d8 64 aa 94 c6 7d 5e 63 8c fc 57 Data Ascii: J)EcS%G0QGT_GE@@@@@@@@AsJ5q V#FL UPA@TxCl@{#9WQL_knhsayzsXev^qy8#iN]Vd}^cW
2024-09-10 16:10:47 UTC	1371	IN	Data Raw: cc 00 30 94 65 49 1a 41 01 01 01 01 01 01 01 01 04 cd ea 11 17 22 41 d0 22 2a 31 c4 15 65 44 95 de b7 2b bc b6 45 91 66 a3 42 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 09 97 54 14 05 41 4d 02 28 82 0a 08 a0 82 82 08 08 08 08 22 82 08 09 a0 40 50 14 05 41 01 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 40 41 bb 70 fa a9 d4 4d a8 9e a1 a4 51 9e af f7 e1 70 e6 e5 93 c7 db df d2 7e 3f 2e 5f 37 fc 59 4b 8e b0 ac ad 6f c9 28 58 5b 10 27 1e f5 e4 ce db e6 bf 41 d3 70 e3 87 8c 27 75 61 9d 45 52 fe 67 4b 07 ae 7b ae 7d f2 7a af 67 f1 f2 be f1 52 36 87 3f af aa af cf a6 2f e3 fb bf d2 66 58 c7 30 cb b2 3b a5 ea 1a c7 f1 71 5e a6 c3 0b e3 06 1f d1 bc 2c 61 d4 dd f9 75 e6 fc 56 16 7f 5f eb 56 2c b7 54 c6 fe 47 fa ed f2 Data Ascii: 0eIA"A"*1eD+EfBTAM("@PA@@@@@@@@@@@@@@@@@@@@@@ApMQp~?._7YKo(X['Ap'uaERgK{}zgR6?/fX0;q^,auV_V,TG
2024-09-10 16:10:47 UTC	1371	IN	Data Raw: a0 2a 0a 69 44 82 09 a4 45 14 50 10 10 10 41 40 c2 a0 7a 20 61 41 04 d0 20 20 20 28 08 08 08 08 0a 02 a0 a0 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 da 34 46 92 aa bc 57 b2 67 b0 b6 86 13 cd 2c a7 a6 dd 97 9b a9 e7 98 4f f6 fb 5f 88 fc 66 7d 46 72 eb fa 47 4b bd d7 d1 31 a2 96 90 35 ac 60 e5 18 f7 0c 2f 89 e6 dd d7 f4 6b d9 86 33 1c 5a ac f5 31 47 93 23 c0 fa d7 5c 71 b5 e0 cf 9b 1c 7d d5 93 af 14 20 e0 ca 17 49 c1 97 e9 e4 cb f2 3c 53 ed 4d f7 9a 32 31 1c 99 2b 5f 06 4c 5f c9 71 5f 55 6b 51 a8 a1 84 61 be b3 97 4c 3a 5b 5e 4e 7f cc e1 c7 eb cd 61 ea 6f f5 b5 0f e5 61 e5 07 b0 5e bc 3a 6c 71 f6 f8 5c ff 00 99 e5 e4 ba c7 c2 a3 29 2a 64 60 73 a4 dc ac dc f1 8e 98 71 72 67 37 6b 77 e1 af 08 b5 56 b3 b9 b2 3a 4c b2 85 8e 1e 3d 41 f6 43 7b ac 65 c9 8e 99 Data Ascii: iDEPA@z aA ( 4FWg,O_f}FrGK15`/k3Z1G#\q} I<SM21+_L_q_UkQaL:[^Naoa^:lq\)d`sqrg7kwV:L=AC{e
2024-09-10 16:10:47 UTC	1371	IN	Data Raw: 54 04 10 40 40 40 40 50 10 10 10 10 10 14 04 04 04 04 04 04 04 04 04 04 04 04 04 15 62 81 ce 1c ee 04 46 3a b9 4b 5d 30 e3 b7 cf d2 79 aa 9c e6 88 98 4b 62 1d 1a 3b fc 54 98 fd d6 f3 e6 ba ed 9f e2 b7 5a 70 45 04 10 45 04 10 47 19 38 08 36 2b 64 46 3a 66 82 37 3d 57 87 9b 2d d7 e9 3a 0e 3e dc 1d 27 82 76 aa 7b 86 bd a2 86 76 87 31 ae 0e c1 f3 07 2b cd 9d f0 f5 f3 5d 63 7f fc 7a a3 59 dd bc 0a a1 10 76 03 1a 00 6a f2 e5 96 eb f2 be eb 9a ea 2b eb 1f 1b f9 dd 81 8c 0f 8a 93 17 58 e5 77 8b d5 40 95 cc 2e 2e 00 ec bd 18 63 1b 92 b5 6b 9d ce 60 49 e6 dc ae d3 16 a4 6b f5 15 b3 4b 90 e7 1c 2e 93 15 5b b3 27 ba db 51 55 b9 69 05 bd 41 ca ca b7 5d 35 78 e7 8c 53 ca 73 8e 99 5c b2 c4 d3 63 60 7c 32 07 34 e1 a5 73 62 b2 f4 85 b5 38 89 bf c6 f5 39 f2 59 ac f6 a8 5c Data Ascii: T@@@@PbF:K]0yKb;TZpEEG86+dF:f7=W-:>'v{v1+]czYvj+Xw@..ck`IkK.['QUiA]5xSs\c`\|24sb89Y\
2024-09-10 16:10:47 UTC	1371	IN	Data Raw: 05 a6 11 ff 00 c4 7e 0b 9f c1 8b d3 fc fe 45 48 38 65 a2 60 99 93 45 6c 89 92 30 87 35 c1 a3 39 1f 52 7c 18 a5 eb b9 2c d3 39 53 68 b6 d5 01 e3 d3 b2 4e 51 80 48 ec ad e0 c7 f4 f2 f7 d6 2a af 40 e9 4a b3 99 a8 23 77 d4 3f 05 3e 0c 56 72 58 b3 3c 29 d0 64 e4 da a2 27 fb a3 f0 57 e1 c5 af 96 a1 f3 4f a0 7e 89 87 f6 47 e0 9f 0e 27 cb 92 23 85 3a 08 7f e9 30 fe c8 fc 13 e2 87 cd 91 f3 53 a0 be 89 87 f6 47 e0 9f 14 5f 9f 24 5b c2 bd 08 de 96 a8 7f 64 7e 09 f0 e2 9f 36 48 fc d6 e8 4e f6 98 4f ff 00 11 f8 27 c3 8a fc f9 2a c5 c3 6d 15 13 71 1d aa 16 8f 73 42 7c 38 a7 cd 92 f6 9b 47 e9 ba 68 8c 51 50 c4 18 7b 72 84 f8 71 67 e4 ab 96 e9 fb 2b 63 f0 c5 1c 7c 9e 5c a1 4f 83 14 ef a9 0e 99 b0 9e b4 31 7e c8 57 e1 c4 ef ab 5b 96 89 d3 97 08 44 15 14 8c f0 47 58 c0 00 Data Ascii: ~EH8e`El059R\|,9ShNQH@J#w?>VrX<)d'WO~G'#:0SG_$[d~6HNO'mqsB\|8GhQP{rqg+c\|\O1~W[DGX
2024-09-10 16:10:47 UTC	1371	IN	Data Raw: 55 d2 55 50 f7 05 74 26 12 bf cd 34 0e 71 7b 70 ee 89 da 8a 2e 84 76 53 b5 ad a4 2c 03 cd 3b 4d 9c a1 3b 43 94 27 68 72 b5 3b 61 b4 39 42 76 9b 47 94 27 69 b0 b4 27 6c 36 87 28 4e d3 68 f2 b5 3b 4d a1 80 9d a6 d1 e5 6a 76 c3 67 2b 53 b6 1b 39 5a 9d b0 da 1c ad 4e d8 6c e5 09 da 6d 1e 50 9d a6 ce 50 9d b0 d9 ca d4 ed 81 ca d4 ed 86 ce 50 9d a1 ca d4 ed 81 ca df 34 ed 0e 56 fb d3 b6 07 2b 7d e9 db 03 95 a9 da 1c ad 4e d0 e5 6a 76 c3 67 2b 53 b6 1b 39 5a 9d a6 d5 17 44 0a 01 44 41 15 14 05 04 3a a0 20 20 20 20 20 20 82 08 a0 20 20 81 40 08 08 05 03 ba 02 01 41 04 04 11 40 41 04 04 04 11 41 04 04 17 36 fb 8d 5d ba ad 95 94 72 3a 2a 88 ce 59 23 76 20 a0 da 7e 77 f8 86 00 02 f5 53 b7 f6 ca 6c 3e 77 f8 89 f4 dd 4f ed 94 d8 7c ef f1 13 e9 ba 9f db 28 69 33 38 c1 Data Ascii: UUPt&4q{p.vS,;M;C'hr;a9BvG'i'l6(Nh;Mjvg+S9ZNlmPPP4V+}Njvg+S9ZDDA: @A@AA6]r:*Y#v ~wSl>wO\|(i38
2024-09-10 16:10:47 UTC	1371	IN	Data Raw: 40 41 33 7a 14 ab 08 ff 00 8c 0a 42 ab 4b bc df b9 54 4b 2b fd 5c 7d a8 aa 40 65 00 ec 81 d5 10 c2 2a a4 6d d9 66 b5 8c 4e a3 68 3b a2 25 51 2b 4e 60 c8 39 08 2e 1b 2f 33 40 77 55 1b 91 11 82 80 71 e6 88 88 03 cd 34 6d 50 4b 1b 5b b9 ca 69 36 a4 ea c6 fe a8 44 53 7d 5c ae 18 ce 02 0a 5c ce 3d 4a 35 b4 dd 46 7b a2 99 c8 f7 a8 aa 8c dc 25 6a 26 03 19 f2 51 a5 29 15 8c 64 a6 b6 e2 20 22 88 82 02 28 80 88 22 88 08 82 02 02 02 28 80 88 22 88 08 08 82 02 28 80 88 20 20 20 20 20 20 20 8a 80 3a a2 b3 94 6c e5 a7 00 fc 56 99 55 71 ce c8 2c 2e 87 d4 01 2a b1 8a 02 28 82 28 88 20 28 a2 02 02 20 8a 2a 08 0a 20 80 aa a2 4e 14 12 92 80 80 a0 20 20 2a 08 26 54 02 22 39 41 36 50 45 01 00 14 11 44 42 46 fa b9 45 52 45 10 11 0c 20 22 a0 a0 22 22 aa 9d d1 0c 22 88 1d 94 10 Data Ascii: @A3zBKTK+\}@emfNh;%Q+N`9./3@wUq4mPK[i6DS}\\=J5F{%j&Q)d "("("( :lVUq,.(( ( * N *&T"9A6PEDBFERE """"
2024-09-10 16:10:47 UTC	1371	IN	Data Raw: 17 c1 51 24 12 7f 19 13 8b 1f f1 69 c1 5a 44 88 2a 53 d3 d4 54 ca 22 a7 89 d3 48 e3 80 d6 02 4f fa 22 ba 8e 95 f4 69 e2 76 a2 a5 65 5c 34 8d a6 a6 7e e1 f5 0e f0 c9 f8 02 a6 c6 e7 17 a1 b6 b2 31 13 25 5c 02 4e c0 3c 61 37 0d 30 57 bf 44 be 27 5b e2 7c f4 f1 c3 57 1b 01 25 b1 bc 17 60 7b 93 70 d3 91 dd ec 37 7b 3d 53 e9 ae 34 b2 53 c8 c3 83 ce d2 df de a8 b0 50 15 04 44 d1 c7 24 8f 0c 89 85 ef 3d 1a d1 92 8a e8 da 37 d1 fb 89 1a ae 9d b5 54 34 3e 0d 31 ff 00 cd a8 3e 18 ff 00 f8 b0 a0 df a9 7d 0d b5 ab a3 cd 45 55 3b 1f e4 1e 0a 6e 0c 6d db d1 0b 89 54 b1 ba 4a 33 4f 52 1a 33 c8 d9 07 31 f8 04 b6 0e 47 a8 b4 86 a2 d3 b5 6f a5 ba d1 4b 04 8c 24 17 39 a4 37 23 de 83 0e 0a a0 83 a2 68 2e 03 eb cd 73 68 75 da c7 1c 2e a3 6b cc 65 d2 c8 18 79 87 5e aa 51 b1 cb Data Ascii: Q$iZD*ST"HO"ive\4~1%\N<a70WD'[\|W%`{p7{=S4SPD$=7T4>1>}EU;nmTJ3OR31GoK$97#h.shu.key^Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49839	3.120.214.218	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:47 UTC	762	OUT	GET /match?bid=1mpjpn0&turn_id=9140754838064038298&newuser=1&dc_rc=2&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
2024-09-10 16:10:48 UTC	584	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=19559~DM; Domain=eyeota.net; Path=/; Expires=Tue, 10 Sep 2024 16:20:48 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://sync-tm.everesttech.net/upi/pid/lons7jax?redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fuid%3D%24%7BTM_USER_ID%7D%26bid%3D0rijhbu%26dc_rc%3D3%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90 Content-Length: 0 Date: Tue, 10 Sep 2024 16:10:48 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49842	3.120.214.218	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:50 UTC	768	OUT	GET /match?uid=ZuBviAABs8yDBgAa&bid=0rijhbu&dc_rc=3&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90&_test=ZuBviAABs8yDBgAa HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
2024-09-10 16:10:50 UTC	544	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=19559~DM; Domain=eyeota.net; Path=/; Expires=Tue, 10 Sep 2024 16:20:50 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://ib.adnxs.com/getuid?https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fuid%3D%24UID%26bid%3D2cr76e1%26dc_rc%3D4%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90 Content-Length: 0 Date: Tue, 10 Sep 2024 16:10:50 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49843	185.89.210.244	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:51 UTC	731	OUT	GET /getuid?https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fuid%3D%24UID%26bid%3D2cr76e1%26dc_rc%3D4%26dc_mr%3D5%26dc_orig%3D3b2cb90%26%26referrer_pid%3D3b2cb90 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:52 UTC	1583	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Tue, 10 Sep 2024 16:10:52 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fps.eyeota.net%252Fmatch%253Fuid%253D%2524UID%2526bid%253D2cr76e1%2526dc_rc%253D4%2526dc_mr%253D5%2526dc_orig%253D3b2cb90%2526%2526referrer_pid%253D3b2cb90 AN-X-Request-Uuid: 1b8094e9-83eb-40a8-b1ad-7771585d3e5d Set-Cookie: XANDR_PANID=AGe-chE4gIXCHkuKkLW3ZzUyy0dGVvapTwn6CdVHqWe5yMCgGOxHNpePXVMQldz3xAm-WOL542kLUQGvZmXeINxLYdxevZUFkhuKMwn6pHk.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 09-Dec-2024 16:10:51 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 29-Aug-2034 16:10:51 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=5768470956374677316; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 09-Dec-2024 16:10:51 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.33; 8.46.123.33; 946.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49845	18.202.126.138	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:52 UTC	741	OUT	GET /5/c=5436/tp=SVRN/tpid=na/pv=y?https%3A%2F%2Fce.lijit.com%2Fmerge%3Fpid%3D5001%263pid%3D%24%7Bprofile_id%7D HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pxdrop.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131
2024-09-10 16:10:52 UTC	1027	IN	HTTP/1.1 302 Found Date: Tue, 10 Sep 2024 16:10:52 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.30.60 Set-Cookie: _cc_id=3bdb359c63037044d87658cfcb77131;Path=/;Domain=crwdcntrl.net;Expires=Sat, 07-Jun-2025 16:06:00 GMT;SameSite=None;Secure Set-Cookie: _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BT3f%2Fv%2F%2Fz88AA7z3Plgy7dFi%2BM%2FIuL0eRDL82DiFBVVk%2BZ9CVIFzRw8xo4rs3ndZAFXk8OI5aMa0r3vKjSrS8F8TVeDJ45uGqCL3urRQBS6desSGKvJuCbpNb2YeYEIVAQAwK2BU";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Sat, 07-Jun-2025 16:06:00 GMT;Max-Age=23328000;SameSite=None;Secure Set-Cookie: _cc_aud="ABR4nGNgYGBIe5DfwwADrAwMXDNADEat2RBqFojic3cAUfw6%2B4EkAKzGBgM%3D";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Sat, 07-Jun-2025 16:06:00 GMT;Max-Age=23328000;SameSite=None;Secure Location: https://ce.lijit.com/merge?pid=5001&3pid=3bdb359c63037044d87658cfcb77131 Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49844	52.85.49.17	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:52 UTC	810	OUT	GET /profiles_engine/ProfilesEngineServlet?at=15&eid=19&aw=468&ah=60&pagePos=1&vip=true&secure=1&sub_eid=15052&maxed=1&rnd=1725984650877 HTTP/1.1 Host: api.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://pxdrop.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:52 UTC	949	IN	HTTP/1.1 200 Content-Type: text/html Transfer-Encoding: chunked Connection: close Date: Tue, 10 Sep 2024 16:10:52 GMT Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Thu, 10 Sep 2026 16:10:52 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Access-Control-Allow-Origin: https://pxdrop.lijit.com/ Vary: Origin Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Max-Age: 3600 Access-Control-Allow-Headers: Content-Type, Accept, X-Requested-With, remember-me, DNT,X-CustomHeader,Keep-Alive,User-Agent,If-Modified-Since,Cache-Control Content-Disposition: inline X-Cache: Miss from cloudfront Via: 1.1 a875698e08bcdc7b13c04786dfe3a1ac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: HEL50-C2 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: 84XgON3aZ4nkcCIN6UNUsaGCgktbdvWsI0WLL39iIhMaORJdAOIL-w==
2024-09-10 16:10:52 UTC	352	IN	Data Raw: 31 35 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 63 6f 6e 73 74 20 73 63 72 69 70 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 73 63 72 69 70 74 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 61 67 65 6e 74 2e 69 6e 74 65 6e 74 69 71 2e 63 6f 6d 2f 41 67 65 6e 74 2f 48 69 6e 74 73 2f 49 49 51 55 6e 69 76 65 72 73 61 6c 49 44 2d 73 79 6e 63 2e 6a 73 27 3b 73 63 72 69 70 74 2e 61 73 79 6e 63 3d 74 72 75 65 3b 73 63 72 69 70 74 2e 64 65 66 65 72 3d 74 72 75 65 3b 73 63 72 69 70 74 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 69 6e 74 65 6e 74 49 71 5f 31 38 32 37 37 32 39 39 35 3d 6e 65 77 20 49 6e 74 65 Data Ascii: 159<!DOCTYPE html><html><body><script>const script=document.createElement('script');script.src='https://agent.intentiq.com/Agent/Hints/IIQUniversalID-sync.js';script.async=true;script.defer=true;script.onload=function(){const intentIq_182772995=new Inte
2024-09-10 16:10:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49847	3.212.66.47	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:52 UTC	628	OUT	GET /s/76929?bidder_id=204553&bidder_uuid=na&rnd=1725984650927 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pxdrop.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:52 UTC	474	IN	HTTP/1.1 303 See Other Date: Tue, 10 Sep 2024 16:10:52 GMT Content-Length: 0 Connection: close Location: /s/76929?bidder_id=204553&bidder_uuid=na&rnd=1725984650927&_li_chk=true&previous_uuid=90fc4aa8e5c94ce0a7cc9ff564524752 Set-Cookie: lidid=90fc4aa8-e5c9-4ce0-a7cc-9ff564524752; Max-Age=63072000; Expires=Thu, 10 Sep 2026 16:10:52 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49850	3.221.132.94	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:52 UTC	604	OUT	GET /sync/1540_03681?id=na HTTP/1.1 Host: track2.securedvisit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pxdrop.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:52 UTC	212	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:10:52 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx/1.24.0 Cache-Control: private, no-cache, proxy-revalidate Pragma: no-cache
2024-09-10 16:10:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49849	34.195.102.92	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:52 UTC	601	OUT	GET /sync?vxii_pid=7002&vxii_pdid=na HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pxdrop.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:52 UTC	533	IN	HTTP/1.1 302 Found Date: Tue, 10 Sep 2024 16:10:52 GMT Content-Type: text/html; charset=utf-8 Content-Length: 174 Connection: close Location: https://thrtle.com/sync?_reach=1&vxii_pdid=na&vxii_pid=12&vxii_pid1=7002&vxii_rcid=bb6d1780-42bc-4797-8768-f25b0bae1973&vxii_rmax=1 P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6ImJiNmQxNzgwLTQyYmMtNDc5Ny04NzY4LWYyNWIwYmFlMTk3MyIsImwiOjE3MjU5ODQ2NTI3NzgsInQiOjF9; Path=/; Domain=thrtle.com; Expires=Tue, 10 Sep 2024 16:10:52 GMT; Max-Age=17280000; Secure; SameSite=None
2024-09-10 16:10:52 UTC	174	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 68 72 74 6c 65 2e 63 6f 6d 2f 73 79 6e 63 3f 5f 72 65 61 63 68 3d 31 26 61 6d 70 3b 76 78 69 69 5f 70 64 69 64 3d 6e 61 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 3d 31 32 26 61 6d 70 3b 76 78 69 69 5f 70 69 64 31 3d 37 30 30 32 26 61 6d 70 3b 76 78 69 69 5f 72 63 69 64 3d 62 62 36 64 31 37 38 30 2d 34 32 62 63 2d 34 37 39 37 2d 38 37 36 38 2d 66 32 35 62 30 62 61 65 31 39 37 33 26 61 6d 70 3b 76 78 69 69 5f 72 6d 61 78 3d 31 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://thrtle.com/sync?_reach=1&vxii_pdid=na&vxii_pid=12&vxii_pid1=7002&vxii_rcid=bb6d1780-42bc-4797-8768-f25b0bae1973&vxii_rmax=1">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49852	185.89.210.244	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:52 UTC	966	OUT	GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fps.eyeota.net%252Fmatch%253Fuid%253D%2524UID%2526bid%253D2cr76e1%2526dc_rc%253D4%2526dc_mr%253D5%2526dc_orig%253D3b2cb90%2526%2526referrer_pid%253D3b2cb90 HTTP/1.1 Host: ib.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=AGe-chE4gIXCHkuKkLW3ZzUyy0dGVvapTwn6CdVHqWe5yMCgGOxHNpePXVMQldz3xAm-WOL542kLUQGvZmXeINxLYdxevZUFkhuKMwn6pHk.; receive-cookie-deprecation=1; uuid2=5768470956374677316
2024-09-10 16:10:53 UTC	1480	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Tue, 10 Sep 2024 16:10:52 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://ps.eyeota.net/match?uid=5768470956374677316&bid=2cr76e1&dc_rc=4&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 AN-X-Request-Uuid: bd4d3d07-6aec-45a0-8f39-72deccd45e4c Set-Cookie: XANDR_PANID=AGe-chE4gIXCHkuKkLW3ZzUyy0dGVvapTwn6CdVHqWe5yMCgGOxHNpePXVMQldz3xAm-WOL542kLUQGvZmXeINxLYdxevZUFkhuKMwn6pHk.; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 09-Dec-2024 16:10:52 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Tue, 29-Aug-2034 16:10:52 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=5768470956374677316; SameSite=None; Path=/; Max-Age=7776000; Expires=Mon, 09-Dec-2024 16:10:52 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 8.46.123.33; 8.46.123.33; 946.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49853	34.243.51.30	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:53 UTC	650	OUT	GET /merge?pid=5&3pid=1qan3v856tzbu&us_privacy=$(US_PRIVACY) HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pxdrop.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lijitAcc3PC=1
2024-09-10 16:10:53 UTC	569	IN	HTTP/1.1 302 Found Date: Tue, 10 Sep 2024 16:10:53 GMT Content-Length: 0 Connection: close Vary: Accept-Encoding Set-Cookie: ljt_reader=JTyKAQZH4g9W4GFYRPmN1ske; Path=/; Domain=.lijit.com; Expires=Wed, 10 Sep 2025 16:10:53 GMT; Max-Age=31536000;Secure;SameSite=None Expires: Fri, 20 Mar 2009 00:00:00 GMT Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Location: https://ce.lijit.com/merge?pid=5&3pid=1qan3v856tzbu&us_privacy=%24%28US_PRIVACY%29&dnr=1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49856	3.212.66.47	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:53 UTC	740	OUT	GET /s/76929?bidder_id=204553&bidder_uuid=na&rnd=1725984650927&_li_chk=true&previous_uuid=90fc4aa8e5c94ce0a7cc9ff564524752 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pxdrop.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=90fc4aa8-e5c9-4ce0-a7cc-9ff564524752
2024-09-10 16:10:53 UTC	555	IN	HTTP/1.1 303 See Other Date: Tue, 10 Sep 2024 16:10:53 GMT Content-Length: 0 Connection: close Location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=liveintent&ttd_tpi=1&gdpr=0 Set-Cookie: _li_ss=CgcKBQgKEOwY; Max-Age=2592000; Expires=Thu, 10 Oct 2024 16:10:53 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=90fc4aa8-e5c9-4ce0-a7cc-9ff564524752; Max-Age=63072000; Expires=Thu, 10 Sep 2026 16:10:53 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 4 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49857	34.195.102.92	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:53 UTC	787	OUT	GET /sync?_reach=1&vxii_pdid=na&vxii_pid=12&vxii_pid1=7002&vxii_rcid=bb6d1780-42bc-4797-8768-f25b0bae1973&vxii_rmax=1 HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pxdrop.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6ImJiNmQxNzgwLTQyYmMtNDc5Ny04NzY4LWYyNWIwYmFlMTk3MyIsImwiOjE3MjU5ODQ2NTI3NzgsInQiOjF9
2024-09-10 16:10:53 UTC	801	IN	HTTP/1.1 302 Found Date: Tue, 10 Sep 2024 16:10:53 GMT Content-Type: text/html; charset=utf-8 Content-Length: 77 Connection: close Location: https://cms.analytics.yahoo.com/cms?partner_id=THROTLE P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6ImJiNmQxNzgwLTQyYmMtNDc5Ny04NzY4LWYyNWIwYmFlMTk3MyIsImwiOjE3MjU5ODQ2NTMzNzksInQiOjF9; Path=/; Domain=thrtle.com; Expires=Sat, 29 Mar 2025 16:10:53 GMT; Secure; SameSite=None Set-Cookie: sc=eyJpIjoiYmI2ZDE3ODAtNDJiYy00Nzk3LTg3NjgtZjI1YjBiYWUxOTczIiwic2lkIjoic2lkLTQxMDc4MjU0LTZmOGYtMTFlZi1hZmQ3LTAyNDIwYTAwMDRmMyIsIm1zIjoxLCJ0cyI6MSwicHMiOjEsInNwIjo1MDM4LCJwcCI6MSwidHNlIjoxLCJpciI6dHJ1ZSwibHRzZSI6MTcyNTk4NDY1MzM3OSwiXyI6dHJ1ZX0=; Path=/; Domain=thrtle.com; Expires=Sat, 29 Mar 2025 16:10:53 GMT; Max-Age=17280000; Secure; SameSite=None
2024-09-10 16:10:53 UTC	77	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 73 2e 61 6e 61 6c 79 74 69 63 73 2e 79 61 68 6f 6f 2e 63 6f 6d 2f 63 6d 73 3f 70 61 72 74 6e 65 72 5f 69 64 3d 54 48 52 4f 54 4c 45 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://cms.analytics.yahoo.com/cms?partner_id=THROTLE">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49854	34.243.51.30	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:53 UTC	646	OUT	GET /merge?pid=5001&3pid=3bdb359c63037044d87658cfcb77131 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pxdrop.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lijitAcc3PC=1
2024-09-10 16:10:53 UTC	559	IN	HTTP/1.1 302 Found Date: Tue, 10 Sep 2024 16:10:53 GMT Content-Length: 0 Connection: close Vary: Accept-Encoding Set-Cookie: ljt_reader=JTyKAQZHM4-7zcR_Qvazq_dw; Path=/; Domain=.lijit.com; Expires=Wed, 10 Sep 2025 16:10:53 GMT; Max-Age=31536000;Secure;SameSite=None Expires: Fri, 20 Mar 2009 00:00:00 GMT Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Location: https://ce.lijit.com/merge?pid=5001&3pid=3bdb359c63037044d87658cfcb77131&dnr=1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49858	34.232.35.140	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:53 UTC	368	OUT	GET /sync/1540_03681?id=na HTTP/1.1 Host: track2.securedvisit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:53 UTC	212	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:10:53 GMT Content-Type: image/gif Content-Length: 43 Connection: close Server: nginx/1.24.0 Cache-Control: private, no-cache, proxy-revalidate Pragma: no-cache
2024-09-10 16:10:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49859	18.239.69.119	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:53 UTC	570	OUT	GET /Agent/Hints/IIQUniversalID-sync.js HTTP/1.1 Host: agent.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://api.intentiq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IQver=1.9
2024-09-10 16:10:53 UTC	532	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 16600 Connection: close Last-Modified: Thu, 01 Aug 2024 16:29:32 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 10 Sep 2024 14:01:40 GMT ETag: "26a760eb1716cf6b311e16ed82d0eeb5" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 52565866975cd7c0daa261ea0388bad4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 X-Amz-Cf-Id: Rw3FEL-VjNpIzJalXWoHITf-XCsoKwzTl4jm_oGjqqJYxVYN4A54VA== Age: 7754
2024-09-10 16:10:53 UTC	16384	IN	Data Raw: 28 28 29 20 3d 3e 20 7b 20 76 61 72 20 69 20 3d 20 7b 20 64 3a 20 28 65 2c 20 74 29 20 3d 3e 20 7b 20 66 6f 72 20 28 76 61 72 20 72 20 69 6e 20 74 29 20 69 2e 6f 28 74 2c 20 72 29 20 26 26 20 21 69 2e 6f 28 65 2c 20 72 29 20 26 26 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 20 72 2c 20 7b 20 65 6e 75 6d 65 72 61 62 6c 65 3a 20 21 30 2c 20 67 65 74 3a 20 74 5b 72 5d 20 7d 29 20 7d 2c 20 6f 3a 20 28 65 2c 20 74 29 20 3d 3e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 20 74 29 20 7d 2c 20 65 20 3d 20 7b 7d 2c 20 74 20 3d 20 28 69 2e 64 28 65 2c 20 7b 20 64 65 66 61 75 6c 74 3a 20 28 29 20 3d 3e 20 75 20 7d 29 2c 20 7b 20 4a 53 3a 20 22 6a 73 22 2c 20 50 Data Ascii: (() => { var i = { d: (e, t) => { for (var r in t) i.o(t, r) && !i.o(e, r) && Object.defineProperty(e, r, { enumerable: !0, get: t[r] }) }, o: (e, t) => Object.prototype.hasOwnProperty.call(e, t) }, e = {}, t = (i.d(e, { default: () => u }), { JS: "js", P
2024-09-10 16:10:53 UTC	216	IN	Data Raw: 49 4e 54 53 5f 4b 45 59 2c 20 65 29 2c 20 6e 75 6c 6c 20 21 3d 20 28 65 20 3d 20 74 68 69 73 2e 73 79 6e 63 44 61 74 61 29 20 26 26 20 65 2e 72 65 71 75 65 73 74 20 26 26 20 74 68 69 73 2e 73 79 6e 63 44 61 74 61 2e 72 65 71 75 65 73 74 28 74 68 69 73 2e 63 6c 69 65 6e 74 48 69 6e 74 73 29 20 7d 29 20 3a 20 6e 75 6c 6c 20 21 3d 20 28 65 20 3d 20 74 68 69 73 2e 73 79 6e 63 44 61 74 61 29 20 26 26 20 65 2e 72 65 71 75 65 73 74 20 26 26 20 74 68 69 73 2e 73 79 6e 63 44 61 74 61 2e 72 65 71 75 65 73 74 28 29 20 7d 20 7d 20 74 68 69 73 2e 49 6e 74 65 6e 74 49 71 53 79 6e 63 4f 62 6a 65 63 74 20 3d 20 65 2e 64 65 66 61 75 6c 74 20 7d 29 28 29 3b Data Ascii: INTS_KEY, e), null != (e = this.syncData) && e.request && this.syncData.request(this.clientHints) }) : null != (e = this.syncData) && e.request && this.syncData.request() } } this.IntentIqSyncObject = e.default })();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49860	18.184.216.10	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:53 UTC	676	OUT	GET /pixel?pid=51md42u&t=ajs&e_pc=3&e_mr=0 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pxdrop.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
2024-09-10 16:10:54 UTC	403	IN	HTTP/1.1 200 OK Connection: close Set-Cookie: SERVERID=19559~DM; Domain=eyeota.net; Path=/; Expires=Tue, 10 Sep 2024 16:20:53 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Content-Type: application/javascript Content-Length: 517 Date: Tue, 10 Sep 2024 16:10:53 GMT
2024-09-10 16:10:54 UTC	517	IN	Data Raw: 28 6e 65 77 20 49 6d 61 67 65 28 29 29 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 5c 2f 5c 2f 6d 61 74 63 68 2e 61 64 73 72 76 72 2e 6f 72 67 5c 2f 74 72 61 63 6b 5c 2f 63 6d 66 5c 2f 67 65 6e 65 72 69 63 3f 74 74 64 5f 70 69 64 3d 65 79 65 6f 74 61 26 74 74 64 5f 74 70 69 3d 31 26 67 64 70 72 3d 30 26 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3b 28 6e 65 77 20 49 6d 61 67 65 28 29 29 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 5c 2f 5c 2f 64 6d 70 2e 61 64 66 6f 72 6d 2e 6e 65 74 5c 2f 73 65 72 76 69 6e 67 5c 2f 63 6f 6f 6b 69 65 5c 2f 6d 61 74 63 68 5c 2f 3f 70 61 72 74 79 3d 31 30 30 39 22 3b 28 6e 65 77 20 49 6d 61 67 65 28 29 29 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 5c 2f 5c 2f 73 79 6e 63 2e 73 72 76 2e 73 74 61 63 6b 61 64 61 70 74 2e 63 6f 6d 5c Data Ascii: (new Image()).src = "https:\/\/match.adsrvr.org\/track\/cmf\/generic?ttd_pid=eyeota&ttd_tpi=1&gdpr=0&gdpr_consent=";(new Image()).src = "https:\/\/dmp.adform.net\/serving\/cookie\/match\/?party=1009";(new Image()).src = "https:\/\/sync.srv.stackadapt.com\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49862	3.120.214.218	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:53 UTC	748	OUT	GET /match?uid=5768470956374677316&bid=2cr76e1&dc_rc=4&dc_mr=5&dc_orig=3b2cb90&&referrer_pid=3b2cb90 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
2024-09-10 16:10:54 UTC	461	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=19559~DM; Domain=eyeota.net; Path=/; Expires=Tue, 10 Sep 2024 16:20:53 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://ups.analytics.yahoo.com/ups/58773/cms?partner_id=Eyeot&gdpr=0&gdpr_consent= Content-Length: 0 Date: Tue, 10 Sep 2024 16:10:53 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49863	52.223.40.198	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:54 UTC	720	OUT	GET /track/cmf/generic?ttd_pid=liveintent&ttd_tpi=1&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pxdrop.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d; TDCPM=CAEYBSABKAIyCwiW8b-cu--oPRAFOAE.
2024-09-10 16:10:54 UTC	563	IN	HTTP/1.1 302 Found Date: Tue, 10 Sep 2024 16:10:54 GMT Content-Length: 215 Connection: close server: Kestrel location: https://i.liadm.com/s/35759?bidder_id=44489&bidder_uuid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d set-cookie: TDID=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d; expires=Wed, 10 Sep 2025 16:10:54 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGQoKbGl2ZWludGVudBILCPyA4t-l76g9EAUYASABKAIyCwjO9-SMvO-oPRAFOAFaCmxpdmVpbnRlbnRgAg..; expires=Wed, 10 Sep 2025 16:10:54 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-09-10 16:10:54 UTC	215	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 33 35 37 35 39 3f 62 69 64 64 65 72 5f 69 64 3d 34 34 34 38 39 26 62 69 64 64 65 72 5f 75 75 69 64 3d 66 30 61 31 65 64 65 38 2d 37 64 36 64 2d 34 31 30 65 2d 61 31 61 62 2d 61 65 34 35 31 35 36 38 30 61 34 64 22 3e 68 74 74 70 73 3a 2f 2f 69 2e 6c 69 61 64 6d 2e 63 6f 6d 2f 73 2f 33 35 37 35 39 3f 62 69 64 64 65 72 5f 69 64 3d 34 34 34 38 39 26 62 69 64 64 65 72 5f 75 75 69 64 3d 66 30 61 31 65 64 65 38 2d 37 64 36 64 2d 34 31 30 65 2d 61 31 61 62 2d 61 65 34 35 31 35 36 38 30 61 34 64 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://i.liadm.com/s/35759?bidder_id=44489&bidder_uuid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d">https://i.liadm.com/s/35759?bidder_id=44489&bidder_uuid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49864	3.75.62.37	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:54 UTC	605	OUT	GET /cms?partner_id=THROTLE HTTP/1.1 Host: cms.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pxdrop.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:54 UTC	274	IN	HTTP/1.1 302 Redirect Date: Tue, 10 Sep 2024 16:10:54 GMT Connection: close Server: ATS/9.1.10.137 Cache-Control: no-store Location: https://ups.analytics.yahoo.com/ups/58691/cms?partner_id=THROTLE Content-Type: text/html Content-Language: en Content-Length: 346
2024-09-10 16:10:54 UTC	346	IN	Data Raw: 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 77 68 69 74 65 22 20 46 47 43 4f 4c 4f 52 3d 22 62 6c 61 63 6b 22 3e 0a 3c 48 31 3e 44 6f 63 75 6d 65 6e 74 20 48 61 73 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 3c 48 52 3e 0a 0a 3c 46 4f 4e 54 20 46 41 43 45 3d 22 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 22 3e 3c 42 3e 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 79 6f 75 20 72 65 71 75 65 73 74 65 64 20 68 61 73 20 6d 6f 76 65 64 20 74 6f 20 61 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 2e 20 20 54 68 65 20 6e 65 77 20 6c 6f 63 61 74 69 6f 6e 20 69 73 20 22 68 Data Ascii: <HTML><HEAD><TITLE>Document Has Moved</TITLE></HEAD><BODY BGCOLOR="white" FGCOLOR="black"><H1>Document Has Moved</H1><HR><FONT FACE="Helvetica,Arial"><B>Description: The document you requested has moved to a new location. The new location is "h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49865	34.243.51.30	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:54 UTC	699	OUT	GET /merge?pid=5&3pid=1qan3v856tzbu&us_privacy=%24%28US_PRIVACY%29&dnr=1 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pxdrop.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lijitAcc3PC=1; ljt_reader=JTyKAQZH4g9W4GFYRPmN1ske
2024-09-10 16:10:54 UTC	634	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:10:54 GMT Content-Type: image/gif Content-Length: 43 Connection: close Vary: Accept-Encoding Set-Cookie: _ljtrtb_5=1qan3v856tzbu; Path=/; Domain=.lijit.com; Expires=Wed, 10 Sep 2025 16:10:54 GMT; Max-Age=31536000;Secure;SameSite=None Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: ljt_reader=JTyKAQZH4g9W4GFYRPmN1ske; Path=/; Domain=.lijit.com; Expires=Wed, 10 Sep 2025 16:10:54 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-09-10 16:10:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49867	34.243.51.30	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:54 UTC	689	OUT	GET /merge?pid=5001&3pid=3bdb359c63037044d87658cfcb77131&dnr=1 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pxdrop.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lijitAcc3PC=1; ljt_reader=JTyKAQZHM4-7zcR_Qvazq_dw
2024-09-10 16:10:54 UTC	655	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:10:54 GMT Content-Type: image/gif Content-Length: 43 Connection: close Vary: Accept-Encoding Set-Cookie: _ljtrtb_5001=3bdb359c63037044d87658cfcb77131; Path=/; Domain=.lijit.com; Expires=Wed, 10 Sep 2025 16:10:54 GMT; Max-Age=31536000;Secure;SameSite=None Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: ljt_reader=JTyKAQZHM4-7zcR_Qvazq_dw; Path=/; Domain=.lijit.com; Expires=Wed, 10 Sep 2025 16:10:54 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-09-10 16:10:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49872	3.212.66.47	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:54 UTC	716	OUT	GET /s/35759?bidder_id=44489&bidder_uuid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pxdrop.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=CgcKBQgKEOwY; lidid=90fc4aa8-e5c9-4ce0-a7cc-9ff564524752
2024-09-10 16:10:54 UTC	585	IN	HTTP/1.1 303 See Other Date: Tue, 10 Sep 2024 16:10:54 GMT Content-Length: 0 Connection: close Location: https://i6.liadm.com/s/35759?bidder_id=44489&bidder_uuid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d Set-Cookie: _li_ss=ChIKBQgKEOwYCgkI_____wcQ9hg; Max-Age=2592000; Expires=Thu, 10 Oct 2024 16:10:54 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=90fc4aa8-e5c9-4ce0-a7cc-9ff564524752; Max-Age=63072000; Expires=Thu, 10 Sep 2026 16:10:54 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 1 Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49868	3.75.62.37	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:54 UTC	648	OUT	GET /ups/58773/cms?partner_id=Eyeot&gdpr=0&gdpr_consent= HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:55 UTC	579	IN	HTTP/1.1 302 Found Date: Tue, 10 Sep 2024 16:10:54 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ups.analytics.yahoo.com/ups/58773/cms?partner_id=Eyeot&gdpr=0&gdpr_consent=&verify=true Age: 0 Connection: close Server: ATS/9.1.10.137 Set-Cookie: A3=d=AQABBI5v4GYCENH2dhjDonMGKosfW-g1qA4FEgEBAQHB4WbqZtxA0iMA_eMAAA&S=AQAAAjXPHqPvucJVUCdrrqu_DWY; Expires=Wed, 10 Sep 2025 22:10:54 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49871	143.204.98.21	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:54 UTC	395	OUT	GET /Agent/Hints/IIQUniversalID-sync.js HTTP/1.1 Host: agent.intentiq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IQver=1.9
2024-09-10 16:10:55 UTC	532	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 16600 Connection: close Last-Modified: Thu, 01 Aug 2024 16:29:32 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 10 Sep 2024 16:10:55 GMT ETag: "26a760eb1716cf6b311e16ed82d0eeb5" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 f6c241b75ae7d21ac836339454ab90b8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA50-C1 X-Amz-Cf-Id: I7Yx6_AArtIOuG67oEItAdRxkescim4MID8HF4zt9Sz5qQp4Kbqgnw== Age: 7756
2024-09-10 16:10:55 UTC	16384	IN	Data Raw: 28 28 29 20 3d 3e 20 7b 20 76 61 72 20 69 20 3d 20 7b 20 64 3a 20 28 65 2c 20 74 29 20 3d 3e 20 7b 20 66 6f 72 20 28 76 61 72 20 72 20 69 6e 20 74 29 20 69 2e 6f 28 74 2c 20 72 29 20 26 26 20 21 69 2e 6f 28 65 2c 20 72 29 20 26 26 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 20 72 2c 20 7b 20 65 6e 75 6d 65 72 61 62 6c 65 3a 20 21 30 2c 20 67 65 74 3a 20 74 5b 72 5d 20 7d 29 20 7d 2c 20 6f 3a 20 28 65 2c 20 74 29 20 3d 3e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 20 74 29 20 7d 2c 20 65 20 3d 20 7b 7d 2c 20 74 20 3d 20 28 69 2e 64 28 65 2c 20 7b 20 64 65 66 61 75 6c 74 3a 20 28 29 20 3d 3e 20 75 20 7d 29 2c 20 7b 20 4a 53 3a 20 22 6a 73 22 2c 20 50 Data Ascii: (() => { var i = { d: (e, t) => { for (var r in t) i.o(t, r) && !i.o(e, r) && Object.defineProperty(e, r, { enumerable: !0, get: t[r] }) }, o: (e, t) => Object.prototype.hasOwnProperty.call(e, t) }, e = {}, t = (i.d(e, { default: () => u }), { JS: "js", P
2024-09-10 16:10:55 UTC	216	IN	Data Raw: 49 4e 54 53 5f 4b 45 59 2c 20 65 29 2c 20 6e 75 6c 6c 20 21 3d 20 28 65 20 3d 20 74 68 69 73 2e 73 79 6e 63 44 61 74 61 29 20 26 26 20 65 2e 72 65 71 75 65 73 74 20 26 26 20 74 68 69 73 2e 73 79 6e 63 44 61 74 61 2e 72 65 71 75 65 73 74 28 74 68 69 73 2e 63 6c 69 65 6e 74 48 69 6e 74 73 29 20 7d 29 20 3a 20 6e 75 6c 6c 20 21 3d 20 28 65 20 3d 20 74 68 69 73 2e 73 79 6e 63 44 61 74 61 29 20 26 26 20 65 2e 72 65 71 75 65 73 74 20 26 26 20 74 68 69 73 2e 73 79 6e 63 44 61 74 61 2e 72 65 71 75 65 73 74 28 29 20 7d 20 7d 20 74 68 69 73 2e 49 6e 74 65 6e 74 49 71 53 79 6e 63 4f 62 6a 65 63 74 20 3d 20 65 2e 64 65 66 61 75 6c 74 20 7d 29 28 29 3b Data Ascii: INTS_KEY, e), null != (e = this.syncData) && e.request && this.syncData.request(this.clientHints) }) : null != (e = this.syncData) && e.request && this.syncData.request() } } this.IntentIqSyncObject = e.default })();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49870	18.165.140.91	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:54 UTC	833	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=182772995&iiqidtype=2&iiqpcid=820734d2-60db-e66e-29d4-41fda1749e8a&iiqpciddate=1725984653272&tsrnd=585_1725984653273&vrref=https%3A%2F%2Fpxdrop.lijit.com%2F&jsver=5.088&gdpr=0 HTTP/1.1 Host: sync.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://api.intentiq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IQver=1.9
2024-09-10 16:10:55 UTC	1161	IN	HTTP/1.1 302 Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 10 Sep 2024 16:10:55 GMT Patent: https://www.almondnet.com/ip Set-Cookie: intentIQ=84fU2HUVpr; Domain=.intentiq.com; Expires=Thu, 10 Sep 2026 16:10:55 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Thu, 10 Sep 2026 16:10:55 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Location: https://sync.intentiq.com/profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=182772995&iiqidtype=2&iiqpcid=820734d2-60db-e66e-29d4-41fda1749e8a&iiqpciddate=1725984653272&tsrnd=585_1725984653273&vrref=https%3A%2F%2Fpxdrop.lijit.com%2F&jsver=5.088&gdpr=&ckls=true&ci=84fU2HUVpr&nc=false&trid=314520096 Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT X-Cache: Miss from cloudfront Via: 1.1 8d774700accd819b20dfa986df336be2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: HEL51-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: UiLWJMAWZe389nE7VeX8j-OVmW5lJyQk411OSuSwFDJIDyynt29CbA==
2024-09-10 16:10:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49869	3.124.210.90	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:54 UTC	440	OUT	GET /pixel?pid=51md42u&t=ajs&e_pc=3&e_mr=0 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
2024-09-10 16:10:55 UTC	403	IN	HTTP/1.1 200 OK Connection: close Set-Cookie: SERVERID=19559~DM; Domain=eyeota.net; Path=/; Expires=Tue, 10 Sep 2024 16:20:54 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Content-Type: application/javascript Content-Length: 665 Date: Tue, 10 Sep 2024 16:10:54 GMT
2024-09-10 16:10:55 UTC	665	IN	Data Raw: 28 6e 65 77 20 49 6d 61 67 65 28 29 29 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 5c 2f 5c 2f 64 70 6d 2e 64 65 6d 64 65 78 2e 6e 65 74 5c 2f 69 62 73 3a 64 70 69 64 3d 33 30 30 36 34 26 64 70 75 75 69 64 3d 31 39 31 64 63 62 33 39 36 35 32 2d 35 38 65 30 30 30 30 30 30 31 30 66 34 63 36 37 26 72 65 64 69 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 70 73 2e 65 79 65 6f 74 61 2e 6e 65 74 25 32 46 6d 61 74 63 68 25 33 46 62 69 64 25 33 44 36 6a 35 62 32 63 76 25 32 36 75 69 64 25 33 44 25 32 34 25 37 42 44 44 5f 55 55 49 44 25 37 44 25 32 36 72 65 66 65 72 72 65 72 5f 70 69 64 25 33 44 35 31 6d 64 34 32 75 22 3b 28 6e 65 77 20 49 6d 61 67 65 28 29 29 2e 73 72 63 20 3d 20 22 68 74 74 70 73 3a 5c 2f 5c 2f 69 6d 61 67 65 36 2e 70 75 62 6d 61 74 69 63 2e 63 Data Ascii: (new Image()).src = "https:\/\/dpm.demdex.net\/ibs:dpid=30064&dpuuid=191dcb39652-58e00000010f4c67&redir=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D6j5b2cv%26uid%3D%24%7BDD_UUID%7D%26referrer_pid%3D51md42u";(new Image()).src = "https:\/\/image6.pubmatic.c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49873	3.75.62.37	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:55 UTC	615	OUT	GET /ups/58691/cms?partner_id=THROTLE HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pxdrop.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:55 UTC	560	IN	HTTP/1.1 302 Found Date: Tue, 10 Sep 2024 16:10:55 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ups.analytics.yahoo.com/ups/58691/cms?partner_id=THROTLE&verify=true Age: 0 Connection: close Server: ATS/9.1.10.137 Set-Cookie: A3=d=AQABBI9v4GYCEPMnfFxEes9LkDUaE6u1nB8FEgEBAQHB4WbqZtxA0iMA_eMAAA&S=AQAAAtOV8JsgcfZvfG_Sm56cLqc; Expires=Wed, 10 Sep 2025 22:10:55 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49874	63.34.80.245	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:55 UTC	488	OUT	GET /merge?pid=5&3pid=1qan3v856tzbu&us_privacy=%24%28US_PRIVACY%29&dnr=1 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lijitAcc3PC=1; _ljtrtb_5=1qan3v856tzbu; ljt_reader=JTyKAQZH4g9W4GFYRPmN1ske
2024-09-10 16:10:55 UTC	910	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:10:55 GMT Content-Type: image/gif Content-Length: 43 Connection: close Vary: Accept-Encoding Set-Cookie: _ljtrtb_5=1qan3v856tzbu; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: ljtrtb=eJyrVjJVslIyLEzMMy6zMDUrqUoqVaoFAEDsBnI%3D; Path=/; Domain=.lijit.com; Expires=Wed, 10 Sep 2025 16:10:55 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_5=1qan3v856tzbu; Path=/; Domain=.lijit.com; Expires=Wed, 10 Sep 2025 16:10:55 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=JTyKAQZH4g9W4GFYRPmN1ske; Path=/; Domain=.lijit.com; Expires=Wed, 10 Sep 2025 16:10:55 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-09-10 16:10:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49875	63.34.80.245	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:55 UTC	524	OUT	GET /merge?pid=5001&3pid=3bdb359c63037044d87658cfcb77131&dnr=1 HTTP/1.1 Host: ce.lijit.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lijitAcc3PC=1; _ljtrtb_5=1qan3v856tzbu; _ljtrtb_5001=3bdb359c63037044d87658cfcb77131; ljt_reader=JTyKAQZHM4-7zcR_Qvazq_dw
2024-09-10 16:10:55 UTC	1110	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:10:55 GMT Content-Type: image/gif Content-Length: 43 Connection: close Vary: Accept-Encoding Set-Cookie: _ljtrtb_5=1qan3v856tzbu; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Expires: Fri, 20 Mar 2009 00:00:00 GMT Set-Cookie: _ljtrtb_5001=3bdb359c63037044d87658cfcb77131; Expires=Thu, 01 Jan 1970 00:00:00 GMT; Max-Age=0;Secure;SameSite=None Set-Cookie: ljtrtb=eJyrVjI1MDBUslIyTkpJMja1TDYzNjA2NzAxSbEwNzO1SE5LTjI3NzQ2VNJRMgWqMixMzDMuszA1K6lKKlWqBQDeAxAn; Path=/; Domain=.lijit.com; Expires=Wed, 10 Sep 2025 16:10:55 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: _ljtrtb_5001=3bdb359c63037044d87658cfcb77131; Path=/; Domain=.lijit.com; Expires=Wed, 10 Sep 2025 16:10:55 GMT; Max-Age=31536000;Secure;SameSite=None Set-Cookie: ljt_reader=JTyKAQZHM4-7zcR_Qvazq_dw; Path=/; Domain=.lijit.com; Expires=Wed, 10 Sep 2025 16:10:55 GMT; Max-Age=31536000;Secure;SameSite=None Cache-Control: private, no-cache, no-store, must-revalidate, proxy-revalidate, max-age=0, s-maxage=0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID"
2024-09-10 16:10:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49877	3.214.14.27	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:55 UTC	696	OUT	GET /s/35759?bidder_id=44489&bidder_uuid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d HTTP/1.1 Host: i6.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pxdrop.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=90fc4aa8-e5c9-4ce0-a7cc-9ff564524752
2024-09-10 16:10:55 UTC	226	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:10:55 GMT Content-Type: image/gif Content-Length: 43 Connection: close Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-09-10 16:10:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49878	3.75.62.37	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:55 UTC	767	OUT	GET /ups/58773/cms?partner_id=Eyeot&gdpr=0&gdpr_consent=&verify=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBI5v4GYCENH2dhjDonMGKosfW-g1qA4FEgEBAQHB4WbqZtxA0iMA_eMAAA&S=AQAAAjXPHqPvucJVUCdrrqu_DWY
2024-09-10 16:10:56 UTC	743	IN	HTTP/1.1 302 Found Date: Tue, 10 Sep 2024 16:10:56 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=19cl~2kmg;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 10-Sep-2025 16:10:56 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://ps.eyeota.net/match?bid=bhc9gd0&yahoo_ver=2&yahoo_id=y-avDHyJhE2pU7_inbFoc6KAd_kDNVy9CkRxg-~A&gdpr=0 Age: 0 Connection: close Server: ATS/9.1.10.137 Set-Cookie: A3=d=AQABBI5v4GYCENH2dhjDonMGKosfW-g1qA4FEgEBAQHB4WbqZtxA0iMA_eMAAA&S=AQAAAjXPHqPvucJVUCdrrqu_DWY; Expires=Wed, 10 Sep 2025 22:10:56 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49879	3.75.62.37	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:56 UTC	734	OUT	GET /ups/58691/cms?partner_id=THROTLE&verify=true HTTP/1.1 Host: ups.analytics.yahoo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pxdrop.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: A3=d=AQABBI9v4GYCEPMnfFxEes9LkDUaE6u1nB8FEgEBAQHB4WbqZtxA0iMA_eMAAA&S=AQAAAtOV8JsgcfZvfG_Sm56cLqc
2024-09-10 16:10:56 UTC	727	IN	HTTP/1.1 302 Found Date: Tue, 10 Sep 2024 16:10:56 GMT Content-Length: 0 Strict-Transport-Security: max-age=31536000 Set-Cookie: IDSYNC=19ab~2kmg;Version=1;Domain=.analytics.yahoo.com;Path=/;Max-Age=31536000;Expires=Wed, 10-Sep-2025 16:10:56 GMT;Secure;SameSite=None P3P: CP=NOI DSP COR LAW CURa DEVa TAIa PSAa PSDa OUR BUS UNI COM NAV Location: https://thrtle.com/sync?vxii_pid=5038&vxii_pdid=y-aNlCHMZE2oRTc9CQhgWXt2sCk_2ZJ6aGgcRwmw--~A Age: 0 Connection: close Server: ATS/9.1.10.137 Set-Cookie: A3=d=AQABBI9v4GYCEPMnfFxEes9LkDUaE6u1nB8FEgEBAQHB4WbqZtxA0iMA_eMAAA&S=AQAAAtOV8JsgcfZvfG_Sm56cLqc; Expires=Wed, 10 Sep 2025 22:10:56 GMT; Max-Age=31557600; Domain=.yahoo.com; Path=/; SameSite=None; Secure; HttpOnly

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49880	18.165.140.91	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:56 UTC	901	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=182772995&iiqidtype=2&iiqpcid=820734d2-60db-e66e-29d4-41fda1749e8a&iiqpciddate=1725984653272&tsrnd=585_1725984653273&vrref=https%3A%2F%2Fpxdrop.lijit.com%2F&jsver=5.088&gdpr=&ckls=true&ci=84fU2HUVpr&nc=false&trid=314520096 HTTP/1.1 Host: sync.intentiq.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://api.intentiq.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IQver=1.9; intentIQ=84fU2HUVpr
2024-09-10 16:10:56 UTC	1593	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 10 Sep 2024 16:10:56 GMT Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: ASDT=0; Domain=.intentiq.com; Expires=Thu, 10 Sep 2026 16:10:56 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQPData=137263905#1725984656555#0#1725984656555; Domain=.intentiq.com; Expires=Thu, 10 Sep 2026 16:10:56 GMT; Path=/; Secure; SameSite=None Set-Cookie: CSDT=UEQ6MTEzMDRfMCZVTnpMaXNv; Domain=.intentiq.com; Expires=Thu, 10 Sep 2026 16:10:56 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQMID=137263905#1725984656574; Domain=.intentiq.com; Expires=Thu, 10 Oct 2024 16:10:56 GMT; Path=/; Secure; SameSite=None Set-Cookie: intentIQ=84fU2HUVpr; Domain=.intentiq.com; Expires=Thu, 10 Sep 2026 16:10:56 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Thu, 10 Sep 2026 16:10:56 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQadv=1725984656574; Domain=.intentiq.com; Expires=Thu, 10 Sep 2026 16:10:56 GMT; Path=/; Secure; SameSite=None Set-Cookie: intentIQCDate=1725984656561; Domain=.intentiq.com; Expires=Thu, 10 Sep 2026 16:10:56 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache X-Cache: Miss from cloudfront Via: 1.1 cb6a5ba9047e3da3c0956a96bd405d48.cloudfront.net (CloudFront) X-Amz-Cf-Pop: HEL51-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: jVnkUTbbADHXqZsxxieJxh3lBf93iRYbBLGYa4DPGGmpJMyJO-mWog==
2024-09-10 16:10:56 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49881	52.6.40.178	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:56 UTC	460	OUT	GET /s/35759?bidder_id=44489&bidder_uuid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d HTTP/1.1 Host: i6.liadm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: lidid=90fc4aa8-e5c9-4ce0-a7cc-9ff564524752
2024-09-10 16:10:56 UTC	226	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:10:56 GMT Content-Type: image/gif Content-Length: 43 Connection: close Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-09-10 16:10:56 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49883	34.195.102.92	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:56 UTC	993	OUT	GET /sync?vxii_pid=5038&vxii_pdid=y-aNlCHMZE2oRTc9CQhgWXt2sCk_2ZJ6aGgcRwmw--~A HTTP/1.1 Host: thrtle.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pxdrop.lijit.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6ImJiNmQxNzgwLTQyYmMtNDc5Ny04NzY4LWYyNWIwYmFlMTk3MyIsImwiOjE3MjU5ODQ2NTMzNzksInQiOjF9; sc=eyJpIjoiYmI2ZDE3ODAtNDJiYy00Nzk3LTg3NjgtZjI1YjBiYWUxOTczIiwic2lkIjoic2lkLTQxMDc4MjU0LTZmOGYtMTFlZi1hZmQ3LTAyNDIwYTAwMDRmMyIsIm1zIjoxLCJ0cyI6MSwicHMiOjEsInNwIjo1MDM4LCJwcCI6MSwidHNlIjoxLCJpciI6dHJ1ZSwibHRzZSI6MTcyNTk4NDY1MzM3OSwiXyI6dHJ1ZX0=
2024-09-10 16:10:57 UTC	663	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:10:57 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6ImJiNmQxNzgwLTQyYmMtNDc5Ny04NzY4LWYyNWIwYmFlMTk3MyIsImwiOjE3MjU5ODQ2NTcwMjgsInQiOjJ9; Path=/; Domain=thrtle.com; Expires=Sat, 29 Mar 2025 16:10:57 GMT; Secure; SameSite=None Set-Cookie: sc=eyJpIjoiYmI2ZDE3ODAtNDJiYy00Nzk3LTg3NjgtZjI1YjBiYWUxOTczIiwic2lkIjoic2lkLTQzMzQ0YTljLTZmOGYtMTFlZi05ZWQ0LTAyNDIwYTAwMDQyMiIsIm1zIjoxLCJwcyI6MSwic3AiOjUwMzgsInBwIjoxLCJ0c2UiOjEsImx0c2UiOjE3MjU5ODQ2NTMzNzl9; Path=/; Domain=thrtle.com; Expires=Sat, 29 Mar 2025 16:10:57 GMT; Secure; SameSite=None
2024-09-10 16:10:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49882	3.120.214.218	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:57 UTC	739	OUT	GET /match?bid=bhc9gd0&yahoo_ver=2&yahoo_id=y-avDHyJhE2pU7_inbFoc6KAd_kDNVy9CkRxg-~A&gdpr=0 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
2024-09-10 16:10:57 UTC	389	IN	HTTP/1.1 200 OK Connection: close Set-Cookie: SERVERID=19559~DM; Domain=eyeota.net; Path=/; Expires=Tue, 10 Sep 2024 16:20:57 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Content-Type: image/gif Content-Length: 70 Date: Tue, 10 Sep 2024 16:10:57 GMT
2024-09-10 16:10:57 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49884	18.239.69.3	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:57 UTC	835	OUT	GET /profiles_engine/ProfilesEngineServlet?at=20&mi=10&secure=1&dpi=182772995&iiqidtype=2&iiqpcid=820734d2-60db-e66e-29d4-41fda1749e8a&iiqpciddate=1725984653272&tsrnd=585_1725984653273&vrref=https%3A%2F%2Fpxdrop.lijit.com%2F&jsver=5.088&gdpr=&ckls=true&ci=84fU2HUVpr&nc=false&trid=314520096 HTTP/1.1 Host: sync.intentiq.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IQver=1.9; intentIQ=84fU2HUVpr; ASDT=0; IQPData=137263905#1725984656555#0#1725984656555; CSDT=UEQ6MTEzMDRfMCZVTnpMaXNv; IQMID=137263905#1725984656574; IQadv=1725984656574; intentIQCDate=1725984656561
2024-09-10 16:10:57 UTC	1460	IN	HTTP/1.1 200 Content-Type: image/gif Content-Length: 43 Connection: close Date: Tue, 10 Sep 2024 16:10:57 GMT Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: ASDT=0; Domain=.intentiq.com; Expires=Thu, 10 Sep 2026 16:10:57 GMT; Path=/; Secure; SameSite=None Set-Cookie: CSDT=UEQ6MTEzMDRfMCZVTnpMakFR; Domain=.intentiq.com; Expires=Thu, 10 Sep 2026 16:10:57 GMT; Path=/; Secure; SameSite=None Set-Cookie: intentIQ=84fU2HUVpr; Domain=.intentiq.com; Expires=Thu, 10 Sep 2026 16:10:57 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQPData=137263905#1725984657656#0#1725984656555; Domain=.intentiq.com; Expires=Thu, 10 Sep 2026 16:10:57 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQMID=137263905#1725984656574; Domain=.intentiq.com; Expires=Thu, 10 Oct 2024 16:10:57 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQadv=1725984656574; Domain=.intentiq.com; Expires=Thu, 10 Sep 2026 16:10:57 GMT; Path=/; Secure; SameSite=None Set-Cookie: IQver=1.9; Domain=.intentiq.com; Expires=Thu, 10 Sep 2026 16:10:57 GMT; Path=/; Secure; SameSite=None P3P: CP="NOI DSP COR NID CURa ADMo TAIa PSAo PSDo OUR SAMo BUS UNI PUR COM NAV INT DEM CNT STA PRE LOC" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache X-Cache: Miss from cloudfront Via: 1.1 c3d7a569db567dde78a645781f9949a2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: K1904MhsjQ6HloazaKvc7siC3tr2-094o1hCQamz0atL0oFj6M1JFA==
2024-09-10 16:10:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49888	199.232.192.193	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:57 UTC	596	OUT	GET /UtE9eZe.png HTTP/1.1 Host: i.imgur.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:57 UTC	725	IN	HTTP/1.1 200 OK Connection: close Content-Length: 108663 Content-Type: image/png Last-Modified: Sat, 11 Sep 2021 08:15:51 GMT ETag: "241d8e5f4e4a56d31060fd979fdec8c8" X-Amz-Cf-Pop: IAD89-P1 X-Amz-Cf-Id: BMwmr9lfyTTNTnGTxasuKHJGmkQkcBm0bm1LGgt75QefT9uisFI3RA== cache-control: public, max-age=31536000 Accept-Ranges: bytes Age: 1291450 Date: Tue, 10 Sep 2024 16:10:57 GMT X-Served-By: cache-iad-kiad7000145-IAD, cache-ewr-kewr1740053-EWR X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 371, 0 X-Timer: S1725984658.898550,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-09-10 16:10:57 UTC	1371	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e6 00 00 01 49 08 06 00 00 00 4e d9 8e f4 00 00 00 04 67 41 4d 41 00 00 b1 8e 7c fb 51 93 00 00 00 20 63 48 52 4d 00 00 7a 25 00 00 80 83 00 00 f9 ff 00 00 80 e9 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 6f 92 5f c5 46 00 01 a8 02 49 44 41 54 78 da ec bd 77 9c 5c 67 7d ef ff 7e 9e 53 a6 6e ef bb da 95 56 bd 5a d5 b6 6c d9 92 e5 5e 84 6d dc 68 86 80 a9 21 81 24 70 6f 2a f7 26 b9 24 37 21 37 21 a1 05 27 14 63 70 02 2e b8 f7 5e d4 7b af 2b 6d ef 7d fa cc 39 e7 79 7e 7f cc cc b2 92 0d 18 42 7e 09 e6 bc 5f af 95 56 ab d9 99 33 e7 9c 79 3e df ef f7 f9 16 a1 b5 c6 c7 c7 c7 c7 c7 c7 e7 bf 07 d2 3f 05 3e 3e 3e 3e 3e 3e be 30 fb f8 f8 f8 f8 f8 f8 f8 c2 ec e3 e3 e3 e3 e3 e3 0b b3 8f 8f 8f 8f 8f 8f 8f 2f cc Data Ascii: PNGIHDRINgAMA\|Q cHRMz%u0`:o_FIDATxw\g}~SnVZl^mh!$po*&$7!7!'cp.^{+m}9y~B~_V3y>?>>>>>>0/
2024-09-10 16:10:57 UTC	1371	IN	Data Raw: 1c 5e 50 5a 5a 7a c3 99 33 67 56 fc d5 5f fd 55 65 5f 5f 5f 73 36 9b 0d 0a 21 54 28 14 4a 56 57 57 0f 0f 0c 0c 8c 2e 5e bc 78 bb 65 59 0f 48 29 87 7e 55 de b6 61 18 18 86 f1 5f 7a 0e 85 10 58 96 c5 af d2 0b 95 52 52 5a 5a ba 7e ef de bd b7 1d 3c 78 b0 61 74 74 b4 6a 62 62 a2 2a 97 cb 05 0d c3 f0 4a 4a 4a 26 6a 6a 6a 86 6c db 1e 98 3d 7b f6 f3 c1 60 f0 05 20 0e e0 79 1e b6 6d 13 08 04 70 5d 37 b9 6e dd ba 6f 3e fb ec b3 b7 9f 3a 75 ca 3a 75 ea d4 85 c1 60 f0 c2 05 0b 16 7c b6 bb bb 7b 6b 4d 4d cd 4b 91 48 e4 df a4 94 1d fe a7 c1 c7 17 66 1f 9f ff 62 31 91 52 12 8d 46 d7 3c fd f4 d3 5f d8 b6 6d db ba 13 27 4e 54 27 12 89 b3 1e 57 51 51 c1 a5 97 5e fa 50 49 49 49 6e 74 74 94 89 89 89 a9 fd cb 40 20 70 5d 4f 4f cf a7 fe fc cf ff 7c 79 4f 4f 4f cb f0 f0 b0 38 Data Ascii: ^PZZz3gV_Ue___s6!T(JVWW.^xeYH)~Ua_zXRRZZ~<xattjbb*JJJ&jjjl={` ymp]7no>:u:u`\|{kMMKHfb1RF<_m'NT'WQQ^PIIIntt@ p]OO\|yOOO8
2024-09-10 16:10:57 UTC	1371	IN	Data Raw: 34 4d 6e be f9 e6 a3 17 5f 7c f1 17 a4 94 ee c8 c8 08 87 0f 1f 36 7b 7b 7b 57 55 56 56 4e 3d ae f8 fb a6 69 62 db 36 e1 70 98 85 0b 17 1e 5f b5 6a d5 b6 f2 f2 f2 a7 6d db de b2 64 c9 92 fe 91 91 11 a2 d1 e8 59 a1 d3 b7 69 62 00 82 54 2e c7 c8 64 8c c1 e1 11 2a ca 2b f8 75 91 05 cf f3 88 96 84 10 68 8e 1e 3d 46 73 73 d3 2f ec 3d 0b 21 48 26 93 98 a6 79 f4 92 4b 2e f9 83 4c 26 f3 ad 5b 6e b9 e5 a6 83 07 0f ae 3f 76 ec d8 aa ee ee ee 9a 74 3a 8d eb ba 67 85 a8 0d c3 20 9d 4e 47 db db db d7 cf 9f 3f ff e5 54 2a 45 69 69 e9 d1 3b ef bc f3 7f f7 f7 f7 7f f3 c4 89 13 4c 6f 16 33 fd da c4 62 31 4e 9f 3e 7d c1 92 25 4b 6c c7 71 72 4a 29 0c c3 60 74 74 74 63 6f 6f ef 65 33 67 ce 7c 30 93 c9 ec f7 3f 69 3e be 30 fb f8 fc 9c 05 dc 34 4d 0c c3 58 d0 d6 d6 f6 97 8f 3f Data Ascii: 4Mn_\|6{{{WUVVN=ib6p_jmdYibT.d+uh=Fss/=!H&yK.L&[n?vt:g NG?TEii;Lo3b1N>}%KlqrJ)`tttcooe3g\|0?i>04MX?
2024-09-10 16:10:57 UTC	1371	IN	Data Raw: 79 ed b5 d7 78 fd f5 d7 39 ef bc f3 64 49 49 c9 5a cb b2 56 3e fb ec b3 e7 1f 3f 7e 7c 6d 7f 7f 7f eb e3 8f 3f 6e 67 32 19 82 c1 20 f5 f5 f5 8c 8f 8f b7 e5 72 b9 57 6b 6b 6b 5f 6e 69 69 79 34 1c 0e 7f f5 77 7e e7 77 be bb 61 c3 86 8f 3e f9 e4 93 1f 7b f9 e5 97 97 c6 62 31 46 47 47 19 19 19 a9 28 2d 2d 45 29 45 69 69 29 e1 70 d8 b1 2c 2b 37 fd 3e 3b 78 f0 a0 fc a3 3f fa a3 bf d8 b4 69 d3 4d 1f fd e8 47 ff 2c 12 89 3c e3 8b b3 8f 2f cc 3e bf 71 14 42 97 8b 1e 7a e8 a1 6f 3c f9 e4 93 1b 07 07 07 df d2 2b ab a8 a8 18 a9 a9 a9 61 72 72 92 a1 a1 21 42 a1 d0 cc 33 67 ce b4 96 95 95 71 ed b5 d7 6e b9 f5 d6 5b ff b9 a1 a1 e1 b1 ae ae ae 64 5f 5f 5f cb a1 43 87 3e 73 f2 e4 c9 1b f6 ee dd bb a8 a7 a7 e7 4d af 3b 3c 3c cc c9 93 27 cb df 78 e3 8d 4b 1f 7a e8 a1 4b 67 Data Ascii: yx9dIIZV>?~\|m?ng2 rWkkk_niiy4w~wa>{b1FGG(--E)Eii)p,+7>;x?iMG,</>qBzo<+arr!B3gqn[d___C>sM;<<'xKzKg
2024-09-10 16:10:57 UTC	1371	IN	Data Raw: 77 7a 2b c6 62 bd 6b 20 10 e0 9a 6b ae 79 a4 ac ac ac 57 08 41 5b 5b 1b 87 0f 1f 66 e5 ca 95 04 02 01 2a 2b 2b 49 a5 52 07 ce 3b ef bc df 5e b8 70 61 43 63 63 e3 fc a1 a1 a1 a6 a1 a1 a1 ca 9e 9e 9e 86 de de de c6 e1 e1 e1 70 22 91 98 12 68 cb b2 68 68 68 c8 2d 59 b2 e4 f8 da b5 6b 1f 5e b8 70 e1 fd ed ed ed c7 53 a9 14 d3 43 9b 3f db fb f7 e8 ed 19 e0 d5 d7 5f e1 b6 77 df 0a fc 66 ec 27 ff 42 0b 88 65 31 36 36 ca e9 93 c7 99 b7 68 31 25 25 a5 a4 52 a9 9f ea 6d 16 cf bb e7 79 f1 54 2a f5 a3 4d 9b 36 fd f8 e2 8b 2f be e1 d4 a9 53 ef df b1 63 c7 85 27 4f 9e 6c 19 1f 1f 9f 7a bc 65 59 54 56 56 52 5d 5d 3d d6 d2 d2 d2 d3 d4 d4 34 50 55 55 15 2b 29 29 39 34 30 30 d0 31 77 ee dc ae 48 24 12 6b 68 68 a0 bd bd 9d 13 27 4e 10 8f c7 a9 a9 a9 a1 ba ba 9a 25 4b 96 3c Data Ascii: wz+bk kyWA[[f++IR;^paCccp"hhhh-Yk^pSC?_wf'Be166h1%%RmyTM6/Sc'OlzeYTVVR]]=4PUU+))94001wH$khh'N%K<
2024-09-10 16:10:57 UTC	1371	IN	Data Raw: 1e 1b 19 19 f9 4a 36 9b dd 3a 3c 3c 7c e2 63 1f fb d8 4d 81 40 e0 1f 9e 7c f2 c9 f7 f4 f5 f5 4d 79 e4 9e e7 61 db 76 ba b6 b6 f6 50 7d 7d 3d 13 13 13 14 06 99 44 77 ee dc b9 f1 b9 e7 9e bb 44 29 55 72 c3 0d 37 fc b1 94 d2 ef e5 e9 e3 0b b3 cf 7f 4f 51 0e 04 02 4c 4e 4e ae ff da d7 be f6 bd 17 5e 78 a1 35 10 08 90 4c 26 6b 5a 5b 5b 39 7d fa 34 a5 a5 a5 04 83 41 af b6 b6 f6 60 34 1a bd 69 74 74 74 2a e9 66 d3 a6 4d ed 1b 37 6e bc 4b 08 f1 ea 8c 19 33 d8 bf 7f ff c6 af 7f fd eb 5f 7c ec b1 c7 d6 4d 4c 4c bc a5 78 42 be bd 63 2c 16 13 90 6f 47 5d 5d 5d 1d 5d b0 60 c1 68 30 18 ec 03 18 1d 1d a5 b1 b1 f1 6d 8b aa 10 02 d7 f3 e8 ed ee a1 bb a7 8b 4b 2f 5d ff 1b d3 30 e4 ff a7 1b 85 5c 26 c7 89 13 a7 98 3b 77 36 35 d5 d5 14 27 4b fd 3c 0f ba 38 a5 4a 08 41 49 49 Data Ascii: J6:<<\|cM@\|MyavP}}=DwD)Ur7OQLNN^x5L&kZ[[9}4A`4ittt*fM7nK3_\|MLLxBc,oG]]]]`h0mK/]0\&;w65'K<8JAII
2024-09-10 16:10:57 UTC	1371	IN	Data Raw: 59 b3 f8 f1 8f 7f 4c 55 55 35 b3 66 b5 30 30 30 38 e5 39 5b 96 85 e6 3f 37 d1 56 4a 39 d5 bb 19 14 96 65 61 59 96 61 59 96 69 59 b6 a9 b5 36 d3 a9 74 49 3a 9d 0e 67 d2 a9 72 99 71 02 69 4f c9 54 2a d5 a8 d2 5e c0 50 42 78 8e 76 95 f0 64 32 95 6a 48 26 93 15 d2 90 5e 3e a1 58 19 5a 48 30 9c 94 34 e4 84 2b c5 a4 21 2d 17 e5 4a 09 da 08 58 23 20 62 16 1a 3c 95 4c a5 02 09 ad f5 84 65 59 39 cb b2 bc c2 97 6b 59 96 b2 6d ab 78 6c 28 ef 3f 5f bc 6d db 46 6b 30 0c 93 ce ce 4e ea ea ea b8 ea ea ab d9 bd 7b 37 9e e7 91 c9 64 f0 3c ef 4d 7b d1 4a 29 52 a9 14 25 25 25 8f 5f 71 c5 15 7b d6 ae 5d fb f9 47 1f 7d f4 e3 27 4f 9e 8c 16 f3 18 7e 56 c4 e4 a5 97 5e 6a 49 26 93 3f fe c4 27 3e f1 3f 17 2c 58 f0 ad 96 96 96 a7 3f fd e9 4f df 5c 5b 5b 3b 38 fd be 10 42 34 1d 3b Data Ascii: YLUU5f00089[?7VJ9eaYaYiY6tI:grqiOT*^PBxvd2jH&^>XZH04+!-JX# b<LeY9kYmxl(?_mFk0N{7d<M{J)R%%%_q{]G}'O~V^jI&?'>?,X?O\[[;8B4;
2024-09-10 16:10:57 UTC	1371	IN	Data Raw: e1 b9 73 e7 1c d4 4a ed 2f 2d 2f 1f 8c 46 22 9d d2 b4 86 f8 95 6e 0d e4 1b 8e 8c 8c 8c 30 67 ce 9c 9f 6a 64 15 1b 93 a4 52 a9 5c 26 93 19 c8 64 32 54 56 56 12 08 04 ce ba 47 85 10 bc f4 d2 4b 24 12 89 ae 40 20 40 24 12 a1 b6 b6 96 70 38 4c 47 47 07 23 23 23 48 29 09 87 c3 b8 ae eb 19 86 21 7e d6 3d a1 b5 66 f3 e6 cd 2b af bc f2 ca eb 1a 1b 1b 1f 9e 3e 55 ad 58 85 50 5d 5d ed 87 b9 7d 7c 61 f6 f9 8f 13 8f c7 99 98 98 98 f2 86 42 a1 50 45 5f 5f df dc e2 a2 f3 d3 3c 57 80 8a 8a 8a b1 c6 c6 46 95 cd 66 e9 ea ea 22 99 4c 92 c9 64 68 69 69 21 91 48 30 34 34 c4 e4 e4 24 7d 7d 7d b4 b6 b6 32 6b d6 ac a9 f6 8b 45 8a 0d 1e 7e 5e b2 92 94 72 6a 34 a3 f7 2b 68 0a 32 3d bb d7 34 4d 6c db ae 08 04 02 97 79 ae bb f2 5b f7 7c 6b c1 e9 53 a7 17 9f e9 ec a8 1c 1e 1c 2e 1d Data Ascii: sJ/-/F"n0gjdR\&d2TVVGK$@ @$p8LGG###H)!~=f+>UXP]]}\|aBPE__<WFf"Ldhii!H044$}}}2kE~^rj4+h2=4Mly[\|kS.
2024-09-10 16:10:57 UTC	1371	IN	Data Raw: c4 4c cb b2 56 4e cf 13 28 29 29 51 ad ad ad c3 d7 5d 77 dd b7 6d db be 37 10 08 9c 2a 64 84 7b e7 9f 7f fe 23 0d 0d 0d b7 f6 f5 f5 c9 73 73 2a 8a ff 0e 04 02 54 57 57 8f 54 57 57 93 4a a5 58 b1 62 85 df 39 ce c7 17 66 9f 5f 3d 9e e7 51 5a 5a 4a 6d 6d 2d b1 58 8c 60 30 38 39 63 c6 8c 63 86 61 ac 98 ee 9d 4e af 35 6e 6a 6a d2 9b 36 6d fa 52 30 18 ec 2d 8c cd 2b 3b 73 e6 cc 17 bf f3 9d ef 7c a6 bd bd fd 2d 4b 5f 8a 42 59 dc 83 bb ec b2 cb 06 37 6c d8 70 87 e3 38 bb a7 37 1b 29 86 aa b3 d9 2c db b6 6d 9b da 6f fc 45 0c 0d cb b2 28 2d 2d 2d f7 bc ae 39 fb f7 ef 5b d8 d6 76 f2 ca 43 87 0f 5c fe 8f 5f fe 72 cb d8 f0 28 e9 6c 16 d7 f3 40 ab bc 27 8c 91 ff 92 02 55 f4 98 94 44 2b 85 d0 0a 81 46 e9 1c 02 0b c3 cb cb b6 89 26 60 41 c8 0a 50 8d 49 95 94 d4 09 49 b5 Data Ascii: LVN())Q]wm7d{#ssTWWTWWJXb9f_=QZZJmm-X`089ccaN5njj6mR0-+;s\|-K_BY7lp87),moE(---9[vC\_r(l@'UD+F&`APII
2024-09-10 16:10:58 UTC	1371	IN	Data Raw: e9 48 72 52 32 6e 6b de 48 0f d1 9b c9 b1 b6 ac 92 25 a6 41 34 ed e0 68 17 d3 b6 31 95 a0 de 53 f9 f0 b4 30 d0 04 d0 86 82 70 90 5c d4 22 66 1a 0c e1 d0 a3 14 dd 2a c7 90 72 18 ce a5 19 48 e7 18 ce e5 98 30 34 23 4a 33 8e 87 23 c0 a3 b8 71 0d 68 89 34 44 41 a4 f3 d7 d1 75 5c fa fa fa e8 eb eb ab 7b f9 e5 97 6f 2a af a8 b8 69 c9 b2 a5 23 5d 5d 9d 87 c3 e1 f0 0b a1 70 f8 c5 60 30 b8 f3 e7 2e 62 a6 89 65 59 b4 b7 b7 53 55 55 45 49 a1 cd 67 3a 9d ce b5 b6 b6 7e ee f6 db 6f 6f fe e1 0f 7f 78 55 3a 9d 7e ab da e6 a9 fb 51 29 c5 ee dd bb 4b bf f1 8d 6f 7c e3 73 9f fb dc d8 e4 e4 e4 d3 e5 e5 e5 c7 3f f3 99 cf fc 51 77 77 f7 0f 4e 9f 3e 2d a7 87 b1 1b 1a 1a bc 75 eb d6 7d 4f 6b 9d 8c c5 62 8c 8e 8e 62 db 36 23 23 23 9f ec e9 e9 a9 9e 33 67 ce ff 01 7c 75 f6 f1 85 Data Ascii: HrR2nkH%A4h1S0p\"frH04#J3#qh4DAu\{oi#]]p`0.beYSUUEIg:~ooxU:~Q)Ko\|s?QwwN>-u}Okbb6###3g\|u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49886	3.124.210.90	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:58 UTC	489	OUT	GET /match?bid=bhc9gd0&yahoo_ver=2&yahoo_id=y-avDHyJhE2pU7_inbFoc6KAd_kDNVy9CkRxg-~A&gdpr=0 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
2024-09-10 16:10:58 UTC	389	IN	HTTP/1.1 200 OK Connection: close Set-Cookie: SERVERID=19559~DM; Domain=eyeota.net; Path=/; Expires=Tue, 10 Sep 2024 16:20:58 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Content-Type: image/gif Content-Length: 70 Date: Tue, 10 Sep 2024 16:10:58 GMT
2024-09-10 16:10:58 UTC	70	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 81 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 01 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 08 04 00 01 04 04 00 3b Data Ascii: GIF89a!NETSCAPE2.0!,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49885	44.199.36.5	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:58 UTC	721	OUT	GET /sync?vxii_pid=5038&vxii_pdid=y-aNlCHMZE2oRTc9CQhgWXt2sCk_2ZJ6aGgcRwmw--~A HTTP/1.1 Host: thrtle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6ImJiNmQxNzgwLTQyYmMtNDc5Ny04NzY4LWYyNWIwYmFlMTk3MyIsImwiOjE3MjU5ODQ2NTcwMjgsInQiOjJ9; sc=eyJpIjoiYmI2ZDE3ODAtNDJiYy00Nzk3LTg3NjgtZjI1YjBiYWUxOTczIiwic2lkIjoic2lkLTQzMzQ0YTljLTZmOGYtMTFlZi05ZWQ0LTAyNDIwYTAwMDQyMiIsIm1zIjoxLCJwcyI6MSwic3AiOjUwMzgsInBwIjoxLCJ0c2UiOjEsImx0c2UiOjE3MjU5ODQ2NTMzNzl9
2024-09-10 16:10:58 UTC	923	IN	HTTP/1.1 302 Found Date: Tue, 10 Sep 2024 16:10:58 GMT Content-Type: text/html; charset=utf-8 Content-Length: 236 Connection: close Location: https://a.tribalfusion.com/i.match?p=b31&redirect=https%3A%2F%2Fthrtle.com%2Fsync%3Fvxii_pid%3D5042%26vxii_pdid%3D%24TF_USER_ID_ENC%24%26vxii_ts%3D3%26_t%3D1725984658&u=bb6d1780-42bc-4797-8768-f25b0bae1973 P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6ImJiNmQxNzgwLTQyYmMtNDc5Ny04NzY4LWYyNWIwYmFlMTk3MyIsImwiOjE3MjU5ODQ2NTgxMjIsInQiOjN9; Path=/; Domain=thrtle.com; Expires=Sat, 29 Mar 2025 16:10:58 GMT; Secure; SameSite=None Set-Cookie: sc=eyJpIjoiYmI2ZDE3ODAtNDJiYy00Nzk3LTg3NjgtZjI1YjBiYWUxOTczIiwic2lkIjoic2lkLTQzMzQ0YTljLTZmOGYtMTFlZi05ZWQ0LTAyNDIwYTAwMDQyMiIsIm1zIjoxLCJ0cyI6MSwicHMiOjIsInNwIjo1MDQyLCJwcCI6MiwidHNlIjoyLCJpciI6dHJ1ZSwibHRzZSI6MTcyNTk4NDY1ODEyM30=; Path=/; Domain=thrtle.com; Expires=Sat, 29 Mar 2025 16:10:58 GMT; Secure; SameSite=None
2024-09-10 16:10:58 UTC	236	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 2e 74 72 69 62 61 6c 66 75 73 69 6f 6e 2e 63 6f 6d 2f 69 2e 6d 61 74 63 68 3f 70 3d 62 33 31 26 61 6d 70 3b 72 65 64 69 72 65 63 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 74 68 72 74 6c 65 2e 63 6f 6d 25 32 46 73 79 6e 63 25 33 46 76 78 69 69 5f 70 69 64 25 33 44 35 30 34 32 25 32 36 76 78 69 69 5f 70 64 69 64 25 33 44 25 32 34 54 46 5f 55 53 45 52 5f 49 44 5f 45 4e 43 25 32 34 25 32 36 76 78 69 69 5f 74 73 25 33 44 33 25 32 36 5f 74 25 33 44 31 37 32 35 39 38 34 36 35 38 26 61 6d 70 3b 75 3d 62 62 36 64 31 37 38 30 2d 34 32 62 63 2d 34 37 39 37 2d 38 37 36 38 2d 66 32 35 62 30 62 61 65 31 39 37 33 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://a.tribalfusion.com/i.match?p=b31&redirect=https%3A%2F%2Fthrtle.com%2Fsync%3Fvxii_pid%3D5042%26vxii_pdid%3D%24TF_USER_ID_ENC%24%26vxii_ts%3D3%26_t%3D1725984658&u=bb6d1780-42bc-4797-8768-f25b0bae1973">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49887	18.239.18.12	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:58 UTC	644	OUT	GET /lt/c/3825/optimus_rules.json HTTP/1.1 Host: tags.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: http://football-booster.freevisit1.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:58 UTC	688	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 3605 Connection: close Date: Tue, 10 Sep 2024 16:10:59 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Last-Modified: Tue, 20 Aug 2024 17:49:20 GMT ETag: "f16e89fd08a708a6bd2e69be50fd30ab" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding,Origin,Access-Control-Request-Headers,Access-Control-Request-Method X-Cache: Miss from cloudfront Via: 1.1 65c7ccdbbbb8463f3d45d2d76098350e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P6 X-Amz-Cf-Id: Qhz0r-OwI-KKtl77LFcuNQk_TGc9gwumN-YBVlLFvz4NusCyLeYX_Q==
2024-09-10 16:10:58 UTC	1329	IN	Data Raw: 5b 7b 22 69 64 22 3a 31 36 34 37 32 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 28 5b 61 2d 7a 41 2d 5a 30 2d 39 5f 2b 25 2d 5d 2b 29 22 2c 22 65 6c 65 6d 65 6e 74 22 3a 22 7b 7b 61 5b 68 72 65 66 2a 3d 5c 22 74 77 69 74 74 65 72 5c 22 5d 7d 7d 22 2c 22 65 76 65 6e 74 22 3a 22 63 6c 69 63 6b 22 2c 22 62 65 68 61 76 69 6f 72 54 79 70 65 22 3a 22 61 63 74 22 2c 22 74 65 6d 70 6c 61 74 65 22 3a 22 43 6c 69 63 6b 20 4f 6e 20 54 77 69 74 74 65 72 20 4c 69 6e 6b 22 7d 2c 7b 22 69 64 22 3a 31 36 34 37 33 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 28 5b 61 2d 7a 41 2d 5a 30 2d 39 5f 2b 25 2d 5d 2b 29 22 2c 22 65 6c 65 6d 65 6e 74 22 3a 22 7b 7b 61 5b 68 72 65 66 2a 3d 5c 22 79 6f 75 74 75 62 65 5c 22 5d 7d 7d 22 2c 22 65 76 65 6e 74 22 3a 22 63 6c 69 63 6b 22 2c 22 62 65 Data Ascii: [{"id":16472,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"twitter\"]}}","event":"click","behaviorType":"act","template":"Click On Twitter Link"},{"id":16473,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"youtube\"]}}","event":"click","be
2024-09-10 16:10:58 UTC	2276	IN	Data Raw: 2a 3d 5c 22 66 6f 75 72 73 71 75 61 72 65 5c 22 5d 7d 7d 22 2c 22 65 76 65 6e 74 22 3a 22 63 6c 69 63 6b 22 2c 22 62 65 68 61 76 69 6f 72 54 79 70 65 22 3a 22 61 63 74 22 2c 22 74 65 6d 70 6c 61 74 65 22 3a 22 43 6c 69 63 6b 20 6f 6e 20 46 6f 75 72 53 71 75 61 72 65 22 7d 2c 7b 22 69 64 22 3a 32 30 36 35 39 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 28 5b 61 2d 7a 41 2d 5a 30 2d 39 5f 2b 25 2d 5d 2b 29 22 2c 22 65 6c 65 6d 65 6e 74 22 3a 22 7b 7b 61 5b 68 72 65 66 2a 3d 5c 22 74 75 6d 62 6c 72 5c 22 5d 7d 7d 22 2c 22 65 76 65 6e 74 22 3a 22 63 6c 69 63 6b 22 2c 22 62 65 68 61 76 69 6f 72 54 79 70 65 22 3a 22 61 63 74 22 2c 22 74 65 6d 70 6c 61 74 65 22 3a 22 43 6c 69 63 6b 20 6f 6e 20 54 75 6d 62 6c 72 22 7d 2c 7b 22 69 64 22 3a 32 30 36 36 30 2c 22 6c 6f 63 Data Ascii: =\"foursquare\"]}}","event":"click","behaviorType":"act","template":"Click on FourSquare"},{"id":20659,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"tumblr\"]}}","event":"click","behaviorType":"act","template":"Click on Tumblr"},{"id":20660,"loc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49889	104.18.37.193	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:58 UTC	520	OUT	GET /i.match?p=b31&redirect=https%3A%2F%2Fthrtle.com%2Fsync%3Fvxii_pid%3D5042%26vxii_pdid%3D%24TF_USER_ID_ENC%24%26vxii_ts%3D3%26_t%3D1725984658&u=bb6d1780-42bc-4797-8768-f25b0bae1973 HTTP/1.1 Host: a.tribalfusion.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:58 UTC	947	IN	HTTP/1.1 302 Moved Temporarily Date: Tue, 10 Sep 2024 16:10:58 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 206 X-Reuse-Index: 1186 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=a3noeUM0inw9PBmUVHvwrVgoIBYTXMFcea54ZaMgC; path=/; domain=.tribalfusion.com; expires=Mon, 09-Dec-2024 16:10:58 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=a3noeUM0inw9PBmUVHvwrVgoIBYTXMFcea54ZaMgC; path=/; domain=.tribalfusion.com; expires=Mon, 09-Dec-2024 16:10:58 GMT; Location: https://s.tribalfusion.com/z/i.match?p=b31&redirect=https%3A%2F%2Fthrtle.com%2Fsync%3Fvxii_pid%3D5042%26vxii_pdid%3D%24TF_USER_ID_ENC%24%26vxii_ts%3D3%26_t%3D1725984658&u=bb6d1780-42bc-4797-8768-f25b0bae1973 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8c10b0f54f530f6d-EWR alt-svc: h3=":443"; ma=86400
2024-09-10 16:10:58 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2024-09-10 16:10:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49890	199.232.192.193	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:58 UTC	346	OUT	GET /UtE9eZe.png HTTP/1.1 Host: i.imgur.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:10:58 UTC	725	IN	HTTP/1.1 200 OK Connection: close Content-Length: 108663 Content-Type: image/png Last-Modified: Sat, 11 Sep 2021 08:15:51 GMT ETag: "241d8e5f4e4a56d31060fd979fdec8c8" X-Amz-Cf-Pop: IAD89-P1 X-Amz-Cf-Id: BMwmr9lfyTTNTnGTxasuKHJGmkQkcBm0bm1LGgt75QefT9uisFI3RA== cache-control: public, max-age=31536000 Accept-Ranges: bytes Age: 3543412 Date: Tue, 10 Sep 2024 16:10:58 GMT X-Served-By: cache-iad-kiad7000145-IAD, cache-nyc-kteb1890069-NYC X-Cache: Miss from cloudfront, HIT, HIT X-Cache-Hits: 157, 0 X-Timer: S1725984659.844360,VS0,VE1 Strict-Transport-Security: max-age=300 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Origin: * Server: cat factory 1.0 X-Content-Type-Options: nosniff
2024-09-10 16:10:58 UTC	1371	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e6 00 00 01 49 08 06 00 00 00 4e d9 8e f4 00 00 00 04 67 41 4d 41 00 00 b1 8e 7c fb 51 93 00 00 00 20 63 48 52 4d 00 00 7a 25 00 00 80 83 00 00 f9 ff 00 00 80 e9 00 00 75 30 00 00 ea 60 00 00 3a 98 00 00 17 6f 92 5f c5 46 00 01 a8 02 49 44 41 54 78 da ec bd 77 9c 5c 67 7d ef ff 7e 9e 53 a6 6e ef bb da 95 56 bd 5a d5 b6 6c d9 92 e5 5e 84 6d dc 68 86 80 a9 21 81 24 70 6f 2a f7 26 b9 24 37 21 37 21 a1 05 27 14 63 70 02 2e b8 f7 5e d4 7b af 2b 6d ef 7d fa cc 39 e7 79 7e 7f cc cc b2 92 0d 18 42 7e 09 e6 bc 5f af 95 56 ab d9 99 33 e7 9c 79 3e df ef f7 f9 16 a1 b5 c6 c7 c7 c7 c7 c7 c7 e7 bf 07 d2 3f 05 3e 3e 3e 3e 3e 3e be 30 fb f8 f8 f8 f8 f8 f8 f8 c2 ec e3 e3 e3 e3 e3 e3 0b b3 8f 8f 8f 8f 8f 8f 8f 2f cc Data Ascii: PNGIHDRINgAMA\|Q cHRMz%u0`:o_FIDATxw\g}~SnVZl^mh!$po*&$7!7!'cp.^{+m}9y~B~_V3y>?>>>>>>0/
2024-09-10 16:10:58 UTC	1371	IN	Data Raw: 1c 5e 50 5a 5a 7a c3 99 33 67 56 fc d5 5f fd 55 65 5f 5f 5f 73 36 9b 0d 0a 21 54 28 14 4a 56 57 57 0f 0f 0c 0c 8c 2e 5e bc 78 bb 65 59 0f 48 29 87 7e 55 de b6 61 18 18 86 f1 5f 7a 0e 85 10 58 96 c5 af d2 0b 95 52 52 5a 5a ba 7e ef de bd b7 1d 3c 78 b0 61 74 74 b4 6a 62 62 a2 2a 97 cb 05 0d c3 f0 4a 4a 4a 26 6a 6a 6a 86 6c db 1e 98 3d 7b f6 f3 c1 60 f0 05 20 0e e0 79 1e b6 6d 13 08 04 70 5d 37 b9 6e dd ba 6f 3e fb ec b3 b7 9f 3a 75 ca 3a 75 ea d4 85 c1 60 f0 c2 05 0b 16 7c b6 bb bb 7b 6b 4d 4d cd 4b 91 48 e4 df a4 94 1d fe a7 c1 c7 17 66 1f 9f ff 62 31 91 52 12 8d 46 d7 3c fd f4 d3 5f d8 b6 6d db ba 13 27 4e 54 27 12 89 b3 1e 57 51 51 c1 a5 97 5e fa 50 49 49 49 6e 74 74 94 89 89 89 a9 fd cb 40 20 70 5d 4f 4f cf a7 fe fc cf ff 7c 79 4f 4f 4f cb f0 f0 b0 38 Data Ascii: ^PZZz3gV_Ue___s6!T(JVWW.^xeYH)~Ua_zXRRZZ~<xattjbb*JJJ&jjjl={` ymp]7no>:u:u`\|{kMMKHfb1RF<_m'NT'WQQ^PIIIntt@ p]OO\|yOOO8
2024-09-10 16:10:58 UTC	1371	IN	Data Raw: 34 4d 6e be f9 e6 a3 17 5f 7c f1 17 a4 94 ee c8 c8 08 87 0f 1f 36 7b 7b 7b 57 55 56 56 4e 3d ae f8 fb a6 69 62 db 36 e1 70 98 85 0b 17 1e 5f b5 6a d5 b6 f2 f2 f2 a7 6d db de b2 64 c9 92 fe 91 91 11 a2 d1 e8 59 a1 d3 b7 69 62 00 82 54 2e c7 c8 64 8c c1 e1 11 2a ca 2b f8 75 91 05 cf f3 88 96 84 10 68 8e 1e 3d 46 73 73 d3 2f ec 3d 0b 21 48 26 93 98 a6 79 f4 92 4b 2e f9 83 4c 26 f3 ad 5b 6e b9 e5 a6 83 07 0f ae 3f 76 ec d8 aa ee ee ee 9a 74 3a 8d eb ba 67 85 a8 0d c3 20 9d 4e 47 db db db d7 cf 9f 3f ff e5 54 2a 45 69 69 e9 d1 3b ef bc f3 7f f7 f7 f7 7f f3 c4 89 13 4c 6f 16 33 fd da c4 62 31 4e 9f 3e 7d c1 92 25 4b 6c c7 71 72 4a 29 0c c3 60 74 74 74 63 6f 6f ef 65 33 67 ce 7c 30 93 c9 ec f7 3f 69 3e be 30 fb f8 fc 9c 05 dc 34 4d 0c c3 58 d0 d6 d6 f6 97 8f 3f Data Ascii: 4Mn_\|6{{{WUVVN=ib6p_jmdYibT.d+uh=Fss/=!H&yK.L&[n?vt:g NG?TEii;Lo3b1N>}%KlqrJ)`tttcooe3g\|0?i>04MX?
2024-09-10 16:10:58 UTC	1371	IN	Data Raw: 79 ed b5 d7 78 fd f5 d7 39 ef bc f3 64 49 49 c9 5a cb b2 56 3e fb ec b3 e7 1f 3f 7e 7c 6d 7f 7f 7f eb e3 8f 3f 6e 67 32 19 82 c1 20 f5 f5 f5 8c 8f 8f b7 e5 72 b9 57 6b 6b 6b 5f 6e 69 69 79 34 1c 0e 7f f5 77 7e e7 77 be bb 61 c3 86 8f 3e f9 e4 93 1f 7b f9 e5 97 97 c6 62 31 46 47 47 19 19 19 a9 28 2d 2d 45 29 45 69 69 29 e1 70 d8 b1 2c 2b 37 fd 3e 3b 78 f0 a0 fc a3 3f fa a3 bf d8 b4 69 d3 4d 1f fd e8 47 ff 2c 12 89 3c e3 8b b3 8f 2f cc 3e bf 71 14 42 97 8b 1e 7a e8 a1 6f 3c f9 e4 93 1b 07 07 07 df d2 2b ab a8 a8 18 a9 a9 a9 61 72 72 92 a1 a1 21 42 a1 d0 cc 33 67 ce b4 96 95 95 71 ed b5 d7 6e b9 f5 d6 5b ff b9 a1 a1 e1 b1 ae ae ae 64 5f 5f 5f cb a1 43 87 3e 73 f2 e4 c9 1b f6 ee dd bb a8 a7 a7 e7 4d af 3b 3c 3c cc c9 93 27 cb df 78 e3 8d 4b 1f 7a e8 a1 4b 67 Data Ascii: yx9dIIZV>?~\|m?ng2 rWkkk_niiy4w~wa>{b1FGG(--E)Eii)p,+7>;x?iMG,</>qBzo<+arr!B3gqn[d___C>sM;<<'xKzKg
2024-09-10 16:10:58 UTC	1371	IN	Data Raw: 77 7a 2b c6 62 bd 6b 20 10 e0 9a 6b ae 79 a4 ac ac ac 57 08 41 5b 5b 1b 87 0f 1f 66 e5 ca 95 04 02 01 2a 2b 2b 49 a5 52 07 ce 3b ef bc df 5e b8 70 61 43 63 63 e3 fc a1 a1 a1 a6 a1 a1 a1 ca 9e 9e 9e 86 de de de c6 e1 e1 e1 70 22 91 98 12 68 cb b2 68 68 68 c8 2d 59 b2 e4 f8 da b5 6b 1f 5e b8 70 e1 fd ed ed ed c7 53 a9 14 d3 43 9b 3f db fb f7 e8 ed 19 e0 d5 d7 5f e1 b6 77 df 0a fc 66 ec 27 ff 42 0b 88 65 31 36 36 ca e9 93 c7 99 b7 68 31 25 25 a5 a4 52 a9 9f ea 6d 16 cf bb e7 79 f1 54 2a f5 a3 4d 9b 36 fd f8 e2 8b 2f be e1 d4 a9 53 ef df b1 63 c7 85 27 4f 9e 6c 19 1f 1f 9f 7a bc 65 59 54 56 56 52 5d 5d 3d d6 d2 d2 d2 d3 d4 d4 34 50 55 55 15 2b 29 29 39 34 30 30 d0 31 77 ee dc ae 48 24 12 6b 68 68 a0 bd bd 9d 13 27 4e 10 8f c7 a9 a9 a9 a1 ba ba 9a 25 4b 96 3c Data Ascii: wz+bk kyWA[[f++IR;^paCccp"hhhh-Yk^pSC?_wf'Be166h1%%RmyTM6/Sc'OlzeYTVVR]]=4PUU+))94001wH$khh'N%K<
2024-09-10 16:10:58 UTC	1371	IN	Data Raw: 1e 1b 19 19 f9 4a 36 9b dd 3a 3c 3c 7c e2 63 1f fb d8 4d 81 40 e0 1f 9e 7c f2 c9 f7 f4 f5 f5 4d 79 e4 9e e7 61 db 76 ba b6 b6 f6 50 7d 7d 3d 13 13 13 14 06 99 44 77 ee dc b9 f1 b9 e7 9e bb 44 29 55 72 c3 0d 37 fc b1 94 d2 ef e5 e9 e3 0b b3 cf 7f 4f 51 0e 04 02 4c 4e 4e ae ff da d7 be f6 bd 17 5e 78 a1 35 10 08 90 4c 26 6b 5a 5b 5b 39 7d fa 34 a5 a5 a5 04 83 41 af b6 b6 f6 60 34 1a bd 69 74 74 74 2a e9 66 d3 a6 4d ed 1b 37 6e bc 4b 08 f1 ea 8c 19 33 d8 bf 7f ff c6 af 7f fd eb 5f 7c ec b1 c7 d6 4d 4c 4c bc a5 78 42 be bd 63 2c 16 13 90 6f 47 5d 5d 5d 1d 5d b0 60 c1 68 30 18 ec 03 18 1d 1d a5 b1 b1 f1 6d 8b aa 10 02 d7 f3 e8 ed ee a1 bb a7 8b 4b 2f 5d ff 1b d3 30 e4 ff a7 1b 85 5c 26 c7 89 13 a7 98 3b 77 36 35 d5 d5 14 27 4b fd 3c 0f ba 38 a5 4a 08 41 49 49 Data Ascii: J6:<<\|cM@\|MyavP}}=DwD)Ur7OQLNN^x5L&kZ[[9}4A`4ittt*fM7nK3_\|MLLxBc,oG]]]]`h0mK/]0\&;w65'K<8JAII
2024-09-10 16:10:58 UTC	1371	IN	Data Raw: 59 b3 f8 f1 8f 7f 4c 55 55 35 b3 66 b5 30 30 30 38 e5 39 5b 96 85 e6 3f 37 d1 56 4a 39 d5 bb 19 14 96 65 61 59 96 61 59 96 69 59 b6 a9 b5 36 d3 a9 74 49 3a 9d 0e 67 d2 a9 72 99 71 02 69 4f c9 54 2a d5 a8 d2 5e c0 50 42 78 8e 76 95 f0 64 32 95 6a 48 26 93 15 d2 90 5e 3e a1 58 19 5a 48 30 9c 94 34 e4 84 2b c5 a4 21 2d 17 e5 4a 09 da 08 58 23 20 62 16 1a 3c 95 4c a5 02 09 ad f5 84 65 59 39 cb b2 bc c2 97 6b 59 96 b2 6d ab 78 6c 28 ef 3f 5f bc 6d db 46 6b 30 0c 93 ce ce 4e ea ea ea b8 ea ea ab d9 bd 7b 37 9e e7 91 c9 64 f0 3c ef 4d 7b d1 4a 29 52 a9 14 25 25 25 8f 5f 71 c5 15 7b d6 ae 5d fb f9 47 1f 7d f4 e3 27 4f 9e 8c 16 f3 18 7e 56 c4 e4 a5 97 5e 6a 49 26 93 3f fe c4 27 3e f1 3f 17 2c 58 f0 ad 96 96 96 a7 3f fd e9 4f df 5c 5b 5b 3b 38 fd be 10 42 34 1d 3b Data Ascii: YLUU5f00089[?7VJ9eaYaYiY6tI:grqiOT*^PBxvd2jH&^>XZH04+!-JX# b<LeY9kYmxl(?_mFk0N{7d<M{J)R%%%_q{]G}'O~V^jI&?'>?,X?O\[[;8B4;
2024-09-10 16:10:58 UTC	1371	IN	Data Raw: e1 b9 73 e7 1c d4 4a ed 2f 2d 2f 1f 8c 46 22 9d d2 b4 86 f8 95 6e 0d e4 1b 8e 8c 8c 8c 30 67 ce 9c 9f 6a 64 15 1b 93 a4 52 a9 5c 26 93 19 c8 64 32 54 56 56 12 08 04 ce ba 47 85 10 bc f4 d2 4b 24 12 89 ae 40 20 40 24 12 a1 b6 b6 96 70 38 4c 47 47 07 23 23 23 48 29 09 87 c3 b8 ae eb 19 86 21 7e d6 3d a1 b5 66 f3 e6 cd 2b af bc f2 ca eb 1a 1b 1b 1f 9e 3e 55 ad 58 85 50 5d 5d ed 87 b9 7d 7c 61 f6 f9 8f 13 8f c7 99 98 98 98 f2 86 42 a1 50 45 5f 5f df dc e2 a2 f3 d3 3c 57 80 8a 8a 8a b1 c6 c6 46 95 cd 66 e9 ea ea 22 99 4c 92 c9 64 68 69 69 21 91 48 30 34 34 c4 e4 e4 24 7d 7d 7d b4 b6 b6 32 6b d6 ac a9 f6 8b 45 8a 0d 1e 7e 5e b2 92 94 72 6a 34 a3 f7 2b 68 0a 32 3d bb d7 34 4d 6c db ae 08 04 02 97 79 ae bb f2 5b f7 7c 6b c1 e9 53 a7 17 9f e9 ec a8 1c 1e 1c 2e 1d Data Ascii: sJ/-/F"n0gjdR\&d2TVVGK$@ @$p8LGG###H)!~=f+>UXP]]}\|aBPE__<WFf"Ldhii!H044$}}}2kE~^rj4+h2=4Mly[\|kS.
2024-09-10 16:10:58 UTC	1371	IN	Data Raw: c4 4c cb b2 56 4e cf 13 28 29 29 51 ad ad ad c3 d7 5d 77 dd b7 6d db be 37 10 08 9c 2a 64 84 7b e7 9f 7f fe 23 0d 0d 0d b7 f6 f5 f5 c9 73 73 2a 8a ff 0e 04 02 54 57 57 8f 54 57 57 93 4a a5 58 b1 62 85 df 39 ce c7 17 66 9f 5f 3d 9e e7 51 5a 5a 4a 6d 6d 2d b1 58 8c 60 30 38 39 63 c6 8c 63 86 61 ac 98 ee 9d 4e af 35 6e 6a 6a d2 9b 36 6d fa 52 30 18 ec 2d 8c cd 2b 3b 73 e6 cc 17 bf f3 9d ef 7c a6 bd bd fd 2d 4b 5f 8a 42 59 dc 83 bb ec b2 cb 06 37 6c d8 70 87 e3 38 bb a7 37 1b 29 86 aa b3 d9 2c db b6 6d 9b da 6f fc 45 0c 0d cb b2 28 2d 2d 2d f7 bc ae 39 fb f7 ef 5b d8 d6 76 f2 ca 43 87 0f 5c fe 8f 5f fe 72 cb d8 f0 28 e9 6c 16 d7 f3 40 ab bc 27 8c 91 ff 92 02 55 f4 98 94 44 2b 85 d0 0a 81 46 e9 1c 02 0b c3 cb cb b6 89 26 60 41 c8 0a 50 8d 49 95 94 d4 09 49 b5 Data Ascii: LVN())Q]wm7d{#ssTWWTWWJXb9f_=QZZJmm-X`089ccaN5njj6mR0-+;s\|-K_BY7lp87),moE(---9[vC\_r(l@'UD+F&`APII
2024-09-10 16:10:58 UTC	1371	IN	Data Raw: e9 48 72 52 32 6e 6b de 48 0f d1 9b c9 b1 b6 ac 92 25 a6 41 34 ed e0 68 17 d3 b6 31 95 a0 de 53 f9 f0 b4 30 d0 04 d0 86 82 70 90 5c d4 22 66 1a 0c e1 d0 a3 14 dd 2a c7 90 72 18 ce a5 19 48 e7 18 ce e5 98 30 34 23 4a 33 8e 87 23 c0 a3 b8 71 0d 68 89 34 44 41 a4 f3 d7 d1 75 5c fa fa fa e8 eb eb ab 7b f9 e5 97 6f 2a af a8 b8 69 c9 b2 a5 23 5d 5d 9d 87 c3 e1 f0 0b a1 70 f8 c5 60 30 b8 f3 e7 2e 62 a6 89 65 59 b4 b7 b7 53 55 55 45 49 a1 cd 67 3a 9d ce b5 b6 b6 7e ee f6 db 6f 6f fe e1 0f 7f 78 55 3a 9d 7e ab da e6 a9 fb 51 29 c5 ee dd bb 4b bf f1 8d 6f 7c e3 73 9f fb dc d8 e4 e4 e4 d3 e5 e5 e5 c7 3f f3 99 cf fc 51 77 77 f7 0f 4e 9f 3e 2d a7 87 b1 1b 1a 1a bc 75 eb d6 7d 4f 6b 9d 8c c5 62 8c 8e 8e 62 db 36 23 23 23 9f ec e9 e9 a9 9e 33 67 ce ff 01 7c 75 f6 f1 85 Data Ascii: HrR2nkH%A4h1S0p\"frH04#J3#qh4DAu\{oi#]]p`0.beYSUUEIg:~ooxU:~Q)Ko\|s?QwwN>-u}Okbb6###3g\|u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49893	172.64.150.63	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:59 UTC	636	OUT	GET /z/i.match?p=b31&redirect=https%3A%2F%2Fthrtle.com%2Fsync%3Fvxii_pid%3D5042%26vxii_pdid%3D%24TF_USER_ID_ENC%24%26vxii_ts%3D3%26_t%3D1725984658&u=bb6d1780-42bc-4797-8768-f25b0bae1973 HTTP/1.1 Host: s.tribalfusion.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ANON_ID=a3noeUM0inw9PBmUVHvwrVgoIBYTXMFcea54ZaMgC; ANON_ID_old=a3noeUM0inw9PBmUVHvwrVgoIBYTXMFcea54ZaMgC
2024-09-10 16:10:59 UTC	918	IN	HTTP/1.1 302 Moved Temporarily Date: Tue, 10 Sep 2024 16:10:59 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close P3P: CP="NOI DEVo TAIa OUR BUS" X-Function: 209 X-Reuse-Index: 2474 Cache-Control: no-cache Cache-Control: private Expires: Thu, 01 Jan 1970 00:00:00 GMT Pragma: no-cache Set-Cookie: ANON_ID=a9nsuBs2aF8pAJsbX1nR1ZcZaJ3xCsEKbG81GInH533ONrbOZbVSUQhZcfcfprItfJOTIExAuCTavq9cyHKs; path=/; domain=.tribalfusion.com; expires=Mon, 09-Dec-2024 16:10:59 GMT; SameSite=None; Secure; Set-Cookie: ANON_ID_old=a9nsuBs2aF8pAJsbX1nR1ZcZaJ3xCsEKbG81GInH533ONrbOZbVSUQhZcfcfprItfJOTIExAuCTavq9cyHKs; path=/; domain=.tribalfusion.com; expires=Mon, 09-Dec-2024 16:10:59 GMT; Location: https://thrtle.com/sync?vxii_pid=5042&vxii_pdid=18072662055787220129&vxii_ts=3&_t=1725984658 CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8c10b0f99c7e727b-EWR alt-svc: h3=":443"; ma=86400
2024-09-10 16:10:59 UTC	42	IN	Data Raw: 32 34 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a Data Ascii: 24<h1>Error 302 Moved Temporarily</h1>
2024-09-10 16:10:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49891	18.239.18.78	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:59 UTC	721	OUT	GET /lt/c/3825/optimus_rules.json HTTP/1.1 Host: tags.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BT3f%2Fv%2F%2Fz88AA7z3Plgy7dFi%2BM%2FIuL0eRDL82DiFBVVk%2BZ9CVIFzRw8xo4rs3ndZAFXk8OI5aMa0r3vKjSrS8F8TVeDJ45uGqCL3urRQBS6desSGKvJuCbpNb2YeYEIVAQAwK2BU"; _cc_aud="ABR4nGNgYGBIe5DfwwADrAwMXDNADEat2RBqFojic3cAUfw6%2B4EkAKzGBgM%3D"
2024-09-10 16:11:00 UTC	553	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 3605 Connection: close Date: Tue, 10 Sep 2024 16:11:00 GMT Last-Modified: Tue, 20 Aug 2024 17:49:20 GMT ETag: "f16e89fd08a708a6bd2e69be50fd30ab" x-amz-server-side-encryption: AES256 Cache-Control: public, max-age=86400 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 7ce9bf658969fea1ceecfa00e5239dd6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P6 X-Amz-Cf-Id: DtMdNxAeiwNcAlsIq7Eqh7IAEGuEZ6XZ_EtZqa5JR981aNV6tez1bg==
2024-09-10 16:11:00 UTC	3605	IN	Data Raw: 5b 7b 22 69 64 22 3a 31 36 34 37 32 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 28 5b 61 2d 7a 41 2d 5a 30 2d 39 5f 2b 25 2d 5d 2b 29 22 2c 22 65 6c 65 6d 65 6e 74 22 3a 22 7b 7b 61 5b 68 72 65 66 2a 3d 5c 22 74 77 69 74 74 65 72 5c 22 5d 7d 7d 22 2c 22 65 76 65 6e 74 22 3a 22 63 6c 69 63 6b 22 2c 22 62 65 68 61 76 69 6f 72 54 79 70 65 22 3a 22 61 63 74 22 2c 22 74 65 6d 70 6c 61 74 65 22 3a 22 43 6c 69 63 6b 20 4f 6e 20 54 77 69 74 74 65 72 20 4c 69 6e 6b 22 7d 2c 7b 22 69 64 22 3a 31 36 34 37 33 2c 22 6c 6f 63 61 74 69 6f 6e 22 3a 22 28 5b 61 2d 7a 41 2d 5a 30 2d 39 5f 2b 25 2d 5d 2b 29 22 2c 22 65 6c 65 6d 65 6e 74 22 3a 22 7b 7b 61 5b 68 72 65 66 2a 3d 5c 22 79 6f 75 74 75 62 65 5c 22 5d 7d 7d 22 2c 22 65 76 65 6e 74 22 3a 22 63 6c 69 63 6b 22 2c 22 62 65 Data Ascii: [{"id":16472,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"twitter\"]}}","event":"click","behaviorType":"act","template":"Click On Twitter Link"},{"id":16473,"location":"([a-zA-Z0-9_+%-]+)","element":"{{a[href=\"youtube\"]}}","event":"click","be

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49892	54.76.106.86	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:10:59 UTC	994	OUT	POST /6/data HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive Content-Length: 217 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: http://football-booster.freevisit1.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BT3f%2Fv%2F%2Fz88AA7z3Plgy7dFi%2BM%2FIuL0eRDL82DiFBVVk%2BZ9CVIFzRw8xo4rs3ndZAFXk8OI5aMa0r3vKjSrS8F8TVeDJ45uGqCL3urRQBS6desSGKvJuCbpNb2YeYEIVAQAwK2BU"; _cc_aud="ABR4nGNgYGBIe5DfwwADrAwMXDNADEat2RBqFojic3cAUfw6%2B4EkAKzGBgM%3D"
2024-09-10 16:10:59 UTC	217	OUT	Data Raw: 7b 22 72 22 3a 7b 22 72 70 72 22 3a 66 61 6c 73 65 2c 22 72 70 78 22 3a 74 72 75 65 2c 22 72 69 64 22 3a 74 72 75 65 7d 2c 22 6d 22 3a 7b 22 72 65 66 22 3a 22 68 74 74 70 3a 2f 2f 66 6f 6f 74 62 61 6c 6c 2d 62 6f 6f 73 74 65 72 2e 66 72 65 65 76 69 73 69 74 31 2e 63 6f 6d 2f 68 73 2d 66 6f 6f 74 62 61 6c 6c 2e 70 68 70 22 2c 22 70 76 22 3a 74 72 75 65 2c 22 64 63 63 22 3a 33 38 32 35 2c 22 63 6f 22 3a 66 61 6c 73 65 2c 22 73 72 63 22 3a 22 4c 54 4a 53 22 7d 2c 22 64 22 3a 7b 22 74 70 22 3a 7b 22 44 54 53 43 22 3a 22 31 30 34 30 31 37 32 35 39 38 34 36 33 35 44 36 38 35 44 39 34 34 39 33 36 46 36 34 45 35 43 39 22 7d 7d 2c 22 63 22 3a 5b 5d 7d Data Ascii: {"r":{"rpr":false,"rpx":true,"rid":true},"m":{"ref":"http://football-booster.freevisit1.com/hs-football.php","pv":true,"dcc":3825,"co":false,"src":"LTJS"},"d":{"tp":{"DTSC":"10401725984635D685D944936F64E5C9"}},"c":[]}
2024-09-10 16:11:00 UTC	1127	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:10:59 GMT Content-Type: application/json;charset=utf-8 Content-Length: 316 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.22.10 Set-Cookie: _cc_id=3bdb359c63037044d87658cfcb77131;Path=/;Domain=crwdcntrl.net;Expires=Sat, 07-Jun-2025 16:06:00 GMT;SameSite=None;Secure Set-Cookie: _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Sat, 07-Jun-2025 16:06:00 GMT;Max-Age=23328000;SameSite=None;Secure Set-Cookie: _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Sat, 07-Jun-2025 16:06:00 GMT;Max-Age=23328000;SameSite=None;Secure Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: http://football-booster.freevisit1.com Server: Jetty(9.4.38.v20210224)
2024-09-10 16:11:00 UTC	316	IN	Data Raw: 7b 22 70 69 64 22 3a 22 33 62 64 62 33 35 39 63 36 33 30 33 37 30 34 34 64 38 37 36 35 38 63 66 63 62 37 37 31 33 31 22 2c 22 73 70 78 22 3a 5b 37 2c 39 32 2c 34 39 2c 31 33 36 2c 31 33 35 2c 31 35 33 2c 33 33 2c 37 38 2c 31 32 32 2c 32 36 2c 32 32 2c 31 34 38 2c 31 31 36 2c 36 31 2c 31 30 36 2c 31 30 34 2c 38 2c 35 34 2c 31 30 30 2c 31 34 35 2c 33 2c 32 2c 39 34 5d 2c 22 63 22 3a 5b 7b 22 6b 22 3a 22 5f 63 63 5f 69 64 22 2c 22 76 22 3a 22 33 62 64 62 33 35 39 63 36 33 30 33 37 30 34 34 64 38 37 36 35 38 63 66 63 62 37 37 31 33 31 22 2c 22 65 22 3a 32 33 33 32 38 30 30 30 7d 5d 2c 22 69 64 73 22 3a 5b 7b 22 69 22 3a 22 33 31 35 66 31 37 34 63 34 32 36 36 30 61 31 33 65 64 35 64 34 65 39 33 32 64 38 39 31 36 64 35 33 39 33 38 37 30 35 66 65 35 63 64 66 63 Data Ascii: {"pid":"3bdb359c63037044d87658cfcb77131","spx":[7,92,49,136,135,153,33,78,122,26,22,148,116,61,106,104,8,54,100,145,3,2,94],"c":[{"k":"_cc_id","v":"3bdb359c63037044d87658cfcb77131","e":23328000}],"ids":[{"i":"315f174c42660a13ed5d4e932d8916d53938705fe5cdfc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49894	44.199.36.5	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:00 UTC	745	OUT	GET /sync?vxii_pid=5042&vxii_pdid=18072662055787220129&vxii_ts=3&_t=1725984658 HTTP/1.1 Host: thrtle.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mc=eyJpZCI6ImJiNmQxNzgwLTQyYmMtNDc5Ny04NzY4LWYyNWIwYmFlMTk3MyIsImwiOjE3MjU5ODQ2NTgxMjIsInQiOjN9; sc=eyJpIjoiYmI2ZDE3ODAtNDJiYy00Nzk3LTg3NjgtZjI1YjBiYWUxOTczIiwic2lkIjoic2lkLTQzMzQ0YTljLTZmOGYtMTFlZi05ZWQ0LTAyNDIwYTAwMDQyMiIsIm1zIjoxLCJ0cyI6MSwicHMiOjIsInNwIjo1MDQyLCJwcCI6MiwidHNlIjoyLCJpciI6dHJ1ZSwibHRzZSI6MTcyNTk4NDY1ODEyM30=
2024-09-10 16:11:00 UTC	663	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:11:00 GMT Content-Type: image/gif Content-Length: 43 Connection: close P3p: CP="NOI OUR BUS UNI COM NAV" Set-Cookie: mc=eyJpZCI6ImJiNmQxNzgwLTQyYmMtNDc5Ny04NzY4LWYyNWIwYmFlMTk3MyIsImwiOjE3MjU5ODQ2NjAxODQsInQiOjR9; Path=/; Domain=thrtle.com; Expires=Sat, 29 Mar 2025 16:11:00 GMT; Secure; SameSite=None Set-Cookie: sc=eyJpIjoiYmI2ZDE3ODAtNDJiYy00Nzk3LTg3NjgtZjI1YjBiYWUxOTczIiwic2lkIjoic2lkLTQ1MTVmNzVlLTZmOGYtMTFlZi05ZWQ0LTAyNDIwYTAwMDQyMiIsIm1zIjoxLCJwcyI6Miwic3AiOjUwNDIsInBwIjoyLCJ0c2UiOjIsImx0c2UiOjE3MjU5ODQ2NTgxMjN9; Path=/; Domain=thrtle.com; Expires=Sat, 29 Mar 2025 16:11:00 GMT; Secure; SameSite=None
2024-09-10 16:11:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49895	104.21.34.180	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:00 UTC	706	OUT	POST /a?i=10401725984635D685D944936F64E5C9&k=lotpano&v=315f174c42660a13ed5d4e932d8916d53938705fe5cdfc20b678eec38452d311 HTTP/1.1 Host: a.dtssrv.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://football-booster.freevisit1.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:11:00 UTC	597	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:11:00 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=l%2Fftl9lJcv9iz2xHWoZz8SfruImdK9s02KNLE015FHL1su8WlwqIdvFGP6sI%2FWIgBRVxlrUM45cACoqPk9DT8py4%2BDqgi0nTEYda3wqJfThOe%2BxnYGAgkDJDsI3g%2BFc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c10b1012cff7ce8-EWR alt-svc: h3=":443"; ma=86400
2024-09-10 16:11:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49897	54.77.7.79	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:00 UTC	728	OUT	GET /6/data HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
2024-09-10 16:11:01 UTC	239	IN	HTTP/1.1 405 Method Not Allowed Date: Tue, 10 Sep 2024 16:11:00 GMT Content-Type: text/html;charset=iso-8859-1 Content-Length: 482 Connection: close Cache-Control: must-revalidate,no-cache,no-store Server: Jetty(9.4.38.v20210224)
2024-09-10 16:11:01 UTC	482	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 36 2f 64 61 74 61 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 3e 53 54 41 54 55 53 3a 3c 2f 74 68 3e 3c 74 64 3e 34 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/6/data</td></tr><tr><th>STATUS:</th><td>4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49896	18.239.18.33	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:00 UTC	1109	OUT	GET /lt/shared/2/lt.iframe.html?c=3825 HTTP/1.1 Host: tags.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: http://football-booster.freevisit1.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
2024-09-10 16:11:01 UTC	557	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 2302 Connection: close Last-Modified: Tue, 05 Sep 2023 17:36:56 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Date: Tue, 10 Sep 2024 16:11:00 GMT Cache-Control: public, max-age=86400 ETag: "43b17c7b81b6281ca01991a2e5cae3a7" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 0bdea9339f79fea2216fd97b3f7856f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: AMS58-P6 X-Amz-Cf-Id: P7XxlBl8OI1nzsQcWpuYnXBzL1YHMpf88ww-oHG6Ug1xd8gzdQHEfw== Age: 14313
2024-09-10 16:11:01 UTC	2302	IN	Data Raw: 3c 64 69 76 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 22 3e 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 20 76 61 72 20 6c 74 49 66 72 61 6d 65 3b 66 75 6e 63 74 69 6f 6e 20 6c 74 49 66 72 61 6d 65 61 28 61 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 61 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 74 49 66 72 61 6d 65 62 28 61 2c 64 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 64 29 7b 76 Data Ascii: <div style="background-color:transparent; width: 100%; text-align: center;"> <script type="text/javascript"> var ltIframe;function ltIframea(a){return"[object Array]"===Object.prototype.toString.call(a)}function ltIframeb(a,d){if("undefined"!==typeof d){v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49898	18.202.126.138	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:01 UTC	1205	OUT	GET /pixels?src=LTJS&s=7%2C92%2C49%2C136%2C135%2C153%2C33%2C78%2C122%2C26%2C22%2C148%2C116%2C61%2C106%2C104%2C8%2C54%2C100%2C145%2C3%2C2%2C94&c=3825 HTTP/1.1 Host: bcp.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://tags.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
2024-09-10 16:11:02 UTC	285	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:11:01 GMT Content-Type: text/html Content-Length: 3978 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.17.173 Server: Jetty(9.4.38.v20210224)
2024-09-10 16:11:02 UTC	3978	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 64 69 76 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6d 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 70 69 78 65 6c 3f 67 6f 6f 67 6c 65 5f 6e 69 64 3d 6c 6f 74 61 6d 65 64 64 70 26 67 6f 6f 67 6c 65 5f 68 6d 3d 4d 32 4a 6b 59 6a 4d 31 4f 57 4d 32 4d 7a 41 7a 4e 7a 41 30 4e 47 51 34 4e 7a 59 31 4f 47 4e 6d 59 32 49 33 4e 7a 45 7a 4d 51 26 67 64 70 72 3d 30 22 20 68 65 69 67 68 74 3d 22 31 22 20 77 69 64 74 68 3d 22 31 22 20 2f 3e 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 2e 63 69 6e 74 6e 65 74 77 6f 72 6b 73 2e 63 6f 6d 2f 69 64 65 6e 74 69 74 79 3f 61 3d 35 34 36 31 26 67 64 70 72 3d 30 26 69 64 3d 4c 6f 74 61 6d 65 3a 33 62 64 62 33 35 39 63 36 33 30 33 37 30 34 34 64 38 Data Ascii: <html><body><div><img src="https://cm.g.doubleclick.net/pixel?google_nid=lotameddp&google_hm=M2JkYjM1OWM2MzAzNzA0NGQ4NzY1OGNmY2I3NzEzMQ&gdpr=0" height="1" width="1" /><img src="https://c.cintnetworks.com/identity?a=5461&gdpr=0&id=Lotame:3bdb359c63037044d8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49905	52.46.130.91	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:02 UTC	661	OUT	GET /dcm?pid=a8acf3b3-7ede-4e18-8405-edaf41005f97&id=3bdb359c63037044d87658cfcb77131 HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:11:02 UTC	778	IN	HTTP/1.1 302 Found Server: Server Date: Tue, 10 Sep 2024 16:11:02 GMT Content-Length: 0 Connection: close x-amz-rid: 1BYBJXVNAEPX236X73Y3 Set-Cookie: ad-id=A8Ft7vQG6UnTpqRZ8io_U1M\|t; Domain=.amazon-adsystem.com; Expires=Tue, 01-Apr-2025 16:11:02 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Location: https://s.amazon-adsystem.com/dcm?pid=a8acf3b3-7ede-4e18-8405-edaf41005f97&id=3bdb359c63037044d87658cfcb77131&dcc=t Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49906	34.36.216.150	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:02 UTC	714	OUT	GET /connectors/lotame/usersync?gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D1389%2Ftp%3DSTSC%2Ftpid%3D%24UUID%2Fgdpr%3D0 HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:11:02 UTC	527	IN	HTTP/1.1 302 Found set-cookie: ssi=d749f97f-6ea6-4942-b1cb-0bef3a6cb3ef#1725984662727; Domain=.sitescout.com; Expires=Wed, 10 Sep 2025 16:11:02 GMT; Path=/; Secure; SameSite=None location: https://pixel-sync.sitescout.com/connectors/lotame/usersync?cookieQ=1&gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D1389%2Ftp%3DSTSC%2Ftpid%3D%24UUID%2Fgdpr%3D0 Content-Length: 0 date: Tue, 10 Sep 2024 16:11:01 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49904	185.64.190.78	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:02 UTC	708	OUT	GET /AdServer/UCookieSetPug?gdpr=0&rd=https%3A%2F%2Fsync.crwdcntrl.net%2Fqmap%3Fc%3D240%26tp%3DPUBM%26tpid%3D%23PM_USER_ID%26gdpr%3D0 HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:11:03 UTC	506	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: /AdServer/UCookieSetPug?gdpr=0&rd=https%3A%2F%2Fsync.crwdcntrl.net%2Fqmap%3Fc%3D240%26tp%3DPUBM%26tpid%3D%23PM_USER_ID%26gdpr%3D0&rdf=1 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KTPCACOOKIE=YES; domain=pubmatic.com; path=/; max-age=86400; SameSite=None; secure; Date: Tue, 10 Sep 2024 16:11:02 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49899	18.184.216.10	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:02 UTC	700	OUT	GET /match?bid=51mdg9u&uid=3bdb359c63037044d87658cfcb77131&gdpr=0 HTTP/1.1 Host: ps.eyeota.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: mako_uid=191dcb39652-58e00000010f4c67; SERVERID=19559~DM
2024-09-10 16:11:03 UTC	560	IN	HTTP/1.1 302 Found Connection: close Set-Cookie: SERVERID=19559~DM; Domain=eyeota.net; Path=/; Expires=Tue, 10 Sep 2024 16:21:03 GMT; Secure; SameSite=None; P3P: CP="CURa ADMa DEVa TAIo PSAo PSDo OUR SAMo BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR", policyref="http://ps.eyeota.net/w3c/p3p.xml" Location: https://i.w55c.net/ping_match.gif?st=EYEOTA&rurl=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D9sn4omv%26uid%3D_wfivefivec_%26newuser%3D1%26dc_rc%3D1%26dc_mr%3D5%26dc_orig%3D51mdg9u%26 Content-Length: 0 Date: Tue, 10 Sep 2024 16:11:03 GMT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49900	142.250.185.194	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:02 UTC	845	OUT	GET /pixel?google_nid=lotameddp&google_hm=M2JkYjM1OWM2MzAzNzA0NGQ4NzY1OGNmY2I3NzEzMQ&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk-Gebn0Hd5mLGjhQdfrUeXXyHSeZ6OCbnE3ZI6fFtZ_Zt63_b5z9KX7UCjPZo
2024-09-10 16:11:03 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 10 Sep 2024 16:11:03 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-10 16:11:03 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49903	141.95.98.64	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:02 UTC	627	OUT	GET /s/19/9.gif?puid=3bdb359c63037044d87658cfcb77131&gdpr=0 HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:11:03 UTC	1424	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: id5=7fde7386-0d5f-76e7-804e-39dabf23e935#1725984662999#1; Max-Age=300; Expires=Tue, 10-Sep-2024 16:16:02 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://id5-sync.com/c/19/19/9/1.gif?puid=3bdb359c63037044d87658cfcb77131&gdpr=0&gdpr_consent=&us_privacy= transfer-encoding: chunked date: Tue, 10 Sep 2024 16:11:02 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-09-10 16:11:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49901	18.195.6.136	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:03 UTC	542	OUT	GET /adscores/g.json?sid=9202507693 HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:11:03 UTC	645	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:11:03 GMT Content-Type: application/json Content-Length: 103 Connection: close Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3ALF1HRF2bdm4XRZ0QMMXbrZwbqbvnhQQS; Path=/; Domain=.agkn.com; Expires=Wed, 10-Sep-2025 16:11:03 GMT; Max-Age=31536000; Secure; SameSite=None
2024-09-10 16:11:03 UTC	103	IN	Data Raw: 70 72 6f 63 65 73 73 54 61 72 67 75 73 44 61 74 61 28 7b 22 74 61 72 67 75 73 22 3a 20 7b 20 22 73 65 67 6d 65 6e 74 22 20 3a 20 22 30 30 30 22 2c 20 22 7a 69 70 22 20 3a 20 22 22 2c 20 22 61 67 65 22 20 3a 20 22 22 2c 20 22 67 65 6e 64 65 72 22 20 3a 20 22 22 2c 20 22 73 6b 22 20 3a 20 22 22 20 7d 7d 29 3b Data Ascii: processTargusData({"targus": { "segment" : "000", "zip" : "", "age" : "", "gender" : "", "sk" : "" }});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49908	34.36.216.150	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:03 UTC	788	OUT	GET /connectors/lotame/usersync?cookieQ=1&gdpr=0&redir=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D1389%2Ftp%3DSTSC%2Ftpid%3D%24UUID%2Fgdpr%3D0 HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=d749f97f-6ea6-4942-b1cb-0bef3a6cb3ef#1725984662727
2024-09-10 16:11:03 UTC	772	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=d749f97f-6ea6-4942-b1cb-0bef3a6cb3ef#1725984662727; Domain=.sitescout.com; Expires=Wed, 10 Sep 2025 16:11:03 GMT; Path=/; Secure; SameSite=None set-cookie: _ssuma=eyI3IjoxNzI1OTg0NjYzMzIxfQ; Domain=.sitescout.com; Expires=Thu, 10 Oct 2024 16:11:03 GMT; Path=/; Secure; SameSite=None location: https://sync.crwdcntrl.net/map/c=1389/tp=STSC/tpid=d749f97f-6ea6-4942-b1cb-0bef3a6cb3ef-66e06f96-5553/gdpr=0 Content-Length: 0 date: Tue, 10 Sep 2024 16:11:02 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49907	52.46.130.91	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:03 UTC	708	OUT	GET /dcm?pid=a8acf3b3-7ede-4e18-8405-edaf41005f97&id=3bdb359c63037044d87658cfcb77131&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A8Ft7vQG6UnTpqRZ8io_U1M\|t
2024-09-10 16:11:03 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Tue, 10 Sep 2024 16:11:03 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: 4TRV1X038G6M81VYN9T6 Set-Cookie: ad-id=A8Ft7vQG6UnTpqRZ8io_U1M; Domain=.amazon-adsystem.com; Expires=Tue, 01-Apr-2025 16:11:03 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Mon, 01-Oct-2029 16:11:03 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-09-10 16:11:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49909	185.64.190.78	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:03 UTC	739	OUT	GET /AdServer/UCookieSetPug?gdpr=0&rd=https%3A%2F%2Fsync.crwdcntrl.net%2Fqmap%3Fc%3D240%26tp%3DPUBM%26tpid%3D%23PM_USER_ID%26gdpr%3D0&rdf=1 HTTP/1.1 Host: image6.pubmatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KTPCACOOKIE=YES
2024-09-10 16:11:03 UTC	503	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=UTF-8 Location: https://sync.crwdcntrl.net/qmap?c=240&tp=PUBM&tpid=6CCACE81-3E9F-4932-AE9D-F8064F4F357C&gdpr=0 P3p: CP="NOI DSP COR LAW CUR ADMo DEVo TAIo PSAo PSDo IVAo IVDo HISo OTPo OUR SAMo BUS UNI COM NAV INT DEM CNT STA PRE LOC" Set-Cookie: KADUSERCOOKIE=6CCACE81-3E9F-4932-AE9D-F8064F4F357C; domain=pubmatic.com; path=/; max-age=31536000; SameSite=None; secure; Date: Tue, 10 Sep 2024 16:11:03 GMT Content-Length: 0 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49910	141.95.98.64	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:03 UTC	724	OUT	GET /c/19/19/9/1.gif?puid=3bdb359c63037044d87658cfcb77131&gdpr=0&gdpr_consent=&us_privacy= HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=7fde7386-0d5f-76e7-804e-39dabf23e935#1725984662999#1
2024-09-10 16:11:03 UTC	1614	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: id5=7fde7386-0d5f-76e7-804e-39dabf23e935#1725984662999#2; Max-Age=7776000; Expires=Mon, 09-Dec-2024 16:11:03 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: 3pi=19#1725984663905#556237189#3bdb359c63037044d87658cfcb77131; Max-Age=7776000; Expires=Mon, 09-Dec-2024 16:11:03 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=gif; Max-Age=300; Expires=Tue, 10-Sep-2024 16:16:03 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=19; Max-Age=300; Expires=Tue, 10-Sep-2024 16:16:03 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=8; Max-Age=300; Expires=Tue, 10-Sep-2024 16:16:03 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=2; Max-Age=300; Expires=Tue, 10-Sep-2024 16:16:03 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=0\|; Max-Age=300; Expires=Tue, 10-Sep-2024 16:16:03 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://match.adsrvr.org/track/cmf/generic?ttd_pid=8h9u11h&ttd_tpi=1&gdpr=0&gdpr_consent= transfer-encoding: chunked date: Tue, 10 Sep 2024 16:11:02 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-09-10 16:11:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49914	3.212.66.47	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:03 UTC	728	OUT	GET /s/41715?bidder_id=127211&bidder_uuid=3bdb359c63037044d87658cfcb77131 HTTP/1.1 Host: i.liadm.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=ChIKBQgKEOwYCgkI_____wcQ9hg; lidid=90fc4aa8-e5c9-4ce0-a7cc-9ff564524752
2024-09-10 16:11:03 UTC	524	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:11:03 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: _li_ss=ChIKBQgKEOwYCgkI_____wcQ9hg; Max-Age=2592000; Expires=Thu, 10 Oct 2024 16:11:03 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=90fc4aa8-e5c9-4ce0-a7cc-9ff564524752; Max-Age=63072000; Expires=Thu, 10 Sep 2026 16:11:03 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-09-10 16:11:03 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49917	18.195.6.136	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:03 UTC	417	OUT	GET /adscores/g.json?sid=9202507693 HTTP/1.1 Host: aa.agkn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3ALF1HRF2bdm4XRZ0QMMXbrZwbqbvnhQQS
2024-09-10 16:11:04 UTC	645	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:11:04 GMT Content-Type: application/json Content-Length: 124 Connection: close Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3ALF1HRF2bdm4XRZ0QMMXbrZwbqbvnhQQS; Path=/; Domain=.agkn.com; Expires=Wed, 10-Sep-2025 16:11:04 GMT; Max-Age=31536000; Secure; SameSite=None
2024-09-10 16:11:04 UTC	124	IN	Data Raw: 70 72 6f 63 65 73 73 54 61 72 67 75 73 44 61 74 61 28 7b 22 74 61 72 67 75 73 22 3a 20 7b 20 22 73 65 67 6d 65 6e 74 22 20 3a 20 22 30 30 30 22 2c 20 22 7a 69 70 22 20 3a 20 22 22 2c 20 22 61 67 65 22 20 3a 20 22 22 2c 20 22 67 65 6e 64 65 72 22 20 3a 20 22 22 2c 20 22 73 6b 22 20 3a 20 22 32 31 36 36 32 33 31 30 35 30 30 31 30 30 33 31 31 38 37 33 31 22 20 7d 7d 29 3b Data Ascii: processTargusData({"targus": { "segment" : "000", "zip" : "", "age" : "", "gender" : "", "sk" : "216623105001003118731" }});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49920	52.46.151.131	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:03 UTC	483	OUT	GET /dcm?pid=a8acf3b3-7ede-4e18-8405-edaf41005f97&id=3bdb359c63037044d87658cfcb77131&dcc=t HTTP/1.1 Host: s.amazon-adsystem.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ad-id=A8Ft7vQG6UnTpqRZ8io_U1M; ad-privacy=0
2024-09-10 16:11:04 UTC	807	IN	HTTP/1.1 200 OK Server: Server Date: Tue, 10 Sep 2024 16:11:04 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amz-rid: CGGZS6V0SX602TRRR0NE Set-Cookie: ad-id=A8Ft7vQG6UnTpqRZ8io_U1M; Domain=.amazon-adsystem.com; Expires=Tue, 01-Apr-2025 16:11:04 GMT; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: ad-privacy=0; Domain=.amazon-adsystem.com; Expires=Mon, 01-Oct-2029 16:11:04 GMT; Path=/; Secure; HttpOnly; SameSite=None Cache-Control: max-age=0, no-cache, no-store, private, must-revalidate, s-maxage=0 Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT p3p: policyref="https://www.amazon.com/w3c/p3p.xml", CP="PSAo PSDo OUR SAM OTR DSP COR" Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
2024-09-10 16:11:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 01 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49915	216.46.185.182	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:03 UTC	642	OUT	GET /image.sbxx?go=262106&pid=420&xid=3bdb359c63037044d87658cfcb77131 HTTP/1.1 Host: global.ib-ibi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:11:04 UTC	531	IN	HTTP/1.1 302 Found Cache-Control: private Content-Type: text/html; charset=utf-8 Location: https://ib.mookie1.com:443/image.sbxx?go=262106&pid=420&xid=3bdb359c63037044d87658cfcb77131 Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: * Set-Cookie: ASP.NET_SessionId=xyclxzyspgkcw45gsd4qmvx0; path=/; secure; HttpOnly; SameSite=None X-AspNet-Version: 4.0.30319 X-Server: COR02 X-Powered-By: ASP.NET p3p: CP="DSP COR ADM DEV PSA PSD OUR" Date: Tue, 10 Sep 2024 16:11:03 GMT Content-Length: 216 Connection: close
2024-09-10 16:11:04 UTC	216	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 62 2e 6d 6f 6f 6b 69 65 31 2e 63 6f 6d 3a 34 34 33 2f 69 6d 61 67 65 2e 73 62 78 78 3f 67 6f 3d 32 36 32 31 30 36 26 61 6d 70 3b 70 69 64 3d 34 32 30 26 61 6d 70 3b 78 69 64 3d 33 62 64 62 33 35 39 63 36 33 30 33 37 30 34 34 64 38 37 36 35 38 63 66 63 62 37 37 31 33 31 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://ib.mookie1.com:443/image.sbxx?go=262106&pid=420&xid=3bdb359c63037044d87658cfcb77131">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49919	142.250.185.194	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:04 UTC	846	OUT	GET /pixel?google_nid=lotame_dmp&google_hm=M2JkYjM1OWM2MzAzNzA0NGQ4NzY1OGNmY2I3NzEzMQ&gdpr=0 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk-Gebn0Hd5mLGjhQdfrUeXXyHSeZ6OCbnE3ZI6fFtZ_Zt63_b5z9KX7UCjPZo
2024-09-10 16:11:04 UTC	374	IN	HTTP/1.1 200 OK Content-Type: image/png Date: Tue, 10 Sep 2024 16:11:04 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Server: HTTP server (unknown) Content-Length: 170 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-10 16:11:04 UTC	170	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 d7 05 1d 0d 0d 2d 51 d5 37 6e 00 00 00 1d 74 45 58 74 43 6f 6d 6d 65 6e 74 00 43 72 65 61 74 65 64 20 77 69 74 68 20 54 68 65 20 47 49 4d 50 ef 64 25 6e 00 00 00 0d 49 44 41 54 08 d7 63 a8 69 79 e5 00 00 05 95 02 2b 03 a2 de f7 00 00 00 00 49 45 4e 44 ae 42 60 82 0a Data Ascii: PNGIHDRbKGDpHYstIME-Q7ntEXtCommentCreated with The GIMPd%nIDATciy+IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49912	3.120.50.134	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:04 UTC	734	OUT	GET /ping_match.gif?st=EYEOTA&rurl=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D9sn4omv%26uid%3D_wfivefivec_%26newuser%3D1%26dc_rc%3D1%26dc_mr%3D5%26dc_orig%3D51mdg9u%26 HTTP/1.1 Host: i.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:11:04 UTC	706	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Tue, 10 Sep 2024 16:11:03 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://pm.w55c.net/ping_match.gif?scc=1&st=EYEOTA&rurl=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D9sn4omv%26uid%3D_wfivefivec_%26newuser%3D1%26dc_rc%3D1%26dc_mr%3D5%26dc_orig%3D51mdg9u%26 Pragma: no-cache Server: PingMatch/v2.0.30-810-g7063ef3#rel-ec2-master i-00998a57bdc8beb4a@eu-central-1b@dxedge-app-eu-central-1-prod-asg Set-Cookie: wfivefivec=GkIO9st71SO3sk5; Domain=.w55c.net; Expires=Sat, 11 Oct 2025 02:11:04 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49918	34.247.104.223	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:04 UTC	1041	OUT	GET /map/c=1389/tp=STSC/tpid=d749f97f-6ea6-4942-b1cb-0bef3a6cb3ef-66e06f96-5553/gdpr=0 HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
2024-09-10 16:11:04 UTC	313	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:11:04 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.8.81 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-09-10 16:11:04 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	49922	81.17.55.173	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:04 UTC	693	OUT	GET /getuid?gdpr=0&url=https%3A%2F%2Fbcp.crwdcntrl.net%2Fqmap%3Fc%3D16236%26tp%3DSMAD%26tpid%3D[sas_uid]%26gdpr%3D0 HTTP/1.1 Host: sync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:11:04 UTC	739	IN	HTTP/1.1 302 Found content-length: 0 date: Tue, 10 Sep 2024 16:11:04 GMT cache-control: no-cache,no-store location: https://sync.smartadserver.com:443/getuid?gdpr=0&url=https://bcp.crwdcntrl.net/qmap?c=16236&tp=SMAD&tpid=[sas_uid]&gdpr=0&cklb=1 pragma: no-cache set-cookie: TestIfCookie=ok; expires=Mon, 01 Jan 0001 00:00:00 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: TestIfCookieP=ok; expires=Wed, 10 Sep 2025 16:11:04 GMT; domain=.smartadserver.com; path=/; secure; samesite=none set-cookie: pbw=%24b%3d16999%3b%24o%3d11100; expires=Wed, 10 Sep 2025 16:11:04 GMT; domain=.smartadserver.com; path=/; secure; samesite=none p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	49925	52.223.40.198	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:04 UTC	788	OUT	GET /track/cmf/generic?ttd_pid=8h9u11h&ttd_tpi=1&gdpr=0&gdpr_consent= HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d; TDCPM=CAESGQoKbGl2ZWludGVudBILCPyA4t-l76g9EAUYASABKAIyCwjO9-SMvO-oPRAFOAFaCmxpdmVpbnRlbnRgAg..
2024-09-10 16:11:04 UTC	551	IN	HTTP/1.1 302 Found Date: Tue, 10 Sep 2024 16:11:04 GMT Content-Length: 199 Connection: close server: Kestrel location: https://id5-sync.com/k/264.gif?puid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d&ttl=%%TTL%% set-cookie: TDID=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d; expires=Wed, 10 Sep 2025 16:11:04 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGQoKbGl2ZWludGVudBILCPyA4t-l76g9EAUYASABKAIyCwi0nN_wvO-oPRAFOAFaBzhoOXUxMWhgAg..; expires=Wed, 10 Sep 2025 16:11:04 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-09-10 16:11:04 UTC	199	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 6b 2f 32 36 34 2e 67 69 66 3f 70 75 69 64 3d 66 30 61 31 65 64 65 38 2d 37 64 36 64 2d 34 31 30 65 2d 61 31 61 62 2d 61 65 34 35 31 35 36 38 30 61 34 64 26 74 74 6c 3d 25 25 54 54 4c 25 25 22 3e 68 74 74 70 73 3a 2f 2f 69 64 35 2d 73 79 6e 63 2e 63 6f 6d 2f 6b 2f 32 36 34 2e 67 69 66 3f 70 75 69 64 3d 66 30 61 31 65 64 65 38 2d 37 64 36 64 2d 34 31 30 65 2d 61 31 61 62 2d 61 65 34 35 31 35 36 38 30 61 34 64 26 74 74 6c 3d 25 25 54 54 4c 25 25 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://id5-sync.com/k/264.gif?puid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d&ttl=%%TTL%%">https://id5-sync.com/k/264.gif?puid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d&ttl=%%TTL%%</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49923	3.221.1.219	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:04 UTC	491	OUT	GET /s/41715?bidder_id=127211&bidder_uuid=3bdb359c63037044d87658cfcb77131 HTTP/1.1 Host: i.liadm.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _li_ss=ChIKBQgKEOwYCgkI_____wcQ9hg; lidid=90fc4aa8-e5c9-4ce0-a7cc-9ff564524752
2024-09-10 16:11:04 UTC	524	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:11:04 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: _li_ss=ChIKBQgKEOwYCgkI_____wcQ9hg; Max-Age=2592000; Expires=Thu, 10 Oct 2024 16:11:04 GMT; SameSite=None; Path=/s; Secure Set-Cookie: lidid=90fc4aa8-e5c9-4ce0-a7cc-9ff564524752; Max-Age=63072000; Expires=Thu, 10 Sep 2026 16:11:04 GMT; SameSite=None; Path=/; Domain=liadm.com; Secure Request-Time: 0 Cache-Control: no-store Strict-Transport-Security: max-age=31536000; includeSubDomains
2024-09-10 16:11:04 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f0 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49921	34.247.104.223	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:04 UTC	1027	OUT	GET /qmap?c=240&tp=PUBM&tpid=6CCACE81-3E9F-4932-AE9D-F8064F4F357C&gdpr=0 HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
2024-09-10 16:11:04 UTC	315	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:11:04 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.18.245 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-09-10 16:11:04 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49924	34.247.104.223	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:04 UTC	1007	OUT	GET /map/c=1811/tp=TBMG/tpid=ZuBviAABs8yDBgAa/gdpr=0 HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
2024-09-10 16:11:05 UTC	314	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:11:05 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.28.93 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-09-10 16:11:05 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	49926	64.58.232.177	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:04 UTC	639	OUT	GET /image.sbxx?go=262106&pid=420&xid=3bdb359c63037044d87658cfcb77131 HTTP/1.1 Host: ib.mookie1.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:11:05 UTC	881	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: image/png Expires: -1 Server: Microsoft-IIS/10.0 Access-Control-Allow-Origin: * Set-Cookie: ASP.NET_SessionId=vkrvcngmqwab4tpzrdcywub5; path=/; secure; HttpOnly; SameSite=None p3p: CP=\"DSP COR ADM DEV PSA PSD OUR\" X-AspNet-Version: 4.0.30319 Set-Cookie: ibkukiuno=s=0f5b6b6d-d380-47a2-a5a4-4ea3abfee606&h=&v=0&l=-8584756222204935465&op=&hl=0&vlu=0&tcs=1&dcc=-8584756222204935465; domain=ib.mookie1.com; expires=Wed, 10-Sep-2025 16:11:04 GMT; path=/; secure; HttpOnly; SameSite=None Set-Cookie: ibkukinet=137263905=-8584756222204935465; domain=ib.mookie1.com; expires=Wed, 10-Sep-2025 16:11:04 GMT; path=/; secure; HttpOnly; SameSite=None X-Server: LAS02 X-Powered-By: ASP.NET p3p: CP="DSP COR ADM DEV PSA PSD OUR" Date: Tue, 10 Sep 2024 16:11:04 GMT Content-Length: 120 Connection: close
2024-09-10 16:11:05 UTC	120	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 06 00 00 00 1f 15 c4 89 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 00 0d 49 44 41 54 18 57 63 60 60 60 60 00 00 00 05 00 01 8a 33 e3 00 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsRGBgAMAapHYsodIDATWc````3IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49930	34.117.77.79	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:04 UTC	670	OUT	GET /utsync.ashx?eid=50146&et=0&fp=3bdb359c63037044d87658cfcb77131&gdpr=0 HTTP/1.1 Host: ml314.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pi=3646915315069091854
2024-09-10 16:11:05 UTC	535	IN	HTTP/1.1 200 OK content-type: image/gif cache-control: no-cache, no-store, must-revalidate expires: 0,Wed, 11 Sep 2024 16:11:05 GMT pragma: no-cache set-cookie: pi=3646915315069091854; expires=Wed, 10 Sep 2025 16:11:05 GMT; domain=ml314.com; path=/; secure; samesite=none; httponly p3p: CP="NON DSP COR ADMo PSAo DEVo BUS COM UNI NAV DEM STA" date: Tue, 10 Sep 2024 16:11:05 GMT server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-09-10 16:11:05 UTC	54	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2bGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49928	52.223.40.198	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:04 UTC	773	OUT	GET /track/cmf/generic?ttd_pid=lotame&ttd_tpi=1&gdpr=0 HTTP/1.1 Host: match.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TDID=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d; TDCPM=CAESGQoKbGl2ZWludGVudBILCPyA4t-l76g9EAUYASABKAIyCwjO9-SMvO-oPRAFOAFaCmxpdmVpbnRlbnRgAg..
2024-09-10 16:11:05 UTC	572	IN	HTTP/1.1 302 Found Date: Tue, 10 Sep 2024 16:11:05 GMT Content-Length: 249 Connection: close server: Kestrel location: https://sync.crwdcntrl.net/map/c=10620/tp=TRAD/tpid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d/gdpr=0/gdpr_consent= set-cookie: TDID=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d; expires=Wed, 10 Sep 2025 16:11:05 GMT; domain=.adsrvr.org; path=/; secure; samesite=none set-cookie: TDCPM=CAESGQoKbGl2ZWludGVudBILCPyA4t-l76g9EAUYASABKAIyCwiy4aP0vO-oPRAFOAFaBmxvdGFtZWAC; expires=Wed, 10 Sep 2025 16:11:05 GMT; domain=.adsrvr.org; path=/; secure; samesite=none
2024-09-10 16:11:05 UTC	249	IN	Data Raw: 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 63 72 77 64 63 6e 74 72 6c 2e 6e 65 74 2f 6d 61 70 2f 63 3d 31 30 36 32 30 2f 74 70 3d 54 52 41 44 2f 74 70 69 64 3d 66 30 61 31 65 64 65 38 2d 37 64 36 64 2d 34 31 30 65 2d 61 31 61 62 2d 61 65 34 35 31 35 36 38 30 61 34 64 2f 67 64 70 72 3d 30 2f 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 22 3e 68 74 74 70 73 3a 2f 2f 73 79 6e 63 2e 63 72 77 64 63 6e 74 72 6c 2e 6e 65 74 2f 6d 61 70 2f 63 3d 31 30 36 32 30 2f 74 70 3d 54 52 41 44 2f 74 70 69 64 3d 66 30 61 31 65 64 65 38 2d 37 64 36 64 2d 34 31 30 65 2d 61 31 61 62 2d 61 65 34 35 31 35 36 38 30 61 34 64 2f 67 64 70 72 3d 30 2f 67 64 70 72 5f 63 6f 6e 73 65 6e 74 3d 3c 2f 61 3e Data Ascii: Redirecting to: <a href="https://sync.crwdcntrl.net/map/c=10620/tp=TRAD/tpid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d/gdpr=0/gdpr_consent=">https://sync.crwdcntrl.net/map/c=10620/tp=TRAD/tpid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d/gdpr=0/gdpr_consent=</a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49927	3.120.50.134	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:05 UTC	777	OUT	GET /ping_match.gif?scc=1&st=EYEOTA&rurl=https%3A%2F%2Fps.eyeota.net%2Fmatch%3Fbid%3D9sn4omv%26uid%3D_wfivefivec_%26newuser%3D1%26dc_rc%3D1%26dc_mr%3D5%26dc_orig%3D51mdg9u%26 HTTP/1.1 Host: pm.w55c.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: wfivefivec=GkIO9st71SO3sk5
2024-09-10 16:11:05 UTC	734	IN	HTTP/1.1 302 Cache-Control: no-cache, must-revalidate Date: Tue, 10 Sep 2024 16:11:04 GMT Expires: Fri, 01 Jan 1990 00:00:00 GMT Location: https://ps.eyeota.net/match?bid=9sn4omv&uid=GkIO9st71SO3sk5&newuser=1&dc_rc=1&dc_mr=5&dc_orig=51mdg9u& Pragma: no-cache Server: PingMatch/v2.0.30-810-g7063ef3#rel-ec2-master i-00998a57bdc8beb4a@eu-central-1b@dxedge-app-eu-central-1-prod-asg Set-Cookie: wfivefivec=GkIO9st71SO3sk5; Domain=.w55c.net; Expires=Fri, 10 Oct 2025 16:11:05 GMT; Path=/; SameSite=None; Secure Set-Cookie: matcheyeota=5; Domain=.w55c.net; Expires=Thu, 10 Oct 2024 16:11:05 GMT; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=2592000; includeSubDomains Content-Length: 0 Connection: Close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49932	141.95.98.64	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:05 UTC	806	OUT	GET /k/264.gif?puid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d&ttl=%%TTL%% HTTP/1.1 Host: id5-sync.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: id5=7fde7386-0d5f-76e7-804e-39dabf23e935#1725984662999#2; 3pi=19#1725984663905#556237189#3bdb359c63037044d87658cfcb77131; cf=gif; cip=19; cnac=8; car=2; gdpr=0\|
2024-09-10 16:11:05 UTC	1486	IN	HTTP/1.1 302 vary: Origin vary: Access-Control-Request-Method vary: Access-Control-Request-Headers p3p: CP="CAO PSA OUR" set-cookie: 3pi=19#1725984663905#556237189#3bdb359c63037044d87658cfcb77131\|264#1725984665487#16965150#f0a1ede8-7d6d-410e-a1ab-ae4515680a4d; Max-Age=7776000; Expires=Mon, 09-Dec-2024 16:11:05 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cf=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cip=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: cnac=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: car=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gdpr=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: gpp=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure set-cookie: callback=; Max-Age=0; Expires=Thu, 01-Jan-1970 00:00:10 GMT; Domain=id5-sync.com; Path=/; SameSite=None; Secure location: https://ib.adnxs.com/getuid?https://id5-sync.com/c/19/2/7/3.gif?puid=$UID&gdpr=0&gdpr_consent= transfer-encoding: chunked date: Tue, 10 Sep 2024 16:11:04 GMT strict-transport-security: max-age=63072000; includeSubDomains; preload connection: close
2024-09-10 16:11:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49933	81.17.55.173	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:05 UTC	735	OUT	GET /getuid?gdpr=0&url=https://bcp.crwdcntrl.net/qmap?c=16236&tp=SMAD&tpid=[sas_uid]&gdpr=0&cklb=1 HTTP/1.1 Host: sync.smartadserver.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TestIfCookieP=ok; pbw=%24b%3d16999%3b%24o%3d11100
2024-09-10 16:11:05 UTC	334	IN	HTTP/1.1 200 OK content-length: 0 date: Tue, 10 Sep 2024 16:11:04 GMT cache-control: no-cache,no-store pragma: no-cache set-cookie: pid=285704107085073378; expires=Wed, 10 Sep 2025 16:11:05 GMT; domain=.smartadserver.com; path=/; secure; samesite=none p3p: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo" connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49931	18.202.126.138	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:05 UTC	804	OUT	GET /map/c=1389/tp=STSC/tpid=d749f97f-6ea6-4942-b1cb-0bef3a6cb3ef-66e06f96-5553/gdpr=0 HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
2024-09-10 16:11:05 UTC	314	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:11:05 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.22.10 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-09-10 16:11:05 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49935	34.111.113.62	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:05 UTC	778	OUT	GET /idsync/ex/receive?partner_id=LOTAME&partner_device_id=3bdb359c63037044d87658cfcb77131&gdpr=0&partner_url=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10158%2Ftp%3DTPAD%2Ftpid%3D%24%7BTA_DEVICE_ID%7D&ch= HTTP/1.1 Host: pixel.tapad.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:11:05 UTC	1201	IN	HTTP/1.1 302 Found Date: Tue, 10 Sep 2024 16:11:05 GMT Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-Mobile Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-WoW64 P3P: policyref="http://tapad-taptags.s3.amazonaws.com/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" Set-Cookie: TapAd_TS=1725984665492;Expires=Sat, 09 Nov 2024 16:11:05 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Set-Cookie: TapAd_DID=5a494773-b3c5-4363-89b4-d92c8335b5ac;Expires=Sat, 09 Nov 2024 16:11:05 GMT;Path=/;Domain=.tapad.com;Secure;SameSite=None Location: https://pixel.tapad.com/idsync/ex/receive/check?partner_id=LOTAME&partner_device_id=3bdb359c63037044d87658cfcb77131&gdpr=0&partner_url=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10158%2Ftp%3DTPAD%2Ftpid%3D%24%7BTA_DEVICE_ID%7D&ch= Content-Length: 0 Server: Jetty(11.0.13) Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49937	34.117.77.79	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:05 UTC	433	OUT	GET /utsync.ashx?eid=50146&et=0&fp=3bdb359c63037044d87658cfcb77131&gdpr=0 HTTP/1.1 Host: ml314.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pi=3646915315069091854
2024-09-10 16:11:05 UTC	535	IN	HTTP/1.1 200 OK content-type: image/gif cache-control: no-cache, no-store, must-revalidate expires: 0,Wed, 11 Sep 2024 16:11:05 GMT pragma: no-cache set-cookie: pi=3646915315069091854; expires=Wed, 10 Sep 2025 16:11:05 GMT; domain=ml314.com; path=/; secure; samesite=none; httponly p3p: CP="NON DSP COR ADMo PSAo DEVo BUS COM UNI NAV DEM STA" date: Tue, 10 Sep 2024 16:11:05 GMT server: Google Frontend via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-09-10 16:11:05 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-09-10 16:11:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49938	104.17.111.254	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:05 UTC	678	OUT	GET /f2d2e39fc16bc9cc/sync.gif?cbp=tpid&cbk=https%3A%2F%2Fsync.crwdcntrl.net%2Fmap%2Fc%3D10832%2Ftp%3DTRUP HTTP/1.1 Host: dmp.truoptik.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-10 16:11:05 UTC	934	IN	HTTP/1.1 302 Moved Temporarily Date: Tue, 10 Sep 2024 16:11:05 GMT Content-Type: text/html Content-Length: 142 Connection: close Set-Cookie: to_master_s=b9bdb847e735edc7495bcfea37bdb579; Expires=Wed, 10-Sep-25 16:11:05 GMT; Max-Age=31536000; Domain=.truoptik.com; Path=/; Secure; SameSite=None Set-Cookie: to_version_s=b2; Expires=Wed, 10-Sep-25 16:11:05 GMT; Max-Age=31536000; Domain=.truoptik.com; Path=/; Secure; SameSite=None Location: https://sync.crwdcntrl.net/map/c=10832/tp=TRUP/tpid=b9bdb847e735edc7495bcfea37bdb579 TO-DMP-Sync: s2a-dmp-use1-aws.truoptik.com User-Agent: Tru Optik DMP 1.3.1 Cache-Control: no-store Expires: 0 Pragma: no-cache Access-Control-Allow-Origin: * X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8c10b1204de7182d-EWR
2024-09-10 16:11:05 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49936	34.247.104.223	443	3692	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-10 16:11:05 UTC	1042	OUT	GET /map/c=10620/tp=TRAD/tpid=f0a1ede8-7d6d-410e-a1ab-ae4515680a4d/gdpr=0/gdpr_consent= HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bcp.crwdcntrl.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_dc=1; _cc_id=3bdb359c63037044d87658cfcb77131; _cc_cc="ACZ4nGOQN05KSTI2tUw2MzYwNjcwMUmxMDcztUhOS04yNzc0NmQAgrQH%2BZPf%2F%2F%2F%2Fn58BBnjvfbBk3qPF8J%2BR8aMsiNxeDyIZfmycwoJNfPmfQmzC544eYsYmvnvfZQFs4ocXz8FqfPu6p9zYxBv%2Ba2ITfvL4piE28XtdWtiEL516xIZN%2FN0S7K55M%2FMAEzZxAHf1eyQ%3D"; _cc_aud="ABR4nGNgYGBIe5A%2FmQEG2BkYuGaAWYtaQSSj1mwINQtE8bk7gHkP60EUv85%2BIAkAJBwIlA%3D%3D"
2024-09-10 16:11:05 UTC	314	IN	HTTP/1.1 200 OK Date: Tue, 10 Sep 2024 16:11:05 GMT Content-Type: image/gif Content-Length: 49 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.45.30.24 Access-Control-Allow-Origin: * Server: Jetty(9.4.38.v20210224)
2024-09-10 16:11:05 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Target ID:	0
Start time:	12:10:19
Start date:	10/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	12:10:23
Start date:	10/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2168 --field-trial-handle=1856,i,17599355910779306083,14515011359913216872,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	12:10:25
Start date:	10/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Windows Analysis Report
http://football-booster.freevisit1.com/hs-football.php?live=Greendale%20vs%20Milwaukee%20Lutheran